Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cannot see what I am paying for”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

63091be14718d53323d04b56860394423b9863c51033a3ed63b2234aefba7184

Signature (Ed25519, base64)

CAv078H0AsSfQKHxhHG7P4uZn3unBHf7JO3EKCCcoDHzQtB81TNZp3WQ732VQhURlvOzTLFT32qKT+HDWCjLCA==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["6302e3dbc10a8544159f49923963e0ddc14a69aeabd13a9889d4564ac99b86ff","35f30de131c10126fb496d0f3f879115b54f74570d56afcf29bdf278ac942dff","83dc83260d80d8750e7732f563f05b09c6d205aa5909bca0a62bebdd846623ef","2eaa6ecbaa4780eec084644db6dd7e432226af73d3ceba1202d31e0d6717d547","c4fe570ca40a0bc3ae964bbb1de531d5105508941c3b19857b30a2921efd265f","e0d060aaf0f5f7954cab86f58ef94dfe4971e7945f3c5c355e6d5f824efde742","f9e603807a5bbf7528e30222bce238e13aa90239a6ecd6354c50bb690b27c513","55645c065fd750be2f8f046a4235657fd8c036baf3b237c42e356debc426ab5c","ff6f455ad80b3bd106d7de0098e79d7aa5f30a5700ef3f5adf690f75d3e90354","2c9bdca83d45b5d2dfe9aa295f8f5ab6956f32a98bbbfb891782ffe1c0cbb1a8","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"I cannot see what I am paying for","rating":5,"review_date":"2024-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.