Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“If you edit pdf you have to pay.”
Google Play · 1/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3121353835

Proof data

Record hash (SHA-256): 15a94efc76e92db54dce6efc685afebb9dde1e4e7a8b6e19e56c8995a9bd6c1b
Signature (Ed25519, base64): l2/wbvD4nFw1bv5TPl0SlUFOTE1u6fRHfe3cVWDQkmjwu1U6TDa9edo0t/Tlkq5INREvTREedS7IZZG9n5MMBA==
Merkle root: 1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path: ["15a8cec3610752a1aefe61711c8e9c1872ce7e7efded78a03f0cd536f14f81ed","079a470212b740305dd1a4af2cf46349ffba85b67d449a86ae4117727b385a94","394f004cd6e2f2f18f9835d41e17ceca963a556f32d25fe45bdecd5a460cdd4d","81f06389df676f62fdcd9a8da1cb1e12f3d0a312615368f7713d11f0344d0d78","384226f0c06e3a2cfde6391682c257ddbbda9cf04468e69af5608a2199e36871","5b2ec3badee399473247130ebb3bc1b8f1c35f611d2c221c1d05ed8b04bbef28","0d84e87210319a025b23580b3f52ffd2af003429d5f6b978537e9b24befc9cb5","30cb10b89a4b76fed85b091f5b223bc1e7571b3962d33bff24afc056079c0b37","9f964b287a14ad14e89e91e9e46f776f2ee74cd1a6d934f914cff9e045cca6bd","9fdeb82c3913f05ba77be1c442af54ed787833e55f19718a398ceee2338e9b98","5f693c587e741890cbb9b3ad75261f3ff5a9fea5c1e5910e16595c562e9d2f29","d2fcf30f71e978cfa8864728faa4ba390bcc591700ad83ceb71a9abba973d6c2","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash: 3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"product:acrobat/pdf-editor/en","quote":"If you edit pdf you have to pay.","rating":1,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.