I get size and md5 ok. But pgp signature is wrong. I use latest rpm ang pgpi 6.5.1. I download files from redhat own fpt site in updates.
Use pgp-2.6.3 (from replay.com) for package verifiication. pgp5 is incompatible.