
Error: rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
File: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft (raw, json)
Hash identifier: t5wOLw5fbvK5ss202uHsui62cD0AKJEqrdLtOXvtX+0=
Subject key identifier: 7C:F5:7E:F0:90:A5:9A:6A:94:85:CD:A9:FC:B5:D9:00:61:1F:8C:D9
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Certificate issuer: /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial: 52BC1A931FE198CEFC8252484BE7073F49154BE2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
Manifest number: 04D0
Signing time: Sun 11 Oct 2026 08:07:31 +0000
Manifest this update: Sun 11 Oct 2026 08:02:31 +0000
Manifest next update: Mon 12 Oct 2026 11:57:31 +0000
Files and hashes: 1: 3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (hash: 8OS7uuXS1Ib6w7NymYc+smoWk9lCVl91GePs/EyW/6c=)
2: 323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (hash: JPj5bp3GSQ1Pdx4dEb6Z9JcF5JJVL7Z/lAfwZTtp78Q=)
3: 323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (hash: q0wR+Q2fRmj5Ry2tUqDaoeAUS0DsDC6Hanqo2HvQLOQ=)
4: 323830343a373462633a383030303a3a2f33332d3333203d3e20323731303030.roa (hash: KPh1DWjvfTKxyjDd66vw83fekeEGbI16UMHM6YxwImk=)
5: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl (hash: TPE4dW0di1YPd0EnEjucVYa+wz2nlSZIRWUO0b7SK8M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 09:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bc:1a:93:1f:e1:98:ce:fc:82:52:48:4b:e7:07:3f:49:15:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Validity
Not Before: Oct 11 08:02:31 2026 GMT
Not After : Oct 12 11:57:31 2026 GMT
Subject: CN=7CF57EF090A59A6A9485CDA9FCB5D900611F8CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:38:d7:02:0c:d6:d7:40:81:08:ad:39:93:
b4:82:50:ac:14:22:23:cd:3f:1c:e1:fe:b7:f4:0c:
81:41:6b:f2:8e:ef:40:26:6d:72:6f:1c:34:40:ac:
de:2e:5d:56:c4:cd:c6:18:0d:d3:ee:84:ae:3a:80:
82:2d:88:f6:02:5d:3f:3c:2a:45:1b:51:f7:c6:ae:
6a:e5:b4:e1:00:28:c9:e1:45:ed:46:5f:38:c1:ed:
22:0a:2b:8e:bb:0f:d1:ec:9a:d6:c5:88:dc:6d:69:
4e:81:81:c9:b0:1b:89:cf:ff:4e:61:03:9e:f8:23:
5d:91:bb:20:42:c9:17:3a:aa:6b:57:aa:a8:91:7b:
06:14:9d:7a:13:8b:f5:0c:30:f8:a7:c6:96:e6:73:
29:4e:9e:1b:e5:84:f7:6f:a5:46:17:1a:d1:1a:ae:
9d:78:4b:3a:eb:16:93:3e:08:7a:e6:89:9b:fe:d9:
ce:a0:b2:86:bb:a0:26:84:49:38:bf:c3:54:f2:25:
c5:a8:23:7b:99:8e:6c:99:e3:c3:27:de:1d:3d:5d:
5a:cb:b3:c8:23:25:01:29:c0:ef:d9:ec:35:a4:d1:
81:af:cf:88:3a:77:cc:8a:a8:c3:0f:d9:3f:34:7b:
70:aa:88:9d:1b:76:6e:60:04:61:5f:9b:ef:27:32:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:7E:F0:90:A5:9A:6A:94:85:CD:A9:FC:B5:D9:00:61:1F:8C:D9
X509v3 Authority Key Identifier:
keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:11:eb:70:cc:4c:5d:c7:b1:39:48:d4:b8:4d:f1:cc:39:
a2:a3:00:14:c9:ac:19:3c:01:ad:18:3a:8f:e6:26:f1:b8:0e:
66:ef:55:0e:7a:96:10:2a:3b:78:b2:9e:5d:eb:e4:ec:29:5b:
81:75:01:ec:0f:ec:3b:a3:17:e6:b4:f7:7b:c9:4a:49:69:15:
2c:94:1a:39:e1:b6:8d:5f:01:02:97:c4:64:cb:1d:e6:4e:7c:
a0:52:f9:16:f1:8e:9b:b4:12:20:e3:9f:85:d0:db:4f:0a:41:
b4:e6:22:09:d7:46:4b:1b:5c:56:cf:58:4d:69:aa:3f:be:15:
6b:dd:89:09:06:a5:21:f4:6f:66:11:2c:b6:59:e6:20:c2:cf:
44:2b:8c:b9:c1:ca:c0:69:58:dc:b0:3c:7e:11:32:0c:fd:92:
ce:c5:88:6c:0d:b1:99:59:a8:af:fb:20:00:99:f1:ed:7f:7e:
d8:d0:81:3e:16:e7:a4:ef:18:9d:03:04:56:4c:1a:da:a3:81:
c1:54:a9:f4:06:14:5c:10:74:95:41:66:fd:bc:64:77:88:11:
d9:53:7f:a9:05:1c:c1:2a:38:07:3b:82:75:05:eb:da:8a:a6:
0e:6f:26:d9:52:1d:7b:4d:f6:58:67:29:d6:f0:4c:75:61:d5:
4d:12:1b:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUrwakx/hmM78glJIS+cHP0kVS+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4REE0NUMzOUMwREY2RkI3NEIwNkYwRjgwOThBQzY5
MTY4NjREQjAeFw0yNjEwMTEwODAyMzFaFw0yNjEwMTIxMTU3MzFaMDMxMTAvBgNV
BAMTKDdDRjU3RUYwOTBBNTlBNkE5NDg1Q0RBOUZDQjVEOTAwNjExRjhDRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMTjXAgzW10CBCK05k7SCUKwU
IiPNPxzh/rf0DIFBa/KO70AmbXJvHDRArN4uXVbEzcYYDdPuhK46gIItiPYCXT88
KkUbUffGrmrltOEAKMnhRe1GXzjB7SIKK467D9HsmtbFiNxtaU6BgcmwG4nP/05h
A574I12RuyBCyRc6qmtXqqiRewYUnXoTi/UMMPinxpbmcylOnhvlhPdvpUYXGtEa
rp14SzrrFpM+CHrmiZv+2c6gsoa7oCaESTi/w1TyJcWoI3uZjmyZ48Mn3h09XVrL
s8gjJQEpwO/Z7DWk0YGvz4g6d8yKqMMP2T80e3CqiJ0bdm5gBGFfm+8nMqLxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfPV+8JClmmqUhc2p/LXZAGEfjNkwHwYDVR0j
BBgwFoAUG42kXDnA32+3Swbw+AmKxpFoZNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1
WWcvMS8xQjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCOERBNDVDMzlDMERGNkZC
NzRCMDZGMEY4MDk4QUM2OTE2ODY0REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1WWcvMS8x
QjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKNIR63DMTF3HsTlI1LhN8cw5oqMAFMmsGTwBrRg6j+Ym8bgOZu9VDnqWECo7
eLKeXevk7ClbgXUB7A/sO6MX5rT3e8lKSWkVLJQaOeG2jV8BApfEZMsd5k58oFL5
FvGOm7QSIOOfhdDbTwpBtOYiCddGSxtcVs9YTWmqP74Va92JCQalIfRvZhEstlnm
IMLPRCuMucHKwGlY3LA8fhEyDP2SzsWIbA2xmVmor/sgAJnx7X9+2NCBPhbnpO8Y
nQMEVkwa2qOBwVSp9AYUXBB0lUFm/bxkd4gR2VN/qQUcwSo4BzuCdQXr2oqmDm8m
2VIde032WGcp1vBMdWHVTRIbGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:07:36 2026 by rpki-client