Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Opening an account is impossible, let alone using it.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1fc563feceba124152ac92f426107eabeb1225622b48062cc8031f63a28b7894
Signature (Ed25519, base64)
6V/PYM4G5+z/htMw4fBO1CFIyozQB/6EW9EnuIxzXFvtZ9pSRki0HEvS6iDcBTo5GtwGfjgtUWh9fAQuMwhlCQ==
Merkle root
8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c
Merkle path
["1fc5c32018d3b3448aec2c01258c3eaf19d49528613ba4495dabb9ac2f6784c5","6b1fe1d847075a3ae24cf446358fff07842f8aa30553e51ce8955ef96aad889f","8ad8e596198f246c3bd05d9add375aa984fe794e2a208dae3dbba647a4735fc8","5083ef4bb78152f923fe9da39f00fdf0d4a653b281fe0c0bf22fd50b07bf3c4f","d66a41a3dcf12b3be49b36eb2db6b35c73630f4c91292673a4efa8cb4796ee6d","3c63042b6a1fae345da6886d8b4e713fc3bd4d892423ded0fb37baf1f7aea2a1","4ee5a88e0d783837ae564b5bff490de591640088f5142f638d266ef9216a2b53","5d2264d8777587da8f593e4ffaac1149634efae948f399e5f42a5f34522d361a","95fa79f9cfb012c14368d65f3811512670b6ebfaaac2255a5578c2991b3dc023","ca630c709a9e2271c5225755fbb1ddfc28618a18a9fa0fd53554c104a97c8bbb","9e59fcaee503512b5df526b75d4927d35f71304c7798ddd60f4cd231234344f2","795ec3a0ed2985762c41853d02aa00e1af19b3d1388332eb82c3d430338c7697","a96778a5baf37ff274f68eb2f3763035e6ca2771bce9e48327b04149f6a9cf89","c3da944168348f2737a3a033a43606f7965e05f20058b59547dacbfe770ef5ce","e9f7ba9964da1314f660fb2f84a68d574ffe9983879b5b54001a09ca5cb5f33e"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…
Expected log hash
443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284817344","kind":"published-quote","locale":"en","page":"theme:relai/ordering/en","quote":"Opening an account is impossible, let alone using it.","rating":1,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.