Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It keeps asking to renew while the subscription is still current”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2f28e4819683618454ccec064253c15d2558474a1696df04b026a2fc75595a22
Signature (Ed25519, base64)
QIFym5T6z7eEJirgVbLkOqwUi4PyFOR2YUzMShXSF873Ty89OC7/luYZ5gfyjyH1eAvvlpYYUP+pBdINdFJrDw==
Merkle root
5281b854216b4e6bf9a4d9c1ef2bed9777ade9c29883f1d0f546437faa5e15d2
Merkle path
["2f24b3c62a75cfbd2452df9dda8a0f811f416a8ad1c3486323910902e48b213c","33119d0f86480d618aefdab69d2b39827ed8e1df7b8a98c3bb4fd0062b5502cf","38ddccbace7a878fbf7bca1690a4e11533b1fb87679f869c9fcbb9c4eaf60440","f99afe6b1afa576fbf1e567cfb8aafd9509e6991d0c620674b661a7e4803412f","917c577c7404242b81436fe50b7e5330a39e285811865f9555f2a9acd29a1dcb","3bb4f8f4c4c4776ecf27380aeffdb41f53f14895faa7c2cddc76a8a9f773eeb9","043f0a32df30d86ca452be02473d31dc4b5617a741cfac77366ac7ce95292d52","a0b541ee58f63a666e9141ff2df90f93d49645509dd9d6b1d2b403883498d0a3","e9d1cbc4b5498cee4670f892e32e5150161b77d1e7afe016c1a6d6d5abbe95b8","3f978c9233049070d854c683cc2345d3e8faa017a838d66f689cbd312a0f5317","1652cfd9a17b87b74f637e225e5725ec1c7dfe2c394fabea1b7b52efe534023a","f58f34175d8f1d44ef6c862ccbadf48ea2d18ab9b8b08474091b7e7204464f33","d2789c0fe09629a41906406d8fe2985c294ae3218eaa35da0f43e8c1d654bd45","3f2e066b220d21f290fe4ee4e114e6992e62cbb35f6faaf0f86e02332f98dc0b","266f13136d3ad4d5b30a4dbd24c9af8bfcbe23d11b0188abcff5f3a43a71af37"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579520646 · entry 108e9186e8c5677ac653…
Expected log hash
6c785387604f7a22a5b096fa3c6c8cb93055a92b2f2f24f3a0a42c9bae32debd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787540495725","kind":"published-quote","locale":"de","page":"brand:signeasy","quote":"It keeps asking to renew while the subscription is still current","rating":1,"review_date":"2026-07-15","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id381786507?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5281b854216b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.