
Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier: krjDKXXAQ8sEGi+NBLoqI5CvxpHtvgMy3ALsZ4uSMNk=
Subject key identifier: C6:BA:4F:08:6E:18:7E:43:D9:20:DC:51:B9:4E:A4:CC:27:D7:D8:4C
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial: 469BA874562ABE3A6248B5F4BF484C21F2A15DF9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number: 04D6
Signing time: Sat 31 Oct 2026 09:52:31 +0000
Manifest this update: Sat 31 Oct 2026 09:47:31 +0000
Manifest next update: Sun 01 Nov 2026 13:25:31 +0000
Files and hashes: 1: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: aUy2IeI4DfTT7B4IQ6D5DmetkRL6kRwDeLNDL79Ue1k=)
2: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
3: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
4: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
5: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9b:a8:74:56:2a:be:3a:62:48:b5:f4:bf:48:4c:21:f2:a1:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Validity
Not Before: Oct 31 09:47:31 2026 GMT
Not After : Nov 1 13:25:31 2026 GMT
Subject: CN=C6BA4F086E187E43D920DC51B94EA4CC27D7D84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:34:82:44:2a:fa:94:94:60:a5:40:8f:92:
65:3d:78:ef:f7:92:49:61:ea:0c:e2:d3:f6:db:12:
e5:6d:f0:57:0b:ac:0c:d4:55:0e:17:b9:92:5c:28:
54:61:a5:eb:37:c7:26:e9:65:9b:64:a9:cb:63:62:
d4:af:51:52:f6:82:02:ca:3a:72:7a:2c:20:7c:53:
fd:3f:d9:2a:75:3e:a6:06:0f:ef:6a:f2:c7:00:f6:
b6:51:fb:db:05:bc:48:64:a8:fb:9d:8d:0c:b7:a5:
a7:d1:27:e2:b7:3e:14:70:51:83:3e:c6:c4:21:12:
65:14:bd:39:03:f7:a4:e4:e6:4c:27:8a:be:63:7c:
f9:b9:44:de:ad:12:9b:16:3d:a1:c2:38:6c:91:17:
be:e8:ea:29:06:ea:2e:26:9e:fb:f8:92:d3:a8:db:
79:b0:ba:db:85:86:b1:ab:9e:d0:9c:31:c1:aa:89:
e8:a6:b5:37:f2:c4:1c:03:0d:98:f6:76:21:6c:c4:
8d:fe:ab:9a:71:ab:b2:5b:ad:f3:4a:ff:9e:ce:48:
13:21:16:45:5b:41:d6:98:6a:d8:30:fb:b2:a1:1c:
2f:fe:bb:92:ed:6c:9e:b2:c6:19:24:51:ac:72:f6:
63:fe:0f:01:cd:31:4b:ff:e6:eb:77:c4:b9:bf:c9:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BA:4F:08:6E:18:7E:43:D9:20:DC:51:B9:4E:A4:CC:27:D7:D8:4C
X509v3 Authority Key Identifier:
keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:f3:10:c0:3f:ab:fa:31:e1:88:7b:90:6a:0a:ba:c8:af:
5d:55:02:73:bc:9d:36:5d:b0:b3:dc:f0:db:d1:4d:5b:6b:3e:
6b:f8:a9:13:37:6d:f6:bd:bc:fb:6c:3f:f5:bf:63:cf:13:af:
be:15:f5:1c:93:23:be:1d:1f:8b:15:9e:b9:0a:d0:36:5d:73:
c8:c5:0b:5c:a4:6e:9d:f5:8a:5c:af:99:d9:6e:43:89:83:ce:
87:4e:e8:b8:24:f2:a7:85:06:a9:dc:27:61:df:23:c5:ac:d1:
63:8d:45:c3:3e:fd:75:0c:05:e2:12:8e:61:03:72:53:f4:80:
32:29:c1:3f:7d:37:df:cd:6f:55:47:5b:ab:59:c7:fd:d8:8a:
6c:f6:b9:f8:2c:18:39:11:5d:4d:e9:cf:fc:02:76:7f:d6:1d:
d6:b8:41:73:dd:8b:81:ec:15:8e:eb:75:d4:01:62:6d:e4:3e:
a2:17:aa:e8:b4:0c:cb:31:24:bb:65:3f:f0:af:ba:94:94:e5:
59:3d:50:67:f6:77:75:f8:5c:36:b0:89:0d:5a:1a:de:fa:91:
0e:27:55:31:67:f6:27:cf:ad:af:d8:35:a5:77:dc:d1:d1:c1:
7b:ce:29:3e:7d:ff:1b:82:95:12:6d:eb:09:cf:b8:67:44:51:
8c:85:fb:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURpuodFYqvjpiSLX0v0hMIfKhXfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThENzA3REEwRjZENzIxQ0E5MDU2QUUwQjcxMjZFREQy
MTRBRDdENTAeFw0yNjEwMzEwOTQ3MzFaFw0yNjExMDExMzI1MzFaMDMxMTAvBgNV
BAMTKEM2QkE0RjA4NkUxODdFNDNEOTIwREM1MUI5NEVBNENDMjdEN0Q4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGjSCRCr6lJRgpUCPkmU9eO/3
kklh6gzi0/bbEuVt8FcLrAzUVQ4XuZJcKFRhpes3xybpZZtkqctjYtSvUVL2ggLK
OnJ6LCB8U/0/2Sp1PqYGD+9q8scA9rZR+9sFvEhkqPudjQy3pafRJ+K3PhRwUYM+
xsQhEmUUvTkD96Tk5kwnir5jfPm5RN6tEpsWPaHCOGyRF77o6ikG6i4mnvv4ktOo
23mwutuFhrGrntCcMcGqieimtTfyxBwDDZj2diFsxI3+q5pxq7JbrfNK/57OSBMh
FkVbQdaYatgw+7KhHC/+u5LtbJ6yxhkkUaxy9mP+DwHNMUv/5ut3xLm/yRJ/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxrpPCG4YfkPZINxRuU6kzCfX2EwwHwYDVR0j
BBgwFoAUmNcH2g9tchypBWrgtxJu3SFK19UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMS85OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RDcwN0RBMEY2RDcyMUNB
OTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85
OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcQ/zEMA/q/ox4Yh7kGoKusivXVUCc7ydNl2ws9zw29FNW2s+a/ipEzdt9r28
+2w/9b9jzxOvvhX1HJMjvh0fixWeuQrQNl1zyMULXKRunfWKXK+Z2W5DiYPOh07o
uCTyp4UGqdwnYd8jxazRY41Fwz79dQwF4hKOYQNyU/SAMinBP303381vVUdbq1nH
/diKbPa5+CwYORFdTenP/AJ2f9Yd1rhBc92LgewVjut11AFibeQ+oheq6LQMyzEk
u2U/8K+6lJTlWT1QZ/Z3dfhcNrCJDVoa3vqRDidVMWf2J8+tr9g1pXfc0dHBe84p
Pn3/G4KVEm3rCc+4Z0RRjIX7ow==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:58:12 2026 by rpki-client