Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La seule application qui fonctionne vraiment sans faire payer”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514496096

Proof data

Record hash (SHA-256)

30bf418572253cdd819580b6dc86254809ac391b18be6496efd43b9ee99453d7

Signature (Ed25519, base64)

JaM9Cr+jXMD5w0/pebeGxtfrBrGaVZMxtZSKJSPuwVy3VCdPOgA56wNuZCufowV57Ho4N1Ms3XvxmR7/B7XVCQ==

Merkle root

790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c

Merkle path

["30be3a94db649bd892063761a492a3d8f48545401d9386b01dbac8a4cb829c63","c79bc9701c263ead8b1e929f230ca7b5a4933bd0ace9e9749eef3f01eb985015","e182afadff7bd6e56a5240cc6afe9e58cd5b1a4638229226c6efdb12374a1063","1b08e79e709e3f30d16d92ced3123ae6291fd6e8be8b1a5dc27ca903948fee34","d2e26b52e51b626274241a9cae2f1ac389e95ab9c96d29f53defec19620d933e","1cda8d1ee041ed338d7569eaa1cb6e4e18b0776c28b2cbf9fc06a34ce66e7b96","7620eab55aa28458a0bda0a8302bd52760db0cf0bb5827c2bfc59c727c874f08","690f94337792d178e1644cc8e438a18df0178030a4cbb6d1072f457275354926","a1d8e240b389058c653dd3e8cf53a5c01da3e4deea4e2eb73ed98e234a1d338b","b213ebbe851a8d7a8b946b474df4fd1be27f339fb397c301e83b7bf44b96f52b","aeacdf917e610eb4ef8776aacee369326bab5d3dd90969b69eb42eb088ab1c09","87d89dd16dcd943cc3442af3c6b2457eb80c014a7345126b1c22141942ee9e3e","b8f3db98ef84dae891a897dec853086599d96f66b98fcb92f2fadf52dda84af9","b5732ea5319a80c00443397f423c046c357d98fcdaf87d445516405ed0934bdd","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…

Expected log hash

5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787129810322","kind":"published-quote","locale":"fr","page":"product:smallpdf/smallpdf-mobile-app/fr","quote":"La seule application qui fonctionne vraiment sans faire payer","rating":5,"review_date":"2026-07-15","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.