There should be a warning if the md5sums do not match (e.g. in rxconsole). If there isn't, there's a bug worth ticketing.