Error: rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft File: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft (raw, json) Hash identifier: UFpvccFZDi/YVmKCxOVJF+hDNMX5i2bIReLqntLNsaA= Subject key identifier: 13:A4:49:C9:F8:09:DF:35:B7:46:AB:0F:DD:D8:6D:D3:55:0B:E6:5B Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Certificate serial: 4A8BD052456FFF4B489224A060CFF4BADAFC8E4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft Manifest number: 01EF Signing time: Wed 28 Oct 2026 09:30:00 +0000 Manifest this update: Wed 28 Oct 2026 09:25:00 +0000 Manifest next update: Thu 29 Oct 2026 11:52:00 +0000 Files and hashes: 1: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: 53tMZd1qqEGZmWOuKZf8mdGlMX9v1psmEIU9uGBPzbM=) 2: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: LLufeGc6PP57xbNJT/x0T1V0sVd0Sk/QIL9ih7R8018=) 3: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: g4EekBnIgUd2kHdQkG9RrEUT3cyKDeIl5n4xw5Hj8RI=) 4: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl (hash: vXr08vt+r6ObERNQhuMcqdjRNTzTjLmK+sgw2U/ooiw=) 5: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: GZOsgahP8PTPbhQiJTpZoP7lqgu/WiOFnN1SRDtRs00=) 6: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: a01Q2lL2SiG2UZZLO1cvgx+kike9mwvW2v220F3GjF4=) 7: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: WyDE4YnymIvdb6vv+TgAyq6cGRuICpvifampnyIMrlg=) 8: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: uodQ4vKNqXVwf8rifevxi71R6pQpF2HFi1GAfxm7NB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 11:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8b:d0:52:45:6f:ff:4b:48:92:24:a0:60:cf:f4:ba:da:fc:8e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Validity Not Before: Oct 28 09:25:00 2026 GMT Not After : Oct 29 11:52:00 2026 GMT Subject: CN=13A449C9F809DF35B746AB0FDDD86DD3550BE65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:b0:e3:1e:88:c4:ee:dd:ea:62:8b:f8:32: bc:4c:e6:60:f0:0b:ec:9d:20:f8:f6:5d:6c:41:27: 4e:db:28:01:85:6c:35:86:75:a8:00:f3:d2:54:86: f3:eb:af:6e:d3:7d:78:57:20:6e:c8:2e:a4:85:b6: 83:a6:ac:f0:8e:ec:4a:2e:ae:14:65:bb:80:3a:3a: 28:64:34:b8:fa:e7:0c:03:5d:c2:5b:0b:56:17:46: d8:a6:25:73:67:43:96:fd:5d:3e:ca:b9:82:e9:b7: b3:a3:7a:b6:06:95:7a:9d:7c:89:e9:2f:2f:f9:46: 0e:21:3e:73:4c:e4:6a:17:1f:d9:63:1e:d0:07:81: 68:6a:6b:6d:67:ad:d1:02:09:15:e4:6d:d5:32:2c: ee:07:6d:3d:81:e4:76:15:5a:c0:cd:e7:b6:14:cd: 2f:f1:4e:5e:b9:d1:1c:86:70:37:f2:5b:69:92:9b: c6:e7:5c:67:cb:e8:a8:eb:23:d4:b1:41:11:0b:b5: f8:5e:dd:42:8e:47:a6:62:9c:e1:a4:e5:62:84:9f: 90:08:cc:1d:06:08:07:69:48:b2:67:1a:ca:04:89: da:0f:95:5a:e6:81:36:0c:98:d9:5d:ae:00:ed:91: 92:88:ab:b1:74:a2:fe:71:17:7c:34:63:c3:72:90: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A4:49:C9:F8:09:DF:35:B7:46:AB:0F:DD:D8:6D:D3:55:0B:E6:5B X509v3 Authority Key Identifier: keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:d3:45:96:45:0a:8c:0d:73:0c:ce:b9:bb:76:2f:93:4a: 6b:55:84:49:9b:a2:54:5b:49:33:a2:fe:40:71:2b:3c:ee:3d: 6d:24:cd:61:36:36:ec:e7:bc:c4:ce:99:3b:45:7e:4d:0e:a3: f4:a9:ac:d1:c2:6e:29:b7:bc:32:67:bb:44:7e:ed:a3:b8:8b: 8a:44:ff:e9:62:b1:a1:83:f5:21:1a:43:26:d7:b1:5a:56:0b: 29:66:60:30:c2:fd:58:bb:08:dd:ab:33:13:17:55:2a:46:ce: eb:d8:5b:5a:e6:ea:ee:fc:cc:77:9c:29:ef:c3:bd:02:0c:41: 79:5b:d8:d2:c6:01:bc:0c:19:7b:7f:24:d3:8d:17:e4:41:3f: 8c:20:e0:ae:c9:e5:b3:c5:18:29:ae:e5:2e:1c:af:e2:60:2c: 4f:ac:bc:a6:f8:bd:93:12:67:e6:80:f8:ff:e8:fc:1d:16:db: f3:5c:77:9a:ef:8b:13:95:2a:3d:5c:d6:8f:39:92:6b:c6:48: cf:ac:72:c1:78:86:42:9e:73:31:da:bd:fc:5f:ae:bb:ae:79: 71:d7:8b:07:ba:36:e6:5c:35:34:37:8e:ca:a0:51:34:a8:3f: 90:32:f3:70:b2:da:f1:da:68:28:d3:57:c2:b6:70:16:ed:b7: 9c:58:64:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSovQUkVv/0tIkiSgYM/0utr8jk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4 NzY1NzlEODAeFw0yNjEwMjgwOTI1MDBaFw0yNjEwMjkxMTUyMDBaMDMxMTAvBgNV BAMTKDEzQTQ0OUM5RjgwOURGMzVCNzQ2QUIwRkRERDg2REQzNTUwQkU2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuorDjHojE7t3qYov4MrxM5mDw C+ydIPj2XWxBJ07bKAGFbDWGdagA89JUhvPrr27TfXhXIG7ILqSFtoOmrPCO7Eou rhRlu4A6OihkNLj65wwDXcJbC1YXRtimJXNnQ5b9XT7KuYLpt7OjerYGlXqdfInp Ly/5Rg4hPnNM5GoXH9ljHtAHgWhqa21nrdECCRXkbdUyLO4HbT2B5HYVWsDN57YU zS/xTl650RyGcDfyW2mSm8bnXGfL6KjrI9SxQRELtfhe3UKOR6ZinOGk5WKEn5AI zB0GCAdpSLJnGsoEidoPlVrmgTYMmNldrgDtkZKIq7F0ov5xF3w0Y8NykC4BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE6RJyfgJ3zW3RqsP3dht01UL5lswHwYDVR0j BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFjRXUvMC80 M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkcTTRZZFCowNcwzOubt2L5NKa1WESZuiVFtJM6L+QHErPO49bSTNYTY27Oe8 xM6ZO0V+TQ6j9Kms0cJuKbe8Mme7RH7to7iLikT/6WKxoYP1IRpDJtexWlYLKWZg MML9WLsI3aszExdVKkbO69hbWubq7vzMd5wp78O9AgxBeVvY0sYBvAwZe38k040X 5EE/jCDgrsnls8UYKa7lLhyv4mAsT6y8pvi9kxJn5oD4/+j8HRbb81x3mu+LE5Uq PVzWjzmSa8ZIz6xywXiGQp5zMdq9/F+uu655cdeLB7o25lw1NDeOyqBRNKg/kDLz cLLa8dpoKNNXwrZwFu23nFhkgw== -----END CERTIFICATE-----Generated at Wed Oct 28 18:30:24 2026 by rpki-client