Error: rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft File: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json) Hash identifier: Sw9UwkrZd+0RBOSxb+hKnNEhpSmmAl9CltEiIodt9d8= Subject key identifier: 73:6F:7A:22:60:C5:B7:03:6E:22:5C:0C:E7:97:7E:8A:C6:73:05:9F Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Certificate serial: 67E517CEA5A6C23B36ADECF3469F6633EBD665B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft Manifest number: 04D2 Signing time: Fri 16 Oct 2026 09:50:00 +0000 Manifest this update: Fri 16 Oct 2026 09:45:00 +0000 Manifest next update: Sat 17 Oct 2026 11:47:00 +0000 Files and hashes: 1: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=) 2: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=) 3: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=) 4: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: gPUc/I3btieslKndf6SoM1LIpPiF+uSiyfrafdq8w9I=) 5: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=) 6: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=) 7: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=) 8: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=) 9: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=) 10: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=) 11: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=) 12: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=) 13: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 11:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e5:17:ce:a5:a6:c2:3b:36:ad:ec:f3:46:9f:66:33:eb:d6:65:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Validity Not Before: Oct 16 09:45:00 2026 GMT Not After : Oct 17 11:47:00 2026 GMT Subject: CN=736F7A2260C5B7036E225C0CE7977E8AC673059F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:c1:8c:cc:24:7a:99:9c:82:6e:b2:88:5a: 2c:f2:1b:7b:2d:fe:fe:7b:42:3d:8e:33:39:9e:33: 04:16:63:a3:3f:ef:59:a2:fb:3d:2f:8a:a3:94:56: 3a:ad:91:37:f8:07:06:b9:8c:3a:38:cd:a3:19:6e: 16:b6:ef:67:41:5b:e8:be:24:02:c2:d2:a3:e4:13: 06:6e:53:54:63:88:bb:38:36:29:94:69:0f:85:5d: 73:87:a9:a2:d3:e7:44:50:a1:87:f6:64:44:e3:d7: ac:89:91:04:f1:fd:0b:3a:de:34:1a:3e:1b:4a:c4: 3c:43:38:5e:9a:10:37:16:97:70:e3:87:90:a0:d8: 1d:29:96:af:dc:f3:fe:08:a4:4b:9a:81:90:03:34: 76:c0:a8:3d:64:18:e5:85:52:0c:5d:65:b6:a1:3d: de:e8:da:99:01:58:9c:3e:7a:bd:ec:08:36:6f:93: 73:e9:b7:ba:9f:47:a8:53:00:b7:0f:ac:4c:f9:ae: 3e:14:e7:62:45:e3:6d:10:68:08:80:b5:15:21:9b: 30:c8:75:e9:4e:fd:8c:95:17:ac:ab:7d:da:e5:c0: 8e:d9:c7:7c:e3:7c:b5:68:1d:02:d4:0f:ad:95:77: ba:ca:5d:ef:8e:97:5c:97:f5:81:6a:0c:b2:56:8d: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:7A:22:60:C5:B7:03:6E:22:5C:0C:E7:97:7E:8A:C6:73:05:9F X509v3 Authority Key Identifier: keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b6:e3:dd:ae:4e:47:25:32:2f:df:ff:6f:f4:3b:87:32:4f: 1b:93:e4:25:ef:a2:a0:c4:11:94:70:36:54:95:b4:49:5a:0b: 0e:06:f7:3f:7e:ff:18:2e:c6:a0:d8:5c:54:91:5f:c2:43:4e: 9b:95:4b:c8:4d:be:4f:fa:c1:1c:cd:c3:e4:08:60:43:22:3d: bf:5d:a6:99:d6:13:35:fb:34:8f:1f:e5:1f:fd:bf:01:f3:f8: 54:6a:23:74:a1:29:d2:97:d7:a1:ea:b7:35:fd:67:7e:79:02: 35:0d:51:c6:fd:3f:05:ec:8c:f2:2b:c8:6c:be:f6:f9:f0:4b: 83:23:24:04:b6:26:ec:c8:0a:cd:c4:e5:72:5d:f3:12:c8:54: c3:aa:ba:a0:45:c4:57:93:92:9d:d0:73:a8:8f:7a:f7:d4:7a: ab:b5:c2:75:5e:8e:d1:42:e0:9d:06:0e:04:83:db:e8:3b:a4: 15:8a:ec:40:20:cf:39:b0:c4:8c:49:e7:9c:34:db:6a:b4:2e: a3:f3:6f:2d:e2:2c:42:e4:47:41:78:0a:73:d3:e5:f6:5c:ee: 5a:c0:f7:d9:09:1a:fb:29:3a:29:29:5f:65:ff:fc:70:ce:e1: 39:f3:82:79:d7:5b:2f:ee:ed:b0:2b:06:cf:6d:1d:82:eb:d3: 0a:1c:cd:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ+UXzqWmwjs2rezzRp9mM+vWZbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx MjMzOEQ5QzAeFw0yNjEwMTYwOTQ1MDBaFw0yNjEwMTcxMTQ3MDBaMDMxMTAvBgNV BAMTKDczNkY3QTIyNjBDNUI3MDM2RTIyNUMwQ0U3OTc3RThBQzY3MzA1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ncGMzCR6mZyCbrKIWizyG3st /v57Qj2OMzmeMwQWY6M/71mi+z0viqOUVjqtkTf4Bwa5jDo4zaMZbha272dBW+i+ JALC0qPkEwZuU1RjiLs4NimUaQ+FXXOHqaLT50RQoYf2ZETj16yJkQTx/Qs63jQa PhtKxDxDOF6aEDcWl3Djh5Cg2B0plq/c8/4IpEuagZADNHbAqD1kGOWFUgxdZbah Pd7o2pkBWJw+er3sCDZvk3Ppt7qfR6hTALcPrEz5rj4U52JF420QaAiAtRUhmzDI delO/YyVF6yrfdrlwI7Zx3zjfLVoHQLUD62Vd7rKXe+Ol1yX9YFqDLJWjULrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc296ImDFtwNuIlwM55d+isZzBZ8wHwYDVR0j BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8y QkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbbj3a5ORyUyL9//b/Q7hzJPG5PkJe+ioMQRlHA2VJW0SVoLDgb3P37/GC7G oNhcVJFfwkNOm5VLyE2+T/rBHM3D5AhgQyI9v12mmdYTNfs0jx/lH/2/AfP4VGoj dKEp0pfXoeq3Nf1nfnkCNQ1Rxv0/BeyM8ivIbL72+fBLgyMkBLYm7MgKzcTlcl3z EshUw6q6oEXEV5OSndBzqI9699R6q7XCdV6O0ULgnQYOBIPb6DukFYrsQCDPObDE jEnnnDTbarQuo/NvLeIsQuRHQXgKc9Pl9lzuWsD32Qka+yk6KSlfZf/8cM7hOfOC eddbL+7tsCsGz20dguvTChzNiQ== -----END CERTIFICATE-----Generated at Fri Oct 16 23:29:31 2026 by rpki-client