Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“excellent application”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3102753131

Proof data

Record hash (SHA-256)

3668f6d9b68fcde46d4a2ad6f822b7dc967cd674e51b04cb45546aadfdda0f97

Signature (Ed25519, base64)

x1EvxL9Sbco8uuAqd5cEQ3UQkHbzmbsxQNpJohT487yp1TlDtQpC5YUTBqnp9/4DZb+UhWcrUzAPpa41auphCw==

Merkle root

92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658

Merkle path

["365fce52e954a62f9e8bb63c6f5f8dbe43b2b321a44f9e986b50ca37bcdc5f24","4eb8bc75b19cc0748650013f0ebe8a5f9d1f41d7c53bc024e813d19e6985e007","fca76be5db368faec002c6e0ca33bde4c666e811b4abca88f9280901b3eca19b","648d4473a78eebc861d01fe06065355978813fa6e9d4ece7e6f04abb7d295cb8","79ece6f42b220224fa1e7779904c5563a32ed6bf1edee45053ce48b58fc71ac1","c2bdf02c060a7b9545e62d5c56191e5644b48d2de70f32e6a56c1e69c5d03a5c","fb48ee92890959da8e52c9d33be32313d11c6b313da221d078161b1a58fef7c7","7855e4e29b9b5bf8d404c607225695c07eafb5a7444e61a0edd6c282f8b87466","f010198eb3f84b6a47652b306040341bd0205d1c7f585bb70b966ec10953e784","32aa68caa4f8622541b346efdbf265bc4113bb10fd53e0ac6e401ed319de9578","ae9fc411dea7fa3a6579932d1263688cd21f0d1405a931e5aeb3f5feebfac140","1e75dd942de25b5f27a7c27279d0120f9252e936ba149451e1e56e393abc64b8","a509e8f4d2cb543c440130ca624f7c471ea935c47688fc6a0e46ce109d6bda79","4e60c8870052117ad280950bee2be0f8a355cdc9c18fd48de6f1a997eb38ac39","a501be5c1ab88f300525e7c01289a28bce17334eb0d8acf270b9e649519761c4"]

Anchored

2026-10-06

Public log entry

search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…

Expected log hash

5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791264491480","kind":"published-quote","locale":"fr","page":"brand:ilovepdf","quote":"excellent application","rating":5,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.ilovepdf.www","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.