Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“complete fraudsters”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d858f71761246a18a7da9fc35639077abbd32633f8a809c26bba181234b93866
Signature (Ed25519, base64)
3f0g22LgEvnTYvsWnrVNocPBmCZy0RsitgmHksH5kBSSTOokvz4Zkc4ggum+a46NYQn7jUXLecIkpCreY2hdAg==
Merkle root
c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path
["d852dc72014cd10f454b38057ab2bfc9249c9351533b5069198d2d208b68d779","73982e02f182937b920c42e2e0d1fb48d340f0cc0fa59c47802f903b5b633fed","de8edf22b1fed4ac0cc947d95e4eec100e1b1fe3d4761d15c9a88e64df90e0e4","8100f107680a15b1e3c0b0c84f4d3babaac0bb5f011c055253bb334b5ff14cd9","983eb0d37eef07ecb5db8890f469e06e9381e5e27afde2113818aebaa1c66bde","5a409b6fcc696045cbc1615a5b893fc24fd30d6248ea734dcc75b3ee96444d87","3dcb8998ec0a1a30d10fee2331748860eb30e81dac88614d55a5a3492376b702","b08b6be9e0d4de6d9fcf973d49c72c8dee556790ddb103ae88ac564cdf5d49b4","b6383fca2c090268584daf829c9e618b86e807e61607970326f24b90f2f66775","7eb0f24c9471a994f7f4dd98cbcc0015d75b197dc2aec786a7b9af6fbebf0bcd","f0223cb23ae6d76f6f2d9ebf2457af307eb1beb8d9bec6a17d503c21665cc614","2af731e5c82ef089fdd61b3d79d7ce489dda08d9e9cdd9ed4708179c423f60a9","b90574c7e0cdbf9209db77f8f01c73e9e7d347084156519bca7f0d69ebf8fc50","f0a12fd268a34d0f9b23bfa8bffff7480f1f51a4e4044173daacd716efd0fa79"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash
659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787194832011","kind":"published-quote","locale":"de","page":"product:xodo/convert-pdf/de","quote":"complete fraudsters","rating":1,"review_date":"2026-08-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.