APT verifies signatures when it downloads packages. It's better to use the .deb files from /var/cache/apt/archives, or (even better) use apt-offline.

Reply via email to