Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Other free tools can do this better!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2472785369

Proof data

Record hash (SHA-256)

088d453d3a02f07150696b15b32fb37541b637081c1c638693c1309b760a833b

Signature (Ed25519, base64)

lbV47IoJzt9rK9dPh8FBxJX0gqg7MjAH5tDB2Sa0d/8+VikYpspDsn2oTP3vy329hGiP572xHARasW/mdE3nDg==

Merkle root

d4012d7b55ace7b121db1c228197aa3496a055f0662ed02b31781c14c3c10633

Merkle path

["0892f8ffb493ae6450ef5a1965df881cbaf1b978a920dc2123094533038b1c90","1840ec2324fc9d4813ded09e9c9f098c9986cb92d4ce1bad7a7463934823ce52","03522bb209b6514f1295ee09e36100a26f2816ec73480d1f50b2921ac233e0bd","bac1bb63bc6d5c98790197beda78415c45b36d453562380746975757d789447d","a620f44ec29bc17d712a214b20da289e265c95f89542e85f47ad1b69eff68be2","fed88db6f20b4d0e798b5294b66f8123175859ad787f72c9e0ef79d0556d8845","0bac4356d31d087a420a1e92d9fa811f386a4d10a6302d4d4a57a5c164a5da1b","67d96e704d752c4652a6fe23c4054460b0a0290dca969c93eed0331f8aa7cc68","784fbe7b06eaf693ec12630eb7809676da9128337e623ba156f29e0dd93f5115","337e49768909d0b71926095e57b0656de6dff3dca52bdb83fa16926edec6428f","1efdc0f199352b30527fc965b02e0343404217052cb8f51664fc1d30fe5b4770","698d639b8f8e9129363b1e216f373a21d0bc7593bcc174950031864bcc2ad27a","f61850a567de29eceb5a6b083d24d3d1a0c0f3781f8545c703f9b98012e592fc","0e2004b9b19d663f7288f3a966f0d1c4846f4bee6fbd11cf70671dc6d2c1fcb8"]

Anchored

2026-08-15

Public log entry

search.sigstore.dev, log index 2472785369 · entry 108e9186e8c5677ad9f0…

Expected log hash

55e32604e78b7c07822b8f70b5d6a8c56159b7b02fbe9ebaa5d723318dc77aa8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786767737769","kind":"published-quote","locale":"en","page":"theme:smallpdf/quality/en","quote":"Other free tools can do this better!","rating":2,"review_date":"2026-04-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4012d7b55ac…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.