DNSSEC Debugger - dlv.isc.org

Domain Name:

Time: 2024-05-12 21:26:08 UTC

Analyzing DNSSEC problems for dlv.isc.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 23992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to a.root-servers.net for dlv.isc.org/A
	Received 777 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 777 octets ;; HEADER SECTION ;; id = 17779 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . UjnfA27wDLgtPI/q6SsbdoUWtXTjLf2jTJC/Q20CMXNNQmtth1mQtkGLh+B/nUe4L0Z1haKN+Z/e hzn3FmrLY2eTouTs3EMv2mwT6P6zuZaRgbuSlXvnWnbSi6fJlVwqSZYHpuhr4nYbYQAbcVceLxE7 BLDZ/TaqOZUxDnYv1p56aIowRApGIXkCEsteumpd1HJtfyBR+ofy5nKwpbfNix94lHLN8U4OkBjV 0LMD/CpFDGhjYP06kXTV9+13JE6nsdtlDrZCDPhdbPpfN1Izn9svJ19yw9gH/NUp5dtCZHNar6qz aQxSKIBLeWSM2AcdgIQPBulG9bgBLKiPGG7gyA== ) ;; ADDITIONAL SECTION (13 records) a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for org/DNSKEY
	Received 772 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 772 octets ;; HEADER SECTION ;; id = 53394 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . UjnfA27wDLgtPI/q6SsbdoUWtXTjLf2jTJC/Q20CMXNNQmtth1mQtkGLh+B/nUe4L0Z1haKN+Z/e hzn3FmrLY2eTouTs3EMv2mwT6P6zuZaRgbuSlXvnWnbSi6fJlVwqSZYHpuhr4nYbYQAbcVceLxE7 BLDZ/TaqOZUxDnYv1p56aIowRApGIXkCEsteumpd1HJtfyBR+ofy5nKwpbfNix94lHLN8U4OkBjV 0LMD/CpFDGhjYP06kXTV9+13JE6nsdtlDrZCDPhdbPpfN1Izn9svJ19yw9gH/NUp5dtCZHNar6qz aQxSKIBLeWSM2AcdgIQPBulG9bgBLKiPGG7gyA== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to e.root-servers.net for org/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 33788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . UjnfA27wDLgtPI/q6SsbdoUWtXTjLf2jTJC/Q20CMXNNQmtth1mQtkGLh+B/nUe4L0Z1haKN+Z/e hzn3FmrLY2eTouTs3EMv2mwT6P6zuZaRgbuSlXvnWnbSi6fJlVwqSZYHpuhr4nYbYQAbcVceLxE7 BLDZ/TaqOZUxDnYv1p56aIowRApGIXkCEsteumpd1HJtfyBR+ofy5nKwpbfNix94lHLN8U4OkBjV 0LMD/CpFDGhjYP06kXTV9+13JE6nsdtlDrZCDPhdbPpfN1Izn9svJ19yw9gH/NUp5dtCZHNar6qz aQxSKIBLeWSM2AcdgIQPBulG9bgBLKiPGG7gyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . UjnfA27wDLgtPI/q6SsbdoUWtXTjLf2jTJC/Q20CMXNNQmtth1mQtkGLh+B/nUe4L0Z1haKN+Z/e hzn3FmrLY2eTouTs3EMv2mwT6P6zuZaRgbuSlXvnWnbSi6fJlVwqSZYHpuhr4nYbYQAbcVceLxE7 BLDZ/TaqOZUxDnYv1p56aIowRApGIXkCEsteumpd1HJtfyBR+ofy5nKwpbfNix94lHLN8U4OkBjV 0LMD/CpFDGhjYP06kXTV9+13JE6nsdtlDrZCDPhdbPpfN1Izn9svJ19yw9gH/NUp5dtCZHNar6qz aQxSKIBLeWSM2AcdgIQPBulG9bgBLKiPGG7gyA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a2.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 895 octets ;; HEADER SECTION ;; id = 62898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093 org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=3093 is now in the chain-of-trust
	DNSKEY=55149 is now in the chain-of-trust
	Query to b0.org.afilias-nst.org for dlv.isc.org/A
	Received 503 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 503 octets ;; HEADER SECTION ;; id = 49858 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) isc.org. 3600 IN NS ns1.isc.org. isc.org. 3600 IN NS nsp.dnsnode.net. isc.org. 3600 IN NS ns.isc.afilias-nst.info. isc.org. 3600 IN NS ns3.isc.org. isc.org. 3600 IN NS ns2.isc.org. isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. ALSOR5bLbJzaVUQjeqNi99N6xZaX9PW8wMQib0r1T+418afuRDFNIIPagSGUoGRYFWac08P29wuR vkjLT/tqvykfjYearj/OSO9J6teGu79WsQ0UsrE0zeyy2TNyQT5is8rldp6/l0tSVX6+qetbb2DJ v3X2eKpmK5RacaZqcGc= ) ;; ADDITIONAL SECTION (7 records) ns1.isc.org. 3600 IN A 149.20.2.26 ns2.isc.org. 3600 IN A 199.6.1.52 ns3.isc.org. 3600 IN A 51.75.79.143 ns1.isc.org. 3600 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 3600 IN AAAA 2001:500:60:d::52 ns3.isc.org. 3600 IN AAAA 2001:41d0:701:1100::2c92 ;; { "EDNS-VERSION": 0 }
	Query to d0.org.afilias-nst.org for isc.org/DNSKEY
	Received 499 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 499 octets ;; HEADER SECTION ;; id = 22068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) isc.org. 3600 IN NS nsp.dnsnode.net. isc.org. 3600 IN NS ns1.isc.org. isc.org. 3600 IN NS ns.isc.afilias-nst.info. isc.org. 3600 IN NS ns3.isc.org. isc.org. 3600 IN NS ns2.isc.org. isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. ALSOR5bLbJzaVUQjeqNi99N6xZaX9PW8wMQib0r1T+418afuRDFNIIPagSGUoGRYFWac08P29wuR vkjLT/tqvykfjYearj/OSO9J6teGu79WsQ0UsrE0zeyy2TNyQT5is8rldp6/l0tSVX6+qetbb2DJ v3X2eKpmK5RacaZqcGc= ) ;; ADDITIONAL SECTION (7 records) ns1.isc.org. 3600 IN A 149.20.2.26 ns2.isc.org. 3600 IN A 199.6.1.52 ns3.isc.org. 3600 IN A 51.75.79.143 ns1.isc.org. 3600 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 3600 IN AAAA 2001:500:60:d::52 ns3.isc.org. 3600 IN AAAA 2001:41d0:701:1100::2c92 ;; { "EDNS-VERSION": 0 }
	Found child zone isc.org

isc.org

	Checking DS between org and isc.org
	Query to c0.org.afilias-nst.info for isc.org/DS
	Received 247 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 247 octets ;; HEADER SECTION ;; id = 58025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DS ;; ANSWER SECTION (2 records) isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. ALSOR5bLbJzaVUQjeqNi99N6xZaX9PW8wMQib0r1T+418afuRDFNIIPagSGUoGRYFWac08P29wuR vkjLT/tqvykfjYearj/OSO9J6teGu79WsQ0UsrE0zeyy2TNyQT5is8rldp6/l0tSVX6+qetbb2DJ v3X2eKpmK5RacaZqcGc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for isc.org in the org zone
	DS=7250/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. ALSOR5bLbJzaVUQjeqNi99N6xZaX9PW8wMQib0r1T+418afuRDFNIIPagSGUoGRYFWac08P29wuR vkjLT/tqvykfjYearj/OSO9J6teGu79WsQ0UsrE0zeyy2TNyQT5is8rldp6/l0tSVX6+qetbb2DJ v3X2eKpmK5RacaZqcGc= )`
	RRSIG=3093 and DNSKEY=3093 verifies the DS RRset
	DS=7250/SHA-256 is now in the chain-of-trust
	`isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 )`
	Query to ns1.isc.org for isc.org/DNSKEY
	Received 299 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 299 octets ;; HEADER SECTION ;; id = 2124 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DNSKEY ;; ANSWER SECTION (3 records) isc.org. 3600 IN DNSKEY ( 257 3 13 zEoOfseNFDM+E8spu7RR2Ar/GzFqAehe4yapWLiv6McIUF6xmI5GcIQ3+uLAizS2cNWHt6EArVj8 ogjtrRXwfw== ) ; Key ID = 7250 isc.org. 3600 IN DNSKEY ( 256 3 13 1CS+VQcRn4lGTK+b3wDjVO0hFDx4DV7s3Q1Fwxuq9ahd255FRny4f4vdZOMMMxpbRH5Zhwoh/706 IV0v9JwjlA== ) ; Key ID = 27566 isc.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240521194440 20240507185534 7250 isc.org. 0TNeVgA8M73JUjly976SdGNycTrgcSV0DFHPeHojty5tL5M4S4fOBxniLEkKarpL1MOAtUdlky0T UW5f8jpFww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for isc.org
	`isc.org. 3600 IN DNSKEY ( 257 3 13 zEoOfseNFDM+E8spu7RR2Ar/GzFqAehe4yapWLiv6McIUF6xmI5GcIQ3+uLAizS2cNWHt6EArVj8 ogjtrRXwfw== ) ; Key ID = 7250`
	`isc.org. 3600 IN DNSKEY ( 256 3 13 1CS+VQcRn4lGTK+b3wDjVO0hFDx4DV7s3Q1Fwxuq9ahd255FRny4f4vdZOMMMxpbRH5Zhwoh/706 IV0v9JwjlA== ) ; Key ID = 27566`
	DNSKEY=7250/SEP is now in the chain-of-trust
	DS=7250/SHA-256 verifies DNSKEY=7250/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`isc.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240521194440 20240507185534 7250 isc.org. 0TNeVgA8M73JUjly976SdGNycTrgcSV0DFHPeHojty5tL5M4S4fOBxniLEkKarpL1MOAtUdlky0T UW5f8jpFww== )`
	RRSIG=7250 and DNSKEY=7250/SEP verifies the DNSKEY RRset
	DNSKEY=27566 is now in the chain-of-trust
	Query to ns1.isc.org for dlv.isc.org/A
	Received 471 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 471 octets ;; HEADER SECTION ;; id = 16524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.isc.org is authoritative for dlv.isc.org
	Query to ns3.isc.org for dlv.isc.org/DNSKEY
	Received 765 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 765 octets ;; HEADER SECTION ;; id = 34577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN DNSKEY ;; ANSWER SECTION (3 records) dlv.isc.org. 3600 IN DNSKEY ( 256 3 5 BEAAAAOlYGw53D+f01yCL5JsP0SB6EjYrnd0JYRBooAaGPT+Q0kpiN+7GviFh+nIazoB8e2Yv7mu pgqkmIjObdcbGstYpUltdECdNpNmBvASKB9SBdtGeRvXXpORi3Qyxb9kHGG7SpzyYbc+KDVKnzYH B94pvqu3ZZpPFPBFtCibp/mkhw== ) ; Key ID = 64263 dlv.isc.org. 3600 IN DNSKEY ( 257 3 5 BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2brhQv5rN32RKtMzX6Mj7 0jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te 9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URkY62Z fkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboMQKtUdvNXDrYJDSHZws3xiRXF 1Rf+al9UmZfSav/4NWLKjHzpT59k/VStTDN0YUuWrBNh ) ; Key ID = 19297 dlv.isc.org. 3600 IN RRSIG ( DNSKEY 5 3 3600 20240521175226 20240507171755 19297 dlv.isc.org. Qrh/FCqA8JLX2rYmOls/wWU/FUvs53yU2UDVSS5so0fvRFiejmOwH6xAAKhIU216Hydk9wN5asek Ahf37qUptNWqZsvHkBRqvZ3bzrXa+2BoRgwCPnhaJ17/YPeohbDvzx8Dj9ysa4k6zg4b/RT3bliO cTpzaZiduneilQiOLyOrDCFu1lbWH1+IwEG3BhcW9AeL1jQC4kOkudaRV1pYLBFWpv1LpEUaE4ZS BTtxtP3Iw++pW5g+WzVMinHK2PihTzBH8aHc2o1B3xdGxtLDFzwgkHl/ytSDwnPzV+Y5Trp5p5pE VRhuejUQFZRIBc/TwjxzE0EVFZxYELo3ukW4kw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dlv.isc.org
	Attempting to learn nameservers for dlv.isc.org
	Query to ns1.isc.org for dlv.isc.org/NS
	Received 383 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 383 octets ;; HEADER SECTION ;; id = 39236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN NS ;; ANSWER SECTION (8 records) dlv.isc.org. 300 IN NS ns2.isc.ultradns.net. dlv.isc.org. 300 IN NS ns1.isc.org. dlv.isc.org. 300 IN NS ns1.isc.ultradns.net. dlv.isc.org. 300 IN NS ns3.isc.org. dlv.isc.org. 300 IN NS ns.isc.afilias-nst.info. dlv.isc.org. 300 IN NS ns2.isc.org. dlv.isc.org. 300 IN NS nsp.dnsnode.net. dlv.isc.org. 300 IN RRSIG ( NS 5 3 300 20240520172557 20240506172209 64263 dlv.isc.org. cAT0JqgdpRfdGqrdIZ9xGZ2qXoWS0hkwrjhUKZTAXzIQgtkmwLn+6zoiDRFRPiQnkiphhAJ+/Gpd dyLq5bJC8A/UO3MPuXs4UZFeS7zd6Q6z4gLxZNu4vcVWvAGGpx1x08b/SLVzjMoyNQLPfa9ehV0s u1qTQ6ohY+Ab73POhW4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found dlv.isc.org nameservers: ns2.isc.ultradns.net, ns1.isc.org, ns1.isc.ultradns.net, ns3.isc.org, ns.isc.afilias-nst.info, ns2.isc.org, nsp.dnsnode.net

dlv.isc.org

	Checking DS between isc.org and dlv.isc.org
	Query to ns1.isc.org for dlv.isc.org/DS
	Received 227 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 227 octets ;; HEADER SECTION ;; id = 4913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN DS ;; ANSWER SECTION (3 records) dlv.isc.org. 7200 IN DS 19297 5 1 7d480dbef530374d8a4333fcb22106eb10013b46 dlv.isc.org. 7200 IN DS ( 19297 5 2 a11d16f6733983e159edf8053b2fb57b479d81a309a50eaa79a81af48a47c617 ) dlv.isc.org. 7200 IN RRSIG ( DS 13 3 7200 20240524185754 20240510183545 27566 isc.org. ebam99GYn/oAYlho5EMFRrReQKhbMUfWewCH6ztKMU+cNzdvSjc7lVeDYc5eNRNtXvuqrB6fHVnp 6N3DpVn31Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for dlv.isc.org in the isc.org zone
	DS=19297/SHA-1 uses a deprecated digest algorithm
	DS=19297/SHA-1 has algorithm RSASHA1
	DS=19297/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`dlv.isc.org. 7200 IN RRSIG ( DS 13 3 7200 20240524185754 20240510183545 27566 isc.org. ebam99GYn/oAYlho5EMFRrReQKhbMUfWewCH6ztKMU+cNzdvSjc7lVeDYc5eNRNtXvuqrB6fHVnp 6N3DpVn31Q== )`
	RRSIG=27566 and DNSKEY=27566 verifies the DS RRset
	DS=19297/SHA-1 is now in the chain-of-trust
	`dlv.isc.org. 7200 IN DS 19297 5 1 7d480dbef530374d8a4333fcb22106eb10013b46`
	`dlv.isc.org. 7200 IN DS ( 19297 5 2 a11d16f6733983e159edf8053b2fb57b479d81a309a50eaa79a81af48a47c617 )`
	Query to ns1.isc.ultradns.net for dlv.isc.org/DNSKEY
	Received 765 bytes from 156.154.100.23
	;; Response received from [156.154.100.23] 765 octets ;; HEADER SECTION ;; id = 18025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN DNSKEY ;; ANSWER SECTION (3 records) dlv.isc.org. 3600 IN DNSKEY ( 256 3 5 BEAAAAOlYGw53D+f01yCL5JsP0SB6EjYrnd0JYRBooAaGPT+Q0kpiN+7GviFh+nIazoB8e2Yv7mu pgqkmIjObdcbGstYpUltdECdNpNmBvASKB9SBdtGeRvXXpORi3Qyxb9kHGG7SpzyYbc+KDVKnzYH B94pvqu3ZZpPFPBFtCibp/mkhw== ) ; Key ID = 64263 dlv.isc.org. 3600 IN DNSKEY ( 257 3 5 BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2brhQv5rN32RKtMzX6Mj7 0jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te 9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URkY62Z fkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboMQKtUdvNXDrYJDSHZws3xiRXF 1Rf+al9UmZfSav/4NWLKjHzpT59k/VStTDN0YUuWrBNh ) ; Key ID = 19297 dlv.isc.org. 3600 IN RRSIG ( DNSKEY 5 3 3600 20240521175226 20240507171755 19297 dlv.isc.org. Qrh/FCqA8JLX2rYmOls/wWU/FUvs53yU2UDVSS5so0fvRFiejmOwH6xAAKhIU216Hydk9wN5asek Ahf37qUptNWqZsvHkBRqvZ3bzrXa+2BoRgwCPnhaJ17/YPeohbDvzx8Dj9ysa4k6zg4b/RT3bliO cTpzaZiduneilQiOLyOrDCFu1lbWH1+IwEG3BhcW9AeL1jQC4kOkudaRV1pYLBFWpv1LpEUaE4ZS BTtxtP3Iw++pW5g+WzVMinHK2PihTzBH8aHc2o1B3xdGxtLDFzwgkHl/ytSDwnPzV+Y5Trp5p5pE VRhuejUQFZRIBc/TwjxzE0EVFZxYELo3ukW4kw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dlv.isc.org
	`dlv.isc.org. 3600 IN DNSKEY ( 256 3 5 BEAAAAOlYGw53D+f01yCL5JsP0SB6EjYrnd0JYRBooAaGPT+Q0kpiN+7GviFh+nIazoB8e2Yv7mu pgqkmIjObdcbGstYpUltdECdNpNmBvASKB9SBdtGeRvXXpORi3Qyxb9kHGG7SpzyYbc+KDVKnzYH B94pvqu3ZZpPFPBFtCibp/mkhw== ) ; Key ID = 64263`
	`dlv.isc.org. 3600 IN DNSKEY ( 257 3 5 BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2brhQv5rN32RKtMzX6Mj7 0jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te 9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URkY62Z fkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboMQKtUdvNXDrYJDSHZws3xiRXF 1Rf+al9UmZfSav/4NWLKjHzpT59k/VStTDN0YUuWrBNh ) ; Key ID = 19297`
	DNSKEY=19297/SEP is now in the chain-of-trust
	DS=19297/SHA-1 verifies DNSKEY=19297/SEP
	DS=19297/SHA-256 verifies DNSKEY=19297/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dlv.isc.org. 3600 IN RRSIG ( DNSKEY 5 3 3600 20240521175226 20240507171755 19297 dlv.isc.org. Qrh/FCqA8JLX2rYmOls/wWU/FUvs53yU2UDVSS5so0fvRFiejmOwH6xAAKhIU216Hydk9wN5asek Ahf37qUptNWqZsvHkBRqvZ3bzrXa+2BoRgwCPnhaJ17/YPeohbDvzx8Dj9ysa4k6zg4b/RT3bliO cTpzaZiduneilQiOLyOrDCFu1lbWH1+IwEG3BhcW9AeL1jQC4kOkudaRV1pYLBFWpv1LpEUaE4ZS BTtxtP3Iw++pW5g+WzVMinHK2PihTzBH8aHc2o1B3xdGxtLDFzwgkHl/ytSDwnPzV+Y5Trp5p5pE VRhuejUQFZRIBc/TwjxzE0EVFZxYELo3ukW4kw== )`
	RRSIG=19297 and DNSKEY=19297/SEP verifies the DNSKEY RRset
	DNSKEY=64263 is now in the chain-of-trust
	Query to ns3.isc.org for dlv.isc.org/A
	Received 471 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 471 octets ;; HEADER SECTION ;; id = 5448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.isc.org is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns.isc.afilias-nst.info for dlv.isc.org/SOA
	Received 265 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 265 octets ;; HEADER SECTION ;; id = 18143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.isc.org for dlv.isc.org/SOA
	Received 608 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 608 octets ;; HEADER SECTION ;; id = 507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (8 records) dlv.isc.org. 300 IN NS ns2.isc.ultradns.net. dlv.isc.org. 300 IN NS ns1.isc.ultradns.net. dlv.isc.org. 300 IN NS ns2.isc.org. dlv.isc.org. 300 IN NS ns.isc.afilias-nst.info. dlv.isc.org. 300 IN NS ns3.isc.org. dlv.isc.org. 300 IN NS nsp.dnsnode.net. dlv.isc.org. 300 IN NS ns1.isc.org. dlv.isc.org. 300 IN RRSIG ( NS 5 3 300 20240520172557 20240506172209 64263 dlv.isc.org. cAT0JqgdpRfdGqrdIZ9xGZ2qXoWS0hkwrjhUKZTAXzIQgtkmwLn+6zoiDRFRPiQnkiphhAJ+/Gpd dyLq5bJC8A/UO3MPuXs4UZFeS7zd6Q6z4gLxZNu4vcVWvAGGpx1x08b/SLVzjMoyNQLPfa9ehV0s u1qTQ6ohY+Ab73POhW4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.isc.ultradns.net for dlv.isc.org/SOA
	Received 265 bytes from 156.154.101.23
	;; Response received from [156.154.101.23] 265 octets ;; HEADER SECTION ;; id = 4484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsp.dnsnode.net for dlv.isc.org/SOA
	Received 605 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 605 octets ;; HEADER SECTION ;; id = 46960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (8 records) dlv.isc.org. 300 IN NS ns.isc.afilias-nst.info. dlv.isc.org. 300 IN NS ns1.isc.org. dlv.isc.org. 300 IN NS ns1.isc.ultradns.net. dlv.isc.org. 300 IN NS ns2.isc.org. dlv.isc.org. 300 IN NS ns2.isc.ultradns.net. dlv.isc.org. 300 IN NS ns3.isc.org. dlv.isc.org. 300 IN NS nsp.dnsnode.net. dlv.isc.org. 300 IN RRSIG ( NS 5 3 300 20240520172557 20240506172209 64263 dlv.isc.org. cAT0JqgdpRfdGqrdIZ9xGZ2qXoWS0hkwrjhUKZTAXzIQgtkmwLn+6zoiDRFRPiQnkiphhAJ+/Gpd dyLq5bJC8A/UO3MPuXs4UZFeS7zd6Q6z4gLxZNu4vcVWvAGGpx1x08b/SLVzjMoyNQLPfa9ehV0s u1qTQ6ohY+Ab73POhW4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.isc.org for dlv.isc.org/SOA
	Received 608 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 608 octets ;; HEADER SECTION ;; id = 31963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (8 records) dlv.isc.org. 300 IN NS ns1.isc.ultradns.net. dlv.isc.org. 300 IN NS ns2.isc.org. dlv.isc.org. 300 IN NS ns3.isc.org. dlv.isc.org. 300 IN NS ns1.isc.org. dlv.isc.org. 300 IN NS nsp.dnsnode.net. dlv.isc.org. 300 IN NS ns.isc.afilias-nst.info. dlv.isc.org. 300 IN NS ns2.isc.ultradns.net. dlv.isc.org. 300 IN RRSIG ( NS 5 3 300 20240520172557 20240506172209 64263 dlv.isc.org. cAT0JqgdpRfdGqrdIZ9xGZ2qXoWS0hkwrjhUKZTAXzIQgtkmwLn+6zoiDRFRPiQnkiphhAJ+/Gpd dyLq5bJC8A/UO3MPuXs4UZFeS7zd6Q6z4gLxZNu4vcVWvAGGpx1x08b/SLVzjMoyNQLPfa9ehV0s u1qTQ6ohY+Ab73POhW4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.isc.ultradns.net for dlv.isc.org/SOA
	Received 265 bytes from 156.154.100.23
	;; Response received from [156.154.100.23] 265 octets ;; HEADER SECTION ;; id = 5101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN SOA ;; ANSWER SECTION (2 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.isc.org for dlv.isc.org/A
	Received 471 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 471 octets ;; HEADER SECTION ;; id = 11338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to nsp.dnsnode.net for dlv.isc.org/A
	Received 471 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 471 octets ;; HEADER SECTION ;; id = 64806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsp.dnsnode.net is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to nsp.dnsnode.net for dlv.isc.org/A
	Received 471 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 471 octets ;; HEADER SECTION ;; id = 53627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to ns2.isc.org for dlv.isc.org/A
	Received 471 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 471 octets ;; HEADER SECTION ;; id = 40507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.isc.org is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns2.isc.org for dlv.isc.org/A
	Received 471 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 471 octets ;; HEADER SECTION ;; id = 42030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to ns1.isc.ultradns.net for dlv.isc.org/A
	Received 471 bytes from 156.154.100.23
	;; Response received from [156.154.100.23] 471 octets ;; HEADER SECTION ;; id = 39920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.isc.ultradns.net is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns1.isc.ultradns.net for dlv.isc.org/A
	Received 471 bytes from 156.154.100.23
	;; Response received from [156.154.100.23] 471 octets ;; HEADER SECTION ;; id = 44143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to ns1.isc.org for dlv.isc.org/A
	Received 471 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 471 octets ;; HEADER SECTION ;; id = 59549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.isc.org is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns1.isc.org for dlv.isc.org/A
	Received 471 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 471 octets ;; HEADER SECTION ;; id = 19563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to ns.isc.afilias-nst.info for dlv.isc.org/A
	Received 471 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 471 octets ;; HEADER SECTION ;; id = 52638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.isc.afilias-nst.info is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns.isc.afilias-nst.info for dlv.isc.org/A
	Received 471 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 471 octets ;; HEADER SECTION ;; id = 50996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

dlv.isc.org

	Query to ns2.isc.ultradns.net for dlv.isc.org/A
	Received 471 bytes from 156.154.101.23
	;; Response received from [156.154.101.23] 471 octets ;; HEADER SECTION ;; id = 18378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.isc.ultradns.net is authoritative for dlv.isc.org
	Found RRSIG signed by dlv.isc.org zone
	Query to ns2.isc.ultradns.net for dlv.isc.org/A
	Received 471 bytes from 156.154.101.23
	;; Response received from [156.154.101.23] 471 octets ;; HEADER SECTION ;; id = 30652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dlv.isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dlv.isc.org. 3600 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024012436 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= ) dlv.isc.org. 3600 IN NSEC dlv.isc.org. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`dlv.isc.org. 3600 IN RRSIG ( NSEC 5 3 3600 20240525020958 20240511012229 64263 dlv.isc.org. eUZyTTJGjvXGC7HqYA7aVwynMNG6BLpBKPpOPxd7JSUcCXt/IMfmvu0YGw/VPS/EFa+7fSQPKNwL lt7p8LlBsLTLc9YJW7YE3TAclDWT++axC6Vi5j/ycjuHOcT+liQeMVjkGS7VcE+g/svngo5amsvv pRe5r/jvq/IHbBBY9x8= )`
	RRSIG=64263 and DNSKEY=64263 verifies the NSEC RRset
	NSEC proves no records of type A exist for dlv.isc.org
	Found 1 RRSIGs over SOA RRset
	`dlv.isc.org. 3600 IN RRSIG ( SOA 5 3 3600 20240525022229 20240511012229 64263 dlv.isc.org. ImAUicfvZePwTU5e9wUgTbFszwR6vM6y7fEgSXkfKPPEMiZ9mlf3XKtiMeoAO/+QQedyAElNFnak 3V5Mr5s/AX2LATsB9lL5IOB6rCLDyZe7Askj82J/SL2EcXO+4CQPs3Mi+jii32NPZE4SccxFJsPD yd8AHYEfOl/vA3qFwlo= )`
	RRSIG=64263 and DNSKEY=64263 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dlv.isc.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: