Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“If your ID card has a faulty NFC chip, you can't even verify yourself.”
Google Play · 1/5 · 2025-05-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2544092674

Proof data

Record hash (SHA-256): 25975bb659e6b93dcab422c83edd23fb5e57c46ba2d34d7b7a9d2c08dcb5972c
Signature (Ed25519, base64): h6EbB3tAeiOuezHDHvLIp2jNH3WWN90/QOg8bIHvGt0z6665mrmga3lxD41UFkF+d0xW2DRKzzyZ5+q0c3+ACQ==
Merkle root: fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path: ["2592c53f9713a0ccfc04920a5ec748033c80a3329a0ad01f2e071c1b215cd45b","e0be5f41cc45b3796c9d961f02a5eceb4b3e6673e412a0ce5a8705d3781a25af","cf48e90461f10bc89c3d7daac83deb320dd4fc6f35c57bb868e283de9c300272","d51435a944253687dbb707edb709a5755a1ed27af73c3332037cd600b6f75ab3","1935609c4301baaca56419d2be48a8abe12bd7755ca5741e2e5649093cdb0919","87527c78306f7b52f8bebd69656b0fb29ec1603a80b21c82539cdeb8744205ff","9d5de47f89290fb699be9a7b9a4988abc777547c0f6cbb3b7d1b2782b6a43c1b","66b91ea4f32dd641d6ceaad48b66563e84e2537d68e69d9086ba9715acc210ce","d85fb73e4fbc1379a70cad3455a0b513dd8eacc44cf1ba3a8035ef6a94e4a3da","d7572827fc272d396d124c00ea5f3eda1ff2151761d5f1a10b6902f9fbc9def1","c6da2c989800eb377bc7dd49c764b3f61ea93855f6e7d63aaa34034278d0de22","7e0fd08156d3507e2b238052bc49b842e577738749e0c25879dded00feb9d11e","0762348a28234508bdd1e30587d1fdc0dd40f0417d1221a51093b63a21a51b25","d53ce14c8422f7b98c01f3be46add79c44e4551711bc517ba367121540130adc","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash: e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787289954326","kind":"published-quote","locale":"en","page":"brand:relai","quote":"If your ID card has a faulty NFC chip, you can't even verify yourself.","rating":1,"review_date":"2025-05-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.