
Error: rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier: iWZ2uN9WE/phfmK8f5oqhF7ZkGHynKUyNDixPuGNZPo=
Subject key identifier: F2:CA:5B:C8:0E:6C:FA:A0:BC:B7:DE:A3:49:ED:EF:5C:9F:13:E5:60
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial: 7FB26660A92362AEA2934078D9127A6438F6A932
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number: 04C6
Signing time: Sun 11 Oct 2026 12:40:04 +0000
Manifest this update: Sun 11 Oct 2026 12:35:04 +0000
Manifest next update: Mon 12 Oct 2026 14:06:04 +0000
Files and hashes: 1: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
2: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
3: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: Oa2nDW5UCOEvMFWvuO4sD/eggose7E8ZQk1Va1BvJTg=)
5: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
6: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
7: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
8: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 14:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b2:66:60:a9:23:62:ae:a2:93:40:78:d9:12:7a:64:38:f6:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Validity
Not Before: Oct 11 12:35:04 2026 GMT
Not After : Oct 12 14:06:04 2026 GMT
Subject: CN=F2CA5BC80E6CFAA0BCB7DEA349EDEF5C9F13E560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:cb:54:e0:3d:ab:32:82:d7:cd:8a:13:74:
d3:04:4c:aa:2d:da:eb:42:92:98:6a:b2:93:a8:89:
27:d3:0f:ab:b7:44:50:97:f7:8d:00:4e:91:cf:73:
08:39:71:10:df:79:c0:80:dd:15:aa:b9:c1:5e:e7:
77:c5:f7:0f:3a:0c:ce:6c:e3:b3:d0:05:49:38:3e:
01:d1:69:22:18:97:56:b6:61:2f:84:88:e1:3c:f1:
06:9a:bc:40:59:77:36:cd:2e:55:aa:e3:0f:6f:0a:
2a:70:41:be:b9:97:77:0a:68:f9:f0:88:4a:33:ee:
d7:eb:e2:a9:f2:93:e9:fd:d4:0a:26:75:f6:a4:93:
4e:a0:3c:54:c6:50:7a:8d:7d:5d:22:da:4e:28:7a:
b5:b8:2a:cc:fe:f7:e1:f9:37:5d:d5:ef:57:63:fd:
ca:be:9a:ef:7d:b1:73:a0:86:bf:d3:f1:08:0f:16:
5d:89:45:ee:79:d9:64:b8:4e:04:14:af:b7:a2:4d:
38:f9:3d:68:33:7e:2e:75:53:af:c1:ca:df:93:4e:
0c:35:b0:d9:5b:4b:7b:61:d8:e2:38:b5:6b:db:81:
d9:8f:19:7a:09:24:8d:61:24:e8:d9:7d:34:b5:ea:
88:94:28:3a:8d:7f:0a:63:61:1b:47:b4:91:e2:d1:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:5B:C8:0E:6C:FA:A0:BC:B7:DE:A3:49:ED:EF:5C:9F:13:E5:60
X509v3 Authority Key Identifier:
keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b9:d2:50:11:37:37:b6:d5:fd:73:81:05:0d:73:11:0d:ab:
15:77:52:5b:86:80:d4:4d:f8:0a:83:51:18:eb:4a:27:bb:e5:
6a:26:f0:6d:99:2d:02:9b:4c:fd:24:d4:21:bd:ac:a0:71:94:
53:5a:55:b4:42:eb:8b:ff:74:28:36:f0:0f:e1:7f:3b:2f:6b:
d5:27:75:14:cb:30:05:0b:01:be:99:ac:13:f5:32:45:1c:94:
06:ae:42:09:6c:45:8d:6e:61:cd:b8:6f:4d:92:a5:54:b0:e5:
a5:7c:cd:64:a6:c7:3d:aa:93:0b:bf:c9:5a:92:fb:47:31:81:
5f:d0:89:de:ac:88:31:84:39:c1:99:7b:0d:cf:55:df:4e:49:
d9:5f:1e:ac:e8:15:5c:c6:92:8a:e0:a7:08:da:20:cb:1f:c3:
86:79:8f:15:91:5a:0f:ef:c4:7e:a7:e7:92:41:95:81:5d:fb:
d3:6b:0e:32:68:ab:3b:7f:3d:a7:c1:2a:fd:06:5c:80:6d:f5:
9e:3f:79:7e:1f:38:a8:e0:9e:b6:0e:a1:34:80:35:8f:68:d6:
44:e1:34:58:80:78:ee:bb:15:44:37:7b:b5:8b:05:c9:c1:43:
6d:0e:c0:51:92:2f:76:2f:4e:6a:40:f5:d5:2c:c0:4a:e2:08:
48:4e:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:05:52 2026 by rpki-client