A security audit requires you to confirm whether any files installed by the 'httpd' RPM package have been altered since installation on a RHEL 9 server. You need a report showing files whose size, permissions, or checksum differ from the package's recorded metadata. Which command accomplishes this?