checkroot is an openSUSE equivalent of debsums. It enables retrieval of fingerprint updates online, allowing trusted verification of a root filesystem. This prevents a cracker from hiding his traces from "rpm --verify -a". If the verification fails, checkroot can download the package header containing the md5sums online. Alternatively, all md5sums can be fetched online (if you mistrust some of the fingerprints/private keys the locally stored md5sums are signed with).