Mirrors.rockylinux.org - 2048-bit RSA key insufficient for FUTURE crypto-policy

We had a similar question some time ago. It was answered here: CURL certificate error on apstream - #5 by neil

Hope this helps answer why keys are 2048 on the mirrors.