For apache-tomcat-7.0.23-windows-i64.zip, I used Kleopatra to import the KEYS and check the validity of the signatures in apache-tomcat-7.0.23-windows-i64.zip.asc and got the following. Does this look like I've made some mistake in this process?
[cid:image001.png@01CCD788.1E255930]
