Error: rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft File: 35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft (raw, json) Hash identifier: krNIDmx8M34ZsOXFroI2MZ/x1XdMpdlnHCnDbeCD/Ts= Subject key identifier: 62:48:1A:ED:28:B8:5F:39:E2:C0:FE:E6:F7:A9:76:17:54:14:AA:1B Authority key identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 Certificate issuer: /CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2 Certificate serial: 4F9F2C0785150173B14630E12A6849413B00D538 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft Manifest number: 04DD Signing time: Mon 02 Nov 2026 13:09:22 +0000 Manifest this update: Mon 02 Nov 2026 13:04:22 +0000 Manifest next update: Tue 03 Nov 2026 13:54:22 +0000 Files and hashes: 1: 323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa (hash: j8cojjS2jKqtjLYigSxDCb3zq1ye+FatYxlELgusA18=) 2: 35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl (hash: /fN4SuB3L5C0tB80plKbxgG7wkp7413mv9IRCzr+BnI=) 3: 3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa (hash: LjAnlFo9PWgLw7rYW+kjgv66/hd6nOlNBnX2PyZnakg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 13:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9f:2c:07:85:15:01:73:b1:46:30:e1:2a:68:49:41:3b:00:d5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2 Validity Not Before: Nov 2 13:04:22 2026 GMT Not After : Nov 3 13:54:22 2026 GMT Subject: CN=62481AED28B85F39E2C0FEE6F7A976175414AA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:6b:83:20:68:b0:b8:03:e7:7a:3b:8f:cf: 35:55:31:9a:62:32:da:e8:92:73:6c:0c:03:76:6a: c3:6d:12:89:9c:d1:20:9f:57:1a:d5:b5:90:b5:39: 6d:fc:27:e7:bc:2a:28:03:55:13:ee:33:c4:3a:02: bf:7c:4a:b3:2e:08:d7:6d:d4:54:4a:57:ec:21:b3: 1c:59:b7:ad:54:9a:e1:59:f0:b0:ff:2c:7b:ed:40: 0a:31:40:f4:8f:ee:40:90:d5:68:17:98:5e:ad:86: bc:6d:a5:a2:b8:86:27:74:17:22:ac:d5:f2:75:f6: 88:c4:16:14:be:ef:3d:0a:e9:b2:f2:ae:d0:ac:f6: 97:12:de:62:b0:ec:90:cb:45:c8:19:40:9f:e5:8d: b3:6a:de:32:08:93:28:d0:a3:32:f9:68:7f:0c:eb: e2:4e:55:b9:83:a6:5a:25:33:f5:aa:21:05:b7:83: a8:91:7b:cb:79:1c:dd:a6:25:29:a0:f2:cf:99:95: 09:b5:bb:77:20:5b:d2:87:02:6a:bb:73:f2:f4:31: f1:34:b3:72:c6:b8:f7:bf:64:f8:7c:6e:c2:b8:8a: fc:8b:ec:21:e8:0e:40:85:70:38:40:46:6b:34:2a: f7:1a:89:c7:3e:5e:3d:32:b4:f2:d1:7b:8c:84:f1: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:48:1A:ED:28:B8:5F:39:E2:C0:FE:E6:F7:A9:76:17:54:14:AA:1B X509v3 Authority Key Identifier: keyid:35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:32:57:49:a2:23:8a:60:ab:3d:22:1b:09:80:87:7a:ea: d8:f1:7b:96:e3:6e:ab:ef:61:e4:da:d6:ab:47:5d:2d:6d:ae: 71:bc:c6:c5:b0:0d:07:a1:55:aa:be:f3:37:df:79:e6:61:65: 4d:aa:80:92:c8:3b:7b:2d:f0:a2:30:b0:6f:8f:d9:d5:a3:8d: 6a:4e:15:33:bf:db:c8:e3:02:cc:18:fe:b0:b9:a9:5e:74:b6: 65:65:94:61:d5:bd:e4:f9:24:fe:6d:d1:2f:20:c8:fe:af:fd: c8:ba:ce:36:6f:98:97:67:be:4f:95:91:cb:ff:19:22:14:6b: 40:77:c8:11:ff:7b:f6:d5:8b:b3:1d:75:d0:53:7b:31:26:7c: 77:00:f3:9a:e0:5f:52:19:0c:01:8e:e4:38:d7:5a:bc:ca:1c: ce:c1:76:50:7c:cc:a3:f8:bb:7c:b9:cd:61:d7:3d:98:11:98: 05:53:6e:2d:25:3b:b8:d0:a8:f1:26:ea:e5:7d:d4:52:67:fd: f4:bc:8e:93:54:45:88:2f:bc:02:84:84:2f:c9:b6:01:a0:05: 21:62:62:0b:45:eb:1f:c7:ea:30:ab:ba:e0:57:f3:17:02:84: 47:93:22:b3:9d:38:1b:f5:0b:7a:2b:f3:df:99:49:f8:1c:e4: fa:a2:36:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT58sB4UVAXOxRjDhKmhJQTsA1TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVGN0I2QTAzQ0I3RDIxRDA3MDk0QkQ0NDFEMzA5NjA5 MkNCOTNCMjAeFw0yNjExMDIxMzA0MjJaFw0yNjExMDMxMzU0MjJaMDMxMTAvBgNV BAMTKDYyNDgxQUVEMjhCODVGMzlFMkMwRkVFNkY3QTk3NjE3NTQxNEFBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDon2uDIGiwuAPnejuPzzVVMZpi MtroknNsDAN2asNtEomc0SCfVxrVtZC1OW38J+e8KigDVRPuM8Q6Ar98SrMuCNdt 1FRKV+whsxxZt61UmuFZ8LD/LHvtQAoxQPSP7kCQ1WgXmF6thrxtpaK4hid0FyKs 1fJ19ojEFhS+7z0K6bLyrtCs9pcS3mKw7JDLRcgZQJ/ljbNq3jIIkyjQozL5aH8M 6+JOVbmDplolM/WqIQW3g6iRe8t5HN2mJSmg8s+ZlQm1u3cgW9KHAmq7c/L0MfE0 s3LGuPe/ZPh8bsK4ivyL7CHoDkCFcDhARms0Kvcaicc+Xj0ytPLRe4yE8bFPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYkga7Si4XzniwP7m96l2F1QUqhswHwYDVR0j BBgwFoAUNfe2oDy30h0HCUvUQdMJYJLLk7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1ROYkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVX Y1gvMS8zNUY3QjZBMDNDQjdEMjFEMDcwOTRCRDQ0MUQzMDk2MDkyQ0I5M0IyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RjdCNkEwM0NCN0QyMUQw NzA5NEJENDQxRDMwOTYwOTJDQjkzQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1ROYkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVXY1gvMS8z NUY3QjZBMDNDQjdEMjFEMDcwOTRCRDQ0MUQzMDk2MDkyQ0I5M0IyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAg4yV0miI4pgqz0iGwmAh3rq2PF7luNuq+9h5NrWq0ddLW2ucbzGxbANB6FV qr7zN9955mFlTaqAksg7ey3wojCwb4/Z1aONak4VM7/byOMCzBj+sLmpXnS2ZWWU YdW95Pkk/m3RLyDI/q/9yLrONm+Yl2e+T5WRy/8ZIhRrQHfIEf979tWLsx110FN7 MSZ8dwDzmuBfUhkMAY7kONdavMoczsF2UHzMo/i7fLnNYdc9mBGYBVNuLSU7uNCo 8Sbq5X3UUmf99LyOk1RFiC+8AoSEL8m2AaAFIWJiC0XrH8fqMKu64FfzFwKER5Mi s504G/ULeivz35lJ+Bzk+qI2kw== -----END CERTIFICATE-----Generated at Tue Nov 3 06:30:06 2026 by rpki-client