I just tested it and the download (as well as the same version 3.211-1227 I already had) matches the sha256 checksum displayed there.
Maybe something is tampering with your downloads? (or gl-inet has fixed the issue already?)