Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Best ever app for reading and editing pdf”
Google Play · 5/5 · 2026-08-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256): 647f8fdff21194a4d56e993204a2d6bb3b1faa7aaa63f9c0c4ac54dc6ced49ff
Signature (Ed25519, base64): Yu17dISpfuSMkQYReW2TsVfm7cr7SRaZcWpchJsGIDTYMztC/O1bKYQ7YO9vvh6MjKQPwHeA4rY6ph0ZnnrfDA==
Merkle root: 13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path: ["6483618692cd493e7b66e8930033c3f83e8f86a276b8aa71163f3d1a6c9ed1cd","c8a576c9de52dc72d494592998f5c28b3320e9b668c1fd5e2de02722619b9d9e","0782cc8fe48af8b204f7b28cfe836cd7b19e8f97507e6a34311437bf2097a46b","514942f52bb84a8911d1d9d3f661edfbfd035eac83662c32f61d0c5eb8878b12","ca64bf6145d6990b01d69c0c178116670dbe5ec1da26f5204c7bbaf76cf6da75","53b9b8e3c4a64734467776712c3ef4eaf9f885a7b76fa2c15172ead428fbef23","f9a4f46da9e8f1553bed7890e16764b25b1103a34be508fe5f4f8e1a6886bccc","5a98906674e341704b97342213b2b73e23b051b8967ec7e6e796299e907fac68","ff6f455ad80b3bd106d7de0098e79d7aa5f30a5700ef3f5adf690f75d3e90354","2c9bdca83d45b5d2dfe9aa295f8f5ab6956f32a98bbbfb891782ffe1c0cbb1a8","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash: 44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:xodo/quality/en","quote":"Best ever app for reading and editing pdf","rating":5,"review_date":"2026-08-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.