Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Trying to update my payment method has become a nightmare!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7636b9b0138ca7d82cce5598095807eaf6ebf025c83154abe34498f1e49a57e5
Signature (Ed25519, base64)
SC2JEMlaSBtsah2ytDxzi68/H8kkF5hCXBxJka2DpkIPpkSOLlQ7R24kNz72C955PCwrFsjIoLFOK3Usu+3ZDw==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["763898150a22da8737e0bc0877d29e09073a1adc9275ca0209698b4fdfba1154","dd7d1593aea312fef925efe0da1bb195869a789aedbac44d96963e6a41fe1e69","195c96d888c6bd612b5c4210ce2172349e54ca40709a48ebadf7d4bbfbf9fb38","d99dae56760cbb390db3fc1b9766a93d49dd72e926032869b73466bcf994ff24","811b4fa91b803be936134e280436e48658ca538135977b6c97efc632815ad911","39f76450ad335877a94d9859ce95ff51a02094b5ecce1269e881a6632a8728f7","36560d29e35f395123e4ce2ec59331bd8fe3f08f643678a23d492f2af6656708","bd5f8c4aabb49b446fce40af03741cc9e6afccebd6900eb9d5d8f9df5ce614f0","db9047b23b33097ae04f813688192eadfdf10cbca61b4b688dba4a6d3e853ba0","ee36ea271409e4d7aa3b5acbd0423e288c4df856c84723bb047ab1d87e9de015","98b38ba65d08304a6ebc7ecfda8e23b97f9edb345ab9f8262e5847d92d540a00","d29846d305ca93ba91cb7154854585f35334e65b72562e64a3ca2a46c183180d","58b1aaf4ff68687e7006533ee52afa6414f635ffd828ae73a306f5f050aad891","c7065531c3e7c4c7309e4efe4674330d1f0c5150d728171b8966a352ede62d5a","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"Trying to update my payment method has become a nightmare!","rating":1,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.