The website Grams kept a list of vendor's public keys. It appears from cross checking against that roster that not all keys were changed.