Error: rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft File: 0AA75444C92119507239668F559768FBF95AE208.mft (raw, json) Hash identifier: zekrgbTHVv/+CQyrMLhsPupRzyotj35MkeYaaIG0MRA= Subject key identifier: 1F:3B:74:A5:54:BA:DC:F0:10:69:A7:C5:5B:6F:DC:A2:A5:0F:35:98 Authority key identifier: 0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08 Certificate issuer: /CN=0AA75444C92119507239668F559768FBF95AE208 Certificate serial: 2A5B0894F5E6A36A91CB710E929239BE66BE718A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer Subject info access: rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft Manifest number: 01A2 Signing time: Tue 03 Nov 2026 06:06:35 +0000 Manifest this update: Tue 03 Nov 2026 06:01:35 +0000 Manifest next update: Wed 04 Nov 2026 09:22:35 +0000 Files and hashes: 1: 0AA75444C92119507239668F559768FBF95AE208.crl (hash: 5fkRujvkrTXQgiZs4NGnMBub8n9N6GlZaPTkyiGW+Nk=) 2: 323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (hash: GG2ekqsPEzHUv1xeSak7VDUr/9ftvbnKdFDUaWHbG9w=) 3: 3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa (hash: aStRY72YhDwxpWcM3Y70FSS4L9NNhnx2xbpwyjzHwco=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 09:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5b:08:94:f5:e6:a3:6a:91:cb:71:0e:92:92:39:be:66:be:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AA75444C92119507239668F559768FBF95AE208 Validity Not Before: Nov 3 06:01:35 2026 GMT Not After : Nov 4 09:22:35 2026 GMT Subject: CN=1F3B74A554BADCF01069A7C55B6FDCA2A50F3598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:77:0b:fa:4f:ef:2a:a8:27:f9:a0:23:f3: f1:05:ee:38:4b:5a:8f:38:bf:1d:a6:4a:55:9f:d5: a1:e9:b1:54:4f:e2:d8:5b:4a:d4:01:25:a4:2c:bd: bd:0f:d2:58:0a:f2:84:a9:7f:fa:fb:fa:46:a7:cc: 61:21:62:de:b4:35:a4:99:77:c8:03:23:24:87:22: e8:69:b2:4b:b8:3c:11:a2:24:42:c6:bc:15:9d:f7: 32:f6:61:30:b6:a7:58:0f:f9:4b:28:54:14:b3:2f: b3:d8:0d:20:e5:f3:25:50:70:53:77:ee:03:69:8a: ec:17:e2:41:9a:08:4d:ef:de:c1:3e:61:55:72:2c: 00:21:f6:9f:33:a7:aa:4f:eb:16:48:43:a0:88:99: 33:42:9a:df:c4:18:36:20:30:d6:7c:5d:d5:44:a1: fa:c3:7d:dc:29:91:2e:d4:05:be:2c:f5:4f:b1:23: 21:4f:94:cd:62:fa:00:10:99:56:3a:53:ca:59:db: 6e:1b:e4:1a:c2:6b:1f:0a:00:e6:b4:71:f7:b4:8d: 52:d2:a3:de:0f:ed:1e:8b:0e:e2:cd:c9:6d:1f:62: eb:c0:48:3a:c8:66:47:98:80:59:07:63:f7:81:d4: b1:2c:52:0c:f1:a5:a5:76:17:80:91:0f:dc:5c:7f: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3B:74:A5:54:BA:DC:F0:10:69:A7:C5:5B:6F:DC:A2:A5:0F:35:98 X509v3 Authority Key Identifier: keyid:0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:71:38:cf:5b:6c:1c:db:7e:44:2a:48:5d:7d:73:41:48:c7: 33:2d:7c:14:82:94:83:f9:5f:42:19:10:b3:ce:45:26:32:a7: 5a:6c:a3:26:af:bd:03:6e:af:c6:d8:2e:ab:e4:48:56:5c:b5: a8:51:b1:32:60:ed:67:18:7a:86:14:86:e7:e3:61:23:7e:f5: 50:07:c7:ff:fd:af:f4:a6:16:05:6c:11:9b:0c:05:bb:94:28: db:40:d2:bd:df:6d:fc:a3:87:48:f1:f9:f4:4c:af:4d:2a:4a: 9e:3a:89:50:02:85:ec:60:86:9d:6d:62:60:2e:fd:4d:b5:cb: cb:4d:2c:a9:ba:b0:5e:0b:d9:4a:40:fa:f0:76:b7:b4:b1:02: 45:af:f0:a0:27:c0:43:cf:cf:64:22:8d:09:5f:85:2e:fb:98: 87:8e:c8:e2:bb:23:41:b3:5f:3d:7c:a4:7b:45:0f:a9:e7:02: 1e:88:b0:03:1c:7b:6a:40:93:32:f7:74:b8:e9:06:91:b7:af: 7b:78:67:c9:a6:f7:bb:62:bb:5a:d0:fa:d9:0f:da:82:7b:4c: f9:55:a1:d3:8b:ae:16:cc:31:55:c9:5b:bf:d1:0d:af:b9:f7: a8:67:9b:34:52:60:17:5a:bd:09:dd:78:99:54:75:44:eb:59: d4:ac:4e:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKlsIlPXmo2qRy3EOkpI5vma+cYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFBNzU0NDRDOTIxMTk1MDcyMzk2NjhGNTU5NzY4RkJG OTVBRTIwODAeFw0yNjExMDMwNjAxMzVaFw0yNjExMDQwOTIyMzVaMDMxMTAvBgNV BAMTKDFGM0I3NEE1NTRCQURDRjAxMDY5QTdDNTVCNkZEQ0EyQTUwRjM1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJ3cL+k/vKqgn+aAj8/EF7jhL Wo84vx2mSlWf1aHpsVRP4thbStQBJaQsvb0P0lgK8oSpf/r7+kanzGEhYt60NaSZ d8gDIySHIuhpsku4PBGiJELGvBWd9zL2YTC2p1gP+UsoVBSzL7PYDSDl8yVQcFN3 7gNpiuwX4kGaCE3v3sE+YVVyLAAh9p8zp6pP6xZIQ6CImTNCmt/EGDYgMNZ8XdVE ofrDfdwpkS7UBb4s9U+xIyFPlM1i+gAQmVY6U8pZ224b5BrCax8KAOa0cfe0jVLS o94P7R6LDuLNyW0fYuvASDrIZkeYgFkHY/eB1LEsUgzxpaV2F4CRD9xcf+YVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHzt0pVS63PAQaafFW2/coqUPNZgwHwYDVR0j BBgwFoAUCqdURMkhGVByOWaPVZdo+/la4ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZK RkMvMC8wQUE3NTQ0NEM5MjExOTUwNzIzOTY2OEY1NTk3NjhGQkY5NUFFMjA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQTc1NDQ0QzkyMTE5NTA3 MjM5NjY4RjU1OTc2OEZCRjk1QUUyMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZKRkMvMC8w QUE3NTQ0NEM5MjExOTUwNzIzOTY2OEY1NTk3NjhGQkY5NUFFMjA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZnE4z1tsHNt+RCpIXX1zQUjHMy18FIKUg/lfQhkQs85FJjKnWmyjJq+9A26v xtguq+RIVly1qFGxMmDtZxh6hhSG5+NhI371UAfH//2v9KYWBWwRmwwFu5Qo20DS vd9t/KOHSPH59EyvTSpKnjqJUAKF7GCGnW1iYC79TbXLy00sqbqwXgvZSkD68Ha3 tLECRa/woCfAQ8/PZCKNCV+FLvuYh47I4rsjQbNfPXyke0UPqecCHoiwAxx7akCT Mvd0uOkGkbeve3hnyab3u2K7WtD62Q/agntM+VWh04uuFswxVclbv9ENr7n3qGeb NFJgF1q9Cd14mVR1ROtZ1KxOCA== -----END CERTIFICATE-----Generated at Wed Nov 4 00:38:15 2026 by rpki-client