I like to put the contents of /etc inside git, so I can see what auto-updates change, and when something breaks, so I can go back and find out what I changed since it last worked.

At the moment I'm being told:

modified:   trusted.gpg

modified:   trusted.gpg~

git diff is no use as these are binary files. Of course I could check them in, but these files are central to package security, so doing that would make mockery of my attempts at being secure! So, how do I find out what has changed?

As root I've tried:

cd /etc/apt

gpg -k trusted.gpg

(also tried --list-keys, --list-public-keys). It says gpg: error reading key: public key not found.

I'm sure it must just be a matter of discovering the correct parameters to give to gpg?