At first glance it appears that the firmware is signed with a RSA key, but actually what's embedded in the binary is the private key, see decryptor.py for more info. Besides, the file has a checksum ...