Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“very convenient”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1db7cd5b02c970f834f3010cbbc819bbb3ef4610e4ba33094464ce2a369412d6
Signature (Ed25519, base64)
iGJzAhB3EEBSSvIguidc7ySd4auosssXS0iGTD317aIRLM1EQP3s2PfVKnwCVAphoTZro8V/xemSRF/CHBWjCQ==
Merkle root
3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a
Merkle path
["1db17c4c4e76b3640bd8ade22242203bf4c3d7ad0697c50dd6d8e50072d866a8","15a63bb7388808020547090a415196da3d6fa753d7bb12775a34c1053d05aaac","9e9038707fc78584ac7135dbdb4ae3fa2b963f6701d20e4997b9588535a12ce0","500c468df52bc30ed195bc1d8ad877299024c6c5f914ce04bf8f04cafe5c2d16","2f9c1d04a6118649ae522a73dc25811bf46fc0a3912185faf9a4a51c79803cda","6dd0d929bef4f7ab11cd45a9ebcade0e64f003af86a5086975eb9082a5e15eae","c11df019327d4f8c541e9300280fc1fe7d3c944024576825a71d57aa40c6d3fd","a9d69963e244728e6465fc6f92acdb33558e57145acb854f6d25f77d0356e2ac","a74d3550d280751ef5bf578aafca703c09451aa6519c17b2505e58e60af16ad2","f0d89e5d75c2d06df78bb5123243922458a07abcbb58381ec139fe99a0fae9c9","58abac0e7c9aa561f3ca5b23e72309da972abe9c015d024deaa34e4145f574cc","ffabea27563bb572f19e8ac4e13410b88afa278436a15931c457a4184321b7a1","63e3f1ca09bb046c49957a888858df57bd60020311126ac2ddcd851f6ec7f10b","769d32038885a12490c9901edf3eea3853f0bdf37913089eb73e34b2c0d79ce7","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…
Expected log hash
0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791258637050","kind":"published-quote","locale":"de","page":"product:acrobat/sign-pdf/de","quote":"very convenient","rating":5,"review_date":"2026-07-22","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.