Error: rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft File: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft (raw, json) Hash identifier: eu6xnI1Gk3QcqhKuGfczh7nanr5VGoND72fx5of5jVg= Subject key identifier: A2:14:1C:94:07:FA:55:84:01:D4:B4:D6:9E:D0:A3:EA:66:58:83:7C Authority key identifier: 9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0 Certificate issuer: /CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0 Certificate serial: 288C2482949EEECEE183AC8B01AE69EA47CFCAA3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft Manifest number: 04D0 Signing time: Tue 27 Oct 2026 04:10:33 +0000 Manifest this update: Tue 27 Oct 2026 04:05:33 +0000 Manifest next update: Wed 28 Oct 2026 07:48:33 +0000 Files and hashes: 1: 323830343a313334303a3a2f33322d3438203d3e20323633353234.roa (hash: dUeLoznzRyIC83MIcHHfdJV+cHR06wYV/UilJQkHWXY=) 2: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl (hash: bzLb40bfX6SAbgadrfDs3q7zLg2aLLZhI5+Z/C2sr3o=) 3: 3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa (hash: ZZSxO1ITmI166O5+psgOiMmV3lXEBAvqKox8NAFyIw0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 07:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8c:24:82:94:9e:ee:ce:e1:83:ac:8b:01:ae:69:ea:47:cf:ca:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0 Validity Not Before: Oct 27 04:05:33 2026 GMT Not After : Oct 28 07:48:33 2026 GMT Subject: CN=A2141C9407FA558401D4B4D69ED0A3EA6658837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:c8:23:33:90:60:56:22:46:a9:45:94:f3: b8:df:45:51:9f:53:e5:46:82:ed:62:83:f5:15:ae: f7:96:99:64:39:4e:d0:db:b3:e1:e4:66:90:d5:2c: a2:23:7c:08:85:ba:3e:cc:33:a6:ff:55:b9:17:5b: 54:b9:76:40:25:eb:bd:ee:36:45:c8:9c:46:25:ae: cc:b4:17:ce:78:f1:a3:1b:45:ac:53:ad:06:3b:cd: 58:89:95:29:d6:56:9f:3f:4e:7c:83:2e:30:55:c9: c7:6f:45:72:11:db:28:7f:e3:7f:79:86:bb:b5:fc: 4c:a7:c4:4f:df:77:62:1d:e8:a1:f8:89:e4:73:d3: f8:68:c6:39:f5:dc:4d:88:2d:3a:e0:b9:9d:68:49: fc:9d:e8:95:82:b2:e7:c5:5e:7f:f9:44:8d:f2:76: f6:37:5b:70:1d:ac:dc:46:7b:7c:6d:6e:80:ed:43: ff:5e:ed:24:6c:b0:3c:8b:82:0e:67:a0:df:32:84: 92:9e:fe:7e:8f:4b:1e:24:a2:20:f5:67:49:ec:60: 9c:8d:b8:f6:ea:69:d8:39:16:1f:0a:67:9b:f9:02: 86:09:01:39:58:89:dc:5b:f9:4f:bc:1e:f1:32:b0: 83:8d:aa:5b:fb:78:b8:64:15:59:cd:1c:af:d7:e3: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:1C:94:07:FA:55:84:01:D4:B4:D6:9E:D0:A3:EA:66:58:83:7C X509v3 Authority Key Identifier: keyid:9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:7c:c0:8f:88:ed:87:b2:72:0f:f3:21:7d:f8:fd:26:9b: 10:f1:03:00:98:35:7a:c0:bf:1b:db:a7:39:62:79:76:5e:e0: 7b:f7:04:40:29:cb:6f:4c:e5:15:57:a3:ea:5c:41:11:8a:33: d3:9a:9d:d4:a6:a5:bd:36:38:77:1b:a6:0d:7b:4b:ee:72:23: ca:b1:0a:63:d4:f3:76:8f:fe:b7:ff:8a:e5:10:03:4f:75:96: ec:da:05:7a:6f:cd:04:cf:26:40:f1:b4:67:4d:1a:d0:4c:05: b8:65:1e:4a:f0:91:98:2c:fe:3e:67:b8:a0:1b:cd:3e:96:e1: 8b:41:2b:78:bb:2a:ed:76:d1:94:21:49:e3:af:13:bf:1b:55: 52:28:0f:f3:9f:b8:91:45:1d:88:60:e6:2b:4f:7d:04:49:76: 3d:63:2a:46:29:ca:79:26:fb:ee:c3:2f:f6:01:d6:ed:ec:6d: c3:fa:67:9f:32:fe:72:68:c1:d2:1d:2c:99:0e:25:78:92:ab: a7:70:74:10:43:a4:b4:ba:83:b4:c1:2b:b2:9e:b8:23:49:7c: 02:02:09:97:51:12:12:b6:4c:7c:7b:8f:ac:98:df:ba:ae:9d: 9a:42:cd:9a:d9:96:fd:6d:5e:bf:c6:58:9c:7e:98:48:bd:62: 30:1c:b3:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKIwkgpSe7s7hg6yLAa5p6kfPyqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU0REU2QUNFMERCQUNBODFDNTM2NzQyMUY3MTk4OTAx OTQyOEZGMDAeFw0yNjEwMjcwNDA1MzNaFw0yNjEwMjgwNzQ4MzNaMDMxMTAvBgNV BAMTKEEyMTQxQzk0MDdGQTU1ODQwMUQ0QjRENjlFRDBBM0VBNjY1ODgzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vcgjM5BgViJGqUWU87jfRVGf U+VGgu1ig/UVrveWmWQ5TtDbs+HkZpDVLKIjfAiFuj7MM6b/VbkXW1S5dkAl673u NkXInEYlrsy0F8548aMbRaxTrQY7zViJlSnWVp8/TnyDLjBVycdvRXIR2yh/4395 hru1/EynxE/fd2Id6KH4ieRz0/hoxjn13E2ILTrguZ1oSfyd6JWCsufFXn/5RI3y dvY3W3AdrNxGe3xtboDtQ/9e7SRssDyLgg5noN8yhJKe/n6PSx4koiD1Z0nsYJyN uPbqadg5Fh8KZ5v5AoYJATlYidxb+U+8HvEysIONqlv7eLhkFVnNHK/X48apAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUohQclAf6VYQB1LTWntCj6mZYg3wwHwYDVR0j BBgwFoAUnk3mrODbrKgcU2dCH3GYkBlCj/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy TGkvMS85RTRERTZBQ0UwREJBQ0E4MUM1MzY3NDIxRjcxOTg5MDE5NDI4RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFNERFNkFDRTBEQkFDQTgx QzUzNjc0MjFGNzE5ODkwMTk0MjhGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5TkoyTGkvMS85 RTRERTZBQ0UwREJBQ0E4MUM1MzY3NDIxRjcxOTg5MDE5NDI4RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAduV8wI+I7Yeycg/zIX34/SabEPEDAJg1esC/G9unOWJ5dl7ge/cEQCnLb0zl FVej6lxBEYoz05qd1KalvTY4dxumDXtL7nIjyrEKY9Tzdo/+t/+K5RADT3WW7NoF em/NBM8mQPG0Z00a0EwFuGUeSvCRmCz+Pme4oBvNPpbhi0EreLsq7XbRlCFJ468T vxtVUigP85+4kUUdiGDmK099BEl2PWMqRinKeSb77sMv9gHW7extw/pnnzL+cmjB 0h0smQ4leJKrp3B0EEOktLqDtMErsp64I0l8AgIJl1ESErZMfHuPrJjfuq6dmkLN mtmW/W1ev8ZYnH6YSL1iMByzsA== -----END CERTIFICATE-----Generated at Tue Oct 27 17:07:08 2026 by rpki-client