Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Discontinuance of dedicated Signature PDF format has made this task much more difficult”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1f316cd98d23185e06661879314b1cf9b59b801211b1d2608eb7d2388a019701
Signature (Ed25519, base64)
+hYLGDbA84aLfGeRwz0D6+u0CA7eHTCDNyY25MJefsQvbLtWIMA9UlDua61G9N61E8aQo4DUHXrT0RXTh97+DQ==
Merkle root
ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209
Merkle path
["1f298e8917fc42ae7dfde4a5104088a0f9796080f2e41952f26c5653916721c1","02748b8388e25e19a2034e52b3f53ab9009bc18fb66de3b93ed9baad6752842a","9dd6527a9b71dcceb315ae0bcdd4208e4657b70411ac70c07227ef4c37c65e4a","e143c33f6582ed3d7f96bb0d97d0eac457557a692cecfd20c9cd1df8283afe7d","c361a9e6c266721985e635df6902a2dd4a58cfe948faff394bf830f5da164db6","0a47b113b87878a8d71927b12d9bd5ccd9421f2906f98b1e2b8d398e45de122b","6d4bf5e9557a971b1761385c2486c84150f9d017aeceab4cef92d91b85794926","5c375801fe33abbad2994a744add2572465eb1ffbb126ce420e47016323cd893","275ce5c419f1c724a5039b0c8be6e0dbc8240fd1276917c91721cd4adc15ee89","5bd777d27226f44e5a4bc9493244a6bc001d41f781ec64856a302286f00524ff","a62bc497cf98a08469f24119f872664d8663675823947199ce96598ec12c2598","f25cabc34bdc1c3907585855d810ad27cc4caac426cbfd58fd93bd08ac5ed43b","849ed338e3b19bfd222d070ef2b6f25f2505730ef52ebcda9291b3aef8591b7a","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…
Expected log hash
b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788240211764","kind":"published-quote","locale":"en","page":"theme:acrobat/communication/en","quote":"Discontinuance of dedicated Signature PDF format has made this task much more difficult","rating":3,"review_date":"2025-09-18","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.