Error: rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft File: 280DBCE26C80C869FE8BD73477199ADD10E444A2.mft (raw, json) Hash identifier: 2Ucvfrsyz18LA86DJTZGUrLQIgVvWnCx3gz6K/hzoTY= Subject key identifier: 6A:E6:0E:4C:C8:DD:42:52:16:52:55:E6:56:BE:94:41:62:6E:75:36 Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Certificate serial: 3C440D3A09B6BD24A9F2DF7349C66AED390DDCEF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft Manifest number: 04D4 Signing time: Wed 14 Oct 2026 07:50:00 +0000 Manifest this update: Wed 14 Oct 2026 07:45:00 +0000 Manifest next update: Thu 15 Oct 2026 09:53:00 +0000 Files and hashes: 1: 3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa (hash: LPEPYlExSrcxyZoKE6w5A4hb81DccwV0nnGIOnMoYmU=) 2: 3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa (hash: lYUrWXvZMQMon5iLbf4qi0fQC9rObbbpkKn0QcZzwy0=) 3: 323830343a313330633a3a2f33322d3332203d3e20323633353132.roa (hash: I72wvd/6+NFQUNu9oEcSUBYbKddi0HQ8/73QUR0SkEc=) 4: 3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa (hash: LmfoyxKPyXK1VWQFBFIr4Sx46JVZLxDW+ZeoemmPoTE=) 5: 3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa (hash: tkRLYdWjD7meOaRK671+/zPrYpR+Nyvb9PjhyOo5RxM=) 6: 280DBCE26C80C869FE8BD73477199ADD10E444A2.crl (hash: Do6yTCJaGY8yb15P/f/abskL2OKOyNdyweDFUCkGJ2k=) 7: 3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (hash: InWUm/RnkqES1XnCOooQf4oJsjEkeEqOm0RITLZwTeI=) 8: 3139312e3234332e3230362e302f32332d3233203d3e20323633353132.roa (hash: dUd28JeWOzS4AYbNLknHxo/piSK1HeEp9nsBdTgZez0=) 9: 323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa (hash: VbntQKO+9ZK3V4fpso+tMh/CXaQ2XlJLsdBHbw/SOfk=) 10: 3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa (hash: gkL25kkUKa89uPgvbIMbZuSR5z9oVz30b1LayZS+lno=) 11: 3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa (hash: IKGe7hzpGiXHj7w0fJ18+TE5VgXQWeHbSp7OeN4y350=) 12: 3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa (hash: QqoEQLQIUFyzvrYItcsc+hNpNMt0JjgiGZL453myZ5k=) 13: 3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa (hash: 4PsNRdr27fTDj1AT+Dmz1ecwk4KJuKIIFGAf4bUbm7I=) 14: 3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa (hash: ZmRSO+Z2kOaSD0YvqORR0r6BqyAafMD3vZJhihzchoQ=) 15: 3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa (hash: 07sIUlGmevrIJMbGMVuXl1YMJVfS7KUDlBMkILwxw/I=) 16: 3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa (hash: DbLSNRm9LBLobwGLTXr9zHi2QjQFyf/q7gcIIPVEFIw=) 17: 3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa (hash: PKig4aqOKOfdx4w6ndXUvzDqGWJIPb35O4uypF4Ye6c=) 18: 3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa (hash: rqs4lUfWDwqyuzj6XEK1f+BBQs3o9HJujMchnbu8IcA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 09:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:44:0d:3a:09:b6:bd:24:a9:f2:df:73:49:c6:6a:ed:39:0d:dc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Validity Not Before: Oct 14 07:45:00 2026 GMT Not After : Oct 15 09:53:00 2026 GMT Subject: CN=6AE60E4CC8DD4252165255E656BE9441626E7536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:35:b8:cf:11:07:f0:c4:71:6f:ac:3f:27: 0f:72:fe:f0:ca:a0:81:5f:0b:84:87:78:90:6c:de: 6b:36:77:10:0a:dc:4b:bc:25:b7:aa:3b:5f:37:f2: 00:d2:6e:b5:9e:65:8b:3e:08:cf:16:b8:43:de:d6: f2:b7:84:e1:1a:9a:f0:b3:d2:40:1e:00:07:11:cc: 8e:87:9a:c0:b6:a1:98:4b:a0:96:d2:87:04:96:39: 23:9e:1f:47:e5:82:82:b0:55:86:ac:ba:8b:e2:dd: 2c:1a:41:1f:11:f3:21:3b:e2:e7:4a:4d:6a:b5:18: a5:d5:e7:6e:fd:80:c9:56:bb:09:0b:3e:5a:f0:44: f9:5a:db:46:67:ce:7c:b8:5d:b5:61:da:05:5d:d4: f4:af:44:93:21:5e:05:ad:90:35:72:25:49:1d:11: 5c:57:94:29:5e:a7:ac:10:b8:0c:b2:f8:2d:02:22: e7:66:91:22:dc:c1:20:47:dd:f9:c1:7f:a5:25:d3: d4:ff:28:8a:5f:74:e5:4a:10:4e:e3:9f:cd:63:cb: 7a:90:ba:b4:99:83:50:81:a9:17:23:75:95:00:09: b1:83:62:51:a2:4b:df:41:03:f8:b0:10:08:c4:97: de:a3:da:01:e7:3a:20:d9:6a:bc:a3:42:02:d7:66: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E6:0E:4C:C8:DD:42:52:16:52:55:E6:56:BE:94:41:62:6E:75:36 X509v3 Authority Key Identifier: keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ba:7a:b5:ee:e1:01:74:1f:de:cf:22:7e:03:4f:7c:f9:6b: 89:a5:e6:38:d3:ed:04:9a:67:e0:74:0c:7f:7c:0a:1f:5b:a6: d5:9e:21:00:08:c2:01:de:99:4e:a1:1e:8a:6d:75:29:54:a4: 13:8e:ca:19:f3:80:33:6e:eb:e9:79:83:52:86:fe:e9:86:10: 43:0b:3d:cd:b3:85:80:89:46:22:0f:eb:ad:4f:49:08:49:d4: 6c:1c:cb:5d:19:2c:e8:4e:e2:cc:23:af:1d:72:22:d6:1c:e4: 23:5b:d3:c1:d3:6c:cf:40:82:0c:f5:fd:04:53:62:a8:18:23: 53:06:73:e9:c7:b3:a2:91:8c:79:ea:3a:25:94:28:3a:e1:12: c8:2e:af:9e:52:c6:77:79:91:27:0b:4c:6a:1d:48:c0:9a:37: ad:70:35:bb:63:fa:c1:c0:ad:5a:ba:73:d0:99:57:e9:38:c5: 95:80:78:9e:17:7d:cc:73:fe:b4:44:1e:ca:6b:ff:a8:f7:2f: 74:33:cd:44:10:71:c3:37:eb:f9:b6:c4:95:cc:46:9d:73:a2: 31:37:62:7c:d7:e6:85:ec:de:80:84:61:32:5e:5d:37:4b:72: 8a:be:ba:29:fe:ec:69:82:ad:2a:19:85:68:67:91:12:9f:fc: d3:5a:1d:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPEQNOgm2vSSp8t9zScZq7TkN3O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx MEU0NDRBMjAeFw0yNjEwMTQwNzQ1MDBaFw0yNjEwMTUwOTUzMDBaMDMxMTAvBgNV BAMTKDZBRTYwRTRDQzhERDQyNTIxNjUyNTVFNjU2QkU5NDQxNjI2RTc1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PzW4zxEH8MRxb6w/Jw9y/vDK oIFfC4SHeJBs3ms2dxAK3Eu8JbeqO1838gDSbrWeZYs+CM8WuEPe1vK3hOEamvCz 0kAeAAcRzI6HmsC2oZhLoJbShwSWOSOeH0flgoKwVYasuovi3SwaQR8R8yE74udK TWq1GKXV5279gMlWuwkLPlrwRPla20Znzny4XbVh2gVd1PSvRJMhXgWtkDVyJUkd EVxXlClep6wQuAyy+C0CIudmkSLcwSBH3fnBf6Ul09T/KIpfdOVKEE7jn81jy3qQ urSZg1CBqRcjdZUACbGDYlGiS99BA/iwEAjEl96j2gHnOiDZaryjQgLXZkdxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUauYOTMjdQlIWUlXmVr6UQWJudTYwHwYDVR0j BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZyTmQvMS8y ODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAprp6te7hAXQf3s8ifgNPfPlriaXmONPtBJpn4HQMf3wKH1um1Z4hAAjCAd6Z TqEeim11KVSkE47KGfOAM27r6XmDUob+6YYQQws9zbOFgIlGIg/rrU9JCEnUbBzL XRks6E7izCOvHXIi1hzkI1vTwdNsz0CCDPX9BFNiqBgjUwZz6cezopGMeeo6JZQo OuESyC6vnlLGd3mRJwtMah1IwJo3rXA1u2P6wcCtWrpz0JlX6TjFlYB4nhd9zHP+ tEQeymv/qPcvdDPNRBBxwzfr+bbElcxGnXOiMTdifNfmhezegIRhMl5dN0tyir66 Kf7saYKtKhmFaGeREp/801odnA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:44:27 2026 by rpki-client