Error: rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json) Hash identifier: 5Jep8HCRnEWT8ce/P6JPJbmZKqvSjpKHydRXD4omttU= Subject key identifier: 14:77:22:C7:1E:AA:F3:A3:3D:C7:4D:67:30:A3:73:5C:CB:CE:A5:82 Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Certificate serial: 0D654F339B00681268C4FA4B2149D8B435BEA0C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft Manifest number: 04E0 Signing time: Sun 01 Nov 2026 21:54:02 +0000 Manifest this update: Sun 01 Nov 2026 21:49:02 +0000 Manifest next update: Mon 02 Nov 2026 22:58:02 +0000 Files and hashes: 1: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: k2PWwwd8WKmWEBgyqpPgjdzgFGcs1u3AJFYmcWzHYFE=) 2: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=) 3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 22:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:65:4f:33:9b:00:68:12:68:c4:fa:4b:21:49:d8:b4:35:be:a0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Validity Not Before: Nov 1 21:49:02 2026 GMT Not After : Nov 2 22:58:02 2026 GMT Subject: CN=147722C71EAAF3A33DC74D6730A3735CCBCEA582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:08:0d:43:45:8b:a2:49:c5:de:3f:37:0f: ca:b4:b1:a9:31:5e:e0:55:e7:43:7f:c6:50:55:cc: cc:9f:d3:2e:ae:73:83:51:90:91:b8:13:9e:10:e4: c6:f2:32:11:ed:65:6f:e0:9f:eb:d9:8a:4f:aa:f3: 1c:90:57:2f:fd:8a:af:c1:95:a5:58:39:46:33:6a: d4:7c:a1:1c:dd:ed:60:17:96:76:f4:bd:b9:7b:24: 59:98:18:d3:c3:b9:0b:60:c4:54:8c:01:31:ad:7e: e8:92:07:07:6c:80:ac:08:d2:24:43:53:e9:ce:af: 82:ed:0f:8f:99:85:b0:48:89:ce:1a:98:eb:80:c4: 3f:95:aa:34:ba:e5:90:6a:12:74:b8:1d:bc:a9:ec: c6:29:b6:11:c6:33:4f:3e:f0:43:f3:3b:9f:9f:a9: 7a:58:41:fc:d3:6b:4f:80:4c:7f:97:77:bb:99:29: 25:96:2f:b5:9b:4c:2b:4b:45:35:72:4d:c6:00:c0: b3:82:3b:d9:ab:8d:7e:e2:b2:34:8c:06:5e:72:be: f6:ca:69:cf:d4:05:93:2f:77:47:75:39:ee:82:88: f4:1f:56:c0:34:4e:73:28:39:17:72:98:e8:d4:f7: 64:91:86:a9:ba:0a:13:57:e3:01:60:b2:e0:88:32: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:22:C7:1E:AA:F3:A3:3D:C7:4D:67:30:A3:73:5C:CB:CE:A5:82 X509v3 Authority Key Identifier: keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3e:22:fd:67:78:16:36:31:3d:8a:25:98:d8:77:42:51:b9: 28:89:dc:6f:83:01:45:58:ca:60:6a:91:2a:9e:40:b2:03:89: 05:65:cf:fc:db:e2:0b:18:c2:b4:b4:aa:32:15:fe:b6:68:e9: 64:21:8b:c5:e6:7c:00:86:c8:d3:58:df:37:bd:3c:a6:c7:0b: cf:62:94:de:73:66:5f:50:19:d5:93:99:33:42:76:26:a9:e2: 97:9b:9b:ef:46:b9:6e:21:69:3d:3c:09:9f:1c:c3:61:00:b5: c0:75:8f:09:bf:44:4a:17:ad:19:b1:a5:f8:63:58:e5:52:b5: 2b:47:1a:3a:a5:be:d5:e9:1c:53:c7:36:24:2f:a3:e4:65:28: 23:2d:22:40:01:b4:1c:8f:01:85:8a:83:9f:0c:2c:d9:46:0e: 7d:01:cc:4e:a5:db:33:95:fe:61:85:37:9b:0e:1d:c4:90:2b: de:3f:f6:97:aa:96:18:ec:89:65:4d:58:e5:6d:25:6f:38:8c: 47:bc:81:b4:a7:0c:f6:40:e8:bf:dd:f7:2c:0f:fe:a8:25:f7: 36:9d:b4:e6:a9:05:8c:8e:12:a6:47:1b:d8:f9:93:aa:87:ce: b9:ca:ea:99:65:aa:61:88:2d:69:b4:5f:ec:c4:0e:4f:11:cd: a3:cf:f0:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDWVPM5sAaBJoxPpLIUnYtDW+oMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC MkI0MjJERjAeFw0yNjExMDEyMTQ5MDJaFw0yNjExMDIyMjU4MDJaMDMxMTAvBgNV BAMTKDE0NzcyMkM3MUVBQUYzQTMzREM3NEQ2NzMwQTM3MzVDQ0JDRUE1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QQgNQ0WLoknF3j83D8q0sakx XuBV50N/xlBVzMyf0y6uc4NRkJG4E54Q5MbyMhHtZW/gn+vZik+q8xyQVy/9iq/B laVYOUYzatR8oRzd7WAXlnb0vbl7JFmYGNPDuQtgxFSMATGtfuiSBwdsgKwI0iRD U+nOr4LtD4+ZhbBIic4amOuAxD+VqjS65ZBqEnS4Hbyp7MYpthHGM08+8EPzO5+f qXpYQfzTa0+ATH+Xd7uZKSWWL7WbTCtLRTVyTcYAwLOCO9mrjX7isjSMBl5yvvbK ac/UBZMvd0d1Oe6CiPQfVsA0TnMoORdymOjU92SRhqm6ChNX4wFgsuCIMtN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFHcixx6q86M9x01nMKNzXMvOpYIwHwYDVR0j BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4 QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABz4i/Wd4FjYxPYolmNh3QlG5KIncb4MBRVjKYGqRKp5AsgOJBWXP/NviCxjC tLSqMhX+tmjpZCGLxeZ8AIbI01jfN708pscLz2KU3nNmX1AZ1ZOZM0J2Jqnil5ub 70a5biFpPTwJnxzDYQC1wHWPCb9EShetGbGl+GNY5VK1K0caOqW+1ekcU8c2JC+j 5GUoIy0iQAG0HI8BhYqDnwws2UYOfQHMTqXbM5X+YYU3mw4dxJAr3j/2l6qWGOyJ ZU1Y5W0lbziMR7yBtKcM9kDov933LA/+qCX3Np205qkFjI4Spkcb2PmTqofOucrq mWWqYYgtabRf7MQOTxHNo8/wvw== -----END CERTIFICATE-----Generated at Mon Nov 2 07:31:26 2026 by rpki-client