how to verify pgp signature command line