Error: rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json) Hash identifier: Om/Md/r+TvX7MJW39cRnEF8B1fuLRnGctafUsyOFjGk= Subject key identifier: BF:16:55:2E:8E:07:E7:E9:71:99:11:79:DA:6C:83:E1:D3:12:ED:5A Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Certificate serial: 7130F5C2D352E6FD0C768CCD8619951615755BBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft Manifest number: 04E4 Signing time: Fri 30 Oct 2026 17:30:35 +0000 Manifest this update: Fri 30 Oct 2026 17:25:35 +0000 Manifest next update: Sat 31 Oct 2026 17:46:35 +0000 Files and hashes: 1: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: 77lMmfsBlWS7z4/jWBsEqCAvWwFXKptaC5X3bZ9GJYw=) 2: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: Q/PC8SNb21ypqN74He6ZoNdvyOduoglX9oXbvGue6Zk=) 3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: bUCZ7BZehY+i3arTQ9HforOmJ5Z00Xe4/9acYqEHuf4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 17:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:30:f5:c2:d3:52:e6:fd:0c:76:8c:cd:86:19:95:16:15:75:5b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Validity Not Before: Oct 30 17:25:35 2026 GMT Not After : Oct 31 17:46:35 2026 GMT Subject: CN=BF16552E8E07E7E971991179DA6C83E1D312ED5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:dd:b5:dd:b0:58:8b:dd:26:9c:5c:39:1e: 9f:5c:36:f8:c1:91:c8:e7:93:0f:3f:a4:9d:e4:b2: da:f4:b9:15:c1:97:03:18:8e:d8:24:78:7b:9f:62: 7e:a5:77:1f:dd:f8:99:ac:4e:83:40:58:30:af:5c: ed:8e:18:4d:28:b3:23:62:4a:3e:16:14:3d:0c:7f: 38:da:fd:f8:ab:e4:2d:17:56:df:b3:10:24:71:44: af:3f:fc:ee:50:9b:51:d5:03:1a:c7:e5:c1:3f:c1: d2:60:83:4e:e8:03:02:4c:db:8a:27:15:2f:b3:64: 0f:fb:b8:12:8f:4b:76:fd:ef:09:4b:0b:59:7a:6f: 00:d7:b9:99:c5:0b:ee:93:31:04:c7:e5:a8:5f:56: cc:da:4f:0d:1d:d3:e9:d8:1e:c4:75:be:8b:a1:1c: 6a:9d:dd:b0:98:58:37:43:9b:50:fa:d5:05:b7:f6: 03:02:2a:11:a1:cd:1d:36:10:a4:de:15:71:18:1f: 39:fb:17:57:4a:a8:4b:af:c3:42:75:07:1c:cc:c0: d7:89:64:11:32:d6:6b:0a:d2:8d:dd:e6:32:e5:13: b0:fc:c2:ab:f1:a5:11:99:25:11:5a:ee:90:a0:df: 6a:c1:11:f5:08:cf:8c:df:1a:07:25:df:8c:df:76: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:16:55:2E:8E:07:E7:E9:71:99:11:79:DA:6C:83:E1:D3:12:ED:5A X509v3 Authority Key Identifier: keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b0:6c:90:68:89:2b:16:34:51:68:05:d7:28:0d:71:b6:3e: 64:6d:78:f7:4d:9d:ea:28:2f:a6:87:ef:0d:d8:34:7b:07:2e: 19:c7:e6:23:ee:7e:85:19:d9:4b:f9:8f:03:fa:4b:9f:6f:f3: f0:e3:c3:c5:08:51:e9:70:fb:d0:d8:f7:0c:8e:81:79:ee:31: 08:5e:4b:e5:a8:9b:d3:a4:79:d3:c5:86:40:8c:19:88:a3:02: 22:77:91:91:78:22:49:03:c3:8e:61:27:bf:84:7e:55:c9:1d: bb:66:4a:50:71:a0:b1:f4:dc:cd:9b:fa:9d:f5:e4:5b:95:31: be:25:26:ac:7b:a5:fe:6e:7b:56:87:43:27:21:b4:58:e0:2f: d6:de:ae:12:9b:1f:f8:7a:5f:f3:29:77:68:03:94:33:95:05: 35:d8:e2:0b:cf:49:aa:51:85:10:cb:8a:34:41:e3:7c:68:35: db:d2:da:e6:cf:8b:12:fd:79:56:1b:c0:53:42:3a:2b:0e:e2: 59:1d:e6:e8:f2:73:3c:cb:94:ea:ce:81:68:ce:ec:25:7d:ca: 8a:f7:83:50:0c:f8:ca:d9:10:69:84:aa:7c:b1:f4:33:6c:47: 8f:12:e6:2f:b8:33:12:d1:05:3b:ec:c1:f0:2a:ac:74:cb:83: 4a:cc:11:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcTD1wtNS5v0MdozNhhmVFhV1W7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx RUNCMzFFQzAeFw0yNjEwMzAxNzI1MzVaFw0yNjEwMzExNzQ2MzVaMDMxMTAvBgNV BAMTKEJGMTY1NTJFOEUwN0U3RTk3MTk5MTE3OURBNkM4M0UxRDMxMkVENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IN213bBYi90mnFw5Hp9cNvjB kcjnkw8/pJ3kstr0uRXBlwMYjtgkeHufYn6ldx/d+JmsToNAWDCvXO2OGE0osyNi Sj4WFD0Mfzja/fir5C0XVt+zECRxRK8//O5Qm1HVAxrH5cE/wdJgg07oAwJM24on FS+zZA/7uBKPS3b97wlLC1l6bwDXuZnFC+6TMQTH5ahfVszaTw0d0+nYHsR1vouh HGqd3bCYWDdDm1D61QW39gMCKhGhzR02EKTeFXEYHzn7F1dKqEuvw0J1BxzMwNeJ ZBEy1msK0o3d5jLlE7D8wqvxpRGZJRFa7pCg32rBEfUIz4zfGgcl34zfdrPlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvxZVLo4H5+lxmRF52myD4dMS7VowHwYDVR0j BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ7BskGiJKxY0UWgF1ygNcbY+ZG14902d6igvpofvDdg0ewcuGcfmI+5+hRnZ S/mPA/pLn2/z8OPDxQhR6XD70Nj3DI6Bee4xCF5L5aib06R508WGQIwZiKMCIneR kXgiSQPDjmEnv4R+Vckdu2ZKUHGgsfTczZv6nfXkW5UxviUmrHul/m57VodDJyG0 WOAv1t6uEpsf+Hpf8yl3aAOUM5UFNdjiC89JqlGFEMuKNEHjfGg129La5s+LEv15 VhvAU0I6Kw7iWR3m6PJzPMuU6s6BaM7sJX3KiveDUAz4ytkQaYSqfLH0M2xHjxLm L7gzEtEFO+zB8CqsdMuDSswRQQ== -----END CERTIFICATE-----Generated at Sat Oct 31 05:08:03 2026 by rpki-client