
Error: rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
File: 181D4968B550981952C318301AB2D4C10F7F34DD.mft (raw, json)
Hash identifier: CRyzcDkzaFiu1TIJ1erX1dWfCAoUnu5BuAZOOxK/JXI=
Subject key identifier: 91:87:FA:C9:A7:10:D3:0A:C0:CD:F4:08:71:58:1E:A9:FA:E3:31:29
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Certificate issuer: /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial: 41716DBC3BD29E257FD3E0414791EBFCEC0D4656
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
Manifest number: 0677
Signing time: Fri 25 Sep 2026 22:36:33 +0000
Manifest this update: Fri 25 Sep 2026 22:31:33 +0000
Manifest next update: Sun 27 Sep 2026 01:07:33 +0000
Files and hashes: 1: 323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa (hash: Xa9loMgZvrAGbPPjnEXsZ2f/3SwGfw7IYqpxWMbxuJ8=)
2: 181D4968B550981952C318301AB2D4C10F7F34DD.crl (hash: DoebFTUfFqWLCTILS4eqM3mtK/WgYIsQEksGvwTsOCY=)
3: 323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa (hash: CppARg55ciM07jAmpDoeTyyq9RopgA9vq4NlYR2UZhQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 01:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:71:6d:bc:3b:d2:9e:25:7f:d3:e0:41:47:91:eb:fc:ec:0d:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Validity
Not Before: Sep 25 22:31:33 2026 GMT
Not After : Sep 27 01:07:33 2026 GMT
Subject: CN=9187FAC9A710D30AC0CDF40871581EA9FAE33129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:1a:0e:49:44:dd:4a:6e:e4:a3:50:31:01:
d8:fc:32:cb:c2:8d:99:89:68:99:41:ff:29:88:76:
a1:1f:0b:d4:26:c1:af:8b:74:dc:32:d9:47:85:90:
d2:10:67:98:38:4b:40:6a:d2:db:f8:c3:a1:16:36:
73:9e:e7:6c:c8:af:2b:a9:aa:bd:a9:37:11:88:ba:
18:98:a7:22:4d:e2:b8:79:2c:eb:45:1b:96:0f:b9:
06:2e:a0:e9:e7:a4:9b:d2:b6:38:2a:9d:26:c6:f9:
fc:2d:83:4b:93:28:6e:92:47:5e:5b:7b:93:a8:c1:
2d:b3:ed:ee:bb:75:28:f6:d7:59:ab:db:46:02:f1:
91:6e:6e:86:7a:f1:65:ce:cd:a8:08:1f:50:d1:e4:
e5:14:33:a4:67:7a:e8:cc:cd:d9:ca:29:00:f2:0e:
20:71:27:7e:b9:75:66:8b:d2:63:0c:69:58:43:e5:
10:e0:a7:02:86:e8:a4:9b:33:c0:44:c9:09:a5:cb:
73:6c:00:5c:12:06:73:95:57:7d:97:12:c2:e6:0c:
36:6e:b2:30:c7:c2:93:96:92:88:59:b3:38:2f:01:
41:42:e0:db:54:7c:06:f3:59:43:c9:fd:1c:e8:35:
5a:23:8a:63:f9:ae:bb:61:59:c8:2a:74:c4:be:ff:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:FA:C9:A7:10:D3:0A:C0:CD:F4:08:71:58:1E:A9:FA:E3:31:29
X509v3 Authority Key Identifier:
keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e0:21:9a:3c:be:f6:1b:89:e5:00:bf:f5:5a:ce:90:5f:f3:
65:35:69:ca:61:49:ec:b9:9c:b3:70:d4:bc:da:a5:e9:b3:b6:
cf:89:92:6d:cf:d1:55:5d:71:f9:7c:86:48:b0:e6:5c:dc:37:
b6:b1:de:2f:0a:23:63:04:af:c4:66:1c:3e:22:48:66:09:70:
ca:f2:23:80:da:d2:90:5d:25:f9:ff:77:c5:00:69:7b:e8:e3:
56:26:10:14:7f:5a:66:5a:02:f2:15:6c:76:3d:c3:3f:f4:06:
0a:b8:33:9a:53:a3:6f:bc:19:26:c6:9b:0d:96:d5:45:85:9a:
0f:ff:3b:33:ca:95:26:ce:9f:eb:aa:0d:fb:40:b0:6a:01:db:
9e:3a:97:bd:1c:4f:76:73:08:3f:77:5a:c9:be:c1:50:a6:c8:
53:0d:0e:5f:e9:92:a3:47:cd:93:2b:f9:1a:4a:91:24:1f:80:
d6:27:84:05:80:d4:98:52:8e:9e:35:a1:16:79:33:0d:de:6e:
4d:c9:80:c5:6e:2b:33:50:fb:13:db:c4:71:79:e3:ac:a1:97:
0d:9c:9c:92:95:09:75:6d:fb:f7:0e:56:6e:12:71:07:b4:5f:
0d:1d:76:d6:4b:a8:27:bd:47:36:01:89:d0:7b:e7:aa:5b:3a:
f6:32:0d:a0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQXFtvDvSniV/0+BBR5Hr/OwNRlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTBiNjkyODZkMTEyZjVkOGVkMzRjZjJhZjUwZGU1NzZk
Y2I5NGQxODlhMmFjOWUxOTIwHhcNMjYwOTI1MjIzMTMzWhcNMjYwOTI3MDEwNzMz
WjAzMTEwLwYDVQQDEyg5MTg3RkFDOUE3MTBEMzBBQzBDREY0MDg3MTU4MUVBOUZB
RTMzMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lkaDklE3Upu
5KNQMQHY/DLLwo2ZiWiZQf8piHahHwvUJsGvi3TcMtlHhZDSEGeYOEtAatLb+MOh
FjZznudsyK8rqaq9qTcRiLoYmKciTeK4eSzrRRuWD7kGLqDp56Sb0rY4Kp0mxvn8
LYNLkyhukkdeW3uTqMEts+3uu3Uo9tdZq9tGAvGRbm6GevFlzs2oCB9Q0eTlFDOk
Z3rozM3ZyikA8g4gcSd+uXVmi9JjDGlYQ+UQ4KcChuikmzPARMkJpctzbABcEgZz
lVd9lxLC5gw2brIwx8KTlpKIWbM4LwFBQuDbVHwG81lDyf0c6DVaI4pj+a67YVnI
KnTEvv9/qQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFJGH+smnENMKwM30CHFYHqn6
4zEpMB8GA1UdIwQYMBaAFBgdSWi1UJgZUsMYMBqy1MEPfzTdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2ZTRmMzVhMDA1MTQ0LzAv
MTgxRDQ5NjhCNTUwOTgxOTUyQzMxODMwMUFCMkQ0QzEwRjdGMzRERC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FhOWFkZTVlLTZmZjYtNGFlNS04ZDVlLTVkYjNjOWRlOTRkYy85MGI2
OTI4NmQxMTJmNWQ4ZWQzNGNmMmFmNTBkZTU3NmRjYjk0ZDE4OWEyYWM5ZTE5Mi5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2ZTRm
MzVhMDA1MTQ0LzAvMTgxRDQ5NjhCNTUwOTgxOTUyQzMxODMwMUFCMkQ0QzEwRjdG
MzRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBACbgIZo8vvYbieUAv/VazpBf82U1acphSey5nLNw1Lza
pemzts+Jkm3P0VVdcfl8hkiw5lzcN7ax3i8KI2MEr8RmHD4iSGYJcMryI4Da0pBd
Jfn/d8UAaXvo41YmEBR/WmZaAvIVbHY9wz/0Bgq4M5pTo2+8GSbGmw2W1UWFmg//
OzPKlSbOn+uqDftAsGoB2546l70cT3ZzCD93Wsm+wVCmyFMNDl/pkqNHzZMr+RpK
kSQfgNYnhAWA1JhSjp41oRZ5Mw3ebk3JgMVuKzNQ+xPbxHF546yhlw2cnJKVCXVt
+/cOVm4ScQe0Xw0ddtZLqCe9RzYBidB756pbOvYyDaA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:22 2026 by rpki-client