Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“allows writing into pdf files”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7f97353a7e52b0a543272fff945bfa83ffdfb8c2e0fea1ca5aa053255d66f970
Signature (Ed25519, base64)
5MxzRRVdMc+1AglEIsWEPGcr4nK0xShztLctYEnj6upSSH+lobCTi+aV2uL055pqmmDz+lLuljVALE9DwNk4CQ==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["7f8ea95d5eda7429218c1b0aea713f5bdb27f98e4e03bb229bb601a89a35826b","264a600ab770df4204821055e763b2dec1edade04e7eae4c2cfbfa883f1e7906","301a5ac52499642a96e4f76c3d3319d532b95e3903c18ed12d8615360fff0eb9","ea9661f36da40507c4143cd83b3729338a463364f910d4f276b85ea61f1c6435","a20676a5fa9aa721221b250bebb2ba116edc4be980a9602bf0dac62a86aa2bc5","e74b825258bc9b6bd25c5654e9bd84116d962ddce3e26c2a86039aa0a4700a48","3964ca34953142b1468e36434673a1edd2c918a38bd13e67309252e9961df8df","8b31f8c418564f1a3dab3c12ccec3a87f57a756ed0f930bc018e799997fe3a9c","f9fd7598f3bbbc61480ccf965ba227a69040ef091eac8cb33f7950b5ffb7af89","e443f0f8580b818a9708f80bf229c57ac99a0b6169cabb9ea59813b635535931","a3501a6d2a9edf966c0204787c41a03ff621e2eb69a360ba3efbd50d65d4cbf4","09fb425de3f5eb75dcc6828118a0c5e77820b80df9298b1e4f37e1dc6d0e15a4","1a634c86608f8872bc200c568ce8705aeceaef5e6ca2a6b293c8a08d19857cba","6d215dc9023570789455be9902e0d62b0310ab7bcbe811daa69263c90da55ffe","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"de","page":"product:acrobat/sign-pdf/de","quote":"allows writing into pdf files","rating":5,"review_date":"2026-07-22","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.