
Error: rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
File: 84BE8DAC97679B597EE7D16D314BEA427BB99664.mft (raw, json)
Hash identifier: nI4gfaX3MPc+5CAKIpJdgmnQzayg7ym+08SoP8tbTOc=
Subject key identifier: 45:73:1A:B2:17:06:98:62:C9:54:DC:52:03:44:C3:21:5D:CE:EC:20
Authority key identifier: 84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64
Certificate issuer: /CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
Certificate serial: 72D920CAC9E9F52CBF22726D64DD8240C0EF38AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
Manifest number: 033C
Signing time: Sat 17 Oct 2026 08:22:06 +0000
Manifest this update: Sat 17 Oct 2026 08:17:06 +0000
Manifest next update: Sun 18 Oct 2026 12:06:06 +0000
Files and hashes: 1: 3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa (hash: 9kChXPRPrijv8NyR5UYvKAcPPV40yicE2NdUfEjoPYU=)
2: 84BE8DAC97679B597EE7D16D314BEA427BB99664.crl (hash: yg5RQoiImCTtEJjXHAgDWbJZBlSTJqgj+E/49Cdw+2E=)
3: 323830343a373439633a3a2f33322d3332203d3e20323730393932.roa (hash: t9CtyyOIwCJcn6o4qpEDnbuq+0bcsR+p2LzNcf8Tt5U=)
4: 3138372e38362e3136302e302f32332d3233203d3e20323730393932.roa (hash: Ux/eQlazTv2BzOMFa2g/HtdveD99dtC0F1AozP8UFyg=)
5: 3138372e38362e3136312e302f32342d3234203d3e20323730393932.roa (hash: MEAOAbezd9NQg4qSO//8xYdv1E3rMUT4gSOxnnktUQE=)
6: 3138372e38362e3136322e302f32342d3234203d3e20323730393932.roa (hash: pYgnxaBO/jbVJF/jq0dSX0X510zcZFzcguoYOQCUjQM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl
rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 12:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d9:20:ca:c9:e9:f5:2c:bf:22:72:6d:64:dd:82:40:c0:ef:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
Validity
Not Before: Oct 17 08:17:06 2026 GMT
Not After : Oct 18 12:06:06 2026 GMT
Subject: CN=45731AB217069862C954DC520344C3215DCEEC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:3e:a2:dc:76:a5:c0:4b:09:7c:5c:9f:aa:
21:a3:f8:c6:7b:ba:63:d8:f0:0a:4b:df:7c:98:bd:
43:5d:b7:3f:1b:31:bf:9a:4d:5e:da:95:01:ea:30:
8d:f3:fb:c9:ed:fa:ee:2a:fc:f3:9a:37:e6:11:2b:
75:84:27:fc:a3:38:d7:65:1b:c7:df:78:f3:53:63:
53:24:b1:3c:7f:f0:53:e5:7f:d9:be:bf:38:09:25:
a0:f7:8d:67:64:6e:98:f2:27:33:17:01:7a:06:0e:
2a:f6:0e:af:f3:df:c2:34:5e:0d:0e:21:3f:73:fc:
73:ad:7f:8f:e2:e8:ec:27:50:6e:03:8a:a0:0c:22:
07:e1:5e:01:05:47:f5:27:9e:da:11:da:52:52:57:
16:03:88:be:f4:83:43:6a:12:21:ac:e2:80:4d:68:
0d:98:d9:f2:cf:89:94:0b:d7:22:f3:3a:56:2d:3b:
e1:11:a2:9e:69:2d:9a:c7:b7:37:ce:70:8c:1a:9e:
76:96:50:de:9c:31:44:7d:d3:89:19:bd:63:38:cd:
f8:d1:89:b3:76:e0:8e:45:f6:83:b4:1d:e1:84:70:
53:8f:1b:37:a1:1b:9c:2b:8e:6e:10:13:68:7e:d6:
3b:d8:cb:8b:d2:2f:52:0f:7e:73:0e:8c:46:a4:3e:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:1A:B2:17:06:98:62:C9:54:DC:52:03:44:C3:21:5D:CE:EC:20
X509v3 Authority Key Identifier:
keyid:84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:f7:4d:d2:44:14:c9:ec:d5:4f:f5:2d:ff:b3:52:64:d5:
53:6c:6e:f8:cc:74:1c:f5:e8:5c:48:49:3d:0d:af:74:6b:d3:
3e:c1:67:96:17:fe:a3:64:b0:c9:db:d5:49:c9:11:87:76:bc:
c7:2e:3a:3f:6d:4a:e2:83:b8:0c:92:ff:33:7e:53:46:8a:1c:
65:61:37:6e:26:64:e1:36:ac:1f:65:1e:33:ac:d2:a0:c7:db:
aa:5e:7f:11:bd:10:fc:3e:68:ec:6c:11:ec:4a:45:bf:9b:94:
77:87:19:43:d3:09:9a:7e:ae:92:31:c5:97:1a:ff:8b:7f:e0:
2f:ee:c8:54:08:33:92:ed:25:cb:d7:9a:4e:d8:d9:bd:27:11:
49:e1:36:27:87:16:e7:6b:51:91:b9:bd:84:cd:92:5c:65:28:
02:be:fb:3f:c4:52:00:24:2e:ab:4b:ae:a1:5e:c0:d7:fb:ce:
ee:ca:61:4e:99:35:d9:f1:dd:81:e6:ae:a0:f9:a4:45:6a:4d:
2c:08:69:41:a4:98:5b:47:36:25:a7:a0:c1:fe:a5:07:36:58:
c5:e0:b6:41:ba:cc:59:21:7b:5a:56:f3:c6:31:4b:34:e1:ff:
53:32:53:6a:dd:bb:12:ba:e8:a6:51:90:d4:aa:a6:62:54:aa:
c6:6b:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:35:05 2026 by rpki-client