When downloading from the Fortinet support portal, the site provides an or SHA256 sum alongside the .qcow2 file. Example:
Technical Tip: Download firmware for FortiGate-VM * Description. This article describes how to download firmware for FortiGate-VM. Technical Tip: How to verify downloaded firmware checksum fgtvm64kvmv6build1010fortinetoutkvmqcow2 download verified