Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super et facile”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3a58a9b37eb26ee37cee8920017ba4f1ebbe5f03e3bed283eac6c41188ab53ee
Signature (Ed25519, base64)
IY1y4WgZcT/dhZBZVhFF5m/1RLoiazhomOz+FHCM0F8pKvDdMKvsGrO0eZXq9RWBmS/X3O36we8mJr8FpwWaBg==
Merkle root
596f968cccc56e8e000b63b9dd30489d92d97de49657c3c152b38018ff4fca5c
Merkle path
["3a58d9c2d5683ce4c62e77c6cdd67f1b339f64c67f915506933100338c8b0ab9","84d6129c8dab619d64464d5009eecdaf7f10abd44cb17be1a40ac4dfa9d08157","cd2a6fbde94ff4982aa3839bf755aa079115c2c69fb883e6c80059a2bcd20a0a","1d0bf2c5102ca27d90ac28e544f1e936c7858de477afbba8b3a6257adb005ac9","471ec4c96d3c3b9cbe8682d2e80e8945c085f54b246f93bca2b0ff6b38b39653","fec96ad58143e8b319907ff8c0744ae41aee04b3b791ba6ff445f8549b4c133f","e0048be7522e0f0643aeb404ebbeffd082ec314dfa2314d41698e710787c5981","83d2138aa34954123c961f6d1e1ce671d9806e8f559818b081fffd192c84e3f8","7c8e22c3faae02d0dfd61b4b578437c0d75a7e970141102dfad1642ad33be44d","2a49759328cc8df929dec2322d5ae8a9ba955892fef536fc681798d9e27569f8","4c11b5d39bfa8ab27e7efe34ce503d10727f337dc7057bf9367a73fd636c620f","549c29654c8ccb6685c4aa0194ee8baf75caaf3c515d5df2632799e6b2cb2d82","0f89c2f7791258baba64327de630f796bc9519f35a2ee004300933d25ceddf50","f34a99bc2eb0f4358a151b675878bdf5ad21628e2f02e9070ad22d026160a11f","1def65a8c7022796c92bf89e3ba0ded5702ff898262447be3bcca696fe961465"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682369737 · entry 108e9186e8c5677a1ae2…
Expected log hash
21add9acab3ef5374d6a20f71e18493c941f530ac81d350c83b699eab93536cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788315101182","kind":"published-quote","locale":"fr","page":"brand:signnow","quote":"Super et facile","rating":5,"review_date":"2025-08-22","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id489262811?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (596f968cccc5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.