
Error: rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
File: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft (raw, json)
Hash identifier: unFuUU3ew9/1/Co6+D94msMUsfnKZvTATvoGfAp2gao=
Subject key identifier: F6:25:65:5B:CB:F8:E2:BF:60:49:8F:DA:38:AC:6E:72:8A:7C:46:B5
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Certificate issuer: /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial: 33961688CFC881801796FEF61D1F91D01861549E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
Manifest number: 04CB
Signing time: Tue 13 Oct 2026 08:06:55 +0000
Manifest this update: Tue 13 Oct 2026 08:01:55 +0000
Manifest next update: Wed 14 Oct 2026 10:27:55 +0000
Files and hashes: 1: 323830343a376432633a3a2f33322d313238203d3e20323731353434.roa (hash: w1u0JUYAXt5xoO8Keb4QmQeOvbrNLJrLcR9nBkZ9cKQ=)
2: 3137392e36332e3131362e302f32322d3332203d3e20323731353434.roa (hash: r36UPWC3Vh1GB2DCGEKJx6tfK61tTVpl8QFU827APis=)
3: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl (hash: cxt0t7jcVk4vqX4tddMzRiqs6QfuQQCP2AZ5ry4F660=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 10:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:96:16:88:cf:c8:81:80:17:96:fe:f6:1d:1f:91:d0:18:61:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Validity
Not Before: Oct 13 08:01:55 2026 GMT
Not After : Oct 14 10:27:55 2026 GMT
Subject: CN=F625655BCBF8E2BF60498FDA38AC6E728A7C46B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:66:0b:e6:d0:0d:93:5e:b4:75:d1:ec:5d:
65:a9:d1:27:32:72:b6:2d:7f:20:0a:1b:11:9a:c4:
22:46:2b:8a:fb:d6:22:c1:36:24:cc:60:f3:38:0c:
99:50:8c:4f:8e:5b:ae:1e:1f:b8:f1:54:c5:2a:70:
bf:fa:d8:a3:c0:20:50:d3:63:8c:77:4c:76:c8:67:
23:46:a9:20:59:34:95:d4:2a:43:d7:f1:25:69:28:
04:9f:e9:02:7f:a7:f9:1e:4a:b5:97:57:f2:01:da:
2e:e9:81:80:bb:84:2f:56:64:e9:d5:9d:74:94:f7:
25:2f:f0:53:f5:c7:05:2b:ef:37:f5:e6:86:c9:71:
89:c7:12:ca:c2:a6:fc:9f:8d:11:46:5e:cd:9f:cc:
28:7f:34:94:9b:ef:82:d5:d0:e7:df:f0:3c:c6:45:
ab:39:75:b7:75:0d:b3:ac:8c:98:39:95:e5:3a:32:
9c:80:67:79:7a:24:9a:56:92:19:aa:b8:26:59:be:
0e:18:b9:d3:5e:79:43:72:4b:57:db:24:e7:1d:1f:
6a:38:47:a1:d9:ed:b0:1a:a8:56:48:04:56:d5:8b:
dc:35:7a:ee:4d:37:25:9a:6b:87:88:b3:ae:6e:8c:
ea:aa:e7:a6:3a:1f:16:ba:f3:d8:bf:8b:11:0e:7e:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:65:5B:CB:F8:E2:BF:60:49:8F:DA:38:AC:6E:72:8A:7C:46:B5
X509v3 Authority Key Identifier:
keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:4c:20:7e:54:a6:0d:b8:7f:c6:58:1e:fa:52:b7:79:74:
c7:d9:1c:7c:57:a5:fa:29:b3:81:e4:06:79:46:e8:42:4b:bb:
14:c0:ea:5e:7d:00:c6:a7:66:9e:dd:a6:3a:45:dd:10:af:af:
2e:d8:11:16:f8:3b:27:be:c6:8c:eb:61:0f:21:a6:8e:8b:db:
ad:0a:d9:b2:bc:74:ef:d9:07:4b:10:05:16:86:46:e2:a7:53:
a9:ff:3e:66:19:7a:54:fe:e6:fb:a6:08:8c:b1:c7:7c:5e:86:
d8:f9:35:8e:95:ea:6d:e7:a2:21:17:b2:f9:8a:55:5a:e9:fd:
f4:bd:7e:7e:ab:7e:df:86:ff:6d:56:11:24:2e:d1:de:11:6f:
cf:0e:e2:9f:9d:c2:57:dc:2b:48:23:9f:e9:64:74:b4:99:b8:
c5:8e:f7:84:5d:10:89:a8:01:a1:d9:42:ec:84:17:6b:dd:91:
0c:b5:80:e8:c0:ea:31:fb:38:aa:67:f7:21:b0:70:92:ce:a0:
7b:37:38:20:57:4f:a1:a9:7a:26:17:02:a4:dc:80:e8:4c:58:
9d:fc:ae:cf:5e:e0:8b:5a:84:d9:54:0c:e1:ba:07:ec:c9:ad:
9e:87:dd:f5:6b:0f:89:f1:03:cf:51:55:7f:00:e8:00:3f:b9:
80:07:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:37:53 2026 by rpki-client