Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Be careful when signing up to any trials”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d44f08af9d2de48fe1f27a829f4dadc7144d52e12cd693e717c0bef479808e5
Signature (Ed25519, base64)
K7OKmC/Z4hR66Ysk5WST5QkvihNb2mgOKOGQ+P4KMquUs54rNitCZ4/uq8OhsjkpH7THdiJleWc/+wXFHciUAw==
Merkle root
9d8e2118061e8945f2bd66d48af4d41bec49fc5ac2ae7970f14474403c85bdc4
Merkle path
["1d48aa1f42255b493f5376b88fa63d8b137c0dc0a7cd418138792e08ed3b3294","14c7342d4ea71172a6b9dcb55e1c9e724def975b6ab7f05ef3518f4503fbcfbd","87bb7caf9907955c981253593378afc4902eeaa30bd2643f28524a4795237d64","e4a598577d05086639c7b97d2eb834acf67003e0a98ecfe135b5774f760468f4","9fd32b4a64fd16e4e39a6e43353ee2a79f5e8d644292d12d3419c588a7e51de7","71058cf09c803f7b32022b5ce038b11c757807d22b0bf9a4bd53615b1197bd7b","e05b5d855e2acc6a5abae1abbfe861550976a24168351edaf50138792f38c6ee","4ae1aebb7541126b42fd6bc4ef0a1a868c16d43a6cc2a3584c20a93c4943df9e","a5bc335b3f200e42b2f74f0e47e5577589bd0f4a3fae76e42f2034e7b0268a49","971feef0d23dbc20a95222e5a566f7b40cd9383082a3912c909dbd85a916af1e","3fbbf328c685b8ae4d61b61f4790f0952633096795d81dbb19803af1f3472cfe","3b0177a0e31e82a3a7c5a4d165df1b5ea590e3ce8e65670b06216e2a1b6891b0","e94cada08df1868a2e48549247fae87f2147cc360c1565604cfc61c670e9f86d","06ef0af9e89fc67c0d3893fca6fc616c0d6440ace9f21e5de833bce51809dcc7","9ab50226de18913fd10dfc030adeb43f34868f074a98e3eba882908660737bc6"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582616117 · entry 108e9186e8c5677a09b5…
Expected log hash
d7708a8d5cc2ca7faff1f105ce6603ac0b5d5c740c6cd85cf034e25532cbb25a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787626691405","kind":"published-quote","locale":"de","page":"product:acrobat/sign-pdf/de","quote":"Be careful when signing up to any trials","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d8e2118061e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.