Error: rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft File: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft (raw, json) Hash identifier: rErU76fOnQrazhyqe85Nxt+4+oZKMXXK35nYTDKA1FQ= Subject key identifier: DD:09:95:3D:90:F4:73:7E:0D:44:72:74:40:43:F2:FE:49:1F:2C:EE Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0 Certificate issuer: /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0 Certificate serial: 22E4BAB6A430463E4BE273B5332DE7BDD9A3FFAF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft Manifest number: 04C1 Signing time: Mon 05 Oct 2026 16:40:01 +0000 Manifest this update: Mon 05 Oct 2026 16:35:01 +0000 Manifest next update: Tue 06 Oct 2026 17:18:01 +0000 Files and hashes: 1: 34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (hash: 1bgkEfX/ZiKH+p1a8vc8ehTtCBqKtbVVtw8qkL5lHGI=) 2: 34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (hash: O1px1yBgfGPgKN2tRciqp1LjemGUV5DFMNwWLnJOCE4=) 3: 34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (hash: 03Mqs/VxX4YlEDgZyihTQwdg0wG9WA4K0cWVShPcQ/0=) 4: 34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (hash: hducqS2ZdGZm+SE5GdXxUznr8Wm7+DXWX3dd+MnB8yI=) 5: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (hash: bf/O8ThUR/sxxfb+3RnCJKyXL2K/OaMkDOc8hSaDklY=) 6: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl (hash: u6srAIc53bb62mZPCCakvOWoLUVL4+7Px4143B0WZwk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 Oct 2026 17:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e4:ba:b6:a4:30:46:3e:4b:e2:73:b5:33:2d:e7:bd:d9:a3:ff:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0 Validity Not Before: Oct 5 16:35:01 2026 GMT Not After : Oct 6 17:18:01 2026 GMT Subject: CN=DD09953D90F4737E0D4472744043F2FE491F2CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:13:73:64:2c:f2:92:27:c6:7f:c7:fc:29: b4:29:d9:8e:7a:c6:d1:1e:b6:c0:3e:bd:1f:14:38: 5b:90:99:34:04:8d:a0:2b:95:84:66:5f:f2:01:0d: 35:b8:0d:75:a9:d2:e4:e7:1c:d0:00:1f:f3:fa:8f: 1c:a8:69:74:fe:89:52:c5:df:a1:d4:21:00:b3:01: fe:b2:dc:01:8d:c8:1b:ff:82:4c:91:f5:1b:13:bd: e7:ad:bb:dd:cc:8d:f5:02:f2:21:9e:04:11:5e:04: b3:4d:f0:42:19:88:fd:4f:29:9d:89:9e:0a:01:1c: 06:c7:16:1b:c6:b0:7b:de:a7:77:63:8b:e9:c3:47: ca:56:fa:d1:32:f3:8f:34:4e:3f:32:50:82:4d:31: 78:88:97:6d:97:6a:7f:61:ef:16:93:b8:80:49:df: a1:6f:6b:03:72:92:67:8e:e3:91:e7:aa:c1:9e:d2: aa:02:5b:68:da:4b:36:3b:a2:25:94:9c:35:b6:f0: 74:bd:4d:72:5e:d1:2f:b7:4b:fd:82:cd:8f:9d:3c: 1e:65:dd:8d:0e:c0:7f:0e:a7:8a:ff:e8:bd:f3:c3: e7:89:31:96:60:08:44:b8:52:95:05:d8:1b:0d:4d: a8:e7:52:c1:89:7f:ac:46:78:b7:72:ac:0a:bf:ae: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:09:95:3D:90:F4:73:7E:0D:44:72:74:40:43:F2:FE:49:1F:2C:EE X509v3 Authority Key Identifier: keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:7d:2f:bd:f0:72:a2:0f:d0:45:cc:39:57:dc:99:f9:86: 91:71:4b:b9:64:d4:74:fa:f8:cf:e5:c8:e9:d6:ab:60:0a:df: 35:c0:14:c8:06:39:a8:17:fa:01:a8:81:27:3d:d7:24:66:eb: 94:75:2b:46:3d:9f:a9:65:ff:1b:04:51:24:59:b9:33:32:a3: f1:fd:fe:7d:39:de:82:e7:24:91:8f:ec:64:7e:d0:db:35:4c: 8d:d9:95:97:65:c3:f7:b0:3c:00:53:cb:7d:c2:b4:eb:f2:97: 1e:2a:db:81:9f:1e:0d:99:22:af:c2:37:4e:bc:e2:11:2e:55: 78:34:2e:72:9e:bb:e3:2d:d2:6e:26:8a:ac:03:e1:df:b0:09: 78:8d:bb:ca:c0:f9:c6:58:2f:43:c5:61:67:ea:0d:75:b1:a5: 84:f2:a4:63:73:21:61:33:34:09:a2:26:e4:00:5e:45:4a:3e: e0:11:e2:7e:10:35:22:e2:14:65:a9:e3:78:ed:e0:ec:e6:c2: 47:9e:cc:ab:c6:23:01:14:cc:bc:4e:8b:b8:52:47:84:21:40: 36:c5:dd:df:4a:e9:f6:e3:15:bc:c9:6f:d1:30:bc:c5:63:3e: 45:2f:f2:be:55:b1:6c:e4:63:83:65:c7:22:57:bd:70:49:0f: fe:e7:00:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIuS6tqQwRj5L4nO1My3nvdmj/68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMxMUQyMTBGRUY4Q0U1MTYzNEIzRkI0MTY5MzEyRjQx REQwNkZDMDAeFw0yNjEwMDUxNjM1MDFaFw0yNjEwMDYxNzE4MDFaMDMxMTAvBgNV BAMTKEREMDk5NTNEOTBGNDczN0UwRDQ0NzI3NDQwNDNGMkZFNDkxRjJDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvBNzZCzykifGf8f8KbQp2Y56 xtEetsA+vR8UOFuQmTQEjaArlYRmX/IBDTW4DXWp0uTnHNAAH/P6jxyoaXT+iVLF 36HUIQCzAf6y3AGNyBv/gkyR9RsTveetu93MjfUC8iGeBBFeBLNN8EIZiP1PKZ2J ngoBHAbHFhvGsHvep3dji+nDR8pW+tEy8480Tj8yUIJNMXiIl22Xan9h7xaTuIBJ 36FvawNykmeO45HnqsGe0qoCW2jaSzY7oiWUnDW28HS9TXJe0S+3S/2CzY+dPB5l 3Y0OwH8Op4r/6L3zw+eJMZZgCES4UpUF2BsNTajnUsGJf6xGeLdyrAq/rhfDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3QmVPZD0c34NRHJ0QEPy/kkfLO4wHwYDVR0j BBgwFoAUjBHSEP74zlFjSz+0FpMS9B3Qb8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkIyRWE3SEU2ZkRCTGVYOFlHSkRWbUh0eDVBNXZWZVpLY2dtZFVIc1JU U2EvMS84QzExRDIxMEZFRjhDRTUxNjM0QjNGQjQxNjkzMTJGNDFERDA2RkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDMTFEMjEwRkVGOENFNTE2 MzRCM0ZCNDE2OTMxMkY0MUREMDZGQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkIyRWE3SEU2ZkRCTGVYOFlHSkRWbUh0eDVBNXZWZVpLY2dtZFVIc1JUU2EvMS84 QzExRDIxMEZFRjhDRTUxNjM0QjNGQjQxNjkzMTJGNDFERDA2RkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbkV9L73wcqIP0EXMOVfcmfmGkXFLuWTUdPr4z+XI6darYArfNcAUyAY5qBf6 AaiBJz3XJGbrlHUrRj2fqWX/GwRRJFm5MzKj8f3+fTneguckkY/sZH7Q2zVMjdmV l2XD97A8AFPLfcK06/KXHirbgZ8eDZkir8I3TrziES5VeDQucp674y3SbiaKrAPh 37AJeI27ysD5xlgvQ8VhZ+oNdbGlhPKkY3MhYTM0CaIm5ABeRUo+4BHifhA1IuIU ZanjeO3g7ObCR57Mq8YjARTMvE6LuFJHhCFANsXd30rp9uMVvMlv0TC8xWM+RS/y vlWxbORjg2XHIle9cEkP/ucAqw== -----END CERTIFICATE-----Generated at Mon Oct 5 23:00:24 2026 by rpki-client