OrigiMark Cryptographic Proof Bundle
=====================================
Cert ID: 07d4b1a7-903c-409c-ad25-956c327a19b5
Work: Mountain Light: A Photographer's Diary (version 1)
SHA-256: 7dc37c4500b8d49ab8d0688270f56882d4351d59533aa9c82aa3d4b6baba620b
Issued: 2026-05-01T10:32:02.698666+00:00

This bundle contains everything needed to verify the certificate offline,
without contacting OrigiMark servers.

Files:
  cert.json     — machine-readable certificate metadata (this format is the
                  open OrigiMark spec, also published at
                  https://origimark.org/well-known/origimark.json)
  tsa-token.tst — RFC 3161 TimeStampToken (DER-encoded ASN.1 / CMS)
  ots-proof.ots — OpenTimestamps proof, anchored to Bitcoin

How to verify offline:

1. Re-hash the original file with SHA-256 and confirm it matches `hash` in cert.json:
     openssl dgst -sha256 <yourfile>

2. Verify the RFC 3161 timestamp against DigiCert's root certificates:
     openssl ts -verify -in tsa-token.tst -digest <hash> -CAfile <DigiCertGlobalRoot.pem>

3. Verify the Bitcoin anchor with the OpenTimestamps client:
     ots verify ots-proof.ots
   (or use https://opentimestamps.org/ to upload and verify)

4. Visually compare:
   - The hash from step 1
   - The `hashed_message` field inside the TSA token (decoded)
   - The digest committed by the OTS proof
   All three MUST match.

Once verified, the bundle proves — independently of OrigiMark — that the file
existed in this exact form at the timestamp shown by the TSA, and was anchored
to the Bitcoin blockchain at block <pending>.

Recognised under: eIDAS Art. 41 (EU); RFC 3161 + FRCP Rule 902 (US);
Berne Convention (181 states); accepted by EU, UK, US, and several Asian
jurisdictions as immutable evidence since 2018.

— OrigiMark
https://origimark.org
