K so what was the solution?

Is there a way to check MD5 on a running leaf WITHOUT having to do it from an APIC? Our Leaf node is not registered, we have reason to believe the image file is corrupt since the USB drive had a bad checksum on it. 

Wow! It works on a leaf using aci-n9000-dk9.14.2.7s.binitraceroute external 1.2.3.4 vrf TenantName:VRFname payload 20That worked for me but make sure you don't use CAPS at all in the command structure. I accidentally typed 'VRF' and the whole command...

Thank you Ali that was informative. So If I understood you correctly, An untagged VLAN on Dot1Q ports will have no tag, but on 802.1P ports it WILL have a tag (VLAN 0), as long as thee are also other (tagged) VLANs on that same port?Also that, this V...