
Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier: +NaD86cefc5KLyG8tve5b1am0lvhYtY+18VzQGZKeEA=
Subject key identifier: 51:27:50:F0:7B:A2:3F:C9:5C:0D:82:8B:FF:1E:B6:FF:4E:8E:A3:81
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial: 3BE3409A5D4A9FA1B3523A5F8F6F3C21F024A8D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number: 04BB
Signing time: Sun 11 Oct 2026 01:39:25 +0000
Manifest this update: Sun 11 Oct 2026 01:34:25 +0000
Manifest next update: Mon 12 Oct 2026 04:48:25 +0000
Files and hashes: 1: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
2: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
4: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: YmL+CB5TiUUegu8dGMGj/B9WS1cKVur4M1Vmpsv0aa8=)
5: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 04:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e3:40:9a:5d:4a:9f:a1:b3:52:3a:5f:8f:6f:3c:21:f0:24:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Validity
Not Before: Oct 11 01:34:25 2026 GMT
Not After : Oct 12 04:48:25 2026 GMT
Subject: CN=512750F07BA23FC95C0D828BFF1EB6FF4E8EA381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:14:89:d1:3a:d0:ef:93:d6:31:89:bf:35:
6d:02:93:7a:09:a8:7d:81:a5:36:9a:be:14:e0:99:
98:96:31:b7:b3:b4:5c:90:7e:63:a8:3d:69:4c:22:
5c:48:80:71:f9:cd:cc:1a:8d:43:4c:c6:7b:3e:a7:
94:09:54:c2:49:cd:97:e9:c7:11:71:13:a6:ec:9e:
37:f7:c9:42:04:97:df:17:70:8e:f4:07:e1:a3:b9:
58:ee:de:b4:45:c6:fd:04:df:3f:3e:cf:69:6d:ff:
85:f3:9c:cc:67:77:2f:72:54:33:bd:fa:4c:45:0c:
1b:08:0b:e7:e7:0d:b7:7d:68:ab:e6:85:7d:41:2c:
33:74:fe:9f:1e:5a:9d:32:cf:c5:a9:09:3f:7d:c5:
bb:c3:75:1d:61:f5:37:c7:de:55:d2:31:5f:97:74:
31:32:e4:1b:50:fc:25:a0:be:bb:94:a6:99:89:74:
0e:b4:ed:a7:c3:38:00:1a:7e:22:d1:13:42:26:b6:
2e:69:c3:c3:de:ae:b5:c7:68:20:50:6a:a8:a3:fd:
a2:e4:21:c0:c3:fd:dd:af:16:f6:9a:cb:a5:99:12:
1b:eb:5f:9e:e5:25:3d:6b:43:89:83:b0:a6:36:a6:
14:68:15:54:36:b7:bc:d6:cf:b2:37:57:1b:90:6e:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:50:F0:7B:A2:3F:C9:5C:0D:82:8B:FF:1E:B6:FF:4E:8E:A3:81
X509v3 Authority Key Identifier:
keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:32:d5:67:8d:0c:2f:82:f3:a1:5c:a9:d3:58:14:e8:0a:56:
49:0d:41:65:a3:f6:ab:72:5a:df:88:09:ec:3a:0d:34:04:2d:
ea:1e:3b:36:59:be:90:f0:55:c2:52:e5:c4:c3:38:bd:e3:fe:
a6:fd:68:95:27:7d:ea:69:99:70:df:21:83:bb:b0:bf:f8:52:
d4:d0:06:8b:cb:60:01:44:1b:27:42:87:9f:71:e3:7b:30:a6:
58:e1:aa:ee:67:83:3c:db:a6:57:4c:2b:ac:c3:83:8c:c6:5f:
c0:7b:8f:f5:a7:8b:8a:ae:b7:ae:6a:b6:29:8e:98:1b:8f:05:
b4:4c:28:93:04:f9:bf:1e:ee:ea:d4:44:b3:33:8c:fe:cf:61:
e0:0f:58:16:b9:c5:4d:e7:53:30:ea:8a:38:fb:a0:8b:a7:98:
cf:c5:87:ab:8e:b3:b5:ed:13:80:e2:b2:15:f4:39:52:3c:85:
f5:60:88:d8:cb:a8:48:cf:99:aa:ca:28:59:48:ee:02:73:9c:
83:f6:58:ad:22:74:a2:c9:32:59:91:c4:d7:d8:9a:23:42:61:
ae:e2:e4:1f:c0:c5:43:d5:61:1a:7e:a1:d1:e3:87:61:5f:d7:
8e:72:48:89:70:10:f8:95:00:a5:16:e2:18:86:17:ca:65:25:
25:db:95:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO+NAml1Kn6GzUjpfj288IfAkqNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThENzA3REEwRjZENzIxQ0E5MDU2QUUwQjcxMjZFREQy
MTRBRDdENTAeFw0yNjEwMTEwMTM0MjVaFw0yNjEwMTIwNDQ4MjVaMDMxMTAvBgNV
BAMTKDUxMjc1MEYwN0JBMjNGQzk1QzBEODI4QkZGMUVCNkZGNEU4RUEzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVhSJ0TrQ75PWMYm/NW0Ck3oJ
qH2BpTaavhTgmZiWMbeztFyQfmOoPWlMIlxIgHH5zcwajUNMxns+p5QJVMJJzZfp
xxFxE6bsnjf3yUIEl98XcI70B+GjuVju3rRFxv0E3z8+z2lt/4XznMxndy9yVDO9
+kxFDBsIC+fnDbd9aKvmhX1BLDN0/p8eWp0yz8WpCT99xbvDdR1h9TfH3lXSMV+X
dDEy5BtQ/CWgvruUppmJdA607afDOAAafiLRE0Imti5pw8PerrXHaCBQaqij/aLk
IcDD/d2vFvaay6WZEhvrX57lJT1rQ4mDsKY2phRoFVQ2t7zWz7I3VxuQbn+JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUSdQ8HuiP8lcDYKL/x62/06Oo4EwHwYDVR0j
BBgwFoAUmNcH2g9tchypBWrgtxJu3SFK19UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMS85OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RDcwN0RBMEY2RDcyMUNB
OTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85
OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhDLVZ40ML4LzoVyp01gU6ApWSQ1BZaP2q3Ja34gJ7DoNNAQt6h47Nlm+kPBV
wlLlxMM4veP+pv1olSd96mmZcN8hg7uwv/hS1NAGi8tgAUQbJ0KHn3HjezCmWOGq
7meDPNumV0wrrMODjMZfwHuP9aeLiq63rmq2KY6YG48FtEwokwT5vx7u6tREszOM
/s9h4A9YFrnFTedTMOqKOPugi6eYz8WHq46zte0TgOKyFfQ5UjyF9WCI2MuoSM+Z
qsooWUjuAnOcg/ZYrSJ0oskyWZHE19iaI0JhruLkH8DFQ9VhGn6h0eOHYV/XjnJI
iXAQ+JUApRbiGIYXymUlJduVtA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:17:03 2026 by rpki-client