Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“what a useless app!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b7792fa90986617f33cc4a727437f6398be7e4eacb9cfea9b0f9d8a2373b7a6
Signature (Ed25519, base64)
dqpMzRectV9UqxLAQ3ipoh73Lw3xR2CHQrRYIRg1QfHIuCxT18Hr/0iTq3sHv2O0P3dFE176ZbzaEiju3M8fAw==
Merkle root
e6ac019704b226508e994cc0855a4d192d5ca56f36bf79e20dc9e3368a99cf1c
Merkle path
["0b774df2274b543382b40e618be76d757e71b9206b9e32046ae991683b6899df","655df7dcf65298b219d5ec3f83359b579c617ce3a1def03664808e3ce36d8625","a1d6c89539106af899ed656c341dedde4a6f33242dc93b789da41e4b0ebb4a7d","acdcb49183ce18de41b3bc1bdb7c36490a26defeb8f5462834dabc18a4cb8cd3","f98459d4adcecf28ea8e27fcc5dfb04abf6d7fad00c513a0cbe897e5f97099eb","b8e30f3938f28d6443c98a2e4ed364f69f66732665159e158b5254eff11bd112","0a84b67d11d5e10a214722fb058fa919276fc645595d7290d6908a31cebd479f","b35414874972e6b7c2e3fa57c5eeb568d2f7a91a09acd698c6bcc547c902d3cd","7f86487e6558657b32be0b5d50be242ac00917da539d493fb2209bb39488af2e","6651c9cffae29657c2783a52ad745af90d49949609c2047204d49c67f0076cfc","e6cc2e980815e5085e45d94597d214cb8a671eee8f8d8bc713278ad1394457d0","76aa14c6b140f882f5a6ca82e1bd3d30ada81e6f9ebf68b6cb689ed74e97d2de","af32e6ce7a9c3f92995c628e9a34041f7ca98856143c57e4fbb6f9b1d2e86f88","300daef4aa548e8c10fcf4706d8cd6c134a74d44a2fedd09c528770268883f87","55037d90ebc6f8ee5750b678c0269386792b0a1b293edb3e029a7c8e378291ff"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2631716425 · entry 108e9186e8c5677a0f4e…
Expected log hash
45ebfa784ea01d364c463997b417af34e35327c4187ff9e9782aece8c325deea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787968874252","kind":"published-quote","locale":"de","page":"product:smallpdf/convert-pdf/de","quote":"what a useless app!","rating":1,"review_date":"2026-04-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e6ac019704b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.