Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“needs a subscription even after creating an account”
Google Play · 1/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514297706

Proof data

Record hash (SHA-256): e7613bd362d0414046a04b19e3cfd5ca8294139426661bd40394442b15f3f0c5
Signature (Ed25519, base64): IcqhX/s+w3JPAGxrS8Q7uq/Ems293Bc/26893s948BKJ4RD6dDHMMUKo0aTKpU5BRFZV9ccB+U165nit56K5CQ==
Merkle root: 1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path: ["e76709e3b7e8af0c41771e71a3d8112cce061a9262e9d2d2f0300a1582dd8e85","96e2e462e32143770a1768d3d367d04eb9cfbdf8c9d9de0532e229c192064e45","5585ecad8bfa6290dd9c85aa018094d3e909daab87e6f3b36ba6ccb9c31eed65","6e93bf2f2ce43a40ec307d8152a531534a7afd935bf711cdc43c668d37e6b85d","74d01b5cc20811ae5c7a673cfa90dabdba3d1b47edd2269daad9f131b7478c99","a4420557c477acd878b447ed4123306b66ee8cf0efe1b3f9a67b329f3a6e971d","34b7ca4f6ecc2c617320fa93290b6f2f5ef2a0b3c70269243112701558a9f450","c7e1e73d3d7f65fde6f2c73dbfcc922d03f70dcb2d4ec336d471cb01f3ba1163","6a3f45e7c01c091d454afb2475a70fb3ea0a12ccf37c2a23912fddf184682af3","b33c46477128821779f8603a0e6bf0dfbbf1163ff5ecb9a75351cf6db2f37259","ebf8366b336e08adf8d341f80da7d540843a6d4ed98c51f9c01ef3711b68146e","3fe1f5ba1050992c318020c6d63827e3e8ab2b3b96c03d44d8b5cb5d9a3e2996","d7a263cbd10f2ee7a9b2e7aec47d567bb17042a152af5c55c9aec6a0275af8da","bd07d87bd70febdb2065bd01bc91c4a313429f0836c93e8304bcd2037faed264"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash: 861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787126020727","kind":"published-quote","locale":"en","page":"brand:pdffiller","quote":"needs a subscription even after creating an account","rating":1,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pdffiller","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.