The release is signed with:
pub 4096R/36C2E964 2015-06-24 [expired: 2017-02-13]
uid [ expired] Wladimir J. van der Laan (Bitcoin Core binary release signing key) <
laanwj@gmail.com>
which has expired. Is there a newer key and signature available?
Apparently the expiration date was bumped to 2019:
https://pgp.mit.edu/pks/lookup?op=vindex&search=0x90C8019E36C2E964Similarly, my software (after an import just now) shows:
2019-02-14
You should do: gpg --refresh-keys 0x90C8019E36C2E964