The current CI tests for the expired-pgp-keys plugin don't account for the fact that the key URL will usually have a prolonged key by the time the installed one is being checked for expiration. We should update the tests to cover this scenario, which was addressed in rpm-software-management/dnf5#2135.