I have the two LetsEncrypt root certificates.
Both self-signed, and AFIK I don’t locally have the ISRG Root X1 which is issued by the expired DST Root CA X3 cert. The one that dirmngr keeps referring to.
I have looked in all the folders inside certificate manager for both the computer and user. I only have those two self-signed root certs. I don’t know where else to look.