no direct internet download from apt repositories, which over time will change or cease to exist. also migrate to gpg2 on newer ubuntu.
PGP tests relied on expired gpg keys: upgrade with newer Debian keys from https://ftp-master.debian.org/keys.html. Download new fixtures files from http://ftp.debian.org/debian/dists/buster/