Re: [Trisquel-users] Is this normal?

[sora]

I do not know the 5 signatures but if it says "gpg: BAD signature from  
"Trisquel GNU/Linux (Trisquel GNU/Linux signing key)" then the file:  
trisquel_8.0_amd64.iso that you downloaded may be corrupt or modified by an  
adversary since it does not fails gpg verification.
You can should also compute the MD5sum.
to compute the md5 sum of trisquel iso:
$ md5sum ./trisquel_8.0_amd64.iso
to display the md5 from the download page md5 checksum file:
$ cat trisquel_8.0_amd64.iso.md5