Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Impossible de créer une signature ou initiales”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
38b4e67cefe10ed3be680dd2fa227b359ba34393f45f781a9232e0d8ac877ad6
Signature (Ed25519, base64)
wPBg2wT1L+D0TKfo91aMJ7cFKCrNgJAYuZdypSQ8vbBzX9RvXnTaI0iK8gCYKhtz3tT8x28fkVq/5bt5Vs3GDw==
Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path
["38b7da2b4eea1d018ea3380000cda288e7891e6c00f912433b7737aa69527d16","a104c46b84bf2524ea83a93ad9e034e7889b00e138cccf074ffd6e22a1079abc","56015644df0f9a16dd4e445b6eea065eff5614fae6ecb5f94bc4fd9563fd1779","39fb53f62624f49ce59ba49dd97e6daa92c035d8757422c950137c9a6ee85c6c","6f6fc2e25f73ad0127a05b4f5f828d165771ac1529c317d7677d733ec501f40f","43b4ca9f84cf6e14cf29f8446508682a746a95dfff25c8ea52068614a07a65ab","de97059c318ec868efa47670a1c8c2f50563a2de25352a5c8ddb19e631b7e0a9","2ee4fe33b0ee4ebc4366d09ecc224d30a06aba7166ae54ab7c9b7156bd189eec","90f44e05645037917675416602927e0df55db7116ee22d3ad3d723cdb73d0b1d","b13af8b77240a164620e7c7b209e00a7eed2f31052b518154ea0bd2ed99c7977","f2a19d5711307f8de0aada457acac7cc69b8d1071ef7a3a01e246d5be4e2f12c","36963529d44affd95dc983f944b30a62582b9dfadfd64e38498a43be945977af","83c279a8cdcc2853f3838cd33a87ff3db799f19ba47dceefcae4e093e4c3de59","6276ae8d472cde22fe3044fd8f103b6cd700eb8d1fe29c2f968f62a699dc326d","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"fr","page":"product:smallpdf/sign-pdf/fr","quote":"Impossible de créer une signature ou initiales","rating":3,"review_date":"2025-10-24","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.