Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“L’appli ne marche”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2515144749
Proof data
- Record hash (SHA-256)
fc3e37c81d2ef5b52e803326cae10508c43ffa70f385e02058335c5eb9eb2e6e- Signature (Ed25519, base64)
kNxSkwUhxmAcupx71WX/ebCAzb5UZayS9wm7dOLVGLn1KbOGevlQ1eCORlrr9gBV/hYChWzNSynytp42K2eKDw==- Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715- Merkle path
["fc3e9fc32cbc6a7e3bc480a42af0aaf1b44ecbd9941265f2199c0092dad29220","f5fe23c552b314b37d3c511a342b89b6cddde8d58a9f1a0750a1a12f262da59e","79d6acfe612f72aa8eb61cfd13ab64c34cdb26d142992e04faec2fe731e66133","332c1b5243cf3e8e714f8de00c7489a51182054bf03ab58095ff5df9c50afe9f","64b5c2057009fd3819c3be9564a3e3666997ffa89ad21b3437fa421006093616","26352e0345fe9c4d9aca8cb7f4e80b691da2332ed191b257990711c6f6f0daa8","c00cf6d5512605a8b9ec075db81d0b0ff1aa3ab879539a6b8b604b331523a549","8cf1757cb4267112b42ed6a4e3a278490a7e2b515d0116631699441e62f422ac","7e87399231274edbb642f63e33420148e4cf18e463caf560158af453f15c5736","8b4642ca7f21f2e2c7b769b7ccc1a32528ac23fa6ba4187baff80bcc8e1cbe93","e935a047d05ae025b873abd86951bd3a367a901bd3cb04fcce7237ba3fa9b9b9","5bc1168c47f5724c35ec8610ad8e7047dceb7d2dc8be9a835d1c344ea14431e5","aca625c2c743c13b7e188c90a8dcb2895afae601815729b8511e9bcc31ba8968"]- Anchored
- 2026-08-19
- Public log entry
-
search.sigstore.dev, log index 2515144749 · entry
108e9186e8c5677a63b7… - Expected log hash
-
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"fr","page":"brand:css","quote":"L’appli ne marche","rating":1,"review_date":"2026-03-26","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.