Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“need subscription to be useful”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
33e20b4d74751dddc3376610716293a86406f47737efe95e6368136168e401e2
Signature (Ed25519, base64)
DEb5awCqQ53vBzrIgD3IvtT1hFz8x1r+mtYqRjBi2VP7w1bwjJZnNVP3WNgVyi/9Tt6B4LPhXorBZZNsv2xXCQ==
Merkle root
04316f9e77c76812dc849d666d14a3474b406ce05264d27502eb3b0caa9f1007
Merkle path
["33e2d2f9ad66594806b8d4435e3944907b3351d115e15cae6884950ed57255b0","910d897d1f5d77f57d60f5d6a3a14e0c1b4db52458db2e929a2af2b4c7e9d276","2a98c3a83b9f5f120673c039e8ac27950ea2d3d9f85bf01054f09e7e9a255cd1","858be7e2b74017ac1ae0754105baabefb745da7975ddbe93912ddc2fcec366c8","ae7e68fd9087041a59be20e66ac2d2cb4f634f722a17f1c02819f0a402701293","c8f44fa80cef39bd39c51496fba1736073bc1be299d370c7a5ac91acc3c727d6","040386e02926e1b20ef623c579534b1029cf00eb438c8501c5beb3f75e6a3140","3f4284e897448023608e07ede9cff2c785d06237252c65d1e6d6f32d76307c23","5f2a500a2337d9fde4e74d9c0587c21d4bc9c29fb8a45d6ad04b21a28ffff190","99038531a3298b27b51f3515e20bbaa492eefce6504f6e316228a7855b28d6e7","effcd0cfbb9187c54ed3b0089ea744ec165f6d6ffd28dc29f2aaf89cdff51365","869839593bb2b63b3dc0e0dc9e8f50cd97f9734712211477eec4461fbf530825","db17c2fb4a49670627e57962142ea22d1e56c1840bd1c726eb58876086737107","8959f451902aaefcb7620466197219b59bc350ca63b76179da94c6515c9bb8f4","73b8e77fb0338bddd543a7d0dbd877f7ec52e9acdeddd984a281b00d26ee88ce"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647373963 · entry 108e9186e8c5677aac78…
Expected log hash
d71b0dd4ff40d20fec474895ffae8cb152cbe9260237c2b6f93b97e9d6ed9209 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788060248304","kind":"published-quote","locale":"en","page":"brand:pdfelement","quote":"need subscription to be useful","rating":1,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wondershare.pdfelement","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04316f9e77c7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.