Error: rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft File: D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json) Hash identifier: VN4Gqj0TDbB0nzijovKGA2240pgY7BAIitIJX4v5GXE= Subject key identifier: 90:A8:3A:65:F8:4B:F9:71:4A:A3:1C:2E:15:62:FC:39:7A:5B:C9:8E Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74 Certificate issuer: /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774 Certificate serial: 108BAC9C37DD949E3553C4456374E616C3057D5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer Subject info access: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft Manifest number: 04CA Signing time: Fri 09 Oct 2026 22:48:16 +0000 Manifest this update: Fri 09 Oct 2026 22:43:16 +0000 Manifest next update: Sun 11 Oct 2026 02:12:16 +0000 Files and hashes: 1: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: r7klzKUdJTnnFWbsNasJuaPJzJXzSoOurGolGTkdpnc=) 2: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: UEgUg0UhXW2+G3OCo60QYCSeCAwuVQgJgsud3wiVaIc=) 3: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: f7MnHyJkzdNTO1BEnrZgsQBYBh4ro0Q04OtUU9Iejlc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 02:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8b:ac:9c:37:dd:94:9e:35:53:c4:45:63:74:e6:16:c3:05:7d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774 Validity Not Before: Oct 9 22:43:16 2026 GMT Not After : Oct 11 02:12:16 2026 GMT Subject: CN=90A83A65F84BF9714AA31C2E1562FC397A5BC98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:b8:ec:54:97:a7:b3:91:0c:65:cb:d2:96: 6f:a1:40:62:ac:9a:6d:b6:ae:2e:d3:bc:c0:96:3c: 1b:75:d6:8f:48:08:c4:ff:98:57:8e:7c:6d:b7:d6: a2:3d:26:6a:a8:c4:5f:0c:9f:54:5b:c2:77:0f:5e: 65:d9:53:74:68:c6:61:0d:17:94:68:86:a7:9e:f4: 57:db:a6:dc:e2:89:b9:0a:99:7c:fe:56:48:b1:af: 64:31:a9:6b:96:3c:3a:0f:44:9a:ab:30:2c:0c:d7: b2:4b:32:ad:1b:fd:5f:8d:15:c1:ec:3e:5f:8c:a8: 00:82:1a:71:bd:64:0e:69:5c:a8:85:94:24:15:6d: 41:45:8e:2a:fe:47:1e:8b:9b:27:af:47:98:14:35: ff:9d:8a:e3:c6:53:84:7d:7b:68:22:2a:c8:b5:8c: 63:b6:d9:d5:bb:71:4f:ec:38:ca:3c:8a:17:99:ab: 13:33:58:38:3a:ed:58:0f:2a:74:77:bf:22:e9:06: 45:c3:e7:cd:f3:7d:fd:75:cc:18:1b:80:7f:3a:02: c8:97:1d:c3:d0:cd:12:67:3e:a2:29:22:1b:76:46: ad:be:d9:38:63:e7:04:4d:2c:e9:47:5f:6a:c1:77: ea:c2:b6:08:09:0e:83:fd:65:ee:0f:a2:aa:d2:c7: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A8:3A:65:F8:4B:F9:71:4A:A3:1C:2E:15:62:FC:39:7A:5B:C9:8E X509v3 Authority Key Identifier: keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1c:c1:f5:b4:e4:92:b1:66:07:9e:e4:1a:1d:ae:67:99:54: 91:2e:2a:b5:1a:ca:57:31:3c:f1:0e:dd:b3:5a:55:42:c8:8f: b8:11:42:ca:af:d7:1c:74:32:60:5a:0e:fc:66:76:21:bc:9e: 8a:cf:9e:3b:b5:69:33:eb:b0:9c:5a:16:0f:82:25:bb:63:bd: e4:04:2a:37:4d:ab:1a:1a:00:3a:b3:19:05:5a:b8:2a:98:e4: 24:01:4d:ef:fb:14:d4:87:b8:9e:c6:ed:90:90:9d:44:da:35: 21:ea:64:01:86:04:c0:5c:15:26:2e:59:64:3e:3c:b6:9c:cf: f7:2d:87:1d:b8:aa:12:66:44:85:aa:60:dd:ea:95:02:ca:64: b0:80:4a:54:e2:6e:b1:4e:df:f6:88:36:01:a9:a4:8a:de:d8: 6c:4e:53:37:64:cd:79:e0:db:ee:d9:1d:c8:6c:98:16:85:c3: 92:4f:ec:3c:b1:1b:0b:9e:35:e4:17:76:ef:eb:e1:a3:57:f9: c2:46:eb:44:67:c4:26:c3:b6:76:6a:5e:d1:93:53:09:f6:51: a7:6f:f8:1d:81:fb:2f:fc:66:4e:38:43:70:99:91:2d:18:aa: 38:37:9e:0c:c3:60:16:08:97:19:63:03:2a:35:1b:44:0f:96: 3e:0a:4c:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEIusnDfdlJ41U8RFY3TmFsMFfV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5ODY0NjQzMjVFOEZENURGMTBDQkZBOEREMzAzRUYx MjQ0OTc3NDAeFw0yNjEwMDkyMjQzMTZaFw0yNjEwMTEwMjEyMTZaMDMxMTAvBgNV BAMTKDkwQTgzQTY1Rjg0QkY5NzE0QUEzMUMyRTE1NjJGQzM5N0E1QkM5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/rjsVJens5EMZcvSlm+hQGKs mm22ri7TvMCWPBt11o9ICMT/mFeOfG231qI9JmqoxF8Mn1RbwncPXmXZU3RoxmEN F5Rohqee9FfbptziibkKmXz+Vkixr2QxqWuWPDoPRJqrMCwM17JLMq0b/V+NFcHs Pl+MqACCGnG9ZA5pXKiFlCQVbUFFjir+Rx6LmyevR5gUNf+diuPGU4R9e2giKsi1 jGO22dW7cU/sOMo8iheZqxMzWDg67VgPKnR3vyLpBkXD583zff11zBgbgH86AsiX HcPQzRJnPqIpIht2Rq2+2Thj5wRNLOlHX2rBd+rCtggJDoP9Ze4PoqrSx2QbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkKg6ZfhL+XFKoxwuFWL8OXpbyY4wHwYDVR0j BBgwFoAU0phkZDJej9XfEMv6jdMD7xJEl3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1u aHcvMS9EMjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTg2NDY0MzI1RThGRDVE RjEwQ0JGQThERDMwM0VGMTI0NDk3NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1uaHcvMS9E Mjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXxzB9bTkkrFmB57kGh2uZ5lUkS4qtRrKVzE88Q7ds1pVQsiPuBFCyq/XHHQy YFoO/GZ2Ibyeis+eO7VpM+uwnFoWD4Ilu2O95AQqN02rGhoAOrMZBVq4KpjkJAFN 7/sU1Ie4nsbtkJCdRNo1IepkAYYEwFwVJi5ZZD48tpzP9y2HHbiqEmZEhapg3eqV AspksIBKVOJusU7f9og2Aamkit7YbE5TN2TNeeDb7tkdyGyYFoXDkk/sPLEbC541 5Bd27+vho1f5wkbrRGfEJsO2dmpe0ZNTCfZRp2/4HYH7L/xmTjhDcJmRLRiqODee DMNgFgiXGWMDKjUbRA+WPgpM6A== -----END CERTIFICATE-----Generated at Sat Oct 10 19:57:38 2026 by rpki-client