About OIDC's ID Token Verification

API
6

That information is not documented.

To my knowledge the key hasn’t been changed ever.

So you can either recache the keys periodically or whenever someone tries to login.