Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“READ THE 1 STAR REVIEWS FIRST!!!!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0abe6d69731bb2f5b4e15ebc863be75d2c69eb587affe704e3b6d34479e89c26
Signature (Ed25519, base64)
vcs9DT26WnH89/RQdADOYsYgRDM81lArDIWBdRy1UEWDd9Bu5h6ym86M3E9AIQPETUdU6K27pWuW1e+s/5V+Ag==
Merkle root
2915d94fc718eb48f67362a65d9a83b80dcd4c926c786eb2e38f4d8ced0439b7
Merkle path
["0abe7fdadb9d8fc1c8a74c8eb9fa1ef7162183c60a334d2e1e0728262bbd7ebf","94ab72d8a0aa77dc2d9088ddb13281354aac45cc02bf32de8e1b89e15cebe964","4116cc374f3d7de238c28e86c39bda4f57cdb03408e8e25317b1e0501e6979e5","a98216d2d9a21c07925c2b56797f23ba1d6cbb4ec80bdcb29d1feedb25be187a","1d6b7a6c0d9d7ce1c3818df002be641ee89999382f54c48bd9dc6f96af512f4c","473c3a51dcb5901a4f84d8b95d48586e577fda19960a19d7e58e75b55afb1131","05b27922bbe3ca777f46cef59dd4b2235bd441aa7a9903da8d5ff450c5e70434","2a746cd9d79294c44c85c99109744ff5979813fd0c1c8cba958ebfbcf4cd9668","40ad7427cbd806dd032d6b1d2816f3cfdc2a2d637f08b1f4d37f6c7aa48d11d3","1af242205f1616783fdf4711bfa2cadd90cfb6cedf680253f695a0f615e080f6","9762b26d023c4768e29dc834680a7a93f214deb59eb948efd53aac84e79aaae6","a67e5025ed174812cc85ffad7fb608d1ec0e7e7057369282aa8c38f78ecb6fb6","dbdc65b9f91ecf7a21686f427f84950f149ff3313cf7cdbaf938355c0225fc98","5b8a2081ec81ef2101256bd7209457c75dcc1be14257b40200d45a88003c0c32","1936eb7713ae59e20354a37b8314d3745433b23d047da205242414a6fea32b67"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657230937 · entry 108e9186e8c5677a80c3…
Expected log hash
1d9aec1bd239e45b6e622f366eaab4292482e627111ddcfb4c651bb1e08e92ad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788143889053","kind":"published-quote","locale":"en","page":"brand:smallpdf","quote":"READ THE 1 STAR REVIEWS FIRST!!!!!","rating":1,"review_date":"2024-12-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2915d94fc718…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.