pub fn verify_bootstrap_nonces(
signed_bytes: &[u8],
signature: &[u8],
trusted_keys: &[TrustedPubkey],
now: DateTime<Utc>,
freshness_window: Duration,
reject_before: Option<DateTime<Utc>>,
) -> Result<Verified<BootstrapNonces>, VerifyError>Expand description
Verify a signed bootstrap-nonces allowlist. Same trust class + freshness semantics as revocations.