Error: rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft File: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft (raw, json) Hash identifier: wYUNGD7mYqGspXl5wwp7PGT35FTEmVrcC6C9RCghTW4= Subject key identifier: BD:06:C0:38:C9:85:4E:35:A8:9C:5E:53:62:9F:64:47:26:C0:9C:54 Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Certificate serial: 724358B974967D3AC86B87867FF95AA8C9E7E92E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft Manifest number: 04C0 Signing time: Tue 13 Oct 2026 12:54:09 +0000 Manifest this update: Tue 13 Oct 2026 12:49:09 +0000 Manifest next update: Wed 14 Oct 2026 16:27:09 +0000 Files and hashes: 1: 3136382e3232372e34302e302f32322d3234203d3e20323634383833.roa (hash: DLGbpR5dFrKFyzVeNNFio6hSiOD3ZmtgLNk4C+7OCEU=) 2: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (hash: z4/BdNYNko5mnyyuXaWWxZuFRYLrcXeY5FpOZmSV9G4=) 3: 7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl (hash: hKVjikuIr/XzmTgCNPdZmUmtSLSeaH57ODCU6GgvzA4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 16:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:43:58:b9:74:96:7d:3a:c8:6b:87:86:7f:f9:5a:a8:c9:e7:e9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B Validity Not Before: Oct 13 12:49:09 2026 GMT Not After : Oct 14 16:27:09 2026 GMT Subject: CN=BD06C038C9854E35A89C5E53629F644726C09C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:3c:a2:e6:ad:aa:01:6d:02:57:7d:06:3a: 1e:c9:8f:31:05:a0:0f:6a:ab:ff:ed:1b:a0:6b:b7: e8:fc:bb:06:2f:93:28:2e:31:3c:54:81:1e:87:8f: 8e:6f:a8:a7:ad:50:d0:27:d8:c4:48:f9:1a:a9:06: 5c:5d:a2:ed:7c:e7:36:42:dc:bf:6f:e6:42:44:ff: 19:1d:9d:a2:ac:8c:02:b4:cf:ea:9b:8a:17:61:3c: 70:c8:a7:1c:fd:6a:41:ed:72:a5:1e:92:8f:b8:6e: a6:0b:42:ce:c1:73:06:7b:1c:2c:8c:1e:3a:82:3e: bd:18:e4:1a:af:33:76:65:f5:09:28:20:dc:1d:52: 52:9b:19:97:1d:62:da:47:7f:42:54:6b:92:a2:8e: 76:8d:2b:de:77:35:b7:f2:2b:53:d8:f7:b3:18:83: 74:36:f2:f6:b1:3b:aa:cc:38:a0:a2:b1:d9:de:c3: 9d:78:4f:34:62:36:8d:52:08:2c:de:00:65:95:a9: 42:51:04:cd:ad:cf:40:62:72:49:33:7b:39:9f:d9: 04:be:da:a0:78:24:bc:8a:7f:7d:72:46:eb:8f:b0: ff:56:cf:1b:55:58:18:da:f9:11:05:09:b0:6f:47: 88:d3:c7:17:93:d3:1c:9e:19:7b:ea:96:dc:e6:ca: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:06:C0:38:C9:85:4E:35:A8:9C:5E:53:62:9F:64:47:26:C0:9C:54 X509v3 Authority Key Identifier: keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:85:04:30:0b:56:1b:17:4b:bc:46:28:28:92:38:b7:40:3d: 2f:44:8e:5b:93:26:b6:c8:ad:d8:08:64:d5:0a:09:c5:49:0f: 1e:d5:0f:c0:51:fd:5f:aa:73:6b:00:1f:b2:ec:15:09:f1:ce: 8b:09:bc:c7:3b:45:81:13:38:7c:b4:db:87:7c:f6:17:0b:1d: 10:7b:6e:84:bd:13:da:44:21:c5:7d:fd:7d:9b:4c:ee:0f:fb: 5b:2c:f9:ee:2b:2e:dc:95:cb:3b:ac:1e:96:1f:c9:f3:1f:6c: 5e:07:fd:a8:76:45:91:73:47:61:63:84:eb:1c:7d:12:ac:02: 08:82:1a:bc:8c:05:90:6c:52:40:6c:94:e6:98:5c:c7:37:ce: 55:0d:84:e8:52:56:81:ed:d4:be:a0:23:6f:97:34:c8:45:83: d3:a5:a6:6d:39:d6:e5:33:7c:52:61:ee:ed:1e:46:49:5b:9b: 34:ea:c4:22:10:ef:a8:5c:fb:6d:20:b5:f0:c8:c9:df:8a:10: 82:a3:66:f3:dc:66:eb:32:5f:a5:e4:46:71:a6:0a:1d:5a:bb: d9:83:4f:03:67:d1:7a:73:4c:5d:2b:2f:65:be:68:15:cf:34: 53:15:2b:5f:a1:dc:59:61:74:4e:cb:20:1b:68:c8:4c:94:e9: 91:19:19:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUckNYuXSWfTrIa4eGf/laqMnn6S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1MkQ5RDRGOUE2NDJDN0IwNDc3NEM5MENGNkYzRkIy MUI3RjQyQjAeFw0yNjEwMTMxMjQ5MDlaFw0yNjEwMTQxNjI3MDlaMDMxMTAvBgNV BAMTKEJEMDZDMDM4Qzk4NTRFMzVBODlDNUU1MzYyOUY2NDQ3MjZDMDlDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugTyi5q2qAW0CV30GOh7JjzEF oA9qq//tG6Brt+j8uwYvkyguMTxUgR6Hj45vqKetUNAn2MRI+RqpBlxdou185zZC 3L9v5kJE/xkdnaKsjAK0z+qbihdhPHDIpxz9akHtcqUeko+4bqYLQs7BcwZ7HCyM HjqCPr0Y5BqvM3Zl9QkoINwdUlKbGZcdYtpHf0JUa5KijnaNK953NbfyK1PY97MY g3Q28vaxO6rMOKCisdnew514TzRiNo1SCCzeAGWVqUJRBM2tz0Bickkzezmf2QS+ 2qB4JLyKf31yRuuPsP9WzxtVWBja+REFCbBvR4jTxxeT0xyeGXvqltzmykj9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvQbAOMmFTjWonF5TYp9kRybAnFQwHwYDVR0j BBgwFoAUdlLZ1PmmQsewR3TJDPbz+yG39CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6 WVEvMS83NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NTJEOUQ0RjlBNjQyQzdC MDQ3NzRDOTBDRjZGM0ZCMjFCN0Y0MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVWWmk1SFRHZnhUbTdYNFlXN2ZxRlczZFU1b3gzTXpDa0Vjelh4UHB6WVEvMS83 NjUyRDlENEY5QTY0MkM3QjA0Nzc0QzkwQ0Y2RjNGQjIxQjdGNDJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhYUEMAtWGxdLvEYoKJI4t0A9L0SOW5Mmtsit2Ahk1QoJxUkPHtUPwFH9X6pz awAfsuwVCfHOiwm8xztFgRM4fLTbh3z2FwsdEHtuhL0T2kQhxX39fZtM7g/7Wyz5 7isu3JXLO6welh/J8x9sXgf9qHZFkXNHYWOE6xx9EqwCCIIavIwFkGxSQGyU5phc xzfOVQ2E6FJWge3UvqAjb5c0yEWD06WmbTnW5TN8UmHu7R5GSVubNOrEIhDvqFz7 bSC18MjJ34oQgqNm89xm6zJfpeRGcaYKHVq72YNPA2fRenNMXSsvZb5oFc80UxUr X6HcWWF0TssgG2jITJTpkRkZnA== -----END CERTIFICATE-----Generated at Tue Oct 13 17:15:16 2026 by rpki-client