
Error: rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File: F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier: KnHi4Gx83Z/LkYE2Un5sWyAkTLayIjetWxKypUwEHts=
Subject key identifier: E2:AB:9F:A1:CF:FC:12:77:C5:D3:9F:FD:26:C3:3A:0B:C2:65:38:D1
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer: /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial: 25A9D472B8599DED3D9CF90ADBB6C72B896CE07F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number: 04C3
Signing time: Sun 11 Oct 2026 04:54:28 +0000
Manifest this update: Sun 11 Oct 2026 04:49:28 +0000
Manifest next update: Mon 12 Oct 2026 05:24:28 +0000
Files and hashes: 1: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: 1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=)
2: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=)
3: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: 67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=)
4: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: oQBAXPZji36RfnVMVJVINpqYcweI93PKAZNd2d5Fqk0=)
5: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=)
6: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: 7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=)
7: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: Ny9Fvky013bp8WK5sYukQjlLTzc5ByEuXAzzHBLFDvM=)
8: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: SIqOp4C7cyQZnE8lRZeUR8CavFJ39Zvz6esDq7CWol8=)
9: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: 8iVmccCObAe8NicDmn1CKO+ITDAM6KsmBd6esHYUw5A=)
10: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: pyCdUGZA/KCjV2vuJfmjdtjHYaDSd98SlnH0/zdU7AU=)
11: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: IUn9Ibzt5h8hvPxl4OpQ9/sJG+I32FM0kwk3S6Jyd+I=)
12: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: A87ATHnOfq+iPA/HmwNUzY0wG/yof3krOeM5w1KT9tc=)
13: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=)
14: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: Ps5eAWxFIORCBQJUqngiQHTfxyf27j7EqLZK/ijEB14=)
15: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=)
16: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: CmPxrqFXNBYAuiTeOwbtYeVu27GG1fvYntO4o7Wna5g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 05:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a9:d4:72:b8:59:9d:ed:3d:9c:f9:0a:db:b6:c7:2b:89:6c:e0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Validity
Not Before: Oct 11 04:49:28 2026 GMT
Not After : Oct 12 05:24:28 2026 GMT
Subject: CN=E2AB9FA1CFFC1277C5D39FFD26C33A0BC26538D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:c5:5c:b4:e7:17:92:32:1e:ee:7c:ab:01:
e7:14:f7:45:3e:5a:e1:2b:7c:40:d8:73:f7:9d:fc:
45:e4:89:15:59:94:25:86:4a:3a:3f:c3:9c:16:57:
ca:ca:5a:db:d3:23:71:a6:85:85:46:87:3f:5e:d1:
ee:5b:08:b5:a8:81:eb:f9:88:90:b2:7f:44:db:26:
ba:69:3c:2b:f1:45:2c:87:83:55:4e:2d:ec:2e:f6:
60:96:18:f1:8b:ab:c0:a1:d2:67:08:24:6d:57:97:
20:b7:52:30:a1:90:58:08:19:5f:fd:73:a2:74:6c:
9c:75:1c:1c:f2:e2:ce:0a:05:6d:78:cb:7c:64:87:
51:20:75:38:1d:3f:b5:94:d4:8c:b3:20:93:73:14:
2c:a3:2a:f7:df:52:59:55:a6:99:99:a3:e6:ed:74:
bb:48:f9:8d:5b:b9:78:02:f3:15:cb:cd:10:58:00:
a9:c4:ad:7c:fe:95:8f:c5:61:0d:7b:e5:e6:2f:59:
f9:0d:4f:5b:be:67:06:74:93:d3:3d:f4:5a:30:36:
44:73:d9:96:73:f2:ce:4b:07:df:41:0e:22:de:ba:
84:2a:36:d3:f0:27:ab:d7:c1:b4:a4:cd:c5:fb:60:
00:46:d5:56:7d:d8:2a:a7:0f:43:b2:47:ae:3a:5c:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:9F:A1:CF:FC:12:77:C5:D3:9F:FD:26:C3:3A:0B:C2:65:38:D1
X509v3 Authority Key Identifier:
keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:0d:21:d0:56:af:59:7f:39:7c:63:1c:af:27:b7:68:c9:
dc:0a:a2:22:f8:20:56:e2:a4:65:f6:4a:90:57:9a:f9:52:40:
62:42:65:01:35:9c:9b:94:a4:30:a1:ca:48:bf:f2:54:12:8b:
07:38:39:d6:6c:c7:d2:b1:1d:cf:8f:fb:9f:68:9c:18:e6:2a:
8d:4d:2c:f2:4a:bd:0b:b0:58:84:32:26:2e:ac:c6:42:e7:9b:
17:f2:6b:f9:16:6a:61:b0:06:f5:71:a3:15:50:6b:32:d5:31:
b2:36:bf:a2:3f:d3:be:31:4d:3d:37:4a:b6:14:71:69:2b:b7:
8c:9d:31:82:c5:71:6d:b0:e7:83:eb:36:3d:11:d1:03:94:bd:
13:c0:bc:4b:f9:b4:6a:cd:e3:81:8e:8e:6f:f0:31:23:b1:55:
97:23:09:f3:fd:8d:71:a3:c7:5f:f6:66:96:b6:ca:20:f5:f8:
ec:73:59:e9:21:80:81:f6:ee:04:2b:6f:a9:9a:fd:56:aa:40:
ad:42:0d:5f:72:99:f2:2e:f1:d0:5f:56:c7:db:03:fe:0f:b7:
a7:d3:e9:64:a5:01:cc:b1:b5:92:bb:44:15:4d:4c:ef:2e:ca:
c1:a0:1d:f3:12:86:43:55:75:5d:a3:b6:d0:08:fb:ef:1d:93:
a2:b4:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:31:31 2026 by rpki-client