Getting invalid signature after using pacman

I've scoured the forums, but to no avail. My problem ocurrs when I try to download any package with pacman, and apparently I get an invalid signature from Philip Müller, but also others.

I'm using the virtual machine Virtual Box (version 6.1.8) on a Windows 10 host. I've used the newest iso for manjaro i3 (in this case minimal version manjaro-i3-20.0.1-minimal-200511-linux56.iso, but it has happened on other ones).

using sudo pacman -Syu --debug, returns this:

debug: pacman v5.2.1 - libalpm v12.0.1
debug: config: attempting to read file /etc/pacman.conf
debug: config: new section 'options'
debug: config: CacheDir: /var/cache/pacman/pkg/
debug: config: HoldPkg: pacman
debug: config: HoldPkg: glibc
debug: config: HoldPkg: manjaro-system
debug: config: SyncFirst: manjaro-system
debug: config: SyncFirst: archlinux-keyring
debug: config: SyncFirst: manjaro-keyring
debug: config: arch: x86_64
debug: config: SigLevel: Required
debug: config: SigLevel: DatabaseOptional
debug: config: LocalFileSigLevel: Optional
debug: config: new section 'core'
debug: config: SigLevel: PackageRequired
debug: config file /etc/pacman.conf, line 77: including /etc/pacman.d/mirrorlist
debug: config: new section 'extra'
debug: config: SigLevel: PackageRequired
debug: config file /etc/pacman.conf, line 81: including /etc/pacman.d/mirrorlist
debug: config: new section 'community'
debug: config: SigLevel: PackageRequired
debug: config file /etc/pacman.conf, line 85: including /etc/pacman.d/mirrorlist
debug: config: new section 'multilib'
debug: config: SigLevel: PackageRequired
debug: config file /etc/pacman.conf, line 92: including /etc/pacman.d/mirrorlist
debug: config: finished parsing /etc/pacman.conf
debug: setup_libalpm called
debug: option 'logfile' = /var/log/pacman.log
debug: option 'gpgdir' = /etc/pacman.d/gnupg/
debug: option 'hookdir' = /etc/pacman.d/hooks/
debug: option 'cachedir' = /var/cache/pacman/pkg/
debug: registering sync database 'core'
debug: database path for tree core set to /var/lib/pacman/sync/core.db
debug: "/var/lib/pacman/sync/core.db.sig" is not readable: No such file or directory
debug: sig path /var/lib/pacman/sync/core.db.sig could not be opened
debug: missing optional signature
debug: setting usage of 15 for core repository
debug: adding new server URL to database 'core': http://manjaro.dcc.uchile.cl/stable/core/x86_64
...
debug: adding new server URL to database 'core': https://download.nus.edu.sg/mirror/manjaro/stable/core/x86_64
debug: registering sync database 'extra'
debug: database path for tree extra set to /var/lib/pacman/sync/extra.db
debug: "/var/lib/pacman/sync/extra.db.sig" is not readable: No such file or directory
debug: sig path /var/lib/pacman/sync/extra.db.sig could not be opened
debug: missing optional signature
debug: setting usage of 15 for extra repository
debug: adding new server URL to database 'extra': http://manjaro.dcc.uchile.cl/stable/extra/x86_64
[...]
debug: adding new server URL to database 'extra': https://download.nus.edu.sg/mirror/manjaro/stable/extra/x86_64
debug: registering sync database 'community'
debug: database path for tree community set to /var/lib/pacman/sync/community.db
debug: "/var/lib/pacman/sync/community.db.sig" is not readable: No such file or directory
debug: sig path /var/lib/pacman/sync/community.db.sig could not be opened
debug: missing optional signature
debug: setting usage of 15 for community repository
debug: adding new server URL to database 'community': http://manjaro.dcc.uchile.cl/stable/community/x86_64
[...]
debug: adding new server URL to database 'community': https://download.nus.edu.sg/mirror/manjaro/stable/community/x86_64
debug: registering sync database 'multilib'
debug: database path for tree multilib set to /var/lib/pacman/sync/multilib.db
debug: "/var/lib/pacman/sync/multilib.db.sig" is not readable: No such file or directory
debug: sig path /var/lib/pacman/sync/multilib.db.sig could not be opened
debug: missing optional signature
debug: setting usage of 15 for multilib repository
debug: adding new server URL to database 'multilib': http://manjaro.dcc.uchile.cl/stable/multilib/x86_64
[...]
debug: adding new server URL to database 'multilib': https://download.nus.edu.sg/mirror/manjaro/stable/multilib/x86_64
:: Synchronizing package databases...
debug: url: http://manjaro.dcc.uchile.cl/stable/core/x86_64/core.db
debug: maxsize: 33554432
debug: using time condition: 1589900107
debug: opened tempfile for download: /var/lib/pacman/sync/core.db.part (wb)
debug: curl returned error 0 from transfer
debug: response code: 304
debug: file met time condition
 core is up to date
debug: url: http://manjaro.dcc.uchile.cl/stable/extra/x86_64/extra.db
debug: maxsize: 33554432
debug: using time condition: 1589989303
debug: opened tempfile for download: /var/lib/pacman/sync/extra.db.part (wb)
debug: curl returned error 0 from transfer
debug: response code: 304
debug: file met time condition
 extra is up to date
debug: url: http://manjaro.dcc.uchile.cl/stable/community/x86_64/community.db
debug: maxsize: 33554432
debug: using time condition: 1590091236
debug: opened tempfile for download: /var/lib/pacman/sync/community.db.part (wb)
debug: curl returned error 0 from transfer
debug: response code: 304
debug: file met time condition
 community is up to date
debug: url: http://manjaro.dcc.uchile.cl/stable/multilib/x86_64/multilib.db
debug: maxsize: 33554432
debug: using time condition: 1589900108
debug: opened tempfile for download: /var/lib/pacman/sync/multilib.db.part (wb)
debug: curl returned error 0 from transfer
debug: response code: 304
debug: file met time condition
 multilib is up to date
debug: loading package cache for repository 'local'
debug: added 744 packages to package cache for db 'local'
debug: loading package cache for repository 'core'
debug: opening archive /var/lib/pacman/sync/core.db
debug: added 263 packages to package cache for db 'core'
:: Starting full system upgrade...
debug: checking for package upgrades
debug: searching for replacements for accountsservice in core
debug: searching for replacements for accountsservice in extra
debug: loading package cache for repository 'extra'
debug: opening archive /var/lib/pacman/sync/extra.db
debug: added 3265 packages to package cache for db 'extra'
debug: searching for replacements for acl in core
debug: searching for replacements for acpi in core
debug: searching for replacements for acpi in extra
debug: searching for replacements for acpi in community
debug: loading package cache for repository 'community'
debug: opening archive /var/lib/pacman/sync/community.db
debug: added 8360 packages to package cache for db 'community'
debug: searching for replacements for acpid in core
debug: searching for replacements for acpid in extra
debug: searching for replacements for acpid in community
debug: searching for replacements for adapta-maia-theme in core
debug: searching for replacements for adapta-maia-theme in extra
debug: searching for replacements for adapta-maia-theme in community
[...]
debug: searching for replacements for kvantum-qt5 in core
debug: searching for replacements for kvantum-qt5 in extra
debug: searching for replacements for kvantum-qt5 in community
debug: searching for replacements for kwindowsystem in core
debug: searching for replacements for kwindowsystem in extra
debug: new version of 'kwindowsystem' found (5.69.0-1 => 5.70.0-1)
debug: adding package kwindowsystem-5.70.0-1 to the transaction targets
debug: searching for replacements for lcms2 in core
debug: searching for replacements for lcms2 in extra
[...]
debug: loading package cache for repository 'multilib'
debug: opening archive /var/lib/pacman/sync/multilib.db
debug: added 297 packages to package cache for db 'multilib'
debug: searching for replacements for lib32-alsa-oss in core
debug: searching for replacements for lib32-alsa-oss in extra
debug: searching for replacements for lib32-alsa-oss in community
debug: searching for replacements for lib32-alsa-oss in multilib
[...]
debug: searching for replacements for linux-api-headers in core
debug: searching for replacements for linux-firmware in core
debug: searching for replacements for linux56 in core
debug: new version of 'linux56' found (5.6.11-1 => 5.6.12-1)
debug: adding package linux56-5.6.12-1 to the transaction targets
debug: searching for replacements for linux56-virtualbox-guest-modules in core
debug: searching for replacements for linux56-virtualbox-guest-modules in extra
debug: new version of 'linux56-virtualbox-guest-modules' found (6.1.6-11 => 6.1.6-12)
debug: adding package linux56-virtualbox-guest-modules-6.1.6-12 to the transaction targets
debug: searching for replacements for llvm-libs in core
debug: searching for replacements for llvm-libs in extra
[...]
debug: searching for replacements for pamac-cli in core
debug: searching for replacements for pamac-cli in extra
debug: new version of 'pamac-cli' found (9.5.0-1 => 9.5.1-4)
debug: adding package pamac-cli-9.5.1-4 to the transaction targets
debug: searching for replacements for pamac-common in core
debug: searching for replacements for pamac-common in extra
debug: new version of 'pamac-common' found (9.5.0-1 => 9.5.1-4)
debug: adding package pamac-common-9.5.1-4 to the transaction targets
debug: searching for replacements for pamac-gtk in core
debug: searching for replacements for pamac-gtk in extra
debug: new version of 'pamac-gtk' found (9.5.0-1 => 9.5.1-4)
debug: adding package pamac-gtk-9.5.1-4 to the transaction targets
debug: searching for replacements for pambase in core
debug: searching for replacements for pango in core
debug: searching for replacements for pango in extra
[...]
debug: searching for replacements for zsh-syntax-highlighting in core
debug: searching for replacements for zsh-syntax-highlighting in extra
debug: searching for replacements for zsh-syntax-highlighting in community
debug: searching for replacements for zstd in core
resolving dependencies...
debug: resolving targets dependencies
debug: started resolving dependencies
debug: checkdeps: package kwindowsystem-5.70.0-1
debug: finished resolving dependencies
debug: started resolving dependencies
debug: checkdeps: package linux56-5.6.12-1
debug: finished resolving dependencies
debug: started resolving dependencies
debug: checkdeps: package linux56-virtualbox-guest-modules-6.1.6-12
debug: checkdeps: missing dependency 'linux56' for package 'linux56-virtualbox-guest-modules'
debug: finished resolving dependencies
debug: started resolving dependencies
debug: checkdeps: package pamac-cli-9.5.1-4
debug: checkdeps: missing dependency 'pamac-common' for package 'pamac-cli'
debug: started resolving dependencies
debug: checkdeps: package pamac-common-9.5.1-4
debug: finished resolving dependencies
debug: pulling dependency pamac-common (needed by pamac-cli)
debug: finished resolving dependencies
debug: started resolving dependencies
debug: checkdeps: package pamac-gtk-9.5.1-4
debug: checkdeps: missing dependency 'pamac-cli' for package 'pamac-gtk'
debug: finished resolving dependencies
looking for conflicting packages...
debug: looking for conflicts
debug: check targets vs targets
debug: check targets vs targets
debug: check targets vs db and db vs targets
debug: check targets vs db
debug: check db vs targets
debug: checking dependencies
debug: checkdeps: package kwindowsystem-5.70.0-1
debug: checkdeps: package linux56-5.6.12-1
debug: checkdeps: package linux56-virtualbox-guest-modules-6.1.6-12
debug: checkdeps: package pamac-cli-9.5.1-4
debug: checkdeps: package pamac-common-9.5.1-4
debug: checkdeps: package pamac-gtk-9.5.1-4
debug: found cached pkg: /var/cache/pacman/pkg/kwindowsystem-5.70.0-1-x86_64.pkg.tar.zst
debug: setting download size 0 for pkg kwindowsystem
debug: found cached pkg: /var/cache/pacman/pkg/linux56-5.6.12-1-x86_64.pkg.tar.xz
debug: setting download size 0 for pkg linux56
debug: found cached pkg: /var/cache/pacman/pkg/linux56-virtualbox-guest-modules-6.1.6-12-x86_64.pkg.tar.zst
debug: setting download size 0 for pkg linux56-virtualbox-guest-modules
debug: found cached pkg: /var/cache/pacman/pkg/pamac-cli-9.5.1-4-x86_64.pkg.tar.zst
debug: setting download size 0 for pkg pamac-cli
debug: found cached pkg: /var/cache/pacman/pkg/pamac-common-9.5.1-4-x86_64.pkg.tar.zst
debug: setting download size 0 for pkg pamac-common
debug: found cached pkg: /var/cache/pacman/pkg/pamac-gtk-9.5.1-4-x86_64.pkg.tar.zst
debug: setting download size 0 for pkg pamac-gtk
debug: sorting by dependencies
debug: started sorting dependencies
debug: sorting dependencies finished

Packages (6) kwindowsystem-5.70.0-1  linux56-5.6.12-1
             linux56-virtualbox-guest-modules-6.1.6-12
             pamac-cli-9.5.1-4  pamac-common-9.5.1-4  pamac-gtk-9.5.1-4

Total Installed Size:  149,17 MiB
Net Upgrade Size:        0,06 MiB

:: Proceed with installation? [Y/n] y
debug: using cachedir: /var/cache/pacman/pkg/
checking keyring...
debug: GPGME version: 1.13.1
debug: GPGME engine info: file=/usr/bin/gpg, home=/etc/pacman.d/gnupg/
debug: looking up key 7A4E76095D8A52E4 locally
debug: key lookup success, key exists
debug: looking up key CAA6A59611C7F07E locally
debug: key lookup success, key exists
debug: key CAA6A59611C7F07E found in cache
debug: looking up key 428F7ECC7117F726 locally
debug: key lookup success, key exists
debug: key 428F7ECC7117F726 found in cache
debug: key 428F7ECC7117F726 found in cache
checking package integrity...
debug: found cached pkg: /var/cache/pacman/pkg/kwindowsystem-5.70.0-1-x86_64.pkg.tar.zst
debug: sig data: iQEzBAABCAAdFiEEFRnVq6Zb9vwrc8dWek52CV2KUuQFAl62lekACgkQek52CV2KUuT9yQf8D/50uEe3FvuMdS7Q2aTtDDCskKn8lmv9/1FfD9eCDvhhfcStIKDVuXtUWnmobnd2ko/vqy+hBJG4yFaH4ld72Fk0cVCj9ioNsN5woNjcEDStkQHACPkMsp31N2MKz3wVnhSFZU0LYCaxg8htWsW9F0oOXNjSxZIv6QOCZ668vXlex4tl9pp3OXQdODbX25T443kp2Y+6a9KXqZ/eHt6bQc8blj1NFinAb64ZqRu3NPCTfCKF92URdxnZO0MFSy3wv90ZzKkpkq3nOCQGPL3uHZfZuNDp/+Uzxe+YEB39f2SVp3xMxwC57gJfmSk86s8TiODpMKyOUmfHPMGvMPymYg==
debug: checking signature for /var/cache/pacman/pkg/kwindowsystem-5.70.0-1-x86_64.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: 7A4E76095D8A52E4
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: 9D74DF6F91B7BDABD5815CA84AC5588F941C2A25, Antonio Rojas <arojas@archlinux.org>, owner_trust unknown, disabled 0
debug: signature is not valid
debug: found cached pkg: /var/cache/pacman/pkg/linux56-5.6.12-1-x86_64.pkg.tar.xz
debug: sig data: iQFGBAABCAAwFiEE5M3+UKLahdWMioxwyqallhHH8H4FAl64J3YSHHBoaWxtQG1hbmphcm8ub3JnAAoJEMqmpZYRx/B+No8IAMQmr1xNxHYMf8o+UaPuLuMEtVI24wnPcspODAI4O1YlyOEikujLzgmQ1P/RebSqqXZlHEzDYbeR+QiZT1UN3AtxrFvASSUGWNuxf7VNbU/P4UzJPJAEAt5N7V9udz5tWncSqsC7Pmr7w/Cr4eSLnKLr4ldbJ6ugTJO7NQ/efK0cd0uwF4QJZtwTpklRjhg+c40Bai/v3gDg+dREiQGdl7Vien72TfX8aKDUPUMsu8RQvT+avAXPVPEXaPf0Uu06iE3wmm57HxdVDWo5grcqnFU1m5FbgpdkFYfOcZCn8DTChS6EuYe2FlH/o5Gy/9xNm1GLnysvcFjb8s3kg1/tU/w=
debug: checking signature for /var/cache/pacman/pkg/linux56-5.6.12-1-x86_64.pkg.tar.xz
debug: 1 signatures returned
debug: fingerprint: CAA6A59611C7F07E
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: E4CDFE50A2DA85D58C8A8C70CAA6A59611C7F07E, Philip Müller (Called Little) <philm@manjaro.org>, owner_trust full, disabled 0
debug: signature is not valid
debug: found cached pkg: /var/cache/pacman/pkg/linux56-virtualbox-guest-modules-6.1.6-12-x86_64.pkg.tar.zst
debug: sig data: iQFGBAABCAAwFiEE5M3+UKLahdWMioxwyqallhHH8H4FAl64J3ASHHBoaWxtQG1hbmphcm8ub3JnAAoJEMqmpZYRx/B+4p4H/2TXriidYkLU++kGi6CqevfA+Z1MjUSTk/xnv+yAYI15F9eXstpoqc9KUY3VBGitNCJe4+i1cdz0EE6mW1GGZ9bHoHwuDhPVo77mhC4T0OPvzVBEMxeQKwRfyLv0d1ZkFJNkuQLB7OFatdc6d4HWmnPa4YRgKqWVtsF8TPDM8+AA/2QK5X9m91ryRugvJrkTNjECgnVrxAzYkwMa85U3i+YHaSzJ1v18x8afhPu9m1c0MPx/byoJzRoFtaT7YfaXyirCHH3us91F/W4iD1aNUGm6ULIsiVs1bpINGFpj2Qgg8VHRgv+mxuhD76Tb9t3sBOddOP6Cg9gIRxNDIXKVKWM=
debug: checking signature for /var/cache/pacman/pkg/linux56-virtualbox-guest-modules-6.1.6-12-x86_64.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: E4CDFE50A2DA85D58C8A8C70CAA6A59611C7F07E
debug: summary: valid
debug: summary: green
debug: status: Success
debug: timestamp: 1589127024
debug: exp_timestamp: 0
debug: validity: full; reason: Success
debug: key: E4CDFE50A2DA85D58C8A8C70CAA6A59611C7F07E, Philip Müller (Called Little) <philm@manjaro.org>, owner_trust full, disabled 0
debug: signature is valid
debug: signature is fully trusted
debug: found cached pkg: /var/cache/pacman/pkg/pamac-common-9.5.1-4-x86_64.pkg.tar.zst
debug: sig data: iQEzBAABCgAdFiEEJbLVGF1N0suB8DM8Qo9+zHEX9yYFAl7FIMYACgkQQo9+zHEX9yaeNgf/WkOiYyz1yZd2Izd9wgQmZvYrDvKMNCDxflhN+q1ySzfl1abRwtRACAgVoKjWwOt83ORurUdxSAXO6M6SaeCa12nyFAjJrgpTbHytyLwR6hAsrwZ+FyA1Efh2IvSFIE78BaQS89aS0BlX9E+obQAz0Kr2cql0ZomPNgOZsN2lzLWL9muOKv162wKtkayb8fs/rH7dpR+NPPC1090LHHbBAmT5g7ZU1axuCFMN9/dTdsI2OlOmte1CMyxVPwk4aQYx4UHmng78zDPFmCdbBO1/vGbgxgTFpcs+R9l4kWTzAhKdTmRskoHMtgOcLDYfQjQvalw/fWi+oUD+uyE6MTwfiw==
debug: checking signature for /var/cache/pacman/pkg/pamac-common-9.5.1-4-x86_64.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: 25B2D5185D4DD2CB81F0333C428F7ECC7117F726
debug: summary: valid
debug: summary: green
debug: status: Success
debug: timestamp: 1589977286
debug: exp_timestamp: 0
debug: validity: full; reason: Success
debug: key: F66AD0FF0E57C561615A0901CEE477135C5872B0, Helmut Stult (schinfo) <helmut.stult@schinfo.de>, owner_trust marginal, disabled 0
debug: signature is valid
debug: signature is fully trusted
debug: found cached pkg: /var/cache/pacman/pkg/pamac-cli-9.5.1-4-x86_64.pkg.tar.zst
debug: sig data: iQEzBAABCgAdFiEEJbLVGF1N0suB8DM8Qo9+zHEX9yYFAl7FIMkACgkQQo9+zHEX9ybuyAgAmSXyEg/5pKk3Za98Fvk21F08GlVenvySSaF3KoBz0HdDRi8WVJKbczD6yvqaB4dJ4jdQJKdVdYAo+lAvLqAsjGkECkSKJgD7WFrVNjZHnPzOVxD1qz0Thh8hahbjMD5FxFFIEYG13/Bhngt0mH7BSnI3OMBURvrf8+jv5x/rxxPVgbbWiqgcTEKnUqFroxQa7O07ipHYsHDTiaGBFj2fdHBQpoTjf+vsvCwFdIXIJC5o8tsbjAm4HlFvoTuvY07Z7XO6bkDUkf8Dt49QrcFUhKG7DvKP7YnwNjrhtYBpY78ao5bBgNbTNpDj7XJX0N5ve86JM3129EGRLruN4+JdHQ==
debug: checking signature for /var/cache/pacman/pkg/pamac-cli-9.5.1-4-x86_64.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: 25B2D5185D4DD2CB81F0333C428F7ECC7117F726
debug: summary: valid
debug: summary: green
debug: status: Success
debug: timestamp: 1589977289
debug: exp_timestamp: 0
debug: validity: full; reason: Success
debug: key: F66AD0FF0E57C561615A0901CEE477135C5872B0, Helmut Stult (schinfo) <helmut.stult@schinfo.de>, owner_trust marginal, disabled 0
debug: signature is valid
debug: signature is fully trusted
debug: found cached pkg: /var/cache/pacman/pkg/pamac-gtk-9.5.1-4-x86_64.pkg.tar.zst
debug: sig data: iQEzBAABCgAdFiEEJbLVGF1N0suB8DM8Qo9+zHEX9yYFAl7FIMwACgkQQo9+zHEX9yZVBQf/U9+YHrq2OL4nIXYyCAKv8iVbuId5ifo3wXP/IAuIRfn/vbi6cMviGR9+nYxk78K/WQvUT/YIaRSleG+X1j4jXcOXIHZwAdxaupqPT5gzDGXSIGmiWYMV/tZsZGqtx9h1O6sb/N+NfPHGMAF6Fsq2Zm8ujfXaTwNUk8RoZz4/NujNcTep8fwp8XwJA4nQzNbN1JbHDPmwUbxpIQBsxW4BZvWVHES72t2fe5pKG2JpruUjMF7ioN1DtK2B7iL9Ve2YOssF7MPc0DPhr2QtMG0tW8rdghv58DVhM9aHFX2URUfJMD3bgoDaORyod2dgFIYj0PQpFrcNe5K0UjvhGsl5+Q==
debug: checking signature for /var/cache/pacman/pkg/pamac-gtk-9.5.1-4-x86_64.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: 25B2D5185D4DD2CB81F0333C428F7ECC7117F726
debug: summary: valid
debug: summary: green
debug: status: Success
debug: timestamp: 1589977292
debug: exp_timestamp: 0
debug: validity: full; reason: Success
debug: key: F66AD0FF0E57C561615A0901CEE477135C5872B0, Helmut Stult (schinfo) <helmut.stult@schinfo.de>, owner_trust marginal, disabled 0
debug: signature is valid
debug: signature is fully trusted
error: kwindowsystem: signature from "Antonio Rojas <arojas@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/kwindowsystem-5.70.0-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

What caught my attention is this part:

...
debug: checking signature for /var/cache/pacman/pkg/linux56-5.6.12-1-x86_64.pkg.tar.xz
debug: 1 signatures returned
debug: fingerprint: CAA6A59611C7F07E
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: E4CDFE50A2DA85D58C8A8C70CAA6A59611C7F07E, Philip Müller (Called Little) <philm@manjaro.org>, owner_trust full, disabled 0
debug: signature is not valid
...

At first, it actually said it's trust was "marginal" and I changed it to "full". So here are the things that I've tried:

from

thefallenrat said:

It seems you have to do it this way :

Edit the key

sudo pacman-key --edit-key CAA6A59611C7F07E

When you’re on gpg> prompt, trust the key

gpg> trust 
#choose either trust fully or ultimately

quit from the prompt and run the update again…

Which I did, but turned out I was still getting the invalid status of "bad signature", even though it displays "validity: full" when using gpg to edit the key. On a side note, I don't know if this matters, but I get the following output upon exiting gpg

...
gpg: key 1EB2638FF56C0C53: no user ID for key signature packet of class 10 // 2 times shown
gpg: key 786C63F330D7CB92: no user ID for key signature packet of class 10 // about 40 times
...

from

quip said:

I have the same error.

sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman -Syyu

Or

sudo rm -R /etc/pacman.d/gnupg  
sudo pacman-key --init  
sudo pacman -Syy  
sudo pacman-key --populate archlinux manjaro  
sudo pacman -Syu

Or

sudo pacman -Syy
sudo pacman-key --populate
sudo pacman-key --refresh
sudo pacman -S manjaro-keyring archlinux-keyring
sudo pacman -Syyu

Or

rm -r /var/cache/pacman/pkg/
pacman -S manjaro-keyring archlinux-keyring

from

jonathon said:

If you're getting an error similar to " Can’t update: signature from *** is marginal trust " or " invalid or corrupted package " you probably just need to update your package signing keys:

sudo pacman -Sy archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syu

If one fails, try the next then retry , and once all succeed retry the operation.

Of course, it's also possible that the package file actually is corrupt. Remove it from /var/cache/pacman/pkg so pacman will download it again.

If no package file is explicitly mentioned then you may have an incomplete download. Run sudo rm /var/cache/pacman/pkg/*.part to remove any partial downloads.

If this still don't work, read the rest of this thread: Issues with "signature is marginal trust" or "invalid or corrupted package"

If --refresh-keys doesn't work (for whatever reason) try:

sudo pacman-key --refresh-keys --keyserver pgp.mit.edu

This uses a different keyserver than the default so might work better depending on your internet connection.

If you still can't update, try updating your package mirrors too, before finally updating all packages:

sudo pacman-mirrors -f0
sudo pacman -Sy archlinux-keyring manjaro-keyring
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syyu

If you have any other errors, there's the "nuclear option":

sudo rm -fr /etc/pacman.d/gnupg
sudo pacman-key --init
sudo pacman-key --populate archlinux manjaro
sudo pacman-key --refresh-keys
sudo pacman -Syyu

And if this still doesn't work, and you trust that the packages are actually correct and not corrupt and haven't been interfered with, then you can force (re)installation of the keyring packages:

sudo pacman -U /var/cache/pacman/pkg/{archlinux,manjaro}-keyring*.pkg.tar.xz 

then try again.

So, some important points to keep in mind, that could explain why this happens:

  • I'm using Virtual Box (6.1.8) on Windows 10 as host, with Linux Manjaro i3 (minimal) as guest (newest version, as far as I know)
  • I've tried all and more solutions from the ones posted here, but adding more forum posts would extend this unnecessarily. For example:
    • Redownloading the iso file.
    • Using local mirrors (from my country) & sorting mirrors by fastest.
    • The troubleshoot options shown here, except the one where I could disable the signature check (should I do that?).
    • Changing the key trust (for Philip Müller) to "ultimate".
    • Other solutions lost in my search history.

I hope this information is enough, and I'm sorry if I missed something, otherwise please let me know!

Hello and welcome to Manjaro!

If the downloaded files are corrupted but the signature is correct, it still tells you that the signature is not correct. Could you please delete the affected files from the pacman cache with:

sudo rm /var/cache/pacman/pkg/kwindowsystem-5.70.0-1-x86_64.pkg.tar.zst

and this

sudo rm /var/cache/pacman/pkg/linux56-5.6.12-1-x86_64.pkg.tar.xz

update the mirrors again and then retrace the steps of what

I'm at a loss of words. Thank you so much! I don't know why I had to delete them manually, even though everytime I was asked if I wanted to delete them in the terminal prompt, and said yes, it wouldn't be enough.

Thank you again.

Forum kindly sponsored by