Under linux there is a package called "ubuntu-keyring" - it's for checking that the downloaded packages (from the offical repositories) are the ones that are on the server.
How can I do this under OpenBSD? How can I check that the downloaded package (via pkg_add - from the offical repo) is the one that is on the server?
UPDATE: is rsync good for the job??
pkg_info -C <local file>
topkg_info -C <URL to master FTP or HTTPS site>
?pkg_add
checks the signature by default