Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'ai payé la licence perpétuelle de FoxIt Reader”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123541116

Proof data

Record hash (SHA-256)

0ea465a17fffea582de3e1447726e304c3d8d7ca5a0d1695b7658847cbad3ca4

Signature (Ed25519, base64)

OhLYkzT8Yxq8r4PRgoYGhhbqnds/7WZtCpSDghrDvae4PB9HRDs8rn1uX3CbQmyAP4GqWEc3onFsvczgVJTfBw==

Merkle root

6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326

Merkle path

["0ea3d921ac9096654d31d4c8c591f064d45cb571b1af7d6342dbeb2b2af2084d","0f69e57ccdd0edcf69e3b97888826d22905b00d2c064ec7951283f2c5b23b22a","d00831b2bace712478741f7ba8ccc7b0a96475e04bfdbb66ce6a6beb7298a054","eecc80e9d73640cc0bb3fc5db56077448651d91af8b2dd924ad4fca5d9b11e0d","f48c01fb0074a45fc674f9f5152245bbacfb105f7314be80464b55678fa1d804","24bc8bc10495e53cc32a67784691537031718633fb15d38f95aa7986980d84c6","0cee632ba16aff4795138175f9bbb63061941ec0321d027fd2d2ce1046576cf0","87e44e92f37d1ca07a3ae1839368ce0a5e570a2582c96bfcd4b8f0ef37701433","38c9c896b7bbcdc30114815e242cb8d4b1e046c7bcf403a2896320aac2d8bbe9","90fefc8113c71c659aa2aacc88d7179e8d113d2bf26b96148cc94778d2a161e4","293d792faaf7fddff74c4a3972f1dd3567ce3be07fc2c2bb199c0b9da6332c7e","0340a42a5e25cd0704eb9328dd33a8fa705358ba4e6282fca503520e639e9bd8","b020a374bd80d8439db67dcb5e0231bd34e95b9d3bb63efee9b4e85b2e6039f7","4c2172f51b2eef852eb0ea0a1d4f8bb29ddcd3a6f382677ca6a66af43412dce2","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…

Expected log hash

9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791346951310","kind":"published-quote","locale":"fr","page":"brand:foxit","quote":"J'ai payé la licence perpétuelle de FoxIt Reader","rating":1,"review_date":"2026-08-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a8db52b6e85b0cd8df3fa2e","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.