
Error: rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json)
Hash identifier: F+9sWMR1jiXIPzKPlP8dBfLk5KHReRCK9/Up5lClGjI=
Subject key identifier: CF:65:7C:2D:27:22:25:74:26:71:C5:33:24:36:D1:4A:50:18:22:9C
Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Certificate serial: 3B76E555F1AAC6B02B74890552C79A1E842A1EA1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
Manifest number: 04DE
Signing time: Sun 25 Oct 2026 03:03:02 +0000
Manifest this update: Sun 25 Oct 2026 02:58:02 +0000
Manifest next update: Mon 26 Oct 2026 04:22:02 +0000
Files and hashes: 1: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: mOp3kiStNxZTcZPg9C652hKVpp9ixCUT0EGSOx+WMz8=)
2: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: 801y3lfhDTZ8xivM8mU35dnl9g1g/QxpCrvzHpFsImc=)
3: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: wZ3FKrk16KxWrlfyyvwprkQ3rDHWEeBjvNQpTwjKSvg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Oct 2026 04:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:76:e5:55:f1:aa:c6:b0:2b:74:89:05:52:c7:9a:1e:84:2a:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Validity
Not Before: Oct 25 02:58:02 2026 GMT
Not After : Oct 26 04:22:02 2026 GMT
Subject: CN=CF657C2D272225742671C5332436D14A5018229C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:de:86:e4:1c:dc:86:a0:e2:82:b7:1b:ef:
75:34:cb:d4:a1:76:35:ca:1d:aa:55:a4:68:5d:cf:
47:67:69:a0:02:a3:ec:10:52:b3:90:95:fe:99:17:
77:26:fb:72:a6:1f:86:14:40:0b:d1:e0:a5:2e:ba:
38:82:e4:d1:bd:57:a5:00:17:fc:f3:78:fe:42:85:
85:31:e1:55:f5:4c:5a:bd:f7:fa:5c:2a:a2:26:cf:
9a:98:2c:b7:b2:f4:55:cf:01:5d:c2:e7:ef:a1:8b:
15:3b:34:a0:b2:a0:1d:a6:c9:52:e7:2b:49:00:5f:
b1:b4:4f:21:8a:a3:99:89:49:50:f1:27:c4:a8:e0:
09:70:a9:93:5e:b9:85:b0:e9:02:07:a3:9c:1d:16:
b3:3b:2f:41:38:ba:49:b3:f4:ff:68:c5:da:c4:da:
8c:7e:48:4c:8f:c4:37:c0:a3:b4:69:4b:e7:28:3c:
a8:f2:06:72:89:cc:33:62:f8:32:f6:f6:9a:dd:43:
f8:72:59:d9:da:34:29:29:9e:f6:ea:78:e3:b7:3b:
0f:0b:54:f2:52:7b:78:10:c5:c5:1d:fd:a5:83:6e:
d9:c3:35:60:c3:b6:07:a5:a2:52:74:fd:57:08:ab:
d4:17:a6:79:91:4f:67:4d:b4:5a:85:3f:e5:68:ec:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:7C:2D:27:22:25:74:26:71:C5:33:24:36:D1:4A:50:18:22:9C
X509v3 Authority Key Identifier:
keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:51:28:1d:72:46:a4:03:1c:8f:61:a1:7b:0f:81:da:6e:
94:09:f3:e5:ca:c9:11:e7:01:fe:be:7a:62:3a:42:97:04:2a:
c3:c4:48:2b:7e:4c:52:d6:a5:ae:e7:fb:2b:81:70:15:e2:17:
12:49:ae:68:52:3b:ca:99:9a:20:ba:32:22:68:4e:70:dd:74:
ed:09:e3:2c:72:94:10:96:86:ee:dc:37:64:74:e1:6f:87:af:
8e:5f:e9:24:20:a0:97:9d:4b:5c:3c:4a:fe:3a:3f:e2:7b:29:
1b:2c:b7:f5:4b:cd:a4:f8:92:e5:5e:f7:b5:26:fe:fa:20:a4:
59:bf:c7:8c:1b:04:b6:77:35:94:51:93:c3:f4:53:47:2b:59:
98:50:46:e3:36:6d:2d:76:76:46:d7:bb:74:6d:0f:0c:49:de:
07:18:34:97:be:b2:45:34:f5:e3:13:bb:6a:e9:41:b0:6c:01:
90:25:67:7e:90:84:3c:8c:3d:a6:61:ea:b0:14:91:29:e3:22:
94:8e:1d:13:ee:0c:67:21:78:5f:e1:d2:53:5b:28:2a:cb:c7:
b7:8d:b5:22:b2:a9:b7:11:c0:f3:85:f1:bf:64:87:3f:28:54:
51:bf:82:ff:b8:52:31:64:ca:9b:50:32:96:53:60:d6:1c:7d:
d9:ec:60:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO3blVfGqxrArdIkFUseaHoQqHqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG
RTJDOUUxQTAeFw0yNjEwMjUwMjU4MDJaFw0yNjEwMjYwNDIyMDJaMDMxMTAvBgNV
BAMTKENGNjU3QzJEMjcyMjI1NzQyNjcxQzUzMzI0MzZEMTRBNTAxODIyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNN6G5BzchqDigrcb73U0y9Sh
djXKHapVpGhdz0dnaaACo+wQUrOQlf6ZF3cm+3KmH4YUQAvR4KUuujiC5NG9V6UA
F/zzeP5ChYUx4VX1TFq99/pcKqImz5qYLLey9FXPAV3C5++hixU7NKCyoB2myVLn
K0kAX7G0TyGKo5mJSVDxJ8So4AlwqZNeuYWw6QIHo5wdFrM7L0E4ukmz9P9oxdrE
2ox+SEyPxDfAo7RpS+coPKjyBnKJzDNi+DL29prdQ/hyWdnaNCkpnvbqeOO3Ow8L
VPJSe3gQxcUd/aWDbtnDNWDDtgelolJ0/VcIq9QXpnmRT2dNtFqFP+Vo7EcTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUz2V8LSciJXQmccUzJDbRSlAYIpwwHwYDVR0j
BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0
NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB
QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B
QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYBlRKB1yRqQDHI9hoXsPgdpulAnz5crJEecB/r56YjpClwQqw8RIK35MUtal
ruf7K4FwFeIXEkmuaFI7ypmaILoyImhOcN107QnjLHKUEJaG7tw3ZHThb4evjl/p
JCCgl51LXDxK/jo/4nspGyy39UvNpPiS5V73tSb++iCkWb/HjBsEtnc1lFGTw/RT
RytZmFBG4zZtLXZ2Rte7dG0PDEneBxg0l76yRTT14xO7aulBsGwBkCVnfpCEPIw9
pmHqsBSRKeMilI4dE+4MZyF4X+HSU1soKsvHt421IrKptxHA84Xxv2SHPyhUUb+C
/7hSMWTKm1AyllNg1hx92exgBA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 21:03:08 2026 by rpki-client