Bug #97847 for IO-Digest: Signature Check Fails

Searching IO::Digest on cpanmetadb ...
--> Working on IO::Digest
Fetching http://cpan.metacpan.org/authors/id/C/CL/CLKAO/IO-Digest-0.11.tar.gz
-> OK
Fetching http://cpan.metacpan.org/authors/id/C/CL/CLKAO/CHECKSUMS
-> OK
Verifying the signature of CHECKSUMS
Verified OK!
Verifying the SHA1 for IO-Digest-0.11.tar.gz
Checksum for IO-Digest-0.11.tar.gz: Verified!
Unpacking IO-Digest-0.11.tar.gz
Entering IO-Digest-0.11
Verifying the SIGNATURE file
Executing gpg --verify --batch --no-tty --keyserver=hkp://pool.sks-keyservers.net:11371 --keyserver-options=auto-key-retrieve SIGNATURE
gpg: enabled debug flags: memstat
gpg: Signature made Sun Sep 12 05:32:21 2004 NZST
gpg:                using DSA key 9355E57651240396
gpg: requesting key 9355E57651240396 from hkp server pool.sks-keyservers.net
gpg: key 9355E57651240396: public key "Chia-liang Kao <clkao@clkao.org>" imported
gpg: public key 7C397A5FCA66D0B1 is 24595 seconds newer than the signature
gpg: public key 7C397A5FCA66D0B1 is 24557 seconds newer than the signature
gpg: Note: signatures using the MD5 algorithm are rejected
gpg: public key AF14525ECA0721E6 is 5706 seconds newer than the signature
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u
gpg: next trustdb check due at 2015-07-20
gpg: Total number processed: 1
gpg:               imported: 1
gpg: Good signature from "Chia-liang Kao <clkao@clkao.org>" [unknown]
gpg:                 aka "Chia-liang Kao <clkao@CirX.ORG>" [unknown]
gpg:                 aka "Chia-liang Kao <clkao@bestpractical.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C858 A0C5 5328 B98D F70C  9733 9355 E576 5124 0396
random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
secmem usage: 0/32768 bytes in 0 blocks
--- SIGNATURE Sat Feb 16 22:52:26 2013
+++ (current) Fri Aug  8 08:29:48 2014
@@ -1,19 +1,23 @@
-SHA1 299be842ca6269b3987f57f9a19cbf34aa156a3a CHANGES
-SHA1 eff5768541f715616b4d455e12c41c63546d4d4f MANIFEST
-SHA1 69d1c6948846f09c516e41a7b862b67339e7ea72 META.yml
-SHA1 259f06f70c1f0774a8354f8ebe55f60e9220c423 Makefile.PL
+SHA1 a6844f9e74d3a187fe785a1e2ff72d684671d233 CHANGES
+SHA1 9cce10eba0f04df9a143023c9dcd6549fe955f69 MANIFEST
+SHA1 0577054e9a8b93dbdca01ab5de6d01e9646ee00a META.yml
+SHA1 93cc4b0526ca620d6afbe3073e0a8f271175641d MYMETA.json
+SHA1 823793e23f78766c821a8bde1bfc260d834116c7 MYMETA.yml
+SHA1 47d8284926596654d558401c2ec9118008ce1135 Makefile.PL
 SHA1 83db5470dc3d684d285ffc728f270e5d5ee40d9c README
-SHA1 127fb0a41f8433b854676941c699693abc3e85d4 inc/ExtUtils/AutoInstall.pm
-SHA1 02597776ad22aacd2c8e189594fcbf701390b606 inc/Module/Install.pm
-SHA1 53422ed14b41bbc9af3ac14a26ced3ed21dee0bc inc/Module/Install/AutoInstall.pm
-SHA1 7ca8b8f54287c2b5af8062fc9f349275a07e06f3 inc/Module/Install/Base.pm
-SHA1 b6af22816210f8eaab4c2c616e05a8892b2fcfd0 inc/Module/Install/Can.pm
-SHA1 33659c004518e95afb6ffafad41e84f2a6268412 inc/Module/Install/Fetch.pm
-SHA1 b42b4d3a89848325ae29422c72638e1571e7af1b inc/Module/Install/Include.pm
-SHA1 c4ed10cd20914c04f3fff3f8aaf8943372cec114 inc/Module/Install/Makefile.pm
-SHA1 ccf9b6267b5c9e7b35ef129f7e974255955c8867 inc/Module/Install/Metadata.pm
-SHA1 1288f4c4e4ba88e19194d7952eacbd6be2a5b916 inc/Module/Install/Win32.pm
-SHA1 1022a7ab797fc0081ea947f102650362ad925d7a inc/Module/Install/WriteAll.pm
-SHA1 716b67b14f1b46403297fbc41c7c7a77bc5086de lib/IO/Digest.pm
+SHA1 72f61fc9392ffe02c5ecd4c588d8fccda25ca008 inc/Module/Install.pm
+SHA1 b52cc3c32aafc2f3a7e19f4d8380cfbe5233cb51 inc/Module/Install/Base.pm
+SHA1 85355c953dac05a233caebd0f00c41185c0bedd5 inc/Module/Install/Can.pm
+SHA1 f16346886a5ef92dfcc64caa2a037be129a05613 inc/Module/Install/Fetch.pm
+SHA1 5132e1cf0c7b70ce734c66d81c899597cd1533a3 inc/Module/Install/Makefile.pm
+SHA1 06982b51aae7a19923e4571a6322939ab519b44d inc/Module/Install/Metadata.pm
+SHA1 fd81bc0e85a1193f278760edb82928d8b4dff2c1 inc/Module/Install/Repository.pm
+SHA1 13713c486e084f6c6bfce86ae32031154f850636 inc/Module/Install/Win32.pm
+SHA1 7b099c647c91b4b8627e9f8e4769d02dfc80bfc0 inc/Module/Install/WriteAll.pm
+SHA1 61a92d86b377ddba3aab5e6d34a0482dbf03e57a lib/IO/Digest.pm
 SHA1 dbf02d6ee146df5da346214fcde7e4a7a380f1ff t/0use.t
 SHA1 d2643f6aee444fe9338cf431f7f3bc5ce1ffbdb5 t/1basic.t
+SHA1 f1f07199c8835fdafdf9eb6c7226f7adb7fce2a1 xt/perlcritic.t
+SHA1 e9c6a5881fc60173fbc8d479c1afd2ce3b43bef1 xt/pod.t
+SHA1 704d05ce59fb148be2f1564136967b74863c96a9 xt/podspell.t
+SHA1 9feb699f4b45e12c29544c9dfab70b3e826aa4fc xt/synopsis.t
Show quoted text
-> FAIL SIGNATURE verificaion for IO-Digest-0.11.tar.gz failed