Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“How often I can't log in”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15953650dad416e3c1eec1d3fdb66ddac09455243c2bc7740a95f35ad9398690
Signature (Ed25519, base64)
utRuuet6Wxg9IQBxYYUBn9dRFU1Wm1ZdfoJA47uJzJE4Hy+9AFxqKpbdtMQSqXd5VmhDadJP31OxnrXBeN2UBA==
Merkle root
ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209
Merkle path
["1598f0915e9bd54bc0ad55d6670f997b42b452154eb616853778cf53ad39a14a","263a6271873a84f1d9de120585d8db87b73c8cea736edca08eaf88ddfeeeccf1","69b397d466910cde8d73a5ca4ff167b9a7383902aa1bd97d44b3ab8194bd8b25","5b6a5e6ed87f947d41e1ab9cc57329c550485b0db93f014af80f1fec03172682","a04c60d49c08b8dea77f526effec03c7970417631a0c8ab32f9f4662ad8ff5b0","3dfb28b26b485082d35d4677b768dc4bc368c7f59803dfac1dabcb19ca89f814","a72deca1f138facac713505566107383fbeeb2e6d5cc25c87631d84a9f8180be","b00e9d51deb9da2121d76f64f73dee69b606a49fa4c50e1cbbbeffbe21357846","5e47bbfd76f01899ad2bee16963588923b22859bdfb6da4c119bd89418be40af","c78b8b73ad5c44c3d3f5a64bb80ff0f14528758d72d6e12785dfa50b1f48a4bf","df07d0fd39789cad7bef281836e613b82396f533e32f01314c42e81e8b578d74","16a20cc814214b26526f21ee5f967cbf38004ddd8d0ac5579894e33963c2f40a","849ed338e3b19bfd222d070ef2b6f25f2505730ef52ebcda9291b3aef8591b7a","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…
Expected log hash
b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788240211764","kind":"published-quote","locale":"en","page":"theme:sunrise/service/en","quote":"How often I can't log in","rating":2,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.