Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Still can't pay with my debit card.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9803d4dcc593bbfcd2806454ec2b38e2fb4c72d4f808f358599750e0767487a8
Signature (Ed25519, base64)
CMTeXGV6QQS9ebapOnw/WKoOwswPHlO4nObxcHk41Iw0ux50H1yW1cOE36Z6UclGt2nNcEDXad4ONR3Ed4nTBA==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["98099eacc410206168fc93c4b2f3381fe747f52b23da4340232faf7f476ba461","9212cca917e44a8b8c1b74bb365d88ea04d62703455fd6fd400cabf963d27280","4700c55f99985097278d44003121d3b9901c29000195d14d1f39fb0bfcaca619","616a33be5ff93916c7555d1f962de293482f53da0c97aa4a35d53062d9b5bb9f","7ab5743152d6a957b189892f2b7392e85cff1ac453fc88723c5730b873dc9169","15a5d746a46d751bbb548f92007814e5ee194a3d69787024ccfb7a3fd61f7131","cbd6c138dfb6752c446d749c72a5a2a0dbc965e84d7d72ea269b2529a4fefc65","a02f5799bc4de7fb3ef3e1f3ea168520176b8f41bb2f69fbaaa437c76751777a","f4cb1a2d260530dce60e072ff35201223ac3412a443ed4076bc7bd53e5e6e07f","a6e3ed63485586b4a25a98e94b1c26913b2aa5f3691edd7502552f57475446e3","e5804fb90688ead4c6d51e3825fdf832d8a14cba5ae2a148cf2b2e179516f65e","3bbc3af56d66353e2501f0241c761706aa3341684810ce34ae0ff3a9d48f08cf","a8e81c9c4be1ce6a1aa5a4719319676786621cb7b2766e1f6a09f45dc1bd8c8f","f868ce2794bd46d50ad026b012c7d42f09aeedca360fe9248ca59ded31015a27","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"en","page":"brand:nexi","quote":"Still can't pay with my debit card.","rating":1,"review_date":"2026-08-04","source":"Apple App Store","source_url":"https://apps.apple.com/it/app/id518695175?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.