Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Un message indiquait que je n'avais pas d'abonnement en cours”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2525430207

Proof data

Record hash (SHA-256)

27ee91841b74f378073333d50c1965afe63d56fe5cdd12707c881a4605853a34

Signature (Ed25519, base64)

3t6gxqxhAva8MUvNO5d9zP6apv96V0rTF5M7W5qIKK1y7fJNEbgmA++FJ39EeS7/43V9QXUhC8mjH+A1A4HNAg==

Merkle root

689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02

Merkle path

["27eb2c8b7561681ec7f3658f8009b15fa78eadfbea7a9698c6e5bc76c15b9308","f20bddb1182b1259b575eb5223e99d18fd483e727de116365559e198382d88f3","6baec8542e8402e5fd7b72b186a9063cff9dd7fecc4c673b45d149552b78c258","c464b7e0e72170aaae21b174016bf5cfefd24e07b65c031035ac18b485c925be","49064d08b41b1cd655b22ef5df8a7310f4e0071c166a651303729e1d2a3c3df3","8ea6a98c44fdf00711a9a195ba07954c7eb11dd0df8f3f54cfc4e817c22a520e","70f146246c1e00fb9a4c1bb234711972554b099cb71609102e9f1dea718a9c20","2bf951e8ce19d127f031c412411613192c3f199fec127f24cff49daa6a2aad45","c30acf8deb04fb984d16a79d74ae6b1956d9a95dea1ae0c079f58e7170cb5907","28e0de4da720a94a726cfbfc47f8f5888a2a20d01454937194f4dc7ad217c970","a3db7dcd6cc4dc9b644df232b1fb5a7aa6ee4accd007f224862245ffe90ed828","ed2e7f605df54f0d8a76b277482b2a940a3e8de4a23e2ef3a3cc15661667d029","b29f01d1d4fd5e719afb8d2cac2b7867993dc07c08772adb1bbe832e05e6603a","b93077b5d0d90464bafb01f0d5e12407aea90af234685d3284ce5c610fc51b1e","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…

Expected log hash

68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787196781193","kind":"published-quote","locale":"fr","page":"theme:smallpdf/billing/fr","quote":"Un message indiquait que je n'avais pas d'abonnement en cours","rating":5,"review_date":"2025-08-20","source":"Apple App Store","source_url":"https://apps.apple.com/mx/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.