Error: rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json) Hash identifier: b8GBwZUIz/Dozn8+t5UQQazh49CfpEZFapcJYT46fNk= Subject key identifier: D2:56:F9:01:72:E2:91:63:02:0B:02:8C:12:B6:86:25:A1:A3:D2:A7 Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Certificate serial: 7DC0ABB1C31C7BA2378C5BBECAD087E2C1072077 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft Manifest number: 04E5 Signing time: Thu 29 Oct 2026 20:55:21 +0000 Manifest this update: Thu 29 Oct 2026 20:50:21 +0000 Manifest next update: Fri 30 Oct 2026 22:28:21 +0000 Files and hashes: 1: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: utme5lH1g9mVZbUc0uKz2X5yOjtIpB0sgN72oFatCuw=) 2: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: ztkkcdqiBRI6iZMMVx/NMX9D2pt1Xv3nL2WtQle4wAU=) 3: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: JNXlLYey1yGL1s77uvcn+JEttXoFuzzQlgm7bCu5chM=) 4: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: dxkYCffi9MK/GkwBjmZvVFwMOrfd6McyDwUlPplD4dA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 22:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c0:ab:b1:c3:1c:7b:a2:37:8c:5b:be:ca:d0:87:e2:c1:07:20:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Validity Not Before: Oct 29 20:50:21 2026 GMT Not After : Oct 30 22:28:21 2026 GMT Subject: CN=D256F90172E29163020B028C12B68625A1A3D2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:5d:22:4f:91:29:07:b7:8c:b8:0f:28:24: 8b:04:e1:96:b4:cb:55:18:3b:96:95:bc:1d:e7:63: c2:ff:01:15:2f:22:8d:26:a8:9c:95:31:6c:ba:13: b2:24:84:43:5b:f3:cf:28:b3:f3:87:fe:af:c4:9b: 26:b5:14:26:0f:bb:be:74:41:54:f4:fe:61:94:99: 08:90:cc:f6:bb:25:71:85:3c:a2:de:25:6a:4a:88: 57:86:9a:5a:f7:2b:bd:16:90:14:20:a0:9c:15:e6: a6:39:f5:98:2a:52:ee:fa:01:5c:4d:59:73:24:45: 14:aa:23:b1:5b:85:35:4f:02:58:f3:ef:9b:fc:f5: 7d:26:92:b1:e9:4d:01:21:92:31:f8:64:20:d8:ef: 11:ea:ce:66:9c:18:b0:dd:f8:a9:fa:e9:b2:0c:b8: 80:f3:06:61:7c:82:66:8d:93:fc:5c:24:e1:62:e3: 5b:81:77:4b:92:75:75:01:6d:79:d9:86:14:2c:48: 5d:6c:df:a2:d6:49:13:1f:33:95:08:a5:be:5d:c1: 01:1a:63:62:8f:74:14:0c:34:c8:0b:a5:f6:3b:cf: f3:cb:c2:c8:55:37:72:cf:62:95:55:5a:47:53:66: a0:ef:15:16:03:69:45:c9:dd:c5:03:53:88:61:e9: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:56:F9:01:72:E2:91:63:02:0B:02:8C:12:B6:86:25:A1:A3:D2:A7 X509v3 Authority Key Identifier: keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:b2:f4:bb:18:61:0e:92:65:c7:24:7e:e1:e9:4b:2f:b7: 0e:87:d0:bf:5e:09:6e:a7:31:62:d6:7b:7a:58:34:71:6e:9f: 6a:69:44:d7:a8:95:51:53:fa:33:0b:57:d3:55:2b:00:70:e3: f0:09:25:df:e8:b6:48:1f:38:7b:a6:d2:ed:4e:72:c0:09:01: d7:8a:de:91:24:87:a6:67:11:6f:d8:a0:29:fe:88:4b:2a:dc: a0:6d:2e:7d:22:d6:6e:a4:31:c1:78:3a:72:cd:86:3d:e4:14: ac:33:1a:0c:fe:bc:7d:25:d3:c2:8c:fc:e1:05:b6:0a:9e:81: 96:b5:66:e1:8d:09:6a:74:44:bc:c3:43:17:9e:4c:f7:1f:15: 52:1f:37:cf:6e:39:5d:df:63:1b:a2:89:55:27:61:42:79:dd: c1:c2:17:d8:e0:69:1d:9a:09:4b:00:c7:77:4d:4c:a3:3e:fc: ea:b8:1c:f4:a6:b2:dd:44:8c:0f:a9:5c:e2:2a:94:9d:36:06: 67:87:85:0a:f0:54:94:19:ae:8e:35:5b:0b:12:83:df:d2:f8: e9:28:01:73:df:5b:68:d5:ea:88:2c:e2:14:30:17:0d:a9:3e: c6:ea:5f:aa:f3:32:c3:a3:76:7b:cb:01:95:f6:4d:22:6b:03: 73:e0:cf:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfcCrscMce6I3jFu+ytCH4sEHIHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4 RDlCQzMwQzAeFw0yNjEwMjkyMDUwMjFaFw0yNjEwMzAyMjI4MjFaMDMxMTAvBgNV BAMTKEQyNTZGOTAxNzJFMjkxNjMwMjBCMDI4QzEyQjY4NjI1QTFBM0QyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQ10iT5EpB7eMuA8oJIsE4Za0 y1UYO5aVvB3nY8L/ARUvIo0mqJyVMWy6E7IkhENb888os/OH/q/Emya1FCYPu750 QVT0/mGUmQiQzPa7JXGFPKLeJWpKiFeGmlr3K70WkBQgoJwV5qY59ZgqUu76AVxN WXMkRRSqI7FbhTVPAljz75v89X0mkrHpTQEhkjH4ZCDY7xHqzmacGLDd+Kn66bIM uIDzBmF8gmaNk/xcJOFi41uBd0uSdXUBbXnZhhQsSF1s36LWSRMfM5UIpb5dwQEa Y2KPdBQMNMgLpfY7z/PLwshVN3LPYpVVWkdTZqDvFRYDaUXJ3cUDU4hh6WylAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0lb5AXLikWMCCwKMEraGJaGj0qcwHwYDVR0j BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85 QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAxay9LsYYQ6SZcckfuHpSy+3DofQv14JbqcxYtZ7elg0cW6famlE16iVUVP6 MwtX01UrAHDj8Akl3+i2SB84e6bS7U5ywAkB14rekSSHpmcRb9igKf6ISyrcoG0u fSLWbqQxwXg6cs2GPeQUrDMaDP68fSXTwoz84QW2Cp6BlrVm4Y0JanREvMNDF55M 9x8VUh83z245Xd9jG6KJVSdhQnndwcIX2OBpHZoJSwDHd01Moz786rgc9Kay3USM D6lc4iqUnTYGZ4eFCvBUlBmujjVbCxKD39L46SgBc99baNXqiCziFDAXDak+xupf qvMyw6N2e8sBlfZNImsDc+DPVA== -----END CERTIFICATE-----Generated at Fri Oct 30 05:59:10 2026 by rpki-client