Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“But the team is not ready to refund the money”
Google Play · 1/5 · 2025-05-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495260497

Proof data

Record hash (SHA-256): 6bf72e5f34d4adda482a44cea853149bb740b4e4382398fc9bb90d1a1029e522
Signature (Ed25519, base64): SNN+BXFgrdveDGn15z0pqtkzO3CAASwX3ZiJLs8R888XP4/pmAxf1moy95EtknlKg/RdJl0NA8aKGByPWbUVCQ==
Merkle root: c0f03d84ec6a08e9f47227502d608cb4b9559e04dbc44c0c60dd009e5498fd59
Merkle path: ["6bf3f9ddba18bf9ec2c9e0e79d62a9db2317435fbe9404a6e0cb668f6b98b9f8","6bc38eb612c5320f098b60c8861ae73223288ac7d48b883047e5a89f0ea104c5","576bac1a1728a875aaeb9c8b98c1b5bca3a104a92107754ff3c034e192376129","2b896d3988bd8e7674cab6c3729e7d89c4665e38035b83c030e2aec6279fe99c","80f6c15fce4f6509ea9220efa55916b903f557b7641726039a41e5392ccd7e0f","58744f634d038e31c2793a16af5e431d604792a2744cbd664261d1f3df7de537","01067dd3e46c532a2167374a06eed9fc97cc48a97ed3e4c3b046efc6136e3251","11494a629a1a50b9d497c2b45e17bc39f8cb8e5a35e02d576d93a4ff10af9538","17df2c218de210130c1f9e28abd968f245ba576acef8e45a8b9b9eaf3ae49d7b","9371a90d11b36eea2d31697bb5c238349add0422771ac904b73f8ab6621c75b1","02c3148e2adff522cf2c7f8d7224dd0e910112166443175735887231ad8a286f","8015b62bae2fef5ef4b65efe716cae699108912ee0747d82dc0f61fd68226de3","16b9810f21a8fcbcdc67545dfbf94bfb5811490e5a68aa13ea21d65beabaae35","87146d6d46e536fc4e22a9f18be1850021ba6f043db2cf362c830947480627dd","a4d2a95b8c12efe70f0dc5df164839a5ef796b8ba35c8ba29774bce65792792e"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495260497 · entry 108e9186e8c5677aab72…
Expected log hash: c37699e17d2ce6398bb526dc7ebc97861528e4e938842ba464fce3230eb047fe The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786937421185","kind":"published-quote","locale":"en","page":"product:smallpdf/translate-pdf/en","quote":"But the team is not ready to refund the money","rating":1,"review_date":"2025-05-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c0f03d84ec6a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.