Comment by g-b-r

> It probably doesn't require a network connection for basic checking, as the signed key can be cryptographically checked even when offline as long as Google preloads their public keys to the phones

But of course it does nonetheless: https://developer.android.com/reference/android/content/pm/P...