Error: rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft File: 4F13601ED15DE77633F89012A7D2AD0E725C8891.mft (raw, json) Hash identifier: RI1/zdAArVB4sTrp02btk4jRsz/3UJY6DIlQPyl+bCE= Subject key identifier: 98:58:6E:05:08:A1:0C:A7:5E:A3:06:E9:6F:DC:C0:B4:7E:8B:44:7B Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91 Certificate issuer: /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891 Certificate serial: 1D78811BA9E237D7A6C22A50CD09D00520BC200D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer Subject info access: rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft Manifest number: 0459 Signing time: Tue 13 Oct 2026 03:09:00 +0000 Manifest this update: Tue 13 Oct 2026 03:04:00 +0000 Manifest next update: Wed 14 Oct 2026 04:32:00 +0000 Files and hashes: 1: 323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (hash: eT8k/oSvy6Wo8pOI25vF2CnpgQx5rZEFpajWLaENu2Q=) 2: 4F13601ED15DE77633F89012A7D2AD0E725C8891.crl (hash: DzmdbGd5aSb09jIt1k6DO2Zh5fDWs7OqDcAazbU42M8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 04:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:78:81:1b:a9:e2:37:d7:a6:c2:2a:50:cd:09:d0:05:20:bc:20:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891 Validity Not Before: Oct 13 03:04:00 2026 GMT Not After : Oct 14 04:32:00 2026 GMT Subject: CN=98586E0508A10CA75EA306E96FDCC0B47E8B447B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:7c:fd:a2:1d:b5:35:65:5a:48:b6:36:c0: dd:e8:f6:82:6c:9e:bb:b1:e4:15:d5:f0:cc:c7:f3: 3b:77:bc:86:10:45:2a:50:91:ab:0d:30:7d:9f:32: 63:18:3d:b2:f6:88:43:fc:a4:99:23:38:b1:a1:fc: eb:97:89:f0:91:1b:14:55:cc:50:d3:64:ef:c7:af: 14:32:c8:71:38:4d:d3:c7:49:a1:85:20:53:67:54: ab:91:f9:21:7f:db:2c:3d:94:a6:08:8a:66:72:5f: 33:f2:07:d8:64:ed:1b:96:95:b7:f6:85:7a:d9:0d: ad:97:38:f6:95:f4:dc:31:30:f3:65:cc:62:ce:a7: f0:93:d2:b9:25:41:ef:c6:6a:45:40:73:5f:ee:99: 2d:41:01:10:1c:ec:6f:04:f2:d0:48:bc:dc:99:0a: fa:f6:5a:f6:ea:eb:5e:b8:e1:83:fc:61:14:f0:0a: f8:49:04:60:0e:5f:33:92:c5:d6:9d:b6:81:d8:01: 82:57:fb:d2:be:81:c2:22:76:3d:50:71:40:34:78: a7:fc:ed:f0:ba:42:d7:f7:f7:b7:7b:c2:ff:46:be: e1:3e:6e:b9:0a:09:9b:91:54:df:5b:23:4f:11:69: 54:13:e7:7a:51:bf:bf:85:eb:e3:ed:f7:8b:e4:4a: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:6E:05:08:A1:0C:A7:5E:A3:06:E9:6F:DC:C0:B4:7E:8B:44:7B X509v3 Authority Key Identifier: keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:36:19:5b:08:68:da:d5:98:33:1f:1d:bd:e4:b7:48:9a: cf:01:41:4a:7a:d1:05:83:88:fd:9d:d3:d8:6b:26:56:be:99: 77:2b:76:66:1a:0c:d3:d6:be:90:0f:41:42:ac:fa:da:4e:c4: 72:53:91:42:41:f2:1c:5b:45:8a:94:88:4f:cd:33:b1:15:74: 2f:b7:e7:d4:44:49:99:a6:2e:e9:3f:46:29:72:6b:cc:e1:98: d3:c9:5c:b7:20:8d:b5:4a:81:9e:cc:f4:4e:a3:fb:37:92:8d: d4:9e:8e:4b:de:d5:ca:29:1e:a6:10:2a:a3:db:af:17:7f:ae: 76:9b:47:62:4f:20:f5:cf:74:45:0e:1e:d2:3c:65:29:d8:42: b1:a0:32:0d:08:f5:6f:5e:b5:69:01:87:a0:a3:c1:a3:3d:b7: 91:c2:df:70:51:77:d5:65:55:04:ea:95:ff:53:29:55:cc:e6: f5:f9:6f:46:29:f2:4e:a6:9e:3a:84:f3:f5:0c:00:7c:45:25: 98:d3:ed:34:4a:30:bd:dc:dc:ba:d3:f8:1c:ed:23:de:9a:a5: f6:82:1a:0e:f2:92:e4:8d:8b:cc:01:ad:e9:ae:8f:82:d0:b1: 8b:91:72:e4:f5:c7:f3:1c:93:a7:7c:0b:98:da:28:82:e1:a5: d9:62:6c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHXiBG6niN9emwipQzQnQBSC8IA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYxMzYwMUVEMTVERTc3NjMzRjg5MDEyQTdEMkFEMEU3 MjVDODg5MTAeFw0yNjEwMTMwMzA0MDBaFw0yNjEwMTQwNDMyMDBaMDMxMTAvBgNV BAMTKDk4NTg2RTA1MDhBMTBDQTc1RUEzMDZFOTZGRENDMEI0N0U4QjQ0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCXz9oh21NWVaSLY2wN3o9oJs nrux5BXV8MzH8zt3vIYQRSpQkasNMH2fMmMYPbL2iEP8pJkjOLGh/OuXifCRGxRV zFDTZO/HrxQyyHE4TdPHSaGFIFNnVKuR+SF/2yw9lKYIimZyXzPyB9hk7RuWlbf2 hXrZDa2XOPaV9NwxMPNlzGLOp/CT0rklQe/GakVAc1/umS1BARAc7G8E8tBIvNyZ Cvr2Wvbq61644YP8YRTwCvhJBGAOXzOSxdadtoHYAYJX+9K+gcIidj1QcUA0eKf8 7fC6Qtf397d7wv9GvuE+brkKCZuRVN9bI08RaVQT53pRv7+F6+Pt94vkSh/tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmFhuBQihDKdeowbpb9zAtH6LRHswHwYDVR0j BBgwFoAUTxNgHtFd53Yz+JASp9KtDnJciJEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlpVVUZ2dmZ6THJOblpuTjFNaGVOMkJwemtiWVhKOThtYnVnWmpFR2pC Z1IvMC80RjEzNjAxRUQxNURFNzc2MzNGODkwMTJBN0QyQUQwRTcyNUM4ODkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTM2MDFFRDE1REU3NzYz M0Y4OTAxMkE3RDJBRDBFNzI1Qzg4OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlpVVUZ2dmZ6THJOblpuTjFNaGVOMkJwemtiWVhKOThtYnVnWmpFR2pCZ1IvMC80 RjEzNjAxRUQxNURFNzc2MzNGODkwMTJBN0QyQUQwRTcyNUM4ODkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHE2GVsIaNrVmDMfHb3kt0iazwFBSnrRBYOI/Z3T2GsmVr6Zdyt2ZhoM09a+ kA9BQqz62k7EclORQkHyHFtFipSIT80zsRV0L7fn1ERJmaYu6T9GKXJrzOGY08lc tyCNtUqBnsz0TqP7N5KN1J6OS97VyikephAqo9uvF3+udptHYk8g9c90RQ4e0jxl KdhCsaAyDQj1b161aQGHoKPBoz23kcLfcFF31WVVBOqV/1MpVczm9flvRinyTqae OoTz9QwAfEUlmNPtNEowvdzcutP4HO0j3pql9oIaDvKS5I2LzAGt6a6PgtCxi5Fy 5PXH8xyTp3wLmNooguGl2WJssA== -----END CERTIFICATE-----Generated at Tue Oct 13 09:23:12 2026 by rpki-client