[MPlayer-users] Forged tarballs?

[Поддержка web/iSMS]

Hello. Just want to ask - if

ftp://ftp1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre3try2.tar.bz2
0d9f05eb112c03da3198da1e20c1772f  MPlayer-1.0pre3try2.tar.bz2

forged or not?
README.PGP contains:
=====================================
1. Import my (Gabucino) public keyring
   (available from this dir)

        $ gpg --import public-key.gpg

2. Verify the tarball

        $ gpg --verify MPlayer-1.0pre3try2.tar.bz2.asc
        gpg: Signature made Tue Mar 30 16:18:53 2004 CEST using DSA key ID 
44B45C37
        gpg: Good signature from "Gabucino"

        $ gpg --verify MPlayer-1.0pre3try2.tar.bz2.md5.asc
        gpg: Signature made Tue Mar 30 16:19:16 2004 CEST using DSA key ID 
44B45C37
        gpg: Good signature from "Gabucino"
======================================

But check shows:
======================================
snake at sarge:/tmp/MP/1.0p3t2$ gpg --verify MPlayer-1.0pre3try2.tar.bz2.asc
gpg: Signature made Tue Mar 30 18:50:31 2004 MSD using DSA key ID 44B45C37
gpg: Good signature from "Gabucino"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: B0E3 C10A 46DA A148 EB19  2F26 02AE 8686 44B4 5C37
snake at sarge:/tmp/MP/1.0p3t2$ gpg --verify MPlayer-1.0pre3try2.tar.bz2.md5.asc
gpg: Signature made Tue Mar 30 18:50:34 2004 MSD using DSA key ID 44B45C37
gpg: Good signature from "Gabucino"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: B0E3 C10A 46DA A148 EB19  2F26 02AE 8686 44B4 5C37
======================================
I.e. time differs by 31minute and 18 seconds. (MSD-CEST=2 hours)

--
Respectfully
Alexey Nezhdanov