Error: rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: U5AZ8634n1BNPS1G0xmxiqWq3l2ila8vfI/4E2XPic4= Subject key identifier: 02:EB:D9:F0:66:B0:18:DA:61:47:72:F9:55:C4:82:25:C3:ED:1B:EE Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 47CD0C83AECC39B7F30EEFBAE48832CE12660104 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 04DE Signing time: Thu 29 Oct 2026 18:50:05 +0000 Manifest this update: Thu 29 Oct 2026 18:45:05 +0000 Manifest next update: Fri 30 Oct 2026 19:33:05 +0000 Files and hashes: 1: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=) 2: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: Lj1vlWykUGzLHSh2YBhBtMoqadVHW8fNsHQCyr+SJJg=) 3: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=) 4: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=) 5: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=) 6: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=) 7: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=) 8: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 19:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cd:0c:83:ae:cc:39:b7:f3:0e:ef:ba:e4:88:32:ce:12:66:01:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Oct 29 18:45:05 2026 GMT Not After : Oct 30 19:33:05 2026 GMT Subject: CN=02EBD9F066B018DA614772F955C48225C3ED1BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:2b:a4:7e:72:cd:bc:06:1c:e2:78:5b:f0: 7c:8d:5b:f7:b1:0a:12:4a:bc:1d:f7:09:3b:16:61: be:64:a7:5c:95:9a:52:8f:3d:fe:af:4d:91:6b:3f: 68:4e:3f:90:f5:e6:69:17:1d:ff:42:45:6e:4a:c5: b6:26:c7:82:6c:92:2a:20:e4:9c:4d:d4:bc:d4:5e: 9e:e2:a0:2f:df:86:57:29:80:52:2a:96:5e:74:89: 51:dc:f7:b4:9a:6e:d7:8b:a0:b4:5b:df:93:b0:af: 67:da:8b:3e:9b:2a:b2:8f:28:5a:a7:f6:9c:e1:ea: 28:da:f5:94:68:a5:35:9d:85:cf:e8:59:63:e8:fe: 8c:1a:38:d8:e9:d4:86:44:bb:46:fd:ba:c7:b9:ce: 5a:b3:b7:15:71:04:cb:d6:61:64:89:67:98:09:4e: df:2e:00:0e:97:27:d9:b8:32:7b:c6:e6:7c:c4:6b: 34:60:7f:d1:77:ea:02:bf:f9:1f:2c:da:91:2d:66: 0e:71:71:56:c9:86:d0:8a:3a:3a:d7:b7:14:db:ab: 4f:ec:55:33:e3:e3:99:ba:a9:8c:8d:52:bd:a1:62: 70:5c:0a:10:0a:f1:32:0e:c6:a8:1c:50:4f:13:f7: 4c:53:e2:37:7e:53:60:6c:47:42:b4:59:99:85:60: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:D9:F0:66:B0:18:DA:61:47:72:F9:55:C4:82:25:C3:ED:1B:EE X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c4:e4:51:40:9e:91:19:b4:67:4f:a4:0d:fd:4a:8a:81:53: bf:c0:eb:32:3c:8e:c0:f2:36:eb:ab:39:20:51:8d:f6:e4:25: 3d:11:a9:24:69:5f:83:fc:94:06:14:9e:0e:ce:c8:6c:9f:9e: 76:1c:df:f2:e0:46:0f:99:7b:ba:a3:12:ba:c4:f7:e1:11:f9: 28:18:a6:a9:94:88:a1:c2:03:9c:13:d1:a0:1e:cc:fd:1a:80: 17:c0:1d:54:03:4f:0d:14:30:0a:71:82:f0:1f:48:0e:c0:fb: ad:00:ed:db:34:8f:a0:85:c0:63:25:fe:ab:f1:5d:9b:2f:4a: 10:cc:0b:7e:e7:fb:f7:f5:86:59:29:98:a6:82:89:ce:9f:5b: 3b:46:0b:d5:b1:ff:da:4c:b9:ae:db:92:19:3f:ca:8f:f1:9a: 37:db:36:3d:79:e2:fd:e9:36:e1:95:1f:9b:3e:8d:6f:a0:45: 7d:99:46:87:64:82:ed:d3:fd:af:02:d6:6c:ca:fa:80:43:2e: 2a:82:72:2c:1a:f4:c4:3f:48:13:f8:cd:ac:aa:63:65:59:12: 18:71:99:0f:f5:5f:4b:c5:ae:e4:3d:22:db:35:12:87:0f:ef: 8a:8e:10:9f:10:f5:32:6d:d8:bb:8d:d2:22:46:87:ab:f2:e5: ab:cd:9b:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR80Mg67MObfzDu+65IgyzhJmAQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNjEwMjkxODQ1MDVaFw0yNjEwMzAxOTMzMDVaMDMxMTAvBgNV BAMTKDAyRUJEOUYwNjZCMDE4REE2MTQ3NzJGOTU1QzQ4MjI1QzNFRDFCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3CukfnLNvAYc4nhb8HyNW/ex ChJKvB33CTsWYb5kp1yVmlKPPf6vTZFrP2hOP5D15mkXHf9CRW5KxbYmx4Jskiog 5JxN1LzUXp7ioC/fhlcpgFIqll50iVHc97SabteLoLRb35Owr2faiz6bKrKPKFqn 9pzh6ija9ZRopTWdhc/oWWPo/owaONjp1IZEu0b9use5zlqztxVxBMvWYWSJZ5gJ Tt8uAA6XJ9m4MnvG5nzEazRgf9F36gK/+R8s2pEtZg5xcVbJhtCKOjrXtxTbq0/s VTPj45m6qYyNUr2hYnBcChAK8TIOxqgcUE8T90xT4jd+U2BsR0K0WZmFYDIjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAuvZ8GawGNphR3L5VcSCJcPtG+4wHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZsTkUUCekRm0Z0+kDf1KioFTv8DrMjyOwPI266s5IFGN9uQlPRGpJGlfg/yU BhSeDs7IbJ+edhzf8uBGD5l7uqMSusT34RH5KBimqZSIocIDnBPRoB7M/RqAF8Ad VANPDRQwCnGC8B9IDsD7rQDt2zSPoIXAYyX+q/Fdmy9KEMwLfuf79/WGWSmYpoKJ zp9bO0YL1bH/2ky5rtuSGT/Kj/GaN9s2PXni/ek24ZUfmz6Nb6BFfZlGh2SC7dP9 rwLWbMr6gEMuKoJyLBr0xD9IE/jNrKpjZVkSGHGZD/VfS8Wu5D0i2zUShw/vio4Q nxD1Mm3Yu43SIkaHq/Llq82bZg== -----END CERTIFICATE-----Generated at Thu Oct 29 22:57:19 2026 by rpki-client