Error: rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft File: 96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft (raw, json) Hash identifier: AGCk/Bl74bIRPysT0YchfiVZGcXvIezuRmOdtLPN28M= Subject key identifier: 17:57:32:8F:20:44:F8:66:7B:11:42:1F:ED:FF:26:44:99:B8:FC:16 Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE Certificate issuer: /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE Certificate serial: 73E6FFC57DBFFE99191DB5B5C1B4592212422A42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer Subject info access: rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft Manifest number: 04BD Signing time: Tue 13 Oct 2026 21:35:53 +0000 Manifest this update: Tue 13 Oct 2026 21:30:53 +0000 Manifest next update: Wed 14 Oct 2026 22:05:53 +0000 Files and hashes: 1: 96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl (hash: wI7YidybV3ZSKlCSou9AHVX47bJN7A68NbZ4ISWI8bw=) 2: 34352e342e35362e302f32322d3234203d3e20323636303338.roa (hash: EGNHJFsM5XGEUu/x01+dzw9Z85bzdW6FupicnEfjWj8=) 3: 323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (hash: qa4JmpUgTKi07m1iEVngLtO90kMKRzciKUko8CQur6I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 22:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e6:ff:c5:7d:bf:fe:99:19:1d:b5:b5:c1:b4:59:22:12:42:2a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE Validity Not Before: Oct 13 21:30:53 2026 GMT Not After : Oct 14 22:05:53 2026 GMT Subject: CN=1757328F2044F8667B11421FEDFF264499B8FC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:1d:a4:1f:93:ea:74:47:f4:a1:b6:98:9a: 01:03:20:ae:96:f0:a9:28:8d:bb:16:3c:d7:2a:a5: b4:a3:93:9d:61:33:72:f4:a8:82:ed:92:1b:c3:8d: c0:44:b8:bf:28:46:92:e2:4e:8e:f7:c3:24:ba:e3: 32:9f:fb:9d:c5:08:30:c1:aa:c4:40:71:a5:3e:09: c5:99:86:83:d5:bc:72:24:78:55:18:a3:c8:5c:f1: 1d:a4:42:a7:72:43:9f:18:4f:56:2c:5d:87:64:2c: 6f:e3:af:a1:8f:f2:9a:99:0f:91:4e:a4:fc:7d:58: 5a:79:72:bc:75:af:6d:0d:a3:c0:d9:7b:40:d5:a1: 4e:e5:4f:ab:dc:1c:f6:34:4f:b9:24:87:d1:b5:a5: dd:9f:c2:c4:3f:70:c4:5a:f2:9f:6d:57:29:94:ce: af:95:78:e3:c3:bf:55:e9:70:df:a8:a0:e1:70:8c: 2f:be:ff:59:4c:f6:89:1b:b8:9c:73:78:ed:45:0d: d8:52:86:e9:17:39:b9:bd:b9:f2:a8:c6:b2:1b:9e: b1:7e:3d:bb:70:3e:b3:47:a1:33:77:50:93:99:3b: 5b:c4:1c:cf:1a:a8:fd:1d:ca:80:bc:cb:58:fb:e9: af:67:10:61:9f:69:b7:60:08:10:8a:cb:18:27:b5: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:32:8F:20:44:F8:66:7B:11:42:1F:ED:FF:26:44:99:B8:FC:16 X509v3 Authority Key Identifier: keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:99:77:00:ec:b5:9a:3d:cb:2a:aa:91:15:f5:dc:d0:5b:ea: c4:d3:a2:e5:b0:6c:95:22:18:c5:06:ba:fb:6e:c6:fd:61:5b: bb:62:dc:ce:74:cf:7a:7a:88:f7:2a:f7:4c:22:d8:aa:54:64: ee:8e:d4:a7:47:ec:04:19:eb:4b:e0:56:de:ca:4e:a3:eb:6f: 0a:db:e5:ac:0d:61:11:c0:db:ba:b3:02:e1:ea:2d:64:f7:5e: 24:b3:e3:01:c9:59:bd:ce:1d:98:d4:a0:25:62:2e:b5:58:ac: 08:b1:cb:65:5a:a4:d4:98:15:62:d8:24:11:97:a1:74:14:92: b1:c8:16:1a:08:ed:88:8d:ca:29:b6:07:7c:1d:15:5f:30:0e: cb:3f:4a:90:74:00:ab:7d:35:03:2d:5a:3c:fd:29:08:51:1b: fd:8f:13:7f:d7:42:1b:4d:7e:e8:09:b3:bd:64:0b:ad:71:fa: 3e:db:d0:5f:57:e8:9b:c6:3e:86:18:58:30:25:65:62:fe:56: 99:1b:d4:b3:0c:b6:95:30:ca:63:49:6b:82:81:91:03:34:a7: 82:76:94:4b:71:48:ef:f1:d1:be:22:69:dd:6d:0d:57:7a:04: e0:e0:05:9a:67:f5:05:79:4f:0a:a8:84:58:6c:5e:f2:e8:3c: e8:ea:9b:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc+b/xX2//pkZHbW1wbRZIhJCKkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGMkZCRjY2QUQyRTlGNjFFQ0NDRUM2Nzc0MUM2QUQx NzM2QUNERTAeFw0yNjEwMTMyMTMwNTNaFw0yNjEwMTQyMjA1NTNaMDMxMTAvBgNV BAMTKDE3NTczMjhGMjA0NEY4NjY3QjExNDIxRkVERkYyNjQ0OTlCOEZDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tx2kH5PqdEf0obaYmgEDIK6W 8KkojbsWPNcqpbSjk51hM3L0qILtkhvDjcBEuL8oRpLiTo73wyS64zKf+53FCDDB qsRAcaU+CcWZhoPVvHIkeFUYo8hc8R2kQqdyQ58YT1YsXYdkLG/jr6GP8pqZD5FO pPx9WFp5crx1r20No8DZe0DVoU7lT6vcHPY0T7kkh9G1pd2fwsQ/cMRa8p9tVymU zq+VeOPDv1XpcN+ooOFwjC++/1lM9okbuJxzeO1FDdhShukXObm9ufKoxrIbnrF+ PbtwPrNHoTN3UJOZO1vEHM8aqP0dyoC8y1j76a9nEGGfabdgCBCKyxgntZWpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF1cyjyBE+GZ7EUIf7f8mRJm4/BYwHwYDVR0j BBgwFoAUlvL79mrS6fYezM7Gd0HGrRc2rN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ05NZ2YyQW02dFdoekp5YUFIMmlpMlhmVlJpNXQ0eEdmNlRIM2N2Qmh1 aEcvMS85NkYyRkJGNjZBRDJFOUY2MUVDQ0NFQzY3NzQxQzZBRDE3MzZBQ0RFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjJGQkY2NkFEMkU5RjYx RUNDQ0VDNjc3NDFDNkFEMTczNkFDREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q05NZ2YyQW02dFdoekp5YUFIMmlpMlhmVlJpNXQ0eEdmNlRIM2N2Qmh1aEcvMS85 NkYyRkJGNjZBRDJFOUY2MUVDQ0NFQzY3NzQxQzZBRDE3MzZBQ0RFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzpl3AOy1mj3LKqqRFfXc0FvqxNOi5bBslSIYxQa6+27G/WFbu2LcznTPenqI 9yr3TCLYqlRk7o7Up0fsBBnrS+BW3spOo+tvCtvlrA1hEcDburMC4eotZPdeJLPj AclZvc4dmNSgJWIutVisCLHLZVqk1JgVYtgkEZehdBSSscgWGgjtiI3KKbYHfB0V XzAOyz9KkHQAq301Ay1aPP0pCFEb/Y8Tf9dCG01+6AmzvWQLrXH6PtvQX1fom8Y+ hhhYMCVlYv5WmRvUswy2lTDKY0lrgoGRAzSngnaUS3FI7/HRviJp3W0NV3oE4OAF mmf1BXlPCqiEWGxe8ug86OqbFg== -----END CERTIFICATE-----Generated at Wed Oct 14 00:23:48 2026 by rpki-client