Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They let you access everything for free initially”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3122521988

Proof data

Record hash (SHA-256)

36274698dc14f1fedb88d85a904522e05f1a298f62b7845af4d6a77794c620fe

Signature (Ed25519, base64)

LPJ1r4KMmM4Zd89Wl3KJzLNXKME5MPKXTF8xYJ/YtF7hgXXDLXa/cZsrvIMv/yxokAo5/9qMm5B6fDWLz9ifBQ==

Merkle root

feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706

Merkle path

["36277d8f0599883315e2bd49c24fa5136cead6fca0522ad6a9a67e4d282fd942","ef781693d9a404f5b9fbc1042c755226ca936091109cf272973631b8d53d22bc","0e1c9d8e3362961992b72aeffc0fa665da2aff018b842380ec5cac048b47f079","720714d9f478312d004035574910ea15867715699f38f4a132816dacee885f68","ace3d78a7eace2b09a18dc123ee83ce99c633b0ed85c357a3dc12d8717c8ec46","751fe988bbaa5e6dbdd1063e523fac07ee553ec1adcc132b410d070c5e0fecdc","b54428a3a00da5e0ad7ac7aaa909c63bb5d2a0d9ca53f9fb6706c4eab865a575","bb6f2acb45e59e7724c6f7c9b6462442cd73de0f955be6406ef05cc99391d448","30492406969f184612c5e2c3eee2551fd350c24bc0f0dee047c0d4f7bf326b77","28bd4fdc62e9035f29afbf1cb600af096d094f5126556a809170d830af908afe","3daa5c3e5290475c88c1ffd741d124a57405ae9e00bd991962e76daa44d89b2f","7f50716c7c4105b774dadd26a6ee4b39d6727eb10a6198eaf713327284d0cc99","52b3caf7776ecb6f7d18379b79c7f0b79dfb2a3d0aae497f0e2d708cc7c1b6c7","e77d494af9e2547c53e58f62769cd14d89c9d23aad38b861f53f29b79396acd3","3520002e20f205a5e2c7683df52b5c77fe454ada68a85506f659d94f96d1078c"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…

Expected log hash

9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791343163559","kind":"published-quote","locale":"en","page":"brand:pdffiller","quote":"They let you access everything for free initially","rating":1,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pdffiller","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.