Error: rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft File: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json) Hash identifier: vLGPrqY0WAcsI4uE1GulJlMxsY6G8KEmcEqeh5TG3Ik= Subject key identifier: B9:4C:94:7A:B0:41:33:2A:04:95:F3:80:97:6E:89:F9:BA:4F:59:BD Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 Certificate issuer: /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Certificate serial: 2D1F76D8A5A7AB6B1405963D54A5A6EC76439D2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft Manifest number: 04E3 Signing time: Wed 28 Oct 2026 02:10:00 +0000 Manifest this update: Wed 28 Oct 2026 02:05:00 +0000 Manifest next update: Thu 29 Oct 2026 03:48:00 +0000 Files and hashes: 1: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: 8pacm9n9ta0u3df+CGdDOT5VZFtBVTYafv9T/yn67mI=) 2: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: BruxwqJWfKyRFTI2SJm4s0MgvOksI2wYdPZH+Pr1uqM=) 3: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: cGe1000RguWJhhNSvl7VRAxDphOffrqJS/r6DyiD+pY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 03:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1f:76:d8:a5:a7:ab:6b:14:05:96:3d:54:a5:a6:ec:76:43:9d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Validity Not Before: Oct 28 02:05:00 2026 GMT Not After : Oct 29 03:48:00 2026 GMT Subject: CN=B94C947AB041332A0495F380976E89F9BA4F59BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b2:cf:e7:ba:6c:24:4e:43:90:84:d1:60:39: c2:00:08:7d:8f:f7:3d:3f:e8:d7:06:22:3f:09:36: 88:92:5a:27:43:ec:87:23:1f:0e:57:35:72:ee:f2: ec:d7:99:b0:ea:89:2e:fe:e8:98:ea:e3:00:f0:ab: 3e:fa:a9:e3:88:e1:e3:cf:ed:eb:ea:fb:0e:da:05: aa:3e:81:a7:1c:07:82:0a:62:3a:1c:49:4b:40:f0: a2:62:02:59:0a:b2:72:ea:57:ee:e7:a9:7b:96:ac: 31:31:a6:1d:85:a8:84:c0:f6:ac:4f:58:67:d1:c3: 46:c3:16:5c:4f:40:71:e4:35:53:0b:18:3b:f4:40: bb:d7:61:f6:9c:09:f0:9d:c0:03:77:eb:b0:01:d9: b3:29:08:d3:1f:20:1d:5e:d8:00:38:44:d7:f8:09: 9b:ed:69:9a:aa:8c:23:83:2d:71:fa:cc:bf:00:9c: fe:2d:64:e0:58:65:10:fb:1c:10:09:72:18:e1:da: 96:d7:e5:48:0e:fa:84:77:fc:9d:51:ac:79:ea:b9: f0:6f:4c:eb:00:3b:14:11:fe:b1:81:56:78:0d:cb: 5c:32:43:f1:7a:a9:8a:46:b3:a1:54:72:6d:95:78: 61:32:c6:40:73:31:b8:6d:c1:0a:22:a2:79:25:97: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4C:94:7A:B0:41:33:2A:04:95:F3:80:97:6E:89:F9:BA:4F:59:BD X509v3 Authority Key Identifier: keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:71:36:e8:3a:e3:3d:c4:66:67:f4:f7:01:dd:24:84:9e:ed: 98:a9:2b:b5:0f:b1:b7:bb:5b:db:3a:c1:33:bd:67:a8:39:bf: e2:83:9d:43:12:c8:27:1d:af:23:cf:6a:2c:cb:f6:e0:1d:94: cf:1c:0a:3d:42:a4:30:20:42:74:bd:8b:da:04:1e:61:92:b2: 3e:c2:42:80:4b:fd:07:ef:ac:62:d2:26:8e:00:21:a8:d0:27: bb:05:8c:45:e8:15:b8:aa:a2:18:1d:02:cd:2a:1e:d4:a8:88: a5:13:10:c4:8c:fe:0a:8d:7f:a2:3e:df:dd:76:34:ae:84:23: 84:e5:f5:6e:d9:8b:72:93:7c:af:fe:d4:c5:42:bc:d8:c0:31: d9:c0:35:32:c1:de:f3:0a:70:0e:94:61:c6:49:bd:b0:19:da: 57:08:1e:f6:94:8a:1c:de:7d:1d:2c:9b:23:ce:d5:9d:10:83: 9a:c4:91:bb:87:6d:be:22:fb:54:0b:15:33:27:11:e2:39:fd: ab:f2:2f:71:50:f5:3f:a5:17:8c:89:17:4c:53:6a:c4:82:a3: fc:8e:97:8f:17:01:fe:15:51:f5:20:03:19:8d:bb:80:1f:f0: 76:77:e7:bb:0f:ba:7a:13:2e:cf:5b:8a:a4:f6:15:95:1f:97: d4:9e:d4:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULR922KWnq2sUBZY9VKWm7HZDnS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3NEJGQTNEMEJEQ0MyQ0M2MkVERDlFRkIxMUZDMDI4 Mzc0Mzc2NTAeFw0yNjEwMjgwMjA1MDBaFw0yNjEwMjkwMzQ4MDBaMDMxMTAvBgNV BAMTKEI5NEM5NDdBQjA0MTMzMkEwNDk1RjM4MDk3NkU4OUY5QkE0RjU5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ss/numwkTkOQhNFgOcIACH2P 9z0/6NcGIj8JNoiSWidD7IcjHw5XNXLu8uzXmbDqiS7+6Jjq4wDwqz76qeOI4ePP 7evq+w7aBao+gaccB4IKYjocSUtA8KJiAlkKsnLqV+7nqXuWrDExph2FqITA9qxP WGfRw0bDFlxPQHHkNVMLGDv0QLvXYfacCfCdwAN367AB2bMpCNMfIB1e2AA4RNf4 CZvtaZqqjCODLXH6zL8AnP4tZOBYZRD7HBAJchjh2pbX5UgO+oR3/J1RrHnqufBv TOsAOxQR/rGBVngNy1wyQ/F6qYpGs6FUcm2VeGEyxkBzMbhtwQoionkll1JFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuUyUerBBMyoElfOAl26J+bpPWb0wHwYDVR0j BBgwFoAUDXS/o9C9zCzGLt2e+xH8AoN0N2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUth UjUvMS8wRDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENzRCRkEzRDBCRENDMkND NjJFREQ5RUZCMTFGQzAyODM3NDM3NjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUthUjUvMS8w RDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHXE26DrjPcRmZ/T3Ad0khJ7tmKkrtQ+xt7tb2zrBM71nqDm/4oOdQxLIJx2v I89qLMv24B2UzxwKPUKkMCBCdL2L2gQeYZKyPsJCgEv9B++sYtImjgAhqNAnuwWM RegVuKqiGB0CzSoe1KiIpRMQxIz+Co1/oj7f3XY0roQjhOX1btmLcpN8r/7UxUK8 2MAx2cA1MsHe8wpwDpRhxkm9sBnaVwge9pSKHN59HSybI87VnRCDmsSRu4dtviL7 VAsVMycR4jn9q/IvcVD1P6UXjIkXTFNqxIKj/I6XjxcB/hVR9SADGY27gB/wdnfn uw+6ehMuz1uKpPYVlR+X1J7UcQ== -----END CERTIFICATE-----Generated at Wed Oct 28 22:27:36 2026 by rpki-client