Error: rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft File: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft (raw, json) Hash identifier: /PkpR3yuuBgI5l2bbKaRohJNwYEAUtpBrjMTgaUo+W4= Subject key identifier: C6:67:DE:17:16:86:FD:98:F9:BF:4F:21:BA:30:08:51:F7:D5:E7:33 Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Certificate serial: 03CCF0DE620A9FCD07861BB780EBC94D257E7F9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft Manifest number: 01F0 Signing time: Thu 29 Oct 2026 04:00:00 +0000 Manifest this update: Thu 29 Oct 2026 03:55:00 +0000 Manifest next update: Fri 30 Oct 2026 07:21:00 +0000 Files and hashes: 1: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: GZOsgahP8PTPbhQiJTpZoP7lqgu/WiOFnN1SRDtRs00=) 2: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: a01Q2lL2SiG2UZZLO1cvgx+kike9mwvW2v220F3GjF4=) 3: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: g4EekBnIgUd2kHdQkG9RrEUT3cyKDeIl5n4xw5Hj8RI=) 4: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: uodQ4vKNqXVwf8rifevxi71R6pQpF2HFi1GAfxm7NB4=) 5: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: LLufeGc6PP57xbNJT/x0T1V0sVd0Sk/QIL9ih7R8018=) 6: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: WyDE4YnymIvdb6vv+TgAyq6cGRuICpvifampnyIMrlg=) 7: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl (hash: x6Y2laWK+djsh6Ust1UewhEdc/UwDuf/+QG+SkEeWKg=) 8: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: 53tMZd1qqEGZmWOuKZf8mdGlMX9v1psmEIU9uGBPzbM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 07:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cc:f0:de:62:0a:9f:cd:07:86:1b:b7:80:eb:c9:4d:25:7e:7f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Validity Not Before: Oct 29 03:55:00 2026 GMT Not After : Oct 30 07:21:00 2026 GMT Subject: CN=C667DE171686FD98F9BF4F21BA300851F7D5E733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:73:2e:9c:b4:74:f0:43:c2:4b:3e:0c:f0: f2:9c:50:e8:50:e2:0f:04:70:27:1c:bb:ba:44:8d: f9:cc:36:53:93:5e:97:70:0b:e6:16:80:56:9f:a8: c8:3a:66:2b:cc:8a:f0:3f:42:fd:1e:ed:e9:34:00: 43:2d:21:b0:fb:3d:9b:c3:e7:2d:45:3a:f3:85:55: 85:2c:10:47:97:d2:eb:d8:e8:5d:fe:62:05:c0:92: e8:3c:06:da:9f:25:cb:05:2a:06:de:49:5f:05:3b: ba:95:73:51:9a:7f:7f:de:04:9d:71:43:89:01:2b: d7:d3:54:82:5a:5b:90:17:4d:82:08:bc:67:12:59: 32:90:d4:54:7f:dc:b5:dc:55:a7:7a:14:98:ad:42: 39:b2:c4:8f:f7:22:3e:03:71:4b:84:cc:bd:58:3c: 4d:79:dd:0f:db:ab:2f:47:2c:a7:ae:e3:7e:7d:67: 07:49:aa:31:46:1c:9a:4b:56:e7:35:fb:ec:a3:11: ad:94:84:57:02:6a:11:59:06:04:35:d9:40:13:8f: 64:5c:d7:dd:af:ba:5e:e4:a0:e5:8e:83:d2:ec:38: 0b:7d:bf:a6:b1:cf:71:9a:17:6b:28:e3:29:34:58: 20:33:4d:98:5c:6f:1a:92:d1:b6:bf:dc:15:15:3c: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:DE:17:16:86:FD:98:F9:BF:4F:21:BA:30:08:51:F7:D5:E7:33 X509v3 Authority Key Identifier: keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:88:bc:cc:80:8a:11:ea:27:7e:8e:7c:7b:5c:44:27:8c:b8: 2d:8b:59:25:97:2d:76:47:eb:05:d9:62:84:2d:f1:f7:ac:ff: ac:3f:e0:e0:e9:7a:1f:39:b1:88:43:74:67:73:e8:e2:b2:20: a9:93:6d:88:b1:e1:5e:21:45:1f:f8:b8:c6:da:2b:c6:14:63: 06:cc:e0:cd:d7:8b:ed:02:81:5d:a4:90:31:43:db:3c:bb:1d: 4a:27:ee:e3:d5:b5:7f:b8:0a:39:ff:c8:e0:50:e0:26:19:88: dd:69:ba:92:9a:f0:21:cd:f1:51:a1:dd:19:a2:07:3e:7f:89: e6:2d:bb:65:ff:57:4d:1d:f5:32:ad:49:8a:df:02:a9:43:2d: 40:23:a5:77:b4:ea:8e:2d:0f:56:0d:c7:6c:8f:57:0e:d0:52: f5:cd:b2:34:4d:1a:a9:d6:f9:98:47:e1:1c:18:d3:03:b3:43: 5b:51:10:a7:0c:e4:31:cc:06:1f:66:01:3f:a7:51:32:0a:06: f9:c4:ad:fc:91:cf:e7:da:76:9d:d1:90:4e:e2:8f:a4:b9:1a: b3:01:98:49:d2:29:e7:a6:52:b4:db:cb:e9:a2:2d:ad:57:10: 05:c1:df:83:11:f4:b9:10:a4:46:62:73:df:a3:20:00:fe:10: 95:7d:b6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA8zw3mIKn80Hhhu3gOvJTSV+f5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4 NzY1NzlEODAeFw0yNjEwMjkwMzU1MDBaFw0yNjEwMzAwNzIxMDBaMDMxMTAvBgNV BAMTKEM2NjdERTE3MTY4NkZEOThGOUJGNEYyMUJBMzAwODUxRjdENUU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdnMunLR08EPCSz4M8PKcUOhQ 4g8EcCccu7pEjfnMNlOTXpdwC+YWgFafqMg6ZivMivA/Qv0e7ek0AEMtIbD7PZvD 5y1FOvOFVYUsEEeX0uvY6F3+YgXAkug8BtqfJcsFKgbeSV8FO7qVc1Gaf3/eBJ1x Q4kBK9fTVIJaW5AXTYIIvGcSWTKQ1FR/3LXcVad6FJitQjmyxI/3Ij4DcUuEzL1Y PE153Q/bqy9HLKeu4359ZwdJqjFGHJpLVuc1++yjEa2UhFcCahFZBgQ12UATj2Rc 192vul7koOWOg9LsOAt9v6axz3GaF2so4yk0WCAzTZhcbxqS0ba/3BUVPN0BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxmfeFxaG/Zj5v08hujAIUffV5zMwHwYDVR0j BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFjRXUvMC80 M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEIi8zICKEeonfo58e1xEJ4y4LYtZJZctdkfrBdlihC3x96z/rD/g4Ol6Hzmx iEN0Z3Po4rIgqZNtiLHhXiFFH/i4xtorxhRjBszgzdeL7QKBXaSQMUPbPLsdSifu 49W1f7gKOf/I4FDgJhmI3Wm6kprwIc3xUaHdGaIHPn+J5i27Zf9XTR31Mq1Jit8C qUMtQCOld7Tqji0PVg3HbI9XDtBS9c2yNE0aqdb5mEfhHBjTA7NDW1EQpwzkMcwG H2YBP6dRMgoG+cSt/JHP59p2ndGQTuKPpLkaswGYSdIp56ZStNvL6aItrVcQBcHf gxH0uRCkRmJz36MgAP4QlX229Q== -----END CERTIFICATE-----Generated at Thu Oct 29 20:38:38 2026 by rpki-client