---
title: "Retrieve a minimal signed public receipt"
method: GET
path: "/sexoffender/report/live/verify/{reportId}"
---

# Retrieve a minimal signed public receipt

`GET /sexoffender/report/live/verify/{reportId}`

Only completed safe reports have receipts. The receipt never contains the report body, customer identity, or PDF. Compare a selected PDF locally against its signed full-file SHA-256 at /verification-report/. The Report ID alone does not verify a PDF.

## Path parameters

- `reportId` string, required

## Response `200`

Minimal signed issuance receipt

- AuditReportPublicReceipt
  - `receipt` object, required
    - `report_id` string, required
    - `status` 'issued', required
    - `generated_at` string, date-time, required
    - `pdf_sha256` string, required
    - `key_id` string, required
    - `algorithm` 'RS256', required
  - `signature` string, required — Base64url RS256 signature over domain-separated canonical receipt JSON.
  - `public_key_pem` string, required — SPKI PEM public key. Pin the published key before trusting a client-side check.

## Other responses

- `404` — Unknown, unfinished, failed, or unavailable report.
- `429` — Error with an actionable next step. Unknown or other-account reports return opaque 404.
- `503` — Error with an actionable next step. Unknown or other-account reports return opaque 404.

## Changes

- **2026-09-26** `a647e84e9275` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/offenders/apis/offenders-io-sex-offender-registry-api/changes/sexoffender/report/live/verify/:reportId/get.md)

---

[API](https://skmtc.dev/offenders/apis/offenders-io-sex-offender-registry-api.md) · [All operations](https://skmtc.dev/offenders/apis/offenders-io-sex-offender-registry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/offenders/apis/offenders-io-sex-offender-registry-api/revisions/3839b7742c8a?raw)