Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“i am trying to contact them to ask for refund”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
82a48690245baf0879d975132c622fe379e326da1f47f34fdabdc02fd8b43576
Signature (Ed25519, base64)
l67Eq28fdnHEgu+IG0pDFqyEweFVZGyjtphEpp02pOLT7a120onTZFRcfcmTbBzFplA+a8LrcumM3uMoyvG4DQ==
Merkle root
72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path
["82a539b81d2210166c3e4015de54c404df47990d08da8d27bd296b5eb6135f29","f0c6587805541431bbe7ff0f625ebd0c7e63eabdced0ad7f9b26ce5d8c385730","61dc40c9a0e2650348d9683f779134ff184ff5858a4693626b93cd1a5613b100","04abab1542940b684a483e7ac6e655aa2d21f126d462a7e1dc3ff31f11534b1c","748ae9772c80ea67c4e2cf0cdecc8b7491ed263a4ad90bf5c00ba6c130f615e6","a203156740d8a77466da80d6156967c7e1d3017f47b80b2b32ac7055d980088e","22103713a26374e613dfcd89f67105ecb451a394c42376a2b0714bd3defca76d","bfa6367f6cebe0592b978886718a032b82b755313a38143d1d30287d8b135872","69e5bfd42cfc4ecd0acbed55f3cdef932702ef608e33ebd514f6b6cfc787bc77","425d706ea67d3660ee4df1431a0b83a0fa44016104ed4595e7619fdcc7895c80","bd2e5fcac5fb9d085164fd856e7d50eb9442f065ef677d0ef966943d3243c1a0","a04624107601e271e014741151fc1401f3129fbafec3688731889c4e71f22a5e","00d96e4f5844025cf94031a68b6b1f85feeb1eba15fdbc00f57e844b9bbd7752","bd788a9b6485b033101398a3aa9df1787f225fcc2ec7903fcb31ee65f6cac6af","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash
65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"theme:xodo/billing/en","quote":"i am trying to contact them to ask for refund","rating":1,"review_date":"2026-03-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.