
Error: rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json)
Hash identifier: sO4ESl0NkK0lV07fMxBXRa2IO951nFWqnKwoBF72fho=
Subject key identifier: AD:7B:9B:8F:8C:03:6F:CA:E6:D0:2D:C9:2B:30:67:78:9B:23:2B:D7
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial: 4AE1AEA2EFBF4DF09833C9894D636E1DA010EE1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
Manifest number: 04CF
Signing time: Sun 18 Oct 2026 00:20:02 +0000
Manifest this update: Sun 18 Oct 2026 00:15:02 +0000
Manifest next update: Mon 19 Oct 2026 03:50:02 +0000
Files and hashes: 1: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 10cNS1rFXtwonEdWCsG96QN75TUPd3NohC99CLr6co4=)
2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: LK1taRUx/UCJJZC62nPscZQGkM841eFkXNulr6j2JgU=)
3: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: 6QajgBafqVgtgzsUpMYBPHbT8Yx62E6qE3HZwZj2TiE=)
4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: jY+tbsAGTzcn5N+jHiOsaWS3WBkBKKylljU7SDevL8I=)
5: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: CuQjMpNkrIW1WzhX9cPRo+EN9gEwjyWh3xpLCuMgTVU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 03:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e1:ae:a2:ef:bf:4d:f0:98:33:c9:89:4d:63:6e:1d:a0:10:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Validity
Not Before: Oct 18 00:15:02 2026 GMT
Not After : Oct 19 03:50:02 2026 GMT
Subject: CN=AD7B9B8F8C036FCAE6D02DC92B3067789B232BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:82:98:45:8a:97:2b:1c:ca:59:d9:2f:a3:
a7:c2:69:a6:30:f7:b0:99:aa:25:b7:2a:74:73:23:
06:c5:7b:d4:24:2c:7e:80:56:7b:42:04:92:bd:1c:
ef:67:30:cb:9e:86:b6:ed:68:0a:81:1c:78:b1:a9:
ea:0f:31:64:9e:9c:2e:89:52:f3:59:3b:27:a7:da:
ad:f9:8a:35:5f:17:dc:70:5a:12:38:2f:a8:fc:be:
b8:37:28:79:85:35:0e:42:79:38:c0:ce:0e:f0:44:
c7:aa:4a:ba:82:88:72:f0:20:21:fb:98:e9:7d:db:
75:4b:76:44:b0:dd:9f:85:5a:52:fb:e0:aa:d9:0e:
14:f3:11:4d:c9:51:4c:53:07:b2:9e:95:d6:97:a5:
86:8d:2b:03:2d:81:9a:76:3c:6a:36:b8:8f:bb:0b:
04:01:e0:84:5f:96:55:1a:d0:f2:d2:e7:44:f1:bb:
c1:55:5f:b2:5f:05:82:85:2d:3b:3f:27:4b:b7:12:
97:b9:8a:01:dc:26:ed:58:17:23:32:dc:45:ee:c7:
12:55:1f:47:c8:78:c1:59:67:55:08:4f:11:41:d6:
b3:81:5f:f1:dd:cb:d8:f0:2d:51:e9:92:ca:e7:a6:
9c:75:e5:45:25:e8:b1:2a:da:55:91:37:ee:83:6d:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7B:9B:8F:8C:03:6F:CA:E6:D0:2D:C9:2B:30:67:78:9B:23:2B:D7
X509v3 Authority Key Identifier:
keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:62:59:a0:70:bc:c4:3a:4c:07:3a:c9:f1:dd:08:a3:1e:
64:53:de:42:f7:20:2e:96:59:8c:f9:f3:3c:e9:1e:b2:f3:46:
42:18:35:d0:8b:44:e3:d3:2a:c0:51:80:6a:39:62:b0:97:80:
54:4c:66:55:68:72:0d:0d:ce:b9:e1:95:b5:0c:50:47:36:7d:
e8:e3:6e:2c:d9:8b:1d:f3:fe:30:3a:1d:fb:5c:3b:bc:da:71:
7e:c5:37:13:79:f1:19:f1:6f:8a:17:e6:7b:a0:bd:50:56:65:
02:4e:e9:4a:0b:77:0e:7d:61:12:eb:38:d9:20:06:d2:33:e7:
08:60:d3:5b:44:e9:d4:e9:09:f9:3e:8e:18:ff:08:cf:ef:c1:
4f:39:1c:a0:fa:d2:27:6b:d0:88:87:30:db:21:28:55:98:b4:
77:28:ac:ba:1a:c2:a8:43:eb:63:5f:e7:32:01:f8:c3:b3:e5:
19:cb:b0:2d:2c:9f:c6:a4:95:24:9a:c9:85:e9:0f:f7:5f:3f:
f3:fe:2a:7f:b1:79:4f:52:7a:ab:39:00:84:79:ad:16:ee:04:
f3:3a:73:c8:32:88:69:a1:d4:d1:6b:c1:01:cf:d6:d7:38:5a:
25:48:ee:97:75:26:e6:c1:d5:13:32:e2:56:ca:b8:95:14:71:
7b:c5:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:42:12 2026 by rpki-client