Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Background uploads fail quite often”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b4cf0e44bfa5abf8671cd4703be0c5601b5aa4b7181b6975dcf1ea095c3cfd5
Signature (Ed25519, base64)
J9xUgWZS71cugvNfp+NYmXhxOLruZsOzGeDONvyx1Aj9Z4Ebpirvy/e2yokRrB+6C5hLfZVisLECXk3iQPWDDA==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["0b47a3a455ad0f8c058b1a0559aac999a722e1d284f9e73c86c9fb602901c92b","95fa560a6d6bba06e472ebcd7a34b1aba5568b83d764470943ff80f603e961ce","4c6b6d8505eb95ea453f58afedb7acdaab832f5d37f56393b3b2805d4e6d8350","51da6d1fe595bd4ca30a25c1631377a9430a1e114856ddd894cbcfb36b0cbec2","d43227de1e2ffee063d48659b4ab77c6f80fd383c09a45a31402be6a072145e4","0b06bb2cf9f226c8ee22f1ca4248e39b9636dea67ed9d40678d0efff9d344a0f","70c0abcabe22fcb1aefeea8b0802917c081001ad236cb7705821277c65d2b06b","ed1addc7bee5da911c85ca771aa0475b58b0dc60f77f86d55afcfc8fe99735a6","9a1add5fed9e4bc3603081517ae623a66ff130caada83e52ae2cd783e72f72c2","ef8b0691c8db614afb1395e46c51a8282c3bdc9f1ba42a9414e19db77d2c6196","244591618cdbcecf52d02980965107e183669b9ec87e3601c5ba666ffa8e2f4e","3b30f3c4384c8f930b0902f0837c734e0f4d8aafe820711619a733e25c756cca","f3f4254b899098b98c7590d670f5fc0f992a4df0218d6bbab4ffa5ea42255835","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"en","page":"theme:infomaniak/delivery/en","quote":"Background uploads fail quite often","rating":4,"review_date":"2026-06-20","source":"Apple App Store","source_url":"https://apps.apple.com/es/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.