Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“paid subscription bad idea”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f3abeddb2a79f08bfe7a496a1e7777b540bfd16783502e12172c748eac0205f9
Signature (Ed25519, base64)
1FXBPED76BCP3NTcajWRnKvbfwZwEP9aqO40+JPSrjqqO0NtCY6TcvGJ/6yVDciNxAtrF0hvjvmI/7HIgnqqBA==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["f3a494f3bdddd0794638a24a86303ec83d6b163cc27700fd8b09a4414d7c445d","7bf00b9f9b680306b1daeccb39596c9f3025af16b5b10c9a3da8d2a210012851","9b97e21a162bd607a57580253c475cceeedca2a8a067a03736543635297f35eb","02d7d9a4168f4131363d8fa4646397cbfacd42cf62521228f881e69f42ad4668","cc6809b9d7822e975ced8b1bed5dacfc2eaa2fd7928389f6de11b856079638b8","4f5c83a8a128979493f67fc5e4f3f589940682c33540797b0534ae1d0226eddb","dd97883ff7f85dbf6df8d0efd78f213c8f80a95ae97584848b590bbbd11aadb4","246204b8521bb82e3d770ab4f56766856731faf2d635b572a4b1d141647d705d","e9d30756996e3b1fdd67fdf177e02812aa540a8520ef43de03eb98b72b368225","fc6611258a9241b894467e20d22963c3feaa9648043ef06125efb4bef450936d","96d64f5d2246f7abf8a831c05a9d7e278765e43021b13ea8f8597a14de557d60","86faee187567ef16a3b429d33e36e22a404350a33c0cd125024c9bdea869e520","29ce30f8da5c712d90a17b4b5cc4d06d33501710acef0703486a0d531ea0c297","421b69bf9aa58246ea2f121cf7b1422fb317cf6e2a73590cec7d6b46abbe0d0a","d08e876184fd6f67c869a98f4654f693085707c7f9c1884596981ce250200aaf"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"brand:anton-paar","quote":"paid subscription bad idea","rating":2,"review_date":"2025-12-01","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1521627812?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.