Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“with the most enhancing features”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2671929919

Proof data

Record hash (SHA-256)

09aa6f4aa8b244bea27802dc31ed6b2f074fd689de8586f81bb2d0fac7bc301c

Signature (Ed25519, base64)

oK1NVeGz4QvBXpUNsqk8LIlUaq5Ekjfkzcscl7rGANInmr2mN4iU1Bj0Jcdxak2C1u47CiNK/3KicGRnaWR5Cw==

Merkle root

ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209

Merkle path

["09aaa2f3fa621aace4a573687441d13ba80a1bba1807708eb06fe8e81642c711","4f2114e5e4ea01c8caab4a5fcd7dddf1fd8b3d8b8a104e3655dcf98252c9365b","f9459199be4bd853c297869b76d07467147230f24f5b5f87cbbe26885d8b1a58","658a6c390f2d2a89f0d4c577320a831c08398e6164835f5caf14c55053fe5f3b","ad82073bc39201641286c5e9e0f8dfb417c4b61794e6b0abbb13fc9d51633d0e","9d726de1d88e67dec87fcead76c5d09bdd72fe9bbea145806a468c194384dcaa","77345aea62a8dbe2c2d0301fbb1d981e18e2b0465d1a8f651ce423bc95c3cd0f","9d6c2e7307fc9cd3426c6f464756dc525a41c9cf60263f37cdfff6e49327cebb","f82f48434ccea50bcd1d4624f1c93f28117487cd925589fcd0b68f13a31ecf5d","f04f83c3bfd9d7f31f743612c2c13b577a0ccb23832e0806dd149b75e53a5e0d","73a39a5e974d34bbb8ee3d4669fa32111cd84204b68681919799750207c19564","16a20cc814214b26526f21ee5f967cbf38004ddd8d0ac5579894e33963c2f40a","849ed338e3b19bfd222d070ef2b6f25f2505730ef52ebcda9291b3aef8591b7a","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…

Expected log hash

b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788240211764","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"with the most enhancing features","rating":5,"review_date":"2026-07-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.