
Error: rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
File: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft (raw, json)
Hash identifier: za3PVeWFOPqeU9AJOlsHW5MQJbFjtbXMRrBm5DPWfHI=
Subject key identifier: 5B:16:A5:E0:EA:BC:DA:70:29:5C:A1:2C:28:BD:A3:5A:83:BF:BA:0A
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Certificate issuer: /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial: 1DB030255A4D4AC746C00A913A146FD9A81888C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
Manifest number: 056C
Signing time: Wed 14 Oct 2026 22:00:00 +0000
Manifest this update: Wed 14 Oct 2026 21:55:00 +0000
Manifest next update: Thu 15 Oct 2026 22:00:00 +0000
Files and hashes: 1: 3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (hash: ELHlETihcWqCAwPowAsxt8TR/y+vFXU009Qvsh/V2lU=)
2: 3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (hash: cnzbZ+PHLAjHkOXuZZHC2S/UIcVEQHtc3vmH6IRoJoo=)
3: 323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (hash: 7bXztEkkjutzCuDzMjrpjB7HukkkBAKAC2suGoA2guQ=)
4: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl (hash: 14HuXH2SC9+X8bkyA4kph9GvOM6S31btBJpYOCg5MgA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b0:30:25:5a:4d:4a:c7:46:c0:0a:91:3a:14:6f:d9:a8:18:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Validity
Not Before: Oct 14 21:55:00 2026 GMT
Not After : Oct 15 22:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:fa:e6:71:e0:b0:42:95:6f:ea:44:62:dc:
95:68:ef:6b:9a:da:cd:0e:b5:ad:01:d0:30:05:15:
64:6a:66:a8:b2:5a:d7:60:fd:37:79:0e:83:8a:eb:
2a:ef:49:5d:d5:99:48:c7:25:f8:eb:d7:95:ae:4d:
e7:ee:92:ad:9f:dc:85:ca:d0:67:af:97:00:a4:86:
b2:46:39:94:cd:2d:1f:f6:e2:51:f2:51:d2:0d:c7:
bf:c9:fa:b5:4d:e7:2f:08:c3:df:f2:70:39:aa:d4:
4d:29:f0:16:6a:b3:be:7a:d9:53:d8:a7:1e:69:49:
f0:06:22:2e:54:cd:59:d0:82:55:b2:3e:b2:a7:07:
fc:a4:a4:53:69:13:5b:65:7c:4c:7d:d2:9c:5f:6d:
49:eb:e1:d6:ab:91:77:fc:17:9f:f5:d0:f6:c2:94:
3b:78:7f:57:b6:7d:a6:45:8c:84:fc:1d:6e:c6:22:
84:cc:06:ba:a6:be:80:8a:63:d3:dc:07:d9:49:41:
8d:9e:c7:5b:e5:17:33:ee:f6:ee:1b:fd:68:22:79:
74:af:b3:d6:9f:9b:19:2d:60:f1:4c:03:68:ff:a4:
46:b5:7f:b8:19:6b:64:f3:f2:bc:31:45:0b:6f:02:
09:c3:6c:83:d5:96:78:7d:b6:ee:38:ac:0f:24:d5:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:A5:E0:EA:BC:DA:70:29:5C:A1:2C:28:BD:A3:5A:83:BF:BA:0A
X509v3 Authority Key Identifier:
keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:c2:a8:95:48:00:b9:9a:de:22:b2:71:6e:61:3e:4d:c2:
72:5c:86:82:40:d4:3a:2f:cf:35:da:84:16:7d:7f:88:b4:15:
63:21:d7:ed:db:3f:05:03:23:f3:31:e1:8e:e7:f4:37:46:7b:
75:5b:af:0f:e2:54:e6:33:ad:5e:31:33:9f:65:1f:7e:d7:20:
15:3d:82:ca:96:12:3f:f1:9c:30:7b:fa:fc:52:02:6c:67:0d:
aa:2f:10:1f:05:f9:88:6f:02:97:f3:f4:a5:5f:08:05:d5:c2:
f6:58:51:5c:b8:50:29:e2:ef:f6:94:7a:75:b4:22:eb:e2:c3:
5c:a0:d3:1b:5e:c9:99:67:42:39:1c:61:43:86:1e:7f:17:5c:
7d:88:fd:33:d2:ef:d9:0d:b7:b8:82:89:c6:9e:f9:f2:5a:ad:
90:4e:3c:d0:bd:36:3e:2a:48:15:67:ab:31:bb:f4:93:20:ce:
c5:ab:9b:2c:27:a1:ab:31:28:4d:85:c5:64:f3:8c:a3:d3:04:
cb:b6:f6:26:5e:f9:e9:ed:37:db:57:61:68:d5:77:f3:04:7f:
be:8b:80:71:7d:ff:ec:47:d8:e5:51:40:58:95:a7:fa:b7:f0:
5b:e7:17:ee:2c:ce:09:cc:21:28:f8:fb:cb:84:41:51:eb:67:
7f:2d:eb:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:02:57 2026 by rpki-client