Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“READ THE 1 STAR REVIEWS FIRST!!!!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0605121976f821b35986fd4278121076136529e61da28b06ed02186b6261113d
Signature (Ed25519, base64)
B0ouOA9kVx9v6gfBWiI6S8jUOtHBca/LDAd3cDFNZYRfsHgCk6xb+q4g3fKguFi2L15CZ4pvnqLVL7YGI6QpDw==
Merkle root
1da6cf8d96c8876e66e82e9bea7529c76d7e25eda1c07550505caa1baa49c4d1
Merkle path
["05f749574bb9ea05276efb2325d95cee6662eebf15ad292b20924464c7015252","2500adf12e7276b6dcf91fa83d74f56419d82795d044843ee408506ddeb87f83","998596378403a0914ea9ff0d8ce7c96d0a1a94612f483a75266a4cc6b6422e72","ceb318bbfbba9088029f851b47d30486ef208f2f1f85a667508d745805415672","e920648618bc4593cb4f1e66d78b519d282d0a9d0cd1af171cb82fb2590601ad","292853a3cb421f215a194d667f9455987ca69feb5b4fed6d98bbcf1c94efdb50","1da8afea746ae8b50f98bbb04044768f63613b2b83fd889a31509037d5cc357f","2cc7a3c265d97f6ba19cc810ba37822db5b681e33b964fbdf523c86e86048c1b","2ccadec1f3be759ba6ec0f000451505931306d99a65d64851033fbbd6679abdf","2d40eaae35e424d9888d333d8326b3c6871041f9e300aba4e6483748a8e942ef","f0e4743308c97cdfb9d7e257322f5fcd8ac75eb83cc4eb10155c0a0d14a396ab","ae52329abaf68e9da165e516499bae5b8b1835a4e008f4e52a7a7b160cafc13f","d0886e619546ab8e630cf9041b21d39a146861d5b7598b5044808c3537212a80","2d81003ff1cd2149e42eace973cb0f4cdd39b653f7b06a20804a1f1025023ebf"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240367269 · entry 108e9186e8c5677acf8a…
Expected log hash
f6397ecd2b8639a3c60345d0c567eb602411c7eb1bead248c760bae850816087 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861381931","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"READ THE 1 STAR REVIEWS FIRST!!!!!","rating":1,"review_date":"2024-12-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1da6cf8d96c8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.