working download verifier using gpg