fix: consistently validate pubkey and throw 404 if not found

fix: consistently validate pubkey and throw 404 if not found #9463