Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I order a calendar every year and it always has very good quality”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
12399f69c83940db0c4e905824049f26b1ea21958a42122836e3c2e2043555f4
Signature (Ed25519, base64)
I/kCxdl1azQAPgErmgULW4Y18DD9X6Z4I+7t/Ded2WLKN+ioOP3w0JFfb7yIQkY+eSL1UKZeiDE9QZD6dHbMCg==
Merkle root
2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f
Merkle path
["1239f9e1c712fb0787b113a27f386cc0a4a4b2a10c7ef666c75f14d933b221fa","0902932093316c2aed42e8aed8ee3523bb25cc38962cff7b59d845b809773026","0dca07b5404871164c8a8c054f9fc37d1f1bde818f9237b550b55f3f18f78163","d33f00de1de26b633f894fb4cfc731338e24753840b139090e558b53df516fbf","558f7c1596c94526722459479ec63dca819926aea61d8f7a7e0227f9b629b326","be23b225afec3603e0769d6acf994affe9503d4cca78312f1b2aeff4f407b57f","3579fe4df74061ec41ad725a5f8328ac3a7e5604170d2c8edb9be9c0c9dbee09","e2d0c9261a4f79d648c23ff089314713a9586cd439c32a94e4ea1d6b4ea92ec1","3a4d516f6e8d63d237871d7a0032a72168cfd620c9f0c86055fd5b91f114b0d7","5b8cb3e1434d4edcaa1ccac910a72543eb7ab88d0116959d3e66445eeebf23ae","053aeb2882a40cef67f04682285457fed3d577e11d90ea5db39babebc61c3c10","217c89d31a17046b10361dfe1c171a079ca6f41a95c91fe077d21fc7059ef5e2","918213bbcd6c7aeea281036e9f4d443f99addb7e227a2f8f78d8ca7cbe526c6b","bac51ea5b704b29646e9427857e311e108c5e79191194f7fff260047321ecdd7","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…
Expected log hash
ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787132872903","kind":"published-quote","locale":"en","page":"brand:pixum","quote":"I order a calendar every year and it always has very good quality","rating":5,"review_date":"2025-11-23","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.