Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sans inscription, impossible d'utiliser l'app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
87f4f0eef768d499d477050c2e72b2e77a6e1674f9f4744b8ea40276ce648c5c
Signature (Ed25519, base64)
N57woEu50TfKXEhBriUJF8ieXRYaiBIN5An0DyI83I54r7sNoavjgn1t3Nv8+lrVMAwTTOONmejUAjU0i5fgAQ==
Merkle root
9b1b0ea5ff073795652912177ab0790127c9d286c797e205e428b8d86989b898
Merkle path
["87f5e56a2843a12ccbaad6eaa345be7909f082a323098d17aac9e2cd84dd6ef9","7e332b339476ee7cae05107578837e5621597616a16bc794715b9ee0fda845f3","134eeb03947ae4636ced83ecda31f79ca9fd9a283a04c4a3a8773264cc20dc7c","5c8aa935f54aa30d8009a726b515c7cf3ecbcce6d0624fd2c75cfa48e0c2cd3e","c4255fbcd856075633919066f4338292f63cb41421ccd89583e85e7a6233c97b","3601cf2d9e9a532348771c9994e65615dfb0855d644dcb48072801e3f98f9b28","74324e265757d59444f8496c3e559b0086737394dcacfb13231beb9ced03da5f","5e18c6d036226cbfd1a6ba1c6f27106ad08be5e742626648c09acb20ca8ce7b9","c4dc3b8de4ee44989594e436fbb9c1d7fdf52eac85e9add2aac4214c47e4e159","2511cb1b77ce021e83c6630b599465563408b48f444eb99025ae02429dd3e3c0","79676cf2ba623a457dd0b0be56171429e7709320a409f3559665a8d47c7e0640","10943562ee22147275be840a923b301ea6690006f5e49d932aebe6de1c44a3a5","f8ac4b21ff2320b375b567fb293149ec75608cd7f95373028ee8287e75934879","5b669d96674db77a543911ce1b7480efafbab4a0cb2b21ce61f684da899d0a8f","cb32073192135525777f5779b873b337bde4d009abe6b4aee36e0d683387aeb9"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684091718 · entry 108e9186e8c5677ac9b2…
Expected log hash
de33a5856ee5b3a69957109416f9fe5937b2a435c3e2583dddb1e30f75d54093 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788333782203","kind":"published-quote","locale":"fr","page":"brand:fliphtml5","quote":"sans inscription, impossible d'utiliser l'app","rating":1,"review_date":"2025-10-14","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1071744833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9b1b0ea5ff07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.