
Error: rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
File: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft (raw, json)
Hash identifier: lmb66F0pjFH88fMC6T/BWhoyd6fR5HD4IS/5i8J+0xw=
Subject key identifier: F3:D1:6C:33:36:05:95:08:14:E3:4E:95:FD:A6:0B:02:0E:9F:85:D8
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Certificate issuer: /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial: 416CAF40CCE322044C390C9178233A501150E122
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
Manifest number: 048C
Signing time: Sat 22 Aug 2026 14:18:13 +0000
Manifest this update: Sat 22 Aug 2026 14:13:13 +0000
Manifest next update: Sun 23 Aug 2026 16:37:13 +0000
Files and hashes: 1: 3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (hash: rBAbkLxpstl492bwOlcO3XkZLL4/sgn5F1uThWdeChU=)
2: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl (hash: JshC9OJLbeE60kyMsidSEYMW0AjTId/MY1UDXfxo4Zs=)
3: 323830343a323961303a3a2f33322d3334203d3e203238323139.roa (hash: TRItQeOpYsval/Vw31Qq22xuamczIyowVsrzAj+NZsU=)
4: 3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (hash: OaRBRoXvuxGmVV2EVrrO1/Yn76dygcVn77XVv7r8z7Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 16:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6c:af:40:cc:e3:22:04:4c:39:0c:91:78:23:3a:50:11:50:e1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Validity
Not Before: Aug 22 14:13:13 2026 GMT
Not After : Aug 23 16:37:13 2026 GMT
Subject: CN=F3D16C333605950814E34E95FDA60B020E9F85D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:79:81:30:3f:39:77:c6:b0:53:a4:1b:f0:
9f:99:06:69:e5:c4:cc:15:b1:31:79:4e:63:96:a0:
e3:0a:57:02:24:a7:39:d8:5d:d3:1e:bd:a3:09:6a:
28:f4:af:ba:0b:3c:e5:d3:d0:66:d9:ad:02:5d:65:
cb:06:ad:90:a2:ed:41:e7:96:b3:76:f4:5c:fb:62:
40:46:fd:c5:d5:3e:ef:ec:08:fc:b1:23:01:a8:cb:
4d:1e:2c:43:9c:3a:f9:02:2b:ff:22:bf:9e:cc:70:
8d:c9:5c:39:48:f2:f6:fd:48:66:7b:ba:1a:41:e5:
ad:54:1f:2e:d7:cd:e0:8a:73:a3:cb:9f:c7:ab:40:
8f:ad:d6:63:88:2a:80:ef:af:ca:ca:45:8a:6a:eb:
9d:e8:2d:6d:d2:21:d1:71:4c:47:49:16:03:4d:ed:
a7:d5:17:c3:1f:57:24:0b:d7:85:98:62:8d:c2:17:
15:28:57:8f:d5:8f:fa:3d:68:c4:fa:8c:35:6a:cf:
e7:6a:26:29:2f:5c:1a:de:1e:8e:75:db:36:92:b3:
3f:c1:74:66:61:94:2e:be:24:d7:fb:31:37:c3:42:
b7:83:90:d3:d6:5c:9a:7e:53:3a:40:9b:d6:dd:e7:
89:c0:eb:48:eb:46:0a:1b:2d:3d:86:52:ab:95:af:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:6C:33:36:05:95:08:14:E3:4E:95:FD:A6:0B:02:0E:9F:85:D8
X509v3 Authority Key Identifier:
keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:81:75:cd:d7:b4:5f:d5:4e:df:20:c1:5a:23:e6:99:6b:01:
a1:4d:79:01:26:eb:3f:f6:48:42:04:41:6d:54:b4:19:55:4c:
2c:7d:3e:50:dd:fc:c4:8e:1f:3e:85:64:74:db:12:25:49:14:
2a:a7:91:a5:63:92:80:83:af:ff:7b:da:bb:c6:37:37:0d:e4:
a1:a4:81:c4:7a:63:cc:d2:fb:b6:58:78:cb:1f:92:51:1b:96:
c2:35:f0:80:28:da:d8:1a:84:2c:4b:60:57:64:ed:a4:db:31:
75:09:df:ff:e1:04:71:92:8b:ce:33:14:77:96:d0:2d:1a:aa:
bd:a4:60:cb:51:b5:72:b9:b6:9e:81:77:33:b4:c8:9b:2a:b5:
12:79:78:3f:b5:75:69:f1:fc:ee:4d:64:46:3c:6e:55:2b:0a:
b4:00:b4:84:5e:70:13:d1:7d:2f:00:f3:a5:a4:5d:84:70:45:
d7:7b:07:f5:83:fd:b0:59:06:de:8b:f8:87:b5:ce:35:69:03:
a6:71:f1:19:9d:77:ee:16:ad:88:25:e1:2c:82:0d:e3:b0:71:
99:62:a3:d1:77:7e:fb:57:99:1c:80:9e:d0:95:2b:37:cc:44:
60:7a:3c:17:91:d8:32:a5:93:58:ee:b1:e3:3a:ad:2d:76:27:
cd:d5:4a:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQWyvQMzjIgRMOQyReCM6UBFQ4SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5RDlGRDJGNzQxQ0QyQzZFQUNBOTFCQ0E4RDI5NTgy
NDk0ODU2QzAeFw0yNjA4MjIxNDEzMTNaFw0yNjA4MjMxNjM3MTNaMDMxMTAvBgNV
BAMTKEYzRDE2QzMzMzYwNTk1MDgxNEUzNEU5NUZEQTYwQjAyMEU5Rjg1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a3mBMD85d8awU6Qb8J+ZBmnl
xMwVsTF5TmOWoOMKVwIkpznYXdMevaMJaij0r7oLPOXT0GbZrQJdZcsGrZCi7UHn
lrN29Fz7YkBG/cXVPu/sCPyxIwGoy00eLEOcOvkCK/8iv57McI3JXDlI8vb9SGZ7
uhpB5a1UHy7XzeCKc6PLn8erQI+t1mOIKoDvr8rKRYpq653oLW3SIdFxTEdJFgNN
7afVF8MfVyQL14WYYo3CFxUoV4/Vj/o9aMT6jDVqz+dqJikvXBreHo512zaSsz/B
dGZhlC6+JNf7MTfDQreDkNPWXJp+UzpAm9bd54nA60jrRgobLT2GUquVr7uJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU89FsMzYFlQgU406V/aYLAg6fhdgwHwYDVR0j
BBgwFoAUgJ2f0vdBzSxurKkbyo0pWCSUhWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VmN3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRD
ZG4vMS84MDlEOUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwOUQ5RkQyRjc0MUNEMkM2
RUFDQTkxQkNBOEQyOTU4MjQ5NDg1NkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1VmN3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMS84
MDlEOUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv4F1zde0X9VO3yDBWiPmmWsBoU15ASbrP/ZIQgRBbVS0GVVMLH0+UN38xI4f
PoVkdNsSJUkUKqeRpWOSgIOv/3vau8Y3Nw3koaSBxHpjzNL7tlh4yx+SURuWwjXw
gCja2BqELEtgV2TtpNsxdQnf/+EEcZKLzjMUd5bQLRqqvaRgy1G1crm2noF3M7TI
myq1Enl4P7V1afH87k1kRjxuVSsKtAC0hF5wE9F9LwDzpaRdhHBF13sH9YP9sFkG
3ov4h7XONWkDpnHxGZ137hatiCXhLIIN47BxmWKj0Xd++1eZHICe0JUrN8xEYHo8
F5HYMqWTWO6x4zqtLXYnzdVKug==
-----END CERTIFICATE-----
Generated at Sun Aug 23 02:40:31 2026 by rpki-client