Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I'm trying to cancel my subscription and get my money back”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
16707e48834c4d24e64e55fccc8205407fa56c1a1febf516f20e7cd2849f8439
Signature (Ed25519, base64)
nONQhnW1/PQrCcjC/F7qjTxYivQJ+yQQL7WHsANkX5F9LB+k+fqC5kt3c1gH/U1W/1TQJegfVHHarf5sTOF1CQ==
Merkle root
0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path
["166e35bd0d9653a62b18e8ca581173253027ee99364038c50c6c180ffdcb34f6","dd28b3cbb95ce4f3fe5e58124250773ed44b001fa527cca1e4e9111b5c99c059","6038fba201922db11b32a191590e8b40044b69e40992d50fac87a6395bce7e27","08e47d15d80da6d160b0282b729f02fcb00a4b37ab805a54f53d0b523b0fe161","34f9409b604183563f5fe2bdc0255765229820cd0b6223cd86ab2b5b95bd3547","2609d0c28be36c3ed78f93c5047532ba5aa39e0cb535e6b2977059cf18708b6a","5c24672be2a7fbec68c5c12be4db19c4b8a1043b0d8983068f13f84c623e40ba","81727c7ffd24d222d2178d1aa0cd6cac96020387d15b5445057243c629382ba6","0b1fa50384e01bb94bc1df49e21512b1c7f48fdce160c205e471be24b501b6e5","ef1d89253fc65afadac230062761b4cb25b111a12d29d09a6773aafa6c6725b4","97bb581f373ac1585fd287a96ec92f37e16a17e7e09f4b197ef739b8fa5c9cc2","fd4caa7c5bda5b821309f24a41bde8275c1fa51be2629af50c760cc53c258d5e","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash
a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"brand:acrobat","quote":"I'm trying to cancel my subscription and get my money back","rating":1,"review_date":"2026-10-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.