hi, i am not sure --check-sigs will fix this. the keyring contains the colliding ID pub key and according to my tests --check-sigs works too on ubuntu - the signatures are correct and the keys are present. you can check with the keyring at: http://marc.info/?l=full-disclosure&m=131668259924743&w=2