Error: rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
File:                     DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft (raw, json)
Hash identifier:          r4fzZK/oF04BSuTP9kKX5tRfUHnbbXz4+yU5TbLTGXE=
Subject key identifier:   77:52:EF:D1:59:19:8E:71:B3:7C:8C:BE:CE:E4:04:38:4F:17:25:D5
Authority key identifier: DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF
Certificate issuer:       /CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
Certificate serial:       2E33EC85EF62BDFCB618A4E981D8D4CA74BE47F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
Manifest number:          0BF3
Signing time:             Mon 09 Nov 2026 11:00:39 +0000
Manifest this update:     Mon 09 Nov 2026 10:55:39 +0000
Manifest next update:     Tue 10 Nov 2026 11:32:39 +0000
Files and hashes:         1: 36342e36392e33322e302f32302d3234203d3e203335393136.roa (hash: UlGkIbgb39xHhZxJixzG/UBt6M8aE0vPCIv3T4tJWDU=)
                          2: DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl (hash: C4oJ8UcGV3Eq3OrVI1fVE3qUaV51flc+HDnRAUwo1QQ=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 11:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:33:ec:85:ef:62:bd:fc:b6:18:a4:e9:81:d8:d4:ca:74:be:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
        Validity
            Not Before: Nov  9 10:55:39 2026 GMT
            Not After : Nov 10 11:32:39 2026 GMT
        Subject: CN=7752EFD159198E71B37C8CBECEE404384F1725D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:1d:14:27:f6:92:27:e2:33:29:05:49:1f:
                    6f:eb:96:bb:b6:68:75:73:d6:49:d7:4f:76:24:20:
                    4f:f8:fa:45:cd:48:85:ac:1a:d3:1c:d6:bd:52:59:
                    f5:91:aa:46:09:83:e1:b5:4f:58:0f:5b:a7:86:56:
                    36:75:c5:c2:27:da:ed:12:b3:28:88:24:8b:8c:06:
                    da:14:63:58:96:ac:dc:94:b6:12:6e:36:5a:fd:de:
                    9e:87:c9:af:b8:74:2c:41:8d:2c:3e:55:af:b6:e3:
                    e3:b7:26:57:4f:6b:77:30:63:63:24:1b:7d:f3:96:
                    d1:f2:8b:32:f9:44:38:96:cf:ca:a6:d3:dc:34:f5:
                    12:c0:09:3c:b3:7c:5a:db:bc:02:a1:87:66:71:f4:
                    51:30:6f:3f:a5:46:72:77:66:bd:40:e8:e0:26:19:
                    aa:a9:99:87:eb:e5:6b:b2:a3:dc:e2:5d:8d:08:36:
                    20:64:c7:f5:a0:59:6f:5a:ff:fa:be:a0:48:fc:e1:
                    8f:af:57:7e:3e:42:39:05:18:4f:b3:e6:65:b0:7e:
                    9c:a1:52:69:90:23:e6:dc:cc:0a:fd:d4:05:b6:4f:
                    99:d5:d2:ed:bc:fd:f6:ec:a8:f4:09:27:12:08:f5:
                    13:f4:98:be:88:00:e2:46:6e:f3:5b:f0:f5:de:6a:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:EF:D1:59:19:8E:71:B3:7C:8C:BE:CE:E4:04:38:4F:17:25:D5
            X509v3 Authority Key Identifier:
                keyid:DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:a8:1f:65:14:b7:63:60:22:63:59:0b:08:f7:a9:76:c7:
         ad:b3:dd:78:6e:bf:9f:4a:c4:44:c3:4f:38:dd:52:06:e8:be:
         e2:fb:5d:1e:c0:6b:ef:36:b7:4f:2b:ef:fd:d2:cb:ba:db:04:
         de:fd:d8:4f:89:4c:af:22:df:d2:d1:b1:41:1d:29:a7:a3:e1:
         18:c3:ff:ca:1a:06:ae:f7:e7:97:4a:44:e2:f5:77:78:8e:6b:
         94:05:54:9a:31:98:65:6b:fe:94:ac:d2:fd:a2:a9:90:17:bb:
         a6:66:5b:19:bb:67:43:6b:bb:be:6b:64:fa:b0:41:58:a9:ae:
         6c:74:6e:01:4d:a2:e0:8d:04:59:39:ce:19:22:2a:07:fa:75:
         4a:9f:6c:5c:f5:3a:df:7f:99:9a:67:87:19:22:ed:96:f9:cf:
         8d:09:21:c4:c4:77:15:ff:2e:fd:19:66:b3:02:8d:87:25:34:
         7d:0e:e0:5d:cf:ae:20:b3:30:21:1b:b1:d5:cd:a8:f3:5b:73:
         59:36:e9:98:9f:1b:0e:73:31:81:c1:f0:d1:2a:5f:a3:fa:44:
         8e:7a:49:fa:43:70:28:fd:62:39:94:69:8b:51:84:bc:97:92:
         38:74:c5:ad:6e:5c:31:ea:e4:dc:74:b5:93:a0:82:7f:8b:d5:
         81:91:51:47
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIULjPshe9ivfy2GKTpgdjUynS+R/gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTNkZDdlYWFmZDEwZGVkYzFiNThlMGY2N2FiMzg0YzEz
ZDNkNzg2NmNlOTdiMWI1ODMwHhcNMjYxMTA5MTA1NTM5WhcNMjYxMTEwMTEzMjM5
WjAzMTEwLwYDVQQDEyg3NzUyRUZEMTU5MTk4RTcxQjM3QzhDQkVDRUU0MDQzODRG
MTcyNUQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLsdFCf2kifi
MykFSR9v65a7tmh1c9ZJ1092JCBP+PpFzUiFrBrTHNa9Uln1kapGCYPhtU9YD1un
hlY2dcXCJ9rtErMoiCSLjAbaFGNYlqzclLYSbjZa/d6eh8mvuHQsQY0sPlWvtuPj
tyZXT2t3MGNjJBt985bR8osy+UQ4ls/KptPcNPUSwAk8s3xa27wCoYdmcfRRMG8/
pUZyd2a9QOjgJhmqqZmH6+VrsqPc4l2NCDYgZMf1oFlvWv/6vqBI/OGPr1d+PkI5
BRhPs+ZlsH6coVJpkCPm3MwK/dQFtk+Z1dLtvP327Kj0CScSCPUT9Ji+iADiRm7z
W/D13mq1LwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFHdS79FZGY5xs3yMvs7kBDhP
FyXVMB8GA1UdIwQYMBaAFN2wf0qtLyN1AD+2A/izMQm8ZbG/MA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kubXVsdGFjb20uY29t
L3JlcG8vTUNPTUNBLzMvRERCMDdGNEFBRDJGMjM3NTAwM0ZCNjAzRjhCMzMxMDlC
QzY1QjFCRi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00
MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FiYmFmNGE4LWZlNzYtNGMwNC1iZDI5LTU3
MDhhZmU0MmE1ZC9lM2RkN2VhYWZkMTBkZWRjMWI1OGUwZjY3YWIzODRjMTNkM2Q3
ODY2Y2U5N2IxYjU4My5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRy
c3luYzovL3Jwa2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzMvRERCMDdGNEFB
RDJGMjM3NTAwM0ZCNjAzRjhCMzMxMDlCQzY1QjFCRi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADw7qB9l
FLdjYCJjWQsI96l2x62z3Xhuv59KxETDTzjdUgbovuL7XR7Aa+82t08r7/3Sy7rb
BN792E+JTK8i39LRsUEdKaej4RjD/8oaBq7355dKROL1d3iOa5QFVJoxmGVr/pSs
0v2iqZAXu6ZmWxm7Z0Nru75rZPqwQViprmx0bgFNouCNBFk5zhkiKgf6dUqfbFz1
Ot9/mZpnhxki7Zb5z40JIcTEdxX/Lv0ZZrMCjYclNH0O4F3PriCzMCEbsdXNqPNb
c1k26ZifGw5zMYHB8NEqX6P6RI56SfpDcCj9YjmUaYtRhLyXkjh0xa1uXDHq5Nx0
tZOggn+L1YGRUUc=
-----END CERTIFICATE-----
Generated at Mon Nov 9 23:17:32 2026 by rpki-client