For nm.debian.org, at 2021-02-02: For the past 3 months, I have worked with qinxialei on various library and software packaging work in Debian. For this past work, qinxialei sent mails using the email address xialeiqin@gmail.com which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 3225 7E8D 892E 4E4A 62AA B391 3940 C9C3 FE89 3883. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that qinxialei as they present themselves on nm.debian.org is the rightful owner of both email xialeiqin@gmail.com and GPG key 3225 7E8D 892E 4E4A 62AA B391 3940 C9C3 FE89 3883.