Here's google docs on how to verify the signature
Server docs: https://www.mongodb.com/docs/manual/tutorial/verify-mongodb-packages/