
Error: rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
File: B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft (raw, json)
Hash identifier: rMcQynND1oqkmyO+3YqqrAuVHW0hrujt3BxfWektQ4M=
Subject key identifier: E9:04:67:F5:87:78:05:75:E1:4D:E6:68:02:CC:48:F4:A1:3C:E0:1F
Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Certificate serial: 3784CE4A9E489ECA0926F6348ECC9A11A9FBB748
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
Manifest number: 033C
Signing time: Mon 19 Oct 2026 09:26:55 +0000
Manifest this update: Mon 19 Oct 2026 09:21:55 +0000
Manifest next update: Tue 20 Oct 2026 09:55:55 +0000
Files and hashes: 1: 323830343a353239633a3a2f33342d3334203d3e20323638353239.roa (hash: p0NzeAxs+5iOL8D87BoFA759wIsDKp+MPKWi/WzaxE4=)
2: 34352e3136322e34382e302f32322d3232203d3e20323638353239.roa (hash: dm8gvwbEjVCB6uiHvJDtp4FKVPSTe3xtOenrM7yoCqE=)
3: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (hash: ojxetBMWRoOFzU3iX1Vz5o1kbTj96Iatk1KnhwIhlYw=)
4: 323830343a353239633a3a2f33332d3333203d3e20323638353239.roa (hash: GodzEhK38moypx2tU2I8HENxdupkK5F5cBwZx7vPM0M=)
5: 34352e3136322e34392e302f32342d3234203d3e20323638353239.roa (hash: 0dwLyXzdEN7NjIUYnBYEdG6E3t8kZG2oUycGgZ7HFvc=)
6: 323830343a353239633a3a2f33322d3332203d3e20323638353239.roa (hash: yesGEizXRMmDgXlWJRTWWureb+6kZIocTEn+Nslrotw=)
7: 323830343a353239633a383030303a3a2f33332d3333203d3e20323638353239.roa (hash: iRUHJPcqqcsFSIaEWq9vr5fdxN+xA1I2Mi8S0sfFHlg=)
8: 34352e3136322e35312e302f32342d3234203d3e20323638353239.roa (hash: jUYXbsZvnQ/1DQQxFb2AS/5McEXR4349BvfmLJcfjvg=)
9: B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl (hash: JTy3VoN5srSYsy2CX8QQSVknNASC9aUf4eh7vVHY2pM=)
10: 34352e3136322e34382e302f32342d3234203d3e20323638353239.roa (hash: bWAtAMTGoedY8hbmysukuNFzlfcEx28LkrMyr3XzYq0=)
11: 323830343a353239633a343030303a3a2f33342d3334203d3e20323638353239.roa (hash: OI7On3DAp4Vwy5bsf24vPkSugWa6IsVlSLYlzTmOYhA=)
12: 34352e3136322e34382e302f32332d3233203d3e20323638353239.roa (hash: o5k5qPZrQD+R+rjHRByCCsh5If+NR7VenqgIK3M4aBw=)
13: 34352e3136322e35302e302f32332d3233203d3e20323638353239.roa (hash: SPLbf2REHD2aPi7ThPXahU8dEMftG+Q0IgbGOxw/4Mw=)
14: 34352e3136322e35302e302f32342d3234203d3e20323638353239.roa (hash: Kxys4tmihnVJ3lAH1ei6nnjQrKuXjovgEZJwbs2VaV0=)
15: 323830343a353239633a383030303a3a2f33342d3334203d3e20323638353239.roa (hash: xnXDzoH3/S68frwVKP+UPecXvFgXSM56k4h5r+dt1js=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 09:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:84:ce:4a:9e:48:9e:ca:09:26:f6:34:8e:cc:9a:11:a9:fb:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
Validity
Not Before: Oct 19 09:21:55 2026 GMT
Not After : Oct 20 09:55:55 2026 GMT
Subject: CN=E90467F587780575E14DE66802CC48F4A13CE01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:a1:1d:31:58:19:d3:94:63:8a:97:56:b0:
ff:9f:f6:5f:8f:51:f0:38:19:48:01:29:c5:32:fb:
a6:f3:19:51:4f:cd:7b:fd:00:56:ac:f0:b1:17:fa:
de:fa:ff:1f:5c:81:1f:88:f8:6a:46:71:1a:86:43:
2f:9a:ad:3c:2b:55:ed:14:69:13:24:4e:d6:89:23:
71:de:68:c9:22:7b:e8:43:bc:fe:df:f2:de:c8:fb:
65:7a:30:66:cd:bf:02:46:b0:9a:3e:23:a6:64:57:
c5:c2:d4:91:c9:ef:9d:03:48:c4:22:2e:4b:18:af:
6c:74:1d:8b:a9:16:93:4a:b6:9f:99:d1:84:0e:af:
96:09:72:6d:e4:69:59:d0:1f:f9:e4:c9:03:91:16:
c7:e0:7e:4d:db:8c:84:53:ee:5b:26:1e:4f:b1:aa:
d1:72:84:9b:44:1f:ba:c7:6a:0b:86:de:b2:41:c5:
d4:c3:b0:7d:ba:ab:33:77:60:be:3b:f9:d5:e1:52:
29:9f:59:dc:32:ac:2b:81:26:14:c3:7c:9a:2e:da:
c6:83:f4:14:cc:a1:f6:c0:1b:ca:59:fe:ae:3c:2f:
a0:c1:97:d2:3e:d6:c4:dd:97:c6:f5:06:c6:c6:0d:
e2:e7:15:c2:44:5b:05:60:8c:e7:21:a3:3f:6d:0a:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:67:F5:87:78:05:75:E1:4D:E6:68:02:CC:48:F4:A1:3C:E0:1F
X509v3 Authority Key Identifier:
keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:f7:b5:d3:8a:77:58:65:f5:e1:77:40:d4:15:55:95:51:
8f:d5:91:4a:ac:75:39:50:b0:e5:9e:20:ed:ea:67:42:62:0f:
79:f4:a9:51:fc:1e:04:30:f1:46:c8:04:7b:ff:0c:08:db:bd:
39:25:2f:a2:74:9c:b3:95:9f:64:1d:d1:5a:17:72:cf:e8:cd:
47:2b:ea:00:49:63:d9:76:5f:10:f1:20:6b:5b:95:3a:fc:6b:
bb:41:71:08:47:5c:45:84:e1:b0:fe:bb:db:a3:20:c0:50:a2:
ef:47:9e:4c:27:97:39:28:48:b4:bb:19:49:09:97:86:48:a6:
94:d4:79:c0:45:bd:90:f2:cd:d3:f7:8c:95:75:0b:af:55:05:
ff:8f:48:df:1d:9b:87:a1:31:05:78:ad:8a:5e:29:5d:c5:aa:
1b:95:a7:95:a8:06:6a:2b:01:a2:33:fe:aa:33:c2:9c:80:7e:
85:14:ec:c6:ac:28:82:16:59:6d:0a:b8:bf:7e:f7:34:9f:0f:
f1:f8:61:1d:f2:78:58:60:cd:93:04:23:de:15:06:83:62:34:
5f:89:1a:94:ce:7b:46:3b:95:34:39:4c:07:c4:70:57:c8:e6:
47:25:ae:6c:ec:5e:a5:7d:61:06:7e:9c:78:37:9b:db:7e:d0:
e1:e9:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:26:09 2026 by rpki-client