Error: rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: 7goXDnwcM1FwAuuBq3HPq9P6a7ssIaR49kIoGoJRXBg= Subject key identifier: 4E:F3:F7:91:C7:AE:31:0E:EB:2D:9C:62:C0:3A:70:54:9C:7E:DE:22 Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 0D648618B2FEF8BB3B0F44C3F0D40B2A0EB3EA0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 04E2 Signing time: Fri 30 Oct 2026 09:20:00 +0000 Manifest this update: Fri 30 Oct 2026 09:15:00 +0000 Manifest next update: Sat 31 Oct 2026 10:14:00 +0000 Files and hashes: 1: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 3Vpf26/INv+eWHcXQ7mfZOqQtwrLqsaYRx7Y1pWfnUE=) 2: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: twhCXNYsxKUt2FAKh+PFseqgFgC5yGLvHauq/G9V2bw=) 3: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: eNGRoIC1MIZHrkwbT+gRbTqM7MTnVMuBG9EvAdA4qSs=) 4: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: kCGFK7YtNrfd2Qdx9oln7/DxL5CprsaWV3v3x5Dimdk=) 5: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: kh29SoOEcw0z7Q0+Cccqnps+Q3ef+//FAllFH1zt7f0=) 6: 323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa (hash: 7/GkhFPFga6eSNEGWPf48bnfOxtD+TjVD74tqu8gyfg=) 7: 323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa (hash: IHCcdJHmK0uDqDY5atgymN1EVyt5Mw/EcbYmOHTF49g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 10:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:64:86:18:b2:fe:f8:bb:3b:0f:44:c3:f0:d4:0b:2a:0e:b3:ea:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Oct 30 09:15:00 2026 GMT Not After : Oct 31 10:14:00 2026 GMT Subject: CN=4EF3F791C7AE310EEB2D9C62C03A70549C7EDE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:29:18:df:51:7d:94:e4:c6:f1:24:06:03: 39:24:59:63:0a:9b:cd:1b:e2:52:19:bc:4d:bf:7c: ff:3a:35:37:fd:01:47:d5:51:57:d9:12:a4:3c:e6: 66:4c:f9:89:99:99:0b:e6:b5:2b:06:f6:bf:db:0b: e4:d2:06:22:1a:bb:2c:4e:05:a1:7a:f0:15:2a:32: c8:39:f5:2e:49:a3:27:55:b9:78:f4:1e:b0:72:74: d5:9e:3d:c3:17:97:2b:2d:75:71:c8:2b:3d:08:28: c8:61:ce:39:3d:06:e2:00:a9:b1:b2:50:3f:2d:2b: 9a:57:eb:89:26:d6:03:7b:81:4c:c5:77:be:98:df: bd:c1:f1:1a:12:83:3c:24:13:43:e7:e6:b6:53:29: 2f:6d:cb:73:a0:f6:b2:76:79:b2:92:d4:a3:03:88: d2:5c:04:d7:2c:4e:8d:fd:6a:38:e6:f6:a3:49:71: 85:8e:18:2c:e7:dd:bd:1d:78:c1:c3:e2:43:60:9a: ea:80:69:24:61:0e:c5:ff:d1:50:0b:d9:02:9e:07: f6:fa:d2:64:7a:28:1d:81:66:50:4f:bd:32:c3:61: 93:fb:58:0d:42:17:96:9a:99:f9:6a:53:82:c1:de: c2:19:91:74:87:2b:89:c7:69:8a:a8:21:4f:0a:0c: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F3:F7:91:C7:AE:31:0E:EB:2D:9C:62:C0:3A:70:54:9C:7E:DE:22 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:8e:f5:ad:48:dc:12:07:55:75:4d:d6:c3:6c:96:d6:0a: 52:fe:aa:77:ad:a7:60:d6:89:04:4f:3e:31:d5:9f:e7:16:c8: f3:42:a6:60:cf:62:e6:c0:36:fe:db:b8:1b:0a:87:a6:4b:cd: 56:7b:7c:35:9c:3b:13:34:be:23:47:cf:c0:bb:f8:31:c8:a2: ef:57:24:aa:16:f2:2f:71:0e:ec:b2:93:bf:b6:96:e2:cd:fb: 1f:4b:5c:a0:5c:75:ed:3a:b4:4c:be:22:51:84:ad:48:8c:8d: b6:1a:7d:64:c3:88:a3:fd:ce:35:b2:d4:75:ed:ce:8d:77:f0: 7f:0c:89:4c:45:94:2c:18:90:77:3a:e6:67:7c:c9:4e:f7:00: 7e:70:1d:2f:56:46:cc:c4:a2:52:01:63:60:9e:0e:73:1c:ca: 5e:e6:49:0d:c9:89:c0:9a:dc:09:92:f9:29:d0:ef:08:26:2d: dc:39:b2:89:38:9f:c8:f7:65:e1:0d:33:84:74:1d:13:50:64: 2e:f1:71:bc:16:88:6d:3f:a0:e8:ed:ad:c3:43:eb:62:bd:4e: 34:16:73:dd:9c:6f:47:20:53:39:41:cf:b7:dd:61:ef:dd:8b: 1e:ee:84:8b:a8:4e:8b:dd:1b:8f:6d:e8:63:50:bc:91:51:af: f7:fb:e4:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDWSGGLL++Ls7D0TD8NQLKg6z6g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNjEwMzAwOTE1MDBaFw0yNjEwMzExMDE0MDBaMDMxMTAvBgNV BAMTKDRFRjNGNzkxQzdBRTMxMEVFQjJEOUM2MkMwM0E3MDU0OUM3RURFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpykY31F9lOTG8SQGAzkkWWMK m80b4lIZvE2/fP86NTf9AUfVUVfZEqQ85mZM+YmZmQvmtSsG9r/bC+TSBiIauyxO BaF68BUqMsg59S5JoydVuXj0HrBydNWePcMXlystdXHIKz0IKMhhzjk9BuIAqbGy UD8tK5pX64km1gN7gUzFd76Y373B8RoSgzwkE0Pn5rZTKS9ty3Og9rJ2ebKS1KMD iNJcBNcsTo39ajjm9qNJcYWOGCzn3b0deMHD4kNgmuqAaSRhDsX/0VAL2QKeB/b6 0mR6KB2BZlBPvTLDYZP7WA1CF5aamflqU4LB3sIZkXSHK4nHaYqoIU8KDBwPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTvP3kceuMQ7rLZxiwDpwVJx+3iIwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKGO9a1I3BIHVXVN1sNsltYKUv6qd62nYNaJBE8+MdWf5xbI80KmYM9i5sA2 /tu4GwqHpkvNVnt8NZw7EzS+I0fPwLv4Mcii71ckqhbyL3EO7LKTv7aW4s37H0tc oFx17Tq0TL4iUYStSIyNthp9ZMOIo/3ONbLUde3OjXfwfwyJTEWULBiQdzrmZ3zJ TvcAfnAdL1ZGzMSiUgFjYJ4OcxzKXuZJDcmJwJrcCZL5KdDvCCYt3DmyiTifyPdl 4Q0zhHQdE1BkLvFxvBaIbT+g6O2tw0PrYr1ONBZz3ZxvRyBTOUHPt91h792LHu6E i6hOi90bj23oY1C8kVGv9/vkpg== -----END CERTIFICATE-----Generated at Sat Oct 31 02:22:18 2026 by rpki-client