Hi, It seems that there is some kind of regression in net/rsync 3.4.3 on -current.
All the below 'failed verification -- update discarded' messages are new. Kind regards, Job feather$ rsync --version rsync version 3.4.3 protocol version 32 Copyright (C) 1996-2026 by Andrew Tridgell, Wayne Davison, and others. Web site: https://rsync.samba.org/ Capabilities: 64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints, socketpairs, symlinks, symtimes, hardlinks, hardlink-specials, hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs, no xattrs, optional secluded-args, no iconv, no prealloc, stop-at, no crtimes Optimizations: no SIMD-roll, no asm-roll, openssl-crypto, asm-MD5 Checksum list: xxh128 xxh3 xxh64 (xxhash) md5 md4 sha1 none Compress list: zlibx zlib none Daemon auth list: sha512 sha256 sha1 md5 md4 rsync comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. See the GNU General Public Licence for details. $ doas rpki-client -R -e /usr/local/bin/rsync -v -p4 rpki-client: ta/afrinic: pulling from rsync://rpki.afrinic.net/repository/AfriNIC.cer rpki-client: ta/apnic: pulling from rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer rpki-client: ta/arin: pulling from rsync://rpki.arin.net/repository/arin-rpki-ta.cer rpki-client: ta/lacnic: pulling from rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer rpki-client: ta/ripe: pulling from rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer rpki-client: ta/ripe: loaded from network rpki-client: .rsync/rpki.ripe.net/repository: pulling from rsync://rpki.ripe.net/repository ERROR: DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl failed verification -- update discarded. ERROR: DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft failed verification -- update discarded. ERROR: DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl failed verification -- update discarded. ERROR: DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft failed verification -- update discarded. ERROR: DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl failed verification -- update discarded. ERROR: DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl failed verification -- update discarded. ERROR: DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl failed verification -- update discarded. ERROR: DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft failed verification -- update discarded. ERROR: DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl failed verification -- update discarded. ERROR: DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl failed verification -- update discarded. rpki-client: ta/arin: loaded from network rpki-client: .rsync/rpki.arin.net/repository: pulling from rsync://rpki.arin.net/repository rpki-client: ta/afrinic: loaded from network rpki-client: .rsync/rpki.afrinic.net/repository: pulling from rsync://rpki.afrinic.net/repository ERROR: DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft failed verification -- update discarded. rpki-client: ta/lacnic: loaded from network rpki-client: .rsync/repository.lacnic.net/rpki: pulling from rsync://repository.lacnic.net/rpki rpki-client: ta/apnic: loaded from network rpki-client: .rsync/rpki.apnic.net/repository: pulling from rsync://rpki.apnic.net/repository ERROR: DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl failed verification -- update discarded. ERROR: DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft failed verification -- update discarded. ERROR: DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl failed verification -- update discarded. ERROR: DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl failed verification -- update discarded. ERROR: DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft failed verification -- update discarded. ....
