It should be pretty easy to do, to be fair. There are many ways. The easiest would be to have a compressed file (or whatever) that is signed with the source you downloaded it from (and the digest published), and the PDF itself would be signed with the authors' private key. It is not the best way to do it, but it could work.