
Error: rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
File: 66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft (raw, json)
Hash identifier: RNwf7KIygqkeBVS4ZfJFrOo+rq+QFPB6/m31X/B75uM=
Subject key identifier: 40:5F:24:CD:F0:4F:8E:0A:36:0C:F3:F2:3F:8B:DE:3F:48:B0:A5:1C
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Certificate issuer: /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial: 600B6839975CC8D9550A8038208CC0EE0A601374
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
Manifest number: 04E6
Signing time: Sat 31 Oct 2026 14:30:04 +0000
Manifest this update: Sat 31 Oct 2026 14:25:04 +0000
Manifest next update: Sun 01 Nov 2026 15:27:04 +0000
Files and hashes: 1: 66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl (hash: ogAEp+XaXKb8cNK6x7JzxdH71QFAwCvinP2cImVjn0E=)
2: 323830343a323461633a3a2f33332d3333203d3e20323634323337.roa (hash: vKt25uKCwlh4ZFqHUv/L7YV07oreR9/IBnt/AvhhJKA=)
3: 323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa (hash: SPOWT5DVdkWw800TtKJj51MjNnbIBdPHvOi5aRCjPGo=)
4: 323830343a323461633a3a2f33322d3332203d3e20323634323337.roa (hash: 4BraF4Boj3AH5UoBa3QpIYqt4UVpk9b0aTt+/vtm8XU=)
5: 3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa (hash: NStCBa2qDxBOMdEtjNXS1iAtCg1q9ZYzFiiw8LrdIGw=)
6: 3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa (hash: uu2x3FWN2jGQ+sjKIkhv1+k8w0VByNQKW1m8ye4a7Mk=)
7: 3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa (hash: li1b7SDdUXLYI7MHvtQfVaqoPT9STXPR/TOkZBmwmTQ=)
8: 3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa (hash: g7X35bgeXFvhxB39jn5om5b+LU9reLe3ylsWVJopQFs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0b:68:39:97:5c:c8:d9:55:0a:80:38:20:8c:c0:ee:0a:60:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Validity
Not Before: Oct 31 14:25:04 2026 GMT
Not After : Nov 1 15:27:04 2026 GMT
Subject: CN=405F24CDF04F8E0A360CF3F23F8BDE3F48B0A51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:f8:9a:54:c8:7a:50:46:ab:4f:0a:f4:09:
72:65:7d:11:c1:01:71:ed:72:f2:ea:ac:a0:a0:1c:
e0:d7:b1:38:c8:26:15:66:cf:93:f8:d0:16:bc:01:
f2:d9:08:3b:8b:e9:b8:53:72:79:eb:c1:b0:2b:3a:
60:ca:be:a4:b2:b1:94:03:85:9e:a3:cd:ca:fe:98:
9b:98:25:1d:d3:6d:df:87:0f:26:9f:a2:b6:94:60:
ad:77:cc:37:c7:95:3a:78:3c:b5:b1:18:ad:b3:16:
70:c3:2d:5c:b9:e0:a4:6b:1e:b1:f0:0f:e6:87:f0:
00:34:be:4d:d0:16:04:f1:35:13:b1:35:23:dd:36:
b8:58:cc:14:d7:24:0a:2c:0c:c2:89:ba:2a:0b:c4:
28:d2:58:e6:b1:06:fd:63:b9:2e:e3:6c:88:ce:de:
3a:6e:e9:b9:fb:e2:a9:4e:6e:29:a4:0a:3b:a9:ef:
fb:6c:21:02:fc:b5:78:c0:b2:6a:e3:cf:9f:d1:16:
53:e7:60:90:40:9c:7c:03:e4:d6:c8:81:b0:2c:44:
5b:86:77:91:1e:c7:5b:bf:1c:cb:bc:1d:ff:22:38:
31:13:e1:df:0a:e2:d5:5f:60:72:2c:c6:0f:b6:c4:
34:06:6e:aa:d5:6c:e6:c1:36:3b:7d:90:6c:11:29:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:24:CD:F0:4F:8E:0A:36:0C:F3:F2:3F:8B:DE:3F:48:B0:A5:1C
X509v3 Authority Key Identifier:
keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:f0:fa:39:44:eb:66:fe:c7:b0:12:30:92:8a:99:16:5e:
65:8c:d7:c6:95:3d:91:93:cf:ad:15:c5:17:43:c7:16:22:06:
87:11:a2:d2:7c:1f:46:3d:70:94:0a:a5:91:01:ac:99:a0:22:
78:c3:08:b7:e3:e7:e2:f2:80:8d:04:a6:f5:19:dc:2a:67:ee:
1b:6f:d4:02:61:6f:3d:7b:77:6b:64:11:fe:7f:95:17:de:1c:
05:31:26:5d:f3:c0:44:12:55:11:30:7d:c1:ab:0e:aa:a0:cb:
33:f1:5d:de:ec:dd:35:8b:a7:c8:c7:ac:20:97:fb:05:ee:19:
24:d5:fd:e1:4f:ba:8c:f1:cf:22:ff:56:ac:5c:8f:c8:3d:25:
8a:07:e5:f0:0e:a8:c1:5f:7c:c3:5e:18:6d:82:67:a4:35:77:
55:42:70:0f:c8:d0:4d:ec:16:86:2b:51:70:8d:11:35:ca:60:
4f:fe:cd:ae:97:98:71:b2:f1:c4:bc:c7:f1:58:ce:bf:0c:c4:
27:4d:40:d0:3a:c4:ec:84:f3:36:31:c7:29:81:2a:75:0b:d8:
3e:3a:c4:be:b6:fd:a6:66:dc:9e:5f:4d:55:90:c2:a5:a0:8b:
0e:91:20:0e:89:ab:a7:cc:25:f7:b7:33:f8:dc:93:2f:ce:4f:
a5:ca:b1:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYAtoOZdcyNlVCoA4IIzA7gpgE3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZENUFCMTRBNjg3RjgwRTdBNUEzNjk4RjEzRTJCMjQy
MTQwNUExMTAeFw0yNjEwMzExNDI1MDRaFw0yNjExMDExNTI3MDRaMDMxMTAvBgNV
BAMTKDQwNUYyNENERjA0RjhFMEEzNjBDRjNGMjNGOEJERTNGNDhCMEE1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbL/iaVMh6UEarTwr0CXJlfRHB
AXHtcvLqrKCgHODXsTjIJhVmz5P40Ba8AfLZCDuL6bhTcnnrwbArOmDKvqSysZQD
hZ6jzcr+mJuYJR3Tbd+HDyaforaUYK13zDfHlTp4PLWxGK2zFnDDLVy54KRrHrHw
D+aH8AA0vk3QFgTxNROxNSPdNrhYzBTXJAosDMKJuioLxCjSWOaxBv1juS7jbIjO
3jpu6bn74qlObimkCjup7/tsIQL8tXjAsmrjz5/RFlPnYJBAnHwD5NbIgbAsRFuG
d5Eex1u/HMu8Hf8iODET4d8K4tVfYHIsxg+2xDQGbqrVbObBNjt9kGwRKVFjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQF8kzfBPjgo2DPPyP4veP0iwpRwwHwYDVR0j
BBgwFoAUZtWrFKaH+A56WjaY8T4rJCFAWhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhNQk5qREZqajlRZEV1aGhmend5TTg4R1I4WlVtVkpEYWc5VU5nTFF2
ZFAvMS82NkQ1QUIxNEE2ODdGODBFN0E1QTM2OThGMTNFMkIyNDIxNDA1QTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDVBQjE0QTY4N0Y4MEU3
QTVBMzY5OEYxM0UyQjI0MjE0MDVBMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGhNQk5qREZqajlRZEV1aGhmend5TTg4R1I4WlVtVkpEYWc5VU5nTFF2ZFAvMS82
NkQ1QUIxNEE2ODdGODBFN0E1QTM2OThGMTNFMkIyNDIxNDA1QTExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACCrw+jlE62b+x7ASMJKKmRZeZYzXxpU9kZPPrRXFF0PHFiIGhxGi0nwfRj1w
lAqlkQGsmaAieMMIt+Pn4vKAjQSm9RncKmfuG2/UAmFvPXt3a2QR/n+VF94cBTEm
XfPARBJVETB9wasOqqDLM/Fd3uzdNYunyMesIJf7Be4ZJNX94U+6jPHPIv9WrFyP
yD0ligfl8A6owV98w14YbYJnpDV3VUJwD8jQTewWhitRcI0RNcpgT/7NrpeYcbLx
xLzH8VjOvwzEJ01A0DrE7ITzNjHHKYEqdQvYPjrEvrb9pmbcnl9NVZDCpaCLDpEg
Domrp8wl97cz+NyTL85PpcqxSg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:32:15 2026 by rpki-client