
Error: rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
File: 4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft (raw, json)
Hash identifier: cQdDYK5etsYyLsBKrAqwy0B4Ns23y0UEvUaCcw5dIO4=
Subject key identifier: 10:8E:2C:AE:A3:EE:73:B0:27:B9:D0:FD:6A:50:E0:09:8C:C4:3A:ED
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Certificate issuer: /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial: 198C47A0F47EC726CA35D8EB6D131B62D1170E26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
Manifest number: E5
Signing time: Sun 23 Aug 2026 06:58:15 +0000
Manifest this update: Sun 23 Aug 2026 06:53:15 +0000
Manifest next update: Mon 24 Aug 2026 07:55:15 +0000
Files and hashes: 1: 3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (hash: 8JaemSQpYfITP2b4QYH6E87LxDcWSBcYX2Dhev/xXzU=)
2: 4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl (hash: sOFUnxVVhD5qUl31JLpl9VUYSm4YKAN7sOwP1s6F5UA=)
3: 323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa (hash: zpZpU0xMXG/kg+gpq/CNeedFLRekLley2r6r2QFFfQQ=)
4: 323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (hash: nIFTOsm+qixJuTHWI2QHSvq6SamjJ4f6oLwwejS2tHY=)
5: 3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (hash: N++qvqMWqypLC2nBGgOlDpr30wb5fAqGHpkT2FpI6CI=)
6: 3138362e3139342e322e302f32332d3233203d3e20323730383738.roa (hash: oOHBGJ/seEbEDdPGwT4eWL46QUn62RIhOGEs1i6QbBc=)
7: 323830343a373264343a3a2f33332d3333203d3e20323730383738.roa (hash: gwy1MJHFaIVB9n6maZJaBjhiX5UPprQmJ0Fz+2+56ww=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 07:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8c:47:a0:f4:7e:c7:26:ca:35:d8:eb:6d:13:1b:62:d1:17:0e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Validity
Not Before: Aug 23 06:53:15 2026 GMT
Not After : Aug 24 07:55:15 2026 GMT
Subject: CN=108E2CAEA3EE73B027B9D0FD6A50E0098CC43AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:e8:46:bf:ee:2b:ae:f5:20:b5:53:7f:85:
1d:f1:d8:f7:6d:2b:79:d4:e4:bd:17:8f:25:65:74:
d6:b4:2a:ea:7f:2a:11:22:fb:75:63:75:a0:90:e5:
7d:f8:15:60:ee:e5:42:5d:39:57:13:bc:09:00:7e:
43:fb:cf:be:cd:10:61:7b:85:74:ba:11:5e:0c:58:
fe:2a:8c:50:3f:d1:4b:63:a0:fb:fe:b7:e7:e9:7c:
be:d8:1e:fd:34:19:d4:88:5c:4a:7c:ee:c6:ad:11:
19:ea:57:3c:ea:32:98:07:f6:80:06:5e:c4:cd:c5:
9c:dc:48:a0:c4:b6:eb:2c:71:6d:d5:dc:84:fb:a0:
db:39:fd:0b:23:d9:47:12:d2:37:a8:35:18:6a:10:
16:ed:ee:8b:ff:01:dd:74:f4:fc:90:0f:90:06:74:
02:b2:e2:27:6c:0e:9f:16:43:90:d1:00:de:6b:c9:
b4:51:41:c4:a1:2a:0e:23:d1:50:4b:19:5a:61:5e:
17:b5:cb:b9:19:42:db:0a:97:59:d5:ac:6f:2e:f6:
41:ca:cd:23:9a:a7:18:21:0b:90:f2:df:b2:c9:6a:
3b:bd:66:da:61:1a:59:21:fc:c8:6e:7f:57:10:16:
f7:44:48:98:28:53:50:74:42:16:3f:3a:e6:03:e1:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:2C:AE:A3:EE:73:B0:27:B9:D0:FD:6A:50:E0:09:8C:C4:3A:ED
X509v3 Authority Key Identifier:
keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:17:a2:96:72:15:43:af:8f:21:e8:fc:2b:69:1b:a6:8f:
3a:1d:54:b1:4a:c5:fe:7b:63:a0:35:04:fc:b8:7a:11:b2:f3:
77:41:07:33:d6:01:30:1d:07:21:75:47:fc:0b:c9:38:bd:0d:
77:7d:aa:e5:0d:48:c2:b2:4c:a8:6b:ae:6b:21:00:33:69:c2:
42:ad:ba:1e:de:d4:5c:37:e2:90:65:1c:6c:1e:60:b0:73:51:
d7:d3:8b:8c:a6:48:17:e9:ec:0d:1c:3b:1a:66:4e:4f:fb:cb:
f2:57:a0:f8:91:22:68:e6:19:65:e3:a1:c1:bc:b7:ff:7e:bd:
20:0f:b0:b4:f5:5d:c6:78:b3:9f:5a:1b:dd:b8:7f:e2:36:f8:
3c:7b:23:15:c1:5c:b5:78:2b:c0:42:41:85:ea:5d:ef:ca:2d:
6a:92:10:90:46:e1:a6:3a:69:8c:89:30:a2:a7:3c:85:3f:57:
c1:2f:21:98:be:7e:d9:42:0b:1c:c6:51:9b:c5:68:5a:a7:b7:
51:80:e5:29:15:ca:ab:58:09:e0:77:98:48:47:a0:60:6f:45:
09:85:b5:b2:cd:2d:ae:be:9a:ec:5c:2d:fd:70:4f:79:ba:eb:
cc:71:83:3e:24:74:87:ab:c7:da:7b:80:78:41:43:44:9f:05:
13:07:b8:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGYxHoPR+xybKNdjrbRMbYtEXDiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzQzhFOTFCMUQxQzI4RDRGRTgyRTY3MTY1NzE1NTAz
RTlDQTc4NjAeFw0yNjA4MjMwNjUzMTVaFw0yNjA4MjQwNzU1MTVaMDMxMTAvBgNV
BAMTKDEwOEUyQ0FFQTNFRTczQjAyN0I5RDBGRDZBNTBFMDA5OENDNDNBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCP+hGv+4rrvUgtVN/hR3x2Pdt
K3nU5L0XjyVldNa0Kup/KhEi+3VjdaCQ5X34FWDu5UJdOVcTvAkAfkP7z77NEGF7
hXS6EV4MWP4qjFA/0UtjoPv+t+fpfL7YHv00GdSIXEp87satERnqVzzqMpgH9oAG
XsTNxZzcSKDEtusscW3V3IT7oNs5/Qsj2UcS0jeoNRhqEBbt7ov/Ad109PyQD5AG
dAKy4idsDp8WQ5DRAN5rybRRQcShKg4j0VBLGVphXhe1y7kZQtsKl1nVrG8u9kHK
zSOapxghC5Dy37LJaju9ZtphGlkh/Mhuf1cQFvdESJgoU1B0QhY/OuYD4bJDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEI4srqPuc7AnudD9alDgCYzEOu0wHwYDVR0j
BBgwFoAUTDyOkbHRwo1P6C5nFlcVUD6cp4YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFqU0EzeUJCa3Y3dGcyTjNMYWphcUpFWng4UjdvTk45dmNyNm5YZ3pz
YWUvMC80QzNDOEU5MUIxRDFDMjhENEZFODJFNjcxNjU3MTU1MDNFOUNBNzg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDM0M4RTkxQjFEMUMyOEQ0
RkU4MkU2NzE2NTcxNTUwM0U5Q0E3ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVFqU0EzeUJCa3Y3dGcyTjNMYWphcUpFWng4UjdvTk45dmNyNm5YZ3pzYWUvMC80
QzNDOEU5MUIxRDFDMjhENEZFODJFNjcxNjU3MTU1MDNFOUNBNzg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAtcXopZyFUOvjyHo/CtpG6aPOh1UsUrF/ntjoDUE/Lh6EbLzd0EHM9YBMB0H
IXVH/AvJOL0Nd32q5Q1IwrJMqGuuayEAM2nCQq26Ht7UXDfikGUcbB5gsHNR19OL
jKZIF+nsDRw7GmZOT/vL8leg+JEiaOYZZeOhwby3/369IA+wtPVdxnizn1ob3bh/
4jb4PHsjFcFctXgrwEJBhepd78otapIQkEbhpjppjIkwoqc8hT9XwS8hmL5+2UIL
HMZRm8VoWqe3UYDlKRXKq1gJ4HeYSEegYG9FCYW1ss0trr6a7Fwt/XBPebrrzHGD
PiR0h6vH2nuAeEFDRJ8FEwe4zg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:38:17 2026 by rpki-client