Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Renewing your license or getting an answer to a direct question is a nightmare”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
773ff2c1405421d7a882628f84cf95f90c150478c8f572fe4390a640053188d9
Signature (Ed25519, base64)
Snl+oweb77Y1zjUPxyvlcFGhgZXSDY4zX+AkkhCvfgPw/39ZIrs/sE464JtS1wf6s0Zq6T43cglSeXIkb6sSBA==
Merkle root
cc942239c46f13b1af6cdba0960a24a6cb62e7a7a462aae1e8126c0182dbffc3
Merkle path
["77406cb5a5c3246411495991d9b587debeff2fc92c826f6826178c188677fd89","3f15a0a33a8a3e5538e01e40f3938dfb01f64a3a3c359f98773a0f15231094d7","aa21b59fa077d1fe4fa57e25b3069c84a6c13e6dae4266b9d062283c0b660757","d0ddc59652da83cc82de7a2e0ca79f37b5af2bcbedf3b495310753d9249e516a","757d34c659566a64c8f71654c8a162a7d724596b5c9548c970795edd5f813a05","f29efa963ece86fb3dfe9959a3412302581aa46a31fd8d78c13bbdf06cabc352","e106cfa966e3e2e359ec50d9ffd19a5c22ea42a501617df9f6ce1bce6545c655","fda41e1c98ad54e8712e6508c837e8745aa87546eef89cdefa0c1bb26838ba09","fdc9276077201011e73604f28b4251b7d7b623c3cb608ba3daa8c27ad6e403ae","f8d4030f960d7a3a750f58c23c090e63a47d9ed7d6dd75a530936cc7be3b6cac","16be2bf493056b5cbce46fc3d93b6d02c4fa603522eb13a168dd2ff3fcf8e93d","ef4283675581cca5df9a62291fbad7119a81aefeacb40c5ce98e9cfd5b187b88","775dd8d6e832b06f7b7ef77a85216bb9af7105f607664e433fc30abab21ec3fe","9a1346831517d7bfe15c9cafe704fcdd7e5320eb2bcb608a630afaaba7d67d2d","f25e568e6bd90a5619f6d6d975016290629a8afed06b80200730e4e12fb2d1bc"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544236959 · entry 108e9186e8c5677a0341…
Expected log hash
c82e13ba2a716d66def44df55ff50c2e9db35da204570a7fd5650a8bc2702db2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787290890795","kind":"published-quote","locale":"en","page":"theme:xodo/billing/en","quote":"Renewing your license or getting an answer to a direct question is a nightmare","rating":1,"review_date":"2026-02-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc942239c46f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.