Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“kann App nicht öffnen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
02c756e4835472448738710cbb18765669dbb8a1404c5c9958ae122a0b0077c0
Signature (Ed25519, base64)
hX2howhHakW117lPRrQbJKbBB4CFHkWVptdsm/an0Py2SiksyuZ1kQmO2IeQSOayWI6O87ctH0ckzszlUbrBCQ==
Merkle root
0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path
["02cad13f28a451e48ba7e624e0062337912b7bc5e7e04b6c6584ac1e8b2afaa9","cca6241e6932438b823d88f4afa8af0ae6f3d1987c791fd64cdc84ba5fea5014","690f1d86be31d8c54ea87be07d599b3d8d120f1fd6fbbcdd83d06d74a4dc0e01","f483f9a33604e2f2eb9a499aa0afc61a965d38b90002355db9725fdb8d490d17","bd6a4e5a8ce20720e03e7ef81712e394585f66566d02e635eb37b45c52ed9954","a4ee4d4a251f622fbb77b56d13247f0c2fdc1fbf7d2647bc0d050e0d45d04108","1fa560107378c28eba9d6b0ac2c68de3f269ab7998460cb1f1bdbd07101c1940","f466733cda5540e6ac5d4616fb83fcbabda4846412d728a6a4e4ca8470249162","553508c154d6c4d3929ce548db55cabb933176c25463773b6d702c714e2c9a6d","37982a316e3b42556cc0304b7d6aa2f1ae75cfeb37a3eb7a1df90973524947c4","854d226d64b6b6b7c169ad505a2ce3de34b55ecfef19485e14449b518af3a14a","fd4caa7c5bda5b821309f24a41bde8275c1fa51be2629af50c760cc53c258d5e","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash
a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791865115768","kind":"published-quote","locale":"de","page":"brand:relai","quote":"kann App nicht öffnen","rating":1,"review_date":"2026-01-11","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.