Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I used this for two years. Loved it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
31c12abfb737953b9c983634c38412c6d3c388aabce1e522a8fea2d1e6e1521e
Signature (Ed25519, base64)
wj6AjxVL8pqln1G4PvUC0h5J6uw/S9MW8SQ/rUYZNxIQaYHfwZccf8YM2p1891O21XvF3ET3pbUetnxri58cAA==
Merkle root
92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path
["31c19229e89241e715ccf83c74ecdf0f88b0eee20cd6d56b609db4081c523873","8a2bc98b08eb1a378a3e078c4c3e8bf4331394c15b42a20dae5fe698e3664e28","4d5585f97dffe68b8071a948cba1b606e8956f87260ffb50b88f64720d755af9","ba12ab09b81333a24704d9205687ae5d1030f67dd12a0d8baab470bdd119c71a","d9d0e4d5ba34fa4ba6fec4044a02cd154540e378fd33715753d6d936321b49de","93bc5d3ef922fd4c06d850395c700ec8a15cbfc0dd7a23311d3afcf6c8e11f1f","a1cefd8e910492669f3fbcbb2e218e1aaf510c23534ebdb4a4e9f1940b9e1350","7317e2582bb5aba58040d56afadf8898ed7d8b6fedc04490f3e24ee148718f74","e7e07e76f5c842c9f6f2b63a5d6a0d8b5bf958c35f43f154b8a7659c135cb437","5a5f7aade2f5badec9d1b798446695c910d6eda0397d79520512e63efadd4ddf","ae9fc411dea7fa3a6579932d1263688cd21f0d1405a931e5aeb3f5feebfac140","1e75dd942de25b5f27a7c27279d0120f9252e936ba149451e1e56e393abc64b8","a509e8f4d2cb543c440130ca624f7c471ea935c47688fc6a0e46ce109d6bda79","4e60c8870052117ad280950bee2be0f8a355cdc9c18fd48de6f1a997eb38ac39","a501be5c1ab88f300525e7c01289a28bce17334eb0d8acf270b9e649519761c4"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash
5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791264491480","kind":"published-quote","locale":"en","page":"brand:signnow","quote":"I used this for two years. Loved it","rating":1,"review_date":"2026-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id489262811?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.