fix curl command for md5sum check