GPG check FAILED on python-psutil from client repo for el8 latest

Problem:

Repo: Index of /client/latest/el8/x86_64

dnf install -y python3-psutil 
<snipped>
GPG key at https://foreman.example.com/katello/api/v2/repositories/6299/gpg_key_content (0xB36987A9) is already installed
The GPG keys listed for the "Foreman Katello RHEL 8 x86_64" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: python3-psutil-5.7.2-2.el8.x86_64
 GPG Keys are configured as: https://foreman.example.com/katello/api/v2/repositories/6299/gpg_key_content
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

# rpm -qpi ./python3-psutil-5.7.2-2.el8.x86_64.rpm
warning: ./python3-psutil-5.7.2-2.el8.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 7522cc3f: NOKEY
Name        : python3-psutil
Version     : 5.7.2
Release     : 2.el8
Architecture: x86_64
Install Date: (not installed)
Group       : Unspecified
Size        : 2252741
License     : BSD
Signature   : RSA/SHA256, Thu 06 May 2021 08:12:10 PM BST, Key ID 955c283e7522cc3f
Source RPM  : python-psutil-5.7.2-2.el8.src.rpm
Build Date  : Mon 02 Nov 2020 10:38:48 AM GMT
Build Host  : ip-172-30-4-187.ec2.internal
Relocations : (not relocatable)
Packager    : Koji
Vendor      : Koji
URL         : https://github.com/giampaolo/psutil
Summary     : A process and system utilities module for Python

https://hex-satellite.intra.gammatelecom.com/katello/api/v2/repositories/6299/gpg_key_content has all the keys from Foreman :: Security concated together

Expected outcome:

package installs successfully

I’m running AlmaLinux 8.7 nearly up to date

Any ideas?

Just looking at the error, I would say they the GPG key you have added to the repo in Foreman is wrong.
Perhaps the package makers updated the GPG keys?

I guess it was. I did download the rpm and figure out which it specifically signed it, and it verified correctly. End up re-adding all the GPG keys and now it works. I think I managed to miss one. Thanks