First-time making an install CD (Fedora 30 from Fedora 28)
Following the instructions for verifying a downloaded image from getfedora.org,
$ curl https://getfedora.org/static/fedora.gpg | gpg --import Now, verify that the CHECKSUM file is valid: $ gpg --verify-files *-CHECKSUM
No *CHECKUM in the download directory. So, where are they?