Assuming you trust it to not be modified, and you point it at legitimate mirror, freebsd-update IDS should be able to tell you if anything's amiss. See: https://www.freebsd.org/doc/handbook/updating-upgrading-freebsdupdate.html Section: 23.2.4. System State Comparison