Error: rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft File: 82564553AE299B22FAC12CA23483B4453FF22D0A.mft (raw, json) Hash identifier: hGDASoYqN06qaGg++oJtePLQb8riuWSP+SW9YpJrFME= Subject key identifier: D2:FA:97:F8:5E:99:B2:F9:9C:02:B6:C5:5C:F1:25:AE:6F:F1:18:0E Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A Certificate issuer: /CN=82564553AE299B22FAC12CA23483B4453FF22D0A Certificate serial: 3575A31721685460406DEDCAC73E49E3960DF269 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft Manifest number: 04E8 Signing time: Fri 30 Oct 2026 23:06:45 +0000 Manifest this update: Fri 30 Oct 2026 23:01:45 +0000 Manifest next update: Sun 01 Nov 2026 01:05:45 +0000 Files and hashes: 1: 323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (hash: rPKECQmhJgrhlnYz1Hkz1YO+GT3uTQhk8qlOxG/cHvY=) 2: 82564553AE299B22FAC12CA23483B4453FF22D0A.crl (hash: 0ARr49t0xlqMSGeUX+N8Zmt2HmxsQ4WaveWiZHcJAkU=) 3: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (hash: /Ojdaw9jWWMSQk2sBUiYCLAwVgbJtg6gsdZLdRV+m0g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 01:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:75:a3:17:21:68:54:60:40:6d:ed:ca:c7:3e:49:e3:96:0d:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A Validity Not Before: Oct 30 23:01:45 2026 GMT Not After : Nov 1 01:05:45 2026 GMT Subject: CN=D2FA97F85E99B2F99C02B6C55CF125AE6FF1180E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:85:0b:a4:f4:8c:5f:3c:62:47:5f:dd:e2:41: 13:07:af:f8:d1:85:32:24:0a:dd:87:78:e2:5c:dc: 33:9e:72:21:dc:80:57:24:f8:5f:fa:09:2e:21:aa: c1:b4:47:b3:41:ca:52:a3:91:ed:1c:d7:2c:b2:ae: 1f:97:39:2a:e5:b0:15:94:e7:98:3d:97:54:99:61: 29:b2:99:fd:ec:56:2a:fc:6e:86:d8:26:cc:1f:4f: d8:c5:3a:96:e1:e7:b2:97:eb:1a:09:c1:a4:22:f5: 80:51:73:52:a7:a2:ee:c5:1d:76:7f:69:83:4c:75: cd:07:11:c9:35:b5:2e:e1:d2:de:30:44:f6:4c:49: 1b:03:db:20:54:69:61:79:d8:34:7f:80:30:9a:57: 04:a5:6b:27:6f:2b:33:fa:96:4f:7a:45:8a:c3:e3: 2f:b6:2b:1e:f7:f7:f4:28:d2:f0:58:3f:54:0b:80: 72:70:e8:af:7e:48:91:04:4b:15:01:a9:4a:e7:34: fb:dc:59:d5:3c:bd:8e:37:fd:d3:8d:13:64:3e:4f: d7:8c:5f:cb:42:90:64:43:17:32:50:f8:c8:13:a5: 9e:a0:00:7f:3f:40:96:d9:31:db:79:36:fc:d7:70: 14:7a:f7:08:aa:9a:89:5b:65:1d:39:9f:a2:e6:f2: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FA:97:F8:5E:99:B2:F9:9C:02:B6:C5:5C:F1:25:AE:6F:F1:18:0E X509v3 Authority Key Identifier: keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:53:e9:f4:42:97:b6:d7:71:17:dc:26:b2:c3:7f:db:b7:2b: da:33:d6:01:5b:68:c8:fd:9b:aa:0e:38:42:4f:4a:a9:9b:74: ea:f1:ce:fc:f0:ea:2d:57:23:26:9e:eb:60:d2:8a:e6:24:25: 4a:71:31:39:2a:2a:0a:60:4e:e9:07:93:c0:77:1f:9f:b3:59: 48:88:f7:f3:17:af:e4:d4:7a:d6:3a:c9:5c:4a:33:0c:66:81: 8e:f9:eb:6a:a9:d4:16:dc:3c:5a:d5:93:9e:33:44:74:6a:b4: 27:41:c0:56:75:d9:06:02:d9:82:0a:75:ed:7f:01:42:a3:79: a9:30:af:4b:94:b6:54:a6:d0:57:f0:a0:10:d5:58:68:55:d9: 9f:c2:30:a3:22:fb:2f:fd:2d:9f:d8:bb:5d:13:7d:12:87:27: a4:8a:8a:1c:58:37:2b:0c:3e:fb:a8:3e:84:79:8d:bd:26:26: 5a:ee:8a:8e:d2:2e:68:09:72:fb:90:c7:1a:be:01:71:85:86: b0:fe:11:8f:41:dd:ef:08:34:5e:c8:c4:19:28:ab:29:1c:88: 7b:c2:81:43:6e:da:11:ab:bb:8b:c2:d0:14:1e:b9:ad:bb:9f: e1:d5:fa:46:1c:f9:ea:2f:08:24:01:4b:5a:d1:5c:cf:82:af: c2:09:6a:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNXWjFyFoVGBAbe3Kxz5J45YN8mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1NjQ1NTNBRTI5OUIyMkZBQzEyQ0EyMzQ4M0I0NDUz RkYyMkQwQTAeFw0yNjEwMzAyMzAxNDVaFw0yNjExMDEwMTA1NDVaMDMxMTAvBgNV BAMTKEQyRkE5N0Y4NUU5OUIyRjk5QzAyQjZDNTVDRjEyNUFFNkZGMTE4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphQuk9IxfPGJHX93iQRMHr/jR hTIkCt2HeOJc3DOeciHcgFck+F/6CS4hqsG0R7NBylKjke0c1yyyrh+XOSrlsBWU 55g9l1SZYSmymf3sVir8bobYJswfT9jFOpbh57KX6xoJwaQi9YBRc1Knou7FHXZ/ aYNMdc0HEck1tS7h0t4wRPZMSRsD2yBUaWF52DR/gDCaVwSlaydvKzP6lk96RYrD 4y+2Kx739/Qo0vBYP1QLgHJw6K9+SJEESxUBqUrnNPvcWdU8vY43/dONE2Q+T9eM X8tCkGRDFzJQ+MgTpZ6gAH8/QJbZMdt5NvzXcBR69wiqmolbZR05n6Lm8lQlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0vqX+F6ZsvmcArbFXPElrm/xGA4wHwYDVR0j BBgwFoAUglZFU64pmyL6wSyiNIO0RT/yLQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZuN0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25k dWMvMS84MjU2NDU1M0FFMjk5QjIyRkFDMTJDQTIzNDgzQjQ0NTNGRjIyRDBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyNTY0NTUzQUUyOTlCMjJG QUMxMkNBMjM0ODNCNDQ1M0ZGMjJEMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZuN0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25kdWMvMS84 MjU2NDU1M0FFMjk5QjIyRkFDMTJDQTIzNDgzQjQ0NTNGRjIyRDBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB1Pp9EKXttdxF9wmssN/27cr2jPWAVtoyP2bqg44Qk9KqZt06vHO/PDqLVcj Jp7rYNKK5iQlSnExOSoqCmBO6QeTwHcfn7NZSIj38xev5NR61jrJXEozDGaBjvnr aqnUFtw8WtWTnjNEdGq0J0HAVnXZBgLZggp17X8BQqN5qTCvS5S2VKbQV/CgENVY aFXZn8IwoyL7L/0tn9i7XRN9EocnpIqKHFg3Kww++6g+hHmNvSYmWu6KjtIuaAly +5DHGr4BcYWGsP4Rj0Hd7wg0XsjEGSirKRyIe8KBQ27aEau7i8LQFB65rbuf4dX6 Rhz56i8IJAFLWtFcz4Kvwglq9A== -----END CERTIFICATE-----Generated at Sat Oct 31 15:28:42 2026 by rpki-client