I can confirm this behaviour. I am seeing occasional MD5SUM errors as well as GPG failures.Strangely it seems to work considerably better when not using the debug options suggested above.
I have several times seen it flag MD5SUM errors where the expected MD5SUM and that computed are identical.
Surely these errors should *never* be seen and must raise questions about the security of the entire distribution.
regards Mark