
Error: rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json)
Hash identifier: lu091qKspBe35+RYkp3Wmena2ZTmjmfB1uA7xhUORXo=
Subject key identifier: 76:94:7A:5A:C0:63:62:57:7C:54:6B:5F:2D:F3:85:57:3A:57:B9:D3
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial: 5C5A8D715F9BD587375CBC908A13E1A2FA75E37E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
Manifest number: 0313
Signing time: Thu 29 Oct 2026 20:24:48 +0000
Manifest this update: Thu 29 Oct 2026 20:19:48 +0000
Manifest next update: Fri 30 Oct 2026 23:58:48 +0000
Files and hashes: 1: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: nbNRhVM63fBTdd6Cl5Pe78PBKrOpp9rgv57ATKvxXgk=)
2: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: VVVi4pftfTQRHSeh+GVIe3lzcFAqtQS5U/66nny4V6o=)
3: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: gbhYVNXKSuPOuaIFim9rJRGdKDo6Ic0UEgtG6GdNZ4A=)
4: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: 009xoYY1a8xoxZvUG5f5D5bCMdyhk7siToL545WF7CM=)
5: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: HQGEFf/iQ0yBbvT+aAFFyqTmvKE6BiJ4Y71y4t8Lpf8=)
6: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: cHuOPq83fyZycA9OivEI8RZpnJFYB4O5O0akoWDT9S0=)
7: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: VQm1PlLGS2rO5W62H1D7LZFOUniS9xKOSKCC4xH98BU=)
8: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: B5BW7RlDI0chx3DVIb7z4wFQ1p5AsWaBX0cYjoMzI0A=)
9: 323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa (hash: wW4RYldRxvBl2t5UyXKuNoVQIJevVnsrNO7TCdwbsL0=)
10: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: esGtPK44gBANnB5a0wYp/J4uwApI1Er58yDxwaUIES0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 23:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5a:8d:71:5f:9b:d5:87:37:5c:bc:90:8a:13:e1:a2:fa:75:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Validity
Not Before: Oct 29 20:19:48 2026 GMT
Not After : Oct 30 23:58:48 2026 GMT
Subject: CN=76947A5AC06362577C546B5F2DF385573A57B9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:cf:ab:d4:0f:16:70:8d:8d:74:e4:d6:48:
30:7f:a5:ff:67:d0:52:c3:a0:c1:e8:a6:5c:ea:e8:
08:65:26:cb:ac:c3:0e:31:5b:29:cd:2c:cf:68:c2:
bb:19:fa:8f:09:a3:2c:55:2b:08:12:b8:51:6b:ce:
a2:81:14:90:9a:b3:61:1d:3c:79:3f:0e:55:7c:a4:
1e:72:44:ee:94:fe:dc:21:cb:af:b1:00:e6:d4:50:
de:a4:27:a4:5b:fa:65:6a:34:8d:33:b6:0b:4a:f1:
33:9f:0b:44:43:9f:44:4d:e8:b8:5b:be:b3:09:a2:
e4:56:33:68:a5:1e:bc:3b:bf:be:b5:1a:6c:a2:cd:
25:70:cc:9f:1f:34:03:68:85:97:02:49:4c:ab:e2:
50:78:25:5b:a0:98:b0:44:9e:b7:49:5b:f1:d4:eb:
2f:1a:e9:21:4e:f1:4e:02:b4:f8:8b:32:50:dd:dc:
df:ef:b0:62:76:73:c8:ec:40:a6:4c:2b:ee:08:ac:
de:e1:d0:cc:cb:2a:9e:74:ab:a1:ab:82:b8:f9:52:
01:66:2a:da:ee:cc:cf:3a:8d:61:5b:b6:d6:ea:6f:
55:d1:2b:2a:4d:33:8c:ac:40:e9:11:75:53:13:40:
fd:40:b2:92:7a:43:da:20:11:c9:63:5f:b3:c5:f0:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:7A:5A:C0:63:62:57:7C:54:6B:5F:2D:F3:85:57:3A:57:B9:D3
X509v3 Authority Key Identifier:
keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:93:49:e5:09:21:fb:55:fd:40:66:cd:88:fa:10:77:f2:
2a:3a:0a:ec:35:e9:2f:70:f5:bf:05:76:e2:2e:03:fa:49:58:
29:ac:ce:4e:3a:ed:ef:63:e9:d2:8b:83:64:96:e7:2d:be:3d:
46:53:57:65:9a:28:8a:d9:0a:76:8d:c8:76:eb:16:8c:4f:69:
8d:76:57:86:63:5a:61:60:8a:5c:ad:80:71:7e:56:8d:1e:51:
04:59:e2:c5:6c:fd:04:3a:b0:97:42:8b:5a:11:10:90:55:b9:
b7:20:31:8a:5e:c2:6d:44:5e:98:1c:ca:bf:d7:ad:8a:5b:9e:
af:a5:d9:aa:b5:33:9b:ae:00:f3:6a:f5:9a:df:d4:33:5a:a0:
df:0e:56:95:6a:e1:30:11:f1:ec:6d:ac:19:28:97:ce:1c:df:
42:00:05:cd:9f:36:6a:a2:70:e9:48:f6:ed:14:d0:8a:da:ed:
0e:cd:04:f2:cd:8f:5e:f7:17:22:00:e4:c5:af:5c:f2:f3:39:
45:c7:b5:d7:98:d4:40:1f:82:18:a9:3c:43:5f:bc:25:40:d2:
fa:ea:02:57:62:95:a0:31:8d:d2:dd:fd:2f:71:71:09:1e:d5:
b0:c8:81:ce:da:fb:08:68:a0:f8:8f:6f:43:06:47:84:68:03:
19:51:d0:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXFqNcV+b1Yc3XLyQihPhovp1434wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE
MjVGOEQ4ODAeFw0yNjEwMjkyMDE5NDhaFw0yNjEwMzAyMzU4NDhaMDMxMTAvBgNV
BAMTKDc2OTQ3QTVBQzA2MzYyNTc3QzU0NkI1RjJERjM4NTU3M0E1N0I5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZ8+r1A8WcI2NdOTWSDB/pf9n
0FLDoMHoplzq6AhlJsusww4xWynNLM9owrsZ+o8JoyxVKwgSuFFrzqKBFJCas2Ed
PHk/DlV8pB5yRO6U/twhy6+xAObUUN6kJ6Rb+mVqNI0ztgtK8TOfC0RDn0RN6Lhb
vrMJouRWM2ilHrw7v761GmyizSVwzJ8fNANohZcCSUyr4lB4JVugmLBEnrdJW/HU
6y8a6SFO8U4CtPiLMlDd3N/vsGJ2c8jsQKZMK+4IrN7h0MzLKp50q6Grgrj5UgFm
KtruzM86jWFbttbqb1XRKypNM4ysQOkRdVMTQP1AspJ6Q9ogEcljX7PF8AlBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdpR6WsBjYld8VGtfLfOFVzpXudMwHwYDVR0j
BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo
ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE
M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpoZUQvMC84
N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU8OTSeUJIftV/UBmzYj6EHfyKjoK7DXpL3D1vwV24i4D+klYKazOTjrt72Pp
0ouDZJbnLb49RlNXZZooitkKdo3IdusWjE9pjXZXhmNaYWCKXK2AcX5WjR5RBFni
xWz9BDqwl0KLWhEQkFW5tyAxil7CbURemBzKv9etiluer6XZqrUzm64A82r1mt/U
M1qg3w5WlWrhMBHx7G2sGSiXzhzfQgAFzZ82aqJw6Uj27RTQitrtDs0E8s2PXvcX
IgDkxa9c8vM5Rce115jUQB+CGKk8Q1+8JUDS+uoCV2KVoDGN0t39L3FxCR7VsMiB
ztr7CGig+I9vQwZHhGgDGVHQqQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:41:22 2026 by rpki-client