Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“y the hell is there subscription”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6780193d841423a6e344dfcf03934f223b81e95b4d35ed7be780122b9910e92b
Signature (Ed25519, base64)
s9Q8Nq+PBYuYdI93ZYRf61hUwmGK2yo5QC6Ik79au+qaEZoJhGltERaKsG9Tf7cocx2/n2yCjfcEZoV06kIAAg==
Merkle root
790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c
Merkle path
["6780895c1a5e603aaf579676399ee9c66f1b6bc6d0351f88767ec59e36282b0c","581e643888e1a80ae02e373651ebdd1cb3c18e6969b47bf809a53e6d95b4d96d","9cbac4310bf6069b67efa77491b234c00a0e89c1fae69f031257739fc6f86b21","3213e0210cba08add5d1deba03bd00c12f997bb1591374b18717dae01122c7e6","bf98f426032e706c8df3b4695e97be55898e06cf779d6e36fbedfb01617ae38d","886a2f25ebe8776aee0dfa92e55422c1e7f7e1d235a25b94cc57475efe53d70e","9b34d72bf86aecdc5fc7536792bfe2df3f9947f52b0c2ea39e3558fe0ca2bb22","04b74f7a8acc7557c613fffc6f167d1d17f399ee3f63a90b0a7f971cdfae1cd2","fea3bfd4e36256fcde77d9940d984b6a2cb09c1eecc5f76a8ede9b031011dc95","3da4a08bc3738c0a5b51bcd229b2d2c156451feadb22f758729090cf33d794ed","744bcf41fc6263a4d0bea8d7383c2a855b77d43a105e6ed0d8a4cdd4706e106c","90f0a0e3211fc23b1e8db52b76383f6519eac469757414a3b9d5875619fb9c0d","6119aef4031d03205576aa94cf7a51dbc6eedfdd420d909f325579401c8abd0c","19cc354f6573191d4e7914f94cb811eea176897530d869ad83bfe3cb7fd5f206","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…
Expected log hash
5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129810322","kind":"published-quote","locale":"en","page":"theme:xodo/price/en","quote":"y the hell is there subscription","rating":1,"review_date":"2026-05-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.