Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It is also difficult to turn-off the security password for a PDF file that has been sent to me by my insurance company”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7bc40d22d1bcb8b10b0537968bc26620c50b95501498597e5923f4084b547c1a
Signature (Ed25519, base64)
VY3LXhig1uc0C10cQBDgY6f8GOUtyhL5aAxkUvwj/d0mdggan1bZor7TjAIB4StCwop0qQsA9ZRst5mXZaf+BQ==
Merkle root
2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f
Merkle path
["7bc5011be3c61f27762eff3d79485ac60829bacb7315b8f8b5197d734014a87a","06cd28579234d9edc10c5723c837a0c4a803268be6ac3723986e0408a76a7793","e5ba8503b768dc416f658b9649efafa177f22b964cb5019755b4e5f8aa6e0330","156ade0405f3516206a60625891d8dd5f0bec8816e0bff596c9c5c93ecebd7d4","e195fc401cb3459a999a55ff500dbdd3302b20c23d3bd32600976c724a48e7f4","4c543c409625ed2a3c920736c29a3466c8d8348110f50966388d453876b9668f","2e69e0ce8b7e3c8cd11c2cc4f484a12e3d771509703fa1ea644ef2683fb4e734","069e6e721f128faccf5b0736164f83dbd95231c71924befee87f74da2108d0fd","695f61df7992fd94326a767af9a19553ad381e56efa1324345703b2fbc81e5d0","5edf843c85661ffd9ba40485c4d4ab7d644441f5233b4af2b14a435f653ca14c","10c33958aaaa494f48755d9db07f9dc20b661428ff46744aff7c22ace245713b","2ac6776e7123b51efbdc9029757d26f53dd2d9b88ed7d8d7316659db8281bcdd","5e71e1e70b37a69afdfa58b6c1794925a5ef525370674594f74ea1403dc0aaab","22c95139cfdc78a2baa7a8e247bcf81329645beab990fc5e095abcbd46515e64","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…
Expected log hash
ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787132872903","kind":"published-quote","locale":"de","page":"theme:acrobat/billing/de","quote":"It is also difficult to turn-off the security password for a PDF file that has been sent to me by my insurance company","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.