Error: rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft File: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft (raw, json) Hash identifier: abvKOh6Vsd8RxiG67U5/BGK+ULlpWIwV69S1Mh2bXxM= Subject key identifier: 55:9E:AB:8B:3C:6D:3B:20:B5:81:D9:B2:18:91:C6:F1:9B:42:11:89 Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Certificate serial: 5FE681C05CA9A90FB8E0A3A4D0DB7A8C0D3C4F16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft Manifest number: 0198 Signing time: Mon 24 Aug 2026 07:50:00 +0000 Manifest this update: Mon 24 Aug 2026 07:45:00 +0000 Manifest next update: Tue 25 Aug 2026 10:07:00 +0000 Files and hashes: 1: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: htt8/wfW6Hxe+9jIDzOcmBE4SC+NwwnFzJbq7+OCYFE=) 2: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: ZhFhABfoMVGkxDSgbxcGwBkoncabPhBqubYQ1lTPGPc=) 3: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: 4V+6bYZM6miTcjX4cUxwwTV04DPj178N71VFyeduAls=) 4: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: 2Oe95y6H4KTa4uJ/WvYOY5900aXdCTqijgnRLZUWeHw=) 5: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: QHEst9KOaGTCe++2DSDc7BnCEcRJHgpOE3KiiqgEcZo=) 6: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: Jfp73BJ+v/xetbveN5mHCXdfPQOPKlBItCea9bLVPSQ=) 7: 43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl (hash: 2baEAJkGDUsKTvzPGpWmCIEWAB29+rgB07QAvQyAlcY=) 8: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: uCF/NQdsS1kJnzmC+uhdurLB+o61bwvge8YWOMYv/TI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 10:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e6:81:c0:5c:a9:a9:0f:b8:e0:a3:a4:d0:db:7a:8c:0d:3c:4f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Validity Not Before: Aug 24 07:45:00 2026 GMT Not After : Aug 25 10:07:00 2026 GMT Subject: CN=559EAB8B3C6D3B20B581D9B21891C6F19B421189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:64:89:58:50:a2:3e:c9:c5:dd:05:ef:0b: dc:48:e8:f7:c0:15:e4:f6:1f:7f:83:ae:12:e8:30: 21:54:07:c2:85:74:c8:69:7b:41:34:b3:29:c3:cb: 98:09:3d:cf:6e:a1:79:cc:24:9b:de:51:ae:6d:48: 75:36:69:ad:49:44:32:53:c2:4c:b1:98:ae:c9:fd: 39:50:67:87:64:93:f8:16:4a:f2:29:6a:0a:6b:03: 91:0d:6f:6b:fb:23:c1:f7:15:6c:d0:ab:11:25:9e: 72:3b:70:fe:d5:e4:0d:32:36:14:ac:d1:05:6b:c9: 1c:fd:cc:f7:e8:c0:5f:2e:08:52:e0:6b:28:8d:24: 57:96:43:67:e5:a9:c5:05:2b:73:a8:00:16:e8:24: 4a:80:ca:1e:84:bd:41:a7:97:b1:48:44:b7:6e:7b: a1:72:26:be:42:20:68:43:3f:86:6e:d2:54:79:73: 0a:9d:a1:fc:75:82:c5:5d:f2:0c:93:af:2a:3c:1b: f3:14:1a:61:46:ed:b2:40:f0:ed:22:2c:e0:fe:f1: 2f:b2:d0:3a:d7:37:18:42:7b:5c:d2:2a:b5:53:b0: 54:bc:d1:45:6b:6d:44:20:b4:05:4e:4c:34:f9:dc: ff:be:f6:da:91:1a:90:62:a3:80:13:4c:6b:2d:4c: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:AB:8B:3C:6D:3B:20:B5:81:D9:B2:18:91:C6:F1:9B:42:11:89 X509v3 Authority Key Identifier: keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c8:94:70:48:8d:f4:a7:7e:6c:3a:7a:79:22:a6:d4:eb:10: 69:d2:6d:8c:f9:5e:e8:43:af:b4:0a:8d:56:83:68:dd:ff:e7: 37:d1:c8:e9:22:56:df:77:89:08:88:33:34:5a:91:b6:35:f7: 35:de:a9:92:b9:5a:a8:d3:53:c4:f9:8f:be:0c:64:98:22:77: ae:9e:47:85:ee:26:2a:94:13:3f:a3:cc:28:94:d1:46:c6:4d: 1c:3b:d6:89:82:16:d9:32:0b:9b:5c:e4:70:1b:d6:5c:1a:7d: aa:c1:dc:ac:a4:5c:49:07:a3:14:95:89:d9:00:fc:6e:88:31: 75:fe:02:8b:9e:d7:b5:36:b3:ca:ef:86:1a:cc:b7:3d:8a:ba: e4:05:97:f0:4b:80:1b:3f:dd:86:d3:57:38:8e:dd:d4:cb:3e: dc:c4:be:10:6d:e3:03:49:1f:bf:77:f0:17:f8:84:31:5d:b3: 95:0c:df:d1:cd:3d:7a:fc:38:a8:92:bd:83:b0:03:e9:69:8b: a6:fd:67:52:6f:fb:2c:33:dd:ad:88:74:ed:06:ff:40:9e:cf: be:36:83:3f:fd:da:2c:e2:6e:b6:d1:9b:67:86:ea:a2:9a:64: 73:cf:4a:f0:51:6a:81:83:5d:62:8e:20:2b:23:19:4c:87:72: 2f:9f:8d:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX+aBwFypqQ+44KOk0Nt6jA08TxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4 NzY1NzlEODAeFw0yNjA4MjQwNzQ1MDBaFw0yNjA4MjUxMDA3MDBaMDMxMTAvBgNV BAMTKDU1OUVBQjhCM0M2RDNCMjBCNTgxRDlCMjE4OTFDNkYxOUI0MjExODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+2SJWFCiPsnF3QXvC9xI6PfA FeT2H3+DrhLoMCFUB8KFdMhpe0E0synDy5gJPc9uoXnMJJveUa5tSHU2aa1JRDJT wkyxmK7J/TlQZ4dkk/gWSvIpagprA5ENb2v7I8H3FWzQqxElnnI7cP7V5A0yNhSs 0QVryRz9zPfowF8uCFLgayiNJFeWQ2flqcUFK3OoABboJEqAyh6EvUGnl7FIRLdu e6FyJr5CIGhDP4Zu0lR5cwqdofx1gsVd8gyTryo8G/MUGmFG7bJA8O0iLOD+8S+y 0DrXNxhCe1zSKrVTsFS80UVrbUQgtAVOTDT53P++9tqRGpBio4ATTGstTC7VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVZ6rizxtOyC1gdmyGJHG8ZtCEYkwHwYDVR0j BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFjRXUvMC80 M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC8iUcEiN9Kd+bDp6eSKm1OsQadJtjPle6EOvtAqNVoNo3f/nN9HI6SJW33eJ CIgzNFqRtjX3Nd6pkrlaqNNTxPmPvgxkmCJ3rp5Hhe4mKpQTP6PMKJTRRsZNHDvW iYIW2TILm1zkcBvWXBp9qsHcrKRcSQejFJWJ2QD8bogxdf4Ci57XtTazyu+GGsy3 PYq65AWX8EuAGz/dhtNXOI7d1Ms+3MS+EG3jA0kfv3fwF/iEMV2zlQzf0c09evw4 qJK9g7AD6WmLpv1nUm/7LDPdrYh07Qb/QJ7PvjaDP/3aLOJuttGbZ4bqoppkc89K 8FFqgYNdYo4gKyMZTIdyL5+NdQ== -----END CERTIFICATE-----Generated at Mon Aug 24 13:23:08 2026 by rpki-client