DNSSEC Debugger

Domain Name:

Time: 2024-05-17 03:35:48 UTC

Analyzing DNSSEC problems for edu.cn

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 39133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for edu.cn/A
	Received 717 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 717 octets ;; HEADER SECTION ;; id = 60910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cn. 172800 IN NS a.dns.cn. cn. 172800 IN NS b.dns.cn. cn. 172800 IN NS c.dns.cn. cn. 172800 IN NS d.dns.cn. cn. 172800 IN NS e.dns.cn. cn. 172800 IN NS ns.cernet.net. cn. 86400 IN DS ( 57724 8 2 5d0423633eb24a499be78aa22d1c0c9ba36218ff49fd95a4cdf1a4ad97c67044 ) cn. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . MT56DBspVhkInfRMNQr2KxlKqZK9FuXt51mn04L+beJMuzPe+V4vx1Sb2R0tE2WJhqQw7UEuxdOw beff+ObyFbXi+OQrjauh7VHXoyxmmNAffMDQecItSiC7+3nuQodhqm+VT38nNGONmXPwuYW1Y/Qd C9pi7fz0n8p5DRRWcyWXfkQ7jx5Hinq2YYURk2S/ymL0G471pkQzVcXNuBKaV2Qg+2XUjHTBf0hQ INmX0OajiDdnGPzykS7mG2Y6xB0jFr/Wi+Ebn6XuariXkLrLLMHHrT9HDCGyq5DRmZEnQa7QFHWU bhWnuDzFw9jTk4b/5zwZUKcS6+vQllNN+m9wNw== ) ;; ADDITIONAL SECTION (12 records) a.dns.cn. 172800 IN A 203.119.25.1 b.dns.cn. 172800 IN A 203.119.26.1 c.dns.cn. 172800 IN A 203.119.27.1 d.dns.cn. 172800 IN A 203.119.28.1 e.dns.cn. 172800 IN A 203.119.29.1 ns.cernet.net. 172800 IN A 202.112.0.44 a.dns.cn. 172800 IN AAAA 2001:dc7::1 b.dns.cn. 172800 IN AAAA 2001:dc7:1::1 c.dns.cn. 172800 IN AAAA 2001:dc7:2::1 d.dns.cn. 172800 IN AAAA 2001:dc7:1000::1 e.dns.cn. 172800 IN AAAA 2001:dc7:3::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for cn/DNSKEY
	Received 713 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 713 octets ;; HEADER SECTION ;; id = 12166 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cn. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cn. 172800 IN NS a.dns.cn. cn. 172800 IN NS b.dns.cn. cn. 172800 IN NS c.dns.cn. cn. 172800 IN NS d.dns.cn. cn. 172800 IN NS e.dns.cn. cn. 172800 IN NS ns.cernet.net. cn. 86400 IN DS ( 57724 8 2 5d0423633eb24a499be78aa22d1c0c9ba36218ff49fd95a4cdf1a4ad97c67044 ) cn. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . MT56DBspVhkInfRMNQr2KxlKqZK9FuXt51mn04L+beJMuzPe+V4vx1Sb2R0tE2WJhqQw7UEuxdOw beff+ObyFbXi+OQrjauh7VHXoyxmmNAffMDQecItSiC7+3nuQodhqm+VT38nNGONmXPwuYW1Y/Qd C9pi7fz0n8p5DRRWcyWXfkQ7jx5Hinq2YYURk2S/ymL0G471pkQzVcXNuBKaV2Qg+2XUjHTBf0hQ INmX0OajiDdnGPzykS7mG2Y6xB0jFr/Wi+Ebn6XuariXkLrLLMHHrT9HDCGyq5DRmZEnQa7QFHWU bhWnuDzFw9jTk4b/5zwZUKcS6+vQllNN+m9wNw== ) ;; ADDITIONAL SECTION (12 records) a.dns.cn. 172800 IN A 203.119.25.1 b.dns.cn. 172800 IN A 203.119.26.1 c.dns.cn. 172800 IN A 203.119.27.1 d.dns.cn. 172800 IN A 203.119.28.1 e.dns.cn. 172800 IN A 203.119.29.1 ns.cernet.net. 172800 IN A 202.112.0.44 a.dns.cn. 172800 IN AAAA 2001:dc7::1 b.dns.cn. 172800 IN AAAA 2001:dc7:1::1 c.dns.cn. 172800 IN AAAA 2001:dc7:2::1 d.dns.cn. 172800 IN AAAA 2001:dc7:1000::1 e.dns.cn. 172800 IN AAAA 2001:dc7:3::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cn

	Checking DS between . and cn
	Query to f.root-servers.net for cn/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 21933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cn. IN DS ;; ANSWER SECTION (2 records) cn. 86400 IN DS ( 57724 8 2 5d0423633eb24a499be78aa22d1c0c9ba36218ff49fd95a4cdf1a4ad97c67044 ) cn. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . MT56DBspVhkInfRMNQr2KxlKqZK9FuXt51mn04L+beJMuzPe+V4vx1Sb2R0tE2WJhqQw7UEuxdOw beff+ObyFbXi+OQrjauh7VHXoyxmmNAffMDQecItSiC7+3nuQodhqm+VT38nNGONmXPwuYW1Y/Qd C9pi7fz0n8p5DRRWcyWXfkQ7jx5Hinq2YYURk2S/ymL0G471pkQzVcXNuBKaV2Qg+2XUjHTBf0hQ INmX0OajiDdnGPzykS7mG2Y6xB0jFr/Wi+Ebn6XuariXkLrLLMHHrT9HDCGyq5DRmZEnQa7QFHWU bhWnuDzFw9jTk4b/5zwZUKcS6+vQllNN+m9wNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cn in the . zone
	DS=57724/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cn. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . MT56DBspVhkInfRMNQr2KxlKqZK9FuXt51mn04L+beJMuzPe+V4vx1Sb2R0tE2WJhqQw7UEuxdOw beff+ObyFbXi+OQrjauh7VHXoyxmmNAffMDQecItSiC7+3nuQodhqm+VT38nNGONmXPwuYW1Y/Qd C9pi7fz0n8p5DRRWcyWXfkQ7jx5Hinq2YYURk2S/ymL0G471pkQzVcXNuBKaV2Qg+2XUjHTBf0hQ INmX0OajiDdnGPzykS7mG2Y6xB0jFr/Wi+Ebn6XuariXkLrLLMHHrT9HDCGyq5DRmZEnQa7QFHWU bhWnuDzFw9jTk4b/5zwZUKcS6+vQllNN+m9wNw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=57724/SHA-256 is now in the chain-of-trust
	`cn. 86400 IN DS ( 57724 8 2 5d0423633eb24a499be78aa22d1c0c9ba36218ff49fd95a4cdf1a4ad97c67044 )`
	Query to e.dns.cn for cn/DNSKEY
	Received 907 bytes from 203.119.29.1
	;; Response received from [203.119.29.1] 907 octets ;; HEADER SECTION ;; id = 36715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cn. IN DNSKEY ;; ANSWER SECTION (4 records) cn. 86400 IN DNSKEY ( 256 3 8 AwEAAaxMabJOjpV+ccAKgWjP1UBfVBN+VCFu92scQydffI3tNiFJ35GHGV8ktSQn72LYgMHUlibA X10D5a8BR2+6RSA6pUNIMnUuLwMAa03avcbvQcX8eG+C3Ys3VBi6sYMw7hXlxhZHMq9GPtsXtOjZ fm9DAe7rz7T1pO5M0YniheXR ) ; Key ID = 38388 cn. 86400 IN DNSKEY ( 257 3 8 AwEAAd4vztGWGI+qShKPs9MaXFqZIDgcnoUh59OnUHOi7w67q5oMXynRF2W1nyfg9RPV7ZY7oR2I aDm3/avBMUYokFLsyE8NavUfZORhoN0hnC6dRiv8VrYDCjj5VSh7kwk157mm3BxLn1XTs9Jys44b J17fNxNjS4AGdUa94pOdGPTycSeJ76dUtWp8jz9ffborCWvsXtp3AsEJs7eFAmOJIqllE3gl4w2G mEKaq+AdYG7j1T5uWVg+sIZ1GCofi/+1ml6U588bqKzUSkjA4Gn+ZoLToviPSYAIC2/KeEYt1RYz Uc3H72ScM+Kv2o+ZtC2YRSmrnVGqcSTriysYdlzmU7c= ) ; Key ID = 57724 cn. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240609094350 20240510091958 38388 cn. GDS7RbMBe7gOUVfH58nOa8hRT8XyeD0qWxBd4TL6SJJL/Em0vRy2eeGcfpokS/a9SOMrmpQPFm9l vbwPVhLr/8j3b6iuXkhKUcwEHebj9q9jTvjxJ63q6/1jWxhr1mxHnJTekWnA+e6wCvilzQfDvG7c PfwuN32BS7DoloD41U4= ) cn. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240609094350 20240510091958 57724 cn. M0Jp1nzDFW2RQtVXZdLsKOm5yHv2A6c18BUSIWq/u310g0/D/S8ELsQ0h/itC4mb56gDP/qHkp7/ DhQnip8O+DGdal2HjTdqGeiaWCbGUSLMoRQfaa/2ZahuQ8MK4TstYhLODkgdHK8N1oXuaEj10jia pBzbmiie96/iK+Gp1XmEgqXa5iJMsR7LAANMkywZnQDB26dLnr4wWnXOXk/S8LK3I3Y+g+TcoRQF coxvPR20mkNoDDlTlu8/L/fjzFvGNqXeXf747HVdjmc03p+9yBAFlGmNM4nNV9iawUtQOq6aBfwe QxABpFrMGQ7dV7hUA3P4FGgZgEdLRenQPJPCwQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cn
	`cn. 86400 IN DNSKEY ( 256 3 8 AwEAAaxMabJOjpV+ccAKgWjP1UBfVBN+VCFu92scQydffI3tNiFJ35GHGV8ktSQn72LYgMHUlibA X10D5a8BR2+6RSA6pUNIMnUuLwMAa03avcbvQcX8eG+C3Ys3VBi6sYMw7hXlxhZHMq9GPtsXtOjZ fm9DAe7rz7T1pO5M0YniheXR ) ; Key ID = 38388`
	`cn. 86400 IN DNSKEY ( 257 3 8 AwEAAd4vztGWGI+qShKPs9MaXFqZIDgcnoUh59OnUHOi7w67q5oMXynRF2W1nyfg9RPV7ZY7oR2I aDm3/avBMUYokFLsyE8NavUfZORhoN0hnC6dRiv8VrYDCjj5VSh7kwk157mm3BxLn1XTs9Jys44b J17fNxNjS4AGdUa94pOdGPTycSeJ76dUtWp8jz9ffborCWvsXtp3AsEJs7eFAmOJIqllE3gl4w2G mEKaq+AdYG7j1T5uWVg+sIZ1GCofi/+1ml6U588bqKzUSkjA4Gn+ZoLToviPSYAIC2/KeEYt1RYz Uc3H72ScM+Kv2o+ZtC2YRSmrnVGqcSTriysYdlzmU7c= ) ; Key ID = 57724`
	DNSKEY=57724/SEP is now in the chain-of-trust
	DS=57724/SHA-256 verifies DNSKEY=57724/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cn. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240609094350 20240510091958 38388 cn. GDS7RbMBe7gOUVfH58nOa8hRT8XyeD0qWxBd4TL6SJJL/Em0vRy2eeGcfpokS/a9SOMrmpQPFm9l vbwPVhLr/8j3b6iuXkhKUcwEHebj9q9jTvjxJ63q6/1jWxhr1mxHnJTekWnA+e6wCvilzQfDvG7c PfwuN32BS7DoloD41U4= )`
	`cn. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240609094350 20240510091958 57724 cn. M0Jp1nzDFW2RQtVXZdLsKOm5yHv2A6c18BUSIWq/u310g0/D/S8ELsQ0h/itC4mb56gDP/qHkp7/ DhQnip8O+DGdal2HjTdqGeiaWCbGUSLMoRQfaa/2ZahuQ8MK4TstYhLODkgdHK8N1oXuaEj10jia pBzbmiie96/iK+Gp1XmEgqXa5iJMsR7LAANMkywZnQDB26dLnr4wWnXOXk/S8LK3I3Y+g+TcoRQF coxvPR20mkNoDDlTlu8/L/fjzFvGNqXeXf747HVdjmc03p+9yBAFlGmNM4nNV9iawUtQOq6aBfwe QxABpFrMGQ7dV7hUA3P4FGgZgEdLRenQPJPCwQ== )`
	RRSIG=38388 and DNSKEY=38388 verifies the DNSKEY RRset
	RRSIG=57724 and DNSKEY=57724/SEP verifies the DNSKEY RRset
	DNSKEY=38388 is now in the chain-of-trust
	Query to d.dns.cn for edu.cn/A
	Received 497 bytes from 203.119.28.1
	;; Response received from [203.119.28.1] 497 octets ;; HEADER SECTION ;; id = 6895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN NS ns2.cuhk.hk. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS deneb.dfn.de. edu.cn. 86400 IN DS 15397 8 1 ca602972d554df57cc8322c18d9cf942fac47430 edu.cn. 86400 IN DS ( 15397 8 2 3a6c89d32b3143d193521ce64389548821da90f770ab09ecd9c8680b2f4848b5 ) edu.cn. 86400 IN RRSIG ( DS 8 2 86400 20240609114948 20240510111034 38388 cn. eyTUzVXG/30He0KWkeX25V9OOS6bVBwFlqPDkiZr4nbx5pSGjgZ+VhFI2a4pLE8g3FhBz3tSQkZ+ OzKRhUcyrCRQS2nyrayZgf61pVOYzXDkJe/9RGlujfLw24JdBhVFtHLea3sWyHwvnsRY67bk22K/ miZK8DfOTNFKj7Mb4V8= ) ;; ADDITIONAL SECTION (5 records) dns.edu.cn. 172800 IN A 202.38.109.35 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 dns2.edu.cn. 172800 IN A 202.112.0.13 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 ;; { "EDNS-VERSION": 0 }
	Query to b.dns.cn for edu.cn/DNSKEY
	Received 497 bytes from 203.119.26.1
	;; Response received from [203.119.26.1] 497 octets ;; HEADER SECTION ;; id = 44809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN NS ns2.cuhk.hk. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS deneb.dfn.de. edu.cn. 86400 IN DS 15397 8 1 ca602972d554df57cc8322c18d9cf942fac47430 edu.cn. 86400 IN DS ( 15397 8 2 3a6c89d32b3143d193521ce64389548821da90f770ab09ecd9c8680b2f4848b5 ) edu.cn. 86400 IN RRSIG ( DS 8 2 86400 20240609114948 20240510111034 38388 cn. eyTUzVXG/30He0KWkeX25V9OOS6bVBwFlqPDkiZr4nbx5pSGjgZ+VhFI2a4pLE8g3FhBz3tSQkZ+ OzKRhUcyrCRQS2nyrayZgf61pVOYzXDkJe/9RGlujfLw24JdBhVFtHLea3sWyHwvnsRY67bk22K/ miZK8DfOTNFKj7Mb4V8= ) ;; ADDITIONAL SECTION (5 records) dns.edu.cn. 172800 IN A 202.38.109.35 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 dns2.edu.cn. 172800 IN A 202.112.0.13 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 ;; { "EDNS-VERSION": 0 }
	Found child zone edu.cn

edu.cn

	Checking DS between cn and edu.cn
	Query to d.dns.cn for edu.cn/DS
	Received 281 bytes from 203.119.28.1
	;; Response received from [203.119.28.1] 281 octets ;; HEADER SECTION ;; id = 30105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN DS ;; ANSWER SECTION (3 records) edu.cn. 86400 IN DS 15397 8 1 ca602972d554df57cc8322c18d9cf942fac47430 edu.cn. 86400 IN DS ( 15397 8 2 3a6c89d32b3143d193521ce64389548821da90f770ab09ecd9c8680b2f4848b5 ) edu.cn. 86400 IN RRSIG ( DS 8 2 86400 20240609114948 20240510111034 38388 cn. eyTUzVXG/30He0KWkeX25V9OOS6bVBwFlqPDkiZr4nbx5pSGjgZ+VhFI2a4pLE8g3FhBz3tSQkZ+ OzKRhUcyrCRQS2nyrayZgf61pVOYzXDkJe/9RGlujfLw24JdBhVFtHLea3sWyHwvnsRY67bk22K/ miZK8DfOTNFKj7Mb4V8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for edu.cn in the cn zone
	DS=15397/SHA-1 uses a deprecated digest algorithm
	DS=15397/SHA-1 has algorithm RSASHA256
	DS=15397/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`edu.cn. 86400 IN RRSIG ( DS 8 2 86400 20240609114948 20240510111034 38388 cn. eyTUzVXG/30He0KWkeX25V9OOS6bVBwFlqPDkiZr4nbx5pSGjgZ+VhFI2a4pLE8g3FhBz3tSQkZ+ OzKRhUcyrCRQS2nyrayZgf61pVOYzXDkJe/9RGlujfLw24JdBhVFtHLea3sWyHwvnsRY67bk22K/ miZK8DfOTNFKj7Mb4V8= )`
	RRSIG=38388 and DNSKEY=38388 verifies the DS RRset
	DS=15397/SHA-1 is now in the chain-of-trust
	`edu.cn. 86400 IN DS 15397 8 1 ca602972d554df57cc8322c18d9cf942fac47430`
	`edu.cn. 86400 IN DS ( 15397 8 2 3a6c89d32b3143d193521ce64389548821da90f770ab09ecd9c8680b2f4848b5 )`
	Query to ns2.cuhk.hk for edu.cn/DNSKEY
	Received 919 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 919 octets ;; HEADER SECTION ;; id = 22956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN DNSKEY ;; ANSWER SECTION (4 records) edu.cn. 172800 IN DNSKEY ( 256 3 8 AwEAAb3/T3Lk2Vr+u5Xhi+OTUMRG9pJ27pmVRjzuh4ZrAUKa8gs63E0XMWzyvRySF08aKJKH506p cRY7B4tcdSLnxwuS2cMgBMfscCs64VXJYo9SFYl8rHethOBxVfRxNIrOx41VyABTnni9MK47fhGT V0L8j+nmWpuVH/9lsP1DvYSj ) ; Key ID = 21204 edu.cn. 172800 IN DNSKEY ( 257 3 8 AwEAAdkXpELr8ax9Gu8CRfA7Iux8G32usl8Lgs917ZELiWaoZgufgNALQHLSffJPbnZ/Qg6BPKB0 RkhnUNX6066yLo3evWQB6keio+JW/CHXF2orSgt1T+zDUqSKeE5Mc4uPeq+nFmpP6SFbSz82IMlE YylbfvxBj16TqP5uNPAKN8MCm2gFNRjTx8/e8BZQ93OwrfyBTJWkBWsaUUIUwhLqKtJuEovJZnva NctOcKpJRk1FM0/swxVt1b4I7iLUJKBMSEIGeZvw72SnvqicqVOOLoE8NWTRzJMWs8RrrJp9OFy2 8O6fnwCR57cDpQQlHdvpIBsxiHPKGfcqRoX6gDqf7qs= ) ; Key ID = 15397 edu.cn. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240606190115 20240507190054 15397 edu.cn. X0Brz64FGFfK1v4ShDVD8JLPhP7dX1CrX3gDrMHYVJ04eqrfjR9xWxNOrRWzy5Y44oR6MMrMkCFh xDDZzfvRpa0hRIDUmWou0jraJioMs1ms/rRNTZQS4upCDuNXw+viMVGerfV3EnsN9u+Tu2dnKKwy p6mk8qyOjO0NGKepjTf4KgCxCLVI9N+3yNcKsPTFOvgA9KoOM4TX0P92AEaYWqY+jhtW+WmeuZT9 fMPFzkMIn5G9EgBo+t64nss9/kMNQ6r/2U10IfiV48d3VpXWapgnWzpcSCswvbxJfWXf0lRzjcd1 OLpLvJVkHgl/ZiOo40xydY83S4FI+oQPb9g8lA== ) edu.cn. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240606190115 20240507190054 21204 edu.cn. dHgvY8W9hAfVQwXWI4hCTscbtK1XRh6CEgt19d7EYaKzeHh5cBaFVCTo551t30eGFrnlTJM9ZrYc YEd35Cp2+/iKM4GLngwwowyv2pnFcLau1iV1ZcDyPxiy3FJpsVN5Kk+VB/MIpNdnAK1KJ8hSIGMC 2l1buU3P2ZEV2lZYYvg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for edu.cn
	`edu.cn. 172800 IN DNSKEY ( 256 3 8 AwEAAb3/T3Lk2Vr+u5Xhi+OTUMRG9pJ27pmVRjzuh4ZrAUKa8gs63E0XMWzyvRySF08aKJKH506p cRY7B4tcdSLnxwuS2cMgBMfscCs64VXJYo9SFYl8rHethOBxVfRxNIrOx41VyABTnni9MK47fhGT V0L8j+nmWpuVH/9lsP1DvYSj ) ; Key ID = 21204`
	`edu.cn. 172800 IN DNSKEY ( 257 3 8 AwEAAdkXpELr8ax9Gu8CRfA7Iux8G32usl8Lgs917ZELiWaoZgufgNALQHLSffJPbnZ/Qg6BPKB0 RkhnUNX6066yLo3evWQB6keio+JW/CHXF2orSgt1T+zDUqSKeE5Mc4uPeq+nFmpP6SFbSz82IMlE YylbfvxBj16TqP5uNPAKN8MCm2gFNRjTx8/e8BZQ93OwrfyBTJWkBWsaUUIUwhLqKtJuEovJZnva NctOcKpJRk1FM0/swxVt1b4I7iLUJKBMSEIGeZvw72SnvqicqVOOLoE8NWTRzJMWs8RrrJp9OFy2 8O6fnwCR57cDpQQlHdvpIBsxiHPKGfcqRoX6gDqf7qs= ) ; Key ID = 15397`
	DNSKEY=15397/SEP is now in the chain-of-trust
	DS=15397/SHA-1 verifies DNSKEY=15397/SEP
	DS=15397/SHA-256 verifies DNSKEY=15397/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`edu.cn. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240606190115 20240507190054 15397 edu.cn. X0Brz64FGFfK1v4ShDVD8JLPhP7dX1CrX3gDrMHYVJ04eqrfjR9xWxNOrRWzy5Y44oR6MMrMkCFh xDDZzfvRpa0hRIDUmWou0jraJioMs1ms/rRNTZQS4upCDuNXw+viMVGerfV3EnsN9u+Tu2dnKKwy p6mk8qyOjO0NGKepjTf4KgCxCLVI9N+3yNcKsPTFOvgA9KoOM4TX0P92AEaYWqY+jhtW+WmeuZT9 fMPFzkMIn5G9EgBo+t64nss9/kMNQ6r/2U10IfiV48d3VpXWapgnWzpcSCswvbxJfWXf0lRzjcd1 OLpLvJVkHgl/ZiOo40xydY83S4FI+oQPb9g8lA== )`
	`edu.cn. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240606190115 20240507190054 21204 edu.cn. dHgvY8W9hAfVQwXWI4hCTscbtK1XRh6CEgt19d7EYaKzeHh5cBaFVCTo551t30eGFrnlTJM9ZrYc YEd35Cp2+/iKM4GLngwwowyv2pnFcLau1iV1ZcDyPxiy3FJpsVN5Kk+VB/MIpNdnAK1KJ8hSIGMC 2l1buU3P2ZEV2lZYYvg= )`
	RRSIG=15397 and DNSKEY=15397/SEP verifies the DNSKEY RRset
	RRSIG=21204 and DNSKEY=21204 verifies the DNSKEY RRset
	DNSKEY=21204 is now in the chain-of-trust
	Query to dns2.edu.cn for edu.cn/A
	Received 504 bytes from 202.112.0.13
	;; Response received from [202.112.0.13] 504 octets ;; HEADER SECTION ;; id = 11383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051678 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.edu.cn is authoritative for edu.cn
	Found RRSIG signed by edu.cn zone
	Query to ns2.cernet.net for edu.cn/SOA
	Received 1055 bytes from 103.137.60.203
	;; Response received from [103.137.60.203] 1055 octets ;; HEADER SECTION ;; id = 25862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 18 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN SOA ;; ANSWER SECTION (2 records) edu.cn. 172800 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051678 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 172800 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= ) ;; AUTHORITY SECTION (7 records) edu.cn. 172800 IN NS ns5.cernet.net. edu.cn. 172800 IN NS ns3.cernet.net. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS ns4.cernet.net. edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN RRSIG ( NS 8 2 172800 20240615023350 20240516022232 21204 edu.cn. SqgtDCpUu0H5DT+vhjouxcWe8YTPyw5HEEqQN8xlD234b93rjDkJNSGuH1BYPL7vwDZDLPIzUYo1 ANMVi57C4XSUqSyyN1qtAOSNr328cbe+tSm6KQZyzo2v2DkCqVOdVUmzpHMOnxomYRoy19XQmXOz EGcuz4q5OoUi+ITejOU= ) ;; ADDITIONAL SECTION (18 records) dns.edu.cn. 172800 IN A 202.38.109.35 ns2.cernet.net. 172800 IN A 103.137.60.203 ns3.cernet.net. 172800 IN A 101.4.62.35 ns4.cernet.net. 172800 IN A 193.174.75.78 ns4.cernet.net. 172800 IN A 101.4.62.203 ns5.cernet.net. 172800 IN A 137.189.6.21 ns5.cernet.net. 172800 IN A 166.111.8.30 dns2.edu.cn. 172800 IN A 202.112.0.13 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 ns2.cernet.net. 172800 IN AAAA 2001:dd9::203 ns3.cernet.net. 172800 IN AAAA 2001:250:62::35 ns4.cernet.net. 172800 IN AAAA 2001:250:62::203 ns4.cernet.net. 172800 IN AAAA 2001:638:d:b104::2 ns5.cernet.net. 172800 IN AAAA 2405:3000:3:6::15 ns5.cernet.net. 172800 IN AAAA 2402:f000:1:801::8:30 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 dns.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. Ph08DqeAFCU7kEWYn3nVwP2RscjEnRxQG0yTCx6A2FibYbtvpZAPBHsPtFnvF7I2JwJlKhYmnCgN /PQlcLph1zlLqkNK36WzIupRPT0kBW8zKIeRoMmLb92ygG3XUf0RIFkIJeT/YP7u4RImvrdzIEz+ f9rWyckIjPCCLPwW5V0= ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.cuhk.hk for edu.cn/SOA
	Received 1123 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 1123 octets ;; HEADER SECTION ;; id = 4896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN SOA ;; ANSWER SECTION (2 records) edu.cn. 172800 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 172800 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) ;; AUTHORITY SECTION (7 records) edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN NS ns4.cernet.net. edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS ns5.cernet.net. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS ns3.cernet.net. edu.cn. 172800 IN RRSIG ( NS 8 2 172800 20240615023350 20240516022232 21204 edu.cn. SqgtDCpUu0H5DT+vhjouxcWe8YTPyw5HEEqQN8xlD234b93rjDkJNSGuH1BYPL7vwDZDLPIzUYo1 ANMVi57C4XSUqSyyN1qtAOSNr328cbe+tSm6KQZyzo2v2DkCqVOdVUmzpHMOnxomYRoy19XQmXOz EGcuz4q5OoUi+ITejOU= ) ;; ADDITIONAL SECTION (8 records) dns.edu.cn. 172800 IN A 202.38.109.35 dns2.edu.cn. 172800 IN A 202.112.0.13 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 dns.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. Ph08DqeAFCU7kEWYn3nVwP2RscjEnRxQG0yTCx6A2FibYbtvpZAPBHsPtFnvF7I2JwJlKhYmnCgN /PQlcLph1zlLqkNK36WzIupRPT0kBW8zKIeRoMmLb92ygG3XUf0RIFkIJeT/YP7u4RImvrdzIEz+ f9rWyckIjPCCLPwW5V0= ) dns.edu.cn. 172800 IN RRSIG ( AAAA 8 3 172800 20240609153035 20240510152842 21204 edu.cn. LUxJupKz/kiejWdiqyid1QDSWGYwY4pKZGA6gxTH8n50vu2ya5zcvq/1O9MJ/ORY0YxkH5rGKGwq /eQb2GD4TcmZ6432eui9DnLhCSWvCvp3e6P1IA5OkqYffjQxxPJMS+WZbpp8J4pWKtllCpk5BVHN JvsHrc0NQnmTrMn06gM= ) dns2.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. UHRJ2+9WM76FKJTRJqvp2l6f/LhJLku0ZPB1FkVzoDe4QrEHjcOndmT6WNPBvWnYxFrrY8AF1FgI t2wZJCHexnitzjFIyqBuFcFCfElAYWD+7L5+hRRxMUFuT4QwAEgLY+HBTMx4TcPrvMmglBO3yAsL VllryZRNS5975XlUQyY= ) ;; { "EDNS-VERSION": 0 }
	ns2.cuhk.hk serial (2024051676) differs from ns2.cernet.net serial (2024051678)
	Query to dns.edu.cn for edu.cn/SOA
	Received 1129 bytes from 202.38.109.35
	;; Response received from [202.38.109.35] 1129 octets ;; HEADER SECTION ;; id = 37857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN SOA ;; ANSWER SECTION (2 records) edu.cn. 172800 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 172800 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) ;; AUTHORITY SECTION (7 records) edu.cn. 172800 IN NS ns3.cernet.net. edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS ns5.cernet.net. edu.cn. 172800 IN NS ns4.cernet.net. edu.cn. 172800 IN RRSIG ( NS 8 2 172800 20240615023350 20240516022232 21204 edu.cn. SqgtDCpUu0H5DT+vhjouxcWe8YTPyw5HEEqQN8xlD234b93rjDkJNSGuH1BYPL7vwDZDLPIzUYo1 ANMVi57C4XSUqSyyN1qtAOSNr328cbe+tSm6KQZyzo2v2DkCqVOdVUmzpHMOnxomYRoy19XQmXOz EGcuz4q5OoUi+ITejOU= ) ;; ADDITIONAL SECTION (8 records) dns.edu.cn. 172800 IN A 202.38.109.35 dns2.edu.cn. 172800 IN A 202.112.0.13 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 dns.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. Ph08DqeAFCU7kEWYn3nVwP2RscjEnRxQG0yTCx6A2FibYbtvpZAPBHsPtFnvF7I2JwJlKhYmnCgN /PQlcLph1zlLqkNK36WzIupRPT0kBW8zKIeRoMmLb92ygG3XUf0RIFkIJeT/YP7u4RImvrdzIEz+ f9rWyckIjPCCLPwW5V0= ) dns.edu.cn. 172800 IN RRSIG ( AAAA 8 3 172800 20240609153035 20240510152842 21204 edu.cn. LUxJupKz/kiejWdiqyid1QDSWGYwY4pKZGA6gxTH8n50vu2ya5zcvq/1O9MJ/ORY0YxkH5rGKGwq /eQb2GD4TcmZ6432eui9DnLhCSWvCvp3e6P1IA5OkqYffjQxxPJMS+WZbpp8J4pWKtllCpk5BVHN JvsHrc0NQnmTrMn06gM= ) dns2.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. UHRJ2+9WM76FKJTRJqvp2l6f/LhJLku0ZPB1FkVzoDe4QrEHjcOndmT6WNPBvWnYxFrrY8AF1FgI t2wZJCHexnitzjFIyqBuFcFCfElAYWD+7L5+hRRxMUFuT4QwAEgLY+HBTMx4TcPrvMmglBO3yAsL VllryZRNS5975XlUQyY= ) ;; { "EDNS-VERSION": 0 }
	dns.edu.cn serial (2024051676) differs from ns2.cernet.net serial (2024051678)
	Query to deneb.dfn.de for edu.cn/SOA
	Received 1135 bytes from 192.76.176.9
	;; Response received from [192.76.176.9] 1135 octets ;; HEADER SECTION ;; id = 28798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN SOA ;; ANSWER SECTION (2 records) edu.cn. 172800 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 172800 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) ;; AUTHORITY SECTION (7 records) edu.cn. 172800 IN NS dns2.edu.cn. edu.cn. 172800 IN NS ns2.cernet.net. edu.cn. 172800 IN NS dns.edu.cn. edu.cn. 172800 IN NS ns3.cernet.net. edu.cn. 172800 IN NS ns4.cernet.net. edu.cn. 172800 IN NS ns5.cernet.net. edu.cn. 172800 IN RRSIG ( NS 8 2 172800 20240615023350 20240516022232 21204 edu.cn. SqgtDCpUu0H5DT+vhjouxcWe8YTPyw5HEEqQN8xlD234b93rjDkJNSGuH1BYPL7vwDZDLPIzUYo1 ANMVi57C4XSUqSyyN1qtAOSNr328cbe+tSm6KQZyzo2v2DkCqVOdVUmzpHMOnxomYRoy19XQmXOz EGcuz4q5OoUi+ITejOU= ) ;; ADDITIONAL SECTION (8 records) dns.edu.cn. 172800 IN A 202.38.109.35 dns2.edu.cn. 172800 IN A 202.112.0.13 dns.edu.cn. 172800 IN AAAA 2001:250:c006::35 dns2.edu.cn. 172800 IN AAAA 2001:da8:1:100::13 dns.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. Ph08DqeAFCU7kEWYn3nVwP2RscjEnRxQG0yTCx6A2FibYbtvpZAPBHsPtFnvF7I2JwJlKhYmnCgN /PQlcLph1zlLqkNK36WzIupRPT0kBW8zKIeRoMmLb92ygG3XUf0RIFkIJeT/YP7u4RImvrdzIEz+ f9rWyckIjPCCLPwW5V0= ) dns.edu.cn. 172800 IN RRSIG ( AAAA 8 3 172800 20240609153035 20240510152842 21204 edu.cn. LUxJupKz/kiejWdiqyid1QDSWGYwY4pKZGA6gxTH8n50vu2ya5zcvq/1O9MJ/ORY0YxkH5rGKGwq /eQb2GD4TcmZ6432eui9DnLhCSWvCvp3e6P1IA5OkqYffjQxxPJMS+WZbpp8J4pWKtllCpk5BVHN JvsHrc0NQnmTrMn06gM= ) dns2.edu.cn. 172800 IN RRSIG ( A 8 3 172800 20240609153035 20240510152842 21204 edu.cn. UHRJ2+9WM76FKJTRJqvp2l6f/LhJLku0ZPB1FkVzoDe4QrEHjcOndmT6WNPBvWnYxFrrY8AF1FgI t2wZJCHexnitzjFIyqBuFcFCfElAYWD+7L5+hRRxMUFuT4QwAEgLY+HBTMx4TcPrvMmglBO3yAsL VllryZRNS5975XlUQyY= ) ;; { "EDNS-VERSION": 0 }
	deneb.dfn.de serial (2024051676) differs from ns2.cernet.net serial (2024051678)
	Query to dns2.edu.cn for edu.cn/A
	Received 504 bytes from 202.112.0.13
	;; Response received from [202.112.0.13] 504 octets ;; HEADER SECTION ;; id = 7421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051678 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= )`
	RRSIG=21204 and DNSKEY=21204 verifies the SOA RRset

edu.cn

	Query to ns2.cuhk.hk for edu.cn/A
	Received 504 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 504 octets ;; HEADER SECTION ;; id = 64933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.cuhk.hk is authoritative for edu.cn
	Found RRSIG signed by edu.cn zone
	Query to ns2.cuhk.hk for edu.cn/A
	Received 504 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 504 octets ;; HEADER SECTION ;; id = 29072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= )`
	RRSIG=21204 and DNSKEY=21204 verifies the SOA RRset

edu.cn

	Query to dns.edu.cn for edu.cn/A
	Received 510 bytes from 202.38.109.35
	;; Response received from [202.38.109.35] 510 octets ;; HEADER SECTION ;; id = 17988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.edu.cn is authoritative for edu.cn
	Found RRSIG signed by edu.cn zone
	Query to dns.edu.cn for edu.cn/A
	Received 510 bytes from 202.38.109.35
	;; Response received from [202.38.109.35] 510 octets ;; HEADER SECTION ;; id = 17447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= )`
	RRSIG=21204 and DNSKEY=21204 verifies the SOA RRset

edu.cn

	Query to deneb.dfn.de for edu.cn/A
	Received 510 bytes from 192.76.176.9
	;; Response received from [192.76.176.9] 510 octets ;; HEADER SECTION ;; id = 31948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	deneb.dfn.de is authoritative for edu.cn
	Found RRSIG signed by edu.cn zone
	Query to deneb.dfn.de for edu.cn/A
	Received 510 bytes from 192.76.176.9
	;; Response received from [192.76.176.9] 510 octets ;; HEADER SECTION ;; id = 32712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051676 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616020150 20240517010150 21204 edu.cn. R4x3TaMYAM2PoC29gY1ksHaql9dAkJMU6rgKtM2w0JEyPQ5hCB2QvJ80WmYCw/6d6qrKbZwELPh2 FGCnlQ13okKHKIlr1nR1NpBsvtxUR3qTxjwXlqHlUccM6HjfOsB+4bwzCwldWiNgvVoJbT9qg5hl NEKSeH55INNoDChh2gs= )`
	RRSIG=21204 and DNSKEY=21204 verifies the SOA RRset

edu.cn

	Query to ns2.cernet.net for edu.cn/A
	Received 504 bytes from 103.137.60.203
	;; Response received from [103.137.60.203] 504 octets ;; HEADER SECTION ;; id = 28252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu.cn. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) edu.cn. 21600 IN SOA ( dns.edu.cn. hostmaster.net.edu.cn. 2024051678 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 21600 ;minimum ) edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN NSEC3 ( 1 0 10 afff ctreek0pl4gkr64n4use6s6n34ctrb5j NS SOA RRSIG DNSKEY NSEC3PARAM ) CTRAKIMHIFH1V57SCJI8UPP12PVHO83P.edu.cn. 21600 IN RRSIG ( NSEC3 8 3 21600 20240613091301 20240514083338 21204 edu.cn. ktC5bWT7VSatPq2zOmBHfHmMHT9AfT2KnAMCzlcxHsKT+YeWJWi/92qHLMYbm5+QmF7qYeJ3350n axQUBAZmXMLSjD79G6Ruo45aybdWFmnXruzgu4XAuoYPEbQb//sOZruOhmV4AprggUUzmgkuEIX4 cI6wV91Vc/xq3LtEEOE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.cernet.net is authoritative for edu.cn
	Found RRSIG signed by edu.cn zone
	Query to ns2.cernet.net for edu.cn/A
	Timeout querying ns2.cernet.net/202.112.62.35 for edu.cn/A
	All Queries to ns2.cernet.net for edu.cn/A timed out or failed
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`edu.cn. 21600 IN RRSIG ( SOA 8 2 172800 20240616024837 20240517014837 21204 edu.cn. C8+KXNJMfQRN/EAkYqpWPfjpFgTeq9E6ParAJSswM5PEZxcN/QyENE1G/l4B0SAHbLScSmw69XAa ClV8SN/iOwa0Hb/HG8oS4b9OM9RDO+qy27vRR6snQQ92zLikfDjUQMyY0LVMGVBl8yRlvTnSNntY KLJZ+pKST55cR0EUSFY= )`
	RRSIG=21204 and DNSKEY=21204 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test edu.cn at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: