Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Only for sale Not free”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2680196100

Proof data

Record hash (SHA-256)

097bce0f8bdb0ef25e22f549ac01fdfbb001ae98f7ff73f840bedbef6375ff02

Signature (Ed25519, base64)

c1Q+BQXRFsdOxnS7NDMhuxR3iLCEHsAFjigbJ4LSnpXROVaYFveALU/EfqH+dYW2CcsDTHv76XY01JGHvVjiAQ==

Merkle root

275d3a7bd3b2548f01857c160784f16453a0a9c996b66614d8cdeec586b712fb

Merkle path

["09793fe98c8aa51943c55aedf98c77aba624c851678424c67012156fe53b0861","8a255d4368287127e170f2a7c86ff71a515151fc16cfaef5a4341ad8991f7253","aba23fb038d41cc73efc55ef58c70f2f857dbcab2446478a93850a1c83f3bb7d","7518780d52328253864729acc5c3ac77284698d6636fdd3fcf09ad7133986215","c9fd51c410778eaa176fdcb78f2f455eb70cc4eedb351c31655dc12c4ba9287c","9ddd0ce3497f4bfa70382f0b9d97f97e117c6f71fc5685d7c9be5a5745c8b87f","1cd6f9655aa4ac52f102789e41772ada6acaf8aea09ce72f5a73d9d6eba92f97","7798215db5da87bc491727d4641d65a8a5e6ad9f654149181d270620fd8335aa","df3390180e1481a428a6e77cbfa07b704df2a7dc9207f1e69bd2329db6c200f6","df4efba28479f36e9f62fb48974753537d7f06d69e1d4a0d4b52974b34dcda74","f2f1d0e5828d2ef1d2846248788785c49d834d087d9d7d016c6440038f921a91","f30e5658872de337a0e33658916b021063e754bdad9b53631f7875231ee59950","b21dec113c874342fc7f0cad3b2328bf067a662dbacd23b8e99866fecc9aeef1","100ea021682a9f8dea776f80ae39e493f0563b42b8ed66185197735c0707527d","10b28da69907209a24684830a0bd8a8ebb92a2f0df9669726e5cc9862c590727"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2680196100 · entry 108e9186e8c5677a3513…

Expected log hash

6a2ff8b2a4e161feae5c2214e4fb7e60d1d5d00c6fe677bf39a90f4ffa8fddef The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788293890698","kind":"published-quote","locale":"en","page":"comparison:smallpdf/en/cat-convert-pdf","quote":"Only for sale Not free","rating":1,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wondershare.pdfelement","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (275d3a7bd3b2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.