The XML only carried the two microG repos; add F-Droid Official,
IzzyOnDroid and FUTO so the prebuilt client ships the same repo set as
the JSON. The XML string-array needs the full DER-encoded signing
certificate, not the SHA-256 fingerprint the JSON stores, so each
certificate was pulled from that repo's index-v1.jar signature block
and verified: SHA-256 of the DER matches the fingerprint in the JSON.
microG pubkeys are unchanged.
oxmc
d1832f4b35