DNSSEC Debugger - edibleimage.my

Domain Name:

Time: 2024-05-18 15:52:25 UTC

Analyzing DNSSEC problems for edibleimage.my

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 1613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for edibleimage.my/A
	Received 909 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 909 octets ;; HEADER SECTION ;; id = 59515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) my. 172800 IN NS a1.nic.my. my. 172800 IN NS b.mynic.centralnic-dns.com. my. 172800 IN NS ns01.trs-dns.net. my. 172800 IN NS ns01.trs-dns.com. my. 172800 IN NS a.nic.my. my. 172800 IN NS a.mynic.centralnic-dns.com. my. 172800 IN NS d.mynic.centralnic-dns.com. my. 172800 IN NS c.mynic.centralnic-dns.com. my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . gxPsfNg4z3nJTBFfA/dmbYt/mwpdrz+Roegx74ZYFO6hclG6V2d5gqJP71m+tz1B41i5aW0Tq2jO 9xLQeK8ShTzMsWltbz1hfj2q+e0Pq99GS6OzbDQoFCnyMFsdGbfkEWjjQRwwmnO9THYe/rb7zqrZ tu8sGEXKT/WKRn4jtseKm7Qcse7iSQX5wMj8DefH5uO9E5VcYxWYDlqo2izYAobgFwcn5nIRMBAY Qtz3z0f1fJTEgLASQRMiFf+Z3jB70/DVh5QiQNLz1ylHOn4YG2iy4afYyGl58gWgtwA4mKhT/b88 FJNbi4VcX9FTThGP8jq8WNlj5hU+F0rUs5DLVg== ) ;; ADDITIONAL SECTION (15 records) ns01.trs-dns.net. 172800 IN A 64.96.2.1 ns01.trs-dns.com. 172800 IN A 64.96.1.1 a1.nic.my. 172800 IN A 202.171.47.204 d.mynic.centralnic-dns.com. 172800 IN A 212.18.249.114 c.mynic.centralnic-dns.com. 172800 IN A 212.18.248.114 b.mynic.centralnic-dns.com. 172800 IN A 185.24.64.114 a.mynic.centralnic-dns.com. 172800 IN A 194.169.218.114 a.nic.my. 172800 IN A 103.44.108.53 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 d.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ff::114 c.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ee::114 b.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13cc::1:114 a.mynic.centralnic-dns.com. 172800 IN AAAA 2001:67c:13cc::1:114 a.nic.my. 172800 IN AAAA 2001:ddc:0:53::53 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for my/DNSKEY
	Received 897 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 897 octets ;; HEADER SECTION ;; id = 47175 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) my. 172800 IN NS c.mynic.centralnic-dns.com. my. 172800 IN NS a.nic.my. my. 172800 IN NS ns01.trs-dns.net. my. 172800 IN NS ns01.trs-dns.com. my. 172800 IN NS b.mynic.centralnic-dns.com. my. 172800 IN NS d.mynic.centralnic-dns.com. my. 172800 IN NS a1.nic.my. my. 172800 IN NS a.mynic.centralnic-dns.com. my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . AagIDV3hiiQLiV/sOLtKtTTQ3XuuqZLRpAdRHj2qBNix59KKXN6KoAYwuNG/AD5rXbBzXUsJaCII VnWrsGWjmYBYutg6ADYMCYLOCGMuaxuQaqILeSnpHzxsfkAAZvSQ/7I4Qyk9n4BFhvVTwOxfgZ+4 DTJsj9DBFQfomLenuFl01iAZQMKEp5xjHYIgzu+QWTQhNEWTIoN0GRk20xU3jr5YBbOcEqrqWGvF vxT9d3FZ+mA/3riSqN/O+BlVMDpNanruXR+gRd2x89o9s7qgeAEqXGftRU+h8XIhN5DnlUK9FFRj OHIizM/4jqB/NjnABUsd/WV6P3K94fBjQ/ARcg== ) ;; ADDITIONAL SECTION (15 records) ns01.trs-dns.net. 172800 IN A 64.96.2.1 ns01.trs-dns.com. 172800 IN A 64.96.1.1 a1.nic.my. 172800 IN A 202.171.47.204 d.mynic.centralnic-dns.com. 172800 IN A 212.18.249.114 c.mynic.centralnic-dns.com. 172800 IN A 212.18.248.114 b.mynic.centralnic-dns.com. 172800 IN A 185.24.64.114 a.mynic.centralnic-dns.com. 172800 IN A 194.169.218.114 a.nic.my. 172800 IN A 103.44.108.53 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 d.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ff::114 c.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ee::114 b.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13cc::1:114 a.mynic.centralnic-dns.com. 172800 IN AAAA 2001:67c:13cc::1:114 a.nic.my. 172800 IN AAAA 2001:ddc:0:53::53 ;; { "EDNS-VERSION": 0 }
	Found child zone my

	Checking DS between . and my
	Query to k.root-servers.net for my/DS
	Received 414 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 414 octets ;; HEADER SECTION ;; id = 26904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DS ;; ANSWER SECTION (3 records) my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . AagIDV3hiiQLiV/sOLtKtTTQ3XuuqZLRpAdRHj2qBNix59KKXN6KoAYwuNG/AD5rXbBzXUsJaCII VnWrsGWjmYBYutg6ADYMCYLOCGMuaxuQaqILeSnpHzxsfkAAZvSQ/7I4Qyk9n4BFhvVTwOxfgZ+4 DTJsj9DBFQfomLenuFl01iAZQMKEp5xjHYIgzu+QWTQhNEWTIoN0GRk20xU3jr5YBbOcEqrqWGvF vxT9d3FZ+mA/3riSqN/O+BlVMDpNanruXR+gRd2x89o9s7qgeAEqXGftRU+h8XIhN5DnlUK9FFRj OHIizM/4jqB/NjnABUsd/WV6P3K94fBjQ/ARcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for my in the . zone
	DS=174/SHA-256 has algorithm RSASHA256
	DS=35481/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`my. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . AagIDV3hiiQLiV/sOLtKtTTQ3XuuqZLRpAdRHj2qBNix59KKXN6KoAYwuNG/AD5rXbBzXUsJaCII VnWrsGWjmYBYutg6ADYMCYLOCGMuaxuQaqILeSnpHzxsfkAAZvSQ/7I4Qyk9n4BFhvVTwOxfgZ+4 DTJsj9DBFQfomLenuFl01iAZQMKEp5xjHYIgzu+QWTQhNEWTIoN0GRk20xU3jr5YBbOcEqrqWGvF vxT9d3FZ+mA/3riSqN/O+BlVMDpNanruXR+gRd2x89o9s7qgeAEqXGftRU+h8XIhN5DnlUK9FFRj OHIizM/4jqB/NjnABUsd/WV6P3K94fBjQ/ARcg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=174/SHA-256 is now in the chain-of-trust
	DS=35481/SHA-256 is now in the chain-of-trust
	`my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 )`
	`my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 )`
	Query to b.mynic.centralnic-dns.com for my/DNSKEY
	Received 1463 bytes from 185.24.64.114
	;; Response received from [185.24.64.114] 1463 octets ;; HEADER SECTION ;; id = 5220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DNSKEY ;; ANSWER SECTION (6 records) my. 3600 IN DNSKEY ( 256 3 8 AwEAAex+phiaDpGw7hldyrNug8AhLkncGgk5g2GBQvfWe72YAKmSDYOA6ovEYXSPFRcVHkYTdFLA SUAWF/DxbegF3UupC+QOfDSoQ6Im4VOiu6OkIUufOzyKVGS4QggQ3JwowKCKlyX0RRgmeNz73ghs mBrzTnlRyi7kZ47UFnVu2h8f ) ; Key ID = 26466 my. 3600 IN DNSKEY ( 257 3 8 BQEAAAAB3vby1Tn66L/j8Ory2qwpyjGGclouOIFDzkFhUav0Wo55FR0KN3LaNNLereW27e/+SlDJ dmzDDfEWjCDow85KZ0v8Dv1GlvbV9k61Uthc1QKLlPLoDFr02nvILDallIFDyKKJi79ql5W/0DpY aocxBeYJVbOcc9QnIRZXB57r2WoFSnArJcUP5bsy9dTWsJmzE5Qyb31cSc8QcCj56hQMD+yb62h6 YLIuQPDzrQvw9Qkh97FuneBBTklLboul+IsimcCNMrQJVRUbbXyJxKFBpca1eMivUr0JfmTklWhL lSo8exRIickwwX7obBMidFw1Xs9d+NHCfp67E7Yu0TFo6Q== ) ; Key ID = 174 my. 3600 IN DNSKEY ( 256 3 8 AwEAAcmQ2baE+vGSbBwfOjWEYrJPbiQ1zv3k6i6q5mqWuUGwXk7UsfT8RSsV/X+mUfjC6ZEsiYgi nP++BiqctJZBscHPxSqbhOVG2QRuc4bnQ39fF+/ePL7Euz/XEC7iGKB0zpwIKtEQTFRdeMAXFFVG FfiUC/SAUL/oHLyWJN/DfNr9 ) ; Key ID = 43344 my. 3600 IN DNSKEY ( 257 3 8 BQEAAAABwpDOYvR1Bt1aS1ZQ1XIBIqEuE6j9obHoENDmFP4smVbmXC3dugacLbT5jILO0kby4XZJ XeXamiANBBcucZj6qEUEj+WEv9jnJ/NTMtJ333Z4GCXoYfb3VKFcAzpxmsNsgtZmyfb1Pkn6psfX NAayvno8ZaBHV+F+8J1S9siAGXDchRPKnBqT8W4XowBBrLy6iotAB82eBeKT1ZwUXhuol6Cz6VZA CrB2vlquiUoAosLSmeHqCbp2sx45oARjOzwAQQAgpoKzxgulp2KBCVsc2In+/OkoKDtPnG//9y42 7vif3pvGkURC0D2IFdIWCCUc2HZFuNQ5IT4wPm4Nj6yPtQ== ) ; Key ID = 35481 my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 174 my. 2GKMtwHDwDjLkQGRzG5VQiddG4PA/FZxHTSUma6VoYsTn2/9mOpkSi0z/X1ybJNgslXJYKC2UV8c 4xp3BpWs77th9KZcvDbslz7HXzWMkDDXrJmljX6aaWbdtO7aN3ED/vuHGbrMI/7p4ncFI5L3BB6R DbcIy+u1OUihU5xe+A6sR62UZ41WGUiNFBhh2Ul3tGvICwjClC1YTr3f1gSrpjfvKg+9F0BuEGpE 1fIBQ0s4WXNPEoXlFF9+EdX5bAKzcz2m4oj41Vq14Qa8A1GfRWJ+EBgjkwRABRKDRuUprVFyaoqN z/LV94qQDCjYcuqy4jqDVar1sS96M+Bn153UDg== ) my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 35481 my. ueB5uP85sQDDJZWYWILJifvwCZXJeu7hjino+qw2s+E4fLTmwM1NWAt2ONgVtMGent9FG2XklvgH kfg4xu0Ukl01ZlO2p1PrU3ASrzM8a19v6p6cv7wgcxq+Qk99JlrHFx5qiuzLfy6D0WviUc4oNGyw +r7+2N/wSKfnT9ra7UCLQC4lQitvezTptCJlNDZ4StueIsFgzeCl6sQFx+tHRD+DWyDijOiN3eZM du7Gs/UIe6q/SklAyrnRMb9vHC2DcVjIOGufIB78dE1ygNNOJfMpE7/QG4Ao4ZF69Ei5D5w10fHC g70pn1L5Rf7wbHydOKsq5IOp4ioT11CtXigr1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for my
	`my. 3600 IN DNSKEY ( 256 3 8 AwEAAex+phiaDpGw7hldyrNug8AhLkncGgk5g2GBQvfWe72YAKmSDYOA6ovEYXSPFRcVHkYTdFLA SUAWF/DxbegF3UupC+QOfDSoQ6Im4VOiu6OkIUufOzyKVGS4QggQ3JwowKCKlyX0RRgmeNz73ghs mBrzTnlRyi7kZ47UFnVu2h8f ) ; Key ID = 26466`
	`my. 3600 IN DNSKEY ( 257 3 8 BQEAAAAB3vby1Tn66L/j8Ory2qwpyjGGclouOIFDzkFhUav0Wo55FR0KN3LaNNLereW27e/+SlDJ dmzDDfEWjCDow85KZ0v8Dv1GlvbV9k61Uthc1QKLlPLoDFr02nvILDallIFDyKKJi79ql5W/0DpY aocxBeYJVbOcc9QnIRZXB57r2WoFSnArJcUP5bsy9dTWsJmzE5Qyb31cSc8QcCj56hQMD+yb62h6 YLIuQPDzrQvw9Qkh97FuneBBTklLboul+IsimcCNMrQJVRUbbXyJxKFBpca1eMivUr0JfmTklWhL lSo8exRIickwwX7obBMidFw1Xs9d+NHCfp67E7Yu0TFo6Q== ) ; Key ID = 174`
	`my. 3600 IN DNSKEY ( 256 3 8 AwEAAcmQ2baE+vGSbBwfOjWEYrJPbiQ1zv3k6i6q5mqWuUGwXk7UsfT8RSsV/X+mUfjC6ZEsiYgi nP++BiqctJZBscHPxSqbhOVG2QRuc4bnQ39fF+/ePL7Euz/XEC7iGKB0zpwIKtEQTFRdeMAXFFVG FfiUC/SAUL/oHLyWJN/DfNr9 ) ; Key ID = 43344`
	`my. 3600 IN DNSKEY ( 257 3 8 BQEAAAABwpDOYvR1Bt1aS1ZQ1XIBIqEuE6j9obHoENDmFP4smVbmXC3dugacLbT5jILO0kby4XZJ XeXamiANBBcucZj6qEUEj+WEv9jnJ/NTMtJ333Z4GCXoYfb3VKFcAzpxmsNsgtZmyfb1Pkn6psfX NAayvno8ZaBHV+F+8J1S9siAGXDchRPKnBqT8W4XowBBrLy6iotAB82eBeKT1ZwUXhuol6Cz6VZA CrB2vlquiUoAosLSmeHqCbp2sx45oARjOzwAQQAgpoKzxgulp2KBCVsc2In+/OkoKDtPnG//9y42 7vif3pvGkURC0D2IFdIWCCUc2HZFuNQ5IT4wPm4Nj6yPtQ== ) ; Key ID = 35481`
	DNSKEY=174/SEP is now in the chain-of-trust
	DS=174/SHA-256 verifies DNSKEY=174/SEP
	DNSKEY=35481/SEP is now in the chain-of-trust
	DS=35481/SHA-256 verifies DNSKEY=35481/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 174 my. 2GKMtwHDwDjLkQGRzG5VQiddG4PA/FZxHTSUma6VoYsTn2/9mOpkSi0z/X1ybJNgslXJYKC2UV8c 4xp3BpWs77th9KZcvDbslz7HXzWMkDDXrJmljX6aaWbdtO7aN3ED/vuHGbrMI/7p4ncFI5L3BB6R DbcIy+u1OUihU5xe+A6sR62UZ41WGUiNFBhh2Ul3tGvICwjClC1YTr3f1gSrpjfvKg+9F0BuEGpE 1fIBQ0s4WXNPEoXlFF9+EdX5bAKzcz2m4oj41Vq14Qa8A1GfRWJ+EBgjkwRABRKDRuUprVFyaoqN z/LV94qQDCjYcuqy4jqDVar1sS96M+Bn153UDg== )`
	`my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 35481 my. ueB5uP85sQDDJZWYWILJifvwCZXJeu7hjino+qw2s+E4fLTmwM1NWAt2ONgVtMGent9FG2XklvgH kfg4xu0Ukl01ZlO2p1PrU3ASrzM8a19v6p6cv7wgcxq+Qk99JlrHFx5qiuzLfy6D0WviUc4oNGyw +r7+2N/wSKfnT9ra7UCLQC4lQitvezTptCJlNDZ4StueIsFgzeCl6sQFx+tHRD+DWyDijOiN3eZM du7Gs/UIe6q/SklAyrnRMb9vHC2DcVjIOGufIB78dE1ygNNOJfMpE7/QG4Ao4ZF69Ei5D5w10fHC g70pn1L5Rf7wbHydOKsq5IOp4ioT11CtXigr1g== )`
	RRSIG=174 and DNSKEY=174/SEP verifies the DNSKEY RRset
	RRSIG=35481 and DNSKEY=35481/SEP verifies the DNSKEY RRset
	DNSKEY=26466 is now in the chain-of-trust
	DNSKEY=43344 is now in the chain-of-trust
	Query to c.mynic.centralnic-dns.com for edibleimage.my/A
	Received 582 bytes from 212.18.248.114
	;; Response received from [212.18.248.114] 582 octets ;; HEADER SECTION ;; id = 25033 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) edibleimage.my. 86400 IN NS sky.ns.cloudflare.com. edibleimage.my. 86400 IN NS gannon.ns.cloudflare.com. 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN NSEC3 ( 1 1 1 - duvm9j9fjd9ln9ubno034hhe9cl7d4g3 NS DS RRSIG ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608063927 20240509131918 43344 my. ixUhryjsmlyBPNRlGaA1AYghOD4L+UthtB0nJNaaIifiExDeG7/3kmn6F2oT76mSRqT5+Qqxwem3 rigKg8BJfqPVmBoUU1CATOgqHnVtHXpgJrZ6pv2omhwmYRdwy29P8vYhFTrS/NXUbL5Zw9bvIhrq feIWSQ1dW1egUYPRUBo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns01.trs-dns.net for edibleimage.my/DNSKEY
	Received 582 bytes from 64.96.2.1
	;; Response received from [64.96.2.1] 582 octets ;; HEADER SECTION ;; id = 23576 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) edibleimage.my. 86400 IN NS gannon.ns.cloudflare.com. edibleimage.my. 86400 IN NS sky.ns.cloudflare.com. 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN NSEC3 ( 1 1 1 - duvm9j9fjd9ln9ubno034hhe9cl7d4g3 NS DS RRSIG ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608063927 20240509131918 43344 my. ixUhryjsmlyBPNRlGaA1AYghOD4L+UthtB0nJNaaIifiExDeG7/3kmn6F2oT76mSRqT5+Qqxwem3 rigKg8BJfqPVmBoUU1CATOgqHnVtHXpgJrZ6pv2omhwmYRdwy29P8vYhFTrS/NXUbL5Zw9bvIhrq feIWSQ1dW1egUYPRUBo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone edibleimage.my

edibleimage.my

	Checking DS between my and edibleimage.my
	Query to b.mynic.centralnic-dns.com for edibleimage.my/DS
	Received 741 bytes from 185.24.64.114
	;; Response received from [185.24.64.114] 741 octets ;; HEADER SECTION ;; id = 17159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) my. 3600 IN SOA ( a.nic.my. hostmaster.nic.my. 2024040552 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) my. 3600 IN RRSIG ( SOA 8 1 3600 20240617185426 20240518133516 43344 my. UtCCMbrxQ4MghHy3GLLCbMmxCmwoStwqFjCuQkUXSJBJXvbJspitO2dJ5tHyryPn6AJgMEHjTK+O CgYurJ3veIB1zoJDr5xlTIUmSQ1M9W67jsQyaz4vatnjjIAHV0+R72IH7oOPtEoRFftbz/1hOoFd ZvgMUPIbEIwVY6p+Hxg= ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN NSEC3 ( 1 1 1 - duvm9j9fjd9ln9ubno034hhe9cl7d4g3 NS DS RRSIG ) dq97hvns5j4pv857dhlosrfpedf5v6dd.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608063927 20240509131918 43344 my. ixUhryjsmlyBPNRlGaA1AYghOD4L+UthtB0nJNaaIifiExDeG7/3kmn6F2oT76mSRqT5+Qqxwem3 rigKg8BJfqPVmBoUU1CATOgqHnVtHXpgJrZ6pv2omhwmYRdwy29P8vYhFTrS/NXUbL5Zw9bvIhrq feIWSQ1dW1egUYPRUBo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edibleimage.my in the my zone
	Query to sky.ns.cloudflare.com for edibleimage.my/DNSKEY
	Received 107 bytes from 108.162.194.2
	;; Response received from [108.162.194.2] 107 octets ;; HEADER SECTION ;; id = 51184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edibleimage.my. 1800 IN SOA ( gannon.ns.cloudflare.com. dns.cloudflare.com. 2339706214 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to sky.ns.cloudflare.com for edibleimage.my/A
	Received 75 bytes from 108.162.194.2
	;; Response received from [108.162.194.2] 75 octets ;; HEADER SECTION ;; id = 48004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (2 records) edibleimage.my. 300 IN A 172.67.128.239 edibleimage.my. 300 IN A 104.21.1.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sky.ns.cloudflare.com is authoritative for edibleimage.my
	Query to gannon.ns.cloudflare.com for edibleimage.my/SOA
	Received 107 bytes from 162.159.44.59
	;; Response received from [162.159.44.59] 107 octets ;; HEADER SECTION ;; id = 29 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN SOA ;; ANSWER SECTION (1 record) edibleimage.my. 1800 IN SOA ( gannon.ns.cloudflare.com. dns.cloudflare.com. 2339706214 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to sky.ns.cloudflare.com for edibleimage.my/A
	Received 75 bytes from 172.64.34.2
	;; Response received from [172.64.34.2] 75 octets ;; HEADER SECTION ;; id = 12928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (2 records) edibleimage.my. 300 IN A 104.21.1.85 edibleimage.my. 300 IN A 172.67.128.239 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edibleimage.my A RR has value 104.21.1.85
	edibleimage.my A RR has value 172.67.128.239
	No RRSIGs found

edibleimage.my

	Query to gannon.ns.cloudflare.com for edibleimage.my/A
	Received 75 bytes from 172.64.35.59
	;; Response received from [172.64.35.59] 75 octets ;; HEADER SECTION ;; id = 55318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (2 records) edibleimage.my. 300 IN A 104.21.1.85 edibleimage.my. 300 IN A 172.67.128.239 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gannon.ns.cloudflare.com is authoritative for edibleimage.my
	Query to gannon.ns.cloudflare.com for edibleimage.my/A
	Received 75 bytes from 172.64.35.59
	;; Response received from [172.64.35.59] 75 octets ;; HEADER SECTION ;; id = 48122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edibleimage.my. IN A ;; ANSWER SECTION (2 records) edibleimage.my. 300 IN A 104.21.1.85 edibleimage.my. 300 IN A 172.67.128.239 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	edibleimage.my A RR has value 104.21.1.85
	edibleimage.my A RR has value 172.67.128.239
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test edibleimage.my at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: