Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Free trail extensions will also be charged anytime you try to cancel”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
172c7eb6cea80828ad5776537dd0e12efecb6d5e93b67438644b44e0f57d5558
Signature (Ed25519, base64)
DwR7OltJzIp3od6GuNqSzwjqpv64bVXtf0gGW29rORnXVLFuBBXocbzjxlzIelQjyJsjXdGeMwr4DE/Fya5+DQ==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["172c891c0de5fe58cd877757bb3433502c2a5eb377a800db3fcc4a25334ad00b","558df73295b899de77c80d67c7d953dd593e9c5b3ab989c8a14a505985293484","08a9736ede8b5aeed5bd1532b1c22c092e672dfa0e564925cf73c3ad569c9c79","00f9318fd8fd92498957a614033307b92274bb81752801208fcf6b37d6d8d308","6821e8653eb1ba69a4c43bd501274e66c282cecdeec91910c42b5a17953e983d","e4d671204532fd48db5bfe037e71a91808cfc808d92236d5c8f0b888810625cc","fdb29319ef802d8ee771bc79f14b117eef3221f3170cbc5bafad5d7c945a7652","5d528372ffa403e0735082a2d9a86cf0bf552b0615ccbf2821185d36560b4d42","b297fc62df45e742a77c01107c4a55349d324ece2396890aff0d64217bce83a8","615de311f2195b8a081f2f99c862c312fc619c5fa99ee048b1764dd18d57a587","c4be5fa985850fc4dfb3ffa618b8d550a69f66d3d82b49db02ff30ed91385483","d91641b993c3e8dfe69bb82ee13578bbb33371688b0fdbbf8fd534bccc3e9c6e","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"Free trail extensions will also be charged anytime you try to cancel","rating":1,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.