Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Despite deleting and reinstalling multiple times, I cannot complete the verification.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
258748a361f2392984406d4bdd86ae08bc84659e1c27cf4110208ab2eef84655
Signature (Ed25519, base64)
SX9kXHUN1A388VFicBeDNxCwbiAntt8rFEmB1nuaWzju2IdwM/judTOCK9H9vZd8fFNN2BSGg4n6pFRgoLPyDg==
Merkle root
72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path
["25864fc0ff7e01d3d81029e3347a0fb2c75c9a2c48e3487263de922f070a05c9","dfaac305bf03265c046ea6a59a1da0da49d57724504be29289d95d3c2dd08729","cb564e706dcebce269614a00ddf5ea3d3523e1df36eb8654843e2e1caf682192","0dbc5d9dfb1abfa7e44f043623105ddb6820d4da3e9ccbe243a62580914bb097","dfb6a28383c27cab517223c55744d330470184ec887c0783bfc4cda200b31646","aa4f589520a61c1880dc79616a24c1552efe851c49a2d4e4377532cc2f910ab6","dca5d04a138b5dc42345080883bf27ea36bcf3900065e3af806a54c92e9acdc5","12da04f6611d9f134e06eb5b8d9f3c5cc710103ec2747a08521ef62a5da05ec8","06923ba2fe812ee0c77d2c6b6fc08de3c9941381dbf487f44bfc3724aa65de29","236ff1c6e0fa6f1cb83c7f4e07b9c39eb232bb8cb18ffbb347ab50b1011db327","790248ad2dcc8bf1e005a4305d751ae310e3284a78d78df2dc1d7daa8cc6f6d1","6a6dfccff9dc241f298e0a52411b762bea9080a6c51d433e9025bb218ea1e106","135f944fcf4a92d6f5a1944e44ad8a4edfeca6c93156b3f0cac35c7e930312a7","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash
65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"theme:relai/communication/en","quote":"Despite deleting and reinstalling multiple times, I cannot complete the verification.","rating":1,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.