Hi,

I was trying to reproduce w/o success... Tried all combinations of
gpgv/sqv and whats not else. Then did a fresh debootstrap and the
problem is present there.

The difference between my test system and the new chroot came to be
modernized apt sources (apt modernize-sources). That includes:

    Signed-By: /usr/share/keyrings/devuan-archive-keyring.gpg

which obviously resolves the problem. And that was the reason my
testing of the devuan-keyring showed no problems before it got built :(

Let's restore the .asc files in /etc/apt/trusted.gpg.d/
and keep the pgp extension change (including the gpg symlinks). That is
most closely following debian-archive-keyring.

With best regards,
b.