Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“paid subscription bad idea”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
79545f58fbd2bd8c2090f4ceb9d59e42651d9b0225163fc30e4108577e7a8170
Signature (Ed25519, base64)
phLbFAuaYOgi/yA0HIqPDSvQ1UAk1GF1MacUdjFmQjsY1Pux+HX8Ssu7zr9A8scZ5dqQK9doR6/IANBkCHb4DQ==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["795448c9348a44e56e4767d7ab752ec5b25123c2a9e24c6a9679caf5883a0ec0","ac215139366116b8fd077360273d216253c69fcff0cb011bff61a328ecf4b74f","b7b1be95f225f6e5886cfdbc8ed0a94ea3f1195ba633a176a121011a486c6c45","8e2eac1a98f7ed6e2bfcd2b519eb812d1bb5d6746188be6618032b1c2cdd6ddf","0f65da858794e34c8c84f7fdba8f77eb625c34db457c67782f1f1b67e72353c6","0ca62ca9c741e5ac86c25bb639497f243642c84f5ed68183e7a6b953e637fc5a","8a68ad18f3c69fa8f295a1679e5f75db29d3a606b0771ced2d2ecf9c63798b21","b195d7d5fc301054f468725331424061e4ad0be9c79338cc173cc74509fd1c73","cf928c71c6c98be10e1ca8aa18b3de98d130dffdab7166210c556fd14a36eb4f","5bc44d895821b2ab0280b4b94de69dde39eb8f1f9d639b1c6e472f54e9585ccb","7427710b29ed1045703c138a47a36e5e3482cf6fb80506afa89bf6dd63836115","605d721982159eab78bdc43a500e63a2af6ccac929c957cf186f611e1f7ca57b","78676505a7a4e31eeadca3cd52e7c8dd54cff3cf24b51dd75865ba23f402c848","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:anton-paar","quote":"paid subscription bad idea","rating":2,"review_date":"2025-12-01","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1521627812?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.