This is the package signature as generated by The GnuPG. This signature identifies the party that created the package. By verifying it you are sure that the package coming from a trustworty person or organization.
Here is the package signature:
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEABECAAYFAkj6PYYACgkQqesEzEdeXBHRYwCfaj0wJxnc9Ey3GDa57dhdmNpJ Du0AnjD/DODHVj62WFP/rXEw3P+pP4Di =/DDp -----END PGP SIGNATURE-----
You can save this signature in a text file (e.g. xchm-1.14-i486-1gds.tgz.asc) in the same directory where the package file (xchm-1.14-i486-1gds.tgz) resides and you can verify it by issuing the following command:
gpg --verify xchm-1.14-i486-1gds.tgz.asc
NOTE: You need to import the public key of SlackPack first:
gpg --import KEY