
Error: rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier: hMb0syQtAVJLDpmMgUw7pqVBjZaGxSN8cpCxIN3EvTc=
Subject key identifier: 22:C8:A2:A8:D7:33:E6:57:5D:E4:5A:E0:F0:A4:C1:93:FD:66:AD:A0
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer: /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial: 2C20D6A7C26B3F916743920AED869C8758844BA4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number: 056E
Signing time: Wed 14 Oct 2026 20:00:00 +0000
Manifest this update: Wed 14 Oct 2026 19:55:00 +0000
Manifest next update: Thu 15 Oct 2026 20:00:00 +0000
Files and hashes: 1: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: RUF2U/TyU/qQ+OyIpub/5wQwJZgaihDcYeU5vaI8e70=)
2: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: O747j2Mw2vMMFiFgZ1R8o7arRcyWWpDweLYMEv1CJn0=)
3: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: eFsGhXoo/d0rpPbw3qwdE8MvPDtvekZflU7LISh/cjM=)
4: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: VAYrxCa2og8J9FJ0O7g7wqUj3PkB1fZ4uSX3J0h6AgQ=)
5: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: 7P+1a905lmT0JcF7XUrjJKKZxFBgMfUbEtZ05StPduA=)
6: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: UjstbUbICuybbRLzn7ei2yB8brT9Mje7dmWiTtc5SS0=)
7: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: wTs8xmZ1SOAHFgoUFsOyGlpaIWNAC1iO1/p4IQb8388=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:d6:a7:c2:6b:3f:91:67:43:92:0a:ed:86:9c:87:58:84:4b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Validity
Not Before: Oct 14 19:55:00 2026 GMT
Not After : Oct 15 20:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:a8:9c:d9:d5:ef:45:f3:f8:7a:90:db:ad:
a7:5b:25:c6:6b:8f:64:e1:ea:7c:6b:85:ee:a6:5d:
fb:71:e6:ad:7f:cc:6d:65:39:06:1b:a6:54:80:18:
40:8d:9a:4e:58:97:68:99:70:7a:10:b2:dd:19:72:
be:56:40:1f:32:82:50:40:a2:79:93:b4:99:e3:12:
4f:3f:16:9c:e8:eb:5c:86:02:bb:ef:05:25:c8:fa:
b9:2f:7b:4c:a4:a1:24:47:46:a0:9b:6a:d3:8c:6e:
0c:0f:21:10:f9:28:58:96:45:bd:60:b5:49:f9:30:
af:1d:0a:3b:74:6e:70:69:85:b8:64:92:8e:fc:a6:
ee:56:42:eb:83:f4:a6:71:e8:1c:76:1c:a2:9d:6e:
72:92:74:07:cc:d4:10:bd:62:da:a3:03:46:17:74:
5e:4e:1f:7c:10:62:2b:7e:ec:7c:8b:08:46:cc:a3:
05:d6:60:42:a2:2e:d3:f8:86:87:8f:c5:3e:6d:24:
fe:3f:13:e3:8e:84:b3:1e:7e:91:6d:f0:cc:f3:8b:
47:a8:77:8b:5c:14:4f:35:59:0a:d6:ea:75:7b:b7:
82:4e:57:62:ec:87:a7:59:d6:30:61:22:c3:c7:24:
26:e5:c3:05:5b:f8:5d:c7:97:41:19:d2:e0:97:b5:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:A2:A8:D7:33:E6:57:5D:E4:5A:E0:F0:A4:C1:93:FD:66:AD:A0
X509v3 Authority Key Identifier:
keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:33:8c:00:82:ff:41:91:70:3d:9b:f1:f8:33:15:01:9e:
b5:d4:62:b3:39:eb:43:e6:18:63:33:7e:d0:a7:54:61:82:ca:
09:e1:b6:97:bf:31:59:3f:f8:b2:83:97:2c:45:99:8d:64:05:
db:f2:ef:9c:de:43:b8:e7:8c:a7:4b:26:63:34:9e:1b:65:c3:
ce:78:9b:df:24:e8:44:fa:f8:5d:78:37:73:c0:b9:bb:53:e6:
b6:93:86:f8:73:a4:d7:ae:ed:10:c0:46:4b:76:90:dc:79:8a:
25:ae:02:5f:42:b5:48:aa:97:1e:b7:42:1e:8f:d2:59:2d:b0:
cb:77:48:5f:e2:0d:95:da:85:e2:87:f4:c3:32:f1:98:27:ae:
cf:5e:49:62:61:ef:8f:c4:58:0e:54:90:42:ac:96:85:64:bd:
d0:4a:17:ff:fb:2d:5c:44:49:ff:d9:5e:6f:ca:f8:9c:6b:9f:
00:10:b7:2f:c6:5d:ad:fc:df:51:5c:58:5a:46:b1:5b:6b:7d:
3e:3d:28:9e:70:fd:65:98:ab:71:80:b1:00:9f:eb:d1:d7:ff:
a1:15:20:1a:b8:3e:46:74:c6:d3:85:dd:41:21:b6:16:89:9f:
9e:d9:6c:7a:88:66:7c:2d:72:92:c7:e3:1f:b1:a3:16:3b:93:
0d:23:f3:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:55:53 2026 by rpki-client