Checksums don't appear to match

[vcolavin]

Hi there! I'm a newbie at modding so I thank you for any help, even if it seems silly.

I downloaded the most current recommended installer release at http://files.minecraftforge.net/. The file is called forge-1.16.5-36.1.0-installer.jar. I wanted to be careful before running it on my computer, so I tried verifying the MD5 and SHA1 checksums.

The release page states the checksums are:

MD5: c4247eb4064a306402c24d2c6e13f2ab
SHA1: a4fec6b3ecc5a36e2b10ce4eeca48fea31b74fb0

But when I try to hash the files locally (on MacOS), I get different results:

$ md5 forge-1.16.5-36.1.0-installer.jar
MD5 (forge-1.16.5-36.1.0-installer.jar) = ace24a5bfc910af72de81a51dbbf7897
$ shasum forge-1.16.5-36.1.0-installer.jar
1db69612f1f9ee9eef279f63c6e52db8fe254bb1  forge-1.16.5-36.1.0-installer.jar

Am I misunderstanding how the checksums are meant to work, or misusing the md5 or shasum utilities?

Thanks very much for any help :)

[LexManos]

Ya.. you're reading the MDK's hashes... and then comparing them against the hashes for the installer...

Don't do that...

[vcolavin]

Perfect, thanks.