# rpm --verbose --checksig dump-0.3-17.i386.rpm dump-0.3-17.i386.rpm: Header+Archive size OK: 61942 bytes MD5 sum OK: 3e9de88867fbf98bda5f64f64ce6870d (to show that I'm not making it the wrong way:) # rpm --verbose --checksig libc-5.3.12-28.i386.rpm libc-5.3.12-28.i386.rpm: Header+Archive size OK: 1973247 bytes Good signature from user "Red Hat Software, Inc. <redhat>". Signature made 1998/11/12 15:51 GMT using 1024-bit key, key ID CBA29BF9 MD5 sum OK: 0c89015fa75eb5a2ae08a08c885e3b84 I couldn't get to updates.redhat.com, but I've looked at the mirrors metalab.unc.edu and sunsite.cnlab-switch.ch, and both had this file.
*** Bug 1040 has been marked as a duplicate of this bug. *** Summary says it all.
The same problem with perl-5.004m7-1.i386.rpm - it is not PGP signed.
these have been verified to be true. We are working on resolving this issue.