check the verifymd5 if the disturls don't match

The _link might have changed, but the expanded sources did not and so
it won't rebuild