Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My subscription expired yesterday.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9b0bc1d069b49135a15b733f3559fe8ecb98eb2981842b55a965202da88b95aa
Signature (Ed25519, base64)
yWdWOfOWRu5d7+C+TrS0Uyibjum6Ou53sGW0AK3SY3wQF3K3K5WN3ntwgLxY4zGXoDSAByHvCVStDK2KB7u/BA==
Merkle root
97eb1062a862b99998bef0a84476eb3c3812bb77c2cb927f4fd2933b59da9e3d
Merkle path
["9b07d6a36d9e3b89ecb2a02bb0a73242d4c7a02357704a6c0b7563cea544c907","d5e82c2f7883fe2f7430beea7ddee8ae0dcc15fda035cb2ebe5f0e437ddc7534","d0630031e4667360eb60ae218e0873b4c42eaa87bd0b0a1e158a5c6176ee5642","9c6d11c5bd352a5085a88839f6cdc54f4e0fecb11f3bde0d4b0033111e94bf44","c4e7c78c469d84bd1058ae7a3289b4af0f503add76e9310818ad623291fdfdb7","b06f035c250d7b3362763e351d0ecf50ddd4b1e0a77f52cd6fbb319be40bec70","f03a6f2fc79b46a91742531ed55850645cdae0779706333505f022a4c8ba6471","663accdf496d0a088186942b204e09c3dc1e92f45ab15522ad044b5449c56700","6bd2aa32f98fe2a0fa2f84ba4d7233c14f99f3fc77c93807de598d71544e5966","643da713f764b7be002ea8ab2e8a6faeddecacb745c361b22825077702c8faa7","7d7f77ad1d1b5b329ae9df2d9c4d3f987a64dd198ca897e32bb89e242691f902","0bbaca186fa570cfa914cb3e4cb0d5d663a77ff60ade12385fa90fdfef78367f","6772a6b2cfb742f4baa103e424787f6ab6a8cbdfc294db886f1451f7c9752077","90e3c3ed08ff9f4dee6683cf95bfff311f4715cac07e97ca75ea5b9bcf13efe4","01242865574478f13dcf9d888236d7a907264abdb87f360db7db06de0945075a"]
Anchored
2026-09-11
Public log entry
search.sigstore.dev, log index 2789279696 · entry 108e9186e8c5677a3885…
Expected log hash
05c7009ecf7ce5cf315c252c2a1dd135e64989a02cacdaaa3c5a87412a2e921c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789017464005","kind":"published-quote","locale":"en","page":"theme:tuta/billing/en","quote":"My subscription expired yesterday.","rating":1,"review_date":"2026-03-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id922429609?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (97eb1062a862…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.