rekor-cli verify --artifact=iso-cli-linux-amd64 --signature=iso-cli-linux-amd64.sig For maximum trust, you can rebuild the isomorphic tool from source and compare it against the downloaded binary. This is the gold standard of verification.
# Using cast (from Foundry) or any Ethereum RPC client cast tx 0xabcdef1234567890... Look for the checkpoint hash in the transaction’s input data or logs. If it matches the hash from Step 4, the download is . download isomorphic tool checkpoint verified
To verify against an Ethereum transaction: download isomorphic tool checkpoint verified