Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“très bon applicatif”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657480792

Proof data

Record hash (SHA-256)

6ff2e0c64d6e8429e9c24a0547eab1eeb347b97577d07ed6af9043ab72080965

Signature (Ed25519, base64)

6T9bw5k9Ld3z3fyTHwtyRLcBF1Y2DMI69AaLXFWfO92fnCV0FCmDDI27SBj9jemgtrmnWDpIhPTArnJ2f3njAg==

Merkle root

1b8bd208913fadeacc13aee96871dc2c1b9dc61e733c3f3400ab6ee0e7324443

Merkle path

["6ffa1ec261eb4389c4821d56c87d3748ce4b6e3cbe3550978b1f021ab701e4fa","fe9b1548ab10640c0564416f4cc868d5f70f34ef06ec7d9dde329d46e7977fe4","6ab60bc4dcb22066e7d615680db803c6a22165f01150aa941ac1e08be4e9d568","6dcd0ac05ac269ed1fc4d3c10bd11bf2fda3732289d5bb9a242b59df6657cd9e","b5e1c2787de97d5a3359689bf8925b6cf1bfa08cf2a7611cccdc5ce337e0d995","54df02923c7e57bb4bfdd58c443c1a8ad67e75daa399060328bf69dc1bf9da81","bdf695ee0cdb8e34549b3c7a4560d359396e02526fab79c4c010f32dc1db8e1b","f716af60e7c66c4f941aec0ef6012cb47efd0b074ffc1413c0f81964e6bca434","0d154cbe7aa2591844afaa56ecd8b7cd769481fa63c233f1ccfd9cb0cea8aafb","712b7309bdce245b15213774de436d7ab5e19e9a7ef87cc9543050963f439ed6","b30b226b31aa7c0c5024037b1546883d48750209638cd66dda65fc25b4d39e93","b21184ccb63c3309f399016a2e290edb17f3b1ed73738b40cf4fc4fb11942d34","ed38842035abdb61b6acdaa05c44c05c6e9bf4eee7e5e9773996331fe0c289e3","c52fce73b9849db559562ef42ef211a7cf5c90590c8893ccf2772d1dde24cc92","ce07c6a4f0a9b6bd8c624cf5ab7198d339b314b8dcd9468f4437006e846aa076"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657480792 · entry 108e9186e8c5677ae7be…

Expected log hash

ad55c089e6140369414933a3be64660b3e37350199a02055154c25d6001c76a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788145962339","kind":"published-quote","locale":"fr","page":"brand:luminpdf","quote":"très bon applicatif","rating":5,"review_date":"2024-10-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.luminpdfapp","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b8bd208913f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.