Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellent support.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d10942d2cb5a73dfec68d2833441039897e71ba65ed04cc18347ad8c3fa63d0
Signature (Ed25519, base64)
0x375zU5kFP6GUvovhNacjiBJn5TYMc/eOIpPiekDa5WCe2aYG/EkFgvgYkTk6BhOt/NYLrCabnGbzuRuTMKDw==
Merkle root
653f52f612dd7654074ec2f50a8258d24363de118d24fd3fbb293c3f9466146a
Merkle path
["0d13f0fc9469e23a5acb44575fc934bf6deefd327a321063b413d916cdab12f0","4827957e98e1b6a918472b7daf44dda423100022214b79934cc72e2b9de8885a","9b0212d66f70f64179dbc411d33ed2275fbafd3bc7554beb3bff09cdd27cb756","42d4d1afe654b3c9fd7040c07efe50d0fb6d58724add0a3838c9d0256c433a05","2a0d534c337e5d8a69ba80aa13dc076bdcd31c8c1642f471e4527a4ab0acada5","65390192b7568695047dfc6ddcc98e533303087e73015c15a54507de2c0245e2","0b4cf3140eb98e6330f3ac1825de5b6920eb7d6b0bb96e39e4514d67bc325bb2","840475269115fb31733756590d3ebff84eab48f6d4441c6f7143bbd983afbdb5","9d78c54a326c8b36d550461dfbf6bf6a0c5cf49097385be88e0686be574405fb","6258db7893d623eaefb1f8179915a3638239fc127d1a08827f9d608d1cf75b01","85965b3b18f22c17f2f5170a39e07692a5cf73cc0de8849d30586ba282202798","f20b68e10c9d60c824a39dc128151a5fb0347bced725edc264111d1392a6f092","9fcd88f1beaa69d65dea3d04b431d43ad97368c1462c24ff050124283ec46f78","88e03340b0b23badae5a3021870a121b2e386f6ec4446eb6072186f7c59cabf0","5fdd4fb85b0ec398c42530ef65e986b74edce2f5c14068ba5fbe6a72c94b89c8"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582700609 · entry 108e9186e8c5677a119a…
Expected log hash
db705c1ce83f047166ef3ebf3406f1398f685221ea16db9703eceb49a1163aa7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787633403760","kind":"published-quote","locale":"en","page":"brand:infomaniak","quote":"Excellent support.","rating":5,"review_date":"2024-11-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (653f52f612dd…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.