-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

For nm.debian.org, at 2021-09-30:
For the past 6 months, I have worked with Ma Aiguo on DDE-related packages in Debian.

For this past work, Ma Aiguo sent mails using the email address imaiguo@gmail.com
which is the one they're using on nm.debian.org, and they signed their work and
email using a GPG key with fingerprint 277A 69AE 7760 6279 FF32  9788 31CC 9967 66F0 5BA0.

I've made sure that they are able to decrypt encrypted messages sent to this key
and that they're able to sign messages with the same key.

Due to the long-term interactions we had, I'm convinced that Ma Aiguo as they
present themselves on nm.debian.org is the rightful owner of both email
imaiguo@gmail.com and GPG key 277A 69AE 7760 6279 FF32  9788 31CC 9967 66F0 5BA0.
-----BEGIN PGP SIGNATURE-----
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=m7gv
-----END PGP SIGNATURE-----