Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Good insurance.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3163461995

Proof data

Record hash (SHA-256)

fe141b78678c8765f847e2376917bb2358d9912edca84fa4b3294d6aa1056667

Signature (Ed25519, base64)

GMziT5mCB7WMgXe7MaWj40LPk6peaAueGk2gIGUumlOVqhTWb60LEXIgEyNuKeXzLS0YadU/b5aTMAxZBhxtBw==

Merkle root

f2dea3193623a59d18b4d230cf1484689c024b05d34648a4bedfef78c47360d2

Merkle path

["fe176ccb40894e504579451c1cd13183fa243989f8586c4ae593b4c154de1c60","0b70bd8bd1e3f3bffbfa066545020d75edaf27fc8721f74b4c2ca8a20d884304","adf68d1cd292c087b0e84f8b3f112943e0ebda07ae0a17680d06fdc36bc2be19","f9a6fc8131087ca467a8b9475eb62d4ebab7469e2e4fd65fcc098e8698bf2404","9ec63f3b7414e1755b46af17b3dff545a0576839cf3ceb5bacafcdbc2a9c7618","8c0ca22b36607f5437456a072c2c8c5065d0f405600f534dbfd5d37f3ba9b74d","3f32faaa95c8b0559792697a58639fd6ad278f4cc98f91c7130ab58f252561fd","8ae8037959de549f2ab9dd190e5362c319ac30b157235eb5371837a9623361cb","35a1658cb92ec21f7833ed1076c7ac3a1e383d76c3141fef1872bae74f8eb887","205627ab1c8817877a24b39010b997f675edbf8d9246b8496a7063f3d6e920d6","260366a55c40eac555ff044d8d71bebde62953dd98f786df66f7761640629e5e"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3163461995 · entry 108e9186e8c5677acea0…

Expected log hash

1e385e1035f15f3dbe860bb8f3e4e850b8c2ce2b31edb58c97be626995a4adf2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791544610158","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Good insurance.","rating":5,"review_date":"2025-01-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2dea3193623…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.