how to verify rpm package