Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It took forever to be able to insert my pictures.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0430c3cbe4db1419a7ccbf0982123495254859e0a7ee63bb492e03a26f5e4ff8
Signature (Ed25519, base64)
aLCnxYtPzokgYUChxldbqRMZop1GB9fe59rW8SMXvWgSCTN/niKjQn/NqFw9314Wyy/wIdGE2/w9LiEfgZfKCw==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["04320282e2c572a703a49280b1663fe1e2f21823a10423e9c339827e12d2689e","58b6f086966557276c8ff391f0eb2a76aeb5532192bc8e549b35408fd0bc5151","827a682e42a78bc78685dcf0b6224800ab7ee1fbc9803ffef77c04ae8a3a8e20","0ed43954745def255c42951098aeb575ffad5b947c80c6d9b8814a0bbe8d36d7","cdcc37d8a331e30a14d185b8f6b183cc3d4292925431af8519d0b8bbfb5a0748","f9112b584cc8e2f247658c9c5a722bc5de85e5fe3a7862b6ffc8c3edabeda606","f94a321f1a4f3f3bf867d318ef44ea1c8995e35ca3cd14f7996e08d9359e8dcd","0a1c137da05a86ccc5eb329123cbd298a2ce7261d8ab5b2ac409e260058113ec","26a4e228a2007d2c935d6e269d16408a2f853a2cfd9081e27b0f58b01f6622ed","ff86643196d4d35c761d54f869162fa2d722b099f77114df352598967b193385","05efd0783c31d04f451be969fb9a3d8b0e2eead0466af83dba54cb0c48604606","d91641b993c3e8dfe69bb82ee13578bbb33371688b0fdbbf8fd534bccc3e9c6e","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"brand:pixum","quote":"It took forever to be able to insert my pictures.","rating":2,"review_date":"2026-06-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.