For nm.debian.org, at 2021-01-05:
For the past 7 months, I've sponsored the package setzer
(versions 0.2.5-1, 0.3.1-1 and 0.3.4-1), which were prepared by Stephan Lachnit.
For this past work, Stephan Lachnit sent mails using the email address email@example.com
which is the one they're using on nm.debian.org, and they signed their work and
email using a GPG key with fingerprint BB45 B0B3 FF56 1BDB D45E E8A9 B35B 49EA 5D56 3EFE.
I've made sure that they are able to decrypt encrypted messages sent to this key
and that they're able to sign messages with the same key.
Due to the long-term interactions we had, I'm convinced that Stephan Lachnit as they
present themselves on nm.debian.org is the rightful owner of both email
firstname.lastname@example.org and GPG key BB45 B0B3 FF56 1BDB D45E E8A9 B35B 49EA 5D56 3EFE.