
Error: rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
File: F2E351E04CEB2540D88297555ED76E80B91C52F7.mft (raw, json)
Hash identifier: ZVvo6eNROXe97v1fSFkMmTsV+kNYCro2fvm/+go5M70=
Subject key identifier: 0A:E6:EC:31:47:F9:45:03:13:3C:F8:AF:12:F1:05:5C:72:15:C8:7D
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Certificate issuer: /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial: 1C2E12E677A418655B76EBBA91795AAC76394BB3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
Manifest number: 04CF
Signing time: Wed 28 Oct 2026 04:51:43 +0000
Manifest this update: Wed 28 Oct 2026 04:46:43 +0000
Manifest next update: Thu 29 Oct 2026 07:32:43 +0000
Files and hashes: 1: 34352e3136392e3234332e302f32342d3234203d3e20323638313334.roa (hash: LnmAUOJOzaxLeqNpln8ZqiD2odPL5FpG70+UJavV3tY=)
2: 34352e3136392e3234302e302f32342d3234203d3e20323638313334.roa (hash: HxWMbuu/OtLeBTFH4Gp/bByFnkzI70KF2V5TwHxsTyI=)
3: 323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa (hash: gQ0lkMv0KxAkAI1IKMzdjiiCUK+8nt1ATnoZZ5dvEl4=)
4: 34352e3136392e3234302e302f32332d3233203d3e20323638313334.roa (hash: NlPh3CNPctcXi0Ffz9wfbUaXif06oGWyWtZ06ySGhfE=)
5: 323830343a353838343a3a2f33342d3334203d3e20323638313334.roa (hash: bD9ALjlOYkF5ZZYYJY6c/7Ke6bAvIabzqGP8v57rsHE=)
6: 34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa (hash: 7/lf4ZZ8tHrQu1s2gb2oNh4B1lx8Zu6LxkGoZk56Udk=)
7: 34352e3136392e3234302e302f32322d3232203d3e20323638313334.roa (hash: 0IUjkVy3rrKEDK4mq+JETmt5fLI+OEhRLOlYtvzDAXY=)
8: 323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (hash: EnfydbQpZtggwwWmUhO5ChTerULDTHsruvhPe1PEppU=)
9: 323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa (hash: Kc5XKeVH0/filAOJJynHtY5s3C/scAy4+s9W3bzgAjk=)
10: 323830343a353838343a633030303a3a2f33342d3334203d3e20323638313334.roa (hash: QuB3KGKk1XtnRAzt9Bm0ywqx4lsdn/xHeb4r7Ab8VL8=)
11: 34352e3136392e3234312e302f32342d3234203d3e20323638313334.roa (hash: 2EK2lWRDg1mYh/3svamEYJH8GyA4FFLfs+tQMNlZ7Uo=)
12: 323830343a353838343a383030303a3a2f33342d3334203d3e20323638313334.roa (hash: RIRSQWvmFL7fwvbcrrdigkwKWr13sIzlrxJPHgVb96M=)
13: F2E351E04CEB2540D88297555ED76E80B91C52F7.crl (hash: JzPjlmyIzxPpOmH8neW10h0Vj9jGsNXpeaM8ymsllAg=)
14: 34352e3136392e3234322e302f32342d3234203d3e20323638313334.roa (hash: 3cWyNXk5ENI+OmJ6UHgTU0G6OROqmA+d9oyqFw+Z1dg=)
15: 323830343a353838343a3a2f33332d3333203d3e20323638313334.roa (hash: 6LijlyjyiWLQ7js/4WegN3y/6n0XPvy9nKXiprKHVME=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 07:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2e:12:e6:77:a4:18:65:5b:76:eb:ba:91:79:5a:ac:76:39:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Validity
Not Before: Oct 28 04:46:43 2026 GMT
Not After : Oct 29 07:32:43 2026 GMT
Subject: CN=0AE6EC3147F94503133CF8AF12F1055C7215C87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:b6:27:80:cb:0d:0e:cf:27:f0:00:4c:eb:
56:d1:48:c6:6e:f0:cd:98:fc:a5:be:c0:4b:31:f3:
86:d7:21:10:b0:fd:0f:e4:d6:d0:0c:a5:b6:fc:2a:
57:8c:73:8b:4a:9b:5d:c6:e8:34:3c:44:62:5c:f8:
ee:5a:ba:1a:c7:f5:1c:eb:f1:dc:6c:ef:f8:c9:04:
d2:bc:5c:1b:91:88:25:fa:9c:e1:b4:8a:0c:67:4c:
0c:bf:83:fe:4b:fd:73:d9:d8:3f:8f:43:df:49:c1:
e0:63:cf:c3:34:cb:95:84:ee:18:af:a7:d5:e1:81:
ee:89:55:7e:aa:63:d2:9d:62:c8:86:f9:54:6e:ea:
e3:f8:6d:4e:ca:91:c3:ff:5f:7e:8e:b2:6b:87:ca:
22:d4:76:bb:66:8c:40:46:b7:e4:8b:1d:6c:38:05:
b0:d3:ee:90:2f:18:00:48:19:c1:8e:28:dd:bf:53:
eb:8c:fe:cc:0a:ec:df:36:05:a4:07:40:5c:51:fe:
f3:ad:71:92:20:aa:18:0c:d0:87:5d:3f:b5:84:07:
e7:d4:db:bf:88:a4:39:b0:fb:2a:81:09:dc:c0:c6:
c4:b2:6a:36:bf:c7:81:ea:2a:5a:b5:ff:42:a8:be:
f1:b1:ff:e2:9f:8a:0f:28:e6:4f:d3:0c:e7:f1:86:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E6:EC:31:47:F9:45:03:13:3C:F8:AF:12:F1:05:5C:72:15:C8:7D
X509v3 Authority Key Identifier:
keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:10:f8:23:f5:08:ca:27:e3:ba:b7:3b:6e:2c:3c:78:46:
c5:ca:c4:4b:79:7b:54:c2:5b:de:3e:8b:87:b7:2d:30:17:df:
06:91:10:2a:2e:d5:28:5d:96:73:62:c7:52:54:db:11:fd:5a:
2e:1a:d9:4d:08:b4:1f:58:b6:1a:51:0a:51:a2:ef:82:90:77:
71:aa:06:e2:4c:77:c9:30:bf:0f:42:18:4e:0e:ac:cb:a6:f8:
9a:05:5f:b1:e1:88:28:f3:29:7d:ff:05:58:65:75:fd:77:c4:
04:cf:67:9a:5a:a2:74:08:04:6a:71:85:78:23:5d:e5:52:b0:
75:30:2b:41:b9:0e:b1:ab:d4:74:e7:ee:cd:5f:e2:84:94:ac:
c6:84:c5:9b:08:0f:96:37:81:c7:21:35:7f:39:d8:0f:8d:3e:
96:64:1c:ad:93:24:6a:25:be:dd:8d:41:59:0b:fa:8c:46:7b:
15:6d:42:69:a1:73:e2:05:70:1e:cb:51:67:ac:1b:6a:af:fe:
18:f5:f7:e6:28:a2:4e:6b:a7:6f:e0:3a:f8:bf:69:56:83:6d:
02:08:1f:4f:d0:b7:10:9a:bc:67:eb:9d:3d:72:a4:e9:97:67:
97:9c:0b:ba:88:9f:80:b4:b5:98:89:bb:f9:13:c7:07:15:f9:
4b:4f:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:31:55 2026 by rpki-client