HowTo Verifying Signature of RPM Packages

To check the GnuPG signature of an RPM file after importing the builder's GnuPG key, use the following command (replace with the filename of the RPM package):

rpm -K

If all goes well, the following message is displayed: md5 gpg OK. This means that the signature of the package has been verified, and that it is not corrupt.