当我跑
gpg --verify ~/file.asc ~/file
我收到以下信息：
gpg: Signature made Tue 10 Dec 2016 05:10:10 AM EST using RSA key ID abcdefgh
gpg: Good signature from "Alias (signing key) <john@alias.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: (a fingerprint)
Subkey fingerprint: (a fingerprint)
主指纹与gpg --fingerprints
在我的钥匙圈中的输出相匹配，我有：
pub 4096R/abcdefgh 2014-12-12 [expires: 2020-08-02]
Key fingerprint = (A public finger print)
uid Alias (signing key) <john@alias.org>
sub 4096R/xcdertyu 2014-12-11 [expires: 2017-08-11]
我想用公钥指纹验证文件的真实性。注意信任级别为4级（完全信任）
我相信这是因为：
:~$ gpg --edit-key abcdefgh
gpg (GnuPG) 1.4.18; Copyright (C) 2014 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
pub 4096R/abcdefgh created: 2014-12-12 expires: 2020-08-02 usage: C
trust: full validity: unknown
应该有理由担心吗？感谢您在我了解有关加密的更多信息时的耐心等待！