Signatures were invalid: BADSIG 648ACFD622F3D138 Debian Archive Automatic Signing Key (10/buster)

When I type apt-get update (even apt update) on Debian 10, I am getting an error that is something like

apt update

I am getting this:

Hit:1 http://deb.debian.org/debian buster InRelease
Hit:2 http://security.debian.org/debian-security buster/updates InRelease
Get:3 http://deb.debian.org/debian buster-updates InRelease [51.9 kB]
Err:3 http://deb.debian.org/debian buster-updates InRelease
  The following signatures were invalid: BADSIG 648ACFD622F3D138 Debian Archive Automatic Signing Key (10/buster) 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://deb.debian.org/debian buster-updates InRelease: The following signatures were invalid: BADSIG 648ACFD622F3D138 Debian Archive Automatic Signing Key (10/buster) 
W: Failed to fetch http://deb.debian.org/debian/dists/buster-updates/InRelease  The following signatures were invalid: BADSIG 648ACFD622F3D138 Debian Archive Automatic Signing Key (10/buster) 
W: Some index files failed to download. They have been ignored, or old ones used instead.

How am I supposed to fix this one?

Try the following commands on your Debian Linux:

sudo apt-get clean
sudo apt-get autoclean
sudo apt-get update
1 Like

Have you tried the following?

# clean it
sudo apt-get clean 

# cd into the folder
cd /var/lib/apt 

# make a backup 
sudo mv lists old.backup

# make a new folder
sudo mkdir -p lists/partial 

# try it again
sudo apt-get clean 
sudo apt-get update

Did it worked?

1 Like

Linux sysadmin blog - Linux/Unix Howtos and Tutorials - Linux bash shell scripting wiki