The issue can reproduce in TF-M 1.3/1.4 and on targets enabling multiple image boot. After successful build, root-RSA-3072_1.pem can be found in cmake_build/install/image_signing/keys, but root-RSA-3072.pem doesn't.