Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Discontinuance of dedicated Signature PDF format has made this task much more difficult”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1fde3c5c5332c0a718a3820dc155fa01f81643c25ec80470b0e8743e0cb18791
Signature (Ed25519, base64)
QWLlDtgrg+fECILxxt6lmYDPeWF8myVVjiayF8TaiFp9rS6EKoMboEaN4AQyNQu5z9Vm2MxLZ/Pg6L0EOnJ5Aw==
Merkle root
0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path
["1fe14da89b8f0de6fe04a26dbfd1295eeb7916bb99d50a8636d8cf6105ec2281","15af6c29fa44232c75966758a10bd72c095a439ee679aa394c423780658858c3","743e413b4d5d64c25d78926b33c3526a2671a40a376023edf6c116bcb6c3404f","1989c5e0c1b86a497f4eda163398c1ad97aee18fb2959a22f927d97947ed9ea6","68e06446262bd4fbf3ef541a8c10bb53cd9aa60e2744f453a239edb64c74450c","55721c6697e57d8fb63fcfc231baf783fa83f5e76f467fbebfc911075ecc7d3c","4cce0df0369f2d1c536afeaae0011513004abdd0aab59b200856692d1a5fd44c","89421c251a1d9faca1687dee6852e28bc9718c7370d4d061d9da5adea789d676","b68cd077d163858bfefd9cde50da160b5149a86aebd244161342197ec5e2c471","2f5743f9e0bf10ef3e45beed2d2439d2c9041471f15fbfbd1c498cb754634088","e67551df3788a5c7e7d933a49c3f50406d9d0bfd9b6681b4f731ad37835b990e","61d7ef42138c7e71b58374b55bf962886e85230d672f424a82a548c27f3499fa","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash
ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787975494243","kind":"published-quote","locale":"en","page":"theme:acrobat/communication/en","quote":"Discontinuance of dedicated Signature PDF format has made this task much more difficult","rating":3,"review_date":"2025-09-18","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.