Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Discontinuance of dedicated Signature PDF format has made this task much more difficult”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9afbf6fb3befa6cff5e14dfd86ab0963cd7bf28c73b83605c5ec95fcf2cb763f
Signature (Ed25519, base64)
GmPzy/h5yNGIhFsmj2umgjTDqxYxFmGfQrezgxaTQp1JSw3k7SAOc26whxxvgOnnxrscoXW0xJMB9/Dw/XIJCw==
Merkle root
790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c
Merkle path
["9afcceb82a57e568494452d523f37f657bd403170d70994f85ba1a77d7cad755","a5994eefbabbef35fd1c553fceb0bd8290573fa7c7508209b639deb075c93096","fceb6ac94d7b90e98ad7ebec75a86e6acc674d6d3aa2e5b75766d912380a1273","c8872c50c610c2c32f18f68104161621df45365a7865fb138cdd528c80abdae9","3061aeb09c59dd76933abee9e379d579dd7296c1ecbc4365b7e41bb0e49eee01","3964c6ef1ae5c0c3ece004c1a1ba51d37150cd5769e39efda42fc3a4403e0893","83b4c34cf855a4640d87b7aad32b2d00ac6cdb1c5f989971ec465dc120a7c64c","23f444ee394b835040ade4c89cd0dc2632f82b420318245e2f6bf5c661a8c953","07fc55af4069d356ed8758a1cacec7091261e38311418be56bdf6040b6c6fa77","96986749234197e0af9a7cbfa9a9f023a9a0dc3012caaeb7243a98f1b41f58a1","0ae4548eda3cb50491a219e47796db7be0e2b6c08aa523d2505990d0f33b6010","033793817716b60bae8335ddc89dae5dfca72a43db08cddd25484cd1b68128ae","fed974c2a604fe479a40a55532da44445587a6abdc13401101a05a986afcb6f6","19cc354f6573191d4e7914f94cb811eea176897530d869ad83bfe3cb7fd5f206","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…
Expected log hash
5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129810322","kind":"published-quote","locale":"en","page":"theme:acrobat/communication/en","quote":"Discontinuance of dedicated Signature PDF format has made this task much more difficult","rating":3,"review_date":"2025-09-18","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.