Error: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
File:                     65177A3236E4CDE9DEABA6D24D81798C0342B359.mft (raw, json)
Hash identifier:          EbWi9hzXwobD7ZbB7utWr5cCazbXvSbpUiTcVG9rtNk=
Subject key identifier:   A9:8E:43:FE:91:F7:79:4A:EF:4D:08:BC:D5:57:8A:1F:E7:10:B3:F0
Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
Certificate issuer:       /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Certificate serial:       490E25086882BA266A7B548707B9A33E0118C736
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
Manifest number:          CF
Signing time:             Sun 04 Oct 2026 00:30:42 +0000
Manifest this update:     Sun 04 Oct 2026 00:25:42 +0000
Manifest next update:     Mon 05 Oct 2026 03:02:42 +0000
Files and hashes:         1: 65177A3236E4CDE9DEABA6D24D81798C0342B359.crl (hash: kzgdeVS6hFnzp59/xM4l6uHecCrT2aojEZS9Gva95xE=)
                          2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=)
                          3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:25:08:68:82:ba:26:6a:7b:54:87:07:b9:a3:3e:01:18:c7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
        Validity
            Not Before: Oct  4 00:25:42 2026 GMT
            Not After : Oct  5 03:02:42 2026 GMT
        Subject: CN=A98E43FE91F7794AEF4D08BCD5578A1FE710B3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:36:2e:e7:f7:c9:53:11:2b:d6:8e:80:7f:
                    eb:3b:fa:00:6f:88:17:b9:2a:81:05:96:47:99:34:
                    31:8d:d7:29:4f:af:f4:f1:a1:f1:8b:e8:6c:f9:5b:
                    9a:60:28:d9:02:56:a8:96:df:8e:97:8b:4f:6e:c5:
                    84:6d:a6:93:1b:bf:38:99:f5:a5:07:fa:c2:90:37:
                    ff:df:44:cf:a7:a9:c4:dc:30:fa:6f:cb:c5:79:5d:
                    02:fd:85:13:c4:14:5f:56:06:27:bd:79:f2:9b:16:
                    b8:57:ed:93:9d:29:23:94:fc:55:3d:b8:b5:29:20:
                    a2:02:1e:74:01:5f:3b:d0:78:74:fd:d6:2f:11:3c:
                    55:c8:aa:a9:da:50:95:60:32:73:c2:9f:8f:d7:4f:
                    a8:2b:e5:42:c5:bc:b9:c0:c6:7c:6a:c0:8c:c8:3d:
                    56:52:fd:97:08:0f:75:ed:e1:65:a6:87:cc:6a:c5:
                    b0:41:c3:b5:a4:3c:09:b6:0d:a1:fa:32:a7:c0:34:
                    a5:f4:b3:86:61:f9:48:3b:21:13:a5:c3:e7:bb:5c:
                    2f:b7:80:4c:83:dd:8b:c7:d2:e3:38:fb:5b:9e:56:
                    f3:3e:e1:24:de:d3:5a:45:a9:7d:be:85:85:70:93:
                    1f:6f:a3:2f:0f:e1:e4:46:d7:b4:ee:f0:cc:90:38:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:43:FE:91:F7:79:4A:EF:4D:08:BC:D5:57:8A:1F:E7:10:B3:F0
            X509v3 Authority Key Identifier:
                keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:da:43:8c:5a:1f:89:86:48:67:5f:e1:ca:39:0b:a3:d2:72:
         b2:09:7d:83:25:e8:f8:aa:e1:fd:d7:18:e0:6e:93:f9:e9:b8:
         33:4c:73:5d:7b:de:84:95:07:be:64:cb:70:32:01:37:d9:54:
         81:6e:9c:06:c2:85:13:1d:ef:aa:ec:1c:6c:38:b0:e5:f0:f1:
         0f:ee:30:fb:69:71:a1:bd:d9:ca:e0:0e:cc:fe:91:46:03:48:
         18:17:79:62:c5:fc:82:11:23:bd:4f:02:59:e9:63:48:e9:9a:
         b9:fd:cd:ce:ce:2b:61:9c:4a:05:9d:23:96:b3:a3:73:06:76:
         25:7e:60:22:8b:d9:12:fa:73:70:84:76:3e:7b:e0:55:a2:8a:
         2a:6e:06:44:53:5c:2e:b5:03:d4:a3:da:3e:56:0c:44:01:bb:
         fa:a1:28:40:0a:51:7c:15:b8:00:b4:8c:20:66:ed:a1:ba:68:
         12:8e:10:b3:9a:a6:50:6a:de:4d:ba:3c:87:3b:24:dc:d8:40:
         f8:6a:76:d0:63:b7:9f:c4:36:d4:a8:66:fd:0a:52:c7:1a:bd:
         d6:f2:e7:ef:98:29:56:95:d3:57:05:15:1a:91:42:ee:ce:82:
         d0:e4:bd:fe:e8:65:bf:4f:e7:4b:b2:3a:a3:81:e8:87:4b:20:
         72:35:2b:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSQ4lCGiCuiZqe1SHB7mjPgEYxzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMw
MzQyQjM1OTAeFw0yNjEwMDQwMDI1NDJaFw0yNjEwMDUwMzAyNDJaMDMxMTAvBgNV
BAMTKEE5OEU0M0ZFOTFGNzc5NEFFRjREMDhCQ0Q1NTc4QTFGRTcxMEIzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApDYu5/fJUxEr1o6Af+s7+gBv
iBe5KoEFlkeZNDGN1ylPr/TxofGL6Gz5W5pgKNkCVqiW346Xi09uxYRtppMbvziZ
9aUH+sKQN//fRM+nqcTcMPpvy8V5XQL9hRPEFF9WBie9efKbFrhX7ZOdKSOU/FU9
uLUpIKICHnQBXzvQeHT91i8RPFXIqqnaUJVgMnPCn4/XT6gr5ULFvLnAxnxqwIzI
PVZS/ZcID3Xt4WWmh8xqxbBBw7WkPAm2DaH6MqfANKX0s4Zh+Ug7IROlw+e7XC+3
gEyD3YvH0uM4+1ueVvM+4STe01pFqX2+hYVwkx9voy8P4eRG17Tu8MyQOEevAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqY5D/pH3eUrvTQi81VeKH+cQs/AwHwYDVR0j
BBgwFoAUZRd6Mjbkzeneq6bSTYF5jANCs1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDA2MTQxNjMtNGNhNC00OTM2LWJmOGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIz
NkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMwMzQyQjM1OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NTE3N0EzMjM2RTRDREU5REVBQkE2RDI0RDgxNzk4QzAzNDJC
MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm
OGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5
OEMwMzQyQjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGfaQ4xaH4mGSGdf4co5C6PScrIJfYMl6Piq
4f3XGOBuk/npuDNMc1173oSVB75ky3AyATfZVIFunAbChRMd76rsHGw4sOXw8Q/u
MPtpcaG92crgDsz+kUYDSBgXeWLF/IIRI71PAlnpY0jpmrn9zc7OK2GcSgWdI5az
o3MGdiV+YCKL2RL6c3CEdj574FWiiipuBkRTXC61A9Sj2j5WDEQBu/qhKEAKUXwV
uAC0jCBm7aG6aBKOELOaplBq3k26PIc7JNzYQPhqdtBjt5/ENtSoZv0KUscavdby
5++YKVaV01cFFRqRQu7OgtDkvf7oZb9P50uyOqOB6IdLIHI1K98=
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:08:38 2026 by rpki-client