Error: rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft File: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json) Hash identifier: CcygfFhClTCyNgMfyFtblx8raYFDxMWT30C8O8P4tlM= Subject key identifier: 90:30:A1:31:58:C5:7D:B2:FA:EE:04:05:99:76:F8:F3:7F:D2:98:22 Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Certificate serial: 7D0F44516B62F8E4E350C0205AFCC3CB4041AB0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft Manifest number: 04E9 Signing time: Mon 02 Nov 2026 11:10:00 +0000 Manifest this update: Mon 02 Nov 2026 11:05:00 +0000 Manifest next update: Tue 03 Nov 2026 15:06:00 +0000 Files and hashes: 1: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=) 2: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=) 3: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=) 4: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=) 5: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=) 6: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=) 7: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=) 8: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=) 9: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: Vm5aIdGNQXWBPtt0JTatHNwngVagwEkIklQz7XPF+5I=) 10: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=) 11: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=) 12: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=) 13: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0f:44:51:6b:62:f8:e4:e3:50:c0:20:5a:fc:c3:cb:40:41:ab:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Validity Not Before: Nov 2 11:05:00 2026 GMT Not After : Nov 3 15:06:00 2026 GMT Subject: CN=9030A13158C57DB2FAEE04059976F8F37FD29822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:61:3f:1f:06:2c:18:12:47:2b:3d:ad:06: aa:39:93:9d:c0:2f:a9:a8:5f:16:38:96:f5:de:4a: 82:aa:11:de:7b:0e:36:01:75:53:40:0a:2b:77:dd: 76:72:b4:48:3c:72:32:9f:46:e6:4c:49:1e:75:6a: 63:74:d3:6c:60:38:d4:ad:5e:eb:85:68:30:1f:fb: a9:3b:e9:3b:61:a7:01:8b:b3:04:08:ef:b9:77:32: 24:68:5f:90:6c:33:4d:f4:6d:82:4f:06:82:6e:c5: 76:ed:80:e8:3c:08:fb:e9:73:f7:85:95:d8:0c:fa: 79:c1:ba:16:df:3c:34:2f:34:4c:ab:8e:46:12:ff: cd:e3:9e:9e:bd:ec:9c:77:1a:6b:ac:56:90:d3:8d: ad:93:77:d4:16:41:5a:68:ee:29:ae:11:50:41:44: 10:b1:2f:55:54:ad:02:1a:da:83:64:ac:3c:26:fb: f9:af:60:84:63:5c:59:1b:b9:fa:16:18:b2:f1:f2: 2f:e9:e7:0c:aa:48:ab:4e:57:b4:f6:e4:22:56:2a: d7:9a:10:17:c9:ea:36:c5:58:66:8c:44:45:33:eb: de:d7:d9:11:9a:9d:e7:9f:8a:81:c7:f2:f4:ab:eb: 35:72:5f:1f:84:e8:d2:b8:02:fe:9a:18:8c:c1:e7: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:A1:31:58:C5:7D:B2:FA:EE:04:05:99:76:F8:F3:7F:D2:98:22 X509v3 Authority Key Identifier: keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d9:c3:cd:6e:43:5d:a4:30:1a:1e:81:3b:f8:4e:ac:c4:a3: 7a:84:4f:68:54:15:e8:2a:e0:27:8b:c7:b5:19:12:ac:30:05: 83:7d:00:0a:24:f9:70:e4:c9:8e:60:cb:c9:96:6e:20:7a:69: 2d:33:e3:7d:14:2c:e9:73:96:1d:3e:79:ff:33:84:ee:df:8b: ef:b8:4f:1a:41:24:9a:d0:9e:37:99:73:f1:27:43:97:d8:00: b4:f5:fe:19:c9:f5:54:8c:9a:ce:08:28:46:2e:11:27:d2:d0: df:78:de:30:83:a4:64:af:05:19:8e:c0:5a:f8:e3:65:12:f4: 4e:9a:cb:ea:53:a1:c6:9a:c3:50:c6:6d:b8:10:c6:e9:7f:01: 77:ca:a9:83:c5:66:f0:95:5c:56:50:1c:b9:63:63:9f:d5:6e: 77:ab:a3:f2:6a:dc:b6:12:35:e2:1f:87:9a:13:13:fe:19:3a: 65:3a:c3:70:0d:9d:07:28:a3:16:da:6d:d6:7e:23:09:91:e5: 1b:0d:3a:4d:f2:4e:13:99:04:70:8d:1d:47:02:fd:13:75:0f: 09:30:56:b4:a1:63:61:68:3d:95:87:8b:52:56:a0:f4:7b:aa: 2b:06:bf:a7:c2:ab:c5:1d:be:44:ec:05:a5:f0:ba:d3:92:74: a1:f7:2f:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfQ9EUWti+OTjUMAgWvzDy0BBqwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx MjMzOEQ5QzAeFw0yNjExMDIxMTA1MDBaFw0yNjExMDMxNTA2MDBaMDMxMTAvBgNV BAMTKDkwMzBBMTMxNThDNTdEQjJGQUVFMDQwNTk5NzZGOEYzN0ZEMjk4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhGE/HwYsGBJHKz2tBqo5k53A L6moXxY4lvXeSoKqEd57DjYBdVNACit33XZytEg8cjKfRuZMSR51amN002xgONSt XuuFaDAf+6k76TthpwGLswQI77l3MiRoX5BsM030bYJPBoJuxXbtgOg8CPvpc/eF ldgM+nnBuhbfPDQvNEyrjkYS/83jnp697Jx3GmusVpDTja2Td9QWQVpo7imuEVBB RBCxL1VUrQIa2oNkrDwm+/mvYIRjXFkbufoWGLLx8i/p5wyqSKtOV7T25CJWKtea EBfJ6jbFWGaMREUz697X2RGaneefioHH8vSr6zVyXx+E6NK4Av6aGIzB58wHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkDChMVjFfbL67gQFmXb483/SmCIwHwYDVR0j BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8y QkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9nDzW5DXaQwGh6BO/hOrMSjeoRPaFQV6CrgJ4vHtRkSrDAFg30ACiT5cOTJ jmDLyZZuIHppLTPjfRQs6XOWHT55/zOE7t+L77hPGkEkmtCeN5lz8SdDl9gAtPX+ Gcn1VIyazggoRi4RJ9LQ33jeMIOkZK8FGY7AWvjjZRL0TprL6lOhxprDUMZtuBDG 6X8Bd8qpg8Vm8JVcVlAcuWNjn9Vud6uj8mrcthI14h+HmhMT/hk6ZTrDcA2dByij Ftpt1n4jCZHlGw06TfJOE5kEcI0dRwL9E3UPCTBWtKFjYWg9lYeLUlag9HuqKwa/ p8KrxR2+ROwFpfC605J0ofcvvQ== -----END CERTIFICATE-----Generated at Mon Nov 2 20:58:53 2026 by rpki-client