
Error: rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
File: F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft (raw, json)
Hash identifier: UWR5CcOrvap3vBLXwLep61GqAYuST71Jy/OazbJEL0Q=
Subject key identifier: 85:35:3B:5E:AD:75:69:A1:61:D8:13:D4:51:F3:8E:3C:C6:3A:9C:43
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Certificate issuer: /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial: 2F3128DBAF9ED8AD5E27736151ED38DE4A1AAB07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
Manifest number: 034C
Signing time: Thu 29 Oct 2026 04:17:34 +0000
Manifest this update: Thu 29 Oct 2026 04:12:34 +0000
Manifest next update: Fri 30 Oct 2026 05:15:34 +0000
Files and hashes: 1: 34352e3232362e33392e302f32342d3234203d3e20323636393735.roa (hash: AH1dmQeGfvbTWWhgwdLCQxcPmtGZ6JlB1bqXgi8uhxs=)
2: 34352e3232362e33372e302f32342d3234203d3e20323636393735.roa (hash: AjXmNgOTIlXM4Y2hJsSajS/THz0D4xNjEtxuyQ/sqgY=)
3: 34352e3232362e33382e302f32342d3234203d3e20323636393735.roa (hash: JnSPXvmtrEECpnJNYSf+Ulmy1sRfDW7VHimGkCXKsII=)
4: 323830343a343633343a3a2f33322d3332203d3e20323636393735.roa (hash: MW+8vq44segotJUfTveivZDP2mA9Qkry4WAMIF6WFMY=)
5: 34352e3232362e33362e302f32332d3233203d3e20323636393735.roa (hash: xca8eTRRBSD4I1OExj/C1UPTm1DK+dWPmzhxpqPTR60=)
6: F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl (hash: jYSWPC3ytC/ga1GyIIEaoVu7rHkfZ9GPmj87keYoOyI=)
7: 323830343a343633343a396334303a3a2f34382d3438203d3e20323636393735.roa (hash: Ovy+jNk341ydb9ECWV7//aWOiwidKpLVF87BF+F4hLw=)
8: 34352e3232362e33362e302f32342d3234203d3e20323636393735.roa (hash: x4uLz5yGU5xbLllejWHW13AvOjZE8gcmoIYFvVk6uow=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 05:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:31:28:db:af:9e:d8:ad:5e:27:73:61:51:ed:38:de:4a:1a:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Validity
Not Before: Oct 29 04:12:34 2026 GMT
Not After : Oct 30 05:15:34 2026 GMT
Subject: CN=85353B5EAD7569A161D813D451F38E3CC63A9C43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:a6:6e:f5:8d:0d:e8:82:d2:19:79:72:7a:
97:9f:a7:d8:1d:1a:d5:92:00:e9:cb:67:2b:d2:46:
67:0b:85:fe:aa:fd:07:bc:bc:68:91:f8:fc:77:24:
7e:13:24:e8:cd:05:2e:29:19:1b:4e:0b:a0:fe:e4:
5b:59:a5:4d:04:10:b1:0e:84:fc:37:b4:82:46:24:
7b:06:12:53:b2:a8:81:f8:94:99:99:b8:54:b8:3b:
ef:91:4e:2e:1a:14:85:38:1e:55:f0:7f:b0:95:87:
6b:6e:b4:d7:4e:1b:ee:6d:2a:ea:e9:f9:44:ef:5c:
5d:1b:05:21:74:30:74:fe:89:af:ee:3e:53:31:19:
bd:68:bf:49:cb:63:73:af:3b:a7:b3:c7:19:98:52:
ee:af:6b:ce:b8:7b:2f:0a:a2:2c:49:ac:d9:2d:fc:
58:bb:cc:27:cf:36:2c:fa:ec:f8:c9:cb:87:1e:a4:
9f:c3:4a:54:2c:b6:9a:37:25:08:ae:9c:7a:ad:c5:
99:82:24:74:a0:0c:70:35:f4:be:cb:df:f0:ec:01:
c4:9e:df:5d:21:3d:15:20:a5:b0:f6:d3:55:09:45:
89:8b:ea:04:30:47:71:e6:ac:2c:e4:77:a8:48:05:
36:ac:d6:90:4e:ea:be:0c:56:e4:e7:e5:be:11:79:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:3B:5E:AD:75:69:A1:61:D8:13:D4:51:F3:8E:3C:C6:3A:9C:43
X509v3 Authority Key Identifier:
keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:56:60:85:c9:87:48:66:82:7b:2c:ef:86:ee:10:1f:0d:
d4:7f:f1:2d:c6:ec:4c:21:45:07:45:b1:51:99:b6:e9:6a:99:
79:68:f7:5d:83:81:c7:23:1b:d8:7a:a2:2c:11:72:63:c4:5b:
fc:63:d9:22:e4:7e:fb:57:30:d3:18:dd:cb:c9:41:62:a4:69:
bf:01:f6:30:01:bf:5a:5e:42:3b:08:5f:e2:16:97:28:4a:73:
33:77:d4:ef:c9:9f:33:6b:ca:e5:9f:4c:12:c9:d8:61:06:96:
c9:06:60:79:16:c7:65:07:69:38:5a:fc:d4:74:cf:6f:c2:ad:
ae:b9:fa:76:8e:fa:83:50:83:23:73:2a:3a:b0:32:59:f1:07:
fb:53:e8:aa:52:82:13:7e:d3:37:90:d6:0a:43:29:a6:29:b3:
ea:8f:60:fe:a9:44:1f:22:eb:54:c1:19:d6:82:7e:c6:44:dd:
8e:bf:a6:4f:93:3c:a9:b7:25:35:f9:5e:ff:3e:69:69:1d:3c:
f5:d0:85:3d:76:b2:92:2f:e1:14:3c:bc:d1:16:58:11:e4:f7:
f5:93:e5:a2:ab:06:6c:ac:df:b4:ac:aa:e7:02:78:63:24:3a:
e6:6a:40:26:96:59:42:40:d1:bb:9c:aa:d4:e9:e1:66:45:c1:
b9:4a:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:14:38 2026 by rpki-client