
Error: rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
File: 783CF2D02131A21E333113BEEE878BC38B6104B6.mft (raw, json)
Hash identifier: PyAMbujwiioPMyMJKA9af03csAGpdhPqQ8l2DCJn2qk=
Subject key identifier: 26:4B:DA:18:23:C5:57:25:91:89:F2:12:AE:8E:7D:45:B5:72:2A:02
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Certificate issuer: /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial: 2A70A4C1AB6B9D185B4D7F82DBEA925A5919B3F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
Manifest number: 0354
Signing time: Mon 02 Nov 2026 03:17:57 +0000
Manifest this update: Mon 02 Nov 2026 03:12:57 +0000
Manifest next update: Tue 03 Nov 2026 06:21:57 +0000
Files and hashes: 1: 3137392e3132372e33322e302f32312d3235203d3e20323633363337.roa (hash: KKtwa53J2lrY3PPRBn6nepAkzXidOs/IwnWWY6AmEXI=)
2: 323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (hash: KBQCdFHplWquuT+kab6DZbpDzKtkvdcAkkBTGtbdW8w=)
3: 783CF2D02131A21E333113BEEE878BC38B6104B6.crl (hash: mhEa94dKajHfa02SUbOodF96YqG/TxxXmG3n0yuwMOQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 06:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:70:a4:c1:ab:6b:9d:18:5b:4d:7f:82:db:ea:92:5a:59:19:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Validity
Not Before: Nov 2 03:12:57 2026 GMT
Not After : Nov 3 06:21:57 2026 GMT
Subject: CN=264BDA1823C557259189F212AE8E7D45B5722A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:08:68:6a:14:e0:1d:b9:47:d8:e9:db:fb:
63:2b:d5:42:f2:90:02:d7:81:67:e2:58:6e:79:ea:
6f:bb:34:9b:b7:f7:8f:0a:e1:9d:0a:48:e2:6c:50:
32:bb:68:46:5f:56:68:2a:54:6a:4c:bb:cc:43:2a:
d1:78:9c:da:bb:1a:da:7c:38:17:ab:86:70:6b:e1:
ee:fb:21:10:ac:e0:37:1e:91:4b:41:d0:e7:b5:0c:
f8:97:57:09:be:59:de:e8:20:1c:a7:36:35:02:e4:
53:77:35:61:4e:c8:01:ae:42:8e:d5:7a:b8:3e:67:
ba:e0:ef:8b:74:e2:25:6f:2f:9f:62:1f:38:88:f8:
df:30:6d:34:01:e2:2f:bc:ec:a0:c7:bc:0f:c2:1a:
82:b4:53:58:5c:5f:cc:1d:7e:a1:6e:21:25:14:f3:
a1:ef:3a:80:94:ab:ae:21:68:cf:ea:1a:cd:7d:23:
19:47:38:1c:de:d2:58:cd:35:62:9d:60:21:92:15:
d3:09:42:8a:cd:b4:f9:5e:e3:30:93:bb:57:f5:94:
b3:e5:2f:e9:02:62:85:35:f5:80:e1:ef:d3:2d:05:
b1:4f:0a:9f:58:fa:e6:f7:3c:af:01:b1:3d:4f:b4:
71:03:b9:2c:4a:65:b8:7f:d0:b8:8c:0c:cd:4b:ff:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:DA:18:23:C5:57:25:91:89:F2:12:AE:8E:7D:45:B5:72:2A:02
X509v3 Authority Key Identifier:
keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:c4:f8:24:e8:ee:97:7a:13:d2:0d:1d:1e:9b:f3:b7:bf:
08:f5:7b:eb:c1:05:84:36:a9:8a:d8:9c:70:a5:88:df:8e:fa:
26:e1:c1:01:7c:25:14:45:1b:d0:15:9e:de:f4:cf:f0:94:66:
64:ae:7b:c8:20:9f:69:e9:d9:69:5f:bf:04:12:5a:ee:37:a5:
44:0b:92:09:aa:5e:1f:4d:0d:c2:3a:63:3d:04:53:84:19:ec:
36:17:e1:9a:d9:76:d4:09:da:7b:3f:73:c7:2a:d2:2a:52:13:
3d:72:ed:b0:45:69:34:45:9f:0b:6a:2f:85:ee:56:82:9d:fa:
2e:c8:ed:58:29:75:b3:c9:f3:48:5b:a8:ca:fd:05:d0:23:60:
b3:f7:2f:30:17:2c:e9:65:a4:83:57:57:ba:34:dc:e2:a1:cf:
c9:c9:22:f3:c6:38:6e:85:dd:8f:e1:8a:41:15:24:f0:7d:44:
8a:2e:a7:f4:78:1b:ee:27:78:3a:19:70:2a:0e:1c:2c:e7:71:
a3:19:12:94:b2:69:53:8e:d9:ff:13:08:c4:9b:8f:30:73:1c:
77:69:63:ba:4c:9c:41:ad:f6:40:8d:45:aa:96:2f:84:5c:5d:
56:54:9c:d1:e0:12:7d:9b:1c:94:65:52:eb:06:95:80:9a:4d:
65:14:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:38:25 2026 by rpki-client