Error: rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft File: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json) Hash identifier: +GHsg2s36rEjq53nCHXluKGp2HkCTBF4oV80V+fZPeY= Subject key identifier: 3E:6D:51:6E:2B:EF:67:02:60:F1:59:82:2B:E3:67:45:1D:34:94:82 Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Certificate serial: 6A4DC792F2DEAE518531CFA60BD49AD49BC73597 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft Manifest number: 04E6 Signing time: Sat 31 Oct 2026 01:40:00 +0000 Manifest this update: Sat 31 Oct 2026 01:35:00 +0000 Manifest next update: Sun 01 Nov 2026 04:56:00 +0000 Files and hashes: 1: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: Re2eVY6FC9Wd1V8NC0ULnR9cEPuN4HukMg3l/4JHkt4=) 2: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=) 3: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=) 4: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=) 5: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=) 6: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=) 7: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=) 8: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=) 9: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=) 10: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=) 11: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=) 12: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=) 13: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 04:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4d:c7:92:f2:de:ae:51:85:31:cf:a6:0b:d4:9a:d4:9b:c7:35:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Validity Not Before: Oct 31 01:35:00 2026 GMT Not After : Nov 1 04:56:00 2026 GMT Subject: CN=3E6D516E2BEF670260F159822BE367451D349482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:79:19:3f:1e:d1:3f:6d:fd:ea:d6:ee:bd: 2e:98:a2:9a:89:35:c7:87:e5:7f:9d:29:9f:09:d8: 54:f2:88:e9:99:17:79:0a:29:96:c2:1e:62:ad:80: ea:10:fa:51:c9:f5:84:12:ef:4b:18:6c:fa:e7:97: c9:46:d3:a8:b4:25:3d:d7:91:fd:41:26:ca:6f:8a: 33:9c:ef:9b:c3:f4:34:be:d8:9d:56:9b:21:ac:f3: 13:b7:29:2d:a4:12:56:49:f5:99:0d:92:47:02:40: 5a:7f:20:31:99:2d:b0:4e:64:e0:68:7b:20:b5:55: 2a:dc:7a:4b:0c:9a:95:06:3d:bd:9b:4c:cc:7d:61: 03:ff:37:76:18:fc:18:eb:60:a0:80:fa:7c:f2:a6: dd:08:49:97:cc:30:44:ce:17:2a:ee:61:f2:34:16: 31:a5:da:3e:6f:94:aa:e7:b6:1f:4a:13:9b:2f:21: 05:06:d3:eb:be:00:9c:9c:00:63:07:7e:ff:e9:a1: 63:24:34:31:19:7a:ee:2d:58:26:42:90:e8:ee:6e: 60:af:27:97:cd:52:1e:d1:e8:d7:1f:32:df:62:88: 02:b2:8b:5a:3f:26:00:05:04:89:9c:90:55:14:da: de:07:3d:51:09:0a:5b:da:b8:01:25:b7:9b:f3:d8: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:51:6E:2B:EF:67:02:60:F1:59:82:2B:E3:67:45:1D:34:94:82 X509v3 Authority Key Identifier: keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:55:cc:0e:4c:c7:e5:f4:ae:94:19:a1:46:d3:e7:0e:3f: 70:61:27:40:da:83:68:5a:39:0d:39:8d:f7:4d:01:cb:ec:93: 2f:1c:eb:34:dc:0e:08:7c:1a:b2:a6:3f:23:d1:9e:7b:b1:c1: 7b:24:95:3d:b8:93:bb:ad:48:c1:c0:89:fe:e5:f2:ec:68:db: 34:10:0f:16:65:63:42:0e:45:2d:73:db:d0:17:2e:98:5f:0f: ee:15:ac:34:e6:e8:5a:4c:92:f3:12:cc:bc:47:e1:da:e3:48: bf:41:cc:3e:8d:2f:4a:ac:f0:f0:55:b1:6d:87:fa:31:5b:06: 22:d7:76:10:d8:f9:cf:e2:0a:a7:3c:77:24:d8:ff:98:a6:99: 98:9f:f0:2a:e7:45:c2:6d:c5:a8:a9:20:ac:14:00:62:45:5e: c8:2b:a3:99:ac:dc:ce:46:38:cc:ec:70:75:13:bb:12:65:a7: 17:fb:fb:4d:24:09:0a:91:ce:56:3a:e2:d0:2e:3a:da:f1:98: 28:60:f2:fc:97:8f:32:d5:0a:fd:59:e8:ec:36:7c:d1:a8:65: 31:47:47:ff:e4:9f:44:16:57:cf:5d:02:0a:03:d4:db:8c:ee: 69:e9:73:bc:ef:e2:93:a6:da:ab:bd:32:be:cb:d4:78:60:6d: a2:ab:3c:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUak3HkvLerlGFMc+mC9Sa1JvHNZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx MjMzOEQ5QzAeFw0yNjEwMzEwMTM1MDBaFw0yNjExMDEwNDU2MDBaMDMxMTAvBgNV BAMTKDNFNkQ1MTZFMkJFRjY3MDI2MEYxNTk4MjJCRTM2NzQ1MUQzNDk0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+HkZPx7RP2396tbuvS6YopqJ NceH5X+dKZ8J2FTyiOmZF3kKKZbCHmKtgOoQ+lHJ9YQS70sYbPrnl8lG06i0JT3X kf1BJspvijOc75vD9DS+2J1WmyGs8xO3KS2kElZJ9ZkNkkcCQFp/IDGZLbBOZOBo eyC1VSrceksMmpUGPb2bTMx9YQP/N3YY/BjrYKCA+nzypt0ISZfMMETOFyruYfI0 FjGl2j5vlKrnth9KE5svIQUG0+u+AJycAGMHfv/poWMkNDEZeu4tWCZCkOjubmCv J5fNUh7R6NcfMt9iiAKyi1o/JgAFBImckFUU2t4HPVEJClvauAElt5vz2PB/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPm1RbivvZwJg8VmCK+NnRR00lIIwHwYDVR0j BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8y QkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKaJVzA5Mx+X0rpQZoUbT5w4/cGEnQNqDaFo5DTmN900By+yTLxzrNNwOCHwa sqY/I9Gee7HBeySVPbiTu61IwcCJ/uXy7GjbNBAPFmVjQg5FLXPb0BcumF8P7hWs NOboWkyS8xLMvEfh2uNIv0HMPo0vSqzw8FWxbYf6MVsGItd2ENj5z+IKpzx3JNj/ mKaZmJ/wKudFwm3FqKkgrBQAYkVeyCujmazczkY4zOxwdRO7EmWnF/v7TSQJCpHO Vjri0C462vGYKGDy/JePMtUK/Vno7DZ80ahlMUdH/+SfRBZXz10CCgPU24zuaelz vO/ik6baq70yvsvUeGBtoqs8QQ== -----END CERTIFICATE-----Generated at Sat Oct 31 05:28:40 2026 by rpki-client