Error: rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft File: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft (raw, json) Hash identifier: wiyp/Kgog2y9IMblmzzOBN7eFhUhay+fhoeWSVPEz9M= Subject key identifier: 8B:F1:6D:B1:4C:65:F7:5B:B7:D4:1A:31:02:9E:BC:1B:C0:E8:DD:C0 Authority key identifier: 00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F Certificate issuer: /CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F Certificate serial: 205E3BA9AB774A06B25544CB9F25512AF21ECD11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer Subject info access: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft Manifest number: 043A Signing time: Thu 08 Oct 2026 09:20:25 +0000 Manifest this update: Thu 08 Oct 2026 09:15:25 +0000 Manifest next update: Fri 09 Oct 2026 10:39:25 +0000 Files and hashes: 1: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl (hash: UjOQrDO7GhX3uC5PeDLDtPZov5eOwmjyVxp8B492pCE=) 2: 3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa (hash: GZOOzF6+huX11NA1xpK042Y7OosAXZgQwOe/WfZ3Cq4=) 3: 323830343a323366303a3a2f33322d313238203d3e20323634313932.roa (hash: FaS/h3hHnQoJmaMtssOoo07jHkcwOfGokdxSZrzDKNY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 10:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5e:3b:a9:ab:77:4a:06:b2:55:44:cb:9f:25:51:2a:f2:1e:cd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F Validity Not Before: Oct 8 09:15:25 2026 GMT Not After : Oct 9 10:39:25 2026 GMT Subject: CN=8BF16DB14C65F75BB7D41A31029EBC1BC0E8DDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:15:86:88:4b:7c:d6:11:91:12:bd:5c:56: da:94:d4:dc:43:88:52:b6:e6:a2:9d:d3:29:b2:90: 10:df:40:db:1e:fc:67:f7:78:4d:ae:3c:37:44:a2: 64:d1:5d:58:87:ad:8f:ed:f9:35:83:9c:e6:33:99: b4:5e:fb:d6:b6:3e:a2:57:5a:31:56:5f:05:95:66: 6b:96:88:6a:90:41:31:f5:97:91:96:50:07:e8:47: 6d:ca:fd:8b:fd:f9:2c:64:32:e5:ac:b3:3b:11:52: 22:62:a6:c8:84:84:95:76:a2:99:7c:2a:ec:20:2f: 98:3f:bc:b4:51:bf:9a:fa:a9:8f:99:1f:2e:55:3a: bd:66:69:bd:67:f8:26:dc:2d:05:f0:fa:04:a8:0e: 6c:15:8b:47:63:87:ee:f9:cf:38:d1:bc:55:f3:c9: 1e:52:22:d4:78:3b:e8:1d:8d:17:f6:cb:c8:2b:9c: 71:15:7f:6e:24:e2:bc:07:fc:03:df:4f:c9:ea:04: 6c:66:9f:e8:3a:45:3e:a8:91:a7:ac:e2:bb:74:37: 19:ab:18:b1:e1:91:a7:98:13:9b:f5:c3:53:eb:74: 75:3f:a6:f2:75:ce:a2:30:d3:68:81:dd:ab:4b:d2: 15:53:c8:5c:67:5b:78:81:be:80:70:f9:f5:23:b3: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F1:6D:B1:4C:65:F7:5B:B7:D4:1A:31:02:9E:BC:1B:C0:E8:DD:C0 X509v3 Authority Key Identifier: keyid:00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e6:76:ed:c3:8b:ee:88:1a:fd:1f:a9:76:5f:7e:77:61:fd: 8d:73:d1:76:ef:16:1f:32:1e:f9:22:ea:57:47:c8:2c:28:46: 0a:94:a2:41:3f:b6:6f:c3:ad:26:07:ad:e3:3d:32:bc:d1:0e: 2c:0a:66:08:c2:e8:e2:dc:08:7d:a9:27:a3:62:51:c0:5c:5b: 78:da:e3:50:e3:5b:fe:91:6c:72:3f:b2:1b:aa:ab:b9:8a:93: a0:da:e7:9a:d0:2d:d6:fb:b4:e0:76:f4:b6:bb:86:22:bc:e9: 24:97:a3:a2:0e:6c:76:aa:0c:4a:d3:3f:2a:25:b6:bc:d5:f5: 3e:d7:5c:f1:63:5d:95:b0:c1:17:8a:db:7a:e4:d3:21:d2:18: 76:15:38:a5:f9:df:e3:c9:ff:00:9f:42:5a:8b:a5:21:23:26: 61:0b:86:a0:bf:4e:4a:7b:6a:8d:04:72:31:5b:5a:0a:7e:b2: d8:df:83:a4:ba:1e:46:7a:aa:93:5f:7a:32:f7:bc:01:88:3e: 1d:cf:1e:d8:6a:c6:c2:45:ae:47:78:ec:c4:96:ce:8e:23:f0: 98:a2:14:48:a1:40:fa:76:80:b3:cc:3b:50:2f:4e:c0:a9:eb: 25:10:94:97:4a:c6:0d:b9:6b:0b:9f:41:dd:4a:2a:96:aa:33: 0a:3c:dc:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIF47qat3SgayVUTLnyVRKvIezREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2RDlDMEM3QjFBMDk0RUFFRjBERkU2MUM2RjJFMDA0 MzM2ODU4RjAeFw0yNjEwMDgwOTE1MjVaFw0yNjEwMDkxMDM5MjVaMDMxMTAvBgNV BAMTKDhCRjE2REIxNEM2NUY3NUJCN0Q0MUEzMTAyOUVCQzFCQzBFOEREQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KBWGiEt81hGREr1cVtqU1NxD iFK25qKd0ymykBDfQNse/Gf3eE2uPDdEomTRXViHrY/t+TWDnOYzmbRe+9a2PqJX WjFWXwWVZmuWiGqQQTH1l5GWUAfoR23K/Yv9+SxkMuWsszsRUiJipsiEhJV2opl8 KuwgL5g/vLRRv5r6qY+ZHy5VOr1mab1n+CbcLQXw+gSoDmwVi0djh+75zzjRvFXz yR5SItR4O+gdjRf2y8grnHEVf24k4rwH/APfT8nqBGxmn+g6RT6okaes4rt0Nxmr GLHhkaeYE5v1w1PrdHU/pvJ1zqIw02iB3atL0hVTyFxnW3iBvoBw+fUjs8ITAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi/FtsUxl91u31BoxAp68G8Do3cAwHwYDVR0j BBgwFoAUAG2cDHsaCU6u8N/mHG8uAEM2hY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODN1amdnd3lhSlVFRzJLcHA0d0toNmZCZ0J5WDJOUDVHVlQ1cUoxUDdL QVAvMC8wMDZEOUMwQzdCMUEwOTRFQUVGMERGRTYxQzZGMkUwMDQzMzY4NThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNkQ5QzBDN0IxQTA5NEVB RUYwREZFNjFDNkYyRTAwNDMzNjg1OEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODN1amdnd3lhSlVFRzJLcHA0d0toNmZCZ0J5WDJOUDVHVlQ1cUoxUDdLQVAvMC8w MDZEOUMwQzdCMUEwOTRFQUVGMERGRTYxQzZGMkUwMDQzMzY4NThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr+Z27cOL7oga/R+pdl9+d2H9jXPRdu8WHzIe+SLqV0fILChGCpSiQT+2b8Ot Jget4z0yvNEOLApmCMLo4twIfakno2JRwFxbeNrjUONb/pFscj+yG6qruYqToNrn mtAt1vu04Hb0truGIrzpJJejog5sdqoMStM/KiW2vNX1Ptdc8WNdlbDBF4rbeuTT IdIYdhU4pfnf48n/AJ9CWoulISMmYQuGoL9OSntqjQRyMVtaCn6y2N+DpLoeRnqq k196Mve8AYg+Hc8e2GrGwkWuR3jsxJbOjiPwmKIUSKFA+naAs8w7UC9OwKnrJRCU l0rGDblrC59B3UoqlqozCjzcVQ== -----END CERTIFICATE-----Generated at Thu Oct 8 20:45:36 2026 by rpki-client