admincd-amd64-20150514.iso.DIGESTS is signed with an old PGP key which expired in 2013. $ gpg --verify admincd-amd64-20150514.iso.DIGESTS.asc gpg: Signature made Thu 14 May 2015 06:31:31 PM PDT using RSA key ID 2D182910 gpg: Good signature from "Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>" [expired] gpg: Note: This key has expired! Primary key fingerprint: 13EB BDBE DE7A 1277 5DFD B1BA BB57 2E0E 2D18 2910 Key expired in 2013: > pub 4096R/2D182910 created: 2009-08-25 expired: 2013-08-24 usage: SC > trust: unknown validity: expired > [ expired] (1). Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org> I haven't checked other ISOs. Reproducible: Always
*** This bug has been marked as a duplicate of bug 484946 ***