Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“So I searched online what to do (as there is no further guidance in the Pixim app)”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
094a6f678565bdf8b2c821c2e546ea3a0c10ec5c2df4676d6af325bf1ebf0484
Signature (Ed25519, base64)
SENYnRrAhOfNYYVU3d9NKv+cELVsMaAkLi7FJdNEAHTwMPmeLv2cokodoKVmu+rPm/ddMGOfffB78pKC6ll6BA==
Merkle root
dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d
Merkle path
["0947bfcf06a805562b32864fe5c146c30766f4829a480bfb35c36742edfd2fbb","7738a853064ed6a449609725ec0f60b1bd948b2ddb9bf54b0f4802090bf325eb","2f7e1a9758965a5e4270fddaab3a344b84d87f2f405be0ddf3fba0ace3ac0a9b","2c88f152990c5384101862b60a6c4d0de5f9695a2fa1c06d524e0ce1205aa1f9","1f554f33403c133e769ef615c436996d10ae73bb9ae3c0f42fc4280a224d32ee","d2b973679ebc7c5e876d1056d57dd2ee08b4cbb3f7c6da94d090f14a716d199f","79197238b9dbd267aca9fdbaec9db66ea5cb6e0579709df232f258a2abafa0b0","efad526f2042b94fdb6800519303f8f37289edca770b889f1a7078655ec9f2ed","0190e3e3e20e5590218fb23134b3d9e293cf54784c9a83a4d902267a5b243c93","e9bf870407db3e6b8313c23c10d0a77aeaea3fd985ab76a2d318405dd9ff06d4","6d0be9f8f3086c3ca5ad7c4a7436dde2922c85cbdaefdf286bd8d8a7850295e3","f55d259140b1887f40efd36dc62d4702f641032856993f66621d17ae5fdbb64c","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…
Expected log hash
2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"theme:pixum/service/en","quote":"So I searched online what to do (as there is no further guidance in the Pixim app)","rating":3,"review_date":"2026-01-22","source":"Apple App Store","source_url":"https://apps.apple.com/dk/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.