# 'baseos': repomd.xml GPG signature verification error: Bad GPG signature after upgrade to 9.7 **URL:** \ **Category:** Rocky Linux Help & Support\ **Tags:** rocky-linux-9\ **Created:** [January 14, 2026, 5:56am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119 "2026-01-14T05:56:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Mark-2](https://avatars.discourse-cdn.com/v4/letter/m/8491ac/32.png) [@Mark-2](https://forums.rockylinux.org/u/Mark-2)\ **Post date:** [January 14, 2026, 5:56am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/1 "2026-01-14T05:56:43Z")
Hello, I just update one of the Rocky Linux from 9.6 to 9.7 last week. Then today I would install some more packages then find this error. Rocky Linux 9 - BaseOS 935 B/s | 833 B 00:00 Rocky Linux 9 - BaseOS 1.7 MB/s | 1.7 kB 00:00 Rocky Linux 9 - BaseOS 4.5 kB/s | 833 B 00:00 Error: Failed to download metadata for repo ‘baseos’: repomd.xml GPG signature verification error: Bad GPG signature Checked the Keys in the box is using the one end with 275D Rocky Linux 9 - BaseOS Importing GPG key 0x350D275D Userid : “Rocky Enterprise Software Foundation - Release key 2022 [releng@rockylinux.org](mailto:releng@rockylinux.org)” Fingerprint : 21CB 256A E16F C54C 6E65 2949 702D 426D 350D 275D From : /etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 For quick win, I disable gpgcheck and can install the packages. Do anyone face the same problem as me ? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [January 14, 2026, 8:21am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/2 "2026-01-14T08:21:25Z")
Can you perhaps try: ```auto dnf clean all dnf update ``` ---
**Author:** ![Mark-2](https://avatars.discourse-cdn.com/v4/letter/m/8491ac/32.png) [@Mark-2](https://forums.rockylinux.org/u/Mark-2)\ **Post date:** [January 14, 2026, 10:47am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/3 "2026-01-14T10:47:07Z")
Hello iwalker I had tried before create the post, but no luck 💀 ---
**Author:** ![R\_O\_C\_K\_Y\_L\_I\_N\_U\_X](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/r_o_c_k_y_l_i_n_u_x/32/5594_2.png) [@R\_O\_C\_K\_Y\_L\_I\_N\_U\_X](https://forums.rockylinux.org/u/R_O_C_K_Y_L_I_N_U_X)\ **Post date:** [January 14, 2026, 2:57pm UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/4 "2026-01-14T14:57:56Z")
> [@Mark-2](#): > > Rocky Linux 9 - BaseOS 935 B/s | 833 B 00:00 > Rocky Linux 9 - BaseOS 1.7 MB/s | 1.7 kB 00:00 > Rocky Linux 9 - BaseOS 4.5 kB/s | 833 B 00:00 > Error: Failed to download metadata for repo ‘baseos’: repomd.xml GPG signature verification error: Bad GPG signature I asked Google Gemini about this, and it suggests two possibilities: 1. Incorrect System Time GPG signature verification is highly sensitive to time. If your system clock is significantly ahead or behind the actual time, the signature might be flagged as “expired” or “not yet valid,” which can sometimes manifest as a “Bad GPG signature” error. 2. Man-in-the-Middle (MITM) or SSL Inspection You mentioned DNS/Communications. While DNS itself usually doesn’t cause a signature mismatch, Transparent Proxies or SSL Inspection firewalls (common in corporate environments) can. Could either of those apply to your error? Tony ---
**Author:** ![Mark-2](https://avatars.discourse-cdn.com/v4/letter/m/8491ac/32.png) [@Mark-2](https://forums.rockylinux.org/u/Mark-2)\ **Post date:** [January 15, 2026, 1:21am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/5 "2026-01-15T01:21:13Z")
Hello Tony, Server in sync with ntp so we eliminated the issue for incorrect time and yes, the linux box is behind a proxy, so I switched to another one and everything’s working perfectly now. Thanks a lot for your help and advice! Thanks for your help and advise. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [March 16, 2026, 1:21am UTC](https://forums.rockylinux.org/t/baseos-repomd-xml-gpg-signature-verification-error-bad-gpg-signature-after-upgrade-to-9-7/20119/6 "2026-03-16T01:21:58Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.