
Error: rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File: D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier: liM5PPZcmRwppAZCUXUAG83wAl7FamR8i4IRBB2WvZM=
Subject key identifier: 24:CC:D2:29:26:1E:F3:C4:8B:8E:69:81:FD:1D:73:83:41:1E:DB:97
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer: /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial: 44BF0A819A0FD69F63A2478242FE34D0A5B62918
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number: 04E6
Signing time: Sun 01 Nov 2026 15:20:00 +0000
Manifest this update: Sun 01 Nov 2026 15:15:00 +0000
Manifest next update: Mon 02 Nov 2026 19:10:00 +0000
Files and hashes: 1: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: 5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=)
2: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: MdX+ghWTHdaghn/+1f289WsoGie1puCHwMvayR6UBbo=)
3: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: gGjNDilJvHg9VXQ5PJNA0dI2kci5BKyslQM81R+6iSk=)
4: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: w6x88Y8F2UoFOh2FhmiIRYRACnZ/8l1VFzDF5p6L8sY=)
5: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: dT/OQ0caLNJNzu5vr5CsHKBQnF7R/bkS8yGTDfRmzw0=)
6: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: 5qZtm2f0DQjgiOAg9vajLJhevTikhbotKYrAJA2esy4=)
7: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=)
8: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: q9bc6giK5SahvFhYN5/MsoRGDnh41j9MifCw7Cd12SM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 19:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bf:0a:81:9a:0f:d6:9f:63:a2:47:82:42:fe:34:d0:a5:b6:29:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
Validity
Not Before: Nov 1 15:15:00 2026 GMT
Not After : Nov 2 19:10:00 2026 GMT
Subject: CN=24CCD229261EF3C48B8E6981FD1D7383411EDB97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:be:cc:02:9c:ef:b9:25:64:f9:db:42:36:
8d:bf:72:e3:07:cd:82:b6:a8:bf:33:49:bd:d5:a7:
e6:55:96:7f:2b:ef:38:10:bc:a7:25:ac:71:af:86:
49:55:68:c7:c6:3b:13:4b:f2:73:d8:8b:8c:ed:11:
92:8b:d5:15:31:89:85:fc:6e:33:5c:22:0a:cc:41:
a8:9d:c6:fd:37:27:e9:b5:cd:3b:75:08:48:86:7d:
28:29:10:81:16:a7:d7:6a:e2:8a:ea:3c:9e:82:e2:
c1:00:e0:fc:a4:37:55:5f:a9:2d:48:1c:86:d4:60:
78:26:48:84:e8:dc:88:0d:8d:64:ff:c7:3c:75:95:
6a:59:7c:34:c9:61:08:8a:cb:fc:9f:30:13:e5:8d:
20:ac:7f:65:15:fc:15:9b:c8:34:c6:ac:56:81:19:
76:11:8f:dc:b9:3b:d5:3a:9f:08:72:b0:48:a7:5e:
ed:7d:9a:14:30:3f:3a:38:a3:66:60:0e:8d:28:f7:
3e:8a:81:d3:e1:24:5a:94:45:ff:cb:89:35:f4:15:
48:bb:90:b6:48:e1:0b:a8:81:e3:08:b1:77:2a:e9:
b7:26:87:a6:1f:3f:eb:5e:7b:18:29:d8:46:6e:db:
fa:14:dc:a9:d9:9d:12:20:94:57:26:42:6b:00:1c:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:D2:29:26:1E:F3:C4:8B:8E:69:81:FD:1D:73:83:41:1E:DB:97
X509v3 Authority Key Identifier:
keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ab:38:f4:2c:83:2f:b3:c6:20:f8:65:4f:be:3d:e1:d9:b3:
18:0b:a5:99:11:fb:de:17:b3:3d:31:63:ef:55:47:dc:e6:43:
ee:9b:19:15:04:56:fd:45:87:e7:de:da:7e:1e:d1:49:71:3c:
31:9a:61:4e:cc:6a:1f:b8:94:bf:9e:93:22:fd:bb:bc:40:a7:
8d:4a:3d:f2:8d:6a:17:18:f7:99:b9:55:f5:a6:5e:4d:67:1e:
d3:1b:b1:f2:0e:6d:04:7d:5d:fe:ee:1d:fd:43:02:6e:1a:13:
53:95:95:8c:c1:3f:96:72:9f:63:b6:c3:c5:05:4c:92:45:3c:
e4:54:d8:ef:d0:35:a0:b4:8c:6b:d9:2a:46:6a:a2:ce:bb:cf:
1a:2b:4f:69:b7:57:bf:95:f6:c3:13:33:37:e2:0a:b7:72:a7:
a7:13:5c:64:b7:4b:bd:da:93:bc:d9:78:ed:ed:06:f1:58:01:
1b:0b:19:43:ed:13:3b:ab:f0:38:74:3d:e1:96:6e:ba:ee:40:
df:b4:d6:9b:53:6c:8a:f4:72:8f:d3:5b:8d:cb:79:26:95:2d:
9f:a3:9e:c8:8c:29:d4:08:9e:af:c0:1d:3d:1f:25:0c:08:0d:
75:67:0d:80:8d:3e:6f:e8:1c:a9:fe:88:94:eb:ce:c4:f1:75:
3e:80:4b:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURL8KgZoP1p9jokeCQv400KW2KRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGM0Y2N0VBODAwNTA0RjIzNzk1RTIyOTkxODE1RjlF
Njg2QzgxMTAeFw0yNjExMDExNTE1MDBaFw0yNjExMDIxOTEwMDBaMDMxMTAvBgNV
BAMTKDI0Q0NEMjI5MjYxRUYzQzQ4QjhFNjk4MUZEMUQ3MzgzNDExRURCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05L7MApzvuSVk+dtCNo2/cuMH
zYK2qL8zSb3Vp+ZVln8r7zgQvKclrHGvhklVaMfGOxNL8nPYi4ztEZKL1RUxiYX8
bjNcIgrMQaidxv03J+m1zTt1CEiGfSgpEIEWp9dq4orqPJ6C4sEA4PykN1VfqS1I
HIbUYHgmSITo3IgNjWT/xzx1lWpZfDTJYQiKy/yfMBPljSCsf2UV/BWbyDTGrFaB
GXYRj9y5O9U6nwhysEinXu19mhQwPzo4o2ZgDo0o9z6KgdPhJFqURf/LiTX0FUi7
kLZI4QuogeMIsXcq6bcmh6YfP+teexgp2EZu2/oU3KnZnRIglFcmQmsAHDdpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJMzSKSYe88SLjmmB/R1zg0Ee25cwHwYDVR0j
BBgwFoAU1/P2fqgAUE8jeV4imRgV+eaGyBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdx
dWUvMS9EN0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RjNGNjdFQTgwMDUwNEYy
Mzc5NUUyMjk5MTgxNUY5RTY4NkM4MTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMS9E
N0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjas49CyDL7PGIPhlT7494dmzGAulmRH73hezPTFj71VH3OZD7psZFQRW/UWH
597afh7RSXE8MZphTsxqH7iUv56TIv27vECnjUo98o1qFxj3mblV9aZeTWce0xux
8g5tBH1d/u4d/UMCbhoTU5WVjME/lnKfY7bDxQVMkkU85FTY79A1oLSMa9kqRmqi
zrvPGitPabdXv5X2wxMzN+IKt3KnpxNcZLdLvdqTvNl47e0G8VgBGwsZQ+0TO6vw
OHQ94ZZuuu5A37TWm1NsivRyj9Nbjct5JpUtn6OeyIwp1Aier8AdPR8lDAgNdWcN
gI0+b+gcqf6IlOvOxPF1PoBL0g==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:13:15 2026 by rpki-client