Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I feel it is a trustworthy application with strong features and excellent results.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2460366749

Proof data

Record hash (SHA-256)

0bda0b427f05d99d048ead94f47dd8764b4a24ee3922b980fc9a72edbdd67513

Signature (Ed25519, base64)

iR1/18yejXOiffpJ1gKLzV/9oMXd/cG6m3DGmcftkuF/4QrN//Met4Fve23rlfpc/VXawuuV4smJ+v55i3/mBQ==

Merkle root

c57f63ca7667642311efdded526d861b51ffbf52d1c426da305b845951427701

Merkle path

["0bdcc2e49857971abfcdd278ab2786573c665c6399db75ea09894e607473e541","87fe1ee61e289acc66508b3bec4cf63d8f1ff2ca5766fc620290efbd586d1a6c","f1bc349f6398807298c0dd49e81c57345fa42bfa34089c68a5add82a42a0ce3e","ee9f89644f8121f148f0b4dfeaaa7c9720a80e8ee3f1edb1dea6e2aa18494638","35fe768a2d521bd68d0e5613ba0e3fbce37348d9086a0fa23204e6eddd67b2f1","4ffa86acbd607db202477fbe03c9333779a72aef5c786f6c4dc104dda0a4a6ad","2b5828fb21e03f088350004178111601b856cca969fa19871d8bb9aef2f2a52b","e575f99561cdac1170cb18e3bef69cf7ea1caf02fd90da2f7de241c462698311","373ad25b22c90505c17019793339b12ffdf8150e60012ae65837de54a53822d7","92242a58b534b4b8d6122f4539f23059cf2c2597ba1889c80e013e92e711536e","f839f8c1857277e93e78f62ae755c976a30c4acf9c7d18d3c2725b482a06c5cd","fd9d831d6b0e79fd5f1b463b102736cfcb9ac132f081a7c28a6b3ddec8813c69","61391210b3f831a04fd8f72b9d70a0dec0597c4f0f223cfa9b9200919500887f","fb82e5449a31f87d138969592f779e1e85f8796145db30c2755c726c8fac6410"]

Anchored

2026-08-14

Public log entry

search.sigstore.dev, log index 2460366749 · entry 108e9186e8c5677a1509…

Expected log hash

00b1dcdbbd19f66d225c3906dee55743ddc8b55c3879f3a1d4cebd98457c90d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786677999476","kind":"published-quote","locale":"en","page":"product:smallpdf/smallpdf-mobile-app/en","quote":"I feel it is a trustworthy application with strong features and excellent results.","rating":5,"review_date":"2026-06-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a3d675adb4393914279e032","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c57f63ca7667…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.