Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unfortunately, it is only now seen that delivery to Switzerland is not available!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543700701

Proof data

Record hash (SHA-256)

116b053a1accb0b06483d6d7c2b2cee4808e2efdb1bedef4841e56a8ba209e48

Signature (Ed25519, base64)

OkgLY5TWanDlxl8DSrAy/0WAc3ZV4dBgMDWM2CPRlrxrVNVvS7p/QAeUw9+4OSGDUqr4IkhJsCq53YceOC9eDQ==

Merkle root

c921242d78a65e026e3281000ec5ef04ef930758058c4fed3f79f3b5ef992cde

Merkle path

["116660995b09e615c9f1c8a581fc0dad33193ebf3c364cee99e84326ec5fc080","61fbc17d0a042dbb74c4f4aa36b90c54de9b63d98657c359d34b0faa07c0d02b","d9966f36d4a3b12f74ab8f381ccd92c1362a89af3fb29ae91d5d7a6332f5f35e","76f3ac87389228c06435eefe8b7e8ca3c4677825ba03ae3e3755af6f84601692","fc32b36e997ee5d386d904098374d4a3faeffec2ea33f651acaaeff08350e5dc","52cb04c164b18197fa3b802b048c5e3e86ac88634d53b19db5fab975347f2e79","75bd3a5b7ff5c15297fed75ee0cb2be36439c7d632db6f179eea587100d3274e","66d9e8475cc25ac0a49db4e7d5a08f61d0459b16cdfb51ed819bec079e01bd08","8ec89e934375af0ec5b0eb70225fcf1d5b0ad409b054691be9634f8ec4ea2c81","9b27e5592f9ccfa7385e45546979377095f526b2eeab2ea9aa7e189d24ed900b","fb6d247b2059278f8574ef5f6e0ba5e3718cf1c06fee30aa05513565d6bd132c","a96676375db3724e1e627228b6d8bd9eedca089634a5496d61b7f5a04aa3f0ba","892281d0b1786415cbbab69d4ec27a4aa9ed68b52615fedb06b3a777f62ec60d","a3747175efd8cc3d769be29f15252da2dfd09eccbeeae76e08b0112f75ae1173","522d5a6bf348351e5632579ca190fcb390464957ba4b4698b399695ee13b67d6"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543700701 · entry 108e9186e8c5677ac7e1…

Expected log hash

c1abaf0323b08bce2cedebaf1993162920ee741ace8973292e7ffdd13aca356b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787287374804","kind":"published-quote","locale":"en","page":"brand:pixum","quote":"Unfortunately, it is only now seen that delivery to Switzerland is not available!","rating":1,"review_date":"2025-10-12","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c921242d78a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.