Error: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer: CRL has expired

Manifest

$ rpki-client -vvvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File:                     DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier:          xZiOFUUlzHI39UqX9SoTaDC0ic6TTBhub4HmRb0isUk=
Subject key identifier:   3F:AD:C6:3F:D0:68:B7:EC:55:20:56:2D:B2:D3:30:A6:D8:6B:41:50
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer:       /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial:       5B26178A84950A292649EE0993CE29EC049EC7C4
Authority info access:    rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access:      rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number:          018A
Signing time:             Wed 30 Sep 2026 09:04:02 +0000
Manifest this update:     Wed 30 Sep 2026 08:59:02 +0000
Manifest next update:     Thu 01 Oct 2026 09:17:02 +0000
Files and hashes:         1: 323430313a323036303a623031333a3a2f34382d3438203d3e203234333831.roa (hash: B5UK9wBF4eWMwEZe3Wkm0BueMwzV72w8VP+uBl0OAy0=)
                          2: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
                          3: 323430313a323036303a623030353a3a2f34382d3438203d3e203234333831.roa (hash: 8tEZaUjgm5DLia5hXb8KEqEOWQHfCpfWvX/mXpbgFWw=)
                          4: AS24381.asa (hash: LxHofrlWwAFrdllppmf+UZWLnX2vwX2K4Im6Qaj245w=)
                          5: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
                          6: 323430313a323036303a623031383a3a2f34382d3438203d3e203234333831.roa (hash: uckPSy0Tug+CUwTjsCkx8JRSlr8cnK4y68PpuA7X1JE=)
                          7: 323430313a323036303a623031363a3a2f34382d3438203d3e203234333831.roa (hash: YJcbYItWtStqyIm4ybdavfWOSx9wJD6iyz22O1tPWzE=)
                          8: 323430313a323036303a623030343a3a2f34382d3438203d3e203234333831.roa (hash: GboVvCOD/RShhtQXg0s4XsSzOaVs197wtus4yNWAlI4=)
                          9: 323430313a323036303a623031353a3a2f34382d3438203d3e203234333831.roa (hash: 2OCt45wZRcqvnJtStFdtGhtupYgH1RBgxbvVVKrnP2I=)
                          10: 3130332e3234382e35302e302f32342d3234203d3e203234333831.roa (hash: FF+urME/9fsDClM6Eb/kpNDShOotNVIwO3/pSw6yoTM=)
                          11: 323430313a323036303a623031303a3a2f34382d3438203d3e203234333831.roa (hash: nODI2C6hw4HXvkadOVSwYi5/6OljaFAl7Y8fHF1gzwo=)
                          12: 323430313a323036303a623030363a3a2f34382d3438203d3e203234333831.roa (hash: m1Gcp+R8nr3xEv+up7SFJUQQ3EyfHTUVAPFIPU8h9bw=)
                          13: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: 18VoDPJAWPYLsHHyX01o5cSdoIVsEkOOmfuZmr//mOI=)
                          14: 323430313a323036303a623031313a3a2f34382d3438203d3e203234333831.roa (hash: yo4kPdmKvf673mrl+bphbUcyD2uza0ALPIY0RYcFLA0=)
                          15: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
                          16: 323430313a323036303a623031373a3a2f34382d3438203d3e203234333831.roa (hash: s6NPZEnvxoZpV2akZ+Vcf8nTjEXWQ98KPgnq2jxP/DI=)
                          17: 323430313a323036303a623031343a3a2f34382d3438203d3e203234333831.roa (hash: 5MKUwCTBQWPO2p8fPbPDmsmFudmSbY7y+4rr1GUf6Eo=)
                          18: 323430313a323036303a623030373a3a2f34382d3438203d3e203234333831.roa (hash: vhQC0DVtZiy1MpPTO8+NHgaVeCyMu17dEWBcBg1czR4=)
                          19: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
                          20: 323430313a323036303a623030383a3a2f34382d3438203d3e203234333831.roa (hash: DNcWD3YeRnAIVEjA1gKvnP/zzDYEsAWsr/+ngFplLxo=)
                          21: 323430313a323036303a623030393a3a2f34382d3438203d3e203234333831.roa (hash: MkEEfQSigD9NK2Sm6ny4H0NQ/op3I69xSxKL4mlAKks=)
                          22: 323430313a323036303a623031323a3a2f34382d3438203d3e203234333831.roa (hash: Qa/GHALnudatBabEiqMEL09zykvnZfjOu6zfYmxPoMw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:17:8a:84:95:0a:29:26:49:ee:09:93:ce:29:ec:04:9e:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
        Validity
            Not Before: Sep 30 08:59:02 2026 GMT
            Not After : Oct  1 09:17:02 2026 GMT
        Subject: CN=3FADC63FD068B7EC5520562DB2D330A6D86B4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:4c:e3:06:35:f7:14:60:c5:58:60:b6:cf:
                    5b:06:96:5d:d6:a2:94:6b:35:7d:b0:e4:3e:f0:cb:
                    16:9d:f8:0d:d0:13:81:63:35:14:f9:b4:c4:33:56:
                    76:03:ee:65:4f:4d:ab:73:5c:d9:98:b6:f2:99:fe:
                    4b:23:dc:cc:7f:07:7c:af:8e:59:19:f3:8f:4e:7a:
                    9c:66:e1:a8:26:13:ea:c5:ee:af:3a:48:f9:e4:9a:
                    39:e1:7a:40:be:95:5a:40:bd:4a:8a:d1:0c:4a:f7:
                    b0:21:fc:5c:75:19:24:90:c6:26:8e:e8:31:7d:b3:
                    af:39:85:7f:4f:32:9d:d7:6f:aa:18:5d:8e:7a:2c:
                    6a:58:64:80:b9:1e:13:b2:60:8d:56:e4:8a:09:06:
                    7e:8a:f0:04:11:37:9d:fa:19:4a:d6:50:41:78:2a:
                    76:58:bd:b1:b1:8b:ff:e6:f8:2e:c8:ce:2a:a4:07:
                    4e:0b:9c:4a:1a:b0:8a:0b:e8:2d:c6:39:b4:0b:0a:
                    7c:3d:79:dd:fa:52:7f:fa:66:66:97:c9:ad:2c:9c:
                    26:de:f6:db:cd:2c:e7:72:b1:1d:00:4c:30:63:a8:
                    c9:e6:6f:1b:d3:f8:7e:ee:47:d8:b8:d2:d9:71:52:
                    d4:6a:30:b3:9b:46:c1:2a:93:3d:7f:6b:3f:e5:e2:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AD:C6:3F:D0:68:B7:EC:55:20:56:2D:B2:D3:30:A6:D8:6B:41:50
            X509v3 Authority Key Identifier:
                keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:a3:fd:bb:bc:27:31:06:e5:19:d9:6b:7a:24:12:8f:cf:
         59:e7:33:88:7d:4c:ef:3c:8e:05:57:16:55:20:10:6f:82:6c:
         7c:71:da:ec:0f:68:99:96:7c:42:40:aa:0e:66:77:5f:3a:f5:
         42:d2:21:7b:fd:9c:dd:52:7d:75:cb:86:d4:76:16:22:0e:cf:
         17:ac:e7:05:d6:a1:01:87:7a:1c:71:c4:f8:c7:9e:2a:cd:db:
         41:0c:eb:40:36:db:c7:b9:81:1a:34:04:d5:4c:d3:37:d6:ca:
         54:1b:28:b0:87:92:de:f9:e4:2e:6f:92:2b:30:ac:69:65:c6:
         98:d4:2d:72:ca:a3:f9:ee:35:8f:02:65:b1:9c:eb:ed:10:22:
         3b:c3:0b:85:53:b3:75:37:2e:b8:ed:20:88:21:c8:c2:82:54:
         f3:34:5b:90:b8:df:de:4b:1d:56:fc:55:54:99:bb:79:1c:16:
         67:7a:3c:4f:c6:5d:aa:d8:88:cc:4c:0f:a7:f0:b0:0c:a0:0e:
         db:a8:4d:76:14:b5:cc:1e:a2:98:5d:82:b9:d8:f8:b1:95:1a:
         47:0d:6d:fa:cb:4d:f3:e2:a2:fd:de:31:fe:23:0a:20:32:1f:
         c3:83:2e:7b:31:d0:d7:87:0a:ea:aa:13:82:e3:58:57:26:7b:
         da:54:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 20:41:24 2026 by rpki-client