Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why it is done in such dumb way?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256)

373ca07859c4b1cfaa9363837b0fd743417778996b6c600597646269f1066ed6

Signature (Ed25519, base64)

QRBkbY9aauOuU4tuo4JcPWnk6SPK4LwMLCsgHaQGDdzD5b6u9NKWTP+bZ8uzCPgZr1cIqCfI19R05v+ImUHPBw==

Merkle root

e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465

Merkle path

["373eff5a7c451c81255a39ab624747fc5dfae30d029499a20fa4730ed29790ad","3566bd7289570097f3b084419f8548d622da1f5918a80962e6e9bbc9d390af46","0609111d4edd9708ec009e401800e68ea7e12bc8dc36201e95ab98292b902cf2","dc75f5ef602a4082afdb44e3d20dbaded5e43ea264bf532b442c4aaad6b9c1da","015e99b2e7a2101502ca2db93addd19c0e260b86407e1e2731c8342087efe1ca","8f75ff3bca05a90bcae3cadd153640d30926692a5cf5b14828794b3c1791104a","f290d388056017d99d75696bbaec15b97d27f33ece868c70f74bc7971cdff98c","80a6f132b5fae66beedf9605026c84152263b88973a63efdaaebc94640d17578","d218474c6899a818cbe3eea0840bb76d5e5a1a13b1f7b5478a6b5b39bf940a51","2ea08e8d562afad485a393a74017f4c01daea6f96e35f1eafbe9babb8d8df2aa","936082cef322c21568776c1a0f462893cd1702ecb251bd0232559f876bf2d921","8a4a6b9a951ee701e26d66cca2bbc8671247325d1a66e58029543bddaab5580c","6f11499eaa6ce65c1f0a92a7bc0fdf2e1cab1385f61e7dfd4606eee0f3dcd0d9","c34fa5ec75d6e3462dddbe081b828d412a3a575b53cbb348f7047f6afbe95056","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…

Expected log hash

d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"brand:legimi","quote":"Why it is done in such dumb way?","rating":1,"review_date":"2026-05-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=legimi.android.main","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.