Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“app based payments not completed”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
71d03cb35e02f6ae7344225f6a00d4eca715c833f6d33039cc0963b229d3f08d
Signature (Ed25519, base64)
8NlH+ULmZRaW/kJ0OOH8Htd2d0xSRg88gO1AUgs6h8FWteL7Z2nRPMaepIubNRd/gd/Pbrgbp/DaIL3RI3atCA==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["71d53748fdc7e2deac277910716dd5c1d8fde289f1e47977a8c78e80a5806fff","acfdfdf1c27ee42ec43fb06334aaab759debf708d00a9bd6d9592d15b5ec3361","85d3a11076f37d6ef8be47def59dacec06572916b494c5ecb7c4bc41ac4699b4","6caad1bf8e9a19225d07db582aa3a3b96450f1127ee6c1646fb4011a4ea2eab4","0777fa23547b81f22a6621c0a7d7d5b62ff572eac9ecc3e23bd285dcb6bbe4f9","f7d5870432853ecf9c14abef0bcea42798567322ab57dfdee5535733e7138a9a","3512aa7dfd676e83bd3bd4b54c7e2da3cb8fb16528be74c9865dea3ede97900f","8565fe071d477fa2e0a01ce0f8a3979a1c20f00fd84af54983cf2e8a5c111832","bc33a6600104b20b775870338a541ae268ef0d737516d68b22fa288406189037","8e94fdeceb8c75cd37246cc1bfcc34a45ef9512bba422294b31b9d8e6c8a209d","acd5cafac690445723b3e3644ce2775e8255f307b002db7e098bcabaf68386fc","d6a60e2106352e5dc4a29403d9d5c2ba3b108dc5f0ffc3f9ff74c9776290fc3e","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"app based payments not completed","rating":3,"review_date":"2026-04-08","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.