Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“Just needed to sign a simple document and this is making me pay so much money to do one thing”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2514851395
Proof data
- Record hash (SHA-256)
1645ff7365494921cc6560af831fe2b66b9f94842655021ac85e53d4f8b484c8- Signature (Ed25519, base64)
GJLuXImm3c/GYMaUuql+uTUTibe/siwWTPo1HGjkMQXXzcHxWjwfhKQ3Y0SuYJVZYH0prQafqDt/AWYFGBkXCQ==- Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c- Merkle path
["16413723467efef0976ce4cb2fb2c9f6773d4a4f68059db1b5773f4c895b5c5f","e7c439b6761aab875263913953f6be2cff05569ef9d5e76c78a8e147a36952a2","2c3b5d28cf8c4057549239d4109f22efd9591b6c7e609053adaed686d7156765","a08f2933a926b3253232a2238de9f267bc8d3bd8ee7276722848134c828f91b9","eebfa444c0033d71efdd642dafae63297a789cc261495e6bed131ab55cc0a3ed","67c359e2ecae26284593baadb93ab7b17b3175aaad3bdb4daa805cbb39d19d99","a9a535f7efa75202ff4215aad39472ac75f6078871be29ede102a2abdfe8de76","98bf6da97d221c44fd5792b961fb1160848f2505ba9f2a117b981b7276153ff8","a2002655745ab887959856b0aa7121a273a09d50abdb430e703853b7063c3e3e","b60735c77e37ef430a2380263b4398940c302305014b08410d91dcb192ce2912","57d0d1e3867a5312bee56892955c942eea1835cb700aeca425b1841919735da8","00658215e391bb39cb2a4470aa8304aac30f760b4b7065f3aee8dafd9f2579fa","a1ffb0ca27bb2bf54e7fd100f5c8de52d61a97b22e607de0b6963ed83cac9929","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]- Anchored
- 2026-08-19
- Public log entry
-
search.sigstore.dev, log index 2514851395 · entry
108e9186e8c5677a4f62… - Expected log hash
-
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:acrobat/ordering/en","quote":"Just needed to sign a simple document and this is making me pay so much money to do one thing","rating":1,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id469337564?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.