Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“très bon applicatif”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
590138717de4e84ce50fde4619df3528a2a9f78fea35da058b10fff34599a2bf
Signature (Ed25519, base64)
oQ3jov26R97OHFM7b653u348Gglty1DTUGfPRUtgRc7wFIaCR+YnYfuJia9/i14N4+mT7QL9VqoTnGhtBUMtAA==
Merkle root
897094661611c7f6f667565ccf24b086fe433f50853a89527920398c9b990be6
Merkle path
["58fbbe16be776380f566fe129a7ff83ec6afeafe04dbac10be953863f5202078","b169e75cc97ec0044aa854490a5b86b8c031da71711e3ba264aa3bc1a9cc7ff9","236ef3825542b714cdc01d059a762b218d82e34801c74f2edb96bb243fa7d040","4637c0b9c8311128f16f292e1e4fb75c268b46d2c8aa99b6c1a1d287e8746eac","1806498d67ff3b39867f1289b2f4e65a1ff77ab95c9c65fb9c296246427cdfaf","ee0e6b396f11342e485e730d715638c20652951f2510c531f3254194f37d6323","f53360c66ffe7c0b7f97620fc31839c04afe8707850b1a448d856b7077b2d521","9b29daefde40b9f27d5ea1dcb09a3f5b8f49ce1bb922b4ab60a74f62ed6ab0a8","555b1ada7cc5bbbf9862e4098adbc4c53722ec905992138340a82e5916e18d20","bd280cfb6f507a26c45e1da4a1fa077e52c8aa3bb9028efd30b5be2f23d142c7","bf4781a99c099fc258cc0c790708e5e1c8c36064364cf6b8c0945f6c9946df8d","bb07356706129d334b696470fed2c3ed384b2d5c8de66fba7c5a8e420bd4df49","c2b2cda3f27c5088a0d65c771afc8d4b78fa3ba3d85aebf7ab1d8881b95cacbd","a1d9d348562bb2a87e7320356d42d9b0f701087c10d37ebf1716b02890730e63","6bf2266db580f32a2ce774610d26c445305bbb4615cd5a57e78c4156611f45e2"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621546391 · entry 108e9186e8c5677a3763…
Expected log hash
ce42e5a10ff40e11caca7d6020944d319ff4f139546f9e6702c021de8b61d36c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787889108108","kind":"published-quote","locale":"fr","page":"brand:luminpdf","quote":"très bon applicatif","rating":5,"review_date":"2024-10-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.luminpdfapp","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (897094661611…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.