Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My verification was rejected!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
46dd9d89d0a12f3430c3be7b460e040cd2402a74e75cba0da68a706993e469d4
Signature (Ed25519, base64)
FGFtOZQF7lwxzgUNtMO5ZH/drUOPUqTaiekoR+SjITwzovLQiFvPDC60xA0VSeuVr0zQ10vvsOut5J6JZoS+Cw==
Merkle root
fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path
["46dda650df2b7ba7d67c5d0f6226affe630a06c58ea9221e286b66c74fcf08b7","3f533cda1487d2dbe623e54f728c9160092b0583bd0efb77c4e16b977cf2a490","3f67e615c0f7c434fd09b9ad06992783088dcd69741be8bda3cf94149f2a0414","2e2fd2bea853625d06d71e06568c0e651dfb2696a428620c58d596eda37d946e","0ce93dbce2419785d43d52867c1ae404b620010c1c70f1a399aad03547c25c54","4a830c6d5a39105129d84d00952ff1f5268d1d3dba7aca603a2a33942be6138b","c6a755dd56dac3c9fbfc67fc01ac4b91bf0e4c9e27283b2ce77caa5395f261fc","fd22cc90383ef9988ee95cc05243e8cee710101cc1e0340e42a01cd1e16eab72","677ca52330c9fb61847d340f714fdc5a69c5929a200e1af45079e41f2846a6b3","38b37e9e2f593bebfc491432ddb8e1f10f70ccc5c699abdd49207abee96c4b39","cb75f373237238737be3ec4513cd2e03a18de16bee3af9de2c95996471b79e6c","b5e5c029dc1de88779241cefd8a768fc201733c3acc638460767d6f8fa748a36","3ad04013b7bf468f6ff7931a10fdc87dd52a20a709af771774768220bea6fc5d","d53ce14c8422f7b98c01f3be46add79c44e4551711bc517ba367121540130adc","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash
e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289954326","kind":"published-quote","locale":"en","page":"theme:relai/returns/en","quote":"My verification was rejected!","rating":1,"review_date":"2024-10-31","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.