Error: GPG check FAILED AL/CL8 & 9

We have an AL/CL 8 and 9 servers with the same update failures:

[2025-09-02 02:45:31 -0700] E [/usr/local/cpanel/scripts/rpmup] The “/usr/local/cpanel/scripts/rpmup” command (process 25657) reported error number 1 when it ended.
...
[2025-09-02 02:46:15 -0700] E [/usr/local/cpanel/scripts/modsec_vendor] RPM based rule sets can not be updated by this system. Use `yum update ea-modsec2-rules-owasp-crs` instead.
[2025-09-02 02:46:15 -0700] E [/usr/local/cpanel/scripts/modsec_vendor] The “/usr/local/cpanel/scripts/modsec_vendor update --auto” command (process 27110) reported error number 1 when it ended.

/scripts/rpmup on both result in the exact same error. This is the CL9 error message. The only difference between the error messages are the el8's and el9's:

Downloading Packages:
(1/15): libudisks2-2.9.4-11.el9_6.1.x86_64.rpm  771 kB/s | 190 kB     00:00
(2/15): pam-devel-1.5.1-26.el9_6.x86_64.rpm     4.8 MB/s | 140 kB     00:00
(3/15): python-unversioned-command-3.9.21-2.el9 307 kB/s | 8.9 kB     00:00
(4/15): python3-devel-3.9.21-2.el9_6.2.x86_64.r 3.5 MB/s | 204 kB     00:00
(5/15): python3-tkinter-3.9.21-2.el9_6.2.x86_64 5.2 MB/s | 308 kB     00:00
(6/15): udisks2-2.9.4-11.el9_6.1.x86_64.rpm     3.9 MB/s | 470 kB     00:00
(7/15): udisks2-iscsi-2.9.4-11.el9_6.1.x86_64.r 965 kB/s |  25 kB     00:00
(8/15): udisks2-lvm2-2.9.4-11.el9_6.1.x86_64.rp 1.3 MB/s |  41 kB     00:00
(9/15): cpanel-analytics-1.4.57-9.9.1.cpanel.no 151 kB/s | 101 kB     00:00
(10/15): pam-1.5.1-26.el9_6.x86_64.rpm          3.0 MB/s | 543 kB     00:00
(11/15): sos-4.9.2-1.el9_6.cloudlinux.1.noarch. 1.0 MB/s | 895 kB     00:00
(12/15): imunify-ui-8.6.1-2.noarch.rpm           38 kB/s |  13 kB     00:00
(13/15): python3-libs-3.9.21-2.el9_6.2.x86_64.r 6.4 MB/s | 7.5 MB     00:01
(14/15): python3-3.9.21-2.el9_6.2.x86_64.rpm     19 kB/s |  26 kB     00:01
(15/15): imunify-ui-antivirus-cpanel-8.6.1-2.no 3.6 MB/s | 4.9 MB     00:01
--------------------------------------------------------------------------------
Total                                           4.1 MB/s |  15 MB     00:03
CloudLinux-9 - Imunify360                       1.3 MB/s | 1.3 kB     00:00
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CloudLinux (0x8608CB71) is already installed
The GPG keys listed for the "CloudLinux-9 - Imunify360" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: imunify-ui-8.6.1-2.noarch
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CloudLinux
Public key for imunify-ui-antivirus-cpanel-8.6.1-2.noarch.rpm is not installed. Failing package is: imunify-ui-antivirus-cpanel-8.6.1-2.noarch
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CloudLinux
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'yum clean packages'.
Error: GPG check FAILED
(XID m27f68) “/usr/bin/yum” reported error code “1” when it ended:

Oddly, another AL/CL9 box with the same errors manually updated with /scripts/rpmup just fine.

Did this and got the same results:

dnf clean all
dnf makecache

Is there a fix?

Also, we're using OWASP ModSecurity Core Rule Set V3.0; why is update looking for

[2025-09-02 02:46:15 -0700] E [/usr/local/cpanel/scripts/modsec_vendor] RPM based rule sets can not be updated by this system. Use `yum update ea-modsec2-rules-owasp-crs` instead.

Weird stuff.