Python Client & FPKI Analysis Utility
The REST Service repository includes a robust Python client implementation. It demonstrates how to interact with the Certificate Validation Service API natively via Python and the cryptography library.
Recently added is the validate_fpki.py utility, which automatically fetches upstream FPKI intermediates (e.g., from idmanagement.gov), extracts the certificates from the PKCS7 bundle, and validates them against the VSS default policy, generating a neat CLI report of Valid and Invalid certificates alongside their specific invalidity reasons.
Repository: grandamp/rest-service (Python Client)