Error: rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft File: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json) Hash identifier: Qo1JEEEFJjXP5OWmHvtgHi6wAR0b3gjiEjJ29FseCvo= Subject key identifier: B9:DC:84:12:12:96:3D:7A:D8:8F:65:D9:DB:23:61:82:51:66:96:9E Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Certificate serial: 38FF4E45E959CB945DC5B5BAFB91D3EC429E5432 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft Manifest number: 04EA Signing time: Tue 03 Nov 2026 07:10:00 +0000 Manifest this update: Tue 03 Nov 2026 07:05:00 +0000 Manifest next update: Wed 04 Nov 2026 08:02:00 +0000 Files and hashes: 1: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: plNVndGh0UpduQxW8EF347WyGpax8YPyP0ETQTO7NVk=) 2: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=) 3: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=) 4: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=) 5: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=) 6: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=) 7: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=) 8: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=) 9: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=) 10: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=) 11: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=) 12: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=) 13: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ff:4e:45:e9:59:cb:94:5d:c5:b5:ba:fb:91:d3:ec:42:9e:54:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Validity Not Before: Nov 3 07:05:00 2026 GMT Not After : Nov 4 08:02:00 2026 GMT Subject: CN=B9DC841212963D7AD88F65D9DB2361825166969E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:9f:b6:79:dc:a4:c3:c9:3c:00:0a:a3:61: 86:f4:b7:e1:07:bb:5e:b4:74:c1:3b:f2:b0:31:36: 96:df:21:82:80:cf:30:d1:0a:53:77:fb:0c:b6:c6: 6d:e2:ad:71:6a:d3:b3:fd:24:9b:cd:05:49:95:c3: 48:c2:20:fd:cf:e6:05:e9:72:6a:f1:41:c5:fd:f7: a7:b9:64:fe:8f:0b:32:e6:37:40:af:99:74:7c:93: 2b:2f:e6:fa:76:d8:03:6f:25:0f:3f:b9:80:00:7b: f6:19:70:3c:6d:c6:a5:b0:46:52:c1:d7:fc:7a:49: a1:04:91:b1:56:0c:38:ea:c7:d2:4d:45:5d:50:26: d1:9c:21:5c:09:0e:64:4b:dd:34:5d:6e:3d:82:fc: 61:d6:a2:4c:3a:a5:b9:af:e5:97:1c:c8:c2:0e:63: cc:74:ca:e7:9c:24:88:87:77:63:fd:70:26:ce:10: 19:f2:73:58:93:04:0d:f5:9c:bb:44:ef:b4:d9:a2: 06:dd:48:35:b1:9e:df:76:53:c7:2e:71:5e:67:49: d1:84:38:00:75:1e:61:6b:ec:51:2b:90:d6:95:aa: 01:a8:8b:6a:bc:0b:12:5d:07:40:74:37:cb:a0:7e: 67:5c:8e:b7:35:3a:0f:e2:73:2f:af:2a:0f:72:52: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:84:12:12:96:3D:7A:D8:8F:65:D9:DB:23:61:82:51:66:96:9E X509v3 Authority Key Identifier: keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:ca:3b:3f:9c:c6:25:4a:41:d3:1e:77:9d:81:fb:3b:30: 83:d9:08:f9:63:6b:97:88:d2:84:89:d8:d4:c1:e8:7b:e7:fb: 6a:4e:0a:d1:d6:1a:53:a6:8f:ff:b0:70:3a:65:d9:61:0f:77: 54:32:69:fc:c2:60:93:bb:87:f8:8b:09:2f:cf:be:2d:d7:b5: 11:d9:15:8f:6a:e2:b7:df:2f:dd:db:75:a0:ea:cb:56:f3:71: 58:83:28:b7:09:61:39:a2:8b:5d:ac:11:d6:e5:9c:72:7a:85: c3:c3:34:dc:9e:4d:33:02:47:a8:80:e3:93:e4:e0:81:8c:ff: 32:df:30:f9:6f:c5:f5:a3:df:ad:b3:f4:34:a5:50:e9:2d:d4: fa:9c:11:19:c0:1b:28:12:85:e1:16:18:eb:a7:3c:32:24:bd: 30:e6:35:8e:a3:f6:1c:f8:1d:76:c0:ee:27:5d:9b:e0:64:a8: 72:46:45:0c:ba:52:0b:df:95:64:eb:6e:b9:d1:8b:2f:88:fd: 25:02:40:7b:d9:60:89:b0:d8:87:91:33:e9:d6:f0:64:86:2e: 3b:1d:1a:fc:1a:50:a6:29:17:3c:0e:fd:87:d6:e4:67:8d:4b: 2f:22:9c:68:fb:ac:a6:c5:ac:48:a1:0e:78:ed:8d:f1:22:70: 55:9c:b4:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOP9ORelZy5RdxbW6+5HT7EKeVDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx MjMzOEQ5QzAeFw0yNjExMDMwNzA1MDBaFw0yNjExMDQwODAyMDBaMDMxMTAvBgNV BAMTKEI5REM4NDEyMTI5NjNEN0FEODhGNjVEOURCMjM2MTgyNTE2Njk2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQZ+2edykw8k8AAqjYYb0t+EH u160dME78rAxNpbfIYKAzzDRClN3+wy2xm3irXFq07P9JJvNBUmVw0jCIP3P5gXp cmrxQcX996e5ZP6PCzLmN0CvmXR8kysv5vp22ANvJQ8/uYAAe/YZcDxtxqWwRlLB 1/x6SaEEkbFWDDjqx9JNRV1QJtGcIVwJDmRL3TRdbj2C/GHWokw6pbmv5ZccyMIO Y8x0yuecJIiHd2P9cCbOEBnyc1iTBA31nLtE77TZogbdSDWxnt92U8cucV5nSdGE OAB1HmFr7FErkNaVqgGoi2q8CxJdB0B0N8ugfmdcjrc1Og/icy+vKg9yUldhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUudyEEhKWPXrYj2XZ2yNhglFmlp4wHwYDVR0j BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8y QkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL2LKOz+cxiVKQdMed52B+zswg9kI+WNrl4jShInY1MHoe+f7ak4K0dYaU6aP /7BwOmXZYQ93VDJp/MJgk7uH+IsJL8++Lde1EdkVj2rit98v3dt1oOrLVvNxWIMo twlhOaKLXawR1uWccnqFw8M03J5NMwJHqIDjk+TggYz/Mt8w+W/F9aPfrbP0NKVQ 6S3U+pwRGcAbKBKF4RYY66c8MiS9MOY1jqP2HPgddsDuJ12b4GSockZFDLpSC9+V ZOtuudGLL4j9JQJAe9lgibDYh5Ez6dbwZIYuOx0a/BpQpikXPA79h9bkZ41LLyKc aPuspsWsSKEOeO2N8SJwVZy0UQ== -----END CERTIFICATE-----Generated at Wed Nov 4 01:24:07 2026 by rpki-client