Error: rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json) Hash identifier: jMt/Ha3+1S5JkecYadhJVXRDIdHYnNUSsFaBFUYKTgI= Subject key identifier: 40:62:CC:8E:FA:CC:E9:C0:53:14:96:6C:F1:4A:70:16:E2:68:A8:D0 Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Certificate serial: 23A460F0DCF0C82EEAABB4B49E2AB632ECFC286D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft Manifest number: 04E9 Signing time: Tue 03 Nov 2026 08:23:12 +0000 Manifest this update: Tue 03 Nov 2026 08:18:12 +0000 Manifest next update: Wed 04 Nov 2026 12:08:12 +0000 Files and hashes: 1: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: 77lMmfsBlWS7z4/jWBsEqCAvWwFXKptaC5X3bZ9GJYw=) 2: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: dj6Zc4uIeT/psgKwvSTvC+GJFStZNHrBJem0Ce884WU=) 3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: bUCZ7BZehY+i3arTQ9HforOmJ5Z00Xe4/9acYqEHuf4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 12:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a4:60:f0:dc:f0:c8:2e:ea:ab:b4:b4:9e:2a:b6:32:ec:fc:28:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Validity Not Before: Nov 3 08:18:12 2026 GMT Not After : Nov 4 12:08:12 2026 GMT Subject: CN=4062CC8EFACCE9C05314966CF14A7016E268A8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:37:56:ef:1d:53:23:88:e7:50:13:c3:91: 10:38:10:ec:38:49:63:b1:06:82:62:25:f0:8f:57: a0:48:25:79:7d:72:3a:05:b4:be:02:ef:37:8a:f3: 8f:fa:ff:64:ca:23:bc:b9:f3:0b:59:e9:9c:b1:25: 99:2e:3e:53:13:59:20:62:94:83:f3:de:d8:e6:12: 5e:41:6c:8b:88:f5:88:b1:0f:6e:10:6a:e8:ef:18: 6c:d7:41:57:81:09:23:f8:5a:0f:61:75:15:24:79: 81:39:2c:a4:5a:1d:9f:4a:b4:0c:95:5e:44:ee:4c: 40:38:3f:18:dc:ac:61:d6:41:6b:53:4d:9a:cd:c1: 6b:34:1c:59:24:47:31:9a:fd:98:6a:bc:40:1e:a1: 25:77:19:4e:ba:85:fc:64:3c:67:ec:0e:89:77:fb: 9d:a3:f3:dd:1c:52:e2:5a:d3:6f:e5:67:23:04:a6: e4:5d:22:03:03:5a:21:0c:67:9e:55:24:9b:ee:a0: 0a:c5:35:25:03:c8:a1:65:58:6d:4d:6d:33:2e:bf: 54:69:70:87:1d:3e:aa:42:98:3e:cd:cc:e7:20:76: 20:ad:a0:bd:86:47:17:d2:49:0c:d8:39:85:1a:4e: 8e:a2:7f:1d:bd:fd:d9:d9:6e:64:8d:14:0d:03:18: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:62:CC:8E:FA:CC:E9:C0:53:14:96:6C:F1:4A:70:16:E2:68:A8:D0 X509v3 Authority Key Identifier: keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:a9:e8:a7:12:3d:93:70:53:d0:d1:0b:73:b6:f5:72:1a:db: 0f:08:0a:6a:35:db:d0:d4:46:be:14:11:bf:26:31:43:7d:c5: af:78:a9:fa:11:d5:97:5c:6a:62:4f:ee:6a:a4:c8:ea:f7:6f: c6:46:4b:bd:db:54:4b:f3:ee:6d:63:75:b5:b9:01:df:32:19: ed:3b:ea:35:7f:44:68:a0:81:65:0f:06:42:f5:bb:19:1e:27: 34:e3:f8:2c:71:4d:17:1c:30:58:20:da:45:d9:b6:24:62:01: f2:0c:95:03:af:24:9f:d6:8e:67:ed:76:23:ae:8d:b8:dc:5d: 7a:82:40:10:93:37:5d:9a:fa:a6:8b:63:f3:7f:2f:26:8b:5f: 33:1b:6f:00:73:2d:97:9e:90:ae:e9:39:e9:df:4a:34:4a:8b: 70:d8:16:56:d4:87:78:00:b0:a4:8e:41:a6:d5:6b:77:8e:32: a3:b3:94:87:40:30:d6:0c:02:a7:73:20:4a:70:7e:2d:da:43: b0:cf:d1:8c:7c:f8:54:b4:c0:53:81:22:b3:c2:2a:67:b6:a0: 54:f6:46:bc:58:35:7b:27:4e:58:0c:fa:b0:a2:63:53:84:c1: 99:01:51:fc:af:1d:e0:7e:9d:39:31:6f:3c:aa:74:d2:fb:fd: 1a:66:54:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI6Rg8NzwyC7qq7S0niq2Muz8KG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx RUNCMzFFQzAeFw0yNjExMDMwODE4MTJaFw0yNjExMDQxMjA4MTJaMDMxMTAvBgNV BAMTKDQwNjJDQzhFRkFDQ0U5QzA1MzE0OTY2Q0YxNEE3MDE2RTI2OEE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dTdW7x1TI4jnUBPDkRA4EOw4 SWOxBoJiJfCPV6BIJXl9cjoFtL4C7zeK84/6/2TKI7y58wtZ6ZyxJZkuPlMTWSBi lIPz3tjmEl5BbIuI9YixD24QaujvGGzXQVeBCSP4Wg9hdRUkeYE5LKRaHZ9KtAyV XkTuTEA4PxjcrGHWQWtTTZrNwWs0HFkkRzGa/ZhqvEAeoSV3GU66hfxkPGfsDol3 +52j890cUuJa02/lZyMEpuRdIgMDWiEMZ55VJJvuoArFNSUDyKFlWG1NbTMuv1Rp cIcdPqpCmD7NzOcgdiCtoL2GRxfSSQzYOYUaTo6ifx29/dnZbmSNFA0DGLLxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQGLMjvrM6cBTFJZs8UpwFuJoqNAwHwYDVR0j BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvqnopxI9k3BT0NELc7b1chrbDwgKajXb0NRGvhQRvyYxQ33Fr3ip+hHVl1xq Yk/uaqTI6vdvxkZLvdtUS/PubWN1tbkB3zIZ7TvqNX9EaKCBZQ8GQvW7GR4nNOP4 LHFNFxwwWCDaRdm2JGIB8gyVA68kn9aOZ+12I66NuNxdeoJAEJM3XZr6potj838v JotfMxtvAHMtl56Qruk56d9KNEqLcNgWVtSHeACwpI5BptVrd44yo7OUh0Aw1gwC p3MgSnB+LdpDsM/RjHz4VLTAU4Eis8IqZ7agVPZGvFg1eydOWAz6sKJjU4TBmQFR /K8d4H6dOTFvPKp00vv9GmZUeg== -----END CERTIFICATE-----Generated at Wed Nov 4 00:38:04 2026 by rpki-client