Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I just purchase this app and it cost me 510”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256)

0ace5876fa9dd762b9d411b5e5e586be53409e6e45725f7f96922a842be48b21

Signature (Ed25519, base64)

bjQtRSxgW/hLsW7OPMSxFoRcCHkiP+d2LOo5nwyVCzoICLbJDFEnDw7COm+o8gFkg5aWFKo9T6rHs/Jqgf2gCg==

Merkle root

b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c

Merkle path

["0aca29d7468f3d9d16f5522c8ce61c044aa7e09055d5e18200acf20a81b47f23","1b86c4c0be38d73e77ada942158ecc39fa3f4870b98a555be62a0742e9940558","a374274300f5fe19d1ded5cf01a97ec84d58a36ae9f4347c3548ccc5b2484b41","530397848c4b18b1ff4cf76fbc657536dd81414fd3e48bb1359bd9f765ef59ee","3b29407a0f156006aafa9aad38ee90d1a198dffe79f095b4ea6d580dfe833f94","a4a038d0828da2484e38febaad7caf36b9f44e0fb0d8dd770e97a5d164db1bb0","b2fdfc00acf1e5394358ba939c9c0c2e9d6c71d706c4ceaca00533c92fc783ca","c93c26beb2a37dec11d673e733032939155949efac2de88e1d05e72a68eddf8f","51f0ba43a03cfd780c2bbea3352d45e3efa2f156bb748cde975452df9bba1348","14dac0adddf323e69e9ef8f42d88b43ffae33c97a160ead0fdb242051d3da527","e78efaf320415120a8dba17ba0c988c4c27c8c4e3cad17a7d8db163cfe05a4bd","00658215e391bb39cb2a4470aa8304aac30f760b4b7065f3aee8dafd9f2579fa","a1ffb0ca27bb2bf54e7fd100f5c8de52d61a97b22e607de0b6963ed83cac9929","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…

Expected log hash

687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:smallpdf/price/en","quote":"I just purchase this app and it cost me 510","rating":1,"review_date":"2026-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.