Error: rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft File: DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft (raw, json) Hash identifier: E3sMVstAy61jzFQHzLhh875AHbIUJkcmctKc4+LoSJ4= Subject key identifier: E1:F7:D9:7E:70:F7:38:6A:F7:A7:CA:6F:7C:A9:CE:8A:9A:1D:10:8A Authority key identifier: DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA Certificate issuer: /CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA Certificate serial: 1EEC3C7217CDF390384D0119A1E89A43E81B0F44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft Manifest number: 8D Signing time: Mon 12 Oct 2026 23:51:40 +0000 Manifest this update: Mon 12 Oct 2026 23:46:40 +0000 Manifest next update: Wed 14 Oct 2026 02:51:40 +0000 Files and hashes: 1: DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl (hash: JyTp5M/Rkc7ruvjieVR5Sl5f5I3z/dBhHixLgt2kjLM=) 2: 323830343a386565303a3a2f33322d313238203d3e20323733343533.roa (hash: qrT5F7w5lsQJT9f2S7Tiy14nPsm7JfCI43Xmrwr6vRA=) 3: 34352e3136342e3138372e302f32342d3332203d3e20323733343533.roa (hash: RS7Ru0U22xf6KcCDKoQtbNH5gu/B/qKynCsuEPCgqjk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 02:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ec:3c:72:17:cd:f3:90:38:4d:01:19:a1:e8:9a:43:e8:1b:0f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA Validity Not Before: Oct 12 23:46:40 2026 GMT Not After : Oct 14 02:51:40 2026 GMT Subject: CN=E1F7D97E70F7386AF7A7CA6F7CA9CE8A9A1D108A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:70:5b:bd:75:66:b2:1b:ac:69:36:30:d5: f7:60:39:22:03:8c:df:95:d4:a1:6a:32:cb:2f:f3: 0e:f7:15:d8:50:35:98:e7:0a:f7:6b:60:cf:4e:e8: 27:0c:99:00:e3:cf:db:2c:0e:34:4a:c3:35:8b:ec: 30:25:62:d0:99:a2:1a:7e:18:b4:68:ec:8a:3b:8e: df:7d:f8:0d:6f:75:d8:ea:fa:7b:73:04:8e:33:73: e6:90:3e:a0:f0:1a:35:a1:64:6d:51:19:ad:45:47: c9:3a:93:34:6d:82:2e:3b:52:08:65:b2:43:0f:e3: c4:69:ba:bd:d7:6f:fe:79:9f:37:a0:1e:3a:88:70: ed:15:d1:55:3c:1b:3e:ba:22:f3:23:ba:5b:51:44: ce:0a:ea:28:c1:ab:f1:e2:24:ef:ad:c0:42:4b:70: 1a:c3:6f:c5:a8:db:0c:fd:92:fe:ad:6e:3d:c8:8e: e7:9d:10:2f:a2:4d:2f:e3:5a:42:0b:18:49:d3:e4: 91:eb:40:83:b5:9b:72:6b:49:45:93:1b:c0:a1:28: 13:f7:b0:6f:12:29:33:3b:66:15:24:22:3e:35:f4: ea:50:da:dc:d5:f6:0f:ef:74:d1:b9:cc:89:fb:5b: 7b:a1:76:01:c1:6a:32:61:bf:e3:6c:6b:48:98:fe: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F7:D9:7E:70:F7:38:6A:F7:A7:CA:6F:7C:A9:CE:8A:9A:1D:10:8A X509v3 Authority Key Identifier: keyid:DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1f:37:88:26:01:6c:a8:90:62:2b:2c:5d:f2:90:bd:f7:65: dc:3a:26:e6:f6:2f:9e:a4:df:ba:dc:7b:79:ee:79:3a:73:7d: 16:b5:69:2d:9d:17:42:7c:bd:c7:b2:dc:e7:fb:36:d4:e1:25: 86:1b:8d:c2:83:c3:5e:88:4b:4e:16:13:8a:a0:dc:93:c5:a7: b2:6d:18:5e:50:2f:5d:d0:bd:53:15:91:69:8f:d2:d1:ee:4b: 38:64:d4:a3:e3:53:88:0e:35:5c:43:04:5b:a7:35:df:40:6c: 6f:15:4b:7c:8b:a3:cb:9c:b5:2c:b4:13:34:3c:8f:53:20:42: 55:50:d5:f6:e5:cd:44:4d:91:25:f7:83:74:b0:a3:a3:37:b2: 34:7f:79:22:4d:d4:83:cf:34:0e:f1:dc:74:4a:49:20:73:66: a8:04:52:6b:0c:75:69:e7:3d:6d:97:86:92:41:b1:30:d3:8c: 69:d8:eb:d8:d4:04:da:b9:af:ad:2f:c3:bd:28:90:61:ca:51: c1:b0:07:5e:2f:b4:8d:fb:83:fa:ff:54:96:27:a3:5e:e3:0e: ba:7a:27:27:cc:9f:c9:92:77:82:7f:9f:90:07:c4:0a:d1:56: c8:ed:ad:72:5b:cf:ac:56:ac:d3:4e:e5:3d:36:e8:4b:be:bf: b9:e2:2b:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHuw8chfN85A4TQEZoeiaQ+gbD0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBMTdFRUQzQ0EyNDVCN0FFOEQzRTc0ODM5RTExN0Q2 NjE4QUZCQTAeFw0yNjEwMTIyMzQ2NDBaFw0yNjEwMTQwMjUxNDBaMDMxMTAvBgNV BAMTKEUxRjdEOTdFNzBGNzM4NkFGN0E3Q0E2RjdDQTlDRThBOUExRDEwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRaHBbvXVmshusaTYw1fdgOSID jN+V1KFqMssv8w73FdhQNZjnCvdrYM9O6CcMmQDjz9ssDjRKwzWL7DAlYtCZohp+ GLRo7Io7jt99+A1vddjq+ntzBI4zc+aQPqDwGjWhZG1RGa1FR8k6kzRtgi47Ughl skMP48Rpur3Xb/55nzegHjqIcO0V0VU8Gz66IvMjultRRM4K6ijBq/HiJO+twEJL cBrDb8Wo2wz9kv6tbj3IjuedEC+iTS/jWkILGEnT5JHrQIO1m3JrSUWTG8ChKBP3 sG8SKTM7ZhUkIj419OpQ2tzV9g/vdNG5zIn7W3uhdgHBajJhv+Nsa0iY/g5dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4ffZfnD3OGr3p8pvfKnOipodEIowHwYDVR0j BBgwFoAU26F+7TyiRbeujT50g54RfWYYr7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEM0dHRhaFdIQnBoRHNodUVkU1o2eEVxcGMxY0dWa3FROWJmcDdRWnlF RjYvMC9EQkExN0VFRDNDQTI0NUI3QUU4RDNFNzQ4MzlFMTE3RDY2MThBRkJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTE3RUVEM0NBMjQ1QjdB RThEM0U3NDgzOUUxMTdENjYxOEFGQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEM0dHRhaFdIQnBoRHNodUVkU1o2eEVxcGMxY0dWa3FROWJmcDdRWnlFRjYvMC9E QkExN0VFRDNDQTI0NUI3QUU4RDNFNzQ4MzlFMTE3RDY2MThBRkJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQR83iCYBbKiQYissXfKQvfdl3Dom5vYvnqTfutx7ee55OnN9FrVpLZ0XQny9 x7Lc5/s21OElhhuNwoPDXohLThYTiqDck8Wnsm0YXlAvXdC9UxWRaY/S0e5LOGTU o+NTiA41XEMEW6c130BsbxVLfIujy5y1LLQTNDyPUyBCVVDV9uXNRE2RJfeDdLCj ozeyNH95Ik3Ug880DvHcdEpJIHNmqARSawx1aec9bZeGkkGxMNOMadjr2NQE2rmv rS/DvSiQYcpRwbAHXi+0jfuD+v9UliejXuMOunonJ8yfyZJ3gn+fkAfECtFWyO2t clvPrFas007lPTboS76/ueIrRg== -----END CERTIFICATE-----Generated at Tue Oct 13 17:26:45 2026 by rpki-client