{
  "spec": "ORVEX-ISSUER-KEYPACK",
  "version": 1,
  "id": "did:web:ag2i-global.org#keypack-2026",
  "issuer": {
    "name": "AG2I GLOBAL",
    "did": "did:web:ag2i-global.org",
    "base_url": "https://ag2i-global.org",
    "jwks_uri": "https://ag2i-global.org/orvex/issuer_keypack.json",
    "policy": {
      "key_rotation": "at_least_yearly",
      "revocation": "immediate_on_compromise",
      "client_cache_ttl_days": 30,
      "client_cache_ttl_seconds": 2592000
    }
  },
  "published_at": "2026-02-25T14:07:51.198Z",
  "keys": [
    {
      "kid": "AG2I-D12-ROOT-2026",
      "kty": "EC",
      "crv": "P-256",
      "alg": "ES256",
      "use": "sig",
      "status": "active",
      "not_before": "2026-01-01T00:00:00Z",
      "expires_at": "2027-12-31T23:59:59Z",
      "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "x": "REPLACE_WITH_X",
        "y": "REPLACE_WITH_Y"
      },
      "scopes": [
        {
          "product": "ORVEX_PRO_OFFLINE",
          "purpose": "issuer_attestation",
          "format": "ORVEX-PROOF"
        },
        {
          "product": "ORVEX_ACCESS_PREMIUM",
          "purpose": "voucher_signing",
          "format": "voucher.payload.signature"
        }
      ],
      "meta": {
        "label": "D12 Root Key",
        "contact": "security@ag2i-global.org"
      }
    },
    {
      "kid": "KID-20260225-7F3E37",
      "alg": "ES256",
      "status": "active",
      "not_before": "2026-02-25T14:07:09.255Z",
      "expires_at": "2027-02-25T14:07:09.255Z",
      "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "x": "B-xKdugjVhnRUFv91jqlY5YkBoxMb7ilmB-_3nHVBXw",
        "y": "ChC1R2yR2PBJPqZ8LKG6AdtBN3TGMTpU7zeylHbJ6rY"
      },
      "scopes": [
        {
          "product": "ORVEX_ACCESS_PREMIUM",
          "purpose": "voucher_signing"
        }
      ],
      "kty": "EC"
    }
  ]
}