Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Paying for just making a pdf”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
166315b43e2cfe8166095aadcf2417e645bf6f397d5c33e299ebd6fc467d3468
Signature (Ed25519, base64)
tgoQC6X79OIxMnw/B3+NyfY6h2T0y6+aTlBrfNc04Kj1yQGWP4xAlHZg6UFDVhgbi44HuIpxd/V5bCukoZpIAw==
Merkle root
400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911
Merkle path
["1663d82c3a750cc22e4a5e364bd1f19ada45d516bb065ee843821f803b94dbed","a99156c2089f638037d4dabe7edcc6c8d5cbb892c3ee7aeacb837052d15428db","f6d4d8ccebf45de629a935200a478f0c43389781b9c2efda5a9cfef8f0ea58a8","d71742e2c4a17412cf0770e708e8ed1639bc6e274197805ff4dd4d1132984a4d","cadf8db8ba7906d5f0f3e2b4350a88af5d6935a4501f15e41bfa15a8aec5242d","3e8198b6432d69889e89ed603b5648fc72379f19817c95f4fc1091db6cbd25ea","03eccd991e5ec9d8b0065d12751eb2d287691b2025ed690845ba7b14d0382a48","ec5c99801dbfaaabf351d93848c754e253e21486c2dc7dc557257a13af8b5fce","3791c05c96259000bc5d1373e78d70e2df779a763fbc31a68a7f873a32e465fc","05a7fa05863e1ce5cc2056aa9a930e58de04b7eb30ecf2fa9a6a80a060202969","2e9c103855140e51eceaf24ca595284ca59b6a48b76b4f034b691e5d61aa7de9","b5ab1737bc9308731ecb053ccf75db596a2355ae3fb7620060dcc7b8b1dfa0f4","22650e52df9280862acc00b0e6ab93766ded9e319b1c0dc3b33551c04f3caebe","3e875c75273cb6de71b32afeb0515bfc68d941b50d1d4d965b5eec9b8f79e681","da3c78d15c3e7e744f2949813be9d01fa753f12e538edb94a65a960b11043d47"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…
Expected log hash
cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791175845570","kind":"published-quote","locale":"en","page":"theme:acrobat/price/en","quote":"Paying for just making a pdf","rating":1,"review_date":"2026-08-12","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.