
Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier: FQLi9UMYmGqJ2L9niwDCnn/o1MafOQyDM5Jk9O4K6cQ=
Subject key identifier: B5:9E:7A:07:09:40:FD:B2:E4:9B:CB:EA:67:43:84:1F:0D:AC:4A:58
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial: 57403CB2507EA04F007365998A79FD0EA70F9CA6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number: 04CA
Signing time: Wed 14 Oct 2026 12:51:03 +0000
Manifest this update: Wed 14 Oct 2026 12:46:03 +0000
Manifest next update: Thu 15 Oct 2026 14:53:03 +0000
Files and hashes: 1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: rNX9uRgjgMa24Z7lcsLSl2Jea+6kq0fBKNPQ0evT0qo=)
2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
3: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 14:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:40:3c:b2:50:7e:a0:4f:00:73:65:99:8a:79:fd:0e:a7:0f:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Validity
Not Before: Oct 14 12:46:03 2026 GMT
Not After : Oct 15 14:53:03 2026 GMT
Subject: CN=B59E7A070940FDB2E49BCBEA6743841F0DAC4A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:16:a7:1d:a9:5b:08:39:ff:f2:ee:89:6f:
72:43:4b:98:39:e1:58:00:f5:6f:2c:98:ce:56:6e:
1d:18:c3:af:d3:c6:ec:dd:63:4c:24:93:06:37:e0:
56:81:2c:bc:03:48:f9:de:a9:60:49:2c:6e:9f:0c:
51:4d:84:80:bf:4b:26:ab:61:0a:69:cc:75:de:12:
8e:5e:79:4c:17:f6:47:b4:44:fa:86:eb:81:cd:aa:
b7:11:f5:e4:f3:60:b4:79:9e:95:75:bb:94:6d:7a:
81:cd:35:ac:18:ad:fe:d4:6a:4a:29:54:08:3e:e9:
d2:a0:eb:65:65:2a:c5:d9:b9:38:24:1b:43:10:5c:
7b:9f:41:d5:24:17:06:e5:74:f2:1b:49:b3:f1:e7:
a8:12:53:34:4c:36:94:a7:b0:3d:98:26:76:b7:56:
30:73:b9:66:d5:f3:1a:cd:15:bc:75:80:91:12:33:
d7:54:b4:24:99:04:a1:0d:af:fa:c0:f6:03:a7:9c:
09:ab:2f:b5:52:d2:19:23:ff:d7:c7:8b:ea:c0:8d:
a6:58:ab:f1:ee:55:ec:1d:9e:62:85:60:33:39:63:
47:93:60:45:1b:8a:c0:98:b2:f0:55:cd:90:bf:53:
13:3c:86:2b:e2:01:23:3a:bc:52:3b:49:f1:c5:dc:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:7A:07:09:40:FD:B2:E4:9B:CB:EA:67:43:84:1F:0D:AC:4A:58
X509v3 Authority Key Identifier:
keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:b6:e1:4d:53:a3:a2:e0:2f:7f:e8:8a:8a:14:79:98:bb:
f0:b5:ba:b9:43:ee:92:a1:c8:8d:c8:8b:06:cb:38:c0:fa:83:
f2:3a:a3:81:10:32:68:0f:67:b7:dc:61:8e:6f:ba:88:32:75:
e1:64:37:4f:49:a1:b2:69:1d:a6:39:54:3c:48:7f:ef:3c:03:
bd:93:01:e0:17:0c:26:98:97:c0:64:e2:b8:64:a2:2c:b8:d1:
5f:41:2e:e8:30:90:45:a3:b1:fc:2e:b6:c6:bc:56:59:9c:e0:
53:45:d3:1f:3f:20:9a:6e:16:12:75:e4:6a:86:69:da:b7:b2:
49:b6:c2:63:0f:45:0b:ce:01:36:42:15:69:ed:51:7d:73:60:
64:43:c6:cd:76:58:0e:1d:62:c0:02:29:9b:5d:40:63:32:15:
56:76:ab:96:e1:a4:b1:5e:d5:64:3f:6e:3d:a0:33:35:2f:34:
b5:96:ea:84:d9:d9:cf:4b:13:8a:8d:07:a8:64:0d:de:6a:f2:
92:21:a5:93:d8:04:9d:12:a3:c9:7d:c1:95:04:cf:89:fe:85:
47:b9:52:00:28:d4:4c:7f:2a:d8:e0:41:c6:7d:45:c9:38:2d:
a3:59:69:34:76:69:59:85:2c:62:1b:94:20:3d:db:2d:d9:45:
f8:b8:1a:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV0A8slB+oE8Ac2WZinn9DqcPnKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBOEY1M0YzNDI2Qzk4M0NBODdENUQ3QUNGNkFCNUUx
NDM3MTU1NDAeFw0yNjEwMTQxMjQ2MDNaFw0yNjEwMTUxNDUzMDNaMDMxMTAvBgNV
BAMTKEI1OUU3QTA3MDk0MEZEQjJFNDlCQ0JFQTY3NDM4NDFGMERBQzRBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmqRanHalbCDn/8u6Jb3JDS5g5
4VgA9W8smM5Wbh0Yw6/TxuzdY0wkkwY34FaBLLwDSPneqWBJLG6fDFFNhIC/Syar
YQppzHXeEo5eeUwX9ke0RPqG64HNqrcR9eTzYLR5npV1u5RteoHNNawYrf7Uakop
VAg+6dKg62VlKsXZuTgkG0MQXHufQdUkFwbldPIbSbPx56gSUzRMNpSnsD2YJna3
VjBzuWbV8xrNFbx1gJESM9dUtCSZBKENr/rA9gOnnAmrL7VS0hkj/9fHi+rAjaZY
q/HuVewdnmKFYDM5Y0eTYEUbisCYsvBVzZC/UxM8hiviASM6vFI7SfHF3Js9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtZ56BwlA/bLkm8vqZ0OEHw2sSlgwHwYDVR0j
BBgwFoAUmaj1PzQmyYPKh9XXrParXhQ3FVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG
aXUvMS85OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QThGNTNGMzQyNkM5ODND
QTg3RDVEN0FDRjZBQjVFMTQzNzE1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRGaXUvMS85
OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlkW24U1To6LgL3/oiooUeZi78LW6uUPukqHIjciLBss4wPqD8jqjgRAyaA9n
t9xhjm+6iDJ14WQ3T0mhsmkdpjlUPEh/7zwDvZMB4BcMJpiXwGTiuGSiLLjRX0Eu
6DCQRaOx/C62xrxWWZzgU0XTHz8gmm4WEnXkaoZp2reySbbCYw9FC84BNkIVae1R
fXNgZEPGzXZYDh1iwAIpm11AYzIVVnarluGksV7VZD9uPaAzNS80tZbqhNnZz0sT
io0HqGQN3mrykiGlk9gEnRKjyX3BlQTPif6FR7lSACjUTH8q2OBBxn1FyTgto1lp
NHZpWYUsYhuUID3bLdlF+Lgaqg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:42:12 2026 by rpki-client