Maybe have each drone regularly broadcast their GPS's most recent NMEA sentence (latitude, longitude, timestamp, altitude, etc.) signed with their public key?

That's what came up with after thinking about it for a bit. There's probably a better solution out there.