Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Support needs to work on the servers more”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b7502b5ae8efa15254357852c8df8e471ea60036b91b4b5d80948c43eb7a01c
Signature (Ed25519, base64)
kltMm4RA7Z+NwyToGR+Cf2Np30amwpx9vnkaQNQx28ItH3JA7M4TQbNt7Fz2m/UVFZO+2kmolR+DaRUJDEVOCQ==
Merkle root
d172a7cf956e2b148257f1904430b57957f1397e7267d8861b84c949d8e35e40
Merkle path
["0b76e914b4768e23c36d89c250859e242c7e74a95f32267b83b4ec1883744cb3","19fc0bfa353c3026ab86f3a53ed24781c67ff9911e4380299c346a3bdef21b16","bb5081511307b173ca0630d3e678b235eb3124215ca43ac88fad671ad7673070","5290441589b77b2c14dfc34f331a24d7cc62ccfdc3296d65d166c6b6a536111c","f07bc02f75fa4166f9e3e8aaa4fe3d7ea7a7bf3043dd8ea3097f9551fc80f5ce","d17b05830d6e3b95eed2d03bc394a45ef3e12ba48d58854f1e09500606437992","b21906d1a3d6d70cd3bbdeb969491cffc35d969c1c2661c2b6b847331251805f","f002bdcd5b402583fb23fc82565f8c15e09a534e2eb948677548a1bc389f7d12","8ec2c2ee7dafc817eb8a5d6ab9db19ed1c65798a9162a5e3460b9303e005f44e","5f8e94eb3956812904a8e0dd0a1833c42619e50ee822e592aef0f0d056660c38","1b884db2791044311f61e64ae2dd1232246723259327fd8ccf25489189fb2cf7","94ae8e4f6adb62d3dedb0d45f6cb3bc7ee886f50c769e386c26dbcd96e444beb","ec9d22a60fb3373395242e0bee52cae203406eed591b174f096249c369d00f81","24b78eb17781ff82da235316ce22b13d8e2206e794b324b0ed78181b6c334313"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2445296928 · entry 108e9186e8c5677a0a62…
Expected log hash
c9abcace05ae14f54b0d99899537438e06fb4d27f22b95a0509613937d3e30c6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786588795034","kind":"published-quote","locale":"en","page":"subtheme:proton/service/server-locations-availability/en","quote":"Support needs to work on the servers more","rating":1,"review_date":"2026-06-21","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d172a7cf956e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.