
Error: rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft (raw, json)
Hash identifier: y24kzy41HbK64gORPrz71PZvf8Sh3AEHssdX3LY7X6E=
Subject key identifier: 20:9E:12:B8:67:E9:F9:22:CF:67:C6:B6:73:FD:88:C3:C3:3E:CE:85
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 0619D92F1AD7AB11CB15A01EFD41D73F628A9DEC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
Manifest number: 03D8
Signing time: Tue 13 Oct 2026 18:45:32 +0000
Manifest this update: Tue 13 Oct 2026 18:40:32 +0000
Manifest next update: Wed 14 Oct 2026 20:05:32 +0000
Files and hashes: 1: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (hash: EKftNov2xkWY0hw68Pm1DGz9068vsDgwuQ0aP05E7X4=)
2: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (hash: U9HURwzfa2wNyJP938wy03r24OPQKdmrGaliTMRCjJA=)
3: 3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (hash: 0J2FyqIVWaNAXgu1IzZHcSmpenYq23iGByXwqmNaoRs=)
4: 3137392e39362e3137362e302f32312d3332203d3e20323033.roa (hash: IqaMZm0/ytBSKo0Z/HNKPC8JyAq91/JbOHZChfNs07g=)
5: 3137392e39362e3137362e302f32312d3332203d3e20323032.roa (hash: bIjkBcK7BA4Q3FiPmspwfXcxXj6ZbFurSi3b0/ksKU0=)
6: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (hash: 00PKsBk9VFXLGHuN46631LO5RdQZjuj+PXNdS05CZDc=)
7: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (hash: rKJXZnk2Vm0/VJ+uKRGRJnFeWYC/Fd8iFecxOodg/bs=)
8: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (hash: AKpku7Hv//FGkEL6gpuUMpFSOcFa7GsB7oiC/13pvXk=)
9: 3136382e3139352e3131322e302f32322d3332203d3e2033333536.roa (hash: fQp7FmGtmgusxlEJub1Rxn4k2ANzAf2TLEwsbx/v51w=)
10: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl (hash: zdpIFsUY+/2TrGAz+Q7heVIYcqmK4UB9USY/GoQr8hg=)
11: 323830343a6439303a3a2f33322d3334203d3e203532363339.roa (hash: W7HIC9Fkv+etQTXxD4VMRegv80coHuVVrxXsVAw3P3Q=)
12: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (hash: BV1blz4/VpmTLoN14nzkUFJp0b9wDMriWT8Rjdyw3Hk=)
13: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (hash: +EzznQxnyhDO/IEnAF7S6JqmOB0qExVp1TNw0b9W0uE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 20:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:19:d9:2f:1a:d7:ab:11:cb:15:a0:1e:fd:41:d7:3f:62:8a:9d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Oct 13 18:40:32 2026 GMT
Not After : Oct 14 20:05:32 2026 GMT
Subject: CN=209E12B867E9F922CF67C6B673FD88C3C33ECE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:4f:af:8b:5e:8c:db:33:91:90:16:cb:45:
4f:7c:d5:81:4f:3c:d9:4f:4e:5c:f9:73:d0:ca:68:
ff:39:42:79:21:a1:9f:a1:2b:68:6a:fa:37:84:43:
6d:c0:12:4e:47:78:e2:a4:e7:63:59:67:14:f3:b0:
01:52:e1:46:47:3e:41:8c:ef:ca:5d:b9:1a:e4:45:
e2:5c:3b:90:5f:a2:1a:7b:1f:71:7e:f9:4e:7d:6f:
db:62:e8:d1:06:04:f9:14:6b:91:8c:32:02:5d:3a:
95:b2:3a:ea:c7:17:70:77:53:da:b5:96:de:17:0f:
e4:b0:bc:9f:3a:18:38:f7:e3:97:fc:ee:17:47:78:
3b:7e:f9:c3:f1:b6:b3:e9:fb:86:69:f6:8e:54:9a:
2b:d3:ac:3c:45:aa:74:2f:cf:fd:26:07:7a:b0:11:
60:32:7b:ca:b1:40:ac:16:d8:ae:45:4f:c9:6a:88:
e2:c3:ea:c6:23:47:67:cb:86:e0:ef:26:67:fa:ca:
a9:8b:72:12:84:7b:0a:e1:8f:9f:01:43:c3:7a:18:
cf:f9:76:2a:45:77:46:de:13:fb:8a:d6:e4:43:58:
32:3f:4c:89:01:43:f5:38:83:17:68:42:b4:2a:46:
79:75:03:78:36:34:70:9c:d3:7a:b3:d0:b9:fe:ab:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:12:B8:67:E9:F9:22:CF:67:C6:B6:73:FD:88:C3:C3:3E:CE:85
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:f7:ae:a3:4d:da:58:65:53:53:f5:60:99:76:b3:09:54:
ed:bd:92:56:32:29:24:0a:08:49:94:0a:97:3e:57:81:6a:9a:
34:b7:33:95:ae:bc:e9:58:e9:a7:4f:7b:92:38:4c:be:b3:94:
07:b6:1b:e3:30:60:b8:1a:66:27:60:92:ef:a8:79:25:50:f9:
1a:48:56:87:e1:f6:00:8c:62:e1:ba:1e:e7:ed:b0:21:98:66:
c8:5c:e4:5b:b4:95:c0:26:b3:10:1e:a3:8b:6a:64:27:71:4b:
d1:3b:b3:18:ae:80:c7:e1:1c:0a:3f:a1:a8:52:65:43:9a:a6:
b6:c9:c5:e6:78:65:da:fd:31:31:d8:f7:c7:3b:06:1b:fd:97:
d2:c2:ed:af:b5:26:55:4c:d5:cd:f5:92:02:7c:9c:fb:ab:c1:
91:98:97:df:3f:b4:5f:bc:b8:a2:b3:5f:85:55:68:c8:d5:3d:
70:78:9f:2a:63:81:c3:d1:c9:7d:9a:bf:0c:8b:9a:5f:d8:73:
c5:98:c1:ea:03:09:72:ae:ad:9e:e8:29:29:90:91:36:b4:14:
1d:b5:ff:20:fe:3f:0a:b3:62:a4:95:22:6f:31:90:74:8a:9a:
d5:f5:94:3c:97:cc:ee:38:a8:8f:8b:18:04:a0:cf:4d:1c:61:
f2:76:39:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBhnZLxrXqxHLFaAe/UHXP2KKnewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNjEwMTMxODQwMzJaFw0yNjEwMTQyMDA1MzJaMDMxMTAvBgNV
BAMTKDIwOUUxMkI4NjdFOUY5MjJDRjY3QzZCNjczRkQ4OEMzQzMzRUNFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaf0+vi16M2zORkBbLRU981YFP
PNlPTlz5c9DKaP85QnkhoZ+hK2hq+jeEQ23AEk5HeOKk52NZZxTzsAFS4UZHPkGM
78pduRrkReJcO5Bfohp7H3F++U59b9ti6NEGBPkUa5GMMgJdOpWyOurHF3B3U9q1
lt4XD+SwvJ86GDj345f87hdHeDt++cPxtrPp+4Zp9o5UmivTrDxFqnQvz/0mB3qw
EWAye8qxQKwW2K5FT8lqiOLD6sYjR2fLhuDvJmf6yqmLchKEewrhj58BQ8N6GM/5
dipFd0beE/uK1uRDWDI/TIkBQ/U4gxdoQrQqRnl1A3g2NHCc03qz0Ln+q6jVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIJ4SuGfp+SLPZ8a2c/2Iw8M+zoUwHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80
QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbmb3rqNN2lhlU1P1YJl2swlU7b2SVjIpJAoISZQKlz5XgWqaNLczla686Vjp
p097kjhMvrOUB7Yb4zBguBpmJ2CS76h5JVD5GkhWh+H2AIxi4boe5+2wIZhmyFzk
W7SVwCazEB6ji2pkJ3FL0TuzGK6Ax+EcCj+hqFJlQ5qmtsnF5nhl2v0xMdj3xzsG
G/2X0sLtr7UmVUzVzfWSAnyc+6vBkZiX3z+0X7y4orNfhVVoyNU9cHifKmOBw9HJ
fZq/DIuaX9hzxZjB6gMJcq6tnugpKZCRNrQUHbX/IP4/CrNipJUibzGQdIqa1fWU
PJfM7jioj4sYBKDPTRxh8nY5HQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:49:25 2026 by rpki-client