Using the rpm -V option does not properly validate a files contents.
pick an executable on your filesystem, intentionally 'break it' echo 'foo' >> /bin/grep.grep rpm -Vf /bin/grep.grep It should return a checksum error