Error: rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft File: 280DBCE26C80C869FE8BD73477199ADD10E444A2.mft (raw, json) Hash identifier: Mxs6wt37n6XB1WVCoLUtsigLbleZ+Dn3Xdp53Wl0ICw= Subject key identifier: 3C:2E:71:A0:63:84:FF:73:E3:E0:48:12:9B:B7:70:3F:1C:E7:CE:79 Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Certificate serial: 17CF22457FE0490F978734BFA0B50E3D70240484 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft Manifest number: 04EA Signing time: Sat 31 Oct 2026 04:50:00 +0000 Manifest this update: Sat 31 Oct 2026 04:45:00 +0000 Manifest next update: Sun 01 Nov 2026 07:32:00 +0000 Files and hashes: 1: 3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa (hash: lYUrWXvZMQMon5iLbf4qi0fQC9rObbbpkKn0QcZzwy0=) 2: 3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa (hash: gkL25kkUKa89uPgvbIMbZuSR5z9oVz30b1LayZS+lno=) 3: 3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa (hash: DbLSNRm9LBLobwGLTXr9zHi2QjQFyf/q7gcIIPVEFIw=) 4: 3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa (hash: QqoEQLQIUFyzvrYItcsc+hNpNMt0JjgiGZL453myZ5k=) 5: 3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa (hash: 07sIUlGmevrIJMbGMVuXl1YMJVfS7KUDlBMkILwxw/I=) 6: 3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa (hash: ZmRSO+Z2kOaSD0YvqORR0r6BqyAafMD3vZJhihzchoQ=) 7: 3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa (hash: LPEPYlExSrcxyZoKE6w5A4hb81DccwV0nnGIOnMoYmU=) 8: 323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa (hash: VbntQKO+9ZK3V4fpso+tMh/CXaQ2XlJLsdBHbw/SOfk=) 9: 3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa (hash: dUd28JeWOzS4AYbNLknHxo/piSK1HeEp9nsBdTgZez0=) 10: 3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa (hash: tkRLYdWjD7meOaRK671+/zPrYpR+Nyvb9PjhyOo5RxM=) 11: 3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa (hash: rqs4lUfWDwqyuzj6XEK1f+BBQs3o9HJujMchnbu8IcA=) 12: 323830343a313330633a3a2f33322d3332203d3e20323633353132.roa (hash: I72wvd/6+NFQUNu9oEcSUBYbKddi0HQ8/73QUR0SkEc=) 13: 3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa (hash: 4PsNRdr27fTDj1AT+Dmz1ecwk4KJuKIIFGAf4bUbm7I=) 14: 3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (hash: InWUm/RnkqES1XnCOooQf4oJsjEkeEqOm0RITLZwTeI=) 15: 3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa (hash: IKGe7hzpGiXHj7w0fJ18+TE5VgXQWeHbSp7OeN4y350=) 16: 3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa (hash: LmfoyxKPyXK1VWQFBFIr4Sx46JVZLxDW+ZeoemmPoTE=) 17: 3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa (hash: PKig4aqOKOfdx4w6ndXUvzDqGWJIPb35O4uypF4Ye6c=) 18: 280DBCE26C80C869FE8BD73477199ADD10E444A2.crl (hash: VBZKvI8YzZzffZ2aGn77uC69Aj83aZQUQXwi1LiUulY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 07:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cf:22:45:7f:e0:49:0f:97:87:34:bf:a0:b5:0e:3d:70:24:04:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Validity Not Before: Oct 31 04:45:00 2026 GMT Not After : Nov 1 07:32:00 2026 GMT Subject: CN=3C2E71A06384FF73E3E048129BB7703F1CE7CE79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:0e:5e:eb:45:68:e7:cd:b3:d0:75:17:6c: 2a:7a:89:ae:53:ed:7c:19:a1:f8:03:75:e5:10:6a: 83:eb:e0:75:2d:1d:1a:de:ab:7c:86:66:28:55:00: 48:be:bc:b7:01:7a:6f:48:85:9b:54:36:81:73:6c: 9c:37:4f:78:99:6a:79:c8:93:b3:29:61:61:3f:60: 4b:3a:ae:8f:05:24:53:f7:2b:59:ea:29:56:8e:4d: 5e:4e:9a:e0:2f:82:9a:95:41:e5:b6:58:00:04:bc: 96:2a:5d:4d:39:70:fa:95:c8:84:41:9c:50:fa:3e: a8:cc:98:8c:e2:6d:af:ba:83:1d:8d:99:b9:df:d0: 05:1f:68:45:0a:03:b2:17:e9:70:42:c3:1c:4b:83: 42:0f:7e:eb:e8:3a:9a:33:ce:58:72:aa:71:6d:20: 76:d5:b0:2d:7e:4f:2e:23:92:80:44:82:50:aa:3c: bd:43:1e:df:fa:e0:b9:61:bb:66:8a:1f:64:d7:eb: 58:2f:c5:32:71:eb:d3:ee:f7:3c:bb:b2:34:f1:52: 4f:9b:f7:35:f2:16:c5:d2:a5:74:14:38:45:86:c8: 21:cf:e5:bb:52:24:93:6d:0d:06:b6:d5:c0:b1:23: 3f:fc:86:b0:be:fc:e5:00:29:3b:2c:eb:9c:0e:3d: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:71:A0:63:84:FF:73:E3:E0:48:12:9B:B7:70:3F:1C:E7:CE:79 X509v3 Authority Key Identifier: keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c5:eb:3c:5f:d7:de:42:5e:b8:4e:b1:7e:d4:d6:2f:31:f1: 97:9a:45:92:48:2b:a5:fd:cb:72:b7:81:6f:e2:a8:a0:c2:d0: 34:a4:6c:e2:40:c1:6e:62:b5:38:39:01:43:75:a6:34:14:ca: 28:2a:a8:43:b0:e6:bb:2b:57:73:86:ec:b0:ee:0e:0d:7c:17: cf:6e:69:fa:21:88:63:e9:7e:05:3a:45:2d:bc:89:7a:c4:10: 3b:f2:02:fb:d9:4a:06:bd:2b:dc:74:0d:af:9e:0f:c4:b5:ae: 51:f3:18:2e:fb:eb:a1:48:f6:ba:42:c0:d1:61:9c:d5:9f:6a: 54:23:fc:54:67:c1:f6:c1:cb:07:65:bd:4a:ac:a4:63:98:b6: 19:0e:18:91:b6:63:a0:04:14:2a:0b:51:c9:b2:3c:1e:8a:55: 9b:b2:3a:26:a2:97:51:e9:da:3e:8f:da:50:6b:da:ce:c6:26: d6:4b:18:4a:51:a9:bc:01:3f:ce:b8:46:44:ba:0d:31:32:0d: 98:3f:6f:1f:3f:0d:27:ff:cc:c5:13:c2:89:91:ed:d5:30:39: 69:d2:c8:35:b5:85:de:c8:92:7c:63:23:73:e0:93:f7:45:87: ad:c6:f5:a6:04:04:29:88:60:41:13:d6:99:5c:63:c5:c9:7c: 67:b8:06:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF88iRX/gSQ+XhzS/oLUOPXAkBIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx MEU0NDRBMjAeFw0yNjEwMzEwNDQ1MDBaFw0yNjExMDEwNzMyMDBaMDMxMTAvBgNV BAMTKDNDMkU3MUEwNjM4NEZGNzNFM0UwNDgxMjlCQjc3MDNGMUNFN0NFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZw5e60Vo582z0HUXbCp6ia5T 7XwZofgDdeUQaoPr4HUtHRreq3yGZihVAEi+vLcBem9IhZtUNoFzbJw3T3iZannI k7MpYWE/YEs6ro8FJFP3K1nqKVaOTV5OmuAvgpqVQeW2WAAEvJYqXU05cPqVyIRB nFD6PqjMmIziba+6gx2Nmbnf0AUfaEUKA7IX6XBCwxxLg0IPfuvoOpozzlhyqnFt IHbVsC1+Ty4jkoBEglCqPL1DHt/64Llhu2aKH2TX61gvxTJx69Pu9zy7sjTxUk+b 9zXyFsXSpXQUOEWGyCHP5btSJJNtDQa21cCxIz/8hrC+/OUAKTss65wOPY3NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPC5xoGOE/3Pj4EgSm7dwPxznznkwHwYDVR0j BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZyTmQvMS8y ODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADMXrPF/X3kJeuE6xftTWLzHxl5pFkkgrpf3LcreBb+KooMLQNKRs4kDBbmK1 ODkBQ3WmNBTKKCqoQ7DmuytXc4bssO4ODXwXz25p+iGIY+l+BTpFLbyJesQQO/IC +9lKBr0r3HQNr54PxLWuUfMYLvvroUj2ukLA0WGc1Z9qVCP8VGfB9sHLB2W9Sqyk Y5i2GQ4YkbZjoAQUKgtRybI8HopVm7I6JqKXUenaPo/aUGvazsYm1ksYSlGpvAE/ zrhGRLoNMTINmD9vHz8NJ//MxRPCiZHt1TA5adLINbWF3siSfGMjc+CT90WHrcb1 pgQEKYhgQRPWmVxjxcl8Z7gG8Q== -----END CERTIFICATE-----Generated at Sat Oct 31 12:20:09 2026 by rpki-client