
Error: rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File: D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier: /IPFCssmMF8JqZI7/AzQ47KT0ra8ZxYjvPLkM4zF/nU=
Subject key identifier: 6E:2C:F2:F0:F2:43:C9:7C:40:39:A8:A2:AB:6C:A0:C1:34:9D:A4:67
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer: /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial: 663D14D270A1324CC6CFECAC03205B2241BA6DAB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number: 04E2
Signing time: Thu 29 Oct 2026 18:10:00 +0000
Manifest this update: Thu 29 Oct 2026 18:05:00 +0000
Manifest next update: Fri 30 Oct 2026 20:10:00 +0000
Files and hashes: 1: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: dT/OQ0caLNJNzu5vr5CsHKBQnF7R/bkS8yGTDfRmzw0=)
2: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=)
3: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: 9qPKLV0Am8TBxah0fdyOq0ZasSnjA7YA2yZcNGlFxM0=)
4: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: 5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=)
5: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: w6x88Y8F2UoFOh2FhmiIRYRACnZ/8l1VFzDF5p6L8sY=)
6: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: gGjNDilJvHg9VXQ5PJNA0dI2kci5BKyslQM81R+6iSk=)
7: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: MdX+ghWTHdaghn/+1f289WsoGie1puCHwMvayR6UBbo=)
8: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: q9bc6giK5SahvFhYN5/MsoRGDnh41j9MifCw7Cd12SM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 20:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3d:14:d2:70:a1:32:4c:c6:cf:ec:ac:03:20:5b:22:41:ba:6d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
Validity
Not Before: Oct 29 18:05:00 2026 GMT
Not After : Oct 30 20:10:00 2026 GMT
Subject: CN=6E2CF2F0F243C97C4039A8A2AB6CA0C1349DA467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:d7:5b:69:c4:3f:fb:ea:af:a6:fc:36:fc:
ff:be:1b:f4:b1:a7:e5:65:e7:1b:02:d5:ec:8b:db:
1e:f1:d1:04:23:9d:db:79:22:12:19:7d:14:09:da:
a0:3b:d9:d7:2a:a3:8a:44:df:18:a6:a6:02:0b:3f:
c1:02:89:85:67:21:76:a1:88:88:91:c4:3b:50:8d:
0b:a8:a2:7a:1b:b9:73:47:a1:06:f4:1b:73:3d:f3:
bc:69:41:76:82:fc:f1:10:64:1c:b2:60:e5:6d:70:
00:96:79:5b:d7:ce:3f:ca:8e:b3:f8:eb:4e:8f:23:
a6:d8:b3:99:97:01:b5:d5:4b:e3:12:a8:06:c0:fa:
19:37:32:c2:2a:17:dd:8b:27:8a:c6:3f:e2:ac:48:
df:67:75:1a:34:26:45:c2:09:99:34:f5:bc:f0:e0:
49:a5:18:7d:5b:30:4c:33:d9:14:bf:11:7e:f5:21:
e7:19:28:b9:96:48:17:e9:e5:22:ef:ba:b2:68:8a:
a5:60:9f:d9:cd:78:ff:6a:44:a4:3d:e2:e0:58:6c:
eb:d9:95:01:de:da:38:6c:94:60:7a:9d:c1:04:6d:
bd:0d:b6:96:6a:8b:11:03:67:36:70:20:d3:84:92:
b6:57:60:d4:a0:ee:a0:43:f4:9c:0b:08:59:72:d1:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:F2:F0:F2:43:C9:7C:40:39:A8:A2:AB:6C:A0:C1:34:9D:A4:67
X509v3 Authority Key Identifier:
keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:32:d5:33:3a:4f:9f:f8:e7:05:e7:ca:c5:aa:d9:c5:61:
59:ed:c2:f2:d6:de:d1:dc:f4:b9:a6:40:92:c1:16:1c:ed:cf:
b4:e2:95:04:a9:25:28:44:03:e0:f5:4c:ac:a8:8b:56:e5:7d:
86:85:5a:9f:18:30:6c:82:41:0f:81:34:aa:70:9f:b5:41:1b:
78:92:b7:7c:07:f8:11:b0:ff:db:62:aa:da:46:62:bc:7b:4f:
92:ea:ce:0f:04:fa:0a:16:3c:6d:20:de:25:fd:0d:65:55:cf:
e3:65:7e:e4:7d:eb:73:1c:f2:a8:c0:c4:50:62:81:40:cd:49:
9c:af:3b:97:b9:0f:2b:54:91:b2:40:79:ad:f6:f6:cf:43:d2:
d2:c4:14:55:7d:30:00:da:cd:af:02:08:c9:2a:31:29:c7:28:
6f:19:f7:d5:6b:3d:2b:7d:5b:f4:bb:8b:ac:c8:93:9b:d8:72:
c7:97:f7:df:b9:63:93:14:bf:42:5e:37:e5:e7:a0:f6:0d:90:
1a:4b:91:43:7c:bc:af:d4:36:70:18:9f:d5:e4:81:cc:46:2a:
f1:cd:79:ec:21:be:7f:33:62:47:73:c5:21:34:ff:0e:25:29:
f9:e3:4e:a2:11:ae:a2:36:42:c5:12:e6:25:43:7c:05:d9:b0:
83:42:e1:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZj0U0nChMkzGz+ysAyBbIkG6baswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGM0Y2N0VBODAwNTA0RjIzNzk1RTIyOTkxODE1RjlF
Njg2QzgxMTAeFw0yNjEwMjkxODA1MDBaFw0yNjEwMzAyMDEwMDBaMDMxMTAvBgNV
BAMTKDZFMkNGMkYwRjI0M0M5N0M0MDM5QThBMkFCNkNBMEMxMzQ5REE0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGU9dbacQ/++qvpvw2/P++G/Sx
p+Vl5xsC1eyL2x7x0QQjndt5IhIZfRQJ2qA72dcqo4pE3ximpgILP8ECiYVnIXah
iIiRxDtQjQuoonobuXNHoQb0G3M987xpQXaC/PEQZByyYOVtcACWeVvXzj/KjrP4
606PI6bYs5mXAbXVS+MSqAbA+hk3MsIqF92LJ4rGP+KsSN9ndRo0JkXCCZk09bzw
4EmlGH1bMEwz2RS/EX71IecZKLmWSBfp5SLvurJoiqVgn9nNeP9qRKQ94uBYbOvZ
lQHe2jhslGB6ncEEbb0NtpZqixEDZzZwINOEkrZXYNSg7qBD9JwLCFly0ThRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbizy8PJDyXxAOaiiq2ygwTSdpGcwHwYDVR0j
BBgwFoAU1/P2fqgAUE8jeV4imRgV+eaGyBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdx
dWUvMS9EN0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RjNGNjdFQTgwMDUwNEYy
Mzc5NUUyMjk5MTgxNUY5RTY4NkM4MTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMS9E
N0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYGky1TM6T5/45wXnysWq2cVhWe3C8tbe0dz0uaZAksEWHO3PtOKVBKklKEQD
4PVMrKiLVuV9hoVanxgwbIJBD4E0qnCftUEbeJK3fAf4EbD/22Kq2kZivHtPkurO
DwT6ChY8bSDeJf0NZVXP42V+5H3rcxzyqMDEUGKBQM1JnK87l7kPK1SRskB5rfb2
z0PS0sQUVX0wANrNrwIIySoxKccobxn31Ws9K31b9LuLrMiTm9hyx5f337ljkxS/
Ql435eeg9g2QGkuRQ3y8r9Q2cBif1eSBzEYq8c157CG+fzNiR3PFITT/DiUp+eNO
ohGuojZCxRLmJUN8Bdmwg0Lhng==
-----END CERTIFICATE-----
Generated at Fri Oct 30 00:21:46 2026 by rpki-client