DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /Source:C:\Temp /LimitAccess
A "new" or uncorrupted CAB for Server 2012 R2 should have a digital signature from Microsoft. To verify: