Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is working really good.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
64153b74c43136b93451d6e988b8971b06b9459a43939ca24856c9e2930e1309
Signature (Ed25519, base64)
6Q0ETc2jQJM015bBmjdnjB3jAk641IdUBCOTC9TZUVwA5XGxQu9DApTC3L6z/9L/FnnrtunzlgYA/N1vBvaECA==
Merkle root
3ea09355a1b22a15fffcd33ac0d37e4039cee2896092e637dd8c4e7dfb5d507a
Merkle path
["6416ba0c66022e3fabdb520cfb39be42753346de98b0cb68ae6ff89023b2fb21","cb66a1ab2a8c840d3d29de4030950cbf527b9efb481851be9f6fbf3a880e0d6f","be12976da2902a3afeb7e43640718574a0309071c65a031939b923788c0dfb5b","f349746a9fd2023034e461d15ba9dd4e8f5a18a57f0cb31295a3428ab2487d1e","193affdbe7db9fb30ddcfa79ba78da16d79b9b4c75e00fb39f970ba05aa33c74","cf37fd6f10938ad3f7915d34313553a7e333a37d8e204b21f34904e3ffb3c3f5","a68c810af2beaaf508283280628caced02fc57c84942529229a80c51df116a26","c272ba27fae7ea57e0b3bded0fb26c6e3e450dc815728f179fabab1c869e715f","87c1f8320712eed67d832cd3852b6e4b1fb26ac616c74f7b2b3d05c2c4866c5e","fe7b910bb7c163a7333d1f14e9f87d7ae05f51fbb113a77fd87fef9391659fed","d7abfdbfe5bc0af3421bc238951e987beeeb93ca32ff00a20c2d00aa55df26d4","4b61e0ec42d19f86b24664c45aeb415bcdc17f750f06fa8c661a8baaf980e7d3","0ead555428295332ed003e76021a0f41139c28278eb5ac0da90eb0f864c2f749","d8ed3a5c7d4cd902063782d2b816101a433fa513967f9352f92e3b3b0172862c","331ffac0f34e1f76cacd782a04285f7bacef5f5dffbd1f8163703fce9b22280d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543978942 · entry 108e9186e8c5677ac836…
Expected log hash
69ff2d97383073bd392d75b79533a80cb25c69be55aee7dcb24b1acf4a379172 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289230204","kind":"published-quote","locale":"en","page":"theme:sunrise/quality/en","quote":"The app is working really good.","rating":4,"review_date":"2026-03-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1292688012?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ea09355a1b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.