Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the digital signature stuff is great when you can't be there in person.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1515719ede9e9e9bbf1215fe84af493068c65e04dd03a0f6b713736e15a88557
Signature (Ed25519, base64)
Xp7FfhWyDoxdIEsSs6ew2qVeq6WqdvyL9qJXFRC/hit2SP92CStDkDxd2pHTY+vCWLv7e05DA2g/vaQupqe9DQ==
Merkle root
c921242d78a65e026e3281000ec5ef04ef930758058c4fed3f79f3b5ef992cde
Merkle path
["150e6e8c554157b46b9ea765ceb5bb1465833f5eaeed7bec00a692daa7890783","48c20d8bd5f628253afa8091f4887d49a5a2a06e0670fa2dcd8aa7107033da8c","5b7199b5295c899b3108a18a989b8a5b0a71f028b00a90682ca3c434ec35c40d","c4cf0357636178e5ca0adee3ec9e2680f76cd117cd9e090e707e4b06ed4d78e2","3254ade4e68615ebaffbec02d88dcdc4411393539d32a5987d53af69af98ed21","0e5e0cf35eeecd116a42b5435957b37dfca5a780b06adceb9a9a9034418a8c7b","c9de733a3e3c08d55e0291d290ac1221d6cfa70a6193f57166cf5a0a0eb7571b","af34e4d2d059be266a40aecf869fa41f56cad721e7d4c10a804650f5bb9f7c07","0cdd5707c8a001d9d6439810324be43ce8b5dd5af85c66b652901d1249083c9e","06b08ba2f83f6d798a93075b929d9f7171b1bca59b8a8931e3e8a31913eb97d3","fb6d247b2059278f8574ef5f6e0ba5e3718cf1c06fee30aa05513565d6bd132c","a96676375db3724e1e627228b6d8bd9eedca089634a5496d61b7f5a04aa3f0ba","892281d0b1786415cbbab69d4ec27a4aa9ed68b52615fedb06b3a777f62ec60d","a3747175efd8cc3d769be29f15252da2dfd09eccbeeae76e08b0112f75ae1173","522d5a6bf348351e5632579ca190fcb390464957ba4b4698b399695ee13b67d6"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543700701 · entry 108e9186e8c5677ac7e1…
Expected log hash
c1abaf0323b08bce2cedebaf1993162920ee741ace8973292e7ffdd13aca356b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787287374804","kind":"published-quote","locale":"en","page":"product:acrobat/sign-pdf/en","quote":"the digital signature stuff is great when you can't be there in person.","rating":5,"review_date":"2026-07-09","source":"Capterra","source_url":"https://www.capterra.com/p/251329/Adobe-Acrobat-DC/reviews/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c921242d78a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.