readme: add md5 checksum