Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This is extremely hard to unsubscribe!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3101352376

Proof data

Record hash (SHA-256)

18125d8393ec3bf44c5ed6a86cb1ae66a887fb879e13ea26dbcd0ac155287894

Signature (Ed25519, base64)

E7ZKR52GLJagTpfqsX6UWkMFipB2aRDmfmsvnL7sMGlQg4+etlryTtmP+WObKInecUiyXsEheMiXAV46KZ1KBg==

Merkle root

3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a

Merkle path

["181577ed16b72d77116a29d34153d9e6b8450d6798ef76faed163bc1a2a9b77c","60d6c00bbd69ce6f7f96fbc75a65eadcacba6720e85ae26a5714305c06f38758","8be21dfd06ee89a73422fb5b079c6252f89e99e59e0fcfc30536146ce5be15c0","4eb65b34c29702d7d226ad4c39ef6b975a9075c34c763ced5bf99b75ae69ecf4","b9c9208ce18f971720d1a84b4992e2c74e67dc280ae0f39de1a7b5f07bb82fb8","2506586515664ecd4cf5e5a057a02e95a8196355b6c5b730202cc8b9fc0cf0dd","510b2848837cb928041026327be095e52372fc033e3c955dc48cfdc342b3f512","55b69af8cb96490c1836d3afa4e430161d91d564aa148652d39af74ea3b56e08","833a49d90347acd8d13760f07d4f5c92fe60d688c39cbd7ce766ee53f960b8d8","d3d77789c61e185b2722f570c833fcf08c9ce474a0f5b2f95f52a97f63cecd06","c882f24a87c7180f44047688871d7a30379d86ad13b08f179c3ea400d5eb4cea","ffabea27563bb572f19e8ac4e13410b88afa278436a15931c457a4184321b7a1","63e3f1ca09bb046c49957a888858df57bd60020311126ac2ddcd851f6ec7f10b","769d32038885a12490c9901edf3eea3853f0bdf37913089eb73e34b2c0d79ce7","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]

Anchored

2026-10-06

Public log entry

search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…

Expected log hash

0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791258637050","kind":"published-quote","locale":"de","page":"theme:acrobat/service/de","quote":"This is extremely hard to unsubscribe!","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.