Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very practical app to use.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6b95dd70cc63ccba4ae47b7b4d5e301a8d5390fe2d94185106a0c22601f7529f
Signature (Ed25519, base64)
6lY2kzKbvf8LH6SHAvfCgk1k4nPxVtWi7EtS8RyDtV/Pmv+oQvHxKC66nol43PQfEmlE8qFbDboIAsoR12dVDw==
Merkle root
04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c
Merkle path
["6b9c00889831a42493fadbcb83bba4b0189b91a56efe5a8dff6c5e5871c42dcf","ebc2871a925ef290bfca63b5dd2e77dab05fcb9c6dbf0a34dd143b579c4da738","c101e986c20a36348417ef91bf9f92afa5f12b9f62be3cc78fabec60f995292b","523b2730b6a460becf4244b268c803d9c7773cd72ad0399b6fa206f759236b29","ed0a07a1470ae17a23a910ea103e1c8ae66084f3548bad62cd729fa28271b68b","172d44fefa340bfccd2159d7a022c18c7ba58d93d31fc0c4f00f6d679786e024","4fc3058f265f4457ff1fcc8b949d40cf028929637464ab14b3ae1f68027e0628","cdaf8801dfa57fc82e3074169dfbc60c086aa687e0d5da56edd0324355b55f05","3b74e020f6f1f6aa121b64233438bad308f0526f1ca2d5abf30b4364a89da9da","27f154ce742a183d9d48b01022f015bcf8b0a5b4e942fcae93e5ab95e25d2a77","63f592014b2c4a9786dff95d46ae7ef0449b6789916b2a8089b5b54cc418ec38","d1b808c246331cf9fee16cac2b6a958f43763c14ead7b37f7be7d0d036915e1d","858da9c5e5c810f227c1c3047d0873181b65380781d4a4eb884968faf30fbb8e","c5cc7ab668acd70733708092004f0624164aaac2bfd55cacefad6637b26146b8","695aed3f647000e14ed985f8c4d6045987ffb913dd12c814d6f9a495d4d25fd3"]
Anchored
2026-09-19
Public log entry
search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…
Expected log hash
1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"theme:quero-delivery/ordering/en","quote":"Very practical app to use.","rating":5,"review_date":"2026-08-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.querodelivery","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.