Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Horrible, il ne permet de compresser qu'un seul PDF.”
Google Play · 1/5 · 2025-07-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524810465

Proof data

Record hash (SHA-256): 30ea77cc6412c28c08fe10cc575f32133997c837dd1af261441f75c73706176a
Signature (Ed25519, base64): HugMLY8GWAgNGSjOlbUrktQbAlyR11FbuE0kBD6W7vP8iPycB0VgkBlDmTi7hnP7DMwUmKFYkPvz5d+C21mADA==
Merkle root: 3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path: ["30ec79835132cf2ea1bffbf6562daa218b9721fbd561bdb8034f1c50a5429bbd","552d3299e6bd30b8f945a736505921355e5012457ac631ec62cf2ff9754b804c","3c6467751107155f0f1cc14df467958a88fcf827826fba1620762c62f43ee1d7","c98f6f81c08e4adf4e8e583728543352e9e610d530eaffb7dc2db918fc20167d","4baeb9a38578f60e17d69697934bb60d0d1cb41a2a0168ad825a9feb128f3ef0","88e49978b99762dc274e322530274f2e42bd602c87eaa2afe9cf3275f278d61b","febde94e9ad61b1209a29883decadb1048b0badff82430d09b9c69c52fcd844f","a8dbc430b8b2082b6d539d61fdb6dd9eeedfe84b83f2f6e1ea35765eea47e09a","e880c950760ad058ce084082c9b7f4c44935b2a8ec173f7917a4f656da6474a8","f48a0f76170c62654cac63ebbd11475b8edc51606489c72e17c60249a9531844","bdae66ff4a3fe1d79c042d5afa32d95c13e3b46cabc770eb69125cf93e8a719f","32a89cb659daeca401eb2f8787a55894fe50ab0398c530a5ab8c55ca4d41890a","dbfcb3d5021da50b8b4634be051dbf46681ebd2b647e213f1973335aec3749d8","0790a9ec23117ba3e0ba9a310290906a4f1d2b0055d4607b106ab21651087c1d","db72b82118c1e08b77018004fa72584377d6eccdc4c75ec19bef6a78273f75c9"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash: 129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787193927339","kind":"published-quote","locale":"fr","page":"product:smallpdf/compress-pdf/fr","quote":"Horrible, il ne permet de compresser qu'un seul PDF.","rating":1,"review_date":"2025-07-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.