Beginning with version 9.6.4, 0cd contains a pgp public key signature. This
signature can be checked by entering the following command:

   pgp install install.exe

You need pgp to do this, and if it does not answer with a "good signature"
message, don't trust the archive file 0cd came in.