Error: rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: lv4hT7ga/fikoQVFkIbnDyIBPIOn2NoIK4lDur/Ry+U= Subject key identifier: 88:5F:B1:89:21:B7:72:F1:08:F4:D5:EB:7E:30:83:98:77:11:87:9B Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 026F7D40DA1931853BD8A75F93647A5ABDE289AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 04E6 Signing time: Sat 31 Oct 2026 02:47:29 +0000 Manifest this update: Sat 31 Oct 2026 02:42:29 +0000 Manifest next update: Sun 01 Nov 2026 06:03:29 +0000 Files and hashes: 1: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: wZ3FKrk16KxWrlfyyvwprkQ3rDHWEeBjvNQpTwjKSvg=) 2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: 0ruo9G2TBybwpQ3qqKvjzG1HtpQSL6YNkykWZE3/Le8=) 3: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: 801y3lfhDTZ8xivM8mU35dnl9g1g/QxpCrvzHpFsImc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 06:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:7d:40:da:19:31:85:3b:d8:a7:5f:93:64:7a:5a:bd:e2:89:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Oct 31 02:42:29 2026 GMT Not After : Nov 1 06:03:29 2026 GMT Subject: CN=885FB18921B772F108F4D5EB7E3083987711879B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:68:52:cf:1f:89:45:9d:ea:86:12:6c:92: bf:84:ec:ac:e6:07:17:ca:53:0e:91:b7:08:7e:98: 89:b8:13:1e:ae:1d:79:d8:1a:fe:e7:1e:b7:86:a9: 72:81:22:06:b3:7f:21:c0:57:f5:9c:0d:2d:ca:a5: 5d:d7:7f:00:5d:8f:73:67:51:28:42:65:5c:af:42: 00:84:41:59:d2:f6:54:ec:7b:86:0b:9a:fe:df:45: aa:ac:9a:3d:c1:70:0a:3b:b8:f3:db:c2:80:cf:5d: 75:5a:41:88:30:de:4b:26:b4:0f:f2:22:a3:f5:61: 89:8c:bd:49:6b:b1:7b:1d:21:e3:9f:e5:ee:9a:13: cf:55:dd:f1:1d:a7:9e:f4:67:ee:5c:1b:02:d5:c9: 89:73:ba:ab:57:49:7a:c8:74:b8:d7:c1:93:55:42: d9:2d:8f:ba:58:f7:62:63:b4:84:b2:0f:7f:79:9e: e4:df:11:f1:27:c3:0e:85:87:23:2f:0a:4f:01:e8: 88:09:a6:50:5c:ff:8c:7b:f6:1f:a7:fb:37:4d:64: 49:a1:fa:89:21:9d:33:97:84:6b:41:2d:10:eb:7b: 99:5b:85:28:b4:3c:0a:ec:fd:bd:2e:09:f2:25:cf: f3:56:86:ba:22:dd:45:e4:cc:46:4a:39:2b:14:52: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5F:B1:89:21:B7:72:F1:08:F4:D5:EB:7E:30:83:98:77:11:87:9B X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:33:68:7b:0b:e9:65:ff:7f:f4:1d:b6:cb:05:03:de:73: 91:ef:35:61:df:ab:25:07:93:94:f7:08:a9:d3:d2:28:44:aa: ff:61:78:4f:e2:13:fb:7e:8c:b8:08:4f:10:eb:5a:65:e1:f8: 51:18:ad:ba:16:8d:48:22:c9:2e:0c:8e:2c:cd:5b:9e:2b:78: 91:03:36:e5:46:04:78:8f:f2:15:2d:75:77:e3:d4:34:28:d0: a1:ca:d1:33:b8:81:53:19:07:50:9f:11:53:ac:cf:43:79:55: f4:ac:55:15:d4:d7:b4:28:7a:7b:48:a5:74:2f:5d:bf:68:1b: 81:fe:7e:cb:82:a7:fc:f3:0a:95:d7:36:d1:88:fe:62:f2:f3: e0:bf:47:5b:b9:16:93:99:b1:07:73:97:2a:14:91:0c:3c:38: f5:26:9a:89:24:ba:9b:b9:85:ec:c7:88:cb:f0:66:85:05:66: 95:2c:3d:02:e1:65:f1:e4:5a:8a:1e:28:b7:d6:c0:0e:84:2d: 64:77:ac:bd:99:e3:e0:a4:de:bf:b4:fb:12:5f:c1:33:7c:4e: ae:51:7b:51:3c:ec:47:6b:04:08:ff:b7:96:16:25:67:af:a6: 3c:f8:8d:d7:45:ee:e5:02:72:2f:1c:6c:27:5c:79:f3:95:37: 97:f0:60:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAm99QNoZMYU72Kdfk2R6Wr3iia4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNjEwMzEwMjQyMjlaFw0yNjExMDEwNjAzMjlaMDMxMTAvBgNV BAMTKDg4NUZCMTg5MjFCNzcyRjEwOEY0RDVFQjdFMzA4Mzk4NzcxMTg3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy2hSzx+JRZ3qhhJskr+E7Kzm BxfKUw6Rtwh+mIm4Ex6uHXnYGv7nHreGqXKBIgazfyHAV/WcDS3KpV3XfwBdj3Nn UShCZVyvQgCEQVnS9lTse4YLmv7fRaqsmj3BcAo7uPPbwoDPXXVaQYgw3ksmtA/y IqP1YYmMvUlrsXsdIeOf5e6aE89V3fEdp570Z+5cGwLVyYlzuqtXSXrIdLjXwZNV Qtktj7pY92JjtISyD395nuTfEfEnww6FhyMvCk8B6IgJplBc/4x79h+n+zdNZEmh +okhnTOXhGtBLRDre5lbhSi0PArs/b0uCfIlz/NWhroi3UXkzEZKOSsUUrqhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiF+xiSG3cvEI9NXrfjCDmHcRh5swHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH3szaHsL6WX/f/QdtssFA95zke81Yd+rJQeTlPcIqdPSKESq/2F4T+IT+36M uAhPEOtaZeH4URituhaNSCLJLgyOLM1bnit4kQM25UYEeI/yFS11d+PUNCjQocrR M7iBUxkHUJ8RU6zPQ3lV9KxVFdTXtCh6e0ildC9dv2gbgf5+y4Kn/PMKldc20Yj+ YvLz4L9HW7kWk5mxB3OXKhSRDDw49SaaiSS6m7mF7MeIy/BmhQVmlSw9AuFl8eRa ih4ot9bADoQtZHesvZnj4KTev7T7El/BM3xOrlF7UTzsR2sECP+3lhYlZ6+mPPiN 10Xu5QJyLxxsJ1x585U3l/Bgxw== -----END CERTIFICATE-----Generated at Sat Oct 31 09:50:42 2026 by rpki-client