--- /home/fdroid/fdroiddata/tmp/org.glpi.inventory.agent_39383.apk +++ /home/fdroid/fdroiddata/tmp/sigcp_org.glpi.inventory.agent_39383.apk ├── /usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {} │┄ error from `/usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {}` (b): │┄ DOES NOT VERIFY │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. CHUNKED_SHA256 digest mismatch. Expected: <076a3c4448a8ef6b5d6919ef24260d97e1dfc26351601f36d9d51b496a123e0e>, actual: <36e553fb74cd3bbba447b69892c3f115595a2d570cb80dcf4713b281b5ada894> │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. VERITY_CHUNKED_SHA256 digest mismatch. Expected: <2ec45957a8d8cf9dc6f28467c0965cc99e4688d5052f8d958a14adbfc95b20aa5abe5d0000000000>, actual: │ @@ -1,78 +0,0 @@ │ -Verifies │ -Verified using v1 scheme (JAR signing): true │ -Verified using v2 scheme (APK Signature Scheme v2): true │ -Verified using v3 scheme (APK Signature Scheme v3): true │ -Verified using v4 scheme (APK Signature Scheme v4): false │ -Verified for SourceStamp: false │ -Number of signers: 1 │ -Signer #1 certificate DN: CN=FDroid, OU=FDroid, O=fdroid.org, L=ORG, ST=ORG, C=UK │ -Signer #1 certificate SHA-256 digest: 1f46e7fa28a0c6e7ffb6cdc6b4d04afb7890e19ffd0a59bef76a50207142b875 │ -Signer #1 certificate SHA-1 digest: 7d814b298f1a3bcc47dfb8bb57ad0db46f3f12a5 │ -Signer #1 certificate MD5 digest: 81b26fe698859ba92bce24d5591fb334 │ -Signer #1 key algorithm: RSA │ -Signer #1 key size (bits): 2048 │ -Signer #1 public key SHA-256 digest: fbf161cec35f388da564b1b0e96a0b26c9bd10a3bb6fd37766fe0634224269ef │ -Signer #1 public key SHA-1 digest: 3b0fe41c9783439992220144c8104df14bfc23cd │ -Signer #1 public key MD5 digest: 6c22feb2e111896f61c630a133ea3d10 │ -WARNING: META-INF/com/android/build/gradle/app-metadata.properties not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.activity_activity-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.activity_activity.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.annotation_annotation-experimental.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat-resources.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.arch.core_core-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.asynclayoutinflater_asynclayoutinflater.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cardview_cardview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.coordinatorlayout_coordinatorlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cursoradapter_cursoradapter.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.customview_customview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.documentfile_documentfile.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.drawerlayout_drawerlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.dynamicanimation_dynamicanimation.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.emoji2_emoji2-views-helper.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.emoji2_emoji2.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.fragment_fragment-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.fragment_fragment.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.interpolator_interpolator.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-ui.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-utils.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-v4.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata-core-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata-core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-process.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-runtime-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel-savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.loader_loader.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.localbroadcastmanager_localbroadcastmanager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.media_media.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.preference_preference.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.print_print.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.recyclerview_recyclerview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.savedstate_savedstate-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.savedstate_savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.slidingpanelayout_slidingpanelayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.startup_startup-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.swiperefreshlayout_swiperefreshlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.tracing_tracing.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.transition_transition.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable-animated.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.versionedparcelable_versionedparcelable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager2_viewpager2.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager_viewpager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.window_window.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/com.google.android.material_material.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/kotlinx_coroutines_android.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/kotlinx_coroutines_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/javax.xml.parsers.SAXParserFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.gjt.xpp.XmlPullParserFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.relaxng.datatype.DatatypeLibraryFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.xmlpull.v1.XmlPullParserFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. ├── zipinfo {} │ @@ -1,11 +1,11 @@ │ Zip file size: 6147674 bytes, number of entries: 1033 │ -rw-r--r-- 0.0 unx 56 b- defN 81-Jan-01 01:01 META-INF/com/android/build/gradle/app-metadata.properties │ -rw-r--r-- 0.0 unx 1798 b- stor 81-Jan-01 01:01 assets/dexopt/baseline.prof │ --rw-r--r-- 0.0 unx 197 b- stor 81-Jan-01 01:01 assets/dexopt/baseline.profm │ +-rw-r--r-- 0.0 unx 195 b- stor 81-Jan-01 01:01 assets/dexopt/baseline.profm │ -rw-r--r-- 0.0 unx 9242520 b- defN 81-Jan-01 01:01 classes.dex │ -rw-r--r-- 0.0 unx 1914152 b- defN 81-Jan-01 01:01 classes2.dex │ -rw-r--r-- 0.0 unx 222 b- defN 81-Jan-01 01:01 assets/about.properties │ -rw-r--r-- 0.0 unx 571 b- defN 81-Jan-01 01:01 assets/camera_vendors.json │ -rw-r--r-- 0.0 unx 1600 b- defN 81-Jan-01 01:01 assets/cpu_family.json │ -rw-r--r-- 0.0 unx 356 b- defN 81-Jan-01 01:01 assets/cpu_manufacturer.json │ -rw-r--r-- 0.0 unx 104194 b- defN 81-Jan-01 01:01 assets/inventory.xml │ @@ -1028,8 +1028,8 @@ │ -rw---- 0.0 fat 592 b- defN 81-Jan-01 01:01 res/zN.xml │ -rw---- 0.0 fat 400 b- defN 81-Jan-01 01:01 res/z_.xml │ -rw---- 0.0 fat 840 b- defN 81-Jan-01 01:01 res/zq.xml │ -rw---- 0.0 fat 1135036 b- stor 81-Jan-01 01:01 resources.arsc │ -rw---- 2.0 fat 95939 b- defN 81-Jan-01 01:01 META-INF/36C9CFFE.SF │ -rw---- 2.0 fat 1334 b- defN 81-Jan-01 01:01 META-INF/36C9CFFE.RSA │ -rw---- 2.0 fat 95812 b- defN 81-Jan-01 01:01 META-INF/MANIFEST.MF │ -1033 files, 13599853 bytes uncompressed, 6017235 bytes compressed: 55.8% │ +1033 files, 13599851 bytes uncompressed, 6017233 bytes compressed: 55.8% ├── assets/dexopt/baseline.profm │ @@ -1,13 +1,13 @@ │ -00000000: 7072 6d00 3030 3200 0200 3b01 0000 b300 prm.002...;..... │ -00000010: 0000 7801 3590 3b0e 0231 0c44 27ff c0ae ..x.5.;..1.D'... │ +00000000: 7072 6d00 3030 3200 0200 3b01 0000 b100 prm.002...;..... │ +00000010: 0000 7801 358f 3b0e 0231 0c44 27ff c0ae ..x.5.;..1.D'... │ 00000020: 0412 d448 b420 5150 720e 2e80 60a9 e8d2 ...H. QPr...`... │ -00000030: 5053 710b cec4 8d98 4948 2c3b b1e3 3c3b PSq.....IH,;..<; │ -00000040: 0606 5c1f 9752 a672 b84d cfcf 1678 e305 ..\..R.r.M...x.. │ -00000050: 8b40 f598 c170 77b4 86d6 520c 32ce d553 .@...pw...R.2..S │ -00000060: 4471 ed91 baa2 55ee 40bb a478 32a4 7366 Dq....U.@..x2.sf │ -00000070: 446a 6336 467b e719 5df0 85a8 166b 2466 Djc6F{..]....k$f │ -00000080: ebd4 a9f2 3db9 cddf 3053 151b 27e1 9ef6 ....=...0S..'... │ -00000090: 59b4 4c86 ad9d ea4e 126a 3dc7 1b9d 555f Y.L....N.j=...U_ │ -000000a0: 4c5f bb6c ac54 23e3 ff7f bd66 0cbd b2fa L_.l.T#....f.... │ -000000b0: d03f 1cbe 6667 0cc6 3ea4 a3a6 74ca e0fa .?..fg..>...t... │ -000000c0: 01a9 ea0f 1f ..... │ +00000030: 5053 710b cec4 8d98 4948 2c3b f1c4 7976 PSq.....IH,;..yv │ +00000040: 8011 d7c7 a594 a91c 0fb7 e979 cae0 3218 ...........y..2. │ +00000050: ba2a f1b3 05de 78c1 22d0 3d66 2cb0 708c .*....x.".=f,.p. │ +00000060: 86d1 d20c 32ce 3593 225d 7ba4 af18 553b ....2.5."]{...U; │ +00000070: 302e 699e 0cf9 9c15 91de 988d d1de 79aa 0.i...........y. │ +00000080: 0bbe 10d5 628d c46a 9d3a 55b9 27b7 e51b ....b..j.:U.'... │ +00000090: 56aa 63e3 24dc d33e 8b96 c9b0 7552 ddc9 V.c.$..>....uR.. │ +000000a0: 42ed e778 a3b3 fa8b e9eb 948d 95aa 32fe B..x..........2. │ +000000b0: ffd7 7bc6 d03b 6b0e fdc3 e16b 76e6 075a ..{..;k....kv..Z │ +000000c0: b50f 1f ...