
Error: rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
File: 13444CACBA70082038368F9FE638A30F9C9B0F6B.mft (raw, json)
Hash identifier: V+8YsxirXnV3JvOVzHhJt7+yLWibogtTx7ieFSBzIoQ=
Subject key identifier: F6:13:E2:64:95:96:C1:77:EC:39:70:FE:CD:10:66:2D:6F:50:2D:BD
Authority key identifier: 13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B
Certificate issuer: /CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
Certificate serial: 52DB3FE9ACCBAA08FDA4EC8B02759ADDF9194903
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
Manifest number: 6A
Signing time: Mon 12 Oct 2026 13:39:31 +0000
Manifest this update: Mon 12 Oct 2026 13:34:31 +0000
Manifest next update: Tue 13 Oct 2026 16:02:31 +0000
Files and hashes: 1: 323830343a383234303a3a2f33322d3438203d3e20323732353038.roa (hash: zt1SFnyBViNTsxTfqshRQlcco6qHA7SCoY1SiV3a2F8=)
2: 13444CACBA70082038368F9FE638A30F9C9B0F6B.crl (hash: +zh27AfGk4I9A3br8WxCgBSovsX9ioslMfdsm6sp7xs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl
rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 16:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:db:3f:e9:ac:cb:aa:08:fd:a4:ec:8b:02:75:9a:dd:f9:19:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
Validity
Not Before: Oct 12 13:34:31 2026 GMT
Not After : Oct 13 16:02:31 2026 GMT
Subject: CN=F613E2649596C177EC3970FECD10662D6F502DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:63:2c:10:fb:b8:06:e8:f8:ea:c7:1a:87:
57:63:ac:90:5b:4e:58:53:6b:68:68:86:91:8a:60:
d7:54:8f:72:64:dd:29:e7:08:4e:52:d3:85:92:43:
43:7b:32:e8:d4:11:ae:2f:fb:82:9c:51:6a:ad:5a:
34:d9:12:e5:3f:7d:b6:6a:c2:76:f5:a8:79:b5:d2:
fe:e1:d3:90:48:8e:de:10:cd:83:2f:27:12:40:81:
9d:80:2f:da:5b:2f:79:76:a5:1d:45:28:9e:a5:df:
87:2b:66:2d:49:6d:82:13:09:16:2b:65:4e:44:c2:
7b:c9:97:15:54:a1:b4:10:68:38:de:77:8e:32:b9:
8b:17:1a:df:d4:90:01:04:49:90:ad:eb:40:76:93:
93:23:ea:4b:92:ec:7f:08:c1:01:df:02:31:b3:ad:
c0:a7:08:1d:f3:e5:34:c5:e9:2c:c8:cd:2b:97:dc:
c1:64:2b:aa:6d:88:d8:8c:ce:e6:ee:15:b1:77:ca:
5e:93:86:0f:e6:7d:00:54:f9:54:2b:56:c0:63:76:
73:42:51:5d:08:ac:8b:85:73:98:43:0e:a0:c0:0a:
e7:f4:f6:8d:9a:c1:b9:0a:15:17:13:e6:ae:b8:10:
1e:eb:a9:28:53:15:26:75:06:50:4b:a0:43:a1:e9:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:E2:64:95:96:C1:77:EC:39:70:FE:CD:10:66:2D:6F:50:2D:BD
X509v3 Authority Key Identifier:
keyid:13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:7a:c0:42:48:0e:46:15:1a:10:8c:6d:8e:db:3c:24:d3:
29:80:68:74:62:6b:c1:fa:bd:5b:48:b9:5e:68:fe:5f:9f:53:
75:64:8d:29:80:d2:c8:ba:e1:0e:d8:31:02:71:06:1a:40:d0:
c5:b9:65:0e:c5:0a:ee:ef:2c:21:70:27:46:6c:03:02:e7:92:
49:d1:f1:9a:f9:09:e8:22:19:df:6d:92:2a:25:76:a3:e0:3e:
a8:19:ee:8e:95:19:7a:76:b0:3e:56:34:17:d4:0e:b0:a2:1f:
12:20:a7:49:93:b8:cf:3a:45:07:50:e2:25:ba:60:e6:ed:38:
6a:a6:78:12:f2:16:ac:e0:89:3a:1d:24:99:b4:e3:ec:a1:9b:
52:ba:66:12:c8:63:aa:56:81:5d:a5:bc:1b:f2:45:af:e2:2a:
ca:7b:d6:65:18:fe:6c:64:d3:43:e4:95:2c:d1:5b:51:0e:2a:
27:55:2a:bd:cf:b1:cc:73:73:e1:bd:bd:10:5b:a7:ed:d6:01:
fa:e4:aa:14:c8:91:ba:df:95:57:63:29:0c:88:89:3d:2d:68:
64:5f:d2:c2:74:71:c2:bd:23:3e:ab:58:d2:6b:fc:fe:99:48:
08:c4:f7:5c:4f:1e:aa:cd:55:21:b2:a3:78:fc:67:d6:6d:2f:
74:d0:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:50:04 2026 by rpki-client