Comment by dr_hooo

You can calculate the signature offline on your local machine against the public key - only the owner of the file can generate a valid signature