# rpm --verbose --checksig dump-0.3-17.i386.rpm
Header+Archive size OK: 61942 bytes
MD5 sum OK: 3e9de88867fbf98bda5f64f64ce6870d
(to show that I'm not making it the wrong way:)
# rpm --verbose --checksig libc-5.3.12-28.i386.rpm
Header+Archive size OK: 1973247 bytes
Good signature from user "Red Hat Software, Inc.
Signature made 1998/11/12 15:51 GMT using 1024-bit key, key
MD5 sum OK: 0c89015fa75eb5a2ae08a08c885e3b84
I couldn't get to updates.redhat.com, but I've looked at
the mirrors metalab.unc.edu and sunsite.cnlab-switch.ch, and
both had this file.
*** Bug 1040 has been marked as a duplicate of this bug. ***
Summary says it all.
The same problem with perl-5.004m7-1.i386.rpm - it is not PGP signed.
these have been verified to be true. We are working on resolving this