Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You have to upgrade to a paid plan to export any files.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ff0c32587ed1befa09a11a74aeb2f2d7be334b8c143a233491adec05e5959af0
Signature (Ed25519, base64)
4ym7Be5O5P/hwzTWm++3MPcyqxbFT/3XIxVG+jngN0DSa7V6hu4e4G6oBLplgcnyWNPnHFHgl+WX6csdkgRgAQ==
Merkle root
bdf558524b6fc08556728f259e0f09161d4626349b700d7f30fb50b05a626ea1
Merkle path
["ff07dad1cf731cbefc9dd3e06782e99240165d1818fad140c814bc9b9f8cbda2","ce4b3223f90ac86273a0737a83e085935e2ed326c74a38d70a330f5a2e0dc7fa","e9aebba66d0fda7379a1b76593ea358ee6e240f69fb81139d8df49773db8c2fa","2f60e98128689987f098d535b8742c336186674976144429bbedf6df28f814d6","d3480e0c6cc257efc8dd814e8738b1dd5821d66c98a7e2e5f6744cae5dc1eea4","2599e7913e223e8aabbcc1f0c45f252e096c1864a099b26899f9c77e21f4c168","d95a8b476061d4c46e7bcaee1ac14aea07aed0ba4e145ecdccf47db6a0911a7c","eb2cfe2eb3417e96494983ecb5f2ebf10e62c928371be1d24949090fb8cabb16","aca4eae4b433e8544dcf6e6a034cd14e0db7c764caa6294fa8dfc32c08b5885c","91e7434404e58000e6f1e805244d8ca2f03bfa8bbb1f02665e0001f2b103654c","12a1128cb0949bf83c45f164d1e342972de0ccef5d201d067013fb4fb658d946","3d0742974b3f0c289e1fb2ae2167e507c87fd383a87d770f58fd281587e12662"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525257308 · entry 108e9186e8c5677ae552…
Expected log hash
c7cb1a1a9418331323cc64d3f101e644ce5e79412d6e55a22a9342e33025b7dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787195935480","kind":"published-quote","locale":"en","page":"brand:signnow","quote":"You have to upgrade to a paid plan to export any files.","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.signnow.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdf558524b6f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.