
Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
File: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft (raw, json)
Hash identifier: mI9tzQaBPClk96o0PBk4xlge/LqjOhzO8XV/PlzIAo0=
Subject key identifier: 6D:FF:6E:CA:2B:E4:25:00:0B:35:0B:FA:C8:6D:03:03:06:9D:41:0E
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Certificate issuer: /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial: 3CC6C6439D2428A72C9EC6857B45C63461B9BF3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
Manifest number: 48
Signing time: Wed 14 Oct 2026 09:43:09 +0000
Manifest this update: Wed 14 Oct 2026 09:38:09 +0000
Manifest next update: Thu 15 Oct 2026 13:42:09 +0000
Files and hashes: 1: 36392e31322e352e302f32342d3234203d3e203633343530.roa (hash: gh8ZDyRzCulokXYI5eq27VaOw66EmOlvl8uq8SuAI10=)
2: 3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl (hash: fZRlqshpen8GhRvQl7eTBw5WhD1Y2U3xTzUdJbSRjWw=)
3: 36392e31322e362e302f32342d3234203d3e203633343530.roa (hash: Tbl+ao3ummwi3eo3f1qmLpPY1l2e7fYp+7mqjXyQ01k=)
4: 36392e31322e342e302f32322d3232203d3e203633343530.roa (hash: vgGJlg6rUFJjmURI63CRHpKCAFanhtainzWe3n14Apk=)
Validation: OK
Signature path: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 13:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c6:c6:43:9d:24:28:a7:2c:9e:c6:85:7b:45:c6:34:61:b9:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Validity
Not Before: Oct 14 09:38:09 2026 GMT
Not After : Oct 15 13:42:09 2026 GMT
Subject: CN=6DFF6ECA2BE425000B350BFAC86D0303069D410E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:75:9f:bd:c4:b6:f5:53:08:92:29:02:48:
9a:d0:76:9d:50:3f:5a:76:84:62:4c:e1:ad:03:3d:
52:b3:04:2c:56:1d:0a:9a:95:9b:2f:45:d2:fa:bb:
88:c6:dc:c8:71:ef:18:c3:3a:d7:84:28:b6:f7:29:
fa:36:43:b4:60:aa:51:6a:44:c4:06:e2:74:b2:d6:
be:54:61:48:9e:d2:1b:e0:82:9a:23:fb:47:fb:f7:
1b:e8:ad:b6:3a:54:70:42:31:e0:51:e5:5c:33:eb:
f4:ff:75:57:8c:fc:72:1b:72:27:1d:bc:31:3b:bf:
94:cc:a0:fb:e4:05:ef:2d:df:9c:91:2a:c2:3d:ee:
7f:54:78:1c:d2:6d:0d:8a:c9:32:8c:f2:9a:a1:02:
61:83:4b:c0:6d:a6:fa:f7:ed:7b:95:d3:e5:0a:06:
40:fb:b9:7c:cf:8a:67:b6:06:22:e5:8d:b9:b5:1a:
bc:c1:93:e0:3e:4c:21:d4:46:c6:e2:56:e4:71:48:
c6:2a:9a:19:1e:4d:52:f1:0a:d2:6f:3d:ad:9e:62:
a7:76:fc:fe:75:5e:2b:1f:76:bc:ae:4d:ea:eb:8b:
7b:eb:39:ed:e7:3f:02:a3:8d:e4:aa:72:42:7e:7a:
3d:76:dd:3a:17:ce:0b:83:6d:b0:49:47:96:b4:aa:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:6E:CA:2B:E4:25:00:0B:35:0B:FA:C8:6D:03:03:06:9D:41:0E
X509v3 Authority Key Identifier:
keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:97:63:d7:6f:9c:c3:62:e3:d6:37:1d:9a:f8:10:92:e6:06:
0b:c0:5c:72:98:20:55:90:dc:5a:3e:cd:24:78:dc:59:55:bb:
1a:f9:d5:b8:d0:b5:02:fa:19:71:e9:b0:e7:0a:2d:42:bb:6b:
a1:81:2e:a0:fc:24:02:a8:a6:c1:ba:6e:da:12:ff:d4:19:b5:
1f:bf:04:4e:20:65:16:80:ed:7b:d2:90:42:a2:0b:7c:63:88:
3f:8e:3f:e0:91:3a:b9:7d:e0:d0:3f:42:da:23:9b:5a:f3:fb:
b7:54:04:ed:64:a2:10:30:0a:a0:cb:89:06:44:fa:55:f1:01:
f9:60:8a:f0:f9:aa:bc:21:1f:96:0d:55:7f:d0:12:94:8b:48:
f2:a3:db:4c:ec:49:e5:a9:52:d4:c0:84:b8:93:48:da:a1:f0:
ac:1a:38:e0:cf:c5:72:d7:3a:0d:80:ec:15:c1:65:5a:16:14:
ba:1f:4a:24:d9:0d:f6:91:37:43:20:14:d3:f8:2f:ee:bd:dc:
cb:f0:c5:d1:0e:58:a5:fa:a5:01:d2:58:45:f3:73:f6:ba:4d:
98:e2:ba:93:88:cf:1c:66:3c:af:ef:7a:06:11:3c:36:8a:ba:
28:e9:cd:7b:ea:73:c1:cb:82:8f:89:f7:58:40:cf:d3:dd:fd:
46:98:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:33:47 2026 by rpki-client