Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Free 7 days trial is a Scam”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6c840f96ca2efdf8efc98c8b7ca1aac3abd87a84078ee00f970c5b7e85bbc186
Signature (Ed25519, base64)
UIdcVzArlNq/hjteHxVsi9CIMrahf5hoCS4O/nAVuvpjwawrIWB3jgppX0k+QMBGJU1oA7rYlZv1e7/GsiqqCA==
Merkle root
1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path
["6c8b163764e79e3cb7dc5c0148829b379eb7cff9c180af4706e624bc1c4bde72","6968e2e2eca4697c87b5eb948fed4a87bcc3b6caa1b8c51608afac0f6be35063","3d09e1921d6a6afdd0db447a7ca2467d4d585244addb28b2556c6f3779bab6b7","3c162871e80b7b1bbc38deb603df62ff0e45d2c2820059c971cd8951a87a4189","5f3079fd948a26c168dccf4471e31cb0c529d2c0c85d3b8d20ace3eead103249","235de57f444a761c641cbda16502d0127c2e66fc6eb491f4eb33a3c1686f0083","3349cd3a19365ee65efe89e415d8761b9094484c4a9e9d9a3d8cdba7590b6915","e26177e5dac341b053b7405e981980e431fdcc857879a78b77888b8c1b3f2c43","5cf9a79445ae0434eb49696d1628797c5921c5a3bc4f5b92d6485d378fa0852e","204e3f967b5746053c22ae26bfeee5b3d8ae248e4b3fbed81610b72a93093e7a","4fbc9071939473acb822f491e80d7ebb9b2f2220a5e9046f19bb48c4ebd9331b","76314edfdf88e7e9b8d1b83120396a0b82e336f95ea9a9f8e107cda76d7f1a75","262a9f81238583e2cd1857070930778ca81e80099af74b7a470c955d877ca1b0","fc5a80f8a33a91194ac04bb68228972904c735c88173cb742b33f0dc7c73d75a","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash
72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"product:smallpdf/translate-pdf/en","quote":"Free 7 days trial is a Scam","rating":1,"review_date":"2024-12-21","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.