Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The application hangs”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09728aa38a8f9c2442868ff410221ed7a78a28882f6cf3c90c69291683cbe263
Signature (Ed25519, base64)
80O3+eLkJyuLKSMqTRK/8PhIL9yK2+3kTX6QT8/7KASX4688OwQsbOOjjm2wZswessR+dy/H1xZJKwPfkQS+Ag==
Merkle root
2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f
Merkle path
["09707232f44d509d8213083a39dd170dafb23bc32f21788b8bbc3f565233d1c0","c2f540dfae03c5d79e96bd15f42e7f3c443ef1ff473deb42de73c9ba924c29b0","f7eb8b3215a2ee1625487bae6d11fcd24c6cd0f861a0e3a9a1d604e46fdd77f0","cb2d03ddeae58027258f757e9ef57ff984dcbbcaaf5309adf9b6727bcd808d37","0fc3e5fb1e2d15b9f533a271532e00516a0e4a9a69ab77035cd394672d0c2fa3","714881a7921827bdb3037441bb7bc271a1c59b5deb52fa45f5d74596bff721e3","c8727015098b2b40252bb95cd7a259481da6d2245929b98a9d18800e503e1c15","1932c77d5ba881ac5acb2add15d653ac7b7ecdc24d6f85387cf1518403f1a771","b9bfe5bb032389065fa47df6981278a45e525a3d473e01530ec086959cdc1b3f","5db108295133d69ba6375bd4bb07d644062cd36407165a536e1a97bd2bc72573","5ee2fbbd3889ec66947e470fa2e91aac569e9d365ebdb7e174d15ecfec0d580d","217c89d31a17046b10361dfe1c171a079ca6f41a95c91fe077d21fc7059ef5e2","918213bbcd6c7aeea281036e9f4d443f99addb7e227a2f8f78d8ca7cbe526c6b","bac51ea5b704b29646e9427857e311e108c5e79191194f7fff260047321ecdd7","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…
Expected log hash
ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787132872903","kind":"published-quote","locale":"en","page":"product:smallpdf/smallpdf-mobile-app/en","quote":"The application hangs","rating":1,"review_date":"2025-11-04","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.