Error: rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft File: 736CC7BD00E444B3C507A4A165D0774513CFB15B.mft (raw, json) Hash identifier: rAKVAtAi7qo4Ttrt7OcRBmrKQtwN7nEZTOm1u4fWnJA= Subject key identifier: 16:A0:84:84:82:A3:23:1E:10:90:92:3D:44:14:74:58:30:85:10:F1 Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B Certificate issuer: /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B Certificate serial: 209D70CC450C4053219F5EF5824EF0758B4ADC46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft Manifest number: 04D3 Signing time: Sat 31 Oct 2026 06:20:03 +0000 Manifest this update: Sat 31 Oct 2026 06:15:03 +0000 Manifest next update: Sun 01 Nov 2026 09:33:03 +0000 Files and hashes: 1: 736CC7BD00E444B3C507A4A165D0774513CFB15B.crl (hash: ZcrMN+3IEwTzH+MrI3bLBdewhpG5UINu0EFxO1bFwzM=) 2: 3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (hash: EKcgXFnu+IbEZT8PLAUccUxYsxBrLHmqx4FyOw8vJJ0=) 3: 323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (hash: A+LodF7cStktK/ueF+NPXgQkkd337778Lh5spytQ/6c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 09:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9d:70:cc:45:0c:40:53:21:9f:5e:f5:82:4e:f0:75:8b:4a:dc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B Validity Not Before: Oct 31 06:15:03 2026 GMT Not After : Nov 1 09:33:03 2026 GMT Subject: CN=16A0848482A3231E1090923D44147458308510F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:17:2d:74:3f:0d:fc:7b:37:65:d7:bc:e0: 4f:24:c7:f6:7a:f8:4d:e1:fd:0d:8c:ed:1f:13:68: a2:9b:57:1c:11:f4:44:92:0a:7d:52:9a:c2:05:ca: 56:f2:1e:f8:cc:90:18:27:9d:73:83:a9:9c:0e:71: 80:6d:1b:62:e2:f9:18:ce:8d:12:fa:2c:53:d0:bc: 99:a6:32:c1:f2:5b:dc:94:8d:41:bb:5b:1d:1f:1d: 44:f0:12:99:10:e7:5e:38:52:9c:1c:07:e8:ec:a8: 8a:77:f1:9e:7e:9b:49:90:02:70:3f:03:03:37:c5: 59:63:b9:d3:3f:72:b2:a9:fd:32:d9:d4:af:7a:fb: f0:40:fb:03:af:19:17:82:85:f1:1a:61:31:7f:e0: 21:ef:4a:a9:ec:aa:9b:be:ce:a0:bc:90:2e:3a:79: 2c:18:59:39:ef:9c:28:c8:cb:de:37:8b:89:af:8b: b1:7d:13:92:a3:22:2a:2f:7c:4b:ea:11:05:80:76: 03:f0:e5:69:59:e5:cf:0f:8e:14:36:8b:ad:1b:50: 4a:13:83:7f:ff:a3:83:22:87:54:58:3c:b2:a1:5e: b4:cb:29:3d:82:d9:94:41:2c:6f:95:04:7e:fe:2a: a9:c9:03:ec:1e:1e:c7:51:ba:77:3c:ad:55:0c:7c: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:84:84:82:A3:23:1E:10:90:92:3D:44:14:74:58:30:85:10:F1 X509v3 Authority Key Identifier: keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:57:61:e3:98:be:7c:04:fc:a3:5e:f0:5d:51:bd:50:65: f3:c4:2e:24:33:5e:61:03:71:53:45:f4:4c:12:ed:00:58:42: a2:23:90:5c:81:e4:a8:06:f7:f6:07:7b:eb:0b:c1:f6:12:33: 19:32:30:4a:81:b6:45:f7:e3:fa:aa:6a:a2:ce:d1:88:2b:bd: 0c:25:7e:cd:82:05:66:27:06:57:c1:fd:33:56:4e:f0:84:19: b8:db:24:b9:0e:94:b8:29:54:d0:b4:cc:03:55:a2:10:e9:e5: 04:cf:39:d0:3d:c8:fb:3f:c2:94:77:ab:e1:0c:8a:74:54:19: b8:78:55:74:66:c3:70:c5:d1:b7:03:75:73:80:0e:9a:50:cc: 9b:03:a9:61:56:f5:65:99:ae:11:ac:e9:16:9c:f6:3b:89:61: 5a:c3:f5:75:7f:42:19:73:87:fb:35:96:d8:d2:91:8f:15:9d: da:c3:72:72:4b:93:5a:e8:47:ba:b2:b2:a5:26:ad:a7:e9:71: da:76:b6:41:f3:2b:f4:80:2c:9c:ba:14:f5:ea:46:5b:d9:67: 1a:eb:ea:e8:ac:b4:d9:08:47:bb:fc:0c:85:68:4a:b5:7f:9a: 64:f5:0e:09:cf:73:57:85:70:3a:38:e3:ea:cb:db:05:7b:59: b3:e8:f4:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIJ1wzEUMQFMhn171gk7wdYtK3EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2Q0M3QkQwMEU0NDRCM0M1MDdBNEExNjVEMDc3NDUx M0NGQjE1QjAeFw0yNjEwMzEwNjE1MDNaFw0yNjExMDEwOTMzMDNaMDMxMTAvBgNV BAMTKDE2QTA4NDg0ODJBMzIzMUUxMDkwOTIzRDQ0MTQ3NDU4MzA4NTEwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJhctdD8N/Hs3Zde84E8kx/Z6 +E3h/Q2M7R8TaKKbVxwR9ESSCn1SmsIFylbyHvjMkBgnnXODqZwOcYBtG2Li+RjO jRL6LFPQvJmmMsHyW9yUjUG7Wx0fHUTwEpkQ5144UpwcB+jsqIp38Z5+m0mQAnA/ AwM3xVljudM/crKp/TLZ1K96+/BA+wOvGReChfEaYTF/4CHvSqnsqpu+zqC8kC46 eSwYWTnvnCjIy943i4mvi7F9E5KjIiovfEvqEQWAdgPw5WlZ5c8PjhQ2i60bUEoT g3//o4Mih1RYPLKhXrTLKT2C2ZRBLG+VBH7+KqnJA+weHsdRunc8rVUMfFoJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFqCEhIKjIx4QkJI9RBR0WDCFEPEwHwYDVR0j BBgwFoAUc2zHvQDkRLPFB6ShZdB3RRPPsVswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFi OEovMS83MzZDQzdCRDAwRTQ0NEIzQzUwN0E0QTE2NUQwNzc0NTEzQ0ZCMTVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNkNDN0JEMDBFNDQ0QjND NTA3QTRBMTY1RDA3NzQ1MTNDRkIxNUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFiOEovMS83 MzZDQzdCRDAwRTQ0NEIzQzUwN0E0QTE2NUQwNzc0NTEzQ0ZCMTVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB7tXYeOYvnwE/KNe8F1RvVBl88QuJDNeYQNxU0X0TBLtAFhCoiOQXIHkqAb3 9gd76wvB9hIzGTIwSoG2Rffj+qpqos7RiCu9DCV+zYIFZicGV8H9M1ZO8IQZuNsk uQ6UuClU0LTMA1WiEOnlBM850D3I+z/ClHer4QyKdFQZuHhVdGbDcMXRtwN1c4AO mlDMmwOpYVb1ZZmuEazpFpz2O4lhWsP1dX9CGXOH+zWW2NKRjxWd2sNyckuTWuhH urKypSatp+lx2na2QfMr9IAsnLoU9epGW9lnGuvq6Ky02QhHu/wMhWhKtX+aZPUO Cc9zV4VwOjjj6svbBXtZs+j0pQ== -----END CERTIFICATE-----Generated at Sat Oct 31 21:27:53 2026 by rpki-client