Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“les documents enregistrés/partagés sont vides”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3cad551614ccef7a746d252600051e7592ae9e222b8369aef6d17a290b244dd4
Signature (Ed25519, base64)
kBJ6zUbS88AfUtqdAypwBp8/GXc44fyzeyWb8028d+7sP00f70f9ooPde/ePAmDexudb88X606tpb0TyAW9JDA==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["3cae787066107e8024a94b5fdcc7963e2bd7eaf7445374a898dab22ef49a9534","ebf6ee61179fed3f4f1b0d7d85b8773aacfd0a0307d862a3f2f406e72d38f037","9ce52f252769989c9debf93cff50746af22ffc7507b27b51912d74760596501d","b2c49dc2d8ec48f7797697505ee8ea4d26616951862fadea9e02af79e9057475","c4f18b1a68ed4859dade8f22f7ff920523d7a7edc72dfb1f95f9af0f89f760af","5d3f787baa2c21c1cbb8828960c6b1167d68820b8b17c610574c47dadbb5d448","9fcd433a9a1c462435ffddc4a60e890b076250c574ee3fb0728f12753d730279","186b1219589bc6ede2e573e041495007025a023b0744d83b851d11f978b964d4","4fee329892c0c8fc1a2c0450f2a7db2a0039bbb764d421c7d78276beaf46510e","ea167777ee5a18a4448180bac07606e2977daed20a1b08e2396746454a0d291e","fb7a31316a4cd066b3bd69a463592a188072177d3eaadf62cfceee7db069553b","9d2e5b97810f7cb6aecc46f6ddade4f35ec5ee034d5538377aeac8eb4507a8f4","45616304fbb070f744d098367d3db0bfb10c29fad886560a2ad4fe003bd3cc4a","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"fr","page":"product:smallpdf/merge-pdf/fr","quote":"les documents enregistrés/partagés sont vides","rating":1,"review_date":"2025-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.