Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“tres bon logiciel”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685255068

Proof data

Record hash (SHA-256)

3b4fe31f234692ded8aaecd36e44ba8bde617f01ed6354f850c8a53d4df49711

Signature (Ed25519, base64)

N/hy+KPR4rWy9o2732oz5yhAuB31gd9BbcNGAY+4CeupHCO70XQriQOC6jgRpPp4he6z8qWvDSO+vli9cXP/AA==

Merkle root

baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913

Merkle path

["3b504eb95cb2cbf5e505a07db0dfdb8ddd6f204f8193b555637557be000e02c8","bff43dbe30a4f227ad5aac0d1909e1d28a5a96acb745974ed69b390919c74c76","993a9e44cbaf3fd73bdc9c698259108e687a059910ffd818595fb7e8229d960b","8d714fa0637c6a11469d0dc481573d06f3b3bbdd21d65d902ca6edf9c8ba70a0","c647214e9ba423f4522c46818d18fac0c342003351c819521c40486c84ca51ab","9de3f5637789b3199846f33dba66803552cabda548dbe6f53e6652dc281dc83a","98469b2b0950b003224057cb883d45a9056af14f24cf7843d5960acff9b1c0d8","3fc7bd22b656d8da3177603bf83c313a6bc20f70ff09fa35c5817b2c60feba2b","bbb50fa168922a6653a688f11868e80fb696798ad6519a2dc8d8d51afa3c6ef8","0ddab642e682e2abc10978f7a4196100aa2bef021efe264a14470518d46ffcf9","466acfdb9dbce1b7c6ab2c8f58d2ccab4805504170d6cfc76d2e8750f1f490cb","11e6ee32af882c1a876438b8b9f564c1972b2d961348e1c61f5d4f8ee9d720a6","0cd3f758f4659e278065e100418d3fecd9dc510812730faa90016d23fba1f48d","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…

Expected log hash

03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788348937690","kind":"published-quote","locale":"fr","page":"brand:signnow","quote":"tres bon logiciel","rating":5,"review_date":"2026-03-28","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id489262811?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.