FYI:
This is thesis on topic how to verify rpm signatures using DNSsec:
https://www.vutbr.cz/en/students/final-thesis?zp_id=110044&aid_redir=1
This is something I would love to pilot in Copr one day.
Despite few initial mandatory pages in Czech, the paper itself is in English.
Miroslav