Error: rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft File: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json) Hash identifier: q4dyfgg5ItfxINpxQeila8q+DrLoc9ddNx34Vy23zMg= Subject key identifier: 8B:B4:24:DB:D6:20:AD:24:12:97:38:4E:31:42:A8:BA:FA:CF:EC:1E Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 Certificate issuer: /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Certificate serial: 7DF0A26414C208C764579EF1286938508FE36530 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft Manifest number: 04D0 Signing time: Tue 13 Oct 2026 11:50:00 +0000 Manifest this update: Tue 13 Oct 2026 11:45:00 +0000 Manifest next update: Wed 14 Oct 2026 12:53:00 +0000 Files and hashes: 1: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: BruxwqJWfKyRFTI2SJm4s0MgvOksI2wYdPZH+Pr1uqM=) 2: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: nDzdR9S3q9+J0eAILyHbzYvTx22vQJMX+kkLHtkfDEU=) 3: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: cGe1000RguWJhhNSvl7VRAxDphOffrqJS/r6DyiD+pY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 12:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f0:a2:64:14:c2:08:c7:64:57:9e:f1:28:69:38:50:8f:e3:65:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Validity Not Before: Oct 13 11:45:00 2026 GMT Not After : Oct 14 12:53:00 2026 GMT Subject: CN=8BB424DBD620AD241297384E3142A8BAFACFEC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:c5:50:aa:fe:75:d1:a9:cc:88:93:46:a1: ef:a7:d4:ed:eb:80:ef:33:4b:4d:6e:04:e3:70:6b: 9d:68:6f:34:f3:b0:f9:c2:32:7b:22:75:71:4a:7a: c6:7a:09:ee:45:b3:08:48:26:55:af:40:5c:aa:49: af:bb:8b:b3:23:1c:4d:8b:de:52:91:e5:84:4f:85: 4b:9f:7f:a8:84:ba:70:34:fc:bd:41:e0:31:b7:eb: 2c:7d:94:28:b2:5e:24:b9:70:73:86:dd:e5:72:b5: 99:97:90:3e:f5:39:50:61:2f:f5:4b:51:33:57:4b: d6:e8:b8:86:f7:d8:54:b1:11:f5:83:d1:ef:01:61: 99:65:71:3b:d5:59:cc:8d:15:44:d5:63:4c:ce:5b: 66:1b:84:8e:f6:af:b2:43:45:a0:36:d1:0f:55:9d: 13:dc:0d:c9:48:3d:43:58:a2:94:46:0f:9a:40:03: ad:4a:2d:30:f1:9e:c4:0f:33:ed:fb:0b:dd:e6:8c: 80:8a:d2:e6:e9:d0:26:2b:c1:a3:65:2f:20:f3:5d: 3f:19:b7:19:39:0f:37:7a:72:ce:58:92:d4:14:11: 79:c0:8b:6e:fa:30:68:70:ea:9f:bf:3a:25:83:46: de:74:88:23:01:cc:80:ae:bc:b8:ec:6e:02:45:81: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B4:24:DB:D6:20:AD:24:12:97:38:4E:31:42:A8:BA:FA:CF:EC:1E X509v3 Authority Key Identifier: keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:75:17:78:97:48:50:35:d2:82:bc:ca:2b:6e:9e:7b:42:a8: a8:ac:98:85:20:e7:9f:e4:33:af:6c:7b:04:4c:59:b0:b2:fa: 7d:4e:af:7d:41:d3:1e:dd:a9:70:cf:6f:6b:84:b5:74:72:da: 03:9d:dc:f4:22:fa:30:bb:67:19:32:b5:11:72:e2:11:17:13: a7:69:a1:d0:85:be:3f:d6:0c:50:78:5a:2a:41:2b:76:6d:ea: 6c:b4:93:36:2b:5f:7c:f9:25:75:9d:5b:eb:c0:c1:a2:40:e4: fe:f0:01:f9:3a:d5:71:3e:b6:24:b5:e4:d8:14:f8:9a:b6:a2: 60:c4:54:62:3c:60:61:bd:da:fb:16:7d:32:c7:1b:91:7b:9c: 5a:30:22:5b:cb:d6:a0:d7:8b:90:e5:7d:41:d8:4f:1c:14:de: ad:d4:8f:c5:dd:ca:9a:3d:bb:c0:39:41:99:67:d8:41:94:2b: 7c:c4:f9:59:08:4c:8a:7a:22:71:2d:79:b0:46:5c:90:b0:2c: d4:12:5e:4c:2e:a1:26:da:97:94:8f:ae:98:ef:6e:a7:81:f8: ee:46:bb:13:e5:53:a6:df:3a:24:97:98:ca:5e:7e:43:8c:ed: c9:7c:fc:34:27:67:c1:5d:86:00:c5:50:7c:f1:84:ff:2a:88: b2:88:b8:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUffCiZBTCCMdkV57xKGk4UI/jZTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3NEJGQTNEMEJEQ0MyQ0M2MkVERDlFRkIxMUZDMDI4 Mzc0Mzc2NTAeFw0yNjEwMTMxMTQ1MDBaFw0yNjEwMTQxMjUzMDBaMDMxMTAvBgNV BAMTKDhCQjQyNERCRDYyMEFEMjQxMjk3Mzg0RTMxNDJBOEJBRkFDRkVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2cVQqv510anMiJNGoe+n1O3r gO8zS01uBONwa51obzTzsPnCMnsidXFKesZ6Ce5FswhIJlWvQFyqSa+7i7MjHE2L 3lKR5YRPhUuff6iEunA0/L1B4DG36yx9lCiyXiS5cHOG3eVytZmXkD71OVBhL/VL UTNXS9bouIb32FSxEfWD0e8BYZllcTvVWcyNFUTVY0zOW2YbhI72r7JDRaA20Q9V nRPcDclIPUNYopRGD5pAA61KLTDxnsQPM+37C93mjICK0ubp0CYrwaNlLyDzXT8Z txk5Dzd6cs5YktQUEXnAi276MGhw6p+/OiWDRt50iCMBzICuvLjsbgJFgUuLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi7Qk29YgrSQSlzhOMUKouvrP7B4wHwYDVR0j BBgwFoAUDXS/o9C9zCzGLt2e+xH8AoN0N2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUth UjUvMS8wRDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENzRCRkEzRDBCRENDMkND NjJFREQ5RUZCMTFGQzAyODM3NDM3NjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUthUjUvMS8w RDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUnUXeJdIUDXSgrzKK26ee0KoqKyYhSDnn+Qzr2x7BExZsLL6fU6vfUHTHt2p cM9va4S1dHLaA53c9CL6MLtnGTK1EXLiERcTp2mh0IW+P9YMUHhaKkErdm3qbLST NitffPkldZ1b68DBokDk/vAB+TrVcT62JLXk2BT4mraiYMRUYjxgYb3a+xZ9Mscb kXucWjAiW8vWoNeLkOV9QdhPHBTerdSPxd3Kmj27wDlBmWfYQZQrfMT5WQhMinoi cS15sEZckLAs1BJeTC6hJtqXlI+umO9up4H47ka7E+VTpt86JJeYyl5+Q4ztyXz8 NCdnwV2GAMVQfPGE/yqIsoi4AA== -----END CERTIFICATE-----Generated at Tue Oct 13 17:27:28 2026 by rpki-client