Error: rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft File: 7A509BA48E79904F69690722D65AADB9AD3A47AB.mft (raw, json) Hash identifier: XEAdDEOrQhleuDCJyM7BnZmeEBIAoq8FZ1b5D9mfPOg= Subject key identifier: AA:F0:A4:B3:A4:5E:3C:EF:46:D5:A6:3C:9D:AC:92:B2:FD:3D:95:02 Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Certificate serial: 14FD9E4F9BDEDAFC172AD12719F8B9CF9E76B4A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft Manifest number: 04CE Signing time: Tue 13 Oct 2026 03:40:00 +0000 Manifest this update: Tue 13 Oct 2026 03:35:00 +0000 Manifest next update: Wed 14 Oct 2026 05:12:00 +0000 Files and hashes: 1: 3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (hash: qnh7T+eJAR/MJugLJSGGvmqc3Mdc/ozgEo6SBeIon3k=) 2: 7A509BA48E79904F69690722D65AADB9AD3A47AB.crl (hash: bUELJMYNytUyB5xMbyP+kCMW3YrbvHEQ9qrshxYTxyA=) 3: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: aM6n6LxePrreI7fzZ1QEFaarrtUwigzRl0yF7ieliBE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 05:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:9e:4f:9b:de:da:fc:17:2a:d1:27:19:f8:b9:cf:9e:76:b4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Validity Not Before: Oct 13 03:35:00 2026 GMT Not After : Oct 14 05:12:00 2026 GMT Subject: CN=AAF0A4B3A45E3CEF46D5A63C9DAC92B2FD3D9502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:86:8f:5e:97:93:ac:a8:3f:37:1d:96:0b: f7:19:f1:4e:cb:83:9f:78:9c:c7:9f:dd:4b:83:12: d2:16:fb:c7:e3:07:ba:6e:4d:f7:ae:26:4e:74:f7: 56:13:8a:92:99:65:8e:a5:67:20:4c:09:e3:6e:15: 08:1e:01:c8:cd:bc:1c:e9:ff:ba:d9:66:5f:d4:2a: ce:31:92:d1:4d:5d:35:e3:75:3c:14:03:78:ec:a9: df:35:d3:e0:3a:58:c4:52:d2:33:d3:de:74:b6:b8: bd:6f:21:25:82:37:b0:47:69:4f:96:12:75:54:4c: 1b:06:4e:38:1d:ce:0e:99:c0:9e:4a:7a:16:0a:af: ca:d1:2e:04:b9:59:21:f4:be:1e:1a:87:93:5c:98: 21:1f:08:6f:db:ac:60:72:99:5b:55:d7:b9:6f:8c: 1f:6c:fd:e3:69:5f:c4:e9:f9:47:99:b5:e9:02:56: 51:a8:a0:ae:e3:3e:24:df:61:d1:ff:9b:78:19:36: a1:85:21:18:f6:07:8a:20:d8:7d:dc:25:ac:7b:52: b8:c2:26:58:b4:6d:ca:87:6a:44:d2:c8:81:6b:1d: bf:57:1a:fa:85:a3:0b:f7:92:61:2d:38:26:86:81: 15:3a:2d:53:00:9c:54:cc:8b:53:fb:fc:b9:ad:06: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:A4:B3:A4:5E:3C:EF:46:D5:A6:3C:9D:AC:92:B2:FD:3D:95:02 X509v3 Authority Key Identifier: keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:45:f3:f4:7f:c6:db:b3:12:86:10:0f:87:8f:ba:5d:44: 07:ef:55:6c:69:81:47:d5:50:ed:f4:83:26:5d:e9:3e:d7:b9: d0:c7:d8:b9:1b:f4:f6:0a:ce:a6:a7:c0:77:88:c9:86:71:f8: 63:45:94:df:1c:93:38:0b:c7:49:01:39:45:de:6a:85:a3:89: b4:64:ea:61:85:83:42:cf:49:7a:c2:e5:b8:34:b0:e6:78:ce: c6:52:e7:8b:cc:27:94:6e:b1:59:29:61:28:5d:a0:1e:05:8c: a2:f7:05:d7:50:34:91:5e:49:41:cd:31:9a:9c:a9:52:7c:86: ee:41:34:91:fa:6f:93:1d:ab:ae:ca:4c:56:56:98:28:93:ec: fb:79:59:27:36:89:d4:a1:e7:b3:f3:a8:5d:d0:dc:3f:d1:39: 3f:1a:47:d1:f7:ca:21:7e:c8:04:0a:4d:0f:76:7e:fc:60:43: 14:6b:95:12:17:fe:fc:75:65:6d:ae:88:c4:f4:ff:90:28:e0: 66:72:5c:2f:95:fd:fc:a4:c3:b1:27:89:4a:4d:37:be:84:b6: 44:0e:1f:7a:af:4e:ae:1a:9d:cb:a9:4b:e1:45:49:0a:e5:62: 63:f2:32:61:38:8e:b6:65:4a:bf:ee:8f:83:6f:9d:c4:86:25: 81:7c:d3:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFP2eT5ve2vwXKtEnGfi5z552tKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1MDlCQTQ4RTc5OTA0RjY5NjkwNzIyRDY1QUFEQjlB RDNBNDdBQjAeFw0yNjEwMTMwMzM1MDBaFw0yNjEwMTQwNTEyMDBaMDMxMTAvBgNV BAMTKEFBRjBBNEIzQTQ1RTNDRUY0NkQ1QTYzQzlEQUM5MkIyRkQzRDk1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2oaPXpeTrKg/Nx2WC/cZ8U7L g594nMef3UuDEtIW+8fjB7puTfeuJk5091YTipKZZY6lZyBMCeNuFQgeAcjNvBzp /7rZZl/UKs4xktFNXTXjdTwUA3jsqd810+A6WMRS0jPT3nS2uL1vISWCN7BHaU+W EnVUTBsGTjgdzg6ZwJ5KehYKr8rRLgS5WSH0vh4ah5NcmCEfCG/brGBymVtV17lv jB9s/eNpX8Tp+UeZtekCVlGooK7jPiTfYdH/m3gZNqGFIRj2B4og2H3cJax7UrjC Jli0bcqHakTSyIFrHb9XGvqFowv3kmEtOCaGgRU6LVMAnFTMi1P7/LmtBsr5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqvCks6RePO9G1aY8naySsv09lQIwHwYDVR0j BBgwFoAUelCbpI55kE9paQci1lqtua06R6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO Rk0vMS83QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBNTA5QkE0OEU3OTkwNEY2 OTY5MDcyMkQ2NUFBREI5QUQzQTQ3QUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpORk0vMS83 QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhsdF8/R/xtuzEoYQD4ePul1EB+9VbGmBR9VQ7fSDJl3pPte50MfYuRv09grO pqfAd4jJhnH4Y0WU3xyTOAvHSQE5Rd5qhaOJtGTqYYWDQs9JesLluDSw5njOxlLn i8wnlG6xWSlhKF2gHgWMovcF11A0kV5JQc0xmpypUnyG7kE0kfpvkx2rrspMVlaY KJPs+3lZJzaJ1KHns/OoXdDcP9E5PxpH0ffKIX7IBApND3Z+/GBDFGuVEhf+/HVl ba6IxPT/kCjgZnJcL5X9/KTDsSeJSk03voS2RA4feq9Orhqdy6lL4UVJCuViY/Iy YTiOtmVKv+6Pg2+dxIYlgXzTpQ== -----END CERTIFICATE-----Generated at Tue Oct 13 08:53:23 2026 by rpki-client