--- /home/fdroid/fdroiddata/tmp/com.chesire.nekome_23071421.apk +++ /home/fdroid/fdroiddata/tmp/sigcp_com.chesire.nekome_23071421.apk ├── /usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {} │┄ error from `/usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {}` (b): │┄ DOES NOT VERIFY │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. CHUNKED_SHA256 digest mismatch. Expected: <981fb0e6d4dfd17df1b42e0300c799a190ab63933ce3e93f4cc894c3836ad7ba>, actual: <9f6c4a745f9837826f8b86ffba1e411e9d88367ea356c2658f33310d4af069d7> │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. VERITY_CHUNKED_SHA256 digest mismatch. Expected: <7907510e983100437db87ec78c101ecfd55adca9fdd03b525c7506ee68aee6caab68390000000000>, actual: <39d57c555bdceb8500abb9a84ff291440549658d63269d1b294bf568aab81cf5ab68390000000000> │ @@ -1,19 +0,0 @@ │ -Verifies │ -Verified using v1 scheme (JAR signing): true │ -Verified using v2 scheme (APK Signature Scheme v2): true │ -Verified using v3 scheme (APK Signature Scheme v3): true │ -Verified using v4 scheme (APK Signature Scheme v4): false │ -Verified for SourceStamp: false │ -Number of signers: 1 │ -Signer #1 certificate DN: CN=FDroid, OU=FDroid, O=fdroid.org, L=ORG, ST=ORG, C=UK │ -Signer #1 certificate SHA-256 digest: 2c4d23a1fbd56803f9d664ad9524ffb5dae996f138cda85406e9fda98dc7baff │ -Signer #1 certificate SHA-1 digest: f5a7d34d9abe2a8b68e5009260cb4d1e01ef9a25 │ -Signer #1 certificate MD5 digest: e145f22f36ae4bc551665889137f3973 │ -Signer #1 key algorithm: RSA │ -Signer #1 key size (bits): 2048 │ -Signer #1 public key SHA-256 digest: 6b37a5d31e95eecfd73f21d73e3a32bb11946ba3ca5848dbb3e544c01bc6a895 │ -Signer #1 public key SHA-1 digest: 34f095952bc1cd5cf3df93f4aae34a361778adf2 │ -Signer #1 public key MD5 digest: a64839698fad867aaaa269485a604373 │ -WARNING: META-INF/com/android/build/gradle/app-metadata.properties not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/ea.j not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/z9.v not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. ├── zipinfo {} │ @@ -906,8 +906,8 @@ │ -rw---- 2.0 fat 3305 b- defN 81-Jan-01 01:01 kotlin/ranges/ranges.kotlin_builtins │ -rw---- 2.0 fat 2395 b- defN 81-Jan-01 01:01 kotlin/reflect/reflect.kotlin_builtins │ -rw---- 2.0 fat 218 b- defN 81-Jan-01 01:01 okhttp3/internal/publicsuffix/NOTICE │ -rw---- 2.0 fat 41394 b- defN 81-Jan-01 01:01 okhttp3/internal/publicsuffix/publicsuffixes.gz │ -rw---- 2.0 fat 83105 b- defN 81-Jan-01 01:01 META-INF/D199D1BD.SF │ -rw---- 2.0 fat 1342 b- defN 81-Jan-01 01:01 META-INF/D199D1BD.RSA │ -rw---- 2.0 fat 82978 b- defN 81-Jan-01 01:01 META-INF/MANIFEST.MF │ -911 files, 7264051 bytes uncompressed, 3656956 bytes compressed: 49.7% │ +911 files, 7264051 bytes uncompressed, 3656955 bytes compressed: 49.7% ├── res/raw/aboutlibraries.json │ ├── Pretty-printed │ │┄ Differences: {'replace': "OrderedDict([('metadata', OrderedDict([('generated', '2023-09-02T02:39:30.593Z')])), " │ │┄ "('libraries', [OrderedDict([('uniqueId', 'androidx.activity:activity'), ('funding', " │ │┄ "[]), ('developers', [OrderedDict([('name', 'The Android Open Source Project')])]), " │ │┄ "('artifactVersion', '1.7.0'), ('description', 'Provides the base Activity subclass " │ │┄ "and the relevant hooks to build a composable structure on top.'), ('scm', " │ │┄ "OrderedDict([(' […] │ │ @@ -3072,10 +3072,10 @@ │ │ "internalHash": "ISC", │ │ "name": "ISC License", │ │ "spdxId": "ISC", │ │ "url": "https://spdx.org/licenses/ISC.html" │ │ } │ │ }, │ │ "metadata": { │ │ - "generated": "2023-07-18T12:52:07.562Z" │ │ + "generated": "2023-09-02T02:39:30.593Z" │ │ } │ │ }