hi. I am using debmirror to set up a private mirror... 
i downloaded the gpg keys and imported it.. 
i am running it debmirror as follows
debmirror -v -a i386 -h ftp.us.debian.org -d sarge /upgrade/files/debmirror --nosource --progress

and then here is the output of what happens...
it errors out..

please help...


Mirroring to /upgrade/files/debmirror from http://anonymous:ftp.us.debian.org//debian/
Arches: i386
Dists: sarge
Sections: main,contrib,non-free,main/debian-installer
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
Getting: dists/sarge/Release... ok
Getting: dists/sarge/Release.gpg... ok
gpg: Signature made Sat 17 Dec 2005 04:46:27 AM CST using DSA key ID 4F368D5D
gpg: Can't check signature: public key not found
Release signature does not verify.
Get Packages and Sources files and other miscellany.
dists/sarge/main/binary-i386/Packages.gz needs fetch
Getting: dists/sarge/main/binary-i386/Packages.gz... ok
dists/sarge/main/binary-i386/Release needs fetch
Getting: dists/sarge/main/binary-i386/Release... ok
dists/sarge/contrib/binary-i386/Packages.gz needs fetch
Getting: dists/sarge/contrib/binary-i386/Packages.gz... ok
dists/sarge/contrib/binary-i386/Release needs fetch
Getting: dists/sarge/contrib/binary-i386/Release... ok
dists/sarge/non-free/binary-i386/Packages.gz needs fetch
Getting: dists/sarge/non-free/binary-i386/Packages.gz... ok
dists/sarge/non-free/binary-i386/Release needs fetch
Getting: dists/sarge/non-free/binary-i386/Release... ok
dists/sarge/main/debian-installer/binary-i386/Packages.gz needs fetch
Getting: dists/sarge/main/debian-installer/binary-i386/Packages.gz... ok
Errors:
 Release signature does not verify.
Failed to download some Package, Sources, Contents or release files!
WARNING: releasing 1 pending lock...