
Error: rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
File: 8F43BF9E79677F282BF953C8E1F71757E25A9063.mft (raw, json)
Hash identifier: tC3ODm4/adMShtPNUjGVpuvchDkhDh8z0GjfWfGAXw8=
Subject key identifier: 86:85:0E:55:14:B6:18:53:2A:4E:2B:2D:FD:6E:7B:40:FE:69:83:D7
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Certificate issuer: /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial: 0F11A3F6BF6E15E0D2F9238597CE3E6EFF8C1D35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
Manifest number: 0466
Signing time: Sun 23 Aug 2026 11:51:23 +0000
Manifest this update: Sun 23 Aug 2026 11:46:23 +0000
Manifest next update: Mon 24 Aug 2026 14:12:23 +0000
Files and hashes: 1: 8F43BF9E79677F282BF953C8E1F71757E25A9063.crl (hash: DxPBw1qf0MhMGbX03NTF8bLH0+pfrQcEMIShoxWJA/o=)
2: 323830343a6463383a3a2f33322d3438203d3e203238363336.roa (hash: 9v5wOZl0IzbYFvHPBiRxF5GdEJlzmPBW7m+WlQZMa7Q=)
3: 3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (hash: Wjx5i+cZIylBJo6AdYJ21cMuzZIam3nXl9aWEHqeHeI=)
4: 3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (hash: bIY73R+OeJNIFgA3uG7K2iPUaYv8FpclnU1l2KIux94=)
5: 3137392e39372e3132302e302f32312d3234203d3e203238363336.roa (hash: pxw/l+03cqSVmE0xgHdMdOaLwYj9iHqxCffKn+8iEn8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:11:a3:f6:bf:6e:15:e0:d2:f9:23:85:97:ce:3e:6e:ff:8c:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Validity
Not Before: Aug 23 11:46:23 2026 GMT
Not After : Aug 24 14:12:23 2026 GMT
Subject: CN=86850E5514B618532A4E2B2DFD6E7B40FE6983D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:e6:49:62:57:cd:f5:7e:20:d7:c2:e0:36:
0f:0f:f0:f8:b2:76:49:ca:cf:4b:10:e0:6b:50:22:
ce:5d:de:ac:c0:6c:9e:81:8e:d8:20:1d:da:d7:a5:
f5:51:2d:54:8b:cb:ac:80:5e:aa:0a:24:82:33:82:
62:99:31:21:ce:50:cb:86:15:56:e9:c1:0b:ba:35:
82:75:17:2e:6c:49:43:52:fe:d0:78:aa:86:db:9e:
0a:59:f2:6e:ea:a3:2a:f1:15:7c:62:be:fd:26:4b:
37:03:e1:54:08:d3:62:fa:a5:16:26:de:42:2a:0e:
d4:b4:3e:e8:ea:77:ec:f8:46:7d:19:72:83:cf:29:
4e:2b:76:d7:d8:c8:6b:74:a0:e8:e5:3d:59:8e:42:
45:37:43:e6:c8:c8:bb:28:38:33:9c:90:0b:8d:4d:
f2:00:59:da:33:35:2e:51:c5:f8:4d:46:0a:7a:de:
f2:9d:0a:9c:bb:40:2e:25:e5:6f:ff:fb:9b:25:ae:
88:9b:24:db:47:54:c3:3a:f7:53:24:84:3f:50:ee:
55:b3:77:26:dc:d8:a9:f9:6a:4a:7a:fb:a2:c1:59:
86:df:a6:72:e2:de:d4:ff:43:3e:74:46:3f:03:5b:
27:cb:3a:3a:3f:56:d8:63:ef:0d:1a:7d:4c:23:92:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:0E:55:14:B6:18:53:2A:4E:2B:2D:FD:6E:7B:40:FE:69:83:D7
X509v3 Authority Key Identifier:
keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:32:15:d1:2f:f2:8d:08:c1:ae:a4:6e:48:b1:a9:10:88:
76:29:3b:3b:fc:85:18:84:92:20:71:a4:1b:fc:b9:d6:8b:56:
8e:76:d7:54:df:cb:ff:2a:d1:f3:9c:db:10:3c:f2:73:97:c2:
8b:9d:5f:52:96:3f:63:ac:54:c2:18:61:44:60:d4:06:40:d4:
e3:88:c8:44:33:c7:20:90:3d:20:33:c7:22:5d:aa:da:4d:90:
35:f6:87:5e:a2:20:8a:8f:4d:f5:ad:df:67:53:42:ce:9f:0a:
f0:d3:58:94:f9:89:09:55:ad:aa:13:6e:b3:6c:27:7d:b7:8c:
eb:69:df:42:a3:21:32:7c:50:89:b8:b8:a9:be:62:44:48:f8:
57:9c:55:99:e9:48:31:12:df:89:68:dc:2b:9c:2c:4a:83:63:
84:b9:54:c7:b3:5d:5d:e7:21:5b:f4:9a:e9:a4:35:c7:d6:54:
1f:5d:1c:38:69:9c:6e:32:d7:09:a6:8a:2a:62:2f:65:92:ab:
ea:03:39:a9:48:ab:b8:d8:73:03:0b:af:ab:fe:ad:b3:e2:4d:
12:c2:ce:03:39:73:cf:97:89:65:86:db:6e:ff:52:f2:a1:9b:
67:77:e4:fe:71:0f:06:fe:a1:0c:44:e6:ed:f7:d0:43:e5:a3:
58:53:49:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDxGj9r9uFeDS+SOFl84+bv+MHTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0M0JGOUU3OTY3N0YyODJCRjk1M0M4RTFGNzE3NTdF
MjVBOTA2MzAeFw0yNjA4MjMxMTQ2MjNaFw0yNjA4MjQxNDEyMjNaMDMxMTAvBgNV
BAMTKDg2ODUwRTU1MTRCNjE4NTMyQTRFMkIyREZENkU3QjQwRkU2OTgzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAOZJYlfN9X4g18LgNg8P8Piy
dknKz0sQ4GtQIs5d3qzAbJ6BjtggHdrXpfVRLVSLy6yAXqoKJIIzgmKZMSHOUMuG
FVbpwQu6NYJ1Fy5sSUNS/tB4qobbngpZ8m7qoyrxFXxivv0mSzcD4VQI02L6pRYm
3kIqDtS0Pujqd+z4Rn0ZcoPPKU4rdtfYyGt0oOjlPVmOQkU3Q+bIyLsoODOckAuN
TfIAWdozNS5RxfhNRgp63vKdCpy7QC4l5W//+5slroibJNtHVMM691MkhD9Q7lWz
dybc2Kn5akp6+6LBWYbfpnLi3tT/Qz50Rj8DWyfLOjo/Vthj7w0afUwjkh6VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhoUOVRS2GFMqTist/W57QP5pg9cwHwYDVR0j
BBgwFoAUj0O/nnlnfygr+VPI4fcXV+JakGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1E
NW4vMC84RjQzQkY5RTc5Njc3RjI4MkJGOTUzQzhFMUY3MTc1N0UyNUE5MDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNDNCRjlFNzk2NzdGMjgy
QkY5NTNDOEUxRjcxNzU3RTI1QTkwNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1ENW4vMC84
RjQzQkY5RTc5Njc3RjI4MkJGOTUzQzhFMUY3MTc1N0UyNUE5MDYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACKsyFdEv8o0Iwa6kbkixqRCIdik7O/yFGISSIHGkG/y51otWjnbXVN/L/yrR
85zbEDzyc5fCi51fUpY/Y6xUwhhhRGDUBkDU44jIRDPHIJA9IDPHIl2q2k2QNfaH
XqIgio9N9a3fZ1NCzp8K8NNYlPmJCVWtqhNus2wnfbeM62nfQqMhMnxQibi4qb5i
REj4V5xVmelIMRLfiWjcK5wsSoNjhLlUx7NdXechW/Sa6aQ1x9ZUH10cOGmcbjLX
CaaKKmIvZZKr6gM5qUiruNhzAwuvq/6ts+JNEsLOAzlzz5eJZYbbbv9S8qGbZ3fk
/nEPBv6hDETm7ffQQ+WjWFNJaQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:11:36 2026 by rpki-client