Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“que buena app la recomiendo un buen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1f4e12229a925e6aafe830e053705e80a8da9d06ee0110893954cb39e612ff63
Signature (Ed25519, base64)
rHju+bcNppIntwV8+kBEQNn2eX1+Qx17DsMEgMaX0/jlY9MEslc3+Hrmwcuo+ASt2cxhheeP9Ly+YANr2yrADA==
Merkle root
1e61eced4e661484bfe5b6f5b2703dd6b75b86bad22e189b3c366c9d28063790
Merkle path
["1f555e04cd44c8ebd6685ede8b20741379367c57f38b5f8dc8595a2681d4df28","e6fb2710891bf85b1db80b3ad9fcaba88323fd99b0b8846e5d04546ff59f192d","092b7fd9097bd41720a63fcfc25cce9330dfe81b99935b9b006b9c1e347f7f55","ff472545e430d3198594360d8c828435c01f8688a5c88fc57c671b665308f543","3d16431879508b42942bb26bd7d3f72b99ea9a451d1824b9b69f90fea9746ae2","102636481417634c31e6f8d0e2a653fa85ce2f06e10d85a210633aa6dfba1ea1","000236d1ad6516adb21b61fde6f711f5a56814d87d3300c4856c4a1c45d5734b","cd797dbd61e5e61d604dfdc164ad3036bf7dac499073242bdda1bb5227933a90","4c1b1b2ac3e4daf86de292b188b08e55a15ec1ed8c4b169381b381c5f231838c","c578d7bb94e8eac7c0d545cac5ffee51192c19b541878a01ec1615ba4633cd18","e6349b3c7cc29b652f849fdc03dc150074d8d0068ecebdc84590341f8e646590","9a70a2514971316655867b1f61a2aec04e72a31daa04a2281af3e8ce8591717f","54ee0bc4a4c2b45767c35fcfd5bb7920c8fd190b1fed30964e0a25b96be9cb33","bf1bcad2903dfb9abf4b8f024fe3c81bcae7bbc24b20f79dfeb4175ee7010ee6","c6abe42054f9c95975c60fb1ff77d61160b6c8ce936c4b4f55df686a320e02d9"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684045120 · entry 108e9186e8c5677a1eab…
Expected log hash
991cca42189213cf0723c834ba6ddec4f1bf618d506ffae30f68dbb14dfac402 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788333005708","kind":"published-quote","locale":"en","page":"comparison:smallpdf/en/vs-pandadoc","quote":"que buena app la recomiendo un buen","rating":5,"review_date":"2026-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e61eced4e66…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.