Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“tres bon logiciel”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
381f42f801524ed453111de0dc65ec1f0ceebc0fd879d9884cf7b5c9a1157b06
Signature (Ed25519, base64)
9SwWJQwysgruXN+idP7J9oPrnEywYrumRibLYMm9SOOKBEn6JnXtLbwNFG4tj2zSAvAwFdT2igYIzCvmMWYsDQ==
Merkle root
0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path
["381c5f4befbb638a40bff1d3529b7c5b00d67225de815419dd6cc0d712bc5386","5de0c597d597d3e8b5fc82ddb991a74cebe648d4c3c78e4153829ab1b78181da","dc652ba61f0dace913a310385655786cc2a7abb0626b41ca0ec18cfb07b3eff9","97e57c197c6e708190e83923cdd2f04a67cc5fefa5b903fca46272ecd9bf9d65","3f14656a34c4c770913cbd8e962253729d6836f461e47488e28f76679ca314f1","de26bb82a7ba8f34e079550297e596575b50213b2fe1880c05c9cdcc19b08a23","578510b42120c0e07fafeac731b61c2a3bd23bf45598fb8cbe349486f9a885e1","92f3feaa0230229c27445263bec75f8eb1173696c2335325c6dde5bf95b76c9b","15d9f0193bacaed586ab253b8739c37fe986e24d0ff9cbcdcc9c4417dc7138ee","3dbd7c6e5d8534ae71eb73a3a4bf4d1d01f0052a19a3b1a496c768aaced48d42","1c387726dc9400bd934eb79803c02a6138992f4e0ce57c390a1a4d5468c48fa5","cf0334768c6f832339bd553a1065d1380e10ede9a65c50aaf9be94c6e9440713","c1b1b5496b6914c6c45a9efd031bd58b7dae0f454060b68961a2586c70ab4810","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash
ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787975494243","kind":"published-quote","locale":"fr","page":"brand:signnow","quote":"tres bon logiciel","rating":5,"review_date":"2026-03-28","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id489262811?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.