I am using Mdk 9.2
I have read the threads regarding Bad Sigs but have come to a couple of sticking points that I can't overcome...

In a terminal I type " rpm -qa gpg-pubkey " and get:
gpg-pubkey-22458a98-3969e7de
gpg-pubkey-70771ff3-3c8f768f
gpg-pubkey-caba22ae-3cf2c469
gpg-pubkey-22458a98-3969e7de
gpg-pubkey-22458a98-3969e7de
gpg-pubkey-70771ff3-3c8f768f
gpg-pubkey-9b4a4024-3874ddfb

Then I do a series of " rpm -e gpg-pubkey-XXXXX "
I am able to get rid of the keys listed once. When I tried to remove the keys listed multiple times I get the msg:
error: "gpg-pubkey-70771ff3-3c8f768f" specifies multiple packages.

I also went to the mirror sites to download the pubkeys (PLF, secsup) and when I right-click and " save link as... " I am able to save it as a *.asc but it lists as pubkey and not the numerical value of the key...

I need to clean the keys out because anytime I try to rpmdrake install from update or mirror I get the bad signature / missing signature message.

So, How do I download the pubkey properly? How do I clean out the multiple listed keys? How do I import the new pubkeys (assuming I download them right)? Do I need to put the new keys in /etc/RPM-GPG-KEYS/ directory? Do I purge the existing keys from the directory?

I am a newbie who shouldn't be as I have been on linux for about 1.5 years. But things have been going really smooth and I haven't had any major problems aside from this - so I never had to use the command line to a great extent. Next upgrade will be "2005 Limited Edition" and I would hate to have to do something drastic like reinstall at this point in the game.

Thanks in advance for any guidance.

This should help, scroll down to the heading " How to deal with digital signatures signing RPM packages"

http://qa.mandrakesoft.com/twiki/bin...ndrakeLinuxFAQ

The last line in this article reads "If urpmi suddenly begins to barf about invalid signatures, first check in your /etc/urpmi/urpmi.cfg config file that the key id for the media is the correct one. If this is not the case, just delete the key id."

- In looking at my key id's I see the "key id" line is missing and replaced with the line "ignore" without quotes, (This is on Thac's repository, and i don't get errors with downloading them)