Question: pgp signature how to check?
Answer: You download the public key of the software author. Check the public key's fingerprint to ensure that it's the correct key. Import the correct public key to your GPG public keyring. Download the software's signature file. Use public key to verify PGP signature.