Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“V4.0 heruntergeladen, aber ich kann die App immer noch nicht öffnen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f91717f6379b7885089539de2dfb12b8ed00501526c33d55cdc86a3cb0c7082b
Signature (Ed25519, base64)
SrQVWLB4a8gwd+7SJefj1ClbUYJy78nV6PO03ObZno9FGx0NyRHmhGgYxSIQXmCB9WyH8tdVxbfT95ELP0qJCw==
Merkle root
7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4
Merkle path
["f9155a29e3c48523d9600ee9571fe9f80ebd1a81e8b6dc3407d6308f1a969aee","2a836be5efcab0d1570fc722f437dfa79cea8b2fd7e39d7d335e5b5ae0e2ea72","aaa7145e43b08f18619c5abe2bef10bec88dfb347672c347c88fe7d886243e5e","430c698c5aad5bcc497e190eee2e835b412a0150cfa1dccdea0c07aecc5db34a","4bd8eda5a38ccbcfdc66d8d69960fa8378429474bbad8b0572f289827e464ac3","1bb2422da94197f5f1aa3b7ada5c29946fa0e412f1719b11377ad062ce7f2ab9","44d83fd5f850f8add0bc9105eff840198f4a3168e5a191abea723e1ff8c1d4d2","f6cbbce41ef46e197de016cf29a4cac34906a23b2784efac797c4f5918638330","64506894740713eeb44554b81d1293158ef38e42496f71d7059c9755a6ac8ddf","c2a82b3b8dda804db90877eca311791028bd7f6ce68ab9acaa8b7fe58240eb24","0cb2be899eb0e87e0c84c8010f32540c0ff4f02ee38f8970424d4e3f7d0d393c","e3ea462a17033cf2b2bb196bc5b07383fce456bc3220c1b5de266e7e78fd5dc1"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543383844 · entry 108e9186e8c5677a6025…
Expected log hash
65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787285599851","kind":"published-quote","locale":"de","page":"brand:foxit","quote":"V4.0 heruntergeladen, aber ich kann die App immer noch nicht öffnen.","rating":1,"review_date":"2026-07-22","source":"Apple App Store","source_url":"https://apps.apple.com/th/app/id1458846676?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.