To me it sounds like the mirror you are using do not have the signature to match the package file. Does it happen with other packages too, or just kernel related ones?

Maybe try and switch your mirror and see if that helps.

The real question is why all but the last download do not have the correct checksum. It makes sense for it to delete downloads that do not pass that check. Have you tried checking for differences between the unsuccessful and successful downloads, e.g. different mirrors, file sizes or similar issues besides the checksum itself?

Maybe run something like Wireshark while you run that command to check for network errors and/or differences in the addresses?

Checking log files would also be an option to see if those contain additional information.

It might also be possible to inspect the different runs of the command via strace or bpftrace to get data like the file size or the checksum if it does not print those.

Is that from the deltarpms? It’s a pretty common problem with them. You can disable deltarpms if you don’t mind installing the full package by default. Though if you’re concerned about the cost of the data, deltarpms are probably exactly what you want 🫤