Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“Je préférais la version 8 plus légère et fonctionne mieux sur Android 10”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2543025731
Proof data
- Record hash (SHA-256)
fef6d4636b21f62c4db9b76fbb0fa45fdccfaf1c4bf42055a6516c0ab4b6d87e- Signature (Ed25519, base64)
eYUQC7dtTt+wExzZFTRCbD1bVyx2UluhVbpG7GS4eFLS29Yk388sbl/if4uQoP8f0/o9VUkbyKnxZt0fx0X/AA==- Merkle root
172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404- Merkle path
["fef84c14010c2686a5750fd1bdf8a723d3cf7439271382d7d905cd109c01db78","c2f579baaaaadf1ff8f1eba2e321788c190dde1465654266f44a2f7d6f74aa5c","d1b6598d9493af79fa3efbd30c09d822380e8f7ea101ba45f6b238ab919e4805","394212cc6d89b0f2398e262ea920eb39c6f85de7fb1face6c4b48a846e7a48f3","7bae0aa88684cd1c2276af538d7b54613316aac57bc1fd1bd5692c10205ab5f5","24d6306e03ae61a067bc4dbba66c5686bfa2153bfd8d16e33e3e3ba7e83f2967","24d4b21b0c24f23527af2c4262c1dfefaca7ccc733640d285ec5099ff0cbefd5","75bc1ff5adf76c5174caf602e428b20ebd77376605ae95929aba28f7b966d8eb","415c9bf2a23038dedd56b38b0100c2a4760c29a90f026b30882b8da8ec6563e0","cdadf80a83b3783591890403d4b42763acb8ebea1afcdbbba5fd55d2d5815515","8a803bcf79faaa08a6a007f6133c2bc14e3a2d491c99568531f627a1d5b8bff0","adf236ba37567819576fc4adb2fd9b04eae6d7dae45f6114e577c46b30cb5a1c"]- Anchored
- 2026-08-21
- Public log entry
-
search.sigstore.dev, log index 2543025731 · entry
108e9186e8c5677a8971… - Expected log hash
-
19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8beaThe log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787283443958","kind":"published-quote","locale":"fr","page":"product:xodo/pdf-editor/fr","quote":"Je préférais la version 8 plus légère et fonctionne mieux sur Android 10","rating":2,"review_date":"2025-02-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.