
Error: rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft
File: EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft (raw, json)
Hash identifier: oYUj16j8ZVm3nPRmuERBwYS6rozDi69BADhzMGgfKtU=
Subject key identifier: C5:7B:4D:C9:33:13:94:3E:E3:7A:09:80:7B:D0:3D:E9:E2:98:D5:E4
Authority key identifier: EC:69:30:B3:4F:7B:CD:69:31:C4:C2:48:BE:1C:14:4F:76:E3:F9:D9
Certificate issuer: /CN=EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9
Certificate serial: 401D9E16559CE0870289B76555D66B1F2102AC77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft
Manifest number: 22
Signing time: Sun 11 Oct 2026 06:10:49 +0000
Manifest this update: Sun 11 Oct 2026 06:05:49 +0000
Manifest next update: Mon 12 Oct 2026 07:10:49 +0000
Files and hashes: 1: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 8oOWL335dtT7CPQIFBXeV4uG9LtQVcc4WrhgijKOP3k=)
2: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: 4ZTJg0Y5FbrMOSX1EYwbRV/W4Zr50xo6BwUorTrRKKs=)
3: EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl (hash: uPPb4io2Jr6cBtpg98S18wj3gfAe3/fjgJQpQYWY0Fw=)
4: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: evR0Dlvqlon26Roa+wp9s+0PqfBI0xPCX2fKj50A6jg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl
rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 07:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1d:9e:16:55:9c:e0:87:02:89:b7:65:55:d6:6b:1f:21:02:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9
Validity
Not Before: Oct 11 06:05:49 2026 GMT
Not After : Oct 12 07:10:49 2026 GMT
Subject: CN=C57B4DC93313943EE37A09807BD03DE9E298D5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:00:18:0d:40:0b:46:ed:e0:c6:e1:46:5b:
3f:98:01:55:65:43:19:b1:35:d2:32:85:27:10:3b:
a6:41:b9:7c:85:df:6a:14:3b:eb:80:9b:19:8e:d2:
82:32:ac:cd:cc:71:1f:9e:47:5a:59:d0:e6:44:e2:
de:2f:22:d5:ad:b2:d5:96:d6:56:8b:ad:dd:d7:52:
b6:ce:a6:9e:cd:50:db:1e:0e:19:7c:0e:e9:75:8f:
ec:12:83:6f:09:bf:82:c3:e3:81:13:7b:b1:05:b7:
eb:ff:3a:ca:64:57:28:f6:88:bc:63:3d:b8:32:c7:
dc:6b:51:a4:c8:70:f3:f9:eb:5c:a2:78:93:a1:31:
5f:41:49:27:8c:4f:95:25:36:f6:56:e5:50:65:a0:
16:23:e3:f5:03:6e:e1:d6:ea:93:c6:5a:57:4c:76:
e8:bb:e4:29:54:f2:db:4f:9f:fb:e3:dd:b5:0a:7a:
b5:df:17:7a:81:3e:45:5a:36:df:8e:e1:1d:d7:3f:
e9:8c:84:3e:61:fe:8f:52:db:5f:88:f9:a1:c2:4f:
59:a2:47:b5:ec:53:da:1e:e8:94:ef:cc:e0:37:19:
6e:a1:29:b1:f5:19:cb:73:54:43:cb:f1:5e:fc:eb:
eb:f4:68:01:4d:52:11:28:15:10:87:01:35:e0:3d:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:4D:C9:33:13:94:3E:E3:7A:09:80:7B:D0:3D:E9:E2:98:D5:E4
X509v3 Authority Key Identifier:
keyid:EC:69:30:B3:4F:7B:CD:69:31:C4:C2:48:BE:1C:14:4F:76:E3:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:88:ca:73:36:31:1f:bb:b3:67:87:bd:ba:88:b4:e4:3c:
d7:4a:39:60:fa:75:c2:26:7b:12:86:20:4c:ab:d6:b0:7c:33:
f2:66:c7:45:d6:79:7e:0a:c4:42:76:ba:53:59:27:02:90:9c:
7d:e9:7b:65:ac:b0:85:48:1c:f0:9b:56:b8:53:76:f7:d6:ec:
97:c1:b5:38:3d:2b:e3:93:f5:9c:e6:10:c6:df:21:60:77:c2:
cc:78:6c:56:73:e4:8c:30:63:e5:de:a7:01:cf:20:ae:0f:64:
78:b3:44:b3:84:8d:fc:46:4d:7b:e7:a8:1d:29:29:8c:eb:de:
15:16:f4:68:ae:54:8d:ac:92:91:81:08:21:82:fb:a6:1d:ce:
b2:d8:66:51:93:cb:a2:e0:15:4d:4d:65:41:97:37:28:97:3c:
5a:f4:37:09:4b:53:3f:2e:23:dc:b3:51:8a:58:aa:b8:86:f9:
55:ff:9b:48:d1:fa:89:76:dc:22:4a:40:0e:4e:87:0f:d6:7f:
b6:2c:6d:a1:42:64:bc:db:8d:7a:aa:1f:18:e7:cb:c3:eb:98:
d0:c9:81:c0:cc:d9:2c:c6:78:ef:fa:4c:ea:c1:09:b0:2f:ab:
a7:db:47:88:09:ea:57:35:a6:62:19:95:7d:94:bb:70:26:10:
f9:12:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:36:00 2026 by rpki-client