
Error: rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier: PC5jiNTjzZe9waKa0hz9HfCptreIYXmulhnag/oHuYQ=
Subject key identifier: EF:CB:68:5C:AD:AE:73:8A:47:7D:80:20:E9:6A:9F:00:EF:A3:AF:44
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 3C9533FFA2DEE12FD0DC5013CE87C28479D7CE1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number: 04C8
Signing time: Sun 18 Oct 2026 11:50:19 +0000
Manifest this update: Sun 18 Oct 2026 11:45:19 +0000
Manifest next update: Mon 19 Oct 2026 15:35:19 +0000
Files and hashes: 1: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: Ms6q71FgHyV6cKM7CqMhlx7mYZDItYR/IsK7KBpXQjY=)
2: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: c+SP46RP2q0blQfp0k65+ly1SArA+VF+Y7cHpRdo+3M=)
3: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: fRc2pRZ64iJ4J2JwD8MnyMRLYZH9sPqZYJ7fQAvVvHo=)
4: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: mZ0s478DUu2zAFqc2wzFG58EB35nSTfwpPvfDuBt/b0=)
5: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: eltPjLsdeEd5MJ8Kuit+kGA7Z6cz0/Y4hxY6GVuFy1Y=)
6: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: 1LIz3EMkOFeMTBOA0NGLVvfcTo0mjGf6dVCfGISNKY4=)
7: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 50oZQRSfkhIS7ifIBxYMg3fGMovPtLqRL1sxLyU68EM=)
8: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: 3hqFeovOwv2/2sphyOHHFjUSMFS2dvI+u3ZCAf3BXFw=)
9: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: Nd+Yn1Fd25bfj40Hel/RcRLSShFFbt8NoGWOuxrfI9I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 15:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:95:33:ff:a2:de:e1:2f:d0:dc:50:13:ce:87:c2:84:79:d7:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Oct 18 11:45:19 2026 GMT
Not After : Oct 19 15:35:19 2026 GMT
Subject: CN=EFCB685CADAE738A477D8020E96A9F00EFA3AF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:e5:73:e1:b5:83:4e:ed:07:9e:35:f4:a8:
ec:c3:c8:09:79:ef:f4:8e:05:e4:67:fe:db:5f:89:
3e:e9:65:34:d2:4a:fa:e7:ca:39:74:b5:ac:43:e7:
c1:b4:ce:b1:2a:4a:aa:3f:de:f4:47:f6:7e:4e:4b:
55:e5:03:e8:3a:d3:58:ff:67:d6:85:ce:2a:af:f3:
51:bd:60:fe:de:26:0d:d7:c8:ca:15:86:64:b9:65:
ec:24:9f:f2:07:7d:95:cf:89:8e:7a:c5:f6:0e:b4:
39:0c:4f:5b:21:22:ed:3d:95:5c:9c:46:21:37:3d:
c4:0c:f6:bd:c2:fc:e5:cb:15:16:da:d9:e4:c4:ab:
fa:55:17:9a:99:92:a3:7b:dd:b3:a1:3a:30:c4:fd:
0f:35:de:f9:e1:fd:0e:42:b9:e4:14:63:dc:5a:49:
aa:f4:67:e5:c9:1f:9f:cd:48:81:b6:f7:95:00:87:
f4:a9:3b:f1:ab:ed:f8:7a:78:b2:e4:12:10:c5:85:
2f:d6:7a:a5:f1:88:49:e7:3f:66:e0:5d:c2:a2:63:
e0:0c:4f:4e:2d:ef:a9:29:a6:8e:58:ae:55:86:e6:
88:3c:d7:45:18:c0:22:5a:78:3e:d5:23:54:65:38:
75:81:82:a5:3e:3e:c6:72:b0:75:05:99:de:92:e0:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:68:5C:AD:AE:73:8A:47:7D:80:20:E9:6A:9F:00:EF:A3:AF:44
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:19:01:e1:9c:4a:bd:5f:7c:aa:3d:5f:b9:b0:c8:44:b0:
ce:7c:22:77:5b:84:54:a3:a5:30:1f:d9:67:32:01:56:4c:af:
93:5c:78:69:bb:7c:11:92:9e:73:ea:5d:b6:ca:7d:f8:dc:79:
6e:dd:16:d0:7b:4d:af:1a:cf:0b:9c:3b:eb:3a:a6:bf:86:e2:
63:66:14:62:b5:e6:b4:9a:b5:11:5c:14:06:12:e9:14:5b:4d:
af:15:29:8a:c2:b7:80:55:c5:8d:79:ca:36:3c:27:e1:60:e3:
e0:0b:77:1e:86:ea:23:cf:af:a2:60:11:d6:26:25:86:6c:4e:
1a:df:db:48:da:71:9c:e7:67:ea:80:ea:5b:f3:92:73:fb:96:
69:77:54:7d:27:72:19:8a:10:ea:d1:d2:2b:88:58:14:52:a0:
d6:c1:30:75:76:a8:89:ed:27:f9:2f:c6:cc:79:ef:f5:0c:4e:
6f:3a:93:fb:9b:4f:f3:da:96:dd:56:c5:88:6b:c3:31:80:c5:
24:4d:9a:cd:4f:88:cf:17:3a:b1:cd:6b:05:ba:12:dc:a7:f0:
b8:69:97:de:65:e6:b6:6b:92:ba:59:cb:0f:93:7e:0c:29:ef:
95:a1:e8:8f:20:30:42:a0:41:29:44:61:62:7c:eb:cb:74:fc:
67:c9:aa:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPJUz/6Le4S/Q3FATzofChHnXzh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNjEwMTgxMTQ1MTlaFw0yNjEwMTkxNTM1MTlaMDMxMTAvBgNV
BAMTKEVGQ0I2ODVDQURBRTczOEE0NzdEODAyMEU5NkE5RjAwRUZBM0FGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIuVz4bWDTu0HnjX0qOzDyAl5
7/SOBeRn/ttfiT7pZTTSSvrnyjl0taxD58G0zrEqSqo/3vRH9n5OS1XlA+g601j/
Z9aFziqv81G9YP7eJg3XyMoVhmS5Zewkn/IHfZXPiY56xfYOtDkMT1shIu09lVyc
RiE3PcQM9r3C/OXLFRba2eTEq/pVF5qZkqN73bOhOjDE/Q813vnh/Q5CueQUY9xa
Sar0Z+XJH5/NSIG295UAh/SpO/Gr7fh6eLLkEhDFhS/WeqXxiEnnP2bgXcKiY+AM
T04t76kppo5YrlWG5og810UYwCJaeD7VI1RlOHWBgqU+PsZysHUFmd6S4Hq/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU78toXK2uc4pHfYAg6WqfAO+jr0QwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhvUU0vMS9D
NTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgygZAeGcSr1ffKo9X7mwyESwznwid1uEVKOlMB/ZZzIBVkyvk1x4abt8EZKe
c+pdtsp9+Nx5bt0W0HtNrxrPC5w76zqmv4biY2YUYrXmtJq1EVwUBhLpFFtNrxUp
isK3gFXFjXnKNjwn4WDj4At3HobqI8+vomAR1iYlhmxOGt/bSNpxnOdn6oDqW/OS
c/uWaXdUfSdyGYoQ6tHSK4hYFFKg1sEwdXaoie0n+S/GzHnv9QxObzqT+5tP89qW
3VbFiGvDMYDFJE2azU+Izxc6sc1rBboS3KfwuGmX3mXmtmuSulnLD5N+DCnvlaHo
jyAwQqBBKURhYnzry3T8Z8mqcw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:18 2026 by rpki-client