
Error: rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
File: 181D4968B550981952C318301AB2D4C10F7F34DD.mft (raw, json)
Hash identifier: IONppLVGbLq6988B6EteRUTHzHIyKAFerL1NGoN0yy0=
Subject key identifier: 7A:42:AC:3A:75:FE:BE:F6:CD:FD:FE:29:67:8F:56:53:A6:66:1F:1F
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Certificate issuer: /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial: 08AEE77E227EF250ABB06AB90DF2CFC98A7C2977
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
Manifest number: 06AB
Signing time: Wed 04 Nov 2026 10:30:38 +0000
Manifest this update: Wed 04 Nov 2026 10:25:38 +0000
Manifest next update: Thu 05 Nov 2026 12:57:38 +0000
Files and hashes: 1: 181D4968B550981952C318301AB2D4C10F7F34DD.crl (hash: lBET4OeSJHtuVTk1YvSUq7DxbKHiuy6DUQ5RtS0AnSE=)
2: 323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa (hash: Xa9loMgZvrAGbPPjnEXsZ2f/3SwGfw7IYqpxWMbxuJ8=)
3: 323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa (hash: CppARg55ciM07jAmpDoeTyyq9RopgA9vq4NlYR2UZhQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ae:e7:7e:22:7e:f2:50:ab:b0:6a:b9:0d:f2:cf:c9:8a:7c:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Validity
Not Before: Nov 4 10:25:38 2026 GMT
Not After : Nov 5 12:57:38 2026 GMT
Subject: CN=7A42AC3A75FEBEF6CDFDFE29678F5653A6661F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:d1:f9:ed:b9:3f:3f:02:af:69:3b:3e:cd:
88:1e:de:e4:ef:4f:f9:e2:83:58:a4:ba:7a:10:a7:
be:25:af:68:62:d9:b0:47:22:92:fd:ab:0e:ff:44:
ab:d5:08:83:82:06:43:b2:44:4f:dc:2b:6c:96:48:
c9:81:e5:ba:03:05:50:5c:db:47:1a:e8:d8:70:ea:
33:1d:0c:0e:74:a0:55:3b:95:dc:85:c4:3f:45:e5:
e6:5a:7d:8e:31:a6:d4:8f:99:65:32:c2:dc:2b:64:
10:70:1c:9e:08:1c:f1:bb:bd:a5:e7:39:c7:48:02:
3d:44:dd:36:2f:1e:da:62:ee:83:9c:58:4b:62:8d:
44:d1:94:08:1f:b5:df:14:10:be:71:22:f7:75:b1:
8f:b4:65:f4:1a:f4:fd:0d:63:17:db:01:c9:3c:2f:
8b:94:f4:d1:d6:88:12:50:b2:5b:28:2d:fd:80:09:
26:9c:3e:39:eb:8e:19:ca:88:de:81:83:9d:ab:73:
ce:8e:1f:a1:ec:bf:67:e2:a7:d7:d6:cb:90:9e:82:
25:34:ff:05:e4:c0:91:5d:86:e5:f0:12:85:59:95:
67:36:20:d4:2f:62:f0:ea:06:0a:f2:8a:3e:d9:01:
2b:4e:6b:ba:db:ab:5f:34:e9:5f:f4:bb:8c:a4:48:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:AC:3A:75:FE:BE:F6:CD:FD:FE:29:67:8F:56:53:A6:66:1F:1F
X509v3 Authority Key Identifier:
keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:63:e4:1a:a8:16:1c:0b:33:e1:0b:5e:89:30:7a:67:7c:
85:b5:94:f2:8a:fa:ed:b8:d8:6c:04:eb:0c:a6:a0:56:38:9d:
1b:fc:9b:f5:d1:6f:0e:31:f6:89:4e:76:f7:c7:1c:d1:bc:6d:
fa:90:88:0b:4c:c0:aa:80:b0:60:0c:a8:2f:78:cb:84:50:c9:
ff:d6:9f:b5:8e:74:27:88:aa:a1:88:1f:b7:c9:57:49:50:18:
41:f0:1b:24:1c:23:69:67:48:1f:da:48:bc:66:2e:88:84:23:
5f:fa:c6:a2:22:a0:9f:bd:e6:43:36:1e:08:32:9b:a4:69:46:
81:5a:f7:cb:e6:2e:ca:54:5f:ad:1e:be:fe:01:f5:9a:1e:cf:
a2:c9:84:4b:0e:1b:af:33:db:9c:df:9c:7c:09:ae:a1:eb:25:
97:2b:39:ff:59:f2:ae:b8:99:5a:95:9a:64:af:c5:ae:17:4f:
0a:07:d3:33:26:bf:d8:8c:af:ba:d1:1e:89:5c:b5:c8:1c:3a:
cc:ee:e7:96:7f:e6:ba:96:26:d2:d2:a0:9d:d3:fb:66:ca:44:
61:80:33:22:e6:2e:b7:31:47:a6:dc:35:ba:22:7f:96:28:6b:
e8:6c:8a:6c:75:b6:c2:8d:d7:e8:7e:97:1f:96:fe:39:f7:a4:
22:78:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:44:42 2026 by rpki-client