if a repo is not accessible, try one of the official mirrors

Once the repos start including metadata about official mirrors (fdroidserver#14 (closed)), the client should try to use a mirror if it can't reach the main repo. Following the Debian model, if we use the signing key as the trusted ID of a given repo, then any repo can be freely mirrored anywhere and it will still be trusted.