Add md5sum, cut, and javac to list of binaries to check; use a for loop. Verify hash of locale-api zip, and more reliable decompressing.