Error: rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft File: 27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft (raw, json) Hash identifier: 7Y8A0bchWa0Cm2VlCd1u4bRyptkZjWcPa5LqR8uZKKk= Subject key identifier: B6:0C:D9:0E:82:68:01:94:D6:6A:C8:4F:F5:C6:52:38:36:12:42:D0 Authority key identifier: 27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36 Certificate issuer: /CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36 Certificate serial: 71C093B1AAA4EAFC80DF153E84C147249ACF81C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft Manifest number: 01A5 Signing time: Mon 05 Oct 2026 21:45:04 +0000 Manifest this update: Mon 05 Oct 2026 21:40:04 +0000 Manifest next update: Tue 06 Oct 2026 23:10:04 +0000 Files and hashes: 1: 323830343a376566343a3a2f33322d3430203d3e20323731363537.roa (hash: 936Quy/WLZ9eLgNn8Cg8DqimGUCHBL4RQpiDghxu/vc=) 2: 27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl (hash: EWAxSy63TpRHrT5k60BocGiqhfE327Yp70YPjfqXyjA=) 3: 34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa (hash: k5zyYRS0EfpoNenIqrkfAmpod4PZ6tBJsTpWfZNPphY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 Oct 2026 23:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:93:b1:aa:a4:ea:fc:80:df:15:3e:84:c1:47:24:9a:cf:81:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36 Validity Not Before: Oct 5 21:40:04 2026 GMT Not After : Oct 6 23:10:04 2026 GMT Subject: CN=B60CD90E82680194D66AC84FF5C65238361242D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:37:0a:2c:18:9f:5d:34:2c:ab:61:36:4e: 48:0d:24:a6:5c:b8:4e:8d:15:bc:9e:63:53:5f:1b: ff:24:91:a9:22:3d:2d:2e:eb:2e:5d:24:85:cd:f5: 21:24:84:45:53:83:48:0e:cb:68:b4:db:fc:ed:ed: ef:a8:50:8c:96:4a:bb:0e:77:0b:ec:ac:3e:9a:31: 16:51:20:09:e6:ec:92:8c:f3:8c:17:e4:33:9e:c3: 42:83:cb:1a:87:a1:bb:79:22:e5:18:ec:cb:13:40: 44:db:07:75:3c:0c:f8:5d:90:42:71:7b:a3:ac:5a: 3d:fb:b8:6a:0b:af:f7:26:5b:5d:04:4f:ab:1d:d8: fe:58:27:eb:f6:65:db:f4:aa:0f:0a:d2:9e:41:7b: be:c8:7f:5a:a5:2b:36:5e:c2:93:e0:05:59:8e:3a: b5:d6:b1:c4:cb:64:86:a6:82:51:0f:49:ad:da:de: 7d:fe:15:10:2c:60:58:f8:6f:e6:c4:c4:2f:fd:dd: 05:80:91:6d:a3:da:24:23:60:3f:eb:5a:49:21:42: bc:9c:cc:57:10:13:57:5e:3a:e3:b5:b7:b2:ae:db: f9:18:fb:cf:b5:b7:6a:1a:78:00:5a:07:ec:10:2e: 25:54:d7:ec:45:78:f0:e3:46:a8:60:1d:dc:35:5f: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:D9:0E:82:68:01:94:D6:6A:C8:4F:F5:C6:52:38:36:12:42:D0 X509v3 Authority Key Identifier: keyid:27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:30:9d:ce:dc:5e:fb:a1:a1:2a:34:ba:2e:5d:d4:5a:a1: 61:7a:ad:a2:2e:f8:3c:80:61:48:19:bf:2f:e3:30:84:5b:22: ad:42:c1:b1:23:42:c0:dd:4a:bc:90:d9:40:19:76:a6:51:ae: 32:21:7a:12:b0:d0:e7:c6:ce:4b:d7:c2:64:b1:18:16:f6:62: 0b:91:15:fa:b6:68:10:1b:8b:27:cc:24:28:72:37:97:14:ae: e1:5d:6f:32:ff:fa:80:c8:37:20:84:6d:53:16:ef:3d:1b:01: 3f:1a:28:24:17:6d:05:d0:9d:83:bb:33:df:14:95:6d:47:48: fc:fe:e3:76:ac:0b:75:4a:dc:90:07:ef:86:e9:73:d4:67:97: 4c:d9:6b:d1:a9:00:3c:b8:d0:05:ec:9e:48:e1:b8:0b:16:44: 72:fb:df:b1:72:54:e3:7b:38:a8:cd:7d:73:e9:4e:ec:6f:ad: e0:ad:50:65:79:47:97:3e:aa:ad:bf:8a:8a:3d:51:b3:3b:7a: 5f:b9:37:43:6a:cd:39:94:1d:cd:ef:23:f5:4e:3a:61:a9:e9: eb:9e:92:94:45:d2:42:4e:77:a1:5b:42:0f:36:51:3a:32:63: 72:24:e9:05:45:b2:0e:14:8e:3d:82:69:5f:f2:ad:03:c1:64: 05:df:fe:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUccCTsaqk6vyA3xU+hMFHJJrPgcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdGMzc2MkJENjIwRUFFNkZENzU3NzYzRjBDQ0MyMkM1 QTM4RUYzNjAeFw0yNjEwMDUyMTQwMDRaFw0yNjEwMDYyMzEwMDRaMDMxMTAvBgNV BAMTKEI2MENEOTBFODI2ODAxOTRENjZBQzg0RkY1QzY1MjM4MzYxMjQyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FDcKLBifXTQsq2E2TkgNJKZc uE6NFbyeY1NfG/8kkakiPS0u6y5dJIXN9SEkhEVTg0gOy2i02/zt7e+oUIyWSrsO dwvsrD6aMRZRIAnm7JKM84wX5DOew0KDyxqHobt5IuUY7MsTQETbB3U8DPhdkEJx e6OsWj37uGoLr/cmW10ET6sd2P5YJ+v2Zdv0qg8K0p5Be77If1qlKzZewpPgBVmO OrXWscTLZIamglEPSa3a3n3+FRAsYFj4b+bExC/93QWAkW2j2iQjYD/rWkkhQryc zFcQE1deOuO1t7Ku2/kY+8+1t2oaeABaB+wQLiVU1+xFePDjRqhgHdw1Xyb/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtgzZDoJoAZTWashP9cZSODYSQtAwHwYDVR0j BBgwFoAUJ/N2K9Yg6ub9dXdj8MzCLFo47zYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnZtZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1 UUovMC8yN0YzNzYyQkQ2MjBFQUU2RkQ3NTc3NjNGMENDQzIyQzVBMzhFRjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3RjM3NjJCRDYyMEVBRTZG RDc1Nzc2M0YwQ0NDMjJDNUEzOEVGMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnZtZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1UUovMC8y N0YzNzYyQkQ2MjBFQUU2RkQ3NTc3NjNGMENDQzIyQzVBMzhFRjM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9Ewnc7cXvuhoSo0ui5d1FqhYXqtoi74PIBhSBm/L+MwhFsirULBsSNCwN1K vJDZQBl2plGuMiF6ErDQ58bOS9fCZLEYFvZiC5EV+rZoEBuLJ8wkKHI3lxSu4V1v Mv/6gMg3IIRtUxbvPRsBPxooJBdtBdCdg7sz3xSVbUdI/P7jdqwLdUrckAfvhulz 1GeXTNlr0akAPLjQBeyeSOG4CxZEcvvfsXJU43s4qM19c+lO7G+t4K1QZXlHlz6q rb+Kij1Rszt6X7k3Q2rNOZQdze8j9U46Yanp656SlEXSQk53oVtCDzZROjJjciTp BUWyDhSOPYJpX/KtA8FkBd/+9Q== -----END CERTIFICATE-----Generated at Tue Oct 6 08:21:55 2026 by rpki-client