Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer: RFC 3779 resource not subset of parent's resources

Manifest

$ rpki-client -vvvf rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
File:                     3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft (raw, json)
Hash identifier:          kstDumnvm4hBQl8GwNiuIifHW9qMVQd206CewW6V9AQ=
Subject key identifier:   5D:2A:91:D7:B8:50:82:E2:C4:E4:CE:15:E0:AB:5B:A9:AF:A8:5A:E1
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       178E63203E67549439929376186D96D8C80A1176
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
Manifest number:          82
Signing time:             Thu 01 Jan 2026 06:11:17 +0000
Manifest this update:     Thu 01 Jan 2026 06:06:17 +0000
Manifest next update:     Fri 02 Jan 2026 10:05:17 +0000
Files and hashes:         1: AS23506.asa (hash: +Swhs0dvNXbQOIWhjohnG/I6uEZBe5qdHfcMaFYt30g=)
                          2: 3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl (hash: MCNgkrlMyJY+xv13b3muTnc36o8FfYB9pKkAz6Awu7s=)
                          3: AS23507.asa (hash: v/RWbdTT7nyOVk/zonhrJK5jXGXmKVfUU+sBs7PHTig=)
                          4: 323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa (hash: b16ZPXAxIRAfZ7qXBgMAFzC7ltzm9tCSJL1oPaLvFsQ=)
                          5: 32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (hash: tfUYp1vPlbyDM1niALSVQwZiw+7sA94Km+BrPCjbnEw=)
                          6: 323630323a663730343a6330303a3a2f33382d3338203d3e203233353037.roa (hash: JbwWeYlsyR8enhLT3XJRO2BdlIw+pGLE5a/Z4cqVkIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8e:63:20:3e:67:54:94:39:92:93:76:18:6d:96:d8:c8:0a:11:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Jan  1 06:06:17 2026 GMT
            Not After : Jan  2 10:05:17 2026 GMT
        Subject: CN=5D2A91D7B85082E2C4E4CE15E0AB5BA9AFA85AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:83:8c:07:94:64:e5:f3:c4:75:d4:88:86:
                    db:fe:15:c3:1d:53:a6:70:fe:2f:05:fd:2b:26:d3:
                    e2:84:06:a9:ad:6b:42:59:4f:3a:74:be:48:2f:79:
                    3c:76:1b:21:e1:b1:43:4e:3f:0d:0a:22:6b:22:56:
                    d1:76:19:d1:8d:50:75:53:38:99:10:e8:3b:8c:d7:
                    80:1c:ef:ac:f6:ca:db:ae:ee:e8:e3:6d:2b:17:9b:
                    0c:3a:78:67:26:71:93:0f:52:f3:f8:82:dd:d2:9c:
                    c4:78:6c:d6:e0:68:58:fe:2d:ea:5c:62:ee:19:d2:
                    8d:65:d8:85:47:57:05:f5:a3:37:22:75:b1:20:8a:
                    8d:53:64:3b:8b:ee:d3:ef:da:50:cc:6c:c6:df:da:
                    bd:ed:44:0b:ff:33:5d:bd:cd:12:48:69:fa:03:eb:
                    1a:4e:de:1b:0b:66:47:55:b4:5f:4c:d6:9b:f3:70:
                    1e:ad:cc:6e:40:89:7e:ab:55:90:e6:b9:03:0a:ae:
                    d4:57:0e:6e:54:d2:6b:ef:cf:e5:56:3b:37:a8:5b:
                    07:77:e7:c7:e5:40:66:cc:81:bb:60:d2:cd:f4:86:
                    c3:6b:33:80:da:25:ed:07:85:eb:8a:2a:9d:2f:24:
                    ee:ba:1f:f8:52:68:de:be:e5:d9:2a:bc:01:bb:a2:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:91:D7:B8:50:82:E2:C4:E4:CE:15:E0:AB:5B:A9:AF:A8:5A:E1
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:d4:11:3b:e3:6c:03:c9:c0:90:f5:77:93:1f:96:fb:4e:
         2e:06:83:ab:06:9a:d8:9e:70:81:f6:7a:21:ff:ee:f9:e9:94:
         02:e2:bd:e7:15:01:c6:a3:77:b5:9d:97:d4:53:67:db:b2:71:
         b3:41:12:94:20:b5:31:b4:b6:ce:21:7a:0d:50:99:ee:c4:cf:
         55:a0:f4:dc:1a:1d:32:db:56:ac:1e:71:1e:2a:8f:db:54:93:
         f6:84:64:21:98:fd:cb:97:b7:66:19:1b:30:92:e2:30:35:aa:
         d9:81:fc:81:97:70:b3:7b:54:2b:62:5e:e1:0d:41:47:e1:67:
         66:27:04:5b:22:56:f8:db:2c:98:9d:8a:6e:4f:da:33:f7:fd:
         2c:7d:35:df:ad:35:84:d4:40:16:e7:c9:03:17:c0:4f:c3:71:
         09:48:49:20:83:eb:99:56:45:d9:06:9d:6b:7e:d5:09:14:32:
         81:3e:d1:21:e2:3c:c3:c0:37:6a:4a:63:02:b1:fb:86:e3:b3:
         64:47:f0:c5:1e:51:18:6f:9b:d4:3a:90:77:d2:89:0f:3d:ab:
         3a:02:68:23:ce:ee:23:5d:20:b4:b9:77:30:3a:98:d2:e2:e7:
         c6:2c:06:7a:d1:76:93:ed:34:c8:ca:e1:79:78:1e:95:cb:c1:
         b4:ec:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:16 2026 by rpki-client