Error: rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: tJYXLIWkngwdDKwHRoRZhry6wbj4KGR4n8kgUcjVnDM= Subject key identifier: 87:AD:AC:BB:57:E0:8A:03:75:E8:64:E6:55:04:B3:F9:89:E5:AF:C9 Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 34A07DD06A83040626D1A042D6D190B5F3840D71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 04CD Signing time: Fri 16 Oct 2026 22:20:00 +0000 Manifest this update: Fri 16 Oct 2026 22:15:00 +0000 Manifest next update: Sun 18 Oct 2026 01:34:00 +0000 Files and hashes: 1: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 6m4zbH4CvrVkkMH6P+svwQ9mp9NdGtkwxoG3HBYiSzk=) 2: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: o3enRyNbzWXBypRyf4X8XM36ZbDvaLOcZyQ7nwnBtuU=) 3: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: yJYqIgCveDLM/mfM6gy+2dAmkoLYEYsfGzgwq2lXa5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 Oct 2026 01:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:7d:d0:6a:83:04:06:26:d1:a0:42:d6:d1:90:b5:f3:84:0d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Oct 16 22:15:00 2026 GMT Not After : Oct 18 01:34:00 2026 GMT Subject: CN=87ADACBB57E08A0375E864E65504B3F989E5AFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:d4:ea:01:34:28:ed:54:70:da:58:a4:6b: e4:a7:7b:02:e0:69:55:69:ff:70:2a:10:b7:31:cc: 63:67:8d:07:b6:42:03:91:72:77:9d:57:65:0a:84: 8e:08:6f:5f:8c:aa:0b:6f:00:fc:02:d8:3c:80:42: ec:5e:03:71:0c:ab:67:80:ab:4e:65:bc:b9:54:25: fd:a6:d9:66:32:6a:81:49:7a:8b:32:c8:07:c5:14: 4a:bf:3c:05:b9:35:cf:15:64:36:52:e9:c8:02:33: 82:c7:b8:81:0e:fa:23:eb:ae:d8:0e:eb:90:86:f5: ea:b4:1f:ee:aa:69:98:c5:34:8e:66:1a:cc:92:d3: df:a2:77:bc:0d:92:38:58:8e:84:81:c4:1a:6f:f4: 25:bf:f4:5c:71:cb:9d:6e:f0:25:18:d9:08:c0:d7: 36:ac:bf:5b:4c:a9:0f:7d:28:da:3b:98:42:46:7a: 8b:7c:4e:fa:d6:a3:48:f2:c0:b4:d8:db:f7:bd:ce: 97:4e:d8:56:e9:e6:4f:86:4f:31:2d:c5:ea:8b:85: 17:e6:0b:f8:71:44:2c:b2:d0:2c:5f:63:ed:d8:4d: c5:54:2c:be:ec:4b:6a:92:fc:4e:3c:4f:48:01:e0: 5b:44:3e:0f:c2:5a:08:4d:b3:1e:45:e1:05:c4:b2: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:AC:BB:57:E0:8A:03:75:E8:64:E6:55:04:B3:F9:89:E5:AF:C9 X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:41:3a:8f:72:11:26:a5:46:50:bc:49:16:46:cc:0e:f7:1a: 8d:29:4d:e9:92:2d:a5:7e:31:a0:94:8a:7e:d5:61:6b:c7:44: a2:d7:e7:b7:a8:f9:c2:d1:e3:6d:67:d1:8c:80:1f:c7:20:fd: e8:7a:20:d6:ea:7c:9e:6f:bb:3c:b8:2c:d6:93:e2:1e:ef:ed: 28:2a:d4:fc:28:66:d1:14:63:1a:b4:fc:95:6b:6e:36:5b:27: 7e:eb:12:3a:cd:18:e9:92:e1:9e:ff:93:93:71:0c:85:71:90: dd:40:91:d5:c2:50:e9:ef:ed:3d:59:84:7f:4c:e2:be:2b:86: 35:84:e4:20:da:16:d1:b2:48:1e:55:f5:40:90:2b:28:71:0b: 2a:03:b1:76:30:c2:70:47:68:43:bb:ad:10:fb:c7:2d:d4:9b: 7c:e8:58:21:ed:f3:be:ec:1e:97:22:d7:ca:ab:28:fc:0f:0a: 98:57:d6:81:69:c9:f3:8d:c9:a3:0e:d7:5a:e6:20:4c:08:7c: 7a:fb:1e:b5:88:3a:87:5b:b3:eb:05:f6:e3:c5:f2:db:2b:09: e6:fa:9b:a2:a1:02:b2:46:63:f5:33:9c:ce:f5:07:ba:13:2e: bd:ca:12:dc:57:0d:d5:30:62:6f:49:94:37:9a:a6:96:20:64: 59:dc:ce:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNKB90GqDBAYm0aBC1tGQtfOEDXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNjEwMTYyMjE1MDBaFw0yNjEwMTgwMTM0MDBaMDMxMTAvBgNV BAMTKDg3QURBQ0JCNTdFMDhBMDM3NUU4NjRFNjU1MDRCM0Y5ODlFNUFGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZdTqATQo7VRw2lika+SnewLg aVVp/3AqELcxzGNnjQe2QgORcnedV2UKhI4Ib1+MqgtvAPwC2DyAQuxeA3EMq2eA q05lvLlUJf2m2WYyaoFJeosyyAfFFEq/PAW5Nc8VZDZS6cgCM4LHuIEO+iPrrtgO 65CG9eq0H+6qaZjFNI5mGsyS09+id7wNkjhYjoSBxBpv9CW/9Fxxy51u8CUY2QjA 1zasv1tMqQ99KNo7mEJGeot8TvrWo0jywLTY2/e9zpdO2Fbp5k+GTzEtxeqLhRfm C/hxRCyy0CxfY+3YTcVULL7sS2qS/E48T0gB4FtEPg/CWghNsx5F4QXEsnTxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh62su1fgigN16GTmVQSz+Ynlr8kwHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVEE6j3IRJqVGULxJFkbMDvcajSlN6ZItpX4xoJSKftVha8dEotfnt6j5wtHj bWfRjIAfxyD96Hog1up8nm+7PLgs1pPiHu/tKCrU/Chm0RRjGrT8lWtuNlsnfusS Os0Y6ZLhnv+Tk3EMhXGQ3UCR1cJQ6e/tPVmEf0ziviuGNYTkINoW0bJIHlX1QJAr KHELKgOxdjDCcEdoQ7utEPvHLdSbfOhYIe3zvuwelyLXyqso/A8KmFfWgWnJ843J ow7XWuYgTAh8evsetYg6h1uz6wX248Xy2ysJ5vqboqECskZj9TOczvUHuhMuvcoS 3FcN1TBib0mUN5qmliBkWdzOZQ== -----END CERTIFICATE-----Generated at Sat Oct 17 05:24:57 2026 by rpki-client