RPM v6 can store multiple signatures in the header. The metadata however can only represent a single key ID. https://rpm.org/releases/6.0.0