Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“₹1,199 was deducted immediately after activating the subscription”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f8b20375bf262b973a186c081cf61ce76ce0def8a5e9d46e572c7b87dae9e42c
Signature (Ed25519, base64)
WEnHhEUuaVgZc7svd69Be4iIGjIIEnH1PScrCPKDCAwAkaq9k6qNJrR10EU4x87xz3yroJXoQqYgyeXH+GU1AQ==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["f8aef112eacf47b196f1e7b191bd95f2fcda35bd17f817b7d581c1900084696a","d9e0baf9cb2f806f8b4543678306e3e15daf594e9abb53f96bffd7c7c590bdac","d06e3b3d82880380a6f7caa801000552ea8fd66714a17c7a94dbc013324fade9","0ae629fccb6321b152a47dc7d78377cdec2d69b4ae7ab3b41d64ea16d1f1332b","f2f1fd6535eb0d38b1615b048c1346c9dfa1b3715c04dd04fbf1893b6db65609","0d25c38b9a412d756d0d72ad7dbfdfb3c9ff0e64142f931692820df7fcb937e9","1c74b54ff9d284284b29878604608b8efff6ac2af1a827790d31fdfc41a2b758","98cac73ed64b870b1eb7ec675154128048e4b236d22328037c217f9a4b44e3f6","1d953a2593dfd3bfa3acb0be0b49748dafe6d89f968f2acf09066f17bf44ee1c","70aa3b1015072ce47ef513bab7cdfcdcf449d5bc0cce0069dea8666c1369a508","d3656ba3ac8ec19916cdce3763d601b4edd6a030931b6b6eb0239e3dfd6c01ab","1216bd6fa33967f76e24b7966e2693bcf0e5ff565160018cd7bbdb934b307fae","bd07d87bd70febdb2065bd01bc91c4a313429f0836c93e8304bcd2037faed264"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"en","page":"brand:xodo","quote":"₹1,199 was deducted immediately after activating the subscription","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/in/app/id805075929?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.