Error: rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft File: 2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft (raw, json) Hash identifier: 390law5i1z/IPl8l5pW9TBwzFFvUd0iAP3QCBxO/Cgc= Subject key identifier: F0:10:87:2E:6E:F8:75:BF:5F:A7:89:0D:80:F1:68:1E:06:A4:8B:CE Authority key identifier: 28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99 Certificate issuer: /CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499 Certificate serial: 566907A4CCCD97F34A9C55B9C0120F99F3C380D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer Subject info access: rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft Manifest number: 0110 Signing time: Sat 31 Oct 2026 15:38:05 +0000 Manifest this update: Sat 31 Oct 2026 15:33:05 +0000 Manifest next update: Sun 01 Nov 2026 17:33:05 +0000 Files and hashes: 1: 323830343a393834383a3a2f33322d3334203d3e20323735363739.roa (hash: AA3KXA8ukWICbzyRq8gcm4D9riSnRFH2V35QuPvXI2c=) 2: 2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl (hash: FRL7ldyKKaDtRC2YD73cImBq40IRs/W7X9moHJG1Otw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 17:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:69:07:a4:cc:cd:97:f3:4a:9c:55:b9:c0:12:0f:99:f3:c3:80:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2832861A32D9BFD5DABB7E0AF9C855AB65A91499 Validity Not Before: Oct 31 15:33:05 2026 GMT Not After : Nov 1 17:33:05 2026 GMT Subject: CN=F010872E6EF875BF5FA7890D80F1681E06A48BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:d1:d6:b3:82:8b:7d:ba:10:4f:4a:5d:8a: 3e:41:0b:72:aa:c4:75:f4:50:de:c0:f0:d1:b2:7e: 68:44:7f:0b:bf:71:0b:47:9a:ba:cf:29:dc:42:73: eb:a1:1c:4d:3b:9a:7a:18:1f:8f:c7:d6:f3:5b:dd: 0a:7b:e9:89:47:66:c7:09:f7:12:9b:4b:b3:64:c3: 48:5e:dd:e5:4f:f8:95:67:53:32:3e:69:a7:d9:bd: 69:67:21:d0:85:a4:8c:64:f2:f3:53:70:6d:90:a2: 1f:44:98:7b:6f:6f:6a:cf:a1:97:5c:3b:19:59:2b: ed:01:e2:6d:99:0b:38:3b:01:c3:2d:4f:65:b2:14: 0a:b5:bd:b4:11:e9:68:9d:9f:c0:f2:04:37:fc:97: c8:cd:53:84:5b:72:47:b3:2f:a6:a7:c4:56:1a:ea: 72:42:6b:8d:6f:07:db:53:70:bc:e6:a4:69:45:2b: dc:63:67:0a:b5:7e:66:61:b6:02:5e:9a:e1:42:35: 73:c7:53:87:2f:9d:ba:30:de:4e:13:0a:78:a2:fd: 5b:8b:c3:86:dc:4a:8e:76:b4:8e:13:39:87:6f:2f: 19:48:91:d5:ea:ef:c2:08:4e:4e:dc:21:1b:eb:72: fe:b4:29:8d:cd:f5:ae:1c:82:71:9e:5e:ef:93:62: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:87:2E:6E:F8:75:BF:5F:A7:89:0D:80:F1:68:1E:06:A4:8B:CE X509v3 Authority Key Identifier: keyid:28:32:86:1A:32:D9:BF:D5:DA:BB:7E:0A:F9:C8:55:AB:65:A9:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9bnt86bgAA6XNJsagSmGsx6qvhnB5iH4314ijAahADx/0/2832861A32D9BFD5DABB7E0AF9C855AB65A91499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ac:5c:8c:a4:5c:14:46:16:34:67:e7:4f:b0:fe:05:14:d7: fe:0c:95:57:d3:d2:f4:82:5a:8f:b7:af:c1:d6:d7:55:6e:83: a8:78:bb:55:0c:56:f2:14:43:d5:63:84:c5:b4:61:34:ed:4e: 59:05:ee:7e:01:de:db:16:25:db:d2:8b:9b:8d:22:f4:1d:ed: 52:45:6d:8f:90:d1:94:ca:06:ab:cf:5e:d9:3e:6e:39:89:0f: fc:8b:34:f8:45:19:80:99:88:f0:33:83:ae:18:48:aa:8a:13: 1e:e5:46:56:a4:c5:db:76:1d:88:a6:91:a0:1a:e5:ce:70:c9: 09:98:66:b5:2a:a5:b0:49:b9:40:b2:45:eb:81:da:c5:b3:3c: 9f:df:39:2a:56:c5:3e:c1:19:e9:25:c6:2b:bd:50:e7:61:60: eb:9b:40:f4:b0:59:5f:12:bf:46:96:80:07:8a:e5:fb:77:4c: 2d:f9:40:32:9c:01:c5:ff:a4:9c:96:09:3f:ee:05:32:dd:58: a8:b6:88:39:d9:cb:44:09:c7:01:c7:3d:24:55:db:69:69:1a: 6b:f6:8b:02:8a:88:86:94:64:fc:df:5d:9c:f1:de:7e:04:b9: 93:9f:b4:57:b0:96:90:53:f8:b4:78:b1:38:4b:81:f8:3c:b3: 3d:36:8d:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVmkHpMzNl/NKnFW5wBIPmfPDgNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgzMjg2MUEzMkQ5QkZENURBQkI3RTBBRjlDODU1QUI2 NUE5MTQ5OTAeFw0yNjEwMzExNTMzMDVaFw0yNjExMDExNzMzMDVaMDMxMTAvBgNV BAMTKEYwMTA4NzJFNkVGODc1QkY1RkE3ODkwRDgwRjE2ODFFMDZBNDhCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O9HWs4KLfboQT0pdij5BC3Kq xHX0UN7A8NGyfmhEfwu/cQtHmrrPKdxCc+uhHE07mnoYH4/H1vNb3Qp76YlHZscJ 9xKbS7Nkw0he3eVP+JVnUzI+aafZvWlnIdCFpIxk8vNTcG2Qoh9EmHtvb2rPoZdc OxlZK+0B4m2ZCzg7AcMtT2WyFAq1vbQR6Widn8DyBDf8l8jNU4RbckezL6anxFYa 6nJCa41vB9tTcLzmpGlFK9xjZwq1fmZhtgJemuFCNXPHU4cvnbow3k4TCnii/VuL w4bcSo52tI4TOYdvLxlIkdXq78IITk7cIRvrcv60KY3N9a4cgnGeXu+TYpwtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8BCHLm74db9fp4kNgPFoHgaki84wHwYDVR0j BBgwFoAUKDKGGjLZv9Xau34K+chVq2WpFJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTlibnQ4NmJnQUE2WE5Kc2FnU21Hc3g2cXZobkI1aUg0MzE0aWpBYWhB RHgvMC8yODMyODYxQTMyRDlCRkQ1REFCQjdFMEFGOUM4NTVBQjY1QTkxNDk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MzI4NjFBMzJEOUJGRDVE QUJCN0UwQUY5Qzg1NUFCNjVBOTE0OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTlibnQ4NmJnQUE2WE5Kc2FnU21Hc3g2cXZobkI1aUg0MzE0aWpBYWhBRHgvMC8y ODMyODYxQTMyRDlCRkQ1REFCQjdFMEFGOUM4NTVBQjY1QTkxNDk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo6xcjKRcFEYWNGfnT7D+BRTX/gyVV9PS9IJaj7evwdbXVW6DqHi7VQxW8hRD 1WOExbRhNO1OWQXufgHe2xYl29KLm40i9B3tUkVtj5DRlMoGq89e2T5uOYkP/Is0 +EUZgJmI8DODrhhIqooTHuVGVqTF23YdiKaRoBrlznDJCZhmtSqlsEm5QLJF64Ha xbM8n985KlbFPsEZ6SXGK71Q52Fg65tA9LBZXxK/RpaAB4rl+3dMLflAMpwBxf+k nJYJP+4FMt1YqLaIOdnLRAnHAcc9JFXbaWkaa/aLAoqIhpRk/N9dnPHefgS5k5+0 V7CWkFP4tHixOEuB+DyzPTaNBA== -----END CERTIFICATE-----Generated at Sat Oct 31 22:57:46 2026 by rpki-client