Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Très bonne application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f5ccf50481247cb4a83b691eef99302470d22c8f86c6483ebfb2ffdbe8571a4a
Signature (Ed25519, base64)
1qQYZBzEAM4sDSCt3gobs8av13043/GSmVkfTcj9OQPUpCGvcaW6KC03nbPkHbwPyOYst+M0RT2VC0Fc4ofjAg==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["f5cb9fe29d9fb4417f2228d7ee0713b008fc3011b7db56eec8515832941ac6d8","1adee25e739f1c09372ecefc58811c807daf75003a40777d6bbc5a982b7d8f50","9fdb47cd43fd109a52cde67594e7532ace76ee10a959865c4edba929cf26ee77","2f57e9650c7f15a553b5c101d7c674ba1c759fdbde6d093c0f53c3e4d14d93cc","fd2ea95c35bc4865b74f75f411cf49ae94a5399523394e1a2a70a750ab5325ea","533270bd3ff16820f8d355b977b5b71725c1f69f1cf13737215364b4ed7ebd8d","70c02a23ac2bcea023459c0bfe5dc31a762f3b4dd32bb41fa1a47e4e8abc3fba","a2a3e732d6f8f41507dead7e7997dc36d6b9521f14d802c86e80e3271267a59a","dd1b7450cf32d16c7c39221703773e5bb3a175dc7ad25b6dbed2ecc0f5e38929","95a03497af373579d9204fc8204f296be508a31ed11f468577ae744069de0a99","0de9458eef5c5fd72bd101e9230b8be27409babd0b4cda862df667f0aec8c53b","0a576056ee16c853973c1ae5f2e69eb8307a6c11579960d3bc89f852486ab500"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"fr","page":"brand:acrobat","quote":"Très bonne application","rating":5,"review_date":"2026-08-04","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.