Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“plus you don't need credits to read certain things like in some apps”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256)

64cc0639a59f5576ff01871c4846d209b0e8d07fd0bf20e6720fc5a94a3a1cc7

Signature (Ed25519, base64)

C7BVMA9arYK9LVCHzVzkJoxc0NwRu7wS0vuIzT0PGY+8utqU/KMdFhwj40N+tR2gyr//rDDLbbliLBAp5IqMBg==

Merkle root

888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84

Merkle path

["64cf7b9d081a2e931a61c8249a096000f53cb7687a846920c1ad0f70212edaca","b4d288eb4ec76cf6dce6e1f01e416314720dcf3091fb23e67995a66f76cd12fa","880db58b48e2bedae19cd52405b3ee4a9197fa5566bb291e53d92bc86cbceed2","2e5eac4bd276f06cd3eaba6f399d3c07e8f3f4ee8cc8a18cecb2fede458b2ccb","b227fd4789ab12ecddb515e1475785af243664299bdaa2d217edca17142d926f","7785bfd0ca9fef3ca9eaf09a782eb4cdd42a7247596c60e41640064881c191b9","ee09110b5f73547a97ebda4158ef1ddf69a3a1887b409afcbe5589db9229dccd","13347652aa50772bdf09f54bb3f4492d11fd9b843b41093c3e57346596a87e54","fa6add171f5923939c0a3282d76ce06c569ea8da2a31d939e8b44e93d166542b","a8bc6cbaf6e83050a6da3fc95a0970fd6d40a9dcce81a6b134c5ea9b92f5657c","dccb3ef893f023e5d3a169a433d7e47473e23751a12ff4650c7265b0155f4c73","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…

Expected log hash

bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"theme:everand/price/en","quote":"plus you don't need credits to read certain things like in some apps","rating":5,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.