Error: rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft File: B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft (raw, json) Hash identifier: 0c+E3FAd9V6wYgb4zRGUXYOpqStYmqL90HDnYYh0zeM= Subject key identifier: 77:44:19:1D:56:ED:8F:90:8D:2C:07:58:0B:FB:40:A4:C4:67:60:EB Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45 Certificate issuer: /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45 Certificate serial: 0B269A5D205DB9759661815D51EC7F0B9D535FAC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer Subject info access: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft Manifest number: 04DC Signing time: Mon 02 Nov 2026 19:14:05 +0000 Manifest this update: Mon 02 Nov 2026 19:09:05 +0000 Manifest next update: Tue 03 Nov 2026 22:26:05 +0000 Files and hashes: 1: B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl (hash: B5dq1YKqIWFwMpub6HalYf0WoTetA3JXdo03FFn8Zk4=) 2: 323830343a376530343a3a2f33322d3334203d3e20323731353937.roa (hash: ERY7fX2dsrKpFlE8bq7J/GcWuqcAKTCxzmCk9TGWSMo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 22:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:26:9a:5d:20:5d:b9:75:96:61:81:5d:51:ec:7f:0b:9d:53:5f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45 Validity Not Before: Nov 2 19:09:05 2026 GMT Not After : Nov 3 22:26:05 2026 GMT Subject: CN=7744191D56ED8F908D2C07580BFB40A4C46760EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:0f:90:1c:54:3c:a7:e4:d7:57:2e:0d:4e: 71:13:52:34:bd:e7:15:6f:f4:b7:10:5a:04:2e:e7: e0:e4:64:50:11:90:bf:25:0d:da:f6:b0:f1:d5:03: 5c:cd:3d:12:d9:df:bd:22:e6:b2:16:cb:93:70:70: 3a:f7:cb:89:cb:7c:f5:83:39:5a:da:d7:6f:57:25: e4:63:be:98:04:d0:0d:8c:94:cf:cf:d7:2b:f0:8c: 38:7d:c5:d1:cd:9b:a5:ef:ea:26:94:df:3d:5e:37: b9:f6:88:66:de:ca:2c:e0:7d:3c:eb:38:5b:1c:39: 88:e5:a9:45:7a:77:e6:6b:1d:93:f4:88:63:ae:2b: 2a:74:e2:d7:bf:48:80:a8:c9:7c:4a:83:fb:83:04: 02:72:b6:86:60:77:09:ec:fe:1a:e6:81:59:3c:73: 6a:c9:d4:f9:94:b2:1e:06:9f:c7:52:5f:b6:39:0d: 5b:23:71:84:ee:0b:c6:c7:54:53:ab:9a:ac:8d:10: fb:89:37:7b:03:9b:61:20:45:40:c4:07:47:3d:d2: 04:35:c6:99:cc:05:2f:c0:59:6d:e4:2b:f0:07:24: 0f:b1:25:06:d3:5a:d3:7e:04:1b:75:c5:6c:81:95: 77:ef:3a:df:a0:77:28:57:df:05:4a:38:21:13:ac: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:19:1D:56:ED:8F:90:8D:2C:07:58:0B:FB:40:A4:C4:67:60:EB X509v3 Authority Key Identifier: keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b3:31:af:70:24:79:b9:9e:89:6d:37:2f:e3:2e:26:28:35: 39:c9:f9:29:50:68:d3:fe:db:dc:98:ab:93:44:d7:91:b2:e3: d6:90:1f:b1:34:e2:79:ce:f0:af:a1:46:12:34:4e:14:90:bf: 57:52:d0:fc:da:98:73:18:8e:87:43:37:8d:4d:9f:4e:b3:3b: 72:0c:23:09:0a:0f:df:11:ab:16:92:fc:b0:38:38:bb:b7:d2: ca:2b:0b:64:54:cc:b9:8f:d1:9f:64:9b:91:e8:42:c4:f9:81: d9:ab:a8:f4:87:95:b7:b2:8d:59:80:de:37:c6:f6:4c:13:b0: 65:c5:2a:b2:fa:94:27:47:75:5a:5f:5a:a9:ef:50:bd:11:f8: d4:ba:9e:8e:0e:c7:10:f0:f4:d4:dd:c7:b5:c0:48:14:64:f1: a1:0c:6d:71:f0:56:7c:e5:86:cf:c9:23:29:b1:b1:79:f4:45: de:45:ec:e0:1d:f4:52:bf:d8:f1:a5:f5:46:63:66:82:95:79: 73:ef:ee:9d:5b:e6:2b:29:83:2e:e2:63:22:42:3b:be:54:dd: c9:b4:14:b9:a8:cc:c2:a6:b6:8e:9f:29:60:6c:d7:a3:f2:8e: 6d:9f:fc:0e:52:4f:a6:be:c1:98:d1:5c:0f:85:e7:86:61:55: 59:21:83:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCyaaXSBduXWWYYFdUex/C51TX6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5MURGMjIwQkM2MkRCNkE1MjVDOUE0RDZBMDlGNzYy RjgwNkQ0NTAeFw0yNjExMDIxOTA5MDVaFw0yNjExMDMyMjI2MDVaMDMxMTAvBgNV BAMTKDc3NDQxOTFENTZFRDhGOTA4RDJDMDc1ODBCRkI0MEE0QzQ2NzYwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFA+QHFQ8p+TXVy4NTnETUjS9 5xVv9LcQWgQu5+DkZFARkL8lDdr2sPHVA1zNPRLZ370i5rIWy5NwcDr3y4nLfPWD OVra129XJeRjvpgE0A2MlM/P1yvwjDh9xdHNm6Xv6iaU3z1eN7n2iGbeyizgfTzr OFscOYjlqUV6d+ZrHZP0iGOuKyp04te/SICoyXxKg/uDBAJytoZgdwns/hrmgVk8 c2rJ1PmUsh4Gn8dSX7Y5DVsjcYTuC8bHVFOrmqyNEPuJN3sDm2EgRUDEB0c90gQ1 xpnMBS/AWW3kK/AHJA+xJQbTWtN+BBt1xWyBlXfvOt+gdyhX3wVKOCETrMYpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd0QZHVbtj5CNLAdYC/tApMRnYOswHwYDVR0j BBgwFoAUsZHfIgvGLbalJcmk1qCfdi+AbUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdM eHUvMS9CMTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTFERjIyMEJDNjJEQjZB NTI1QzlBNEQ2QTA5Rjc2MkY4MDZENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdMeHUvMS9C MTkxREYyMjBCQzYyREI2QTUyNUM5QTRENkEwOUY3NjJGODA2RDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbMxr3AkebmeiW03L+MuJig1Ocn5KVBo0/7b3Jirk0TXkbLj1pAfsTTiec7w r6FGEjROFJC/V1LQ/NqYcxiOh0M3jU2fTrM7cgwjCQoP3xGrFpL8sDg4u7fSyisL ZFTMuY/Rn2SbkehCxPmB2auo9IeVt7KNWYDeN8b2TBOwZcUqsvqUJ0d1Wl9aqe9Q vRH41Lqejg7HEPD01N3HtcBIFGTxoQxtcfBWfOWGz8kjKbGxefRF3kXs4B30Ur/Y 8aX1RmNmgpV5c+/unVvmKymDLuJjIkI7vlTdybQUuajMwqa2jp8pYGzXo/KObZ/8 DlJPpr7BmNFcD4XnhmFVWSGD5g== -----END CERTIFICATE-----Generated at Tue Nov 3 13:03:54 2026 by rpki-client