Hi, I downloaded Netbeans 11[1] and got an error when verifying the signature[3] of the downloaded zip. I got the KEYS from [2].
[1] - https://us.mirrors.quenda.co/apache/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-bin.zip [2] - https://www.apache.org/dist/incubator/netbeans/KEYS [3] - https://www.apache.org/dist/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-source.zip.asc I opened a Command Line in Windows 10 and executed GnuPG for Windows version 2.2.11: gpg --import KEYS.txt gpg --verify incubating-netbeans-11.0-source.zip.asc.txt incubating-netbeans-11.0-bin.zip Output: gpg: Signature made 03/20/19 02:27:54 Central Standard Time (Mexico) gpg: using RSA key 79C8F02A726E9EF53646D712B2BF814FA145CB2D gpg: BAD signature from "Laszlo Kishalmi (CODE SIGNING KEY) <lkisha...@apache.org>" [unknown] Is the validation process correct? Is there an error with the KEYS or the downloaded file? Best regards, Eduardo Quintanilla Software Developer The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. La informaci?n transmitida est? destinada ?nicamente a la persona o entidad a quien que va dirigida y puede contener informaci?n confidencial y/o material privilegiado. Cualquier revisi?n, retransmisi?n, difusi?n u otros usos, o cualquier acci?n tomada por personas o entidades distintas al destinatario bas?ndose en esta informaci?n est? prohibida. Si usted recibe este mensaje por error, por favor contacte al remitente y elimine el material de cualquier computadora.