
Error: rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
File: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft (raw, json)
Hash identifier: ldpXfwLyDOkeDqsVImKYNXOV4xOINlF7Vdx7Elj4HK4=
Subject key identifier: 42:54:21:46:09:14:E8:F8:3A:DB:E0:A6:FC:B4:1C:D0:4D:0A:2D:91
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Certificate issuer: /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial: 12D1364DA574A7C331C93900D853AFC43AF554A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
Manifest number: 04DD
Signing time: Fri 30 Oct 2026 10:30:11 +0000
Manifest this update: Fri 30 Oct 2026 10:25:11 +0000
Manifest next update: Sat 31 Oct 2026 12:00:11 +0000
Files and hashes: 1: 3137372e38342e36302e302f32322d3234203d3e20323633353136.roa (hash: K4pmvdQD7R0fYgybTvwsiJKNbGO44L53lbAav7iRH+M=)
2: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl (hash: y/2O8IbxJm5tbzyzG48accIyKg05yS9wlCdH4eBJsMs=)
3: 323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (hash: C5V4zGxvuCL/tqG3clxUoiDlGo969+4XRicFxMWEmg0=)
4: 3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (hash: OUoy+tYplA3pzPS27m/2zyfI8dfAZYnImzFGMW+KGxQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d1:36:4d:a5:74:a7:c3:31:c9:39:00:d8:53:af:c4:3a:f5:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Validity
Not Before: Oct 30 10:25:11 2026 GMT
Not After : Oct 31 12:00:11 2026 GMT
Subject: CN=425421460914E8F83ADBE0A6FCB41CD04D0A2D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:33:f2:19:c2:5d:7c:7e:e4:33:b3:78:1c:
4c:8c:2f:ff:49:f9:66:cb:f0:60:49:0d:5f:13:0e:
43:6a:20:7b:7e:21:70:a7:d2:f6:f1:0b:45:91:34:
9d:e8:7e:95:a3:29:58:60:43:76:d4:c6:f2:03:44:
64:f2:f0:99:a6:4d:93:de:39:0d:36:8d:b9:cb:f6:
60:c3:86:20:be:de:3b:fd:1e:c0:3c:8e:96:96:9a:
8f:e6:03:95:57:b3:9c:e5:ab:17:42:17:d6:f1:c7:
d3:ed:c4:fd:0c:05:38:fa:1e:b1:42:83:89:c3:69:
55:e2:c6:79:71:e3:7a:2b:a7:55:5c:76:ca:c5:86:
90:02:fb:d1:82:43:14:b2:a0:e0:89:db:3e:98:7d:
df:9f:40:11:69:80:b3:b5:cf:1f:ac:77:93:5a:bc:
45:8e:6d:b9:52:78:c7:05:ab:77:ef:f7:77:5d:5e:
69:39:1f:cb:29:d7:2e:fc:85:b7:21:08:9a:1e:14:
f8:ea:46:be:84:b8:3b:bd:e1:28:1e:78:87:0b:8f:
c2:95:3f:d2:2e:06:03:dd:a2:66:83:4f:86:72:d1:
d6:c0:ec:4f:10:bb:2c:60:60:ad:fa:4e:8a:06:1c:
4e:4d:63:35:38:3e:ba:df:91:57:01:8e:31:5d:3e:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:54:21:46:09:14:E8:F8:3A:DB:E0:A6:FC:B4:1C:D0:4D:0A:2D:91
X509v3 Authority Key Identifier:
keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3d:b0:dd:6a:c6:95:36:33:36:79:6a:b7:29:d3:84:6b:4f:
6c:12:c3:ac:38:7b:21:0e:e8:23:cd:0b:1b:4f:e8:42:7b:1d:
ad:fc:76:02:d8:6f:9f:a7:69:ae:14:45:8d:f2:f8:d9:bf:93:
bf:2d:3b:d7:49:a0:a0:b5:25:e4:6a:33:3a:ca:d7:d0:74:c6:
04:3c:10:17:75:ca:d4:60:33:cd:6a:5b:e8:0f:b4:d1:e4:62:
87:a2:8a:f7:40:27:9c:22:b4:15:6c:c1:cf:fb:aa:c7:80:4e:
31:7a:7b:4f:52:e7:80:3b:2f:c8:68:6c:a1:01:83:b4:ec:06:
b4:24:d5:4e:a9:8c:68:44:ed:d8:dc:76:bc:a4:32:bc:4e:6b:
de:b4:f9:77:32:bf:18:18:e7:04:9e:bf:55:b9:58:27:5a:5e:
b3:d1:53:54:b4:0d:9d:e6:d6:bf:62:ba:e6:8c:e1:d7:51:7c:
e8:10:26:5d:60:53:3e:05:5f:91:b1:1f:a0:b7:31:20:27:8b:
92:10:e4:4b:bd:2f:dd:5e:09:4d:4c:89:55:06:c1:c5:20:09:
e9:32:a2:28:24:c9:18:f0:42:de:e1:20:80:3b:de:bf:fa:a2:
25:0f:7d:70:0d:4b:83:05:6d:d9:20:1a:bb:06:cd:03:62:b2:
03:1d:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:33:49 2026 by rpki-client