'--node-xpath' is used to point to the the Signature node if there are several of them in the document. In your case, there is no need to use it since there is just one Signature node and xmlsec will find it by itself. Aleksey