
Error: rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
File: 38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft (raw, json)
Hash identifier: fw6IAA+z/uatZpcSPU/6x/u+duv6M/sm4hj62tyiG1g=
Subject key identifier: 8E:3E:9D:58:17:77:C2:6A:EA:1F:16:F7:0D:C3:61:EE:E5:C6:4E:B1
Authority key identifier: 38:26:0C:2D:16:5C:38:1E:80:B7:B7:F9:12:E4:00:BB:0B:D4:C5:6B
Certificate issuer: /CN=9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087
Certificate serial: 39091BEA4EED1ECE37EF2331DC09FD4806A36C34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer
Subject info access: rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
Manifest number: 0BCB
Signing time: Sat 10 Oct 2026 01:43:06 +0000
Manifest this update: Sat 10 Oct 2026 01:38:06 +0000
Manifest next update: Sun 11 Oct 2026 05:31:06 +0000
Files and hashes: 1: 38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl (hash: WdgMtzfkp6esAPzMZqv0Iy94dCKApi6PMXFaGKH1iD8=)
Validation: OK
Signature path: rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl
rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 05:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:09:1b:ea:4e:ed:1e:ce:37:ef:23:31:dc:09:fd:48:06:a3:6c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087
Validity
Not Before: Oct 10 01:38:06 2026 GMT
Not After : Oct 11 05:31:06 2026 GMT
Subject: CN=8E3E9D581777C26AEA1F16F70DC361EEE5C64EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:35:13:9f:5b:ad:15:e2:70:6b:af:96:e7:
3e:c8:91:99:a9:80:8f:8f:83:fd:b8:f2:bb:60:8a:
2f:1b:c2:ae:4f:35:02:97:51:13:ae:96:be:8a:08:
96:7e:93:c4:b9:43:c4:11:4a:20:3f:b5:c3:7a:80:
ec:d3:d7:79:23:3a:a2:30:72:b6:3d:dd:31:8f:a6:
88:77:ca:4f:79:7f:2f:30:d5:fe:14:b8:c9:35:b5:
50:7e:60:02:19:71:cb:15:87:41:13:32:65:40:6f:
0f:2a:ec:b1:27:1f:34:73:9a:22:8d:06:4c:c8:ad:
a2:32:ac:98:3d:12:af:7f:9c:75:c4:86:ba:b0:46:
a6:ff:f0:a5:3b:af:51:45:4c:e6:a9:d2:2b:ba:8e:
dc:17:e3:14:eb:dd:fe:b5:3a:77:49:e4:62:33:30:
e4:cf:db:05:f9:f8:2d:4c:c8:d3:b9:1f:fd:be:87:
1e:cb:6c:96:13:7b:82:17:a0:eb:b2:f9:00:6d:1b:
69:f8:e5:51:79:ee:e7:88:b3:28:36:bc:a7:84:58:
cb:57:a0:bf:e2:bb:39:56:69:31:d9:78:0c:d5:ac:
07:03:d2:68:35:ce:34:12:90:1d:b9:51:9f:a1:94:
28:40:0c:15:e9:8b:8d:4a:0d:38:6a:a6:26:83:77:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:9D:58:17:77:C2:6A:EA:1F:16:F7:0D:C3:61:EE:E5:C6:4E:B1
X509v3 Authority Key Identifier:
keyid:38:26:0C:2D:16:5C:38:1E:80:B7:B7:F9:12:E4:00:BB:0B:D4:C5:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/9472d9ad7826d60a862d99a35d9e7a985c4b82798a791f3087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/4/38260C2D165C381E80B7B7F912E400BB0BD4C56B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:8e:37:3b:d0:89:d4:5e:ae:06:29:97:c8:0f:29:c7:ed:
e1:74:8f:a0:14:ba:a1:78:40:3d:a9:09:e6:0e:50:a8:84:1b:
3f:e1:ae:07:e8:f2:e9:4b:0b:e6:3d:6f:c7:a2:a6:24:14:e8:
b3:7c:4a:94:d7:24:18:fe:d3:da:f2:55:1f:56:90:ab:4f:03:
de:0b:be:75:f7:d8:ed:b1:ab:cf:ee:70:9d:33:36:43:0e:f7:
7b:55:c2:96:95:5c:8a:5a:fa:83:26:01:6e:7c:ff:61:8d:a2:
02:46:2b:87:81:98:f8:29:2d:d6:27:55:31:2c:90:69:a7:4b:
af:c2:f6:13:40:8a:aa:5e:e8:83:e2:d6:d1:66:9e:5b:64:43:
49:68:cd:45:d0:f9:5f:ee:31:da:2b:6d:f6:1c:42:7e:de:38:
dd:c4:c2:27:b6:39:72:70:df:5d:17:4b:c1:14:3f:a5:a5:a6:
af:d4:f5:03:bf:3b:9f:39:e2:ca:6a:da:ed:09:cf:06:90:2e:
4b:b5:e1:5f:57:8f:32:b2:0b:1c:3e:c6:b3:95:b5:5d:21:48:
04:04:ad:1c:0d:46:16:79:e5:ca:6b:ae:1f:df:99:74:46:c7:
75:f6:48:16:2c:06:41:6b:0b:f2:30:43:16:5c:48:82:c1:60:
80:df:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:55:23 2026 by rpki-client