Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super fast and good”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
565bb42df39cd7700703a88e3e9aa8a74df502114904b56da25cd36a22310422
Signature (Ed25519, base64)
iI7xu0KKU6+OfQHjzpziL0EEjA4Wu3aE7BZ6dPCJXc8Ku4CPW9Zf67yBDGbuwz+aLWmkc093ui6/yT4XEyoPBQ==
Merkle root
5397210619679ac63434abd334c13f5aaccbd1dd184ad9d8cac5ebeceaa346bd
Merkle path
["56563c4ea8c4933b89ab5d7e435f8811e770a756ecb5261a0acaca4115397925","20def34b8f5f25521fb67c6c254f622064143a954661e0a50be8418bc2baf7fb","35db7a1d17af3c772cbd0f4a3e941cb611b5e4059ac4a530d4b2a4689952c11d","9e749636a805941e2f7b1588c24c8f8e6e4a08bdefd8fef1a80ee00c4e01bec8","539294d6acf24db8a36c63125504744e23c5d9c89ab4ba43f8dbc3acff45ad0b","045b1c0e15437fa5378722e582c4cccdf9973892bb2ce63a5d61658752abe981","0042007cd18a4d563e80ff553e702ce1b87a3cb559a65e69de98c0d22dc2f82a","01319e707242ad2a90976abfd179982d2d3365f74ef1ab40ad9aedce6e7659f7","d9755dffac357b4abb0030bd4cbdaa6d71ea78b60c39f2a4f4f1710d867e7be4","12bf546b14f3d0928834441baa453992a3605754f516e64bfe8d6d2c175340b3","ee55d509894d6b36c466fc580705f92d6257b05cf0eebf4bb03eb6cc7a6d9ad1","d1b72c3bf8fa39f702c9362c8122f6f739a2de01186541ca432c0227324bb610","63caf53777d803af92ac6db2d445588376da791f63be3d8e14916e9cc99957cd","f5d1cbec3469173c409764ba850b613628c88020363ace8f472e6f611d605e0c","eb97a4ce74ce5f5fa16f1703481b35cd770316cd3d34167e9b76f4403804f896"]
Anchored
2026-09-25
Public log entry
search.sigstore.dev, log index 2948162176 · entry 108e9186e8c5677a61d4…
Expected log hash
5ff8f25b7934b5d72d363d6805344624efba4d637f2c851f11783b259b9d81be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790226990092","kind":"published-quote","locale":"en","page":"theme:zasta/delivery/en","quote":"Super fast and good","rating":5,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (539721061967…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.