gpg --verify neon-user-20210513-1239.iso.sig neon-user-20210513-1239.sha256sum gpg: Signature made Thu 13 May 2021 09:52:31 AM -03 gpg: using RSA key 348C8651206633FD983A8FC4DEACEA00075E1D76 gpg: BAD signature from "KDE neon ISO Signing Key <neon@kde.org>" [unknown]