
Error: rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
File: 725BCF70C08F4B2744E301141EF06513A96F28D6.mft (raw, json)
Hash identifier: nKJsB3eN84s57UFeYHWGyx4/9IzV5790CRZJAdiGRRo=
Subject key identifier: ED:06:08:D7:B6:85:F1:00:7B:47:C9:87:F4:6B:8E:C1:0F:41:B7:28
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Certificate issuer: /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial: 246B3C2FE506A3AC61267B077CD943FC8A96638D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
Manifest number: 04E2
Signing time: Sat 31 Oct 2026 02:10:00 +0000
Manifest this update: Sat 31 Oct 2026 02:05:00 +0000
Manifest next update: Sun 01 Nov 2026 05:33:00 +0000
Files and hashes: 1: 323830313a38383a3a2f33322d3438203d3e203533313636.roa (hash: aZyYZb5PjIBgrmYnOqXu9UbfqsxT6gqu2UJDBubWo9s=)
2: 3230302e3134352e302e302f31362d3234203d3e203533313636.roa (hash: st0BtMhTI+w8nR37hrlnw7s4sAKaj7wFWHq/UbBnruQ=)
3: 725BCF70C08F4B2744E301141EF06513A96F28D6.crl (hash: 7PZENqupn4VyKGF9ztaBRnRGmtUbLWLqQ/doD/hbUrA=)
4: 3138362e3231372e302e302f31362d3234203d3e203533313636.roa (hash: tLQ+jjBXbnnOAUhKF6Pdi8La3tCgx4qREeElrBO0j1Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 02:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6b:3c:2f:e5:06:a3:ac:61:26:7b:07:7c:d9:43:fc:8a:96:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Validity
Not Before: Oct 31 02:05:00 2026 GMT
Not After : Nov 1 05:33:00 2026 GMT
Subject: CN=ED0608D7B685F1007B47C987F46B8EC10F41B728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:68:47:96:19:33:1b:a4:82:9d:27:47:1c:
8f:4e:2c:69:03:c6:cf:e6:ab:ed:d8:b5:01:4d:ef:
c9:a7:0d:78:5b:89:76:1c:52:4d:73:45:42:62:90:
0d:3d:67:68:02:24:ac:2e:90:af:a4:1b:cc:e1:2a:
4f:3f:47:f9:68:c0:26:f9:be:b3:35:8a:8a:22:2d:
f5:c2:54:ab:dd:e2:40:79:50:53:63:a8:b3:c5:b1:
7a:ce:a7:2f:2f:1b:80:52:01:9a:3f:2a:05:ed:92:
a1:be:0d:c1:4d:f3:84:e2:b3:7a:e5:5f:83:26:9e:
33:74:40:08:cb:58:8a:66:ff:1a:7d:8d:c5:f0:2f:
a0:df:42:88:b8:0a:41:f5:34:1c:a2:9d:2c:51:de:
16:eb:c4:a2:cc:64:67:4f:be:c7:d7:72:b4:3a:90:
dd:5a:05:d1:f1:2f:25:5f:6f:1d:bd:49:d6:24:0c:
80:2f:a7:b9:10:e1:9f:89:b7:e8:9f:27:1a:91:f9:
c5:4c:31:c4:ad:99:2f:1c:30:8b:fd:fc:28:bf:61:
a0:49:a7:8b:aa:36:f5:c4:e0:9e:f5:d7:39:bd:c5:
f8:b2:6a:a8:36:c3:a0:b3:65:92:0b:9f:74:9c:b3:
19:ac:0d:2a:1c:7e:f9:d0:84:fd:a2:02:f4:6e:69:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:08:D7:B6:85:F1:00:7B:47:C9:87:F4:6B:8E:C1:0F:41:B7:28
X509v3 Authority Key Identifier:
keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:c5:97:4d:f8:fc:95:5b:69:be:b5:a0:9b:a0:f1:d8:f3:
b5:70:c4:1d:da:bd:57:0e:a7:66:be:26:17:21:94:30:3e:e2:
35:7f:19:23:86:83:02:5e:35:af:d6:1a:62:96:d8:ec:84:1c:
d7:2c:8c:0f:30:bc:b5:b9:a8:bd:5e:3c:43:25:a6:7a:b7:e9:
a2:10:4c:48:95:23:40:4d:66:21:07:d4:be:91:95:a5:0e:32:
2a:da:bd:e2:41:6a:92:9a:c9:a2:5b:b9:c1:c7:5d:e4:e3:32:
24:83:5e:65:a1:94:3f:63:01:da:1f:2b:8e:a8:bb:56:76:63:
5a:e5:34:c7:7e:72:10:d9:2c:b7:07:ef:cd:93:91:41:89:03:
32:d2:e3:8d:42:c1:e6:74:9a:f0:7d:b8:c0:b3:65:8a:f6:5b:
45:d9:ef:ac:74:da:e4:ba:01:c1:18:f7:6f:ab:40:7f:3c:c7:
4a:d6:1f:51:c5:88:58:b6:f5:37:b2:fa:a6:ee:c0:b1:ea:0a:
38:da:5b:0c:e6:f7:60:b1:5b:9b:6a:7b:8e:a6:87:f7:5f:70:
7d:66:b0:26:ca:8b:f8:de:fc:47:4f:30:88:36:2d:52:9c:bf:
03:ac:b1:19:69:08:79:de:b8:87:31:26:4f:d5:48:25:12:52:
53:f2:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:08:02 2026 by rpki-client