Just a hint: the signing seems not to be coherent:
repomd.xml 31-May-2023 19:42 4368
repomd.xml.asc 31-May-2023 04:50 833
We use repo_gpgcheck=1
and noticed this for rocky/8.8/BaseOS/x86_64/os/repodata/
# LANG=C yum update
Error: Failed to download metadata for repo 'baseos': repomd.xml GPG signature verification error: Bad GPG signature