{"schema_version":"signing-keys-v1","issuer":"Orcpin","generated_at":"2026-09-22T10:27:33.799Z","keys":[{"kid":"8586f6d456cf1b5c","public_key":"2d88393ba047e336ef5690bfa9ef56f7f14e9331185cf15a35c589fa12236073","alg":"ed25519","status":"active","valid_from":"2026-09-16T00:00:00Z","retired_at":null,"revoked_at":null,"compromise_suspected_from":null,"reason":null}],"transparency_log":{"list":"https://orcpin.dev/v1/statement/log","lookup":"https://orcpin.dev/v1/statement/log/{payload_sha256}","rule":"A statement is genuine only if its signature verifies under a listed key AND its payload_sha256 appears in the log under that key's kid. After a key is revoked, a statement it signed that is not in the log is a forgery; one that is in the log and was issued before compromise_suspected_from stands."},"verify":"Take the statement's signature.kid, find the key here, check its status, then ed25519-verify signature.signature over the canonical payload (everything except signature, signed and transparency; keys sorted at every level; no whitespace) with public_key. Then look the payload_sha256 up in the transparency log."}