Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“To sign a document just once, you’re forced to create an account and input your cc info.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f6841e8ee1de05a574970e9ccfae40e808895f40ead680ca140963e1791f75a2
Signature (Ed25519, base64)
ZdwTbY8YnRGnDgmuowiOCu3pYTTxxyF+cgHPH5StS8XfWATRvvJyQtuZxRfNqvnZOnvVBEDYRwLfeoW8MQmeCA==
Merkle root
f8b4f722de05d6805a889681c3818dbde0f5141f0c8463f2762c4a9a02d66a2e
Merkle path
["f677fde97fa93e8aa18f2c625a2c71ed072e9f07f8715d1ef2442558fcceac73","fe0f6a48eb4244c56511d8c31844fed93ac97575b6d775a64fc3b3e452c7e89d","5df1494a4bafeb52db96e49f2ea813806db91fb094fc937bd6b70e268224c766","0c8951697204dd50581e870e89522f8e76e40821d54d091da5aac806a31b6c3a","248a9cdd169018fc1751a9ae29d5736cb3a9e4598050fbcf4f970eec69357ba2","80022720d28b38e4366214ec56a849e9bc7041b00ffb03d83e808f3abc987b8c","eaab03ad2dd756fc8f6883b92814d3a09a92bde8e95142370915f3782a32f74e","36b66b5fe4459c1c8e5057dc3090898c5bad594e2f84b63a8d3351586e6d376e","b797716fc0c1362400ee4a39ed6a7c311c7feb2eef6bfc522fb5f88aa82ab6c3","81ac6872778bc0848737e59cc1a802e269380827c21ba019d2513229bdfe4301","ae5f6e83a5a36b83d500a89efa021f7054fba2155bd608e7b7f498295d629541","06f7a93baf95476f593ddecfca04f326c9a79ac740314e4fc04c944d1561aa03","55c8c6eecb85583149f9a1265629d0d25028f7f86ae101a9b330baaae0f213a6"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524422814 · entry 108e9186e8c5677a9741…
Expected log hash
e042bf60ab37eb8951abb7a408cc8c7483ec875b9606253deec7a67967130ae2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787192294432","kind":"published-quote","locale":"en","page":"brand:luminpdf","quote":"To sign a document just once, you’re forced to create an account and input your cc info.","rating":1,"review_date":"2026-07-01","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1367372862?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f8b4f722de05…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.