Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Be careful when signing up to any trials”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514446349

Proof data

Record hash (SHA-256)

83a8865a01e8f3c11cbe606b4ce54e5ceb840ceb2ed277f78596e61c4e6a6f6f

Signature (Ed25519, base64)

h4yKIhmtG46tILVEt17lrzPQzhI3KJ5dTHDzOLULrXa6jtzkPo+K/PuOjUPuJ72h7ef4al6JYhTYxZNrv7VRAQ==

Merkle root

3030a3ea5b39192cafd732e0b397cfa387f40a2253f2715cd6a4d9d218dba468

Merkle path

["83aa1843a1eda5aa152eb3044d38dbb0863645a60231d51bd743feb81f64e32e","8d09d03d89665deb4cacb7a5904f5df1d78a42bc398d548974746f978d9f0aba","0d787f18f70af8d71cdc0aa4a7576ce26e4c5de2cd205418adde5352e1f60d8d","511e5bd99f600dde82c8bbebe92ce95408a5dc00ac8bab6c04bd5e3319da70f1","d707a4ec13935527a49c733a2ccb46a4f7964dc8ab207a26e7929a386b62089a","aa227f9d2e8b3acb83cdd65bb5ee09de3440cbf828da7ba6735ffb0a472e00e5","80a9197a356df8161ae64b3a07888d058ddbf51492743c990a349b17c691c601","07355ba56f786e2cc71027ec9266e7a30033030545643d7cc767679401610ae8","2c7b6c3faa48e4031c38af850480719253322c25271fada4b0078dec1ba00d3e","4e7a75fe81ecce49c4e0ea5ab37c15e151e6828c73e96c86ceaedc45bfc0e8df","7fcec3e5b1c9bad08cd05609ee7fda11c993b0b11ac72ca7d39da0f0064b1ce8","f8a88a886bc4f30a5d403a13dcf801b5897d09b21da479446a1a322e2ff576ef","e19c6eff657ea7d0ede33010cd88abb8a9e01c28c7b3ec485b702f7e37c24957","fa236bbf83f61e60a6b63c899666e78098c5b5cc95b126245f16085503380c3a","559fcf7745d7b07c729ccd960c18a4660eed501cde8669d27c3235203d371b20"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514446349 · entry 108e9186e8c5677af084…

Expected log hash

901e903dca7784cbcc0b860ca8f2ae684aa8c7d566efb3654aface7bae409ccd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787128322154","kind":"published-quote","locale":"de","page":"product:acrobat/sign-pdf/de","quote":"Be careful when signing up to any trials","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3030a3ea5b39…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.