
Error: rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
File: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft (raw, json)
Hash identifier: 7uaSn2s4eWKfauAiACllzkc4sl00XoBTKyiGU2/0n7M=
Subject key identifier: FD:46:4B:9B:DE:42:30:B8:76:CD:9E:E6:35:08:FE:29:C5:CE:F9:14
Authority key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Certificate issuer: /CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Certificate serial: 5717105EA9FB8C6D401BDACE75CEB613288EF939
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
Manifest number: 04D1
Signing time: Wed 14 Oct 2026 05:26:40 +0000
Manifest this update: Wed 14 Oct 2026 05:21:40 +0000
Manifest next update: Thu 15 Oct 2026 08:10:40 +0000
Files and hashes: 1: 3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa (hash: eYsGqxr+xz7NYJAzwSPR2mDtNyybaXTzxnKGQDVRAd4=)
2: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl (hash: P/p2kWxXmwNWKT9ukRueWqGrV38u6i1LoHo0VAnT9Nc=)
3: 323830343a333635303a3a2f33322d3438203d3e20323636333431.roa (hash: 7PBgrlyChJKRTPBBKoQzTgW8ry4EIZQAV0Xgqx/pLK0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl
rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 08:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:17:10:5e:a9:fb:8c:6d:40:1b:da:ce:75:ce:b6:13:28:8e:f9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Validity
Not Before: Oct 14 05:21:40 2026 GMT
Not After : Oct 15 08:10:40 2026 GMT
Subject: CN=FD464B9BDE4230B876CD9EE63508FE29C5CEF914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:0e:a6:46:53:08:63:a3:ec:2d:2c:2d:76:
18:ab:65:25:71:76:51:d3:9f:52:c6:ad:01:1e:cc:
2c:6a:e8:5f:be:12:bb:28:d4:3e:1a:ac:a6:11:d5:
21:27:24:fc:1e:c2:0f:b6:42:d1:f8:73:7a:d0:eb:
e7:23:ff:ab:4c:88:82:be:14:52:41:2c:9f:25:b8:
f0:10:ee:2e:72:80:5e:d9:dc:38:3c:de:ff:f4:80:
ba:59:f7:fa:b5:75:6e:a1:05:bf:a5:b3:8b:af:a6:
7c:ec:3e:79:a8:93:03:14:d1:71:73:e0:1b:79:04:
61:c1:1a:49:57:19:46:e2:b7:b7:3e:fc:71:4f:0f:
7f:f3:10:ac:a4:80:61:03:19:d7:96:24:6b:1a:a1:
e1:47:bf:c3:92:2a:40:92:08:6f:29:3c:de:f8:c7:
84:3a:61:32:c6:29:46:4b:d8:d6:5f:91:86:4e:cf:
d7:f0:80:30:ac:9e:5f:3a:a1:5f:79:8a:2a:39:52:
6d:35:95:3f:64:04:06:26:55:db:d6:7a:0d:62:8a:
11:09:19:f9:23:df:60:9c:f1:49:d3:03:31:4f:58:
db:1d:77:c8:27:93:08:b8:24:41:bd:af:e8:f2:e3:
ad:1a:55:6a:77:11:88:1d:35:c5:1d:04:08:12:09:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:4B:9B:DE:42:30:B8:76:CD:9E:E6:35:08:FE:29:C5:CE:F9:14
X509v3 Authority Key Identifier:
keyid:A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:3d:1a:0a:ac:4f:54:80:39:20:87:b6:1e:21:2c:dc:e0:
c8:c9:5a:6d:38:fc:c2:c5:8b:02:a2:8d:82:d7:d0:2f:6b:fd:
f0:98:ae:2e:56:2e:45:48:4b:c8:f4:e8:36:b6:69:c9:64:89:
dd:9e:16:7a:ec:14:0f:c3:62:a0:78:32:be:ad:21:dc:50:d3:
32:7f:14:c9:8d:92:4b:0a:5d:7a:23:8c:e9:b3:5d:db:d4:97:
08:cb:f0:aa:86:50:11:f1:7d:b0:16:48:4d:1b:e5:14:bb:b2:
7f:34:e1:3f:86:8e:18:48:10:f1:ec:14:c2:d2:33:f8:bf:6b:
3c:86:07:82:5c:e4:8b:01:22:9a:8c:44:97:3a:96:db:26:56:
69:81:da:a0:9e:3d:48:f5:7d:9a:56:0b:42:f8:e1:d5:92:ca:
cd:cf:b4:89:22:39:08:d2:b0:ff:b5:cc:1c:4b:fc:76:02:5a:
00:ba:48:89:54:a1:78:19:d7:9a:85:0a:bc:02:26:10:f1:58:
6c:e0:fa:a4:0d:d7:02:18:ff:a7:00:ae:8a:40:23:26:ac:e1:
b0:6e:5d:3c:74:06:bd:ae:66:ca:29:5a:4f:2d:67:19:58:82:
43:34:db:16:b0:f5:bc:92:2d:e6:28:3f:d3:af:e5:fa:15:90:
67:bd:2e:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVxcQXqn7jG1AG9rOdc62EyiO+TkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVFNkM0MDk4NTNDNERCQzUwOEQ0RTEyNEYwM0IxRUEy
NzEwQTBBNjAeFw0yNjEwMTQwNTIxNDBaFw0yNjEwMTUwODEwNDBaMDMxMTAvBgNV
BAMTKEZENDY0QjlCREU0MjMwQjg3NkNEOUVFNjM1MDhGRTI5QzVDRUY5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+A6mRlMIY6PsLSwtdhirZSVx
dlHTn1LGrQEezCxq6F++Erso1D4arKYR1SEnJPwewg+2QtH4c3rQ6+cj/6tMiIK+
FFJBLJ8luPAQ7i5ygF7Z3Dg83v/0gLpZ9/q1dW6hBb+ls4uvpnzsPnmokwMU0XFz
4Bt5BGHBGklXGUbit7c+/HFPD3/zEKykgGEDGdeWJGsaoeFHv8OSKkCSCG8pPN74
x4Q6YTLGKUZL2NZfkYZOz9fwgDCsnl86oV95iio5Um01lT9kBAYmVdvWeg1iihEJ
Gfkj32Cc8UnTAzFPWNsdd8gnkwi4JEG9r+jy460aVWp3EYgdNcUdBAgSCeedAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/UZLm95CMLh2zZ7mNQj+KcXO+RQwHwYDVR0j
BBgwFoAUpebECYU8TbxQjU4STwOx6icQoKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWpDamJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJv
b2gvMS9BNUU2QzQwOTg1M0M0REJDNTA4RDRFMTI0RjAzQjFFQTI3MTBBMEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1RTZDNDA5ODUzQzREQkM1
MDhENEUxMjRGMDNCMUVBMjcxMEEwQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWpDamJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMS9B
NUU2QzQwOTg1M0M0REJDNTA4RDRFMTI0RjAzQjFFQTI3MTBBMEE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI8c9GgqsT1SAOSCHth4hLNzgyMlabTj8wsWLAqKNgtfQL2v98JiuLlYuRUhL
yPToNrZpyWSJ3Z4WeuwUD8NioHgyvq0h3FDTMn8UyY2SSwpdeiOM6bNd29SXCMvw
qoZQEfF9sBZITRvlFLuyfzThP4aOGEgQ8ewUwtIz+L9rPIYHglzkiwEimoxElzqW
2yZWaYHaoJ49SPV9mlYLQvjh1ZLKzc+0iSI5CNKw/7XMHEv8dgJaALpIiVSheBnX
moUKvAImEPFYbOD6pA3XAhj/pwCuikAjJqzhsG5dPHQGva5myilaTy1nGViCQzTb
FrD1vJIt5ig/06/l+hWQZ70uOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:07:02 2026 by rpki-client