
Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
File: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft (raw, json)
Hash identifier: OS+vbgHUnH/Kv5fkuAG/mAuqjnu0kbC1QJRw9HFyulk=
Subject key identifier: C7:DE:76:43:C1:9A:7D:7D:B2:36:2E:6E:6D:B5:D4:E0:FA:49:8E:79
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Certificate issuer: /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial: 2198332D9B60552BFB250970E4C5F8BB1C622D60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
Manifest number: 06
Signing time: Tue 25 Aug 2026 09:22:46 +0000
Manifest this update: Tue 25 Aug 2026 09:17:46 +0000
Manifest next update: Wed 26 Aug 2026 13:02:46 +0000
Files and hashes: 1: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl (hash: nL0FWwZTbEP47Anl37878n1yBbEEMdHX3NqkSstczXk=)
2: 36392e31322e362e302f32342d3234203d3e203633343530.roa (hash: Tbl+ao3ummwi3eo3f1qmLpPY1l2e7fYp+7mqjXyQ01k=)
3: 36392e31322e342e302f32322d3232203d3e203633343530.roa (hash: vgGJlg6rUFJjmURI63CRHpKCAFanhtainzWe3n14Apk=)
4: 36392e31322e352e302f32342d3234203d3e203633343530.roa (hash: gh8ZDyRzCulokXYI5eq27VaOw66EmOlvl8uq8SuAI10=)
Validation: OK
Signature path: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:98:33:2d:9b:60:55:2b:fb:25:09:70:e4:c5:f8:bb:1c:62:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Validity
Not Before: Aug 25 09:17:46 2026 GMT
Not After : Aug 26 13:02:46 2026 GMT
Subject: CN=C7DE7643C19A7D7DB2362E6E6DB5D4E0FA498E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:60:f3:0a:46:09:08:4c:40:65:71:c1:cd:
d8:dc:64:b6:90:a0:81:0c:f6:36:07:dc:0c:1e:7b:
6e:cb:30:fb:78:ce:85:b2:80:1d:2c:6f:71:f1:42:
7f:f6:d7:cb:52:8a:16:bd:f7:d8:dd:a1:c2:97:39:
f5:e1:de:02:f1:fd:88:f6:b0:6c:cd:69:d0:a3:85:
64:7c:c7:90:32:8a:26:8f:d4:02:1c:56:93:05:66:
58:f1:7c:e3:7e:4e:12:3f:91:36:9d:8b:0c:78:90:
fc:34:d4:39:41:5c:b5:bd:8f:f3:58:7a:21:7f:44:
88:74:52:7f:f1:7b:b0:4c:8f:de:1e:55:09:f5:59:
b2:13:df:54:a0:74:60:54:53:8d:c9:f5:52:f0:22:
1d:c4:c0:d9:29:09:46:56:35:2e:5e:6b:6e:f8:a6:
ae:fe:da:97:19:99:49:be:ba:c9:26:95:f5:27:a0:
c2:13:d2:8e:ab:2f:4d:d0:18:c7:b0:d3:71:3a:f1:
e4:e1:26:f0:b1:6f:1a:37:ab:52:da:d6:c9:23:9f:
99:a6:ad:aa:19:4d:02:ab:0f:b2:e2:d7:c5:e1:25:
31:f9:39:27:63:d5:71:41:e7:a5:b8:a4:f3:08:67:
11:8d:97:18:7e:b5:16:05:a2:52:fe:1c:13:43:2d:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:76:43:C1:9A:7D:7D:B2:36:2E:6E:6D:B5:D4:E0:FA:49:8E:79
X509v3 Authority Key Identifier:
keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:b4:78:d2:0e:c9:76:23:d6:43:60:f0:6d:d3:19:c8:29:
c8:aa:f5:b4:91:c7:b1:4e:3b:e4:9d:a6:28:ce:94:3e:35:10:
3d:22:7b:2e:2f:25:f0:1e:5f:07:51:bf:36:a1:34:2d:a8:cf:
0b:34:81:72:8b:74:be:d3:a9:b3:be:be:6c:61:49:45:c0:d6:
4b:52:89:39:3b:0d:20:ff:49:aa:fe:17:f1:0f:b0:60:4c:67:
5f:15:62:2b:41:ab:a1:2a:b9:67:8f:f3:3a:91:a8:ce:9f:ed:
74:01:88:6c:c2:cc:af:c4:1c:e7:11:47:4b:7a:65:9c:34:5e:
28:b0:d6:07:17:da:e6:6a:e6:a2:26:17:e6:a3:ac:7e:85:d4:
fb:7f:3f:99:a4:cb:32:05:1d:b6:96:38:56:a3:65:37:61:e1:
78:d8:00:4d:a4:ef:8b:7c:79:e6:27:19:1a:38:ad:cb:fc:75:
d0:0b:73:8f:28:41:af:03:e6:c7:1a:ed:2e:96:75:83:c4:b4:
64:cb:a1:54:85:87:80:34:8a:83:ef:d9:e1:d9:dc:ac:30:f4:
ab:09:b0:08:41:89:43:da:6a:fd:9c:78:40:83:47:ba:f9:78:
bb:6e:3d:15:58:b9:47:8d:b4:e3:9e:31:2c:75:de:1f:25:b6:
b4:a9:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:32:36 2026 by rpki-client