Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You can find all your invoices.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17f9d331e241a424a315ee135cebbd7de58e706d6bfe57bdc5b1fc37b984d4a8
Signature (Ed25519, base64)
qKdxjFkUpIxld2+VqDMMl9Tr/lnRFUzF2ZkMgWWljVwQZMe5RUJktMNM3LJFz8y73FGrZ2vXItUhQGTNnSqVBQ==
Merkle root
275d3a7bd3b2548f01857c160784f16453a0a9c996b66614d8cdeec586b712fb
Merkle path
["17f98ef2612de7f5c70c55feb94cd937cb8ff5d4b5b2f366a6c1968c644de002","abfb569e7c06f17f95b2f88a6d4d01f107bb8f154a5448b12f394b843c79fb4a","88be3196fcf1a7fcca7b47551bf0e9ad808c2f8ae7ec3973c67c4ab2390c44f0","d214a85f3c3947ead35af65bb66aca9a2ae32a478dd58692fcf0579e7c638799","c02bd30d8c5bf3e0d86fa8263cbd4b6e7286ed5fe21adc4fc604e8f34602991c","0ad171b8690912aabfbae4f5bb284a45e8378236fab2be9367ed891d5bde14da","3c68c8d2989e8578148b6f7a8af70155cd60a7234cc5a64d492317afedd340f0","83d89291920a4ae55f2bfaedbe64d9e7eb7bc103f10cb99eda7a2b79eeb6c592","65874723bc9bad3c7b61ca2464089e864ffedfa568d1fcee8c5bbb39dcd98378","6ba3968840cb3146ff4480344791877956ce37537080d40f494bb31becddce6c","2d5034620478308de28db308550b5fc28fb44aa8fe48895bf2204f8765560fe5","05ab941f9690ba439746590c2cd832d66bd726364d8e97cb16de3404f5ffd745","b21dec113c874342fc7f0cad3b2328bf067a662dbacd23b8e99866fecc9aeef1","100ea021682a9f8dea776f80ae39e493f0563b42b8ed66185197735c0707527d","10b28da69907209a24684830a0bd8a8ebb92a2f0df9669726e5cc9862c590727"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680196100 · entry 108e9186e8c5677a3513…
Expected log hash
6a2ff8b2a4e161feae5c2214e4fb7e60d1d5d00c6fe677bf39a90f4ffa8fddef The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788293890698","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"You can find all your invoices.","rating":5,"review_date":"2025-01-19","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (275d3a7bd3b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.