Verify various styles of GPG download signatures using TOFU.