DNSSEC Debugger

Domain Name:

Time: 2024-05-18 18:41:25 UTC

Analyzing DNSSEC problems for all.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 10129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for all.id/A
	Received 685 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 685 octets ;; HEADER SECTION ;; id = 44688 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . D7vSkNzR75D2Tn35QHUUUryzL+8dtsD5Hg2CMY/219vQUAdgz11WjQNz+tKEaKbL4OUCXVWIjvuU W0A5uzjgVdRka4MFJLnKMu33mSPqdi6R4A4z6PzWQMZF8AhYHvgCi7Lj7b3dVv3Rd1C7MFSeLmgO 8Q34sj6v1odxMMTzzdkCHRD5lDMNB31Nwc0hZHOuaOAncCMtnttURo8xF+xyKduw+iYabv1SLkjj FstSc1+GG8G5ZRtIw73FvedifPCuy/1KIuj7adYZr08konseDlVoJXJLjsvgpSp3LJpobwGj4S7o a9b1kWUwN0lQ3VZjUb5+DKDWc2wF53/0AQYBQA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for id/DNSKEY
	Received 681 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 681 octets ;; HEADER SECTION ;; id = 31547 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . D7vSkNzR75D2Tn35QHUUUryzL+8dtsD5Hg2CMY/219vQUAdgz11WjQNz+tKEaKbL4OUCXVWIjvuU W0A5uzjgVdRka4MFJLnKMu33mSPqdi6R4A4z6PzWQMZF8AhYHvgCi7Lj7b3dVv3Rd1C7MFSeLmgO 8Q34sj6v1odxMMTzzdkCHRD5lDMNB31Nwc0hZHOuaOAncCMtnttURo8xF+xyKduw+iYabv1SLkjj FstSc1+GG8G5ZRtIw73FvedifPCuy/1KIuj7adYZr08konseDlVoJXJLjsvgpSp3LJpobwGj4S7o a9b1kWUwN0lQ3VZjUb5+DKDWc2wF53/0AQYBQA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to e.root-servers.net for id/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 45133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . D7vSkNzR75D2Tn35QHUUUryzL+8dtsD5Hg2CMY/219vQUAdgz11WjQNz+tKEaKbL4OUCXVWIjvuU W0A5uzjgVdRka4MFJLnKMu33mSPqdi6R4A4z6PzWQMZF8AhYHvgCi7Lj7b3dVv3Rd1C7MFSeLmgO 8Q34sj6v1odxMMTzzdkCHRD5lDMNB31Nwc0hZHOuaOAncCMtnttURo8xF+xyKduw+iYabv1SLkjj FstSc1+GG8G5ZRtIw73FvedifPCuy/1KIuj7adYZr08konseDlVoJXJLjsvgpSp3LJpobwGj4S7o a9b1kWUwN0lQ3VZjUb5+DKDWc2wF53/0AQYBQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . D7vSkNzR75D2Tn35QHUUUryzL+8dtsD5Hg2CMY/219vQUAdgz11WjQNz+tKEaKbL4OUCXVWIjvuU W0A5uzjgVdRka4MFJLnKMu33mSPqdi6R4A4z6PzWQMZF8AhYHvgCi7Lj7b3dVv3Rd1C7MFSeLmgO 8Q34sj6v1odxMMTzzdkCHRD5lDMNB31Nwc0hZHOuaOAncCMtnttURo8xF+xyKduw+iYabv1SLkjj FstSc1+GG8G5ZRtIw73FvedifPCuy/1KIuj7adYZr08konseDlVoJXJLjsvgpSp3LJpobwGj4S7o a9b1kWUwN0lQ3VZjUb5+DKDWc2wF53/0AQYBQA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to b.dns.id for id/DNSKEY
	Received 1163 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 1163 octets ;; HEADER SECTION ;; id = 62505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240607072733 20240508071539 22449 id. qbkpwhCRIhQFFedglwPlVW8dhzZmOkEXbTJuiVh+5O+bWHKmWsBjqoBLjwXgl8n6yZRKyYjdNe50 W/1OViM+lgzLibxa+aqWKzGEyfICJ9lABy7Sdk8V6dvg5JkJP7vmtH81UD3a1ZUGOBBlwjuHyQnd /FHyEXDxfqqtrKMJOVFfTVEf2rF2peHWqnDj4/DFCWJyxjqUSPqRD9SgOl1mynh+Ptvv9Z7Goog5 tp7Ag2ltqVfofm8SeV2dAFonfrCWsfC4LaT2AL36rxJmvBqHspDMfSAS3f5tYuvfA2IHkQaq/JEP JmMbCIX4ze0+BTZ3qXwQuZ207Dql2cuHqbsSnw== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240607072733 20240508071539 26887 id. J/EMSUl3LDGLxN8IrK5/Hlq+NX/IfLA5/UkPihGsYI/4v//IwcpGjNVSlXP+sjv0TJqputIP7nw1 qSMfXDdPb1ndDVyqE6MNMnXYIqXM03ZB2PrATQUz3erpyNXpVh2B7rIsP+w+17eB+wRb/OynElv9 AW/PE3O+vCJBL5/Fanhc3QMNyQsQrzfBjdViZdrJrWUTAvXto+atEwPpF0/GfZ7Z2RPwcfm0SBIO ytF9GU5VSpjE1dAep5zEyl+tzC694/KmvQxvo0+/RVyeCbeSP8nGpl2o7EvE/eBC+vvtlo3uCRaH tWoX49kTYtTWdp9Vyiyxqr+A/EGLglEetsXNMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240607072733 20240508071539 22449 id. qbkpwhCRIhQFFedglwPlVW8dhzZmOkEXbTJuiVh+5O+bWHKmWsBjqoBLjwXgl8n6yZRKyYjdNe50 W/1OViM+lgzLibxa+aqWKzGEyfICJ9lABy7Sdk8V6dvg5JkJP7vmtH81UD3a1ZUGOBBlwjuHyQnd /FHyEXDxfqqtrKMJOVFfTVEf2rF2peHWqnDj4/DFCWJyxjqUSPqRD9SgOl1mynh+Ptvv9Z7Goog5 tp7Ag2ltqVfofm8SeV2dAFonfrCWsfC4LaT2AL36rxJmvBqHspDMfSAS3f5tYuvfA2IHkQaq/JEP JmMbCIX4ze0+BTZ3qXwQuZ207Dql2cuHqbsSnw== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240607072733 20240508071539 26887 id. J/EMSUl3LDGLxN8IrK5/Hlq+NX/IfLA5/UkPihGsYI/4v//IwcpGjNVSlXP+sjv0TJqputIP7nw1 qSMfXDdPb1ndDVyqE6MNMnXYIqXM03ZB2PrATQUz3erpyNXpVh2B7rIsP+w+17eB+wRb/OynElv9 AW/PE3O+vCJBL5/Fanhc3QMNyQsQrzfBjdViZdrJrWUTAvXto+atEwPpF0/GfZ7Z2RPwcfm0SBIO ytF9GU5VSpjE1dAep5zEyl+tzC694/KmvQxvo0+/RVyeCbeSP8nGpl2o7EvE/eBC+vvtlo3uCRaH tWoX49kTYtTWdp9Vyiyxqr+A/EGLglEetsXNMQ== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to d.dns.id for all.id/A
	Received 496 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 496 octets ;; HEADER SECTION ;; id = 34385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 172800 IN NSEC all-co.id. NS RRSIG NSEC all.id. 172800 IN RRSIG ( NSEC 8 2 172800 20240605055538 20240506050934 22449 id. e023AyipowZ2HdUx0jWRGfObtP2TQgOYa3VE4uR5kumTJikhJB5g5pRco53B0n/CZl5dQ1IHpXUN vgFTSiaqCAt97T3LOqI3C3qKA8DGT7dsv28iZLdxvPoUKOQD85/Aw8ye3B+sa+QmXuPBNeXQhzer udLDcyONHnG8drkj1JHhtWsYCCQbo6Ue1zeHLgD4P6YvTLSESZN9AEXcvoJQyqE16QFjCL7+FOND DF7KlF6hLjg2EPTKIeeEU12kaV6FECUGwTdfp9aOh+3Gj0/+L8ZW1ipEFMb3b+6SVpUFJKQFXOn1 vIo9xkT7BLWWsE/ni8cvgMzTyj54xXqmCPK+7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.dns.id for all.id/DNSKEY
	Received 496 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 496 octets ;; HEADER SECTION ;; id = 56893 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NSEC all-co.id. NS RRSIG NSEC all.id. 172800 IN RRSIG ( NSEC 8 2 172800 20240605055538 20240506050934 22449 id. e023AyipowZ2HdUx0jWRGfObtP2TQgOYa3VE4uR5kumTJikhJB5g5pRco53B0n/CZl5dQ1IHpXUN vgFTSiaqCAt97T3LOqI3C3qKA8DGT7dsv28iZLdxvPoUKOQD85/Aw8ye3B+sa+QmXuPBNeXQhzer udLDcyONHnG8drkj1JHhtWsYCCQbo6Ue1zeHLgD4P6YvTLSESZN9AEXcvoJQyqE16QFjCL7+FOND DF7KlF6hLjg2EPTKIeeEU12kaV6FECUGwTdfp9aOh+3Gj0/+L8ZW1ipEFMb3b+6SVpUFJKQFXOn1 vIo9xkT7BLWWsE/ni8cvgMzTyj54xXqmCPK+7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone all.id

all.id

	Checking DS between id and all.id
	Query to ns4.apnic.net for all.id/DS
	Received 709 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 709 octets ;; HEADER SECTION ;; id = 28523 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) id. 86400 IN SOA ( b.dns.id. hostmaster.pandi.id. 2024203366 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 172800 ;minimum ) id. 86400 IN RRSIG ( SOA 8 1 86400 20240617183946 20240518173946 22449 id. MUNnEI0Q6PD/8nHBEX9wSvNuNcBywUM5OffsYTXwqe6+bma/5sOOXEUJ5DQEIFv5Kv6ipm+zMc13 +HLjYZgyfYyEE8jyZfP0MhAhIgiXLcwiVSsp2oqzEX58WImIRMci8mHRv0DSzrj3Kqz4YIluzgWr gOx/q+2frHUpyhU80gdhUfBR0edrwUQ4hmX4DoriFgllygvMovK5eW3A7dLPrM1mdNVDFbSwXUYP EoveSZtD2fuGYqTfeipTYD3X+KnVLf1OAHMW1FUkZaVD4rxZnr8qPpp8XKpaCMaTrDgUkyZy3wuE Cwa9nx5aYuWIBmkxeLnx4KOWpj+6kOBhyMZdwg== ) all.id. 172800 IN NSEC all-co.id. NS RRSIG NSEC all.id. 172800 IN RRSIG ( NSEC 8 2 172800 20240605055538 20240506050934 22449 id. e023AyipowZ2HdUx0jWRGfObtP2TQgOYa3VE4uR5kumTJikhJB5g5pRco53B0n/CZl5dQ1IHpXUN vgFTSiaqCAt97T3LOqI3C3qKA8DGT7dsv28iZLdxvPoUKOQD85/Aw8ye3B+sa+QmXuPBNeXQhzer udLDcyONHnG8drkj1JHhtWsYCCQbo6Ue1zeHLgD4P6YvTLSESZN9AEXcvoJQyqE16QFjCL7+FOND DF7KlF6hLjg2EPTKIeeEU12kaV6FECUGwTdfp9aOh+3Gj0/+L8ZW1ipEFMb3b+6SVpUFJKQFXOn1 vIo9xkT7BLWWsE/ni8cvgMzTyj54xXqmCPK+7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for all.id in the id zone
	Query to ns-1157.awsdns-16.org for all.id/DNSKEY
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 17365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 28808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-985.awsdns-59.net is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/SOA
	Received 236 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 236 octets ;; HEADER SECTION ;; id = 33087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1157.awsdns-16.org for all.id/SOA
	Received 236 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 236 octets ;; HEADER SECTION ;; id = 41297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1761.awsdns-28.co.uk for all.id/SOA
	Received 236 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 236 octets ;; HEADER SECTION ;; id = 27881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 45385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 17222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1761.awsdns-28.co.uk is authoritative for all.id
	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 21020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 38755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-174.awsdns-21.com is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 57754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 5604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1157.awsdns-16.org is authoritative for all.id
	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 38583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test all.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: