Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've checked in multiple devices”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256)

f0b7d4a531ea0a513f2a1747935643f33dcf78eacbca5aa37d8a6af5881b25ce

Signature (Ed25519, base64)

Mzke168EgKN/lP1LXdMjRD09oN+kNivVm+jQmVHgRGxv3fFkvPPg6sVZjLsdinuZ0QhfrFaoyate9H01PLzaBg==

Merkle root

681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c

Merkle path

["f0bbf9522f901d881bc399a4ae7de93a2f489d66d7ee3c3cf5218ca8418c4a0e","f2d3dfdb82d447f46f08d898700549164ab245a4cedd9b1736731b143dc911ba","d1aaf1ae32cb878e049ed6fe57d53e7240e1d225c40340664d44ed292969e496","74697ceae231ba0333aa3f4852127c0d65e765a2b504f9e0dfca10bd7f9e292b","6a830c8cff729f0f12d1ed56c2ec4c4591cdf8263358a0f0a4cc25f751426565","dad81a0bd84de08f00faa7497a4d9c521a4c22f5f839c2e20a6ee624721cda86","ad26d1f6b62c123666fc4080350d2d779a8dc0da9896d61c867d0028ffec3431","4f018217179cf80ba0f43a090cec0b13d5f7a6188f398566e4d7301a9a44122f","1f012b1dbdfcd576a2e9dc9c2b43e0ddfe9ae43b5e55bd5007d67823d475b89f","3b0b470ed82e6be98af2e72678b5e031a6039f48c3afb2e94a89b48ae3016e8d","dfac6d0698b6f64461c4c2f8bc28b0afaa0e89d511c9c28959610b8727935a56","1e694cb0875411a8524fef759f6d5c3b7af94da4bdc91e98423a7530d2b8d3c2","2e86d3fb14a64b45a2a5c3c87d2506bd32ec38d911482848308828159d2d2c9b","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…

Expected log hash

8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"brand:luminpdf","quote":"I've checked in multiple devices","rating":1,"review_date":"2026-08-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.luminpdfapp","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.