Error: rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft File: 69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft (raw, json) Hash identifier: jcUNFDknDVIAi+ntYBUuqaEQDt7aonn0Jm3c0PqpNDs= Subject key identifier: 29:8C:BD:97:95:44:2A:D9:9D:2C:44:3F:7A:09:50:63:12:D8:16:D8 Authority key identifier: 69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D Certificate issuer: /CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D Certificate serial: 52C576F62790A8373B54790F81488935F90EBB89 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft Manifest number: 0244 Signing time: Fri 30 Oct 2026 18:03:30 +0000 Manifest this update: Fri 30 Oct 2026 17:58:30 +0000 Manifest next update: Sat 31 Oct 2026 20:36:30 +0000 Files and hashes: 1: 323830343a363833303a3a2f33322d313238203d3e20323639363734.roa (hash: Fdw1r4HO1Z5ucfsNC4mM3ebSjPR3pr2NgPtWlCVYxZU=) 2: 69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl (hash: zPsAgoNt0UWAzDkXAiZKy6w0ziZBuVXy6QrocoRkcmw=) 3: 34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa (hash: ucwOTAiUpC1umNO4VLlILmuim9sLKQLMNZlZJo6/fsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 20:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c5:76:f6:27:90:a8:37:3b:54:79:0f:81:48:89:35:f9:0e:bb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D Validity Not Before: Oct 30 17:58:30 2026 GMT Not After : Oct 31 20:36:30 2026 GMT Subject: CN=298CBD9795442AD99D2C443F7A09506312D816D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:b5:bf:4b:ca:82:b9:27:d7:c9:08:d2:2e: a6:86:3f:df:22:37:ae:bc:2a:e9:5b:6e:d2:a4:d6: 1c:ed:46:ae:e6:97:35:9f:9c:17:3b:e2:81:c8:e4: c9:b1:b7:a7:0c:16:bd:9b:d3:46:ca:37:da:f3:cb: 6e:9c:d1:85:6f:8d:5c:ca:b3:e9:07:98:b5:e9:8a: c4:56:c7:40:61:50:66:fc:9c:9e:54:bf:92:dd:97: 55:98:ee:b5:8f:dc:e6:e7:c6:38:b9:81:0a:9e:87: 1d:af:45:a2:64:77:51:80:e8:12:09:75:64:e8:8a: 20:e9:56:16:0f:0b:69:af:41:1b:6c:4b:50:ec:bb: 31:90:0f:e3:eb:ab:e4:c2:6b:82:8a:91:4f:3d:4a: ac:7a:40:5f:b9:76:1d:e4:76:dd:6a:31:48:2b:34: 00:f6:7c:f6:c4:f6:af:41:40:50:04:7f:e9:c6:cd: 76:db:0a:35:84:01:83:a7:d2:4f:bc:f8:05:62:ca: 91:be:6c:71:22:e0:61:8e:34:99:88:a7:32:1b:d5: 12:d1:89:51:2d:08:56:69:58:89:14:d0:2c:c5:53: 9e:be:74:82:08:b5:10:7d:15:12:63:e0:56:47:6f: 81:30:bb:7e:ea:c7:2a:9b:71:ea:47:d4:3f:91:b2: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:BD:97:95:44:2A:D9:9D:2C:44:3F:7A:09:50:63:12:D8:16:D8 X509v3 Authority Key Identifier: keyid:69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b0:69:50:4e:8e:c2:40:da:51:d2:31:da:47:48:5d:db:7c: 88:43:bf:a8:52:24:76:67:8a:ca:2f:1d:03:88:73:58:62:1a: a9:b0:de:51:70:74:8b:1e:88:66:e6:8c:17:aa:b8:4a:ba:b1: 16:7e:f7:bd:0e:1c:85:39:18:f4:41:db:12:b0:d3:44:58:97: d1:5f:b6:8c:8f:a7:8d:0e:ae:24:f9:1a:c2:bb:73:83:07:81: 80:5f:de:db:40:6e:4f:f8:70:8d:02:a2:05:83:b2:0a:37:f4: e8:be:c5:7b:d8:96:ae:98:49:00:c7:2d:58:ef:45:ad:db:e9: d7:b3:e4:cf:f1:4d:3a:5b:3a:d7:99:03:79:48:5e:80:95:99: 96:3c:72:df:7d:de:db:37:60:6d:42:48:ee:d1:50:bb:d2:7c: 65:a1:7e:1f:cc:47:8f:f6:a7:d8:65:bf:8e:06:8b:5c:aa:f6: d7:ef:43:16:2f:96:ac:83:5b:cd:14:d1:b5:2a:18:32:da:ce: 2a:65:b9:7c:ba:2c:1f:23:2d:60:34:77:f7:44:24:e8:a9:70: 97:ec:51:98:ba:fc:a5:93:0d:2d:e7:ec:85:3d:72:80:f1:41: f9:56:d9:81:78:88:9d:1a:86:fe:66:9d:70:0e:25:47:04:4d: cc:27:7a:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUsV29ieQqDc7VHkPgUiJNfkOu4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTIwRkE5MDIwRjI3OTczQ0Q3NkJFOTFGQkRFQjI4 QUQ3MzM2RDAeFw0yNjEwMzAxNzU4MzBaFw0yNjEwMzEyMDM2MzBaMDMxMTAvBgNV BAMTKDI5OENCRDk3OTU0NDJBRDk5RDJDNDQzRjdBMDk1MDYzMTJEODE2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJILW/S8qCuSfXyQjSLqaGP98i N668KulbbtKk1hztRq7mlzWfnBc74oHI5Mmxt6cMFr2b00bKN9rzy26c0YVvjVzK s+kHmLXpisRWx0BhUGb8nJ5Uv5Ldl1WY7rWP3Obnxji5gQqehx2vRaJkd1GA6BIJ dWToiiDpVhYPC2mvQRtsS1DsuzGQD+Prq+TCa4KKkU89Sqx6QF+5dh3kdt1qMUgr NAD2fPbE9q9BQFAEf+nGzXbbCjWEAYOn0k+8+AViypG+bHEi4GGONJmIpzIb1RLR iVEtCFZpWIkU0CzFU56+dIIItRB9FRJj4FZHb4Ewu37qxyqbcepH1D+Rsh3rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKYy9l5VEKtmdLEQ/eglQYxLYFtgwHwYDVR0j BBgwFoAUac4g+pAg8nlzzXa+kfvesorXM20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFYb21CUUpkczVZcWFpd2hySmM1SHN0Z3lHdHZuRXZWbmFvN3BoVmFn UXkvMC82OUNFMjBGQTkwMjBGMjc5NzNDRDc2QkU5MUZCREVCMjhBRDczMzZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5Q0UyMEZBOTAyMEYyNzk3 M0NENzZCRTkxRkJERUIyOEFENzMzNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGFYb21CUUpkczVZcWFpd2hySmM1SHN0Z3lHdHZuRXZWbmFvN3BoVmFnUXkvMC82 OUNFMjBGQTkwMjBGMjc5NzNDRDc2QkU5MUZCREVCMjhBRDczMzZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7BpUE6OwkDaUdIx2kdIXdt8iEO/qFIkdmeKyi8dA4hzWGIaqbDeUXB0ix6I ZuaMF6q4SrqxFn73vQ4chTkY9EHbErDTRFiX0V+2jI+njQ6uJPkawrtzgweBgF/e 20BuT/hwjQKiBYOyCjf06L7Fe9iWrphJAMctWO9Frdvp17Pkz/FNOls615kDeUhe gJWZljxy333e2zdgbUJI7tFQu9J8ZaF+H8xHj/an2GW/jgaLXKr21+9DFi+WrINb zRTRtSoYMtrOKmW5fLosHyMtYDR390Qk6Klwl+xRmLr8pZMNLefshT1ygPFB+VbZ gXiInRqG/madcA4lRwRNzCd6ZQ== -----END CERTIFICATE-----Generated at Sat Oct 31 06:24:05 2026 by rpki-client