DNSSEC Debugger - blackrock.com

Domain Name:

Time: 2024-05-21 19:07:00 UTC

Analyzing DNSSEC problems for blackrock.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 49969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for blackrock.com/A
	Received 1173 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1173 octets ;; HEADER SECTION ;; id = 58683 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . Ihr1Mc3tqI/+VP3DOp2o+oSEglnaLDmdVCi6avQG6vAmwiWPNEtQb+0COhT/UZxcJvlSM1HE77vn VpLcxr5bD9myC0suWuONMgiJkU+Bg6/DR7RHQul9riablEOJ6NJbErZStCcnXzHft62gTJDxpiOz pCbUlVdLVyf2PloeWCxR5uAJ3gpuVrenzGMTsuTknF+m3Bj+TxgR2isU1UpaUBtKpy3ZuuE2HOra sc2Mceg8e9TelwIXAoB9XDASkUT1rrSBhjHmRNozWu0NBYq6pqfvoitL15cBxoY9Qc0igc+aPAqZ +nSkpl/4UHEdE6P7/n0Mhia1rb6POTWHSJjEgA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1163 octets ;; HEADER SECTION ;; id = 13904 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . Ihr1Mc3tqI/+VP3DOp2o+oSEglnaLDmdVCi6avQG6vAmwiWPNEtQb+0COhT/UZxcJvlSM1HE77vn VpLcxr5bD9myC0suWuONMgiJkU+Bg6/DR7RHQul9riablEOJ6NJbErZStCcnXzHft62gTJDxpiOz pCbUlVdLVyf2PloeWCxR5uAJ3gpuVrenzGMTsuTknF+m3Bj+TxgR2isU1UpaUBtKpy3ZuuE2HOra sc2Mceg8e9TelwIXAoB9XDASkUT1rrSBhjHmRNozWu0NBYq6pqfvoitL15cBxoY9Qc0igc+aPAqZ +nSkpl/4UHEdE6P7/n0Mhia1rb6POTWHSJjEgA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to b.root-servers.net for com/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 26612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . Ihr1Mc3tqI/+VP3DOp2o+oSEglnaLDmdVCi6avQG6vAmwiWPNEtQb+0COhT/UZxcJvlSM1HE77vn VpLcxr5bD9myC0suWuONMgiJkU+Bg6/DR7RHQul9riablEOJ6NJbErZStCcnXzHft62gTJDxpiOz pCbUlVdLVyf2PloeWCxR5uAJ3gpuVrenzGMTsuTknF+m3Bj+TxgR2isU1UpaUBtKpy3ZuuE2HOra sc2Mceg8e9TelwIXAoB9XDASkUT1rrSBhjHmRNozWu0NBYq6pqfvoitL15cBxoY9Qc0igc+aPAqZ +nSkpl/4UHEdE6P7/n0Mhia1rb6POTWHSJjEgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . Ihr1Mc3tqI/+VP3DOp2o+oSEglnaLDmdVCi6avQG6vAmwiWPNEtQb+0COhT/UZxcJvlSM1HE77vn VpLcxr5bD9myC0suWuONMgiJkU+Bg6/DR7RHQul9riablEOJ6NJbErZStCcnXzHft62gTJDxpiOz pCbUlVdLVyf2PloeWCxR5uAJ3gpuVrenzGMTsuTknF+m3Bj+TxgR2isU1UpaUBtKpy3ZuuE2HOra sc2Mceg8e9TelwIXAoB9XDASkUT1rrSBhjHmRNozWu0NBYq6pqfvoitL15cBxoY9Qc0igc+aPAqZ +nSkpl/4UHEdE6P7/n0Mhia1rb6POTWHSJjEgA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to f.gtld-servers.net for com/DNSKEY
	Received 291 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 291 octets ;; HEADER SECTION ;; id = 32977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718 com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=956 is now in the chain-of-trust
	Query to m.gtld-servers.net for blackrock.com/A
	Received 393 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 393 octets ;; HEADER SECTION ;; id = 17653 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) blackrock.com. 172800 IN NS ns1.blackrock.com. blackrock.com. 172800 IN NS ns2.blackrock.com. blackrock.com. 172800 IN NS ns3.blackrock.com. blackrock.com. 172800 IN NS ns4.blackrock.com. blackrock.com. 172800 IN NS ns5.blackrock.com. blackrock.com. 172800 IN NS ns6.blackrock.com. blackrock.com. 86400 IN DS ( 37972 13 2 1f2e19011a494d7a85f9889f4a0a1a09200af15a96bc727a1e917f83a525d4b9 ) blackrock.com. 86400 IN RRSIG ( DS 13 2 86400 20240528051115 20240521040115 956 com. 8uZHbC/HkGJk2ssqUr+pGtXed9ZsME8F+Y/vGayz48C90sAdFdiSvhYTLwkb4QjLiOaNAQAJ7flW y1n+aYtVAQ== ) ;; ADDITIONAL SECTION (7 records) ns1.blackrock.com. 172800 IN A 193.108.91.23 ns2.blackrock.com. 172800 IN A 96.7.49.67 ns3.blackrock.com. 172800 IN A 23.61.199.64 ns4.blackrock.com. 172800 IN A 184.26.160.66 ns5.blackrock.com. 172800 IN A 23.211.132.67 ns6.blackrock.com. 172800 IN A 95.100.173.65 ;; { "EDNS-VERSION": 0 }
	Query to d.gtld-servers.net for blackrock.com/DNSKEY
	Received 393 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 393 octets ;; HEADER SECTION ;; id = 36946 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) blackrock.com. 172800 IN NS ns1.blackrock.com. blackrock.com. 172800 IN NS ns2.blackrock.com. blackrock.com. 172800 IN NS ns3.blackrock.com. blackrock.com. 172800 IN NS ns4.blackrock.com. blackrock.com. 172800 IN NS ns5.blackrock.com. blackrock.com. 172800 IN NS ns6.blackrock.com. blackrock.com. 86400 IN DS ( 37972 13 2 1f2e19011a494d7a85f9889f4a0a1a09200af15a96bc727a1e917f83a525d4b9 ) blackrock.com. 86400 IN RRSIG ( DS 13 2 86400 20240528051115 20240521040115 956 com. 8uZHbC/HkGJk2ssqUr+pGtXed9ZsME8F+Y/vGayz48C90sAdFdiSvhYTLwkb4QjLiOaNAQAJ7flW y1n+aYtVAQ== ) ;; ADDITIONAL SECTION (7 records) ns1.blackrock.com. 172800 IN A 193.108.91.23 ns2.blackrock.com. 172800 IN A 96.7.49.67 ns3.blackrock.com. 172800 IN A 23.61.199.64 ns4.blackrock.com. 172800 IN A 184.26.160.66 ns5.blackrock.com. 172800 IN A 23.211.132.67 ns6.blackrock.com. 172800 IN A 95.100.173.65 ;; { "EDNS-VERSION": 0 }
	Found child zone blackrock.com

blackrock.com

	Checking DS between com and blackrock.com
	Query to k.gtld-servers.net for blackrock.com/DS
	Received 1084 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 1084 octets ;; HEADER SECTION ;; id = 8620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN DS ;; ANSWER SECTION (2 records) blackrock.com. 86400 IN DS ( 37972 13 2 1f2e19011a494d7a85f9889f4a0a1a09200af15a96bc727a1e917f83a525d4b9 ) blackrock.com. 86400 IN RRSIG ( DS 13 2 86400 20240528051115 20240521040115 956 com. 8uZHbC/HkGJk2ssqUr+pGtXed9ZsME8F+Y/vGayz48C90sAdFdiSvhYTLwkb4QjLiOaNAQAJ7flW y1n+aYtVAQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20240525042453 20240518031453 956 com. c9BoTeKS8CMTWAx1gP2e7LsXlEdA4iPahD5qOjiuJLRHsKOAVrotuafFCtGGYSKdZBoh/Rd1903+ IMXeY13IbQ== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for blackrock.com in the com zone
	DS=37972/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`blackrock.com. 86400 IN RRSIG ( DS 13 2 86400 20240528051115 20240521040115 956 com. 8uZHbC/HkGJk2ssqUr+pGtXed9ZsME8F+Y/vGayz48C90sAdFdiSvhYTLwkb4QjLiOaNAQAJ7flW y1n+aYtVAQ== )`
	RRSIG=956 and DNSKEY=956 verifies the DS RRset
	DS=37972/SHA-256 is now in the chain-of-trust
	`blackrock.com. 86400 IN DS ( 37972 13 2 1f2e19011a494d7a85f9889f4a0a1a09200af15a96bc727a1e917f83a525d4b9 )`
	Query to ns4.blackrock.com for blackrock.com/DNSKEY
	Received 580 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 580 octets ;; HEADER SECTION ;; id = 60068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN DNSKEY ;; ANSWER SECTION (6 records) blackrock.com. 7200 IN DNSKEY ( 257 3 13 VPlEhSNV/VqZ/V9an3vElO9j0paFGJNtyENTQquAiIVA4GC/EuIgWqMPik7JPfrhHFpQjnu2oIib FzFhk4KfJQ== ) ; Key ID = 37972 blackrock.com. 7200 IN DNSKEY ( 257 3 13 VVIJTpimzPMS71r3mYDW5G8nX1T/NocQti9x0rt98B/ZaXfcRXtZLGAlZ9q4PgWydSgF3JZNkpvP Tp3pad23Ug== ) ; Key ID = 30508 blackrock.com. 7200 IN DNSKEY ( 256 3 13 KzBiewb/8pxk/4hWuzSf/FQjNgcSFqSvsNPUr+zohYZ7Kz3Cb5vZ2cvSEBwacgo0NIszkkAnIenC zs+sYBRLIw== ) ; Key ID = 6040 blackrock.com. 7200 IN DNSKEY ( 256 3 13 wLXYhnp+KjTVBNRJV+0TYyrOF3yjgGmQgNL4ZbyMv+jg4nrTNLkgcZ6G+dP8TLZOMSfP4o8Y3R5q l4xmYBxi4A== ) ; Key ID = 48823 blackrock.com. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240524153706 20240521143706 30508 blackrock.com. 1cH4MKoXVQdzrvXLZgxRBIYBle5M1jtyfHjemUGj0dlXhCbpVgMBr998ane7E8AwF47SczMnraim 5zF4m8bObg== ) blackrock.com. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240524153706 20240521143706 37972 blackrock.com. J0K7ahGaR6i7ZCI5x3Pplclj67Vp+POh4vhjWZX60Mp4167Z8JhHxzLWKV4J3rk/Bn9h3ZiJp+q8 WDRo6eRS7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for blackrock.com
	`blackrock.com. 7200 IN DNSKEY ( 257 3 13 VPlEhSNV/VqZ/V9an3vElO9j0paFGJNtyENTQquAiIVA4GC/EuIgWqMPik7JPfrhHFpQjnu2oIib FzFhk4KfJQ== ) ; Key ID = 37972`
	`blackrock.com. 7200 IN DNSKEY ( 257 3 13 VVIJTpimzPMS71r3mYDW5G8nX1T/NocQti9x0rt98B/ZaXfcRXtZLGAlZ9q4PgWydSgF3JZNkpvP Tp3pad23Ug== ) ; Key ID = 30508`
	`blackrock.com. 7200 IN DNSKEY ( 256 3 13 KzBiewb/8pxk/4hWuzSf/FQjNgcSFqSvsNPUr+zohYZ7Kz3Cb5vZ2cvSEBwacgo0NIszkkAnIenC zs+sYBRLIw== ) ; Key ID = 6040`
	`blackrock.com. 7200 IN DNSKEY ( 256 3 13 wLXYhnp+KjTVBNRJV+0TYyrOF3yjgGmQgNL4ZbyMv+jg4nrTNLkgcZ6G+dP8TLZOMSfP4o8Y3R5q l4xmYBxi4A== ) ; Key ID = 48823`
	DNSKEY=37972/SEP is now in the chain-of-trust
	DS=37972/SHA-256 verifies DNSKEY=37972/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`blackrock.com. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240524153706 20240521143706 30508 blackrock.com. 1cH4MKoXVQdzrvXLZgxRBIYBle5M1jtyfHjemUGj0dlXhCbpVgMBr998ane7E8AwF47SczMnraim 5zF4m8bObg== )`
	`blackrock.com. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240524153706 20240521143706 37972 blackrock.com. J0K7ahGaR6i7ZCI5x3Pplclj67Vp+POh4vhjWZX60Mp4167Z8JhHxzLWKV4J3rk/Bn9h3ZiJp+q8 WDRo6eRS7w== )`
	RRSIG=30508 and DNSKEY=30508/SEP verifies the DNSKEY RRset
	RRSIG=37972 and DNSKEY=37972/SEP verifies the DNSKEY RRset
	DNSKEY=30508/SEP is now in the chain-of-trust
	DNSKEY=6040 is now in the chain-of-trust
	DNSKEY=48823 is now in the chain-of-trust
	Query to ns6.blackrock.com for blackrock.com/A
	Received 183 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 183 octets ;; HEADER SECTION ;; id = 11643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns3.blackrock.com for blackrock.com/SOA
	Received 1161 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 1161 octets ;; HEADER SECTION ;; id = 8060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN SOA ;; ANSWER SECTION (2 records) blackrock.com. 3600 IN SOA ( ns1.blackrock.com. netops.blackrock.com. 2024052001 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) blackrock.com. 3600 IN RRSIG ( SOA 13 2 3600 20240524153706 20240521143706 6040 blackrock.com. DyMtm1XRqH6I9VDIDV2oQkNeV56d/YKGvAicC+M0cWr8oDulUyL2oTHc6fB3FVk+lspBhNh5zDC2 G72yGjeFSA== ) ;; AUTHORITY SECTION (7 records) blackrock.com. 86400 IN NS ns4.blackrock.com. blackrock.com. 86400 IN NS ns2.blackrock.com. blackrock.com. 86400 IN NS ns6.blackrock.com. blackrock.com. 86400 IN NS ns5.blackrock.com. blackrock.com. 86400 IN NS ns1.blackrock.com. blackrock.com. 86400 IN NS ns3.blackrock.com. blackrock.com. 86400 IN RRSIG ( NS 13 2 86400 20240524153706 20240521143706 6040 blackrock.com. oefEq2wmvNuZI3FnexYQKcdA7fpsDz0CoJmglDR+Fl3VsZ/YlGGUJWcjHDOstxGPI/KuSBSY11DE xhcnWsd9OA== ) ;; ADDITIONAL SECTION (13 records) ns4.blackrock.com. 300 IN A 184.26.160.66 ns4.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. 1xOIKnhpdsBxbtytzT8Z7d6uGDt9wmZrt2LIn/4gEfwyGOjoXzejn7pGSkuYZUFsXOV5sNe/iotT +hwUoL7EZg== ) ns3.blackrock.com. 300 IN A 23.61.199.64 ns3.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. wYeEqJDZQZE5uoz56u1Vhj1ncJ428cWBkhlGMXNvRKgEjXTOtgjqiIWnt2IMtatCVrQhjPtkrLNR v25k9bL0UQ== ) ns5.blackrock.com. 300 IN A 23.211.132.67 ns5.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. GWMN1cfeUyeBR9r7ATYDYj+GmJuJQJ0zHcJ6u5hngugOXYcwTR2RAps7fKX7RXmMnbgKxb2Epx/R EyWe4KTdMQ== ) ns6.blackrock.com. 300 IN A 95.100.173.65 ns6.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. SEILPF7BbrURk/stIpCgdNB5GjPiWvz0yfmGY9gvJwMB3SyTNntR1/TMKX3rnEtklg+ukg7kCDyp +NEP+JR71A== ) ns1.blackrock.com. 300 IN A 193.108.91.23 ns1.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. CaiMM6xooTJW+HGjOAgMac/TG+V9Wg2VhL0VHWNMqfJjpCNxQSmxVq66dNtLHKheGqQVdT3pGwFM zBetsnyTfA== ) ns2.blackrock.com. 300 IN A 96.7.49.67 ns2.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. G1ogszKa0j+P/apMiRyejdcrS/M4gV1FiRmnU5Vqzc5B8U3QJzORNPWs0bRWZsHZuojXUIXaKGtZ V8/hJ7BiEw== ) ;; { "EDNS-VERSION": 0 }
	Query to ns5.blackrock.com for blackrock.com/SOA
	Received 1161 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 1161 octets ;; HEADER SECTION ;; id = 14532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN SOA ;; ANSWER SECTION (2 records) blackrock.com. 3600 IN SOA ( ns1.blackrock.com. netops.blackrock.com. 2024052001 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) blackrock.com. 3600 IN RRSIG ( SOA 13 2 3600 20240524153706 20240521143706 6040 blackrock.com. DyMtm1XRqH6I9VDIDV2oQkNeV56d/YKGvAicC+M0cWr8oDulUyL2oTHc6fB3FVk+lspBhNh5zDC2 G72yGjeFSA== ) ;; AUTHORITY SECTION (7 records) blackrock.com. 86400 IN NS ns3.blackrock.com. blackrock.com. 86400 IN NS ns5.blackrock.com. blackrock.com. 86400 IN NS ns4.blackrock.com. blackrock.com. 86400 IN NS ns6.blackrock.com. blackrock.com. 86400 IN NS ns1.blackrock.com. blackrock.com. 86400 IN NS ns2.blackrock.com. blackrock.com. 86400 IN RRSIG ( NS 13 2 86400 20240524153706 20240521143706 6040 blackrock.com. oefEq2wmvNuZI3FnexYQKcdA7fpsDz0CoJmglDR+Fl3VsZ/YlGGUJWcjHDOstxGPI/KuSBSY11DE xhcnWsd9OA== ) ;; ADDITIONAL SECTION (13 records) ns3.blackrock.com. 300 IN A 23.61.199.64 ns3.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. wYeEqJDZQZE5uoz56u1Vhj1ncJ428cWBkhlGMXNvRKgEjXTOtgjqiIWnt2IMtatCVrQhjPtkrLNR v25k9bL0UQ== ) ns4.blackrock.com. 300 IN A 184.26.160.66 ns4.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. 1xOIKnhpdsBxbtytzT8Z7d6uGDt9wmZrt2LIn/4gEfwyGOjoXzejn7pGSkuYZUFsXOV5sNe/iotT +hwUoL7EZg== ) ns5.blackrock.com. 300 IN A 23.211.132.67 ns5.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. GWMN1cfeUyeBR9r7ATYDYj+GmJuJQJ0zHcJ6u5hngugOXYcwTR2RAps7fKX7RXmMnbgKxb2Epx/R EyWe4KTdMQ== ) ns2.blackrock.com. 300 IN A 96.7.49.67 ns2.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. G1ogszKa0j+P/apMiRyejdcrS/M4gV1FiRmnU5Vqzc5B8U3QJzORNPWs0bRWZsHZuojXUIXaKGtZ V8/hJ7BiEw== ) ns6.blackrock.com. 300 IN A 95.100.173.65 ns6.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. SEILPF7BbrURk/stIpCgdNB5GjPiWvz0yfmGY9gvJwMB3SyTNntR1/TMKX3rnEtklg+ukg7kCDyp +NEP+JR71A== ) ns1.blackrock.com. 300 IN A 193.108.91.23 ns1.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. CaiMM6xooTJW+HGjOAgMac/TG+V9Wg2VhL0VHWNMqfJjpCNxQSmxVq66dNtLHKheGqQVdT3pGwFM zBetsnyTfA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.blackrock.com for blackrock.com/SOA
	Received 1161 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 1161 octets ;; HEADER SECTION ;; id = 44693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN SOA ;; ANSWER SECTION (2 records) blackrock.com. 3600 IN SOA ( ns1.blackrock.com. netops.blackrock.com. 2024052001 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) blackrock.com. 3600 IN RRSIG ( SOA 13 2 3600 20240524153706 20240521143706 6040 blackrock.com. DyMtm1XRqH6I9VDIDV2oQkNeV56d/YKGvAicC+M0cWr8oDulUyL2oTHc6fB3FVk+lspBhNh5zDC2 G72yGjeFSA== ) ;; AUTHORITY SECTION (7 records) blackrock.com. 86400 IN NS ns4.blackrock.com. blackrock.com. 86400 IN NS ns3.blackrock.com. blackrock.com. 86400 IN NS ns6.blackrock.com. blackrock.com. 86400 IN NS ns2.blackrock.com. blackrock.com. 86400 IN NS ns5.blackrock.com. blackrock.com. 86400 IN NS ns1.blackrock.com. blackrock.com. 86400 IN RRSIG ( NS 13 2 86400 20240524153706 20240521143706 6040 blackrock.com. oefEq2wmvNuZI3FnexYQKcdA7fpsDz0CoJmglDR+Fl3VsZ/YlGGUJWcjHDOstxGPI/KuSBSY11DE xhcnWsd9OA== ) ;; ADDITIONAL SECTION (13 records) ns2.blackrock.com. 300 IN A 96.7.49.67 ns2.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. G1ogszKa0j+P/apMiRyejdcrS/M4gV1FiRmnU5Vqzc5B8U3QJzORNPWs0bRWZsHZuojXUIXaKGtZ V8/hJ7BiEw== ) ns6.blackrock.com. 300 IN A 95.100.173.65 ns6.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. SEILPF7BbrURk/stIpCgdNB5GjPiWvz0yfmGY9gvJwMB3SyTNntR1/TMKX3rnEtklg+ukg7kCDyp +NEP+JR71A== ) ns3.blackrock.com. 300 IN A 23.61.199.64 ns3.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. wYeEqJDZQZE5uoz56u1Vhj1ncJ428cWBkhlGMXNvRKgEjXTOtgjqiIWnt2IMtatCVrQhjPtkrLNR v25k9bL0UQ== ) ns4.blackrock.com. 300 IN A 184.26.160.66 ns4.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. 1xOIKnhpdsBxbtytzT8Z7d6uGDt9wmZrt2LIn/4gEfwyGOjoXzejn7pGSkuYZUFsXOV5sNe/iotT +hwUoL7EZg== ) ns1.blackrock.com. 300 IN A 193.108.91.23 ns1.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. CaiMM6xooTJW+HGjOAgMac/TG+V9Wg2VhL0VHWNMqfJjpCNxQSmxVq66dNtLHKheGqQVdT3pGwFM zBetsnyTfA== ) ns5.blackrock.com. 300 IN A 23.211.132.67 ns5.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. GWMN1cfeUyeBR9r7ATYDYj+GmJuJQJ0zHcJ6u5hngugOXYcwTR2RAps7fKX7RXmMnbgKxb2Epx/R EyWe4KTdMQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.blackrock.com for blackrock.com/SOA
	Received 1161 bytes from 96.7.49.67
	;; Response received from [96.7.49.67] 1161 octets ;; HEADER SECTION ;; id = 12003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN SOA ;; ANSWER SECTION (2 records) blackrock.com. 3600 IN SOA ( ns1.blackrock.com. netops.blackrock.com. 2024052001 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) blackrock.com. 3600 IN RRSIG ( SOA 13 2 3600 20240524153706 20240521143706 6040 blackrock.com. DyMtm1XRqH6I9VDIDV2oQkNeV56d/YKGvAicC+M0cWr8oDulUyL2oTHc6fB3FVk+lspBhNh5zDC2 G72yGjeFSA== ) ;; AUTHORITY SECTION (7 records) blackrock.com. 86400 IN NS ns1.blackrock.com. blackrock.com. 86400 IN NS ns4.blackrock.com. blackrock.com. 86400 IN NS ns5.blackrock.com. blackrock.com. 86400 IN NS ns6.blackrock.com. blackrock.com. 86400 IN NS ns2.blackrock.com. blackrock.com. 86400 IN NS ns3.blackrock.com. blackrock.com. 86400 IN RRSIG ( NS 13 2 86400 20240524153706 20240521143706 6040 blackrock.com. oefEq2wmvNuZI3FnexYQKcdA7fpsDz0CoJmglDR+Fl3VsZ/YlGGUJWcjHDOstxGPI/KuSBSY11DE xhcnWsd9OA== ) ;; ADDITIONAL SECTION (13 records) ns6.blackrock.com. 300 IN A 95.100.173.65 ns6.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. SEILPF7BbrURk/stIpCgdNB5GjPiWvz0yfmGY9gvJwMB3SyTNntR1/TMKX3rnEtklg+ukg7kCDyp +NEP+JR71A== ) ns5.blackrock.com. 300 IN A 23.211.132.67 ns5.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. GWMN1cfeUyeBR9r7ATYDYj+GmJuJQJ0zHcJ6u5hngugOXYcwTR2RAps7fKX7RXmMnbgKxb2Epx/R EyWe4KTdMQ== ) ns3.blackrock.com. 300 IN A 23.61.199.64 ns3.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. wYeEqJDZQZE5uoz56u1Vhj1ncJ428cWBkhlGMXNvRKgEjXTOtgjqiIWnt2IMtatCVrQhjPtkrLNR v25k9bL0UQ== ) ns2.blackrock.com. 300 IN A 96.7.49.67 ns2.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. G1ogszKa0j+P/apMiRyejdcrS/M4gV1FiRmnU5Vqzc5B8U3QJzORNPWs0bRWZsHZuojXUIXaKGtZ V8/hJ7BiEw== ) ns4.blackrock.com. 300 IN A 184.26.160.66 ns4.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. 1xOIKnhpdsBxbtytzT8Z7d6uGDt9wmZrt2LIn/4gEfwyGOjoXzejn7pGSkuYZUFsXOV5sNe/iotT +hwUoL7EZg== ) ns1.blackrock.com. 300 IN A 193.108.91.23 ns1.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. CaiMM6xooTJW+HGjOAgMac/TG+V9Wg2VhL0VHWNMqfJjpCNxQSmxVq66dNtLHKheGqQVdT3pGwFM zBetsnyTfA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.blackrock.com for blackrock.com/SOA
	Received 1161 bytes from 193.108.91.23
	;; Response received from [193.108.91.23] 1161 octets ;; HEADER SECTION ;; id = 64418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN SOA ;; ANSWER SECTION (2 records) blackrock.com. 3600 IN SOA ( ns1.blackrock.com. netops.blackrock.com. 2024052001 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) blackrock.com. 3600 IN RRSIG ( SOA 13 2 3600 20240524153706 20240521143706 6040 blackrock.com. DyMtm1XRqH6I9VDIDV2oQkNeV56d/YKGvAicC+M0cWr8oDulUyL2oTHc6fB3FVk+lspBhNh5zDC2 G72yGjeFSA== ) ;; AUTHORITY SECTION (7 records) blackrock.com. 86400 IN NS ns6.blackrock.com. blackrock.com. 86400 IN NS ns2.blackrock.com. blackrock.com. 86400 IN NS ns4.blackrock.com. blackrock.com. 86400 IN NS ns3.blackrock.com. blackrock.com. 86400 IN NS ns1.blackrock.com. blackrock.com. 86400 IN NS ns5.blackrock.com. blackrock.com. 86400 IN RRSIG ( NS 13 2 86400 20240524153706 20240521143706 6040 blackrock.com. oefEq2wmvNuZI3FnexYQKcdA7fpsDz0CoJmglDR+Fl3VsZ/YlGGUJWcjHDOstxGPI/KuSBSY11DE xhcnWsd9OA== ) ;; ADDITIONAL SECTION (13 records) ns3.blackrock.com. 300 IN A 23.61.199.64 ns3.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. wYeEqJDZQZE5uoz56u1Vhj1ncJ428cWBkhlGMXNvRKgEjXTOtgjqiIWnt2IMtatCVrQhjPtkrLNR v25k9bL0UQ== ) ns6.blackrock.com. 300 IN A 95.100.173.65 ns6.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. SEILPF7BbrURk/stIpCgdNB5GjPiWvz0yfmGY9gvJwMB3SyTNntR1/TMKX3rnEtklg+ukg7kCDyp +NEP+JR71A== ) ns5.blackrock.com. 300 IN A 23.211.132.67 ns5.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. GWMN1cfeUyeBR9r7ATYDYj+GmJuJQJ0zHcJ6u5hngugOXYcwTR2RAps7fKX7RXmMnbgKxb2Epx/R EyWe4KTdMQ== ) ns1.blackrock.com. 300 IN A 193.108.91.23 ns1.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. CaiMM6xooTJW+HGjOAgMac/TG+V9Wg2VhL0VHWNMqfJjpCNxQSmxVq66dNtLHKheGqQVdT3pGwFM zBetsnyTfA== ) ns2.blackrock.com. 300 IN A 96.7.49.67 ns2.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. G1ogszKa0j+P/apMiRyejdcrS/M4gV1FiRmnU5Vqzc5B8U3QJzORNPWs0bRWZsHZuojXUIXaKGtZ V8/hJ7BiEw== ) ns4.blackrock.com. 300 IN A 184.26.160.66 ns4.blackrock.com. 300 IN RRSIG ( A 13 3 300 20240524153706 20240521143706 6040 blackrock.com. 1xOIKnhpdsBxbtytzT8Z7d6uGDt9wmZrt2LIn/4gEfwyGOjoXzejn7pGSkuYZUFsXOV5sNe/iotT +hwUoL7EZg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns6.blackrock.com for blackrock.com/A
	Received 183 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 183 octets ;; HEADER SECTION ;; id = 59431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.13.199
	blackrock.com A RR has value 69.52.2.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

blackrock.com

	Query to ns5.blackrock.com for blackrock.com/A
	Received 183 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 183 octets ;; HEADER SECTION ;; id = 60950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns5.blackrock.com for blackrock.com/A
	Received 183 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 183 octets ;; HEADER SECTION ;; id = 21347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.13.199
	blackrock.com A RR has value 69.52.2.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

blackrock.com

	Query to ns2.blackrock.com for blackrock.com/A
	Received 183 bytes from 96.7.49.67
	;; Response received from [96.7.49.67] 183 octets ;; HEADER SECTION ;; id = 32225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns2.blackrock.com for blackrock.com/A
	Received 183 bytes from 96.7.49.67
	;; Response received from [96.7.49.67] 183 octets ;; HEADER SECTION ;; id = 54385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.13.199
	blackrock.com A RR has value 69.52.2.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

blackrock.com

	Query to ns3.blackrock.com for blackrock.com/A
	Received 183 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 183 octets ;; HEADER SECTION ;; id = 17701 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns3.blackrock.com for blackrock.com/A
	Received 183 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 183 octets ;; HEADER SECTION ;; id = 12643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.13.199
	blackrock.com A RR has value 69.52.2.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

blackrock.com

	Query to ns1.blackrock.com for blackrock.com/A
	Received 183 bytes from 193.108.91.23
	;; Response received from [193.108.91.23] 183 octets ;; HEADER SECTION ;; id = 29554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns1.blackrock.com for blackrock.com/A
	Received 183 bytes from 193.108.91.23
	;; Response received from [193.108.91.23] 183 octets ;; HEADER SECTION ;; id = 14226 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.13.199
	blackrock.com A RR has value 69.52.2.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

blackrock.com

	Query to ns4.blackrock.com for blackrock.com/A
	Received 183 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 183 octets ;; HEADER SECTION ;; id = 59389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.blackrock.com is authoritative for blackrock.com
	Found RRSIG signed by blackrock.com zone
	Query to ns4.blackrock.com for blackrock.com/A
	Received 183 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 183 octets ;; HEADER SECTION ;; id = 41628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; blackrock.com. IN A ;; ANSWER SECTION (3 records) blackrock.com. 300 IN A 69.52.2.199 blackrock.com. 300 IN A 69.52.13.199 blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	blackrock.com A RR has value 69.52.2.199
	blackrock.com A RR has value 69.52.13.199
	Found 1 RRSIGs over A RRset
	`blackrock.com. 300 IN RRSIG ( A 13 2 300 20240524153706 20240521143706 6040 blackrock.com. N50CEkLH/z9UDnA2QRIpnjcx9ljwWkq7Ke9IVw1F2V29tLN/f5RO7Ifo0SBb6DKABz8eyWVtnSRb eiYPexLBjQ== )`
	RRSIG=6040 and DNSKEY=6040 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test blackrock.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: