-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-zoneminder-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-zoneminder-19.0-trixie-amd64.iso 628e2cea457b40992ee3f278a4054ea94b8d0b2b22c0fb0084b7f2d22d80037c turnkey-zoneminder-19.0-trixie-amd64.iso $ sha512sum turnkey-zoneminder-19.0-trixie-amd64.iso bb82852d4ddc7a2329c6ba17b8b03212bebcd4387bb64e821aeeb23ffb292c2920afc679ef78853340e2804d5cdfd1aee971f0f354c59d4c892a5bd93e081606 turnkey-zoneminder-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-zoneminder-19.0-trixie-amd64.iso.hash turnkey-zoneminder-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-zoneminder-19.0-trixie-amd64.iso.hash turnkey-zoneminder-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjD8ACgkQ2fx1wp0K AzvmuhAAhYenu1NXssM0bW6VO18Z/lWO9NXHtBk4EP0g+W+FLfl7sk8nKPBFijE+ z6KI/Lgb8Zx8rQTNK0lJB4bvjbbYUHZRIpUTMBR6doyfI9Fc3HgZ+UoCrXpkA2/K D30oz0zZibLCQ1dooeyqeLhVqZ6tMF3aurLh9O3Wx4RcgP7GzhwrqaxNVus10KV2 rsGgLKljSnrfS4hdlQk9n+ngmwOf1wGtQgpcXN/7Kvd/nzFsVuBTN7Am8QWdnrDS QABZhv6LgoRpmW3nWavHw9Db3S4OR4b2vb63bfHs4iq/IoIzQw8a3dXv1pjCT9wo R+7/Ap130FMEFujMdMrANbq/kQ3crzimaKy8MBE4GnGjOmqa69WsZHgxkMdl/yXZ SxCBQhIkqjwxHHLVeTvNd5IkRUX9/iUMPtolGRG5Pgppas5NthuXnweH/Bq0715E oHz72mJxIeAxt2WlDSg4cTf1x1udeA1XiD22PVWmBpjCG92nwMoGe7XNCbMOegqZ 2IrDkuJpRtkqzn9+xBAjIzuog149KmCdxRyP8R89CZJUyhfAlZEMpgDh+zsQwpeX VfcRnEtoSzeLjOnTScD1ux7dh5i4lMJjD1YYxNqWJ0o94NBgnGpnZzJ6FvxaXOzY UMsAzC7BUYYHoWjYkGMpcRUVB108f+5h8g3cR6mOSXU4aqeME8I= =FB93 -----END PGP SIGNATURE-----