Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“l'application rencontre des bugs régulièrement”
Google Play · 2/5 · 2026-06-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2544236959

Proof data

Record hash (SHA-256): f3aa4d6e94e9b3d848b4899c37a740c754b47a817a92dee7d249ecf3a4905d45
Signature (Ed25519, base64): W57WniwtwMGiYvAjsxCbDaZdTco83YTfCl82x7+4/Yip1+WA+6YKIdbVygJ98+KhT9wcSBLJbQindcf2KE3fDQ==
Merkle root: cc942239c46f13b1af6cdba0960a24a6cb62e7a7a462aae1e8126c0182dbffc3
Merkle path: ["f3a9ba6a882f41282d972151fd906820a2169c6575d47dc8dd96a579a550edd1","0b065a66bc6db5bbb1eb26081d0b1efc797f779c4f9ce119251c1eb2612b8c51","e2d25305b28be0d5af67125f37caa1e20ef55b6811e1833fde86733b86efd6bb","55d39442b5257c04a1bf9d6881af08e565971c1b53234e746345352615a2b1cd","6e7ab641d8fd11b56f50fa5c739afa40f738c04127f562f58e6057e4a7068434","c5fb281c6cc3d88aeb8b0ee0cf53a7d33a4ebbf31c99236be2ecc800214a2aae","7f6a938f6cad8de3b5958200364ce0e898b55f148e088c80832ec41474f8d4ea","cf41acb87de94c2c0918e4e5980959a7e26dfea9cd8e609c48290042857ec7f0","334e60566fe4de42ead0babf3938fb7ea54d23e2a6db7d37f26153147d3664f5","f8a9c6a62fcd5071697724bb0bb22392b8bbac4b393dc18453bead54c0874577","da88584801df5946200960e9563828f1583064663ab6225a8d5d669af5044b9a","b63b8513f160e1618cf5c9ee042146836545fd0f3fd29ecdd8c7b7c4489a2234","d5c0f48cd876b426b1efca655d0aed02857d58331679df8cebb7a18a1e12c472","60099dbae313e53e1410c43a173e183f13f26b3b253db87c564730ddb5969e60"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2544236959 · entry 108e9186e8c5677a0341…
Expected log hash: c82e13ba2a716d66def44df55ff50c2e9db35da204570a7fd5650a8bc2702db2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787290890795","kind":"published-quote","locale":"fr","page":"brand:foxit","quote":"l'application rencontre des bugs régulièrement","rating":2,"review_date":"2026-06-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.foxit.mobile.pdf.lite","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc942239c46f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.