Error: rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft File: 0F8527D7B78AAF3D805B156085B133DC25F008C2.mft (raw, json) Hash identifier: T/A100TXZuA8tMHNbB1F91aw3zC1LWoOtRSb6uCRGwE= Subject key identifier: 5B:F5:27:59:95:0D:62:F6:1E:98:92:77:91:85:01:18:5E:A7:AA:A7 Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2 Certificate issuer: /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2 Certificate serial: 1B1CA3A71AA3B82534EBFCF893AA0AF82A3BC77D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft Manifest number: 04E3 Signing time: Sun 01 Nov 2026 09:01:30 +0000 Manifest this update: Sun 01 Nov 2026 08:56:30 +0000 Manifest next update: Mon 02 Nov 2026 11:08:30 +0000 Files and hashes: 1: 34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa (hash: rTjsEgbtJfREcKT0BIAEvI7tEeEMw32rR/9k00QxnJ8=) 2: 323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (hash: 60DI8KsvdD0x8hQRZR8Sypx8sCiOFzpenU8vTp9mSRQ=) 3: 0F8527D7B78AAF3D805B156085B133DC25F008C2.crl (hash: aPoe3BMtN5hJumlda/rn+4EMymO/8Dymt3Dnou+kktc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 11:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1c:a3:a7:1a:a3:b8:25:34:eb:fc:f8:93:aa:0a:f8:2a:3b:c7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2 Validity Not Before: Nov 1 08:56:30 2026 GMT Not After : Nov 2 11:08:30 2026 GMT Subject: CN=5BF52759950D62F61E989277918501185EA7AAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:1f:ad:e5:48:f2:60:7f:89:0b:d3:08:74: 2f:55:70:94:ee:15:bc:e0:b8:b2:f9:70:0b:0d:5d: 6f:bb:b8:5d:5f:fa:e2:23:34:f5:3d:1d:80:8f:6d: 0b:06:1c:0e:35:77:e1:87:31:d3:01:cb:48:ab:81: de:b3:cd:6d:e0:16:f3:72:f9:87:6e:5e:62:18:f4: 0d:0f:f0:a6:5c:dd:4b:99:70:98:33:5d:86:97:04: 2a:cb:e0:44:52:dc:82:62:0a:e4:5a:f1:8e:73:69: 1e:23:e6:8c:75:ed:9c:1f:5d:2f:5c:74:9c:4f:9a: ff:a9:38:0b:66:23:e5:0d:e1:0e:b9:dd:74:86:f6: f1:05:f7:e1:28:48:78:c0:11:97:2e:90:ce:9b:36: 0a:06:5a:56:e2:fd:f8:d1:d4:8e:df:f6:ff:0b:5c: 7b:91:d8:3f:61:25:ac:7f:4f:46:8c:3f:ca:f4:3d: ee:13:9a:a4:b1:97:fb:d9:37:1d:da:74:a4:06:b6: fd:bd:1a:ce:a4:95:d6:d1:46:b3:18:37:c0:14:a6: eb:31:f3:51:24:24:c1:35:10:77:9d:43:e3:b7:2c: 9b:57:6e:90:7e:11:7a:00:10:6e:1c:be:12:6a:5b: 8b:8e:c2:0f:9f:c8:91:b0:73:f0:99:26:75:e0:64: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:27:59:95:0D:62:F6:1E:98:92:77:91:85:01:18:5E:A7:AA:A7 X509v3 Authority Key Identifier: keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5a:00:d7:2c:25:bf:55:14:5b:78:68:e9:26:f4:cb:44:53: b1:67:ea:c1:86:37:d5:a4:4c:60:27:13:ac:93:c8:e8:10:74: 1a:90:8d:25:bf:61:47:54:42:93:2c:6f:79:73:9b:64:8d:51: 59:0f:d0:16:6f:07:65:27:c5:d9:1c:7f:87:a3:5b:6f:30:d1: 8e:58:31:bd:c5:5d:28:6f:28:6e:f7:6c:cc:35:24:a2:a0:b5: 9f:22:ce:b7:c3:c7:f8:97:ba:6f:60:49:73:78:6e:07:5d:dc: 96:b1:06:6e:ca:19:b7:da:fb:92:b2:5f:2a:ea:fe:bf:93:33: 32:c9:0d:63:57:21:62:39:57:88:0d:3f:a8:12:73:5e:e4:33: 77:b4:36:ef:61:e0:f1:ac:d9:91:33:ab:b6:60:e9:0f:5f:63: 1e:17:75:f5:d5:1e:8a:98:d4:bd:7b:1d:b9:87:37:fe:8f:d6: 2c:7b:8a:c1:30:72:92:24:3b:ac:50:61:88:55:bc:1c:6a:d8: f4:84:e9:35:c1:03:1e:33:58:26:12:7b:a3:da:de:8d:b7:5d: a9:3f:8e:ef:bd:e7:25:c3:b4:4a:fd:d2:18:5e:2a:74:25:f2: 44:40:a2:e8:2a:f0:ed:c7:45:57:a8:f1:24:4f:67:9f:78:f9: a6:e3:d4:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGxyjpxqjuCU06/z4k6oK+Co7x30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4NTI3RDdCNzhBQUYzRDgwNUIxNTYwODVCMTMzREMy NUYwMDhDMjAeFw0yNjExMDEwODU2MzBaFw0yNjExMDIxMTA4MzBaMDMxMTAvBgNV BAMTKDVCRjUyNzU5OTUwRDYyRjYxRTk4OTI3NzkxODUwMTE4NUVBN0FBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+h+t5UjyYH+JC9MIdC9VcJTu FbzguLL5cAsNXW+7uF1f+uIjNPU9HYCPbQsGHA41d+GHMdMBy0irgd6zzW3gFvNy +YduXmIY9A0P8KZc3UuZcJgzXYaXBCrL4ERS3IJiCuRa8Y5zaR4j5ox17ZwfXS9c dJxPmv+pOAtmI+UN4Q653XSG9vEF9+EoSHjAEZcukM6bNgoGWlbi/fjR1I7f9v8L XHuR2D9hJax/T0aMP8r0Pe4TmqSxl/vZNx3adKQGtv29Gs6kldbRRrMYN8AUpusx 81EkJME1EHedQ+O3LJtXbpB+EXoAEG4cvhJqW4uOwg+fyJGwc/CZJnXgZNI7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW/UnWZUNYvYemJJ3kYUBGF6nqqcwHwYDVR0j BBgwFoAUD4Un17eKrz2AWxVghbEz3CXwCMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hx dEYvMS8wRjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGODUyN0Q3Qjc4QUFGM0Q4 MDVCMTU2MDg1QjEzM0RDMjVGMDA4QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hxdEYvMS8w Rjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArVoA1ywlv1UUW3ho6Sb0y0RTsWfqwYY31aRMYCcTrJPI6BB0GpCNJb9hR1RC kyxveXObZI1RWQ/QFm8HZSfF2Rx/h6NbbzDRjlgxvcVdKG8obvdszDUkoqC1nyLO t8PH+Je6b2BJc3huB13clrEGbsoZt9r7krJfKur+v5MzMskNY1chYjlXiA0/qBJz XuQzd7Q272Hg8azZkTOrtmDpD19jHhd19dUeipjUvXsduYc3/o/WLHuKwTBykiQ7 rFBhiFW8HGrY9ITpNcEDHjNYJhJ7o9rejbddqT+O773nJcO0Sv3SGF4qdCXyRECi 6Crw7cdFV6jxJE9nn3j5puPUFA== -----END CERTIFICATE-----Generated at Mon Nov 2 00:59:46 2026 by rpki-client