Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“However, the codes are not working.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
aaca8b38be5d921df0c6a89188424a85d819a3f30b3a9449ed6ad76f5cc1a625
Signature (Ed25519, base64)
VKugp32VxKIzmA2AtjUZ4muo+8KwZYdYR464L8F404D15Wi3wGRZmGhmbG3g9aui4th6h2Qthdke4Lk+jPQcBg==
Merkle root
de8b012bed4822c8c2019277a5dd0d29f64a2b911dca893a0dc4a34997d27c9b
Merkle path
["aac792b2581e109c8c3c276f33ee84ba488acc64a0be79836fe7ea2779e1a726","ce49a5b6c61a76c08c00f8fc33fbb82cefa5703e363df76fd653ffc437fef743","e4e632ce746186b08f8d3f191c80d3445952a2bb2d3b6e8d6f9d41c23a3c1f5e","495663d8c7a89fb06f6a0e0ba963bdde47c45cfed633e755e1c98b3eafa7a76f","a63138b5fc925c8edd79e182d89f1a713f36e546233aab5c711fedeb159ddd65","9210f5266e7ac79a3a36d079d0cbcf56c40725f5c23eb5a758c595b69c96c1af","fd5aabd02ba390226a6fcc884eb0fd0f59835e945364fc88005214b325888f44","94ece7063ff92677cbc961b9eea55815b598af614d33d9f3534216535cf3a843","2044b6a4f00eb222f0b892b9feeced2c2d7b4119b47b5b187eba3add85f64bba","ef7c1fd594e4e6a585f835e3d3f266e5318ae77c2907cdfcc6cf4887da0f19d2","a38eee6310277eccd917efbaf49c47155f436b64abb66e28e5178418a2ef9964","c10ca41a40bcee8f885609c8cebe910db611b45ce866be98203656a34efda2a1","2ef1d4884ce058bbca7372a3f146151580803420e2caf68191c2fb6658c8939e","6488b09d50215cad86af69dcaf04a9b28d1eca2b8f41f338d648e6a6b3a80fb3","02a545cf973db8971f86396f9a284ac1c13f9ca7741f825ebff631e0b74bea6b"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495114363 · entry 108e9186e8c5677a28c4…
Expected log hash
27023b3a9ff654410608df4b8b5cf048db8313c7ae7f1826ed51f9640b0108c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786934720554","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"However, the codes are not working.","rating":1,"review_date":"2026-01-09","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (de8b012bed48…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.