Error: rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: wzjsSzXOGCu6Ki9PHN6J/7UaFJ5Yj30Nw7T3LiQa0Xk= Subject key identifier: 1D:2D:76:61:8A:8B:B9:FE:A2:FB:D6:75:F3:33:69:28:32:3F:62:EB Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 7AA2233C51C35312A526BAD9CEF21C21F14FC8F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 04CA Signing time: Wed 14 Oct 2026 13:50:00 +0000 Manifest this update: Wed 14 Oct 2026 13:45:00 +0000 Manifest next update: Thu 15 Oct 2026 16:34:00 +0000 Files and hashes: 1: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: o3enRyNbzWXBypRyf4X8XM36ZbDvaLOcZyQ7nwnBtuU=) 2: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: /y6z15cjDQH3TnK16DpDLdeXV7tK0D57iPYT81yix9A=) 3: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 6m4zbH4CvrVkkMH6P+svwQ9mp9NdGtkwxoG3HBYiSzk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a2:23:3c:51:c3:53:12:a5:26:ba:d9:ce:f2:1c:21:f1:4f:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Oct 14 13:45:00 2026 GMT Not After : Oct 15 16:34:00 2026 GMT Subject: CN=1D2D76618A8BB9FEA2FBD675F3336928323F62EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:cd:44:23:5e:48:7f:ae:80:93:03:90:80: e5:44:23:62:1a:c9:7d:e1:66:00:7b:a9:1a:0a:38: 12:26:66:b8:a5:1f:f5:ea:a5:87:1b:1c:73:d1:ea: 6d:86:bb:79:b0:92:24:fd:bf:fa:6b:04:e8:68:1f: 1f:56:70:ec:7f:85:47:bb:3e:63:f6:3d:1f:00:84: 0f:bf:de:7c:29:ef:aa:9e:f5:c9:7b:8a:37:11:5c: 77:73:ec:d0:bf:a0:2e:c9:ae:9b:2c:d0:fc:20:3e: 9c:7f:a1:2e:f6:33:b6:90:78:77:a2:d7:04:6f:ff: 85:03:d8:9a:f5:d5:f8:e7:4e:ed:61:6e:d8:2a:e8: 16:48:0a:05:9a:55:0a:0f:fc:a1:da:cb:39:a2:35: 0a:63:13:ff:81:e8:f6:c5:aa:d4:f3:5f:d6:40:5d: 1a:41:e4:27:62:9a:48:8d:93:8f:f4:8e:cd:19:bb: 17:77:7e:91:e5:36:62:f2:3d:36:52:5a:80:39:ff: f4:f2:cf:d3:0c:f0:bb:84:0d:0a:4d:d8:68:62:a6: b2:8d:ad:09:d2:f5:bb:c8:30:dc:04:2d:88:4b:10: 9f:90:6b:49:29:c2:5f:2c:1a:49:b4:7e:cd:fa:bc: ab:44:95:f6:21:53:1a:56:1c:3d:72:02:db:54:34: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2D:76:61:8A:8B:B9:FE:A2:FB:D6:75:F3:33:69:28:32:3F:62:EB X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4c:df:ef:28:67:33:98:c1:2c:c7:8f:dd:38:30:d3:65:6f: 45:a3:4b:69:99:95:c0:15:67:c8:77:a5:2f:57:75:15:ee:65: 5b:a4:e0:1f:64:bd:ba:25:e3:4f:9c:70:5f:82:2e:cf:c6:9b: 00:c1:78:3b:d2:1d:5b:07:63:de:1b:9a:63:f6:3c:11:d2:fa: b0:cf:43:1c:95:b2:65:3f:98:48:d6:73:d3:e6:79:c7:31:58: 8b:1b:c4:ed:a2:0f:9b:9e:d0:19:f8:ed:6c:fd:67:18:83:26: a2:af:f0:f9:07:2f:43:24:fe:e8:35:87:e7:e7:4a:cb:ab:5b: 15:c8:a1:67:53:ed:23:17:36:b9:3f:3c:72:d9:61:0a:65:36: a3:d6:c5:a0:6b:bb:22:77:f5:6a:d0:29:f0:5c:3e:91:f5:f5: 1b:95:c8:1a:f7:b4:d1:b4:a4:2c:e3:15:f8:85:97:ad:e3:96: e8:8b:36:15:b1:93:d7:2a:35:0a:40:aa:5c:87:7d:b1:9c:76: 75:b5:c8:aa:04:1f:b4:c6:be:43:34:d6:52:c3:11:d0:7b:fa: ea:15:8e:28:c1:95:90:96:a3:e0:9d:cb:f6:71:d3:e3:b1:e3: 97:1d:30:41:c3:34:6d:28:b5:0e:63:54:8a:12:a3:a2:af:07: b9:fe:60:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeqIjPFHDUxKlJrrZzvIcIfFPyPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNjEwMTQxMzQ1MDBaFw0yNjEwMTUxNjM0MDBaMDMxMTAvBgNV BAMTKDFEMkQ3NjYxOEE4QkI5RkVBMkZCRDY3NUYzMzM2OTI4MzIzRjYyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8c1EI15If66AkwOQgOVEI2Ia yX3hZgB7qRoKOBImZrilH/XqpYcbHHPR6m2Gu3mwkiT9v/prBOhoHx9WcOx/hUe7 PmP2PR8AhA+/3nwp76qe9cl7ijcRXHdz7NC/oC7Jrpss0PwgPpx/oS72M7aQeHei 1wRv/4UD2Jr11fjnTu1hbtgq6BZICgWaVQoP/KHayzmiNQpjE/+B6PbFqtTzX9ZA XRpB5CdimkiNk4/0js0Zuxd3fpHlNmLyPTZSWoA5//Tyz9MM8LuEDQpN2GhiprKN rQnS9bvIMNwELYhLEJ+Qa0kpwl8sGkm0fs36vKtElfYhUxpWHD1yAttUNNOHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHS12YYqLuf6i+9Z18zNpKDI/YuswHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdUzf7yhnM5jBLMeP3Tgw02VvRaNLaZmVwBVnyHelL1d1Fe5lW6TgH2S9uiXj T5xwX4Iuz8abAMF4O9IdWwdj3huaY/Y8EdL6sM9DHJWyZT+YSNZz0+Z5xzFYixvE 7aIPm57QGfjtbP1nGIMmoq/w+QcvQyT+6DWH5+dKy6tbFcihZ1PtIxc2uT88ctlh CmU2o9bFoGu7Inf1atAp8Fw+kfX1G5XIGve00bSkLOMV+IWXreOW6Is2FbGT1yo1 CkCqXId9sZx2dbXIqgQftMa+QzTWUsMR0Hv66hWOKMGVkJaj4J3L9nHT47Hjlx0w QcM0bSi1DmNUihKjoq8Huf5gpA== -----END CERTIFICATE-----Generated at Thu Oct 15 05:44:43 2026 by rpki-client