Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it will not refund me for the Annual Subscription I do not need or want or use”
Google Play · 1/5 · 2026-08-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2594765087

Proof data

Record hash (SHA-256): 1881875a88df89a977b86b9405a8b830051553edbe677d4932f3c5e3ffb3cbdb
Signature (Ed25519, base64): joIkePs2Pmw0sipnyl2LqoSW3P7K5uL/V2MLYuAS3s5elXm0E0G7aQ8457DUDrtrAwG2w5WHvsGTEKZv5ghFCA==
Merkle root: b839fc90680d59ef42f94824bc47a43844eda063a2dc78e98d04cc6ddfcb474c
Merkle path: ["1885090dba13ccb61bad82ad83ed4800c36b264d6c70617711d08b7b7f226f1e","6def0ba1aee763ef8d3908b3b6662094019ab2235562d28caf237f138bdc0b0c","40f30f576e12e9a64ef0511bb9e71b4d91241ab1db99e523cd93571b02cb5d25","e0a92bd60fb9270e61f09e3b8ef0bf8378a1ad1405e626e1226aa048ee6fe1c4","e9f499c605eed16f4e0035fc50f90d794c800f14365d05d0d38c0814b06d4b43","7e743fb762b7c09a2d007e689be03fae976224e04e3aa759f653614831be9421","8e1d88bfd3d81936f7748b59ee9cb55e559b9f0648c90b86724ba19e08f7e299","411d185b0c8d01086d4efae2f900b6000f04e3f71c3370f8282336c863f4959a","31a6f41425f76b13daf26f21f2476994945dfe8d0b19473ea24f906cf943238d","7ac0d36ea86c30ede0d0c2f2dae7e9d90d564e87b982071c68daf3c4b76c2138","750c5f53d9d055181e77522d6709b82d34376998a45f8b92baf4de3d09632ddc","da3f18db4275ea305f12e1c8c0800014ede0f36037fddca212d2e67d33301687","93cff867a371eca67187fa18f29672e43dc122f1a11ead8ce02d295afdc520fe","2d44a3f2a338515d5139d8c4d918da71ecf66353dbaf922a6fd5c33bea9ae2dd","53cddda7a1b6beb992bf062aa34497189c716ec3be3251f7e5db0dca344b1a73"]
Anchored: 2026-08-26
Public log entry: search.sigstore.dev, log index 2594765087 · entry 108e9186e8c5677ad8ef…
Expected log hash: 2b2c4baead5a20e634c42acc5e7cfc8d7389892f0fc879f3c38d7eee1c04ecac The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787715994367","kind":"published-quote","locale":"en","page":"theme:acrobat/returns/en","quote":"it will not refund me for the Annual Subscription I do not need or want or use","rating":1,"review_date":"2026-08-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b839fc90680d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.