Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Une tres bonne application”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2682592437

Proof data

Record hash (SHA-256)

88624a36bcd6cf628e85515cb30843eda36c397a84ea88bbb2410b488b41330d

Signature (Ed25519, base64)

uYZJ5kdL3UTTFEx4mifRxMYPPDtv58rquaLxh1Azt+nD2l9XEeQJtkFzj00b2DQN1xI6O0NQxgdzgJ3eq4ppBg==

Merkle root

579ce28fe2708bca920b52a6c28f3fe167f796c34475f556d2646d500467658d

Merkle path

["88637f8eadda2ac6f71bd5dcc74b32d0b720ea20b7096b2ed00a4606e8b2af64","1b433dcabd3328e3f3d87c2ff963a6f949f892b0f78da461758127407223dfcc","f134a188646bb7a85e01d0f8fa7422d77d22a81ef5eb12532b732bdd33904569","b6663a47cdc773add1ccc10faf2fa2a9fd114d43ff7cca5e395b830516eb23cd","1994d319b82f8ae7fcc1c0fc5552c7fa6f48a6c85b84f8972238288d614156fc","99a1c327de33ddac5aec7b2efa1acde4a721b166abc22a6cd58a8a94a539db42","55fb6278a37935ba13529b8cc6fd0efeb03ec1fa17330f3b20312f5355aba273","9f9713dcfa73659f81fbb8e2cffc6a9f6939de41acc28022780b1ad9b7e68311","c58e39c22a174a3f8e09e6708d9c91a947c19e1ab13a5f797b7e9659f1b51dd7","d11a7e7361e485cccd120906c5d9c3e872ab95bd73a8459e63373defa342c549","5877334f32c17aef5555da327f25de8ab2be5fd7f277e81096690d11319829f7","a301d2d803c6989039be4efe9ccfb1251eaa2a07ada28a6aa6508cc99014ad07","c898596af8d041fe0c8acfb103500c89ba69f7860dc5df566a6d2c4f8cf914af","4e26fbe87f59a34ea2b375ca6cedcdb0782654582cc57886c8b27743c68afa18","842d900b1cf416b40ed647fb564c02f9f1047f8312564495f259853a966fa9e2"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2682592437 · entry 108e9186e8c5677a8bdc…

Expected log hash

0cba4b3248d53abaf7e1c602875f7199dc2f8f0ecf513e6f05c7e522db47bff2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788317104782","kind":"published-quote","locale":"fr","page":"brand:fliphtml5","quote":"Une tres bonne application","rating":1,"review_date":"2025-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wancai.app.fliphtml5","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (579ce28fe270…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.