It is. Most distros have a verify built into their packaging systems. For example; https://docs.redhat.com/en/documentation/red_hat_enterprise_...