Gunnar Wolf dijo [Fri, Aug 07, 2026 at 09:37:25AM -0600]:
I think the following does the trick:$ KEYID=0x2404C9546E145360 # Naturally, replace for your own $ TMPDIR=$(mktemp -d) $ sq network keyserver search $KEYID --server hkps://keyring.debian.org --cert-store $TMPDIR --quiet $ sq cert list $KEYID --cert-store $TMPDIR $ rm -rf $TMPDIR Expired keys will output a “Warning: ($keyid) is unusable: No binding signature at time ($curr_time), because Policy rejected non-revocation signature” to STDERR. Of course, you could beautify this, but just for checking you key's status in the keyring, it should do the trick 🙃
And if you happen to prefer gpg's incantations, an equivalent would be:
$ KEYID=0x2404C9546E145360 # Naturally, replace for your own
$ TMPDIR=$(mktemp -d)
$ gpg --homedir $TMPDIR --keyserver hkps://keyring.debian.org --recv-keys
$KEYID
$ gpg --list-key $KEYID
$ rm -rf $TMPDIR
A valid key will output the available subkeys as usual, an expired key will
give a somewhat cryptic “gpg: error reading key: No public key” message.
signature.asc
Description: PGP signature
