
Error: rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
File: 3A546F3625A8CE1F69122E8BD80769CC991FC593.mft (raw, json)
Hash identifier: bhMUTqpI7g4Qgx2KgZTgkE7QCwbp/lv30HN6O8v3zbg=
Subject key identifier: B5:26:C0:66:6D:73:A2:DD:AD:76:E2:20:82:F4:17:4A:99:29:3D:D3
Authority key identifier: 3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
Certificate issuer: /CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
Certificate serial: 6FF579BEAA62C28E5B5A870D66A85B0658146289
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
Manifest number: 04A7
Signing time: Sat 17 Oct 2026 03:19:47 +0000
Manifest this update: Sat 17 Oct 2026 03:14:47 +0000
Manifest next update: Sun 18 Oct 2026 04:52:47 +0000
Files and hashes: 1: 3A546F3625A8CE1F69122E8BD80769CC991FC593.crl (hash: ilwHZODopw63N9N+RKnzFVd9v33u4oPOXc5CrC6sixM=)
2: 323830343a323464343a3a2f33322d3334203d3e203532373831.roa (hash: THQy0mT3Hjw0dwNnim6ywkStn7D6OMimHITVfGsBUas=)
3: 3137372e3230302e34382e302f32302d3234203d3e203532373831.roa (hash: J3IyA0GyFzLJugbnhtGCS5ia6WFrLpgMQO5/t99KLew=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl
rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 04:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f5:79:be:aa:62:c2:8e:5b:5a:87:0d:66:a8:5b:06:58:14:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593
Validity
Not Before: Oct 17 03:14:47 2026 GMT
Not After : Oct 18 04:52:47 2026 GMT
Subject: CN=B526C0666D73A2DDAD76E22082F4174A99293DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:2b:a4:d5:13:87:8f:77:81:4a:89:f7:81:
87:d2:13:d7:8d:41:0e:a9:d2:a3:d2:37:bd:20:b0:
43:65:dc:a5:f8:fe:e5:f4:49:56:da:7f:d2:78:4b:
08:b6:7e:de:a0:5e:35:ab:10:cc:5b:0c:31:75:ab:
cf:61:c9:e7:ad:30:80:e2:f1:71:a7:e8:ad:02:5e:
f1:70:55:d2:2b:6a:32:30:72:01:00:5d:67:72:9b:
fc:87:33:46:51:40:87:c4:3c:d8:66:7a:73:fc:66:
e9:ba:29:b5:75:58:4a:49:57:00:8e:f6:49:3f:5a:
a8:bd:ba:12:bb:c0:41:d1:ca:24:71:fb:b2:98:ef:
74:72:cd:df:d6:86:1a:c3:c8:78:af:e7:e3:9f:fe:
a6:40:44:58:6a:ef:ce:b5:7b:d7:da:35:5f:df:78:
75:6f:c6:07:11:b4:2f:b3:92:ce:b8:3c:ae:d5:cc:
c3:fe:7e:6f:cb:02:55:fd:11:76:66:21:41:ea:e6:
06:49:a3:22:a5:c2:ec:0d:0a:b8:e9:ed:0c:24:bb:
11:e8:ab:87:4e:b5:e0:37:bc:ed:6f:83:7a:2a:ec:
21:80:20:15:7a:00:25:90:c4:db:17:27:65:af:37:
67:7e:bb:a8:ef:1a:b0:19:8b:ac:01:a3:9c:41:bd:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:C0:66:6D:73:A2:DD:AD:76:E2:20:82:F4:17:4A:99:29:3D:D3
X509v3 Authority Key Identifier:
keyid:3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:bd:d8:98:66:11:ea:8c:da:33:6a:82:69:5d:d9:bd:4b:
38:ef:2b:f2:a9:5b:39:7b:df:2b:af:e1:24:ba:86:b3:b0:3d:
2a:f8:c2:24:a5:0e:2c:fa:6d:b5:fb:25:46:7b:6c:27:a9:2f:
9a:7e:82:4e:5b:9f:27:f3:16:e7:d1:c1:86:30:36:ae:f1:33:
70:d4:f2:6d:8d:7b:30:b2:dd:fb:1d:b3:35:3e:05:9b:9e:42:
5e:56:b7:91:e0:39:8f:18:7f:d6:d5:dc:f7:49:c4:6d:17:c3:
fc:b8:75:33:7e:19:82:aa:ae:4d:28:65:30:cb:7b:16:f8:a6:
a5:0e:79:e4:fe:1d:99:cd:1e:fe:58:10:86:6e:f0:69:7c:2c:
f6:d4:5b:36:fb:eb:22:77:43:6b:b7:30:eb:5a:cd:54:fa:48:
9f:04:b3:1f:74:99:30:db:ab:50:a3:17:b3:12:37:4a:23:3b:
5f:e7:cb:9c:b5:05:81:2d:40:91:53:80:11:66:ee:8c:33:6c:
b0:16:94:08:72:c9:ef:ee:cc:0f:f9:d8:c3:36:14:00:81:6c:
47:3c:79:d3:ae:1c:fe:4b:1d:75:17:31:6c:71:a4:42:de:9f:
c7:42:99:3b:a6:e1:de:3a:53:32:69:d6:47:46:b3:b6:62:21:
24:c2:4b:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb/V5vqpiwo5bWocNZqhbBlgUYokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E1NDZGMzYyNUE4Q0UxRjY5MTIyRThCRDgwNzY5Q0M5
OTFGQzU5MzAeFw0yNjEwMTcwMzE0NDdaFw0yNjEwMTgwNDUyNDdaMDMxMTAvBgNV
BAMTKEI1MjZDMDY2NkQ3M0EyRERBRDc2RTIyMDgyRjQxNzRBOTkyOTNERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TSuk1ROHj3eBSon3gYfSE9eN
QQ6p0qPSN70gsENl3KX4/uX0SVbaf9J4Swi2ft6gXjWrEMxbDDF1q89hyeetMIDi
8XGn6K0CXvFwVdIrajIwcgEAXWdym/yHM0ZRQIfEPNhmenP8Zum6KbV1WEpJVwCO
9kk/Wqi9uhK7wEHRyiRx+7KY73Ryzd/WhhrDyHiv5+Of/qZARFhq7861e9faNV/f
eHVvxgcRtC+zks64PK7VzMP+fm/LAlX9EXZmIUHq5gZJoyKlwuwNCrjp7QwkuxHo
q4dOteA3vO1vg3oq7CGAIBV6ACWQxNsXJ2WvN2d+u6jvGrAZi6wBo5xBvbw1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtSbAZm1zot2tduIggvQXSpkpPdMwHwYDVR0j
BBgwFoAUOlRvNiWozh9pEi6L2AdpzJkfxZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThE
bnkvMC8zQTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNTQ2RjM2MjVBOENFMUY2
OTEyMkU4QkQ4MDc2OUNDOTkxRkM1OTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThEbnkvMC8z
QTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALRO92JhmEeqM2jNqgmld2b1LOO8r8qlbOXvfK6/hJLqGs7A9KvjCJKUOLPpt
tfslRntsJ6kvmn6CTlufJ/MW59HBhjA2rvEzcNTybY17MLLd+x2zNT4Fm55CXla3
keA5jxh/1tXc90nEbRfD/Lh1M34ZgqquTShlMMt7FvimpQ555P4dmc0e/lgQhm7w
aXws9tRbNvvrIndDa7cw61rNVPpInwSzH3SZMNurUKMXsxI3SiM7X+fLnLUFgS1A
kVOAEWbujDNssBaUCHLJ7+7MD/nYwzYUAIFsRzx5064c/ksddRcxbHGkQt6fx0KZ
O6bh3jpTMmnWR0aztmIhJMJLvA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:05:59 2026 by rpki-client