...

https://spaces.internet2.edu/display/InCCollaborate/Metadata+Query+Server

https://wiki.shibboleth.net/confluence/display/XSTJ2/xmlsectool+V2+Home

Procedure

1. Obtain the InCommon Metadata Query Protocol signing certificate. Though this service is currently beta, the data is production.

   Code Block
   curl -OL https://ds.incommon.org/certs/mdq-beta-cert.pem

2. Verify the certificate's signing key fingerprint with information on this page
   

   https://ops.incommon.org/mdq_beta_cert.html

   Code Block
   /usr/bin/openssl x509 -sha256 -noout -fingerprint -in mdq-beta-cert.pem

3. Fetch our IdP metadata.

   Code Block
   curl --silent --output ucdavis-metadata.xml \ http://mdq-beta.incommon.org/global/entities/urn%3Amace%3Aincommon%3Aucdavis.edu

4. Validate the XML signature.

   Code Block
   xmlsectool --verifySignature --inFile ucdavis-metadata.xml --certificate mdq-beta-cert.pem