The man page for rpm only mentions PGP signatures -- no mention is made of the current default of GPG.
*** Bug 23612 has been marked as a duplicate of this bug. ***
The rpom.8 man page has been rewritten in rpm-4.0.3, mentions GPG prominently.