Download page should show hashes
The download page (http://openindiana.org/download/) should have the hashes shown directly - one proper source for them. For example, at this moment these two files aren't in agreement:
(also dlc-1.de's iso is the wrong size)
If I'm just going from what my local mirror says, it's wrong. If it's on the webpage, there can't be synchronisation problems.