Impossible to verify GPG signature on Debian Release file

[john doe <johndoe65534@mail.com>]

Hi,

I'm trying to verify the Debian's Release file but to no avail:

$gpg --keyserver keyring.debian.org --keyserve
r-options auto-key-retrieve --verify Release.gpg Release
gpg: Signature made 10/9/2021 11:35:49 AM Romance Daylight Time
gpg:                using RSA key 0146DC6D4A0B2914BDED34DB648ACFD622F3D138
gpg: requesting key 0x648ACFD622F3D138 from hkp://keyring.debian.org
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: Can't check signature: No public key
gpg: Signature made 10/9/2021 11:35:49 AM Romance Daylight Time
gpg:                using RSA key A7236886F3CCCAAD148A27F80E98404D386FA1D9
gpg: requesting key 0x0E98404D386FA1D9 from hkp://keyring.debian.org
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: Can't check signature: No public key
gpg: Signature made 10/9/2021 11:49:02 AM Romance Daylight Time
gpg:                using RSA key A4285295FC7B1A81600062A9605C66F00D6C9793
gpg:                issuer "debian-release@lists.debian.org"
gpg: requesting key 0x605C66F00D6C9793 from hkp://keyring.debian.org
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
gpg: Can't check signature: No public key
$ gpg --locate-keys debian-release@lists.debian
.org
gpg: error retrieving 'debian-release@lists.debian.org' via WKD:
Certificate exp
ired
gpg: error reading key: Certificate expired


The Release file and signature file are downloaded from (1) and (2).

It looks like some keys are missing from the Debian keyring.


1)  http://ftp.debian.org/debian/dists/stable/Release
2)  http://ftp.debian.org/debian/dists/stable/Release.gpg

--
John Doe