Page History

...

• Source package: https://dist.apache.org/repos/dist/dev/incubator/pegasus/a.b.c-RCd/apache-pegasus-a.b.c-sourceincubating-releasesrc.zip
• Signature (asc): https://dist.apache.org/repos/dist/dev/incubator/pegasus/a.b.c-RCd/apache-pegasus-a.b.c-sourceincubating-releasesrc.zip.asc
• Checksum (sha512): https://dist.apache.org/repos/dist/dev/incubator/pegasus/a.b.c-RCd/apache-pegasus-a.b.c-sourceincubating-releasesrc.zip.sha512

Please download the files altogether.

...

Before checking the signature, you should download and import the public keys from https://dist.apache.org/repos/dist/dev/incubator/pegasus/KEYS

...

gpg --verify apache-pegasus-2.1.0-sourceincubating-releasesrc.zip.asc apache-pegasus-2.1.0-sourceincubating-releasesrc.zip

This should produce something like this:

...

sha512sum --check apache-pegasus-2.1.0-sourceincubating-releasesrc.zip.sha512

If it produces "apache-pegasus-2.1.0-sourceincubating-releasesrc.zip: OK", it means the package is good.

...