Error: rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft File: B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft (raw, json) Hash identifier: +ZrcpV4e/KYtQP+pAuoyam5gH1xz8OV1ehUEY4DSroE= Subject key identifier: 3F:EB:E4:E9:F0:C3:CD:5A:6F:1A:FE:81:8C:E1:E3:E5:B5:63:9D:D6 Authority key identifier: B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD Certificate issuer: /CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD Certificate serial: 70F3ED127E17184F1AD0A14CE9AE12304E379D7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft Manifest number: 04E2 Signing time: Sat 31 Oct 2026 05:59:50 +0000 Manifest this update: Sat 31 Oct 2026 05:54:50 +0000 Manifest next update: Sun 01 Nov 2026 06:18:50 +0000 Files and hashes: 1: 323830343a346635343a3a2f33322d3438203d3e20323638333230.roa (hash: x7AZdLuBLjpf4wqSsK/DHHz1xo1yqFjFZ3fdvrS5ulk=) 2: 34352e3233382e39322e302f32322d3234203d3e20323638333230.roa (hash: uCwF4/WvjXX3xmQMQUDVk8JwCwZYzgnwnaH8XR363i0=) 3: B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl (hash: pBQH+PTROW+47WE7MaEufLZ+CBUpjaAx90q8iuEh5+g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 06:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f3:ed:12:7e:17:18:4f:1a:d0:a1:4c:e9:ae:12:30:4e:37:9d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD Validity Not Before: Oct 31 05:54:50 2026 GMT Not After : Nov 1 06:18:50 2026 GMT Subject: CN=3FEBE4E9F0C3CD5A6F1AFE818CE1E3E5B5639DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:c3:8b:01:e3:83:1d:f7:0d:cf:ba:86:3d: a9:5d:c3:37:76:14:37:72:6a:2a:32:16:41:5f:06: ea:0a:47:31:de:3d:00:18:b0:91:5d:0b:d8:d2:5f: bc:97:ff:54:61:bd:4c:7f:fe:15:9d:b0:cd:d4:1b: 1c:bf:81:3f:12:3d:ee:75:5d:9d:53:7e:77:ce:fd: 58:65:41:12:ba:57:07:6d:7b:e0:c9:9c:b3:1a:bd: e5:ba:27:8c:3d:d2:82:81:28:89:76:e3:7e:c2:9a: 2d:0d:61:fa:fa:47:28:3b:12:3c:ea:77:f4:1b:08: 6c:58:91:4f:4c:2c:09:98:9f:10:78:0a:08:3e:38: 40:45:fd:44:3a:76:1e:f2:bf:01:08:d3:67:10:ca: f0:9a:cf:49:1e:fc:6c:d7:b7:ae:72:d5:f0:ea:02: d4:6b:86:69:4e:e5:68:f0:6d:c6:f0:a6:ff:ac:6b: 23:84:63:28:8f:92:5d:2a:25:54:e3:e2:e2:6a:9a: 8b:a6:13:b8:96:57:ff:27:a6:65:d8:f2:a8:34:24: 83:6a:32:6d:8b:9e:23:6d:80:2e:d1:a6:70:1f:67: c7:f5:9f:4c:f0:d7:68:c3:3c:0f:d2:9d:da:7a:e5: ac:3d:72:81:bc:30:ee:d3:a1:dd:18:9e:df:fc:64: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:E4:E9:F0:C3:CD:5A:6F:1A:FE:81:8C:E1:E3:E5:B5:63:9D:D6 X509v3 Authority Key Identifier: keyid:B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e9:81:fd:08:77:e2:40:8a:2b:cb:ee:bd:0d:82:6f:8a:05: ba:02:d8:e9:77:5d:56:37:45:e4:57:27:04:5b:5e:b1:6b:21: 11:8f:e5:40:7d:5d:ae:73:27:55:82:4a:8c:c0:d7:61:64:4e: 1f:b4:fa:bf:9d:3c:39:04:dc:1c:8e:a5:a2:5e:a9:cc:89:3f: 6f:80:10:20:89:59:4c:ed:65:6a:00:1c:ff:a5:d8:70:5c:4f: 4c:1a:b2:98:a3:ab:93:e3:f6:24:aa:e7:c4:b4:2f:23:29:9d: 74:64:58:d4:67:9c:17:80:56:6f:b1:98:c5:98:a6:1d:d1:e3: 46:9b:c5:1b:cc:dd:9b:a1:48:5b:dd:c8:d4:ce:0f:18:f3:d0: 99:d7:88:6a:a0:cf:ea:25:fb:d4:3a:0e:55:d7:69:3b:f0:45: c2:62:28:38:c4:3d:62:35:1d:3c:fe:c3:ba:b7:3e:cd:63:a2: 03:18:ec:c0:66:3f:2a:1c:6e:b0:f3:f6:8e:24:4b:c9:ca:0f: ca:45:ca:9a:5d:67:e6:c0:61:d6:ef:1a:b2:4d:46:11:93:5e: f5:cf:1d:83:b9:2f:98:3f:ad:5d:bf:5e:4f:2c:de:d7:a9:f2: b5:81:7a:f3:ca:de:ef:44:db:d5:b0:8b:cf:1a:fa:de:a0:59: 18:53:30:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcPPtEn4XGE8a0KFM6a4SME43nXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxNkE2REVFRTg3QTk3QUVDNUFENThCMzU3MEJBQkE0 NENGREFBRDAeFw0yNjEwMzEwNTU0NTBaFw0yNjExMDEwNjE4NTBaMDMxMTAvBgNV BAMTKDNGRUJFNEU5RjBDM0NENUE2RjFBRkU4MThDRTFFM0U1QjU2MzlERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWsOLAeODHfcNz7qGPaldwzd2 FDdyaioyFkFfBuoKRzHePQAYsJFdC9jSX7yX/1RhvUx//hWdsM3UGxy/gT8SPe51 XZ1TfnfO/VhlQRK6Vwdte+DJnLMaveW6J4w90oKBKIl2437Cmi0NYfr6Ryg7Ejzq d/QbCGxYkU9MLAmYnxB4Cgg+OEBF/UQ6dh7yvwEI02cQyvCaz0ke/GzXt65y1fDq AtRrhmlO5Wjwbcbwpv+sayOEYyiPkl0qJVTj4uJqmoumE7iWV/8npmXY8qg0JINq Mm2LniNtgC7RpnAfZ8f1n0zw12jDPA/Sndp65aw9coG8MO7Tod0Ynt/8ZOfRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP+vk6fDDzVpvGv6BjOHj5bVjndYwHwYDVR0j BBgwFoAUuBam3u6HqXrsWtWLNXC6ukTP2q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lndU10OXVzYmpiQ01oZnQ0b1dVZHVGQmZQa2RQbkdaMlFRWDJaNFpj YmEvMS9CODE2QTZERUVFODdBOTdBRUM1QUQ1OEIzNTcwQkFCQTQ0Q0ZEQUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MTZBNkRFRUU4N0E5N0FF QzVBRDU4QjM1NzBCQUJBNDRDRkRBQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3lndU10OXVzYmpiQ01oZnQ0b1dVZHVGQmZQa2RQbkdaMlFRWDJaNFpjYmEvMS9C ODE2QTZERUVFODdBOTdBRUM1QUQ1OEIzNTcwQkFCQTQ0Q0ZEQUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM+mB/Qh34kCKK8vuvQ2Cb4oFugLY6XddVjdF5FcnBFtesWshEY/lQH1drnMn VYJKjMDXYWROH7T6v508OQTcHI6lol6pzIk/b4AQIIlZTO1lagAc/6XYcFxPTBqy mKOrk+P2JKrnxLQvIymddGRY1GecF4BWb7GYxZimHdHjRpvFG8zdm6FIW93I1M4P GPPQmdeIaqDP6iX71DoOVddpO/BFwmIoOMQ9YjUdPP7Durc+zWOiAxjswGY/Khxu sPP2jiRLycoPykXKml1n5sBh1u8ask1GEZNe9c8dg7kvmD+tXb9eTyze16nytYF6 88re70Tb1bCLzxr63qBZGFMwZw== -----END CERTIFICATE-----Generated at Sat Oct 31 09:45:08 2026 by rpki-client