Check archive PGP sign (and force to fetch tar.gz)
Upstream provides Zstandard Release Signing Key signing@zstd.net, 4EF4AC63455FC9F4545D9B7DEF8FE99528B52FFD
Upstream provides Zstandard Release Signing Key signing@zstd.net, 4EF4AC63455FC9F4545D9B7DEF8FE99528B52FFD