Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L’application fonctionne très bien et remplit sa mission.”
Apple App Store · 5/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2525257308

Proof data

Record hash (SHA-256): f9ad78ca50737261dda4903e955095c05280d002c14540a350496e8e8d27fd67
Signature (Ed25519, base64): JIm7RpdCIIkkr/XSlIkWXdtfUgrWymw5l3mAK6X0yeJ9T8pVc5oPkXlaCc87wsZITIen7Ty57rvD/EqmGSlkDA==
Merkle root: bdf558524b6fc08556728f259e0f09161d4626349b700d7f30fb50b05a626ea1
Merkle path: ["f9ad6347a5ed12416c484dbce9fd670df0b77eb181612f85b4bdd82db0db9867","320c3ac0925fce2405d2d1d33e2ea1c0303806ea3e171164447cb92ad12769df","64d48e9b68028c9694c5b3a518cee1d8ef55fbaffa2362be577994a3618f04d1","7a2171d1ec6562b3e637aaeb52100261b17007d88b42b3347ae6c4e007bc6da0","81b73408f0698ed4c20846f81be1863164d55dfbf093bd33ab9a8dceb064adc5","49bd8862d86a0ddefeb530fea33f10d77477b75a0c8c86788a1c0e0e44ab202c","725957433523d5469566b1758ee2282f31e7559870644ba1f1c015695e259848","8d0a52a2a9c7b48ff64cf2af310a30911b23b27654edf3f933db047fd89194d0","38019db711a3029a5e78f5588f17cf205b253a9afbdd0717dd74bb941478c217","b692a67789ca0a46e672d54e7c530f40347e01afaf4a9cea744774ea94ba3212","a88e6ea3fd5d98b5ffcf8e54b5c38f0f9bc27c163dd9f534948b27bc97297c7f","12a1128cb0949bf83c45f164d1e342972de0ccef5d201d067013fb4fb658d946","3d0742974b3f0c289e1fb2ae2167e507c87fd383a87d770f58fd281587e12662"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2525257308 · entry 108e9186e8c5677ae552…
Expected log hash: c7cb1a1a9418331323cc64d3f101e644ce5e79412d6e55a22a9342e33025b7dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787195935480","kind":"published-quote","locale":"fr","page":"brand:swisscom","quote":"L’application fonctionne très bien et remplit sa mission.","rating":5,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id798597407?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdf558524b6f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.