The example command line says "--ignore-release-gpg", and so it's doing exactly that. :) If you leave that off (and set up the archive keys) debmirror will fetch it and check it.
The example command line says "--ignore- release- gpg", and so it's doing exactly that. :) If you leave that off (and set up the archive keys) debmirror will fetch it and check it.