Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Customer support is top notch.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3ad0e2a956fe9d97038a72a61cd7bd49155aae1f09767dd5283a2372dd857138
Signature (Ed25519, base64)
V5RlQ9tcR1j1vNcDRvJPHRqShfXJhBaQqO/OZGaK9RRYidhdhYRrtKw7rKDGROqJ+yeteFRM9mifkSfYzTvkDA==
Merkle root
49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path
["3ad11176f75c3c79b44de516593bee9d23b45a14d94fcc7aa5a63f77b11d80cb","c98b754e9dddf1073f02cdd1363b4396fe40d2cd145dc9edc56236976b7e6620","e4042e32df3a7cd54077e7763c31e6de40f5d0018bbd263e92c64562df82e9fd","466d6d67945ca4343edb7446096d7af0ccf18efe6e32ea329800052d3a9989ef","9fd598df3f76477bed5ded7a48d5ec5b1c84355ef3fd94a59b37ddc7f71cc352","e3af444d8a1b3d518bd210e94b9e2ed9222ce6766f0a859508a780fa2f5d0ba1","108fc98d81368911675ea73faad602252f684ca7599cecf6b1fda87a59c8cf0b","1ede29e3b97f3225fa90aa47f3fe0abb8fdd1907306692912e597b507ff20bf3","66a46a9fc70af71d9400694a1eb2cf7ee2ddab187f640fd41d0b18fdb4d93a19","6044b01350e554a9e58ed876b8759eb8f638cf734fb0e2406df0ee35f4237c64","456f0aa1a84892667e9260c0352ce154a931561f86d1e3b7ec1b76c5153b6cfd","5ca4d7cc87465add5adbe4e7b63778bb2db248eda4e687b7f2212f84267ce478","046c4b0a84a1ac6492f9d54568d7b37aee9b15954ca055a2667e41901cf12906","90889d6ebe241f2d2f9092870d002ba795f7d27137f7582a09b4369ab1517327","d81f506ca96dea712a8b56759200b270fc625cf496d323ded3475eaafeb2d916"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash
d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"Customer support is top notch.","rating":5,"review_date":"2026-04-05","source":"Apple App Store","source_url":"https://apps.apple.com/ph/app/id931370077?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.