Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Free trail extensions will also be charged anytime you try to cancel”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7dce5610126959aae3b4ca8668de6f27d8e43741a5fd83aaaf7f81e7bf7562c3
Signature (Ed25519, base64)
BsHfeQbSfeAqis625htlRo3IquF0a+lRwqQTNoG7MP5L+92FoMR+VNyKDneFfr3yN4wBuhj6+WYxn8TuKNejDw==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["7dd2162ee1fd4b85fe33870576a0914e91de8dd21cf9f4f00cb7e7644432ef51","f00d1401bd6144e5d5fea36533c1b696b9803679e64a40994ad38b395045d539","2a68b944f9b889c2677698c7133adcff555824977c596567c540e5cb2c0c6572","db7bda2414d63f96c57de26fa702bd07c174146fa91e6fe05053d0e5b1887f7b","be13201493cc90b0c67d742053d48356f7bf56b4c7d88f223d999803d4ddfd2e","6e21d17a736fce6f946cedb3d52175a77553eb1f17982a1ea88cea2dcbfd256f","df6ddefba4792d725a5e976d0f8e2fa7de90549bdeef2dc08a412f658966c5ee","240c16dd652dfe939392c930dba3c47a2a83d6722193ab2ccb333c8475e95c50","ddb6cf7e2aa753eff75e3a3986c920a1b951bafe18c2ec61901ef7d76a13587c","7fea5b137e56e33cd8bf2e1b6db4ac48a3668c604c1e75e2ec0f1a0ed9858465","8ee7032db4fdcf5b5226ce1f8cb9a0c745968d6a4a5911747fe90464bc964504","db7172ce14e794d11e5f11fe11ac06253cffac3c662e17e925db59b4efa0b12f","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"Free trail extensions will also be charged anytime you try to cancel","rating":1,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.