dpvpro: I don't know, I only maintain this AUR package. You might want to ask on IRC or file a bug report against "new-package", see bug reporting guidelines. Please leave a link to the issue here if you do so.

Why this package not in extra repo? But debian-ports-archive-keyring and debian-archive-keyring are in extra repo.

Thank you for checking. It's hard to tell when they will shift to the next package date. I'll update this soon. It would be nice to put in some code to grok the latest numerical date and update to that, but it wouldn't work with hash checks.

Switched source URL to use the http mirrors as requested.

Adopted and updated. Please note this is the keyring for current Debian packages, not those in the archive. For those, please see the AUR package for debian-archive-keyring.

Latest is debian-keyring_2016.08.10_all.deb, please update. There are methods to grok a page like that and download the latest .deb.

instead of using fixed debian mirror for download source, it would be better to use the load balancer http://httpredir.debian.org/debian so that it would select the best mirror appropriate for geolocation. Read more at https://www.debian.org/mirror/list