Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This is the 3rd such occasion, I have reached out to customer support, looking for a new app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
370c674a45cd3534db47f9e4a11e671360a77fde0dea48e6f94b43b81c834904
Signature (Ed25519, base64)
kK4NIoa9ffUc+jOey/SqIiO2pMQd5IepHKz6XreQQ6VaqhehG33V8Tk3FHWnuApVDVAHjFW8sAvkP2fijgKzBg==
Merkle root
01ca9a914d9cb7fdb6291f3c0bffafc2c86f57c6ac9bbbe06ca1ea757b85fdea
Merkle path
["370afd5b63609cfdddfdd829d52933dca70b58a0b76c85d668e0def2f7c8c6b7","627fa1eb126d5b0d69018120662fdd3497452ba308575666ba67df7a802c2167","76f09387c761ba1305f28e324e6f913dc8a1500ca9de5bdb08eefadfb5540231","148a77078ffd029e0e810b252fcd9c47408ac4d4ae012bebdac967ab0bef7de8","53ca6dbaf60c099eb5e059e2c249a8b5e9b7d4b2e89260bd1191a085d599c27d","d4264a3f69b540e9ec51804a29ad085326959d5c2433adef7840b838cf9c9e01","973616f2c283c53faacc0c94df0834757c43a4fa37b107b31c3435021014da82","e6c636133a5f88ffeedcfb8ebde4a0ad094b53f3e5347680326ea9d66bdb4ecb","7afad3854449eed2f00ea39f5e4ba94cd90f367cebe7bd1e2e1ccd076805ab1e","c6d72095edde26c7fba03556cc129b662285388d5494d483a5f5ae22ba34ae98","5eba31133b4ae4e810ac6afbbee2884153d3a3af6ea3d2c346097d3efec7c250","378897478164eb6b405871fe10ef2259e8a54449e81f83f0648f83b4dc410e31","ae0514a57ad2a12be655aa388f0b933f608173527da584b683cd1178dc4925b3","581f6e77367a390c6be41617812d1bc389d35491529f5e765ef954249e5ece06","e1421d191a62564ab151ed4f3d8990bb670a4cf79ef1b438c8dbf253dc424e03"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647682298 · entry 108e9186e8c5677af736…
Expected log hash
1dfa1bea15f2cfa02080ed204683ae7d0bc0936afc7a7dabbbde7cc96ee2bc57 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788066809618","kind":"published-quote","locale":"en","page":"brand:legimi","quote":"This is the 3rd such occasion, I have reached out to customer support, looking for a new app.","rating":2,"review_date":"2026-03-13","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id563888611?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (01ca9a914d9c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.