
Error: rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
File: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft (raw, json)
Hash identifier: Gam2u38H7kWH+9acPJ+UOGpWoAFSvZ+iWMQqYhKtALc=
Subject key identifier: E9:49:A9:DE:AD:DC:15:EC:B3:FA:ED:77:77:93:3C:5D:E4:CD:64:0D
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Certificate issuer: /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial: 76CC08A27E0A9ABED367C2620BC28A5C1A0BD491
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
Manifest number: 04D1
Signing time: Sun 11 Oct 2026 00:08:46 +0000
Manifest this update: Sun 11 Oct 2026 00:03:46 +0000
Manifest next update: Mon 12 Oct 2026 00:58:46 +0000
Files and hashes: 1: 3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (hash: m1nxOpPqsQqimhKOmkMp6cEXHc3mS9isox5C8xI12Yw=)
2: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (hash: i7GQ72208CGuR10zu8EtpVkTFFXQfmr1OmoRJZ2gOU0=)
3: 3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (hash: 9i4dd49d0W+ZtJORU2YnFFff3Tvhu6EM+YU/XkAgkgU=)
4: 3139302e38392e37362e302f32322d3234203d3e20323730333539.roa (hash: RjWIFsjZwH1iMVrEhfnhup1rqYKPdqgk3lykrEApvsg=)
5: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl (hash: fYePZeS4buYmp+sI6gZjQCWntaTVzYlc4RKo3Tu2UTo=)
6: 3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (hash: 5LNV7K5rL22C4Qn6TC3w2sHeyhzI7QVJfZAIIM7oG0g=)
7: 3139302e38392e37392e302f32342d3234203d3e20323730333539.roa (hash: g1AFjzgYgGi/CH9bgR6BJnqv+gBBFlkmaAXhyZlKWoc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 00:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:cc:08:a2:7e:0a:9a:be:d3:67:c2:62:0b:c2:8a:5c:1a:0b:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Validity
Not Before: Oct 11 00:03:46 2026 GMT
Not After : Oct 12 00:58:46 2026 GMT
Subject: CN=E949A9DEADDC15ECB3FAED7777933C5DE4CD640D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:7c:81:ea:a4:8a:0d:98:ea:16:bc:92:99:
5b:51:b3:eb:b0:01:73:d2:58:42:04:8c:f5:d7:f2:
80:9c:0f:54:cb:3b:ba:69:61:6d:7e:6c:b9:b9:58:
12:2b:c8:dc:02:ba:dd:40:bf:d3:b2:0d:f2:fd:b0:
22:5c:32:2d:83:78:3f:0f:31:80:7b:26:c3:fd:13:
02:bd:87:37:48:d6:25:60:09:cb:85:cc:29:dc:24:
3f:1f:cd:85:e5:a8:23:fb:0d:9d:77:4e:79:12:f1:
f1:af:56:e3:7d:c4:ec:b8:a9:b5:81:8f:77:b6:56:
67:6d:25:58:30:11:3c:ac:3a:29:66:27:c2:41:7d:
29:2d:45:ef:08:11:7f:11:71:da:3a:4f:2c:af:e6:
95:c6:a2:af:05:49:f7:7c:a3:6a:c6:ef:48:21:aa:
4f:90:c4:41:d5:23:82:08:90:ff:b3:6f:f9:1e:cc:
c9:b2:8a:e9:44:ca:c8:a4:b7:f6:71:28:5f:60:ee:
b3:18:37:dc:c5:cd:3a:82:d8:3d:62:9c:69:5a:d0:
00:06:ac:10:9f:e2:90:7f:ef:08:13:b5:8f:81:bc:
00:8c:25:2f:71:f0:6f:f0:cf:e0:19:53:72:fb:cc:
76:d5:e3:39:77:df:fb:7e:5c:bd:79:65:40:d7:e1:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:A9:DE:AD:DC:15:EC:B3:FA:ED:77:77:93:3C:5D:E4:CD:64:0D
X509v3 Authority Key Identifier:
keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f6:2c:28:b9:05:83:11:e5:94:74:9d:26:0e:7e:c1:2c:22:
c0:9c:10:4c:3b:85:6c:7f:60:2f:b3:ca:27:6a:ca:16:15:bf:
10:a7:3c:1c:89:d8:69:01:1a:6e:16:57:d8:12:ed:b5:01:0e:
70:0b:67:b4:a0:c9:c2:2a:79:b8:a1:61:db:35:37:8b:09:70:
9d:c3:fc:78:05:4f:a0:44:3a:36:e1:18:72:c9:ca:86:d9:d5:
90:5e:63:e2:aa:16:18:5f:2e:e9:b6:36:45:02:f3:f8:3e:6d:
32:31:2a:07:8f:70:41:f8:80:ac:f7:ed:da:17:91:fc:3e:a7:
d9:03:93:57:02:37:ca:92:91:48:f3:7d:f5:97:d3:e0:e3:f9:
00:ec:e6:05:53:c4:82:59:cc:64:61:e9:88:dc:a4:ad:6b:a9:
e7:64:e0:4d:bf:9b:70:2b:b2:33:f5:35:48:ed:49:07:8b:e0:
44:df:b1:51:a2:ec:a0:74:70:b0:6a:32:35:cd:ee:f7:66:ba:
11:6a:76:e2:4f:57:86:12:ec:1d:4f:e1:cf:fb:98:17:0d:4c:
4d:ee:3c:25:c5:46:ff:c5:af:bf:b4:70:84:98:30:51:4f:d0:
f7:f3:11:2a:19:5d:d5:cd:bd:34:17:21:1a:c8:d3:a2:91:58:
1d:36:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:24:14 2026 by rpki-client