I'll suggest related search terms for further research.
To verify integrity, you need the original hash. Contact the font provider or look for a checksums.txt file in the download folder. Use command-line tools: jcheada font60 verified