Question: what is gpgcheck and gpg key?
Answer: gpgcheck stands for signature verification from its central database. If signature verification is successful then you sure about the security. If you set the value of gpgcheck is 1 then it asks for signature varification else it doesn't. Example of gpgkey in RHEL- RPM-GPG-KEY-redhat-release.