Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The reason is not clear.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5b00642e82fc9279c7e8686a4f49bf7422a8e1333c0e476124787329cd1d6c85
Signature (Ed25519, base64)
1hdYTqgPbc94h0j7d3ahfRTGvdMPY0m6NmDBOvZFX9GmNo7SUgCe9pWQJtiCaYmKuie59gwiDjsL60YuqzOJBQ==
Merkle root
1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path
["5b00724e3b31368441ced0e7237200ab81d626dca3cb0818b7920e422b76d23f","7a528409c1bbcf0dcaca147bce687e9fb43a7fe7e17fa0515be36a27b247d1c2","171eadb99a51fc005aef542435a666a29d1532122a1640a73b34da1101127f55","3b2962547d2206d35e70f2cf9d7540ec2821efb48c9ccf4e1970e0aa7c8125d8","7a9a33ee97e73e5df4e1306a49b117013d7dd9c6869f18f6200cb17c91a75443","f0bfc64208054fcf496efc2733795a36a719a2f8f54089d9eb0605538a9998b4","8c298fd744290d94f533dc1f4333b1a17a6d97ffce4f7935773e677d0b9c07d7","09c0a330d2555eee3c4f6ca0bb597cd793106c8019398a1020c7676bf8c044c5","6b03239e0db68d79783917667a5c85c6d75f91d89a3a8342338322edb84e6aa9","aea1fb9d8215625b7b455dcd5d9fa2ba659f83409ed823a28c33a0114f6a4d43","f6d9c35d14f05e44cd5c2528c5a66b0bbe38d793cb211d4c43c98951dd60b6e5","b252eff7f21a71325f51b8654dd33dd077b4f9daa0df62b3dcc478ae50ff3e13","76943745720428622258b42f01f24f0f87b6c77aa8d2e50bbc39aaf8036c0941","20b25fdd62f3ca5757c7b65a8879088679733fed5432f6a9c311d3d03b993093","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash
72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"The reason is not clear.","rating":1,"review_date":"2026-04-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.