
Error: rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
File: 725BCF70C08F4B2744E301141EF06513A96F28D6.mft (raw, json)
Hash identifier: 2+KhNl41gIhfKYRze2mXLgob2OlgblLtQX3OgQh5cC0=
Subject key identifier: F3:03:08:EC:46:6E:1F:3C:68:76:06:5F:C2:9E:79:3D:73:6A:70:06
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Certificate issuer: /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial: 1C8BBBD8AFD9039DA3EEA12B34F5ECB21F023EFF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
Manifest number: 04E1
Signing time: Fri 30 Oct 2026 07:00:00 +0000
Manifest this update: Fri 30 Oct 2026 06:55:00 +0000
Manifest next update: Sat 31 Oct 2026 10:04:00 +0000
Files and hashes: 1: 725BCF70C08F4B2744E301141EF06513A96F28D6.crl (hash: 6oQVXG4VW9dHqIk8OyuTMtLJxr0dqPYfYzMwoQeG14o=)
2: 3138362e3231372e302e302f31362d3234203d3e203533313636.roa (hash: tLQ+jjBXbnnOAUhKF6Pdi8La3tCgx4qREeElrBO0j1Q=)
3: 323830313a38383a3a2f33322d3438203d3e203533313636.roa (hash: aZyYZb5PjIBgrmYnOqXu9UbfqsxT6gqu2UJDBubWo9s=)
4: 3230302e3134352e302e302f31362d3234203d3e203533313636.roa (hash: st0BtMhTI+w8nR37hrlnw7s4sAKaj7wFWHq/UbBnruQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 10:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8b:bb:d8:af:d9:03:9d:a3:ee:a1:2b:34:f5:ec:b2:1f:02:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Validity
Not Before: Oct 30 06:55:00 2026 GMT
Not After : Oct 31 10:04:00 2026 GMT
Subject: CN=F30308EC466E1F3C6876065FC29E793D736A7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c4:1f:cb:00:b2:32:c5:9e:a9:07:12:ab:d2:
63:24:d9:91:29:98:7d:f1:42:1d:17:46:a9:fd:60:
e4:d9:6e:7b:f6:56:17:b2:e3:fd:78:4e:6f:f1:cf:
11:a3:d6:52:d6:14:bb:f0:da:13:51:3d:78:96:e9:
b0:b8:a8:76:67:76:2c:38:e9:7b:2b:8b:ed:52:66:
35:1b:87:b9:54:50:a1:d0:27:1e:92:b1:95:9f:43:
2c:81:fa:6d:d3:07:10:c0:db:d4:b8:11:26:6b:2e:
86:81:82:21:49:39:96:fe:be:a7:96:d0:be:c4:6d:
f0:a6:93:42:10:21:81:01:bc:82:4b:1a:23:ba:14:
08:81:c6:93:39:bd:ac:63:21:2a:64:70:6a:71:6b:
83:3e:09:83:44:29:56:43:36:90:94:e2:af:1e:50:
9e:37:12:df:62:74:ae:9f:00:a7:40:9d:3d:29:35:
77:f7:c3:df:e1:dc:76:ce:b7:b4:bd:50:1b:ca:0c:
8c:3a:91:a7:a4:34:0d:1a:36:6a:5b:aa:bf:61:5d:
f9:d6:4c:60:10:a4:b9:65:1c:a9:61:a6:fc:dc:74:
96:ed:71:ca:f0:f4:c0:30:5f:80:99:e9:a3:6a:6b:
88:38:2c:e2:04:79:5a:d1:b8:69:55:f2:ef:8d:f4:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:08:EC:46:6E:1F:3C:68:76:06:5F:C2:9E:79:3D:73:6A:70:06
X509v3 Authority Key Identifier:
keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:d6:85:99:5c:a2:05:f0:a5:ce:cc:1e:f6:7e:99:c4:be:
8e:64:86:64:e0:cd:49:f3:f0:aa:c6:5c:6e:a2:6b:5a:83:63:
9e:5f:c8:30:f5:1f:a1:26:b9:86:87:63:e2:cf:72:d8:b3:89:
6c:3b:68:37:87:c4:4b:3b:b1:ea:64:cc:e1:33:44:56:9a:d5:
82:4f:d0:09:3e:ec:fc:9f:f4:d9:e7:0b:5a:63:17:65:c9:3f:
44:2d:e2:b4:75:b8:06:20:cd:53:8d:ab:b4:83:9b:91:d9:4a:
af:c1:c6:59:46:28:79:b5:1f:43:98:ee:6b:a0:58:b9:0d:40:
07:0a:62:b1:84:be:3f:c0:3a:20:f8:ed:8c:7b:4c:82:b3:a6:
19:44:68:31:56:42:ac:01:09:b4:b4:84:d2:23:3a:d4:7d:0d:
82:fc:6a:dc:5c:54:66:0a:90:8a:93:71:7d:4f:41:08:39:88:
ac:e1:af:ab:79:d6:1c:aa:10:c7:8d:cc:20:7c:91:a8:0f:1d:
51:a1:ee:86:39:94:03:dd:97:2c:7c:f6:a9:9a:e2:bc:90:fd:
57:f1:c9:a6:1a:83:26:37:07:5a:19:0c:ca:6a:28:35:56:63:
20:c4:13:df:5f:9c:e2:5d:4e:ff:9d:d9:d2:58:54:81:e9:16:
54:5f:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 22:23:31 2026 by rpki-client