You can either: hope that you download the right fdroid.apk download fdroid.apk, its signature and the pgp key of fdroid to check the apk on your computer and then pass it to your phone download fdroid.apk and use apksigner on your PC to check the fdroid's certificate SHA256