Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it used to be such an useful app”
Google Play · 1/5 · 2026-03-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256): 54fce7229378ba5a9fbe515bab61e24b62933cada21f925d65b570fbff95c505
Signature (Ed25519, base64): 5xTExeFehaJbCe5EMOIgZvNEPFT7efYrX7K35AX2Ydob74t3jZu7vMyaPqSwpanTdtJaxpZ0Dy9dHNL/LiRCAA==
Merkle root: b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path: ["54fe5f385a4c8c16ee8c1cfecad1571b2fa9f198083f9ea599138a9d9db06695","d4d99cb575fbe6481a88af6e8b5180ebfb46ee1abc8d31baf529b40285ac35d9","ed4513e49652e70a0c1cf1b5436d51c9a37007b00d4941886b330b2abd9f9e93","a43073225d30b0cb1a6ee14bec628880605a58eb86353865c4a25d201bf5c0f7","3292e607c0761fb99f43a80321dbedd7dff9dc74ec6235a3a434f45c04e25167","029772cc06ac328ee808570bb3bc150b054ed82d1eab11d32847205a549da508","f22bf5b6e3a123da2b03e9d5a60807007a12a1634ab7e0aa89adc98af89ffde1","ef808532fed51e3633bdf486353e6d9b7a0681d7453c3e488feb0e97fb70e690","46235c12b99cea1c7a93674c06a4cd21230146695ae85ac2db3296af4a2165e7","d1ff609902841fb663e5cb02c0edac16007da591204b63287e72459ed4e65dd3","24fd589936c7a4faa1afe55d85c355cb20c2eda2bca50a8b402a8dbfa449f760","89134ef10b2893c28ba576c5ca951ffd2018aaccf761211f0ecb7376701622c4","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash: 687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787134378129","kind":"published-quote","locale":"de","page":"product:xodo/pdf-editor/de","quote":"it used to be such an useful app","rating":1,"review_date":"2026-03-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.