Error: rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft File: D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft (raw, json) Hash identifier: dUbPsrlTYXyt8ix/ufHYOpoXNHpP743G82qQzHmUspU= Subject key identifier: 15:E9:94:45:87:CE:FB:BD:FF:51:A3:65:4A:A2:12:0C:02:CA:F3:91 Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 Certificate issuer: /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Certificate serial: 2E08ED032883EA93B4D0E76962E5FBD7B42F7D00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft Manifest number: 04B5 Signing time: Wed 14 Oct 2026 12:43:54 +0000 Manifest this update: Wed 14 Oct 2026 12:38:54 +0000 Manifest next update: Thu 15 Oct 2026 16:29:54 +0000 Files and hashes: 1: 323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (hash: JIpoKbKmQS8aB3awqRsxOXJFuD3mJOT3SZsietBEgoE=) 2: D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl (hash: q7QEitDg7rPuVI54lMdKsk35XoaJ1aN0SHINZEURW8Y=) 3: 34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (hash: vnDMTtou2M3H+wfHs5hjxL185lzK3e/BlM0ys5z8iTk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 16:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:08:ed:03:28:83:ea:93:b4:d0:e7:69:62:e5:fb:d7:b4:2f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Validity Not Before: Oct 14 12:38:54 2026 GMT Not After : Oct 15 16:29:54 2026 GMT Subject: CN=15E9944587CEFBBDFF51A3654AA2120C02CAF391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:1c:76:39:4d:b2:c9:ab:89:58:81:19:5a: 15:ef:15:18:67:a0:12:f0:a6:fe:f3:ff:ea:b0:87: 01:92:27:af:8f:47:f9:0e:f8:2d:fc:43:2e:4e:02: e7:a3:ca:66:29:34:54:4c:a1:66:2c:9a:8f:9c:7b: f1:6b:48:1d:b7:8a:df:a7:e7:20:3f:07:2a:20:a1: c2:94:79:98:52:39:ee:00:33:9b:43:cd:6e:89:1d: e7:70:bb:37:0a:bf:b3:c8:a6:08:b4:7e:5d:39:f1: e3:cb:ed:b6:49:93:b9:7b:94:77:f0:d8:68:14:e8: 03:95:0e:54:9c:21:f4:6b:e2:9e:37:11:8b:55:de: 32:16:58:64:68:69:a9:9b:ce:1a:0f:c3:96:67:69: 0d:b2:17:10:e7:10:43:55:a2:a1:d2:8c:52:79:b6: 97:95:e2:58:69:74:9a:12:16:5a:b4:60:f3:cf:09: bc:93:64:f0:9c:17:30:6b:89:a3:56:84:db:3f:64: ed:da:ab:95:3d:f1:3c:54:23:0f:68:3b:2f:34:5d: d3:6a:10:5a:2f:12:32:74:3b:8a:a5:6e:0d:aa:76: 46:10:8e:74:69:3c:7a:bb:8c:be:f2:0a:cf:59:8d: e4:99:28:f8:ce:46:08:74:9b:90:2b:32:d7:1b:ea: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:94:45:87:CE:FB:BD:FF:51:A3:65:4A:A2:12:0C:02:CA:F3:91 X509v3 Authority Key Identifier: keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bd:8b:82:0d:6c:fb:50:94:3c:27:17:da:3b:54:dd:9a:06: f9:15:fa:9f:50:79:28:a0:2e:41:dd:fb:ec:cd:55:46:2f:20: 42:d0:96:c9:c7:94:36:36:af:93:9c:3e:2c:bd:de:26:62:67: 58:75:68:c1:00:ee:ca:14:2c:09:3b:98:dc:de:b8:9f:a1:f1: 7b:5f:73:31:dc:ea:1c:80:89:92:6a:2b:cb:41:27:78:96:c5: ff:f5:c9:2b:4a:a4:54:8c:3a:9c:5c:31:3d:b3:8c:d8:eb:f5: 6a:04:a3:77:f0:b1:5f:33:ca:43:f3:75:3c:f7:39:f0:55:b9: 78:d9:61:13:55:2f:a4:1a:f4:e0:55:2d:18:79:3d:92:ff:fd: 1d:0b:08:c3:2c:cf:2d:06:cc:23:b9:87:3e:9e:c4:53:f3:41: ec:19:f2:57:75:23:d6:76:91:ba:11:cb:5a:da:36:b8:24:56: 3f:7b:b2:ac:35:a8:97:10:83:86:1c:8f:91:83:ce:24:6d:a6: 50:73:50:ae:0c:8a:2c:92:3a:a2:93:9a:19:7f:7e:22:44:55: 7b:af:3b:d3:f9:d5:0a:6e:e2:9c:0a:06:73:39:1b:d5:ad:6d: fa:32:3d:a1:72:f0:16:e2:a3:16:ac:02:5d:db:e6:6b:4a:2e: 81:c6:81:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULgjtAyiD6pO00OdpYuX717QvfQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQzI4NTdBMjkwOERBOUU5N0VFRjQyMkEyNTc0NUQ4 OUYyODJCMzAeFw0yNjEwMTQxMjM4NTRaFw0yNjEwMTUxNjI5NTRaMDMxMTAvBgNV BAMTKDE1RTk5NDQ1ODdDRUZCQkRGRjUxQTM2NTRBQTIxMjBDMDJDQUYzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrxx2OU2yyauJWIEZWhXvFRhn oBLwpv7z/+qwhwGSJ6+PR/kO+C38Qy5OAuejymYpNFRMoWYsmo+ce/FrSB23it+n 5yA/ByogocKUeZhSOe4AM5tDzW6JHedwuzcKv7PIpgi0fl058ePL7bZJk7l7lHfw 2GgU6AOVDlScIfRr4p43EYtV3jIWWGRoaambzhoPw5ZnaQ2yFxDnEENVoqHSjFJ5 tpeV4lhpdJoSFlq0YPPPCbyTZPCcFzBriaNWhNs/ZO3aq5U98TxUIw9oOy80XdNq EFovEjJ0O4qlbg2qdkYQjnRpPHq7jL7yCs9ZjeSZKPjORgh0m5ArMtcb6mGlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFemURYfO+73/UaNlSqISDALK85EwHwYDVR0j BBgwFoAU2LwoV6KQjanpfu9CKiV0XYnygrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1y ZDYvMC9EOEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkMyODU3QTI5MDhEQTlF OTdFRUY0MjJBMjU3NDVEODlGMjgyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1yZDYvMC9E OEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPb2Lgg1s+1CUPCcX2jtU3ZoG+RX6n1B5KKAuQd377M1VRi8gQtCWyceUNjav k5w+LL3eJmJnWHVowQDuyhQsCTuY3N64n6Hxe19zMdzqHICJkmory0EneJbF//XJ K0qkVIw6nFwxPbOM2Ov1agSjd/CxXzPKQ/N1PPc58FW5eNlhE1UvpBr04FUtGHk9 kv/9HQsIwyzPLQbMI7mHPp7EU/NB7BnyV3Uj1naRuhHLWto2uCRWP3uyrDWolxCD hhyPkYPOJG2mUHNQrgyKLJI6opOaGX9+IkRVe6870/nVCm7inAoGczkb1a1t+jI9 oXLwFuKjFqwCXdvma0ougcaB8g== -----END CERTIFICATE-----Generated at Thu Oct 15 05:40:26 2026 by rpki-client