``` $ gemato gpg-wrap -K /usr/share/openpgp-keys/gentoo-release.asc -R -W -- gpg --list-keys /tmp/gemato.2mkjwote/pubring.kbx -------------------------------- pub rsa4096 2018-05-28 [C] [expires: 2024-07-01] EF9538C9E8E64311A52CDEDFA13D0EF1914E7A72 uid [ultimate] Gentoo repository mirrors (automated git signing key) <repomirrorci@gentoo.org> sub rsa2048 2018-05-28 [S] [expires: 2024-07-01] pub rsa4096 2011-11-25 [C] [expires: 2024-07-01] DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D uid [ultimate] Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org> uid [ultimate] Gentoo Portage Snapshot Signing Key (Automated Signing Key) sub rsa4096 2011-11-25 [S] [expires: 2024-07-01] pub dsa1024 2004-07-20 [SC] [expired: 2024-01-01] D99EAC7379A850BCE47DA5F29E6438C817072058 uid [ expired] Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org> pub rsa4096 2009-08-25 [SC] [expires: 2024-07-01] 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 uid [ultimate] Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org> sub rsa2048 2019-02-23 [S] [expires: 2024-07-01] ``` With WKD refresh and such, D99EAC7379A850BCE47DA5F29E6438C817072058 is updated fine.
We also need to renew EF9538C9E8E64311A52CDEDFA13D0EF1914E7A72, DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D, and 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910.