Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Too expensive for poor service”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
18dc25d1f53a402fe883824048604686164266c5b025f7b2869f36ece3ef0896
Signature (Ed25519, base64)
MHKe0k2uokQJAHjMM2YUhbjEMtgy2B3MxIp13+/3crzKt3kuGLRJ74LWnvR9BtdsO26umOj9iPlYeeYnnwOrDg==
Merkle root
37bab7ab6bae92a907497e5a4ac9fef6a8cc674cc365cd962e5b33be029217d4
Merkle path
["18e287d7e3f046ea889b6e77f3353f4186add58055e3c98fffd2bb6876362b8d","2df3d4c95f25905909b8958fd69a28c17c4670b996a9a76d688ee9823f5db92f","fb728513089d0d9af74b18aadb96d9d4db31c709be005b95288e5cff61996fc5","f40fc7e7e39657e63261f0f619829284e77c66f38d77e87af93b5bab1af682d9","802effbd0ad8029bf727ddaa1ee691652d8bde2fcecbd3d0cc2cb3a30889d81e","5a9030289197a6f3cab9a0886b04620178bf608c6e3a5c84828a55f67cde560d","76fd14d13aa4968854b684a149dea970910c3db90e65e10d5f48c12dc518c9d1","2dd1e2865fb6db5c3c7708a8d90b56aea195034a4bcc12643bc420976f7de9ed","980ee55029b7f8415f96bcb622f0beeea2641727c81712978e53e12d00d826c0","36db2e38381957aa7c79376e89e7db32d72bae63658d5be225a823d3522dc453","3486f6f18514ca74d7e5f04a04402cfd9528bf5a242c1db2a66676dc58533e35","f8c87cefed54583dd6efd0a241c9f160ae382442854924df276fb7e0358b4e41","ec831a88cfac83431928609cb4878ed5619e6065160f677d7645e0479a63a3aa","1c8a8edcf77caa5fc3af0401d1e3fed2c8693428493c7127f3e51eef4f9cecba","61a69baf0202b9bc9628f4c2534169a082ad6e9020746ee3a84c82ac414b68ee"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2670833107 · entry 108e9186e8c5677a11f0…
Expected log hash
93b6693570baaa3e2327aa4b03aa01159ba10923124d4cddbdc139f813f3f422 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788230822517","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"Too expensive for poor service","rating":1,"review_date":"2026-08-01","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1292688012?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (37bab7ab6bae…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.