
Error: rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
File: 1A3ED1628CA42B3B4C8213417B61162F196BD434.mft (raw, json)
Hash identifier: CXcPBhCuJw4YRmDcJ7OVqEn9P56u9rbrI2Snj1p3rEw=
Subject key identifier: 44:B8:A6:C6:26:0D:3E:75:72:79:78:9E:55:E0:97:86:12:B2:ED:C7
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Certificate issuer: /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial: 15FCF9E93B145AA3AC8B384114BE99314BCFF9C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
Manifest number: 04E8
Signing time: Sun 01 Nov 2026 06:43:32 +0000
Manifest this update: Sun 01 Nov 2026 06:38:32 +0000
Manifest next update: Mon 02 Nov 2026 09:12:32 +0000
Files and hashes: 1: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: 03Q6Ajelbpc64vlNMBlcrxLm3QsKqrWHapBwJphpvBc=)
2: 1A3ED1628CA42B3B4C8213417B61162F196BD434.crl (hash: s3Pq64vJ+l625FQzU+dqXeCfC84ClKIyj/h0G2wWTMk=)
3: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: GAJ8WpJ1DAdh2yYjSNAaICIyXwqnfBAQyIaFmVftJOI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 09:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fc:f9:e9:3b:14:5a:a3:ac:8b:38:41:14:be:99:31:4b:cf:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Validity
Not Before: Nov 1 06:38:32 2026 GMT
Not After : Nov 2 09:12:32 2026 GMT
Subject: CN=44B8A6C6260D3E757279789E55E0978612B2EDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:13:b3:eb:35:cf:69:1e:00:c1:4b:db:32:
03:29:20:bf:56:bb:d0:9d:26:82:0b:d0:99:02:a8:
94:59:2d:30:df:3a:4d:0c:6a:ad:0e:09:38:00:bc:
58:90:9c:fe:86:54:e7:da:33:5a:07:c7:d5:95:37:
c7:b7:ca:fd:5f:6d:7a:6a:d5:59:f7:b5:d7:a9:67:
1c:d5:f4:cc:ea:a1:8e:09:e6:df:e7:17:db:ec:5d:
87:08:25:dd:fa:d1:4c:44:b5:01:3b:0d:18:a2:57:
7a:c0:ba:a3:f1:e5:95:34:22:4b:ed:21:f9:b0:b3:
6b:b1:b6:65:1c:7d:4b:42:cc:c3:ac:ed:60:e0:f8:
96:1a:07:fc:23:a3:b7:bd:9e:d9:38:d0:96:5e:0e:
08:a5:09:4f:7f:ef:47:e0:d7:30:da:fa:47:60:5f:
de:92:6c:89:a1:c5:5c:28:40:89:7f:22:92:bf:c2:
e0:b6:6e:89:5c:64:e6:55:d9:f8:00:76:50:d3:16:
57:d3:36:51:7d:cf:f8:98:45:0a:23:04:c1:38:de:
63:59:7e:19:32:38:fb:cf:77:60:93:cf:79:4a:88:
7a:6d:a3:03:a5:65:15:02:3b:77:27:e8:16:1b:57:
c5:25:1f:94:80:ca:76:b8:20:4b:9a:f8:75:b5:c2:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:A6:C6:26:0D:3E:75:72:79:78:9E:55:E0:97:86:12:B2:ED:C7
X509v3 Authority Key Identifier:
keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:3a:4c:13:64:a5:b6:2f:e8:6a:16:73:b8:0f:31:62:12:
98:50:a8:41:5f:d4:e0:9e:82:2e:f5:f9:c4:57:d5:2a:f5:e0:
e5:70:18:9e:42:80:6e:35:b2:47:b0:eb:21:84:e0:a7:76:01:
c4:a3:83:6f:61:89:51:9c:1b:3e:b9:fb:86:17:80:c3:2a:0e:
5c:71:02:07:21:fe:92:01:9a:3f:b8:44:1e:46:31:d3:c1:97:
99:ff:cb:66:ee:a8:ca:34:65:8a:88:d7:d3:a4:92:94:d2:a6:
29:ca:d7:6c:02:58:3c:79:3f:70:75:f8:ee:42:61:a7:e0:5e:
df:ae:24:56:37:8d:5e:fd:9f:bb:89:57:8b:e5:2d:13:6b:58:
32:2b:20:bd:e2:44:9b:1e:d8:ee:06:5d:72:55:32:00:03:c5:
a6:48:d0:03:8d:25:e6:7e:43:91:b0:11:2a:29:55:05:80:54:
38:c8:a5:f6:25:8a:ba:3b:e2:3b:02:bc:0d:0e:49:eb:d8:56:
7f:52:bd:a2:cb:f9:2c:49:00:ef:75:ff:e1:b5:0c:8a:c0:1d:
7f:66:a5:01:5b:96:38:fc:0e:91:0e:6c:3b:0f:05:ff:99:9f:
ad:d5:2d:13:a7:1b:97:a5:85:99:af:a2:0e:b6:d0:3e:f3:ee:
f6:c6:4a:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFfz56TsUWqOsizhBFL6ZMUvP+cMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzRUQxNjI4Q0E0MkIzQjRDODIxMzQxN0I2MTE2MkYx
OTZCRDQzNDAeFw0yNjExMDEwNjM4MzJaFw0yNjExMDIwOTEyMzJaMDMxMTAvBgNV
BAMTKDQ0QjhBNkM2MjYwRDNFNzU3Mjc5Nzg5RTU1RTA5Nzg2MTJCMkVEQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zROz6zXPaR4AwUvbMgMpIL9W
u9CdJoIL0JkCqJRZLTDfOk0Maq0OCTgAvFiQnP6GVOfaM1oHx9WVN8e3yv1fbXpq
1Vn3tdepZxzV9MzqoY4J5t/nF9vsXYcIJd360UxEtQE7DRiiV3rAuqPx5ZU0Ikvt
Ifmws2uxtmUcfUtCzMOs7WDg+JYaB/wjo7e9ntk40JZeDgilCU9/70fg1zDa+kdg
X96SbImhxVwoQIl/IpK/wuC2bolcZOZV2fgAdlDTFlfTNlF9z/iYRQojBME43mNZ
fhkyOPvPd2CTz3lKiHptowOlZRUCO3cn6BYbV8UlH5SAyna4IEua+HW1wvHNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURLimxiYNPnVyeXieVeCXhhKy7ccwHwYDVR0j
BBgwFoAUGj7RYoykKztMghNBe2EWLxlr1DQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnpRSnBVMmZiTTRXWDd0Wnl2a2lZUHZqZHg2Z1lmZ1lRTERLQVpmdlM1
c3ovMS8xQTNFRDE2MjhDQTQyQjNCNEM4MjEzNDE3QjYxMTYyRjE5NkJENDM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBM0VEMTYyOENBNDJCM0I0
QzgyMTM0MTdCNjExNjJGMTk2QkQ0MzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnpRSnBVMmZiTTRXWDd0Wnl2a2lZUHZqZHg2Z1lmZ1lRTERLQVpmdlM1c3ovMS8x
QTNFRDE2MjhDQTQyQjNCNEM4MjEzNDE3QjYxMTYyRjE5NkJENDM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYX46TBNkpbYv6GoWc7gPMWISmFCoQV/U4J6CLvX5xFfVKvXg5XAYnkKAbjWy
R7DrIYTgp3YBxKODb2GJUZwbPrn7hheAwyoOXHECByH+kgGaP7hEHkYx08GXmf/L
Zu6oyjRliojX06SSlNKmKcrXbAJYPHk/cHX47kJhp+Be364kVjeNXv2fu4lXi+Ut
E2tYMisgveJEmx7Y7gZdclUyAAPFpkjQA40l5n5DkbARKilVBYBUOMil9iWKujvi
OwK8DQ5J69hWf1K9osv5LEkA73X/4bUMisAdf2alAVuWOPwOkQ5sOw8F/5mfrdUt
E6cbl6WFma+iDrbQPvPu9sZKbA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 21:44:28 2026 by rpki-client