Error: rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: 2L+HrK0YyjMdGDKk2ZQmavE+qrA/SDYHUPs3ESK2hFE= Subject key identifier: B3:AC:C5:BB:51:FF:F7:22:AE:1D:99:EF:E3:3B:C3:9D:44:14:97:D6 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 4E06F02C9ED00CD3FC6044170A65B1EADF69B46E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 048E Signing time: Mon 24 Aug 2026 17:14:00 +0000 Manifest this update: Mon 24 Aug 2026 17:09:00 +0000 Manifest next update: Tue 25 Aug 2026 20:45:00 +0000 Files and hashes: 1: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: YnntwTG6n73fryrwO6E92kkNlse661Lg9hxTqJMXuuU=) 2: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: zHXbW09edwhrCfYMv7XkdTkFC+SlsjNe/uMJfqgkA84=) 3: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: QX/JDgSz3SyU5KR95lvnWMhCuMLSR3wI2sx7ftsDJWE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 20:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:06:f0:2c:9e:d0:0c:d3:fc:60:44:17:0a:65:b1:ea:df:69:b4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Aug 24 17:09:00 2026 GMT Not After : Aug 25 20:45:00 2026 GMT Subject: CN=B3ACC5BB51FFF722AE1D99EFE33BC39D441497D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:9e:02:e0:d7:30:d9:84:ed:64:f6:71:81: 48:85:d1:35:32:0a:3e:99:cf:18:b0:32:a7:52:9d: c9:76:92:14:4f:ca:5e:2d:23:7e:58:00:90:70:39: b0:7c:17:18:da:5b:3d:df:4a:52:39:ff:01:f7:51: 2d:18:c8:a1:eb:0c:19:c9:a5:88:c7:2d:15:c2:31: 96:2a:96:91:4d:ad:df:76:c9:5d:79:11:51:19:34: 1c:8a:4d:10:27:7e:6d:b2:9b:50:b2:1a:c1:72:80: 58:25:af:a0:dd:0f:3f:31:ed:9b:cc:6d:2a:ce:2f: 36:7d:a0:7a:46:fb:81:2b:a7:d7:64:ff:05:6c:51: ac:f5:c6:b4:06:18:fa:84:ad:fa:a0:8b:a3:39:0b: 6d:36:d4:23:ae:99:6c:d1:4a:71:f7:bd:b6:07:72: 84:2a:09:74:46:fe:38:73:da:d4:0b:cb:e0:71:75: 18:41:ae:52:3b:ce:95:91:66:74:91:4a:d2:56:97: e5:2f:9b:b0:98:16:9f:d8:e2:9c:ba:d4:7b:62:24: a7:c3:b2:b7:2e:f7:87:8d:23:66:5b:09:02:fe:27: 41:80:80:3a:50:32:b1:9e:25:f8:68:f2:12:40:67: 70:a7:e6:61:70:ca:d4:6f:ff:af:50:0e:1c:96:76: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:C5:BB:51:FF:F7:22:AE:1D:99:EF:E3:3B:C3:9D:44:14:97:D6 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0a:27:22:aa:5b:68:81:a9:2c:3c:81:13:e0:b6:d9:2b:05: 15:e2:50:58:40:53:2c:1c:b7:d4:07:a3:14:92:af:a9:e0:cc: fd:09:b6:4e:39:ac:54:c5:50:fa:66:8a:2c:85:22:7f:2a:07: 22:64:f9:2f:49:5b:88:48:5e:fe:a9:e7:0e:7c:0d:70:35:94: f5:de:5d:c5:b8:52:c2:5f:83:75:8f:fd:c8:6b:ad:7b:ab:e2: ec:f2:13:82:c4:d2:2f:89:52:8c:51:57:72:41:3f:a5:c3:d1: 2f:17:59:9b:f2:b8:dd:7b:f7:e0:05:e8:f3:bc:78:47:35:d3: e2:2b:f0:56:df:3d:62:36:77:37:9a:cf:ba:4b:e8:cf:e6:e7: 80:9e:bb:9c:21:33:00:3e:9c:fa:1b:c7:52:aa:bc:91:5a:93: 0b:39:d5:6b:95:47:a2:b6:83:7e:2a:db:fc:94:8c:75:05:1e: 85:fd:c8:20:9e:0f:97:37:c6:25:1b:35:44:1b:a2:aa:96:95: 8c:5d:6f:cf:8b:56:37:43:e2:7b:b2:03:6e:bc:2c:3d:99:e5: af:32:3b:e1:fd:2c:19:10:e2:b1:ea:f8:95:6c:33:04:f6:13: 40:49:50:c6:4b:ec:c1:70:a5:37:4f:13:4a:a2:7a:78:f5:49: 94:d3:d1:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTgbwLJ7QDNP8YEQXCmWx6t9ptG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNjA4MjQxNzA5MDBaFw0yNjA4MjUyMDQ1MDBaMDMxMTAvBgNV BAMTKEIzQUNDNUJCNTFGRkY3MjJBRTFEOTlFRkUzM0JDMzlENDQxNDk3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3J4C4Ncw2YTtZPZxgUiF0TUy Cj6ZzxiwMqdSncl2khRPyl4tI35YAJBwObB8FxjaWz3fSlI5/wH3US0YyKHrDBnJ pYjHLRXCMZYqlpFNrd92yV15EVEZNByKTRAnfm2ym1CyGsFygFglr6DdDz8x7ZvM bSrOLzZ9oHpG+4Erp9dk/wVsUaz1xrQGGPqErfqgi6M5C2021COumWzRSnH3vbYH coQqCXRG/jhz2tQLy+BxdRhBrlI7zpWRZnSRStJWl+Uvm7CYFp/Y4py61HtiJKfD srcu94eNI2ZbCQL+J0GAgDpQMrGeJfho8hJAZ3Cn5mFwytRv/69QDhyWdmkFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs6zFu1H/9yKuHZnv4zvDnUQUl9YwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwgonIqpbaIGpLDyBE+C22SsFFeJQWEBTLBy31AejFJKvqeDM/Qm2TjmsVMVQ +maKLIUifyoHImT5L0lbiEhe/qnnDnwNcDWU9d5dxbhSwl+DdY/9yGute6vi7PIT gsTSL4lSjFFXckE/pcPRLxdZm/K43Xv34AXo87x4RzXT4ivwVt89YjZ3N5rPukvo z+bngJ67nCEzAD6c+hvHUqq8kVqTCznVa5VHoraDfirb/JSMdQUehf3IIJ4PlzfG JRs1RBuiqpaVjF1vz4tWN0Pie7IDbrwsPZnlrzI74f0sGRDiser4lWwzBPYTQElQ xkvswXClN08TSqJ6ePVJlNPRRA== -----END CERTIFICATE-----Generated at Mon Aug 24 22:41:23 2026 by rpki-client