Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the person who received it couldn’t download the file.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
87c3f9daf4b231c75de9a19fb7d23c71fc4a47a03d3aa03a9a74e64b2d2c8423
Signature (Ed25519, base64)
6wvy4K+FQ1RSqVElMzJfGbvE15mT8+G9p1fXSpFgXPDgQXxnrsPIlMxI33RmqFs3hXXYVO97RK8WIhZHie6/Bg==
Merkle root
bdf558524b6fc08556728f259e0f09161d4626349b700d7f30fb50b05a626ea1
Merkle path
["87c4695b0b439fe14d8b721cb2239f3736d77ef7ec6599f8c36d38a3e5845d6a","bd4873bd29414c5dcd9a52b3638039df6540835a0ef33d203e1b7cfdb42f4286","de77bd48bdc41e6ab41838d5f05ca8b6a0da22dab71d326a7b776e3f001ea5fd","7216b93c8f2009cd55f8fe053cb92db29ad5e394159c5c1ec0b7e5c1a937d23f","70becfdd4eabf917f900eb0641058179162ec14e99f5e163f6b7bf86aead379c","e42200148d0ae822f112cefd409fabb9383afada317337023529726d413ca2c0","27bfc3605147a10acc46f7088407c448487004f6ae8a3ed5e9cea0e003146330","925ef01c3785e4b52aa39822485bdf72ce45b635bb446687422f2871b45b200c","8ac16adad25d1f198461dc98a35028f401d25fe5904f1c9be11b15080eb883b5","820e8c82eb0c98bd78f9b3c6dcbbd4fb8771b37b75c35116087baca0cccc4db5","06fc65caca5681714e634d93b7a79b61393fd4b60eba2494931e371083d48c85","fc00a238e2f8b49bdbffa93b0e9e5f8045b3c7630877b42220a0929307738f13","eb1cf819ce45c15462a4daee7cea14e45935677491385f66e3842a303f17a540","8e9594a285d2d4b46501008fca51e6cb82167cdc77c21a7232826a5a1f448c83","7c1f9829e354481f51c5a693ce64e17eb8bee61cee659bdf8b794fb330eb29d9"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525257308 · entry 108e9186e8c5677ae552…
Expected log hash
c7cb1a1a9418331323cc64d3f101e644ce5e79412d6e55a22a9342e33025b7dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787195935480","kind":"published-quote","locale":"de","page":"theme:acrobat/communication/de","quote":"the person who received it couldn’t download the file.","rating":1,"review_date":"2026-08-03","source":"Apple App Store","source_url":"https://apps.apple.com/es/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdf558524b6f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.