
Error: rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
File: 3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json)
Hash identifier: Dk/3p5vlEPlFNmE3BAiLbUTSMNK/FqU2BMOqQPzaG9s=
Subject key identifier: BF:17:1B:3A:3F:9F:DA:D5:04:13:1E:50:84:38:A7:ED:56:70:28:3A
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Certificate issuer: /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial: 349B13F88F01919F39866DD1DD2E18939E1551D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
Manifest number: 0476
Signing time: Mon 12 Oct 2026 16:22:03 +0000
Manifest this update: Mon 12 Oct 2026 16:17:03 +0000
Manifest next update: Tue 13 Oct 2026 17:26:03 +0000
Files and hashes: 1: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: FXUu4U3adBchD+fWNsbxn2w+6ql0jo6WcmN2Jr0Pb3M=)
2: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: axrcKMSoK/iUiilBciKvZ91YOXMwX1ZhlOB4bEwbwn8=)
3: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: D9T1ivgCmz0SSRV8w22p1cFm3YQoo5WUWVg9SjY5HDs=)
4: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (hash: 1FFtSGCVlttR7Kby+N8YCSbMBks3xuCJNineZ8Vmhnc=)
5: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: OkOqn15nyWFeKojDv2QzcS1JY1n8oMVgflCENwyDGjo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 17:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9b:13:f8:8f:01:91:9f:39:86:6d:d1:dd:2e:18:93:9e:15:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Validity
Not Before: Oct 12 16:17:03 2026 GMT
Not After : Oct 13 17:26:03 2026 GMT
Subject: CN=BF171B3A3F9FDAD504131E508438A7ED5670283A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:55:89:aa:0e:05:a0:96:d8:91:49:f0:3a:
51:cb:8e:6c:f0:b6:74:b7:3b:5d:ea:3f:21:52:11:
82:ed:fb:56:1f:75:90:fd:ff:73:22:97:a0:a0:86:
1c:4b:96:2a:36:60:09:c8:f8:46:ba:68:c8:5a:2f:
2e:e5:6a:d4:e1:e7:cc:0c:46:22:7c:fe:27:ee:57:
42:98:48:be:3e:a4:a6:ef:7a:51:34:e5:bc:97:0a:
8b:c9:6d:44:58:5b:fc:26:9b:93:cb:bd:77:70:c8:
1b:4a:f3:4f:b7:ad:23:7f:20:9c:60:78:fa:b6:33:
14:04:51:6b:3c:43:4a:f4:4c:e4:4b:91:7e:30:a0:
f4:64:12:79:42:0f:a3:82:74:e3:55:2e:7c:f1:ec:
b6:3c:21:78:d1:2d:a2:d2:b9:be:79:ed:83:c2:03:
ba:28:f9:f5:82:5a:d0:5b:f6:33:aa:72:d9:25:67:
e3:da:96:69:c8:d8:9c:0c:ae:7c:df:0c:bc:1f:1b:
e5:ec:44:9b:47:fe:fc:64:08:92:a8:57:f8:52:42:
42:50:d2:0f:ca:ef:20:f3:df:72:53:7e:59:c2:c4:
4b:66:0c:31:dc:48:67:b7:80:a0:61:5a:0b:ea:09:
eb:ca:32:3d:0e:41:5a:e0:35:b0:e0:68:29:af:c9:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:1B:3A:3F:9F:DA:D5:04:13:1E:50:84:38:A7:ED:56:70:28:3A
X509v3 Authority Key Identifier:
keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:70:36:dd:3e:39:03:9c:51:8f:4f:f8:7a:d0:f8:0b:35:c9:
85:9a:0c:17:c3:1d:ff:db:55:7c:1f:56:9b:d5:89:51:1f:57:
10:66:50:3d:01:6f:06:8e:e8:10:6b:ee:46:92:4c:d0:6b:cc:
48:6c:e9:39:d6:87:5d:7d:fe:b0:21:b1:85:cc:21:9e:e6:f5:
08:65:96:e5:a0:bc:91:f2:3e:ba:26:33:51:4d:6b:a6:67:c5:
45:fc:be:2f:9c:1f:32:bf:05:ed:78:89:bc:f7:b3:d9:ac:9c:
c2:39:29:ee:9d:ca:ef:ca:0a:f5:86:2a:28:d4:8e:f6:e8:2d:
79:7c:59:d3:bb:07:5f:7f:2c:36:a4:1f:75:02:36:10:2e:fe:
2d:4f:34:02:6f:c8:ff:84:81:b6:89:1d:a0:8e:90:2e:81:e1:
34:23:ba:93:37:cb:49:0e:8d:0d:9d:0c:c7:5d:49:13:98:6d:
81:75:d5:15:e5:93:57:e1:ec:3e:c5:e7:3c:8c:ec:68:d7:bd:
45:f4:d1:5c:4c:b9:81:d3:be:69:f9:93:80:ae:09:f1:0e:f9:
06:2f:b9:e9:e7:e9:9f:a6:c5:69:76:ab:56:f8:22:b5:01:38:
17:81:ab:cc:a4:5a:67:e8:81:bd:ca:52:d9:e7:65:65:33:30:
56:af:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:42:12 2026 by rpki-client