
Error: rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
File: 78EEB73CE335838F80FE0D32902455D8BEBE7641.mft (raw, json)
Hash identifier: JtfuA6HFnmxj8rq1rSYS2SYEnQMAcf2+N7WKsO5Pd9A=
Subject key identifier: 84:A0:92:77:D1:05:97:34:A0:96:5C:41:89:BB:7D:C7:FA:8A:43:0D
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Certificate issuer: /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial: 7D5212F0847025DCEFAC6AE5E8E0EEA5403B8EC4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
Manifest number: 04BE
Signing time: Sun 11 Oct 2026 19:25:40 +0000
Manifest this update: Sun 11 Oct 2026 19:20:40 +0000
Manifest next update: Mon 12 Oct 2026 21:58:40 +0000
Files and hashes: 1: 323830343a386561303a383030323a3a2f34382d3438203d3e20323733343338.roa (hash: zgRv0Sfv8iFUZehreUSkH6iuultn6vXdgPjC8a6Ilts=)
2: 323830343a386561303a383030333a3a2f34382d3438203d3e20323733343338.roa (hash: ogIopWu+Jk+stfMz9TRohrhmZStkd5RZWLJGcikhUyk=)
3: 323830343a386561303a3a2f33322d3332203d3e20323733343338.roa (hash: iQt7rpAC2z0RSOo9aHhIrika4Nc07Uu1FdTCsDvMKbg=)
4: 78EEB73CE335838F80FE0D32902455D8BEBE7641.crl (hash: 6KuqBg+SVm/H603dFMjHBWPEh5Wkl7/VvswCSb8FtI0=)
5: 323830343a386561303a383030323a3a2f34372d3437203d3e20323733343338.roa (hash: sUzLErIQTLf73Oxu9TsiLZxifhRowuBnd5dmM6RZ+q8=)
6: 34352e3137382e3137302e302f32332d3233203d3e20323733343338.roa (hash: EFlAWywq2sM7+MwNk1RywpxVmHltMLvEnhea6jidchk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 21:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:52:12:f0:84:70:25:dc:ef:ac:6a:e5:e8:e0:ee:a5:40:3b:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Validity
Not Before: Oct 11 19:20:40 2026 GMT
Not After : Oct 12 21:58:40 2026 GMT
Subject: CN=84A09277D1059734A0965C4189BB7DC7FA8A430D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:86:b6:24:95:17:75:ec:1b:22:e1:84:4c:
7d:be:52:30:1f:4b:26:ab:f3:6f:dc:28:3f:7c:b1:
63:41:78:36:32:46:04:6c:73:9a:40:e6:04:8c:8b:
b3:08:40:70:1d:78:8a:34:d0:a7:32:fd:65:53:c1:
c1:ea:ab:9a:e6:ab:f5:bd:33:61:07:8c:c3:a4:4d:
11:32:5a:a7:2b:e1:2e:11:0e:86:2d:87:97:d4:20:
0f:97:f4:3a:37:14:00:63:68:0e:f1:49:87:82:b4:
a9:dd:76:43:0a:14:46:d8:06:42:be:24:c7:a3:30:
33:36:f0:09:28:de:ef:40:8c:8c:05:4d:85:53:40:
35:e0:3a:a7:17:98:b1:cc:1b:8a:b8:1e:7d:c2:b0:
a1:a9:cc:d5:60:9a:6e:2b:b1:d0:f9:10:3b:80:8e:
94:33:13:44:fb:81:52:c9:2d:34:5f:c9:68:5a:12:
5d:a8:55:49:6d:c2:ff:5a:29:c3:fe:e5:f4:08:99:
b2:a0:98:03:e9:26:90:73:69:24:9c:81:16:0d:f2:
4c:fd:1d:02:8c:85:f2:38:20:fa:45:a6:b5:aa:33:
87:0f:d6:7c:61:d7:86:97:bb:5d:ad:d5:a0:94:02:
bd:61:58:9b:38:0e:c4:00:3b:78:cf:e0:78:1c:53:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:92:77:D1:05:97:34:A0:96:5C:41:89:BB:7D:C7:FA:8A:43:0D
X509v3 Authority Key Identifier:
keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:47:34:d7:66:25:54:76:eb:e8:6d:e2:bc:75:8f:78:9f:76:
94:75:ca:e9:dc:5e:13:81:c7:e2:f8:7f:1d:0a:47:bf:89:fe:
79:97:1d:6a:8b:52:66:ba:0f:ea:14:19:7d:bb:8d:56:1c:cf:
94:f8:0b:cc:b2:0e:10:7b:29:3c:bc:27:0f:56:7d:2d:e4:17:
c9:56:33:14:dc:ee:ad:ad:36:fc:a7:fa:ad:77:0d:46:d2:c2:
1c:16:59:eb:93:13:e5:26:ab:6c:05:0f:82:aa:48:b3:3d:46:
3a:e8:4b:39:36:2e:ec:7a:dc:e1:27:95:48:d5:e9:d9:bb:b1:
06:74:53:f2:2b:bd:42:dc:12:f7:a8:4d:9f:58:00:7d:62:81:
99:70:fc:82:a9:fe:62:76:01:31:5b:02:75:ac:3d:4b:58:a6:
37:f7:1a:fa:eb:c1:87:48:fe:8d:4f:75:c1:8e:96:8c:df:20:
33:e1:be:3f:b3:3c:2a:61:4d:21:47:20:3f:a4:1d:95:9a:01:
22:4e:96:24:01:cc:61:d1:5d:29:75:18:c5:84:83:e9:a6:b7:
cb:b2:d7:6b:5f:6f:19:a8:d2:10:b3:32:f2:24:aa:ef:cd:73:
d6:fb:37:bf:91:d7:3d:b6:a8:c6:d1:d7:61:c3:ff:9f:62:15:
c8:36:e1:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfVIS8IRwJdzvrGrl6ODupUA7jsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFRUI3M0NFMzM1ODM4RjgwRkUwRDMyOTAyNDU1RDhC
RUJFNzY0MTAeFw0yNjEwMTExOTIwNDBaFw0yNjEwMTIyMTU4NDBaMDMxMTAvBgNV
BAMTKDg0QTA5Mjc3RDEwNTk3MzRBMDk2NUM0MTg5QkI3REM3RkE4QTQzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuIa2JJUXdewbIuGETH2+UjAf
Syar82/cKD98sWNBeDYyRgRsc5pA5gSMi7MIQHAdeIo00Kcy/WVTwcHqq5rmq/W9
M2EHjMOkTREyWqcr4S4RDoYth5fUIA+X9Do3FABjaA7xSYeCtKnddkMKFEbYBkK+
JMejMDM28Ako3u9AjIwFTYVTQDXgOqcXmLHMG4q4Hn3CsKGpzNVgmm4rsdD5EDuA
jpQzE0T7gVLJLTRfyWhaEl2oVUltwv9aKcP+5fQImbKgmAPpJpBzaSScgRYN8kz9
HQKMhfI4IPpFprWqM4cP1nxh14aXu12t1aCUAr1hWJs4DsQAO3jP4HgcU35vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhKCSd9EFlzSgllxBibt9x/qKQw0wHwYDVR0j
BBgwFoAUeO63POM1g4+A/g0ykCRV2L6+dkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExaWHB1NW1mdlZDREV4amI3TFBWNXJlZjVIRlVQb3Q4WkFyUFR2RDh4
S24vMS83OEVFQjczQ0UzMzU4MzhGODBGRTBEMzI5MDI0NTVEOEJFQkU3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RUVCNzNDRTMzNTgzOEY4
MEZFMEQzMjkwMjQ1NUQ4QkVCRTc2NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RExaWHB1NW1mdlZDREV4amI3TFBWNXJlZjVIRlVQb3Q4WkFyUFR2RDh4S24vMS83
OEVFQjczQ0UzMzU4MzhGODBGRTBEMzI5MDI0NTVEOEJFQkU3NjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIkc012YlVHbr6G3ivHWPeJ92lHXK6dxeE4HH4vh/HQpHv4n+eZcdaotSZroP
6hQZfbuNVhzPlPgLzLIOEHspPLwnD1Z9LeQXyVYzFNzura02/Kf6rXcNRtLCHBZZ
65MT5SarbAUPgqpIsz1GOuhLOTYu7Hrc4SeVSNXp2buxBnRT8iu9QtwS96hNn1gA
fWKBmXD8gqn+YnYBMVsCdaw9S1imN/ca+uvBh0j+jU91wY6WjN8gM+G+P7M8KmFN
IUcgP6QdlZoBIk6WJAHMYdFdKXUYxYSD6aa3y7LXa19vGajSELMy8iSq781z1vs3
v5HXPbaoxtHXYcP/n2IVyDbhYw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 09:53:36 2026 by rpki-client