
Error: rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
File: D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft (raw, json)
Hash identifier: oOOtwOSuKIagNwZnhMKYRxYcYNbwGSdcFzmysbG02f4=
Subject key identifier: 10:99:97:01:18:30:7F:F9:21:CB:8A:3E:0A:87:3F:FD:86:CD:B0:E8
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Certificate issuer: /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial: 630B8C2B4F150723330F8940498331433DCBCF85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
Manifest number: 04E7
Signing time: Wed 28 Oct 2026 06:05:48 +0000
Manifest this update: Wed 28 Oct 2026 06:00:48 +0000
Manifest next update: Thu 29 Oct 2026 06:44:48 +0000
Files and hashes: 1: 3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (hash: i1JfbygWSHq9QMhPwV0N2EyH8dC9ecdZydnFg+k4fmY=)
2: 3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa (hash: LS3ggZYhLUkmCNXkiOi7epEVc90WyfbjInAFSt5eAZE=)
3: 3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa (hash: df2PrxjXK3CFv/xR4wO223F51fO/kqbjh3dIn5eH8ew=)
4: 323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa (hash: XjooNNlSQgiglmY+X6ccfMzWiktFEZW1v3jPWi0KwT4=)
5: 3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa (hash: w2RJWst/V96QLHdf3OvOcc7LzOwE0kL/84BOw+JHTnY=)
6: 3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (hash: uIatVJTA6JNImnzSlVdIeQgNDErRdRkwMz4gCwNLA5g=)
7: 3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa (hash: tQXNitmGeAMgOOGQB3ec1heHIIFTsXEMkt084dnk3c0=)
8: 3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (hash: HIMR8299sImbGEhWgoK4tnpERYMib9Wd7IHIk7qtkqI=)
9: 3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (hash: TGrfzvEPH/KDtpDUD7qXJSWxp0NISABDPGuPeJAyIH4=)
10: 3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa (hash: feAr7mzmLoZ67SX8ixBZsFYxa5jtsaLRsLiayuFR4Iw=)
11: 3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa (hash: 4hmPv1ugxyvlVTK6l2bvvOQlHfeMtLtPdTmMda6NxGE=)
12: 3133312e3130302e3137322e302f32342d3234203d3e203232313737.roa (hash: pqt+C/C+kluvr+JT8MJ6d/qhriCFbH45W/2AEiNZs3E=)
13: D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl (hash: tAood+j9nbd5zOlmJW2T8HeqXUNlSqMfnw1E/Sbsb4M=)
14: 3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa (hash: a7RfiYF9zwob9+uSUJt+vTzhAqsLL4WlYxkM+y7K5BQ=)
15: 3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa (hash: ibyk1oY+gUhcgIJ9i3FXh1S+gw4Qe7hxL5IeQeRA6+Y=)
16: 3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa (hash: 8HB+zauS7rg18e8AsAz+SJZCtcokz5uwCwQSZ2d8ucY=)
17: 323830343a3533343a3a2f33322d313238203d3e203232313737.roa (hash: xOjWNHdlvC4aWCpaMTim+rUG/eRaBOhfA8dU4+KmaTc=)
18: 3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa (hash: +0goFd/LMurWFfdExFrOygGpSI08lqGkAsuLFaWRTR4=)
19: 3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa (hash: Cia4KlGENw8q7BDbBpx1Esf9u1qDpG6xptoX1ZfnAR8=)
20: 3138392e35312e302e302f32302d3234203d3e203232313737.roa (hash: MSpmwvI8koTCZN2TB/gPDH1aKqMHmW0jId9F7ZVss/M=)
21: 3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa (hash: rKLKrrc6pgIewnHgAINBuwuZA+NuByDSZUrz3uP2ZKc=)
22: 323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa (hash: 09+NUz+9frP/8kdDf1nf1Vcs/0LDihk1Z0P6kBHO1ms=)
23: 3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa (hash: 4aUXcP8FBY9Zo9u3sryw5c1t8G1ptZr9BuzKMc7lsgA=)
24: 3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (hash: 0+CRX28ivABD7/03XOYQjt/LmyhXhinDYUrbWgzBU/4=)
25: 3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (hash: pDoo1WhOG32kg0PuB5rXZ49eoVIgpk01MJ2NFJEG98g=)
26: 3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa (hash: 3yjUNLSvZSLgjHTVjtOuqU/WAQEJAiqz85SsRf+lMXc=)
27: 3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa (hash: v9qbYBbhHMIjxA/n1XkVL9g+IEiwJRsijmZjf6laD7M=)
28: 3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (hash: JmMWAEsSlJ6B/1oaGwfBanW5pbXDn/ENy/M7pcZVNgM=)
29: 3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa (hash: 8a/TBMAVgwNlIJNYx9eWDBjjchBDqS5Cv2rlk04NSiI=)
30: 3133312e3130302e3137342e302f32342d3234203d3e203232313737.roa (hash: G8yw4ZJifCky4G4PbcnvxeUQr+RiwGNBM9VDzsChI0E=)
31: 3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (hash: SwNBp0ka5qIjKgJoDC/Io4eBTQDsLpDy2h6TijNhO/w=)
32: 3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa (hash: MXVFLm1qqOz7PH7jNRUzcLTCLPx++pJBfxQHuONGdEE=)
33: 3230302e3136322e3133382e302f32342d3234203d3e203232313737.roa (hash: lH2fqT4N3xDjFp8PjOoXFMu6kkBt6nuEAEd7is+iPj0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 06:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0b:8c:2b:4f:15:07:23:33:0f:89:40:49:83:31:43:3d:cb:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Validity
Not Before: Oct 28 06:00:48 2026 GMT
Not After : Oct 29 06:44:48 2026 GMT
Subject: CN=1099970118307FF921CB8A3E0A873FFD86CDB0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:29:53:48:52:24:dd:cd:b1:69:b8:9a:63:
91:92:cb:2d:b2:70:56:27:5b:90:f4:19:56:58:a0:
d0:f2:38:ee:dd:08:53:89:5b:6a:be:f5:39:b3:b0:
a4:70:3d:df:1f:f4:4b:f3:f1:12:49:0f:28:87:f5:
4f:bf:4e:ab:55:72:30:9e:d7:e9:5b:2e:40:20:6b:
eb:be:74:e9:9b:db:97:31:38:f2:0c:c3:44:a2:cc:
50:19:ed:40:77:7f:46:13:da:87:2a:0c:76:8b:46:
a7:6d:fd:82:21:f5:57:8d:79:d7:ba:76:99:b3:08:
9f:02:11:29:e7:9f:25:e1:e8:24:2e:37:c7:3e:76:
67:75:a9:c2:c5:f9:f3:80:42:e9:60:cb:38:9e:52:
92:d7:2b:6f:c9:e0:2c:77:2a:c0:02:66:3b:b8:86:
21:95:44:26:d6:cc:82:63:22:12:d9:c6:ad:a5:ca:
70:06:54:45:26:0b:97:c9:94:27:ec:d3:05:24:ad:
31:53:18:cc:73:38:e9:60:36:15:f9:24:75:9a:0c:
2e:77:a8:1f:42:49:54:d0:3e:b2:02:60:34:ef:bf:
c3:b7:70:72:78:06:68:94:df:ed:56:b2:49:e9:a2:
3f:d4:af:b9:3a:1d:7c:96:a9:03:ce:15:26:f2:b7:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:97:01:18:30:7F:F9:21:CB:8A:3E:0A:87:3F:FD:86:CD:B0:E8
X509v3 Authority Key Identifier:
keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:80:73:32:f3:58:4d:e6:94:7e:e6:65:7f:a7:d9:5e:4a:6a:
0e:6d:d1:3c:88:16:bc:8c:df:8b:fd:ef:a7:84:85:45:90:78:
6e:65:76:89:73:0f:1d:35:1e:86:61:9e:87:6f:2b:0f:a7:21:
ee:0b:cc:c4:53:31:91:06:4d:8e:a5:ef:73:52:10:16:2d:cf:
aa:26:c8:0c:63:f1:64:08:d9:96:05:4c:4a:69:f7:37:07:3b:
ba:d8:24:9d:75:50:20:c8:32:35:6f:96:54:2b:70:b2:c5:7b:
43:1d:79:de:9c:27:6b:c4:13:88:c3:21:61:1b:9c:f8:1e:dc:
cd:c9:59:b2:96:7a:d8:1b:87:a1:0c:84:8c:ce:c6:37:3f:ff:
47:40:68:af:c3:2b:74:c0:09:38:5b:13:c7:61:fb:bd:e2:d3:
c6:93:1b:84:6e:9b:08:9f:31:30:8a:64:a6:5a:f2:36:6d:96:
97:7f:c6:83:95:c8:68:ac:e8:8b:50:17:76:1c:26:27:f9:dd:
ac:b4:4f:d6:2b:a1:31:51:3c:05:85:c7:cf:ae:47:64:eb:bb:
d4:0b:b2:36:d1:f2:3a:df:cf:d0:1c:3a:85:56:26:29:5d:cf:
c5:55:af:5d:61:27:ee:e4:99:58:23:c3:8d:b1:9d:b9:c3:ce:
32:83:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:52:58 2026 by rpki-client