Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“dernièrement, la synchronisation des sauvegardes ne fonctionne pas bien”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2671929919

Proof data

Record hash (SHA-256)

0cde31d435c5aa2a9a89e704765994b1a202f02e45d7ecf2db7677cb08b17c4a

Signature (Ed25519, base64)

dHshmBnfHAW6TEPnraPtupPLFWzCPc0cO/bFaK+kD0Swta9rxm/GrUhSA3No3pb3GKZPKvTC0+d5IoEe5ql9AA==

Merkle root

ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209

Merkle path

["0cdc5b86b36251bf552d57b18db0fa3296f80126572d032025cd1cd8412914f5","5ccc9d1f44155ca5c628f2924c7ad20e9f455bc8374e0673327cd09776d5edda","493284df2aff01d17971643bf3a13bef52a96ebe766bdae0fc7ad3f0d47b6dbd","0e435bb48da0767d748a70bb589efe6b9db67dc9e14787e97f41cdd883082bab","cc8deb53c698728254261ef96886419726390722ff06446309aa5e965e9d7503","0ca62cf90da5b0bb1418ed84dbc4205f23f54ad1b854893d7f7e1b45cb611b51","07e8936fbb6b3b38990ba9c282008d57a89c44710b985297ce9611c2d7785327","f08d7179d1134253189d271da70e8922026da49abf51b3f4567a886aae46db2d","2cf93f7b58189ed19f6d215da53c3d084b97335a01cd00ec19fd2bda5870d2ed","7575cf7bf3549261d1ee2be2691d659fa50bebaacf6d6e921528de81ab091142","df07d0fd39789cad7bef281836e613b82396f533e32f01314c42e81e8b578d74","16a20cc814214b26526f21ee5f967cbf38004ddd8d0ac5579894e33963c2f40a","849ed338e3b19bfd222d070ef2b6f25f2505730ef52ebcda9291b3aef8591b7a","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…

Expected log hash

b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788240211764","kind":"published-quote","locale":"fr","page":"product:infomaniak/swiss-backup/fr","quote":"dernièrement, la synchronisation des sauvegardes ne fonctionne pas bien","rating":3,"review_date":"2026-04-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.