Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“need subscription to be useful”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684045120

Proof data

Record hash (SHA-256)

0290670c39818ff1ab7618a68936d839d88b4a54710e59c81853de97b7abee0a

Signature (Ed25519, base64)

c8/7v4MWk1KgneN2y4TsPyldjx/OvuWv9fkq7V3cNNEnzH699l2lhT8MhDmajgWT74WSzCTGVNFRmb+PnrY2DA==

Merkle root

1e61eced4e661484bfe5b6f5b2703dd6b75b86bad22e189b3c366c9d28063790

Merkle path

["0292409ea7fea53f9168f796c689c965f2f11421b0118792f7ffc711d4cbb309","6d8c50592b59d93b9170a6ad215df8d677d98f0efb89385ccf15a028fa20af80","6a5ce97ed0f08b3d467ff2287c76e7446e968774d1752b9474378bff59b401f2","ef9c7f2b42d3778353a767409f258cfeb94673170d7009ecb68c9c6cf872f033","e82cef8751e09357f2a08be330e0f61f034bffb7062459ac8f93eb5b03f65c1b","d95271b0f28ca642e8c44a54b383368886d3cbdf7add87300b50b8d79ca315bc","ff79adcecc4963386450a25f02f6a948254c144d9deb9676609ee27b72fe66f1","c2825651a77919aef09185512f8e9984c1fb25573bea299ff677a41eab7df1cb","04d8434811341567c1e724fe0de63fda0a397e13f31b0abebf7ff50671b04479","9238f2601431679e5464cd28508b632a901e67e36dbe4682e2dcdb61f26540d1","e0326e92aed2f4cc2b9adaee2a3ab654df83596341ce84c8e7783967b90e11f9","371290f68d43e2599f9d4bca2e3c746a8a26675cce0b2600398e73cd3967be3d","54ee0bc4a4c2b45767c35fcfd5bb7920c8fd190b1fed30964e0a25b96be9cb33","bf1bcad2903dfb9abf4b8f024fe3c81bcae7bbc24b20f79dfeb4175ee7010ee6","c6abe42054f9c95975c60fb1ff77d61160b6c8ce936c4b4f55df686a320e02d9"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684045120 · entry 108e9186e8c5677a1eab…

Expected log hash

991cca42189213cf0723c834ba6ddec4f1bf618d506ffae30f68dbb14dfac402 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788333005708","kind":"published-quote","locale":"en","page":"comparison:smallpdf/en/cat-convert-pdf","quote":"need subscription to be useful","rating":1,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wondershare.pdfelement","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e61eced4e66…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.