before upgrade MDK8.X I want to check the files for originality how do i compare the file or files with the key? ty

(PS) Firewalls such as Bastille are they basically a set of IPChains rules in a GUI form? Curios ty Agn

rpm --verify (options)
for options man rpm, search under verify for md5, checksum, gpg.

An alternative would have been to have Aide, Samhain or Tripwire installed and run after a fresh install to make their database, then you'll have OTF integrity check capabilities.

Better, because the databases are portable; can be saved to read-only media for reference, and don't suffer from flaws in the rpm system, like when the rpm database is b0rken beyond repair, secure because it can detect new binaries, and changes in existing ones.

Never used Bastille, I do my changes by hand, I thought Bastille was a (bash)script w/o GUI?