stage1: gpg verify and cache retrieved coreos image

That is the current stable version.