This tool inspects and verifies binary package digital signatures based on predetermined policies, complementing repository signatures or allowing to verify the authenticity of a package even after download when detached from a repository.