DNSSEC Debugger - epd.gov.hk

Domain Name:

Time: 2024-05-18 23:12:18 UTC

Analyzing DNSSEC problems for epd.gov.hk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 16451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for epd.gov.hk/A
	Received 924 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 924 octets ;; HEADER SECTION ;; id = 4719 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) hk. 172800 IN NS c.hkirc.net.hk. hk. 172800 IN NS d.hkirc.net.hk. hk. 172800 IN NS m.hkirc.net.hk. hk. 172800 IN NS t.hkirc.net.hk. hk. 172800 IN NS u.hkirc.net.hk. hk. 172800 IN NS v.hkirc.net.hk. hk. 172800 IN NS x.hkirc.net.hk. hk. 172800 IN NS y.hkirc.net.hk. hk. 172800 IN NS z.hkirc.net.hk. hk. 86400 IN DS ( 46912 8 2 b8d909d194e3d904345d0a2af39fb5a8510d3bdc31d6c7e9173d3ddaa8132296 ) hk. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . SMZx9Gz9J2JUY4xq2KoO/5dG72Uio96UNDsaTp+X+s8LrtlOHOphRm2FnD5vPEIzGqNIkc104m2x HVwEx+GftMwriNZLMYxSf1JfcAtVQqFpNoT8fqc4+XWuR4Yfy5/H3G3qjsmT/UWr2snaRdYspPZM hoaYfRFg7fUV2LRouy3do/jOoZvoN9d1Iw3GAuhoLDU+J2Gv31cad4pL8UU954+v/J6G46B33ZcR 6poUCtyG6V5tElSrpoi1TjBY/pxJc8EmbPPmmhoKkxixbxbGsdJ7kgVZP98u9zUJli/+yb0oPozw rZnwzZ+cImZXnuxAhFk1GJyhanhVGIVKDtVoWw== ) ;; ADDITIONAL SECTION (19 records) c.hkirc.net.hk. 172800 IN A 203.119.2.218 d.hkirc.net.hk. 172800 IN A 203.119.87.218 m.hkirc.net.hk. 172800 IN A 125.208.49.10 t.hkirc.net.hk. 172800 IN A 202.12.31.53 u.hkirc.net.hk. 172800 IN A 210.201.138.58 v.hkirc.net.hk. 172800 IN A 204.61.216.46 x.hkirc.net.hk. 172800 IN A 202.45.188.39 y.hkirc.net.hk. 172800 IN A 137.189.6.21 z.hkirc.net.hk. 172800 IN A 194.146.106.70 c.hkirc.net.hk. 172800 IN AAAA 2001:dca:4000::cb77:2da d.hkirc.net.hk. 172800 IN AAAA 2001:dca:2000::cb77:57da m.hkirc.net.hk. 172800 IN AAAA 2001:dc7:feff::10 t.hkirc.net.hk. 172800 IN AAAA 2001:dd8:12::53 u.hkirc.net.hk. 172800 IN AAAA 2404:0:10a0::58 v.hkirc.net.hk. 172800 IN AAAA 2001:500:14:6046:ad::1 x.hkirc.net.hk. 172800 IN AAAA 2405:3001:1:3a::27 y.hkirc.net.hk. 172800 IN AAAA 2405:3000:3:6::15 z.hkirc.net.hk. 172800 IN AAAA 2001:67c:1010:17::53 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for hk/DNSKEY
	Received 916 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 916 octets ;; HEADER SECTION ;; id = 53557 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) hk. 172800 IN NS c.hkirc.net.hk. hk. 172800 IN NS d.hkirc.net.hk. hk. 172800 IN NS m.hkirc.net.hk. hk. 172800 IN NS t.hkirc.net.hk. hk. 172800 IN NS u.hkirc.net.hk. hk. 172800 IN NS v.hkirc.net.hk. hk. 172800 IN NS x.hkirc.net.hk. hk. 172800 IN NS y.hkirc.net.hk. hk. 172800 IN NS z.hkirc.net.hk. hk. 86400 IN DS ( 46912 8 2 b8d909d194e3d904345d0a2af39fb5a8510d3bdc31d6c7e9173d3ddaa8132296 ) hk. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . SMZx9Gz9J2JUY4xq2KoO/5dG72Uio96UNDsaTp+X+s8LrtlOHOphRm2FnD5vPEIzGqNIkc104m2x HVwEx+GftMwriNZLMYxSf1JfcAtVQqFpNoT8fqc4+XWuR4Yfy5/H3G3qjsmT/UWr2snaRdYspPZM hoaYfRFg7fUV2LRouy3do/jOoZvoN9d1Iw3GAuhoLDU+J2Gv31cad4pL8UU954+v/J6G46B33ZcR 6poUCtyG6V5tElSrpoi1TjBY/pxJc8EmbPPmmhoKkxixbxbGsdJ7kgVZP98u9zUJli/+yb0oPozw rZnwzZ+cImZXnuxAhFk1GJyhanhVGIVKDtVoWw== ) ;; ADDITIONAL SECTION (19 records) c.hkirc.net.hk. 172800 IN A 203.119.2.218 c.hkirc.net.hk. 172800 IN AAAA 2001:dca:4000::cb77:2da d.hkirc.net.hk. 172800 IN A 203.119.87.218 d.hkirc.net.hk. 172800 IN AAAA 2001:dca:2000::cb77:57da m.hkirc.net.hk. 172800 IN A 125.208.49.10 m.hkirc.net.hk. 172800 IN AAAA 2001:dc7:feff::10 t.hkirc.net.hk. 172800 IN A 202.12.31.53 t.hkirc.net.hk. 172800 IN AAAA 2001:dd8:12::53 u.hkirc.net.hk. 172800 IN A 210.201.138.58 u.hkirc.net.hk. 172800 IN AAAA 2404:0:10a0::58 v.hkirc.net.hk. 172800 IN A 204.61.216.46 v.hkirc.net.hk. 172800 IN AAAA 2001:500:14:6046:ad::1 x.hkirc.net.hk. 172800 IN A 202.45.188.39 x.hkirc.net.hk. 172800 IN AAAA 2405:3001:1:3a::27 y.hkirc.net.hk. 172800 IN A 137.189.6.21 y.hkirc.net.hk. 172800 IN AAAA 2405:3000:3:6::15 z.hkirc.net.hk. 172800 IN A 194.146.106.70 z.hkirc.net.hk. 172800 IN AAAA 2001:67c:1010:17::53 ;; { "EDNS-VERSION": 0 }
	Found child zone hk

	Checking DS between . and hk
	Query to a.root-servers.net for hk/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 28622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hk. IN DS ;; ANSWER SECTION (2 records) hk. 86400 IN DS ( 46912 8 2 b8d909d194e3d904345d0a2af39fb5a8510d3bdc31d6c7e9173d3ddaa8132296 ) hk. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . SMZx9Gz9J2JUY4xq2KoO/5dG72Uio96UNDsaTp+X+s8LrtlOHOphRm2FnD5vPEIzGqNIkc104m2x HVwEx+GftMwriNZLMYxSf1JfcAtVQqFpNoT8fqc4+XWuR4Yfy5/H3G3qjsmT/UWr2snaRdYspPZM hoaYfRFg7fUV2LRouy3do/jOoZvoN9d1Iw3GAuhoLDU+J2Gv31cad4pL8UU954+v/J6G46B33ZcR 6poUCtyG6V5tElSrpoi1TjBY/pxJc8EmbPPmmhoKkxixbxbGsdJ7kgVZP98u9zUJli/+yb0oPozw rZnwzZ+cImZXnuxAhFk1GJyhanhVGIVKDtVoWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for hk in the . zone
	DS=46912/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`hk. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . SMZx9Gz9J2JUY4xq2KoO/5dG72Uio96UNDsaTp+X+s8LrtlOHOphRm2FnD5vPEIzGqNIkc104m2x HVwEx+GftMwriNZLMYxSf1JfcAtVQqFpNoT8fqc4+XWuR4Yfy5/H3G3qjsmT/UWr2snaRdYspPZM hoaYfRFg7fUV2LRouy3do/jOoZvoN9d1Iw3GAuhoLDU+J2Gv31cad4pL8UU954+v/J6G46B33ZcR 6poUCtyG6V5tElSrpoi1TjBY/pxJc8EmbPPmmhoKkxixbxbGsdJ7kgVZP98u9zUJli/+yb0oPozw rZnwzZ+cImZXnuxAhFk1GJyhanhVGIVKDtVoWw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=46912/SHA-256 is now in the chain-of-trust
	`hk. 86400 IN DS ( 46912 8 2 b8d909d194e3d904345d0a2af39fb5a8510d3bdc31d6c7e9173d3ddaa8132296 )`
	Query to m.hkirc.net.hk for hk/DNSKEY
	Received 1169 bytes from 125.208.49.10
	;; Response received from [125.208.49.10] 1169 octets ;; HEADER SECTION ;; id = 39201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hk. IN DNSKEY ;; ANSWER SECTION (5 records) hk. 86400 IN DNSKEY ( 256 3 8 AwEAAahO+xZ66jbqG3X2VCg0YwuQbA2ihrJwkxH7BccaIdx+1VS5MAgZ6prYuInvgtAJM3clzhcW sxy/AU7OZFHU55QtJ00SdnsTPEJT2rrHOEjlQ2cVI1uqEjYO6jFDrLM24RpRZRHIcrxI7qg5fuV1 +dRmBQ+6x5xcfn37ho8qoQER ) ; Key ID = 32679 hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeM64n0fHNkAZXZy3bPjr0W+uGLmeZQkOFG1/m0bEx/NOeBEwIfYByUVZIU6FhwweUZaq8od NZ1vcp4KMPpr2qWFSplmqAsyXFRKJVV3CzWlX1+eLa/tpy1go2Gya/V4R1KIX5s7zfhJBXjdDiZF drpn8rxAMVdZDORUV5Ys6Q/1OWYabK0r4bc/1HmLRba7lehI18oOVAAhiVV/oZIBybi6IKdowm4O xLXwRxgjt3RuepYVC3DQtZ85OGtTZHro3VQ3TG/NqOoqSl/H+35k8bBiOQrqxWu64ny8+uMDDjPq Sf25Mn7LWEtaL8vWK4HX0E8I8VuZ26k2dymjj6tg5rU= ) ; Key ID = 52069 hk. 86400 IN DNSKEY ( 256 3 8 AwEAAeAtOd2tIvXroilQ3j2P1EPHj+FhVdJtQa4ldj84TycSHF9V+RqCdU+FHMqcFmv16NCT94Xw p3eOc81M1N9gtmxOyzqrdaIJWjNpsuHKmV42blWGPnOpvkBKd9Ae/tYPPLEbkmnXvBiim9iXRGur Acdo2mT+h45Umfn1fGFf/9kz ) ; Key ID = 12918 hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeEah4hHs1zWTBdaNML26tw1RedciOBybDHOFPj/iwEsXQ5VwPFh2zA8LVSvyVY5ZHKJ7k2e 0oYv/TpCdmcajQ5dgR++K+BP1ERggH08wrvCthwvHductwItFCnsVSSmw0DLs2+p1TkAMCyDe8xn r1B6cfeREGUUpUgaCf/rfp8H097HJ/IQ7OkvE6tlLhOaHIj4G1v89BU5Sofsi69z+X0mCHRvkySF iq3JiqHJQEKUMVUJh0MS+zSNTiE2VD/0cyHgV+ruOv4pIinJEZehIfluqDTuFIKLATxlmABOPuOq Ztdz/OS+LbuiOwTAevUZMEjxMUpvMycnfwwliuxG7lM= ) ; Key ID = 46912 hk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240617202629 20240518192629 46912 hk. udKhxcdZDXj5/rqoT1bW4c/rLtM73JBg3BBdPxNDG85cWMkqu2udskWgqNsejhpx9hBD6mSHNTQy 6RNWYqdqd3p/HSAry7/1XZ6NQDDoDNslevvuQcx/Izlmcf3SXBMFDbvOZHmMf0MMdgwn6XXJpKZp UQlmApb0z4A0kkJpS8NYxxKTqsLP6Eb9lG39HGBn/zJaPVIDehKZmffRmdTvVYUd1J30Sk4xkbiD WXFth0I7Ay4pIkNbdSYf3YKu17/On7ux//vrCPN77vB1K7Z90BPAziH/LPQvG4paTNMS+eDKaank gJ3OZZSHGJVZms+rEO+BymWaRnmJyuPj6rgOpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for hk
	`hk. 86400 IN DNSKEY ( 256 3 8 AwEAAahO+xZ66jbqG3X2VCg0YwuQbA2ihrJwkxH7BccaIdx+1VS5MAgZ6prYuInvgtAJM3clzhcW sxy/AU7OZFHU55QtJ00SdnsTPEJT2rrHOEjlQ2cVI1uqEjYO6jFDrLM24RpRZRHIcrxI7qg5fuV1 +dRmBQ+6x5xcfn37ho8qoQER ) ; Key ID = 32679`
	`hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeM64n0fHNkAZXZy3bPjr0W+uGLmeZQkOFG1/m0bEx/NOeBEwIfYByUVZIU6FhwweUZaq8od NZ1vcp4KMPpr2qWFSplmqAsyXFRKJVV3CzWlX1+eLa/tpy1go2Gya/V4R1KIX5s7zfhJBXjdDiZF drpn8rxAMVdZDORUV5Ys6Q/1OWYabK0r4bc/1HmLRba7lehI18oOVAAhiVV/oZIBybi6IKdowm4O xLXwRxgjt3RuepYVC3DQtZ85OGtTZHro3VQ3TG/NqOoqSl/H+35k8bBiOQrqxWu64ny8+uMDDjPq Sf25Mn7LWEtaL8vWK4HX0E8I8VuZ26k2dymjj6tg5rU= ) ; Key ID = 52069`
	`hk. 86400 IN DNSKEY ( 256 3 8 AwEAAeAtOd2tIvXroilQ3j2P1EPHj+FhVdJtQa4ldj84TycSHF9V+RqCdU+FHMqcFmv16NCT94Xw p3eOc81M1N9gtmxOyzqrdaIJWjNpsuHKmV42blWGPnOpvkBKd9Ae/tYPPLEbkmnXvBiim9iXRGur Acdo2mT+h45Umfn1fGFf/9kz ) ; Key ID = 12918`
	`hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeEah4hHs1zWTBdaNML26tw1RedciOBybDHOFPj/iwEsXQ5VwPFh2zA8LVSvyVY5ZHKJ7k2e 0oYv/TpCdmcajQ5dgR++K+BP1ERggH08wrvCthwvHductwItFCnsVSSmw0DLs2+p1TkAMCyDe8xn r1B6cfeREGUUpUgaCf/rfp8H097HJ/IQ7OkvE6tlLhOaHIj4G1v89BU5Sofsi69z+X0mCHRvkySF iq3JiqHJQEKUMVUJh0MS+zSNTiE2VD/0cyHgV+ruOv4pIinJEZehIfluqDTuFIKLATxlmABOPuOq Ztdz/OS+LbuiOwTAevUZMEjxMUpvMycnfwwliuxG7lM= ) ; Key ID = 46912`
	DNSKEY=46912/SEP is now in the chain-of-trust
	DS=46912/SHA-256 verifies DNSKEY=46912/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240617202629 20240518192629 46912 hk. udKhxcdZDXj5/rqoT1bW4c/rLtM73JBg3BBdPxNDG85cWMkqu2udskWgqNsejhpx9hBD6mSHNTQy 6RNWYqdqd3p/HSAry7/1XZ6NQDDoDNslevvuQcx/Izlmcf3SXBMFDbvOZHmMf0MMdgwn6XXJpKZp UQlmApb0z4A0kkJpS8NYxxKTqsLP6Eb9lG39HGBn/zJaPVIDehKZmffRmdTvVYUd1J30Sk4xkbiD WXFth0I7Ay4pIkNbdSYf3YKu17/On7ux//vrCPN77vB1K7Z90BPAziH/LPQvG4paTNMS+eDKaank gJ3OZZSHGJVZms+rEO+BymWaRnmJyuPj6rgOpQ== )`
	RRSIG=46912 and DNSKEY=46912/SEP verifies the DNSKEY RRset
	DNSKEY=32679 is now in the chain-of-trust
	DNSKEY=52069/SEP is now in the chain-of-trust
	DNSKEY=12918 is now in the chain-of-trust
	Query to y.hkirc.net.hk for epd.gov.hk/A
	Received 371 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 371 octets ;; HEADER SECTION ;; id = 51401 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) epd.gov.hk. 28800 IN NS ns32.hk.net. epd.gov.hk. 28800 IN NS ns31.hk.net. epd.gov.hk. 28800 IN NS ns22.hk.net. epd.gov.hk. 28800 IN NS ns21.hk.net. epd.gov.hk. 28800 IN DS 8446 8 1 da74a08b794935d013430953e3e1d5949553a6da epd.gov.hk. 28800 IN DS ( 8446 8 2 3c9ed4ab5a20eb8c2efe4996179e47d5a3ddc0bd21ca44674e551dd177d65f02 ) epd.gov.hk. 28800 IN RRSIG ( DS 8 3 28800 20240617202544 20240518192544 9621 gov.hk. Wi8gGO7Ldj6whZDnzf/PWakS40XAPZfZUfweLctjXxFMqK92Q0yyueNA0GrhpHSIyh8dxTxpKKns vAhmnAhjpdfj9NuYzAbu78k656nWkJPIyIQna9vjq3ZCBkYY410xzw7oAGDw7eVmMgQjvwANij3A 6sV7jwn7FKTloCx5pEU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to t.hkirc.net.hk for gov.hk/DNSKEY
	Received 1177 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 1177 octets ;; HEADER SECTION ;; id = 35541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.hk. IN DNSKEY ;; ANSWER SECTION (5 records) gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeFWnVw9Wa8nRPASInxYv4n2CtuURz5vQmJJb5oXYb4gQcsK4wccdw6NYIRR038Ezpig8nDu oIkMMzRoXcU8I3L2QdzeVwiyfvTOdnlF7741nB4OEG2CORgpXHwqFlTxxKHymkztssoAXufCRWi6 KVerty2uvjvakBsMPKbiKZw965AlmzKjdcDqE10JVy/A3t7XgynR0V+PMo59/KBDZK3Y/vjn9Gyc SPtG6WVP1iOwYzHVcDvlMJCZemQCQSzyKr72PrQWE2FjoH5j+XVRe5v08z/gf1tKCMfzD2o8h+WE MpkCh0xwpfxaq/MkhNOZFliFqsIjdjJpL6tCkzFPVFc= ) ; Key ID = 58207 gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAcGV9Bi3y8UiilijyZykHA4uYG7IYgLOmbamPMLReh8YaA4qjN/lL2v0jlEOOqAJInt9dIUI Y4P4Z0dBrgTlYRnI+zTCTbW7ZUd1HSQx8zRsGq706lPenj7jEcLGGic3DLz3KZb7RpPFOK0S9oM4 U0vYib3zWX0u365d5i505xIX ) ; Key ID = 9621 gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAb42cYKuP3vSGUelBmH79I4Iza+8GN6oEBzktuu83I3LcQhkMV7nlAt9yPW5Err/LIXVA3Fb 7hVxJ93vZ92seyd3qdT2y/RMnplMUJ8RgEWXxdVZ1jFl65nsAC2MwfzHSYxlbLkmqtmdq9LOTSo4 rSeBUQxCkZV6DooKijOiLqyh ) ; Key ID = 37590 gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAbNax0useMFcvWQYK98kPOYauKgLoF9sYYDbrJbVCpPxP1ykQr1bC2OPIqExAUBlGqtsIA5P P/Dd6JFewluhQT2qRVK3A28FwP3Dr3CZFT2+5jvxRCf2H8tsn5JWpkcu2VpbDNqTYgGkxq1SlNi4 TMCfDYgr5kMGGProJQpLAWyEQXpATz4KBLvVW7R1HDMNuqvfYdFpZwbGfJStKor+qXSEG2XkgSPG D7egGziFuMGN/s7T2nX5amXUxtTDBE0HOFUma1+SI6eG4ZYK/xGiNCCreDq/x69XWMPsyRSzKCWu p9VkVXTDUaCeymVQzH2GCnsPeBOPYU8MjAwfuqbhVUc= ) ; Key ID = 24475 gov.hk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240617202544 20240518192544 58207 gov.hk. 1LjWODf+f6XjWn/VSSLwdf+CrmstUM+gxf+fSRROtdtH0i5pJQgJ2cbFx4XsiSoUqCsuG/gXBaSd BunlbGkqGYzqL748ePCGXzNpq/EwnEGGABhKEEHKAv9Ia48F0M9cTpzeUUJurYcQ0r5ZhW68PNOd nsEoBcbKeknHDHMdKs7u07kca123jyZ2UI/80YVVuC68BeQfnwJ0nRCt8aJ3gBB8sqIGcbxeTdwb ezwvkNtamtO606LOC+izM04bsBVSYbzx4GxU95Th0vJmzc/Um3R9kqY0ndUDKHhmOEnflNB8YCRE dzTIjGzxxVH6mGJgIg8i1HoVSkWewXoze+10kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone gov.hk
	Attempting to learn nameservers for gov.hk
	Query to v.hkirc.net.hk for gov.hk/NS
	Received 357 bytes from 204.61.216.46
	;; Response received from [204.61.216.46] 357 octets ;; HEADER SECTION ;; id = 4506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 10 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.hk. IN NS ;; ANSWER SECTION (10 records) gov.hk. 172800 IN NS c.hkirc.net.hk. gov.hk. 172800 IN NS u.hkirc.net.hk. gov.hk. 172800 IN NS y.hkirc.net.hk. gov.hk. 172800 IN NS x.hkirc.net.hk. gov.hk. 172800 IN NS m.hkirc.net.hk. gov.hk. 172800 IN NS z.hkirc.net.hk. gov.hk. 172800 IN NS t.hkirc.net.hk. gov.hk. 172800 IN NS v.hkirc.net.hk. gov.hk. 172800 IN NS d.hkirc.net.hk. gov.hk. 172800 IN RRSIG ( NS 8 2 172800 20240617202544 20240518192544 9621 gov.hk. gh1TSGF4hrS5utNSxgqSFs8yEIRtARTI6UWAST9tlo7/18pRikMCQl3FsYBBiJ52KEFlpJZPvayG YP8dnHGlBpNTLOA2Lbb0mdqlWVjCWdCqqVjExdVOih1SJGEi3V2PggK4sC7diGu2X9VLRwdQAPlO qZnu6J36FHps7BTxQrs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found gov.hk nameservers: c.hkirc.net.hk, u.hkirc.net.hk, y.hkirc.net.hk, x.hkirc.net.hk, m.hkirc.net.hk, z.hkirc.net.hk, t.hkirc.net.hk, v.hkirc.net.hk, d.hkirc.net.hk

gov.hk

	Checking DS between hk and gov.hk
	Query to y.hkirc.net.hk for gov.hk/DS
	Received 245 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 245 octets ;; HEADER SECTION ;; id = 29916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.hk. IN DS ;; ANSWER SECTION (2 records) gov.hk. 28800 IN DS ( 58207 8 2 fbbdb5f220c1eb0436533df5f2551a4a002e9ddb6728148883552a09767c0f90 ) gov.hk. 28800 IN RRSIG ( DS 8 2 28800 20240617202629 20240518192629 32679 hk. DgmkJokjj9d5j7YxUIbsgtKcs/cSfcdvLUwTYlR+rQwC+SnectOs15oFto2DKgHL8KkoYRQI9+v3 F1OcmYbtybiFP2coiP9dpEVXX/pnAqs51wASEsHX1qjUB9n+G3pxEJq/0n9lav9Cj458Y/aj54o9 yVjKISKdLRebvojuc8E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.hk in the hk zone
	DS=58207/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov.hk. 28800 IN RRSIG ( DS 8 2 28800 20240617202629 20240518192629 32679 hk. DgmkJokjj9d5j7YxUIbsgtKcs/cSfcdvLUwTYlR+rQwC+SnectOs15oFto2DKgHL8KkoYRQI9+v3 F1OcmYbtybiFP2coiP9dpEVXX/pnAqs51wASEsHX1qjUB9n+G3pxEJq/0n9lav9Cj458Y/aj54o9 yVjKISKdLRebvojuc8E= )`
	RRSIG=32679 and DNSKEY=32679 verifies the DS RRset
	DS=58207/SHA-256 is now in the chain-of-trust
	`gov.hk. 28800 IN DS ( 58207 8 2 fbbdb5f220c1eb0436533df5f2551a4a002e9ddb6728148883552a09767c0f90 )`
	Query to d.hkirc.net.hk for gov.hk/DNSKEY
	Received 1177 bytes from 203.119.87.218
	;; Response received from [203.119.87.218] 1177 octets ;; HEADER SECTION ;; id = 31015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.hk. IN DNSKEY ;; ANSWER SECTION (5 records) gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAcGV9Bi3y8UiilijyZykHA4uYG7IYgLOmbamPMLReh8YaA4qjN/lL2v0jlEOOqAJInt9dIUI Y4P4Z0dBrgTlYRnI+zTCTbW7ZUd1HSQx8zRsGq706lPenj7jEcLGGic3DLz3KZb7RpPFOK0S9oM4 U0vYib3zWX0u365d5i505xIX ) ; Key ID = 9621 gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAbNax0useMFcvWQYK98kPOYauKgLoF9sYYDbrJbVCpPxP1ykQr1bC2OPIqExAUBlGqtsIA5P P/Dd6JFewluhQT2qRVK3A28FwP3Dr3CZFT2+5jvxRCf2H8tsn5JWpkcu2VpbDNqTYgGkxq1SlNi4 TMCfDYgr5kMGGProJQpLAWyEQXpATz4KBLvVW7R1HDMNuqvfYdFpZwbGfJStKor+qXSEG2XkgSPG D7egGziFuMGN/s7T2nX5amXUxtTDBE0HOFUma1+SI6eG4ZYK/xGiNCCreDq/x69XWMPsyRSzKCWu p9VkVXTDUaCeymVQzH2GCnsPeBOPYU8MjAwfuqbhVUc= ) ; Key ID = 24475 gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAb42cYKuP3vSGUelBmH79I4Iza+8GN6oEBzktuu83I3LcQhkMV7nlAt9yPW5Err/LIXVA3Fb 7hVxJ93vZ92seyd3qdT2y/RMnplMUJ8RgEWXxdVZ1jFl65nsAC2MwfzHSYxlbLkmqtmdq9LOTSo4 rSeBUQxCkZV6DooKijOiLqyh ) ; Key ID = 37590 gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeFWnVw9Wa8nRPASInxYv4n2CtuURz5vQmJJb5oXYb4gQcsK4wccdw6NYIRR038Ezpig8nDu oIkMMzRoXcU8I3L2QdzeVwiyfvTOdnlF7741nB4OEG2CORgpXHwqFlTxxKHymkztssoAXufCRWi6 KVerty2uvjvakBsMPKbiKZw965AlmzKjdcDqE10JVy/A3t7XgynR0V+PMo59/KBDZK3Y/vjn9Gyc SPtG6WVP1iOwYzHVcDvlMJCZemQCQSzyKr72PrQWE2FjoH5j+XVRe5v08z/gf1tKCMfzD2o8h+WE MpkCh0xwpfxaq/MkhNOZFliFqsIjdjJpL6tCkzFPVFc= ) ; Key ID = 58207 gov.hk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240617202544 20240518192544 58207 gov.hk. 1LjWODf+f6XjWn/VSSLwdf+CrmstUM+gxf+fSRROtdtH0i5pJQgJ2cbFx4XsiSoUqCsuG/gXBaSd BunlbGkqGYzqL748ePCGXzNpq/EwnEGGABhKEEHKAv9Ia48F0M9cTpzeUUJurYcQ0r5ZhW68PNOd nsEoBcbKeknHDHMdKs7u07kca123jyZ2UI/80YVVuC68BeQfnwJ0nRCt8aJ3gBB8sqIGcbxeTdwb ezwvkNtamtO606LOC+izM04bsBVSYbzx4GxU95Th0vJmzc/Um3R9kqY0ndUDKHhmOEnflNB8YCRE dzTIjGzxxVH6mGJgIg8i1HoVSkWewXoze+10kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov.hk
	`gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAcGV9Bi3y8UiilijyZykHA4uYG7IYgLOmbamPMLReh8YaA4qjN/lL2v0jlEOOqAJInt9dIUI Y4P4Z0dBrgTlYRnI+zTCTbW7ZUd1HSQx8zRsGq706lPenj7jEcLGGic3DLz3KZb7RpPFOK0S9oM4 U0vYib3zWX0u365d5i505xIX ) ; Key ID = 9621`
	`gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAbNax0useMFcvWQYK98kPOYauKgLoF9sYYDbrJbVCpPxP1ykQr1bC2OPIqExAUBlGqtsIA5P P/Dd6JFewluhQT2qRVK3A28FwP3Dr3CZFT2+5jvxRCf2H8tsn5JWpkcu2VpbDNqTYgGkxq1SlNi4 TMCfDYgr5kMGGProJQpLAWyEQXpATz4KBLvVW7R1HDMNuqvfYdFpZwbGfJStKor+qXSEG2XkgSPG D7egGziFuMGN/s7T2nX5amXUxtTDBE0HOFUma1+SI6eG4ZYK/xGiNCCreDq/x69XWMPsyRSzKCWu p9VkVXTDUaCeymVQzH2GCnsPeBOPYU8MjAwfuqbhVUc= ) ; Key ID = 24475`
	`gov.hk. 86400 IN DNSKEY ( 256 3 8 AwEAAb42cYKuP3vSGUelBmH79I4Iza+8GN6oEBzktuu83I3LcQhkMV7nlAt9yPW5Err/LIXVA3Fb 7hVxJ93vZ92seyd3qdT2y/RMnplMUJ8RgEWXxdVZ1jFl65nsAC2MwfzHSYxlbLkmqtmdq9LOTSo4 rSeBUQxCkZV6DooKijOiLqyh ) ; Key ID = 37590`
	`gov.hk. 86400 IN DNSKEY ( 257 3 8 AwEAAeFWnVw9Wa8nRPASInxYv4n2CtuURz5vQmJJb5oXYb4gQcsK4wccdw6NYIRR038Ezpig8nDu oIkMMzRoXcU8I3L2QdzeVwiyfvTOdnlF7741nB4OEG2CORgpXHwqFlTxxKHymkztssoAXufCRWi6 KVerty2uvjvakBsMPKbiKZw965AlmzKjdcDqE10JVy/A3t7XgynR0V+PMo59/KBDZK3Y/vjn9Gyc SPtG6WVP1iOwYzHVcDvlMJCZemQCQSzyKr72PrQWE2FjoH5j+XVRe5v08z/gf1tKCMfzD2o8h+WE MpkCh0xwpfxaq/MkhNOZFliFqsIjdjJpL6tCkzFPVFc= ) ; Key ID = 58207`
	DNSKEY=58207/SEP is now in the chain-of-trust
	DS=58207/SHA-256 verifies DNSKEY=58207/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.hk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240617202544 20240518192544 58207 gov.hk. 1LjWODf+f6XjWn/VSSLwdf+CrmstUM+gxf+fSRROtdtH0i5pJQgJ2cbFx4XsiSoUqCsuG/gXBaSd BunlbGkqGYzqL748ePCGXzNpq/EwnEGGABhKEEHKAv9Ia48F0M9cTpzeUUJurYcQ0r5ZhW68PNOd nsEoBcbKeknHDHMdKs7u07kca123jyZ2UI/80YVVuC68BeQfnwJ0nRCt8aJ3gBB8sqIGcbxeTdwb ezwvkNtamtO606LOC+izM04bsBVSYbzx4GxU95Th0vJmzc/Um3R9kqY0ndUDKHhmOEnflNB8YCRE dzTIjGzxxVH6mGJgIg8i1HoVSkWewXoze+10kg== )`
	RRSIG=58207 and DNSKEY=58207/SEP verifies the DNSKEY RRset
	DNSKEY=9621 is now in the chain-of-trust
	DNSKEY=24475/SEP is now in the chain-of-trust
	DNSKEY=37590 is now in the chain-of-trust
	Query to z.hkirc.net.hk for epd.gov.hk/A
	Received 371 bytes from 194.146.106.70
	;; Response received from [194.146.106.70] 371 octets ;; HEADER SECTION ;; id = 14603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) epd.gov.hk. 28800 IN NS ns21.hk.net. epd.gov.hk. 28800 IN NS ns31.hk.net. epd.gov.hk. 28800 IN NS ns22.hk.net. epd.gov.hk. 28800 IN NS ns32.hk.net. epd.gov.hk. 28800 IN DS 8446 8 1 da74a08b794935d013430953e3e1d5949553a6da epd.gov.hk. 28800 IN DS ( 8446 8 2 3c9ed4ab5a20eb8c2efe4996179e47d5a3ddc0bd21ca44674e551dd177d65f02 ) epd.gov.hk. 28800 IN RRSIG ( DS 8 3 28800 20240617202544 20240518192544 9621 gov.hk. Wi8gGO7Ldj6whZDnzf/PWakS40XAPZfZUfweLctjXxFMqK92Q0yyueNA0GrhpHSIyh8dxTxpKKns vAhmnAhjpdfj9NuYzAbu78k656nWkJPIyIQna9vjq3ZCBkYY410xzw7oAGDw7eVmMgQjvwANij3A 6sV7jwn7FKTloCx5pEU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to y.hkirc.net.hk for epd.gov.hk/DNSKEY
	Received 371 bytes from 137.189.6.21
	;; Response received from [137.189.6.21] 371 octets ;; HEADER SECTION ;; id = 14375 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) epd.gov.hk. 28800 IN NS ns21.hk.net. epd.gov.hk. 28800 IN NS ns32.hk.net. epd.gov.hk. 28800 IN NS ns22.hk.net. epd.gov.hk. 28800 IN NS ns31.hk.net. epd.gov.hk. 28800 IN DS ( 8446 8 2 3c9ed4ab5a20eb8c2efe4996179e47d5a3ddc0bd21ca44674e551dd177d65f02 ) epd.gov.hk. 28800 IN DS 8446 8 1 da74a08b794935d013430953e3e1d5949553a6da epd.gov.hk. 28800 IN RRSIG ( DS 8 3 28800 20240617202544 20240518192544 9621 gov.hk. Wi8gGO7Ldj6whZDnzf/PWakS40XAPZfZUfweLctjXxFMqK92Q0yyueNA0GrhpHSIyh8dxTxpKKns vAhmnAhjpdfj9NuYzAbu78k656nWkJPIyIQna9vjq3ZCBkYY410xzw7oAGDw7eVmMgQjvwANij3A 6sV7jwn7FKTloCx5pEU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone epd.gov.hk

epd.gov.hk

	Checking DS between gov.hk and epd.gov.hk
	Query to u.hkirc.net.hk for epd.gov.hk/DS
	Received 289 bytes from 210.201.138.58
	;; Response received from [210.201.138.58] 289 octets ;; HEADER SECTION ;; id = 32285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN DS ;; ANSWER SECTION (3 records) epd.gov.hk. 28800 IN DS 8446 8 1 da74a08b794935d013430953e3e1d5949553a6da epd.gov.hk. 28800 IN DS ( 8446 8 2 3c9ed4ab5a20eb8c2efe4996179e47d5a3ddc0bd21ca44674e551dd177d65f02 ) epd.gov.hk. 28800 IN RRSIG ( DS 8 3 28800 20240617202544 20240518192544 9621 gov.hk. Wi8gGO7Ldj6whZDnzf/PWakS40XAPZfZUfweLctjXxFMqK92Q0yyueNA0GrhpHSIyh8dxTxpKKns vAhmnAhjpdfj9NuYzAbu78k656nWkJPIyIQna9vjq3ZCBkYY410xzw7oAGDw7eVmMgQjvwANij3A 6sV7jwn7FKTloCx5pEU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for epd.gov.hk in the gov.hk zone
	DS=8446/SHA-1 uses a deprecated digest algorithm
	DS=8446/SHA-1 has algorithm RSASHA256
	DS=8446/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`epd.gov.hk. 28800 IN RRSIG ( DS 8 3 28800 20240617202544 20240518192544 9621 gov.hk. Wi8gGO7Ldj6whZDnzf/PWakS40XAPZfZUfweLctjXxFMqK92Q0yyueNA0GrhpHSIyh8dxTxpKKns vAhmnAhjpdfj9NuYzAbu78k656nWkJPIyIQna9vjq3ZCBkYY410xzw7oAGDw7eVmMgQjvwANij3A 6sV7jwn7FKTloCx5pEU= )`
	RRSIG=9621 and DNSKEY=9621 verifies the DS RRset
	DS=8446/SHA-1 is now in the chain-of-trust
	`epd.gov.hk. 28800 IN DS 8446 8 1 da74a08b794935d013430953e3e1d5949553a6da`
	`epd.gov.hk. 28800 IN DS ( 8446 8 2 3c9ed4ab5a20eb8c2efe4996179e47d5a3ddc0bd21ca44674e551dd177d65f02 )`
	Query to ns32.hk.net for epd.gov.hk/DNSKEY
	Received 931 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 931 octets ;; HEADER SECTION ;; id = 55891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN DNSKEY ;; ANSWER SECTION (4 records) epd.gov.hk. 600 IN DNSKEY ( 256 3 8 AwEAAbHM+Xy+2iFm9+tLG+qam/Q1Z7RNLtRk1GrDMwn3S7AYNtrhCTjzan4mw3Qa7wfguua5zBru pTTduVth/HveZLDkrnWRNjCD4RS4/zQhrGWNA+F0vnKEolV5ujpRx2qjrgZUPnVj0TDWJYco2hdB 5QuvbrIGc1vUGmB5kCTqYEqr ) ; Key ID = 26043 epd.gov.hk. 600 IN DNSKEY ( 257 3 8 AwEAAeE3SejDTYl1L5ZWuj4us1ayJlXPSD51t4lv8C7JVhRoRQbfvyoH6I6q32IGPNAzTUsDt5mL 2boppcdZpRFvjU/bN82a7LSVwtXHPyFLapozUjiUcnpmDW3bEXlHYxcA72r6EkJzQfBxUcbteJw6 2nYrKKTJs5Y0z0bygymEQ+zdQXxX7wBIPARp5FruWnFaSqS/TZZ09LgENQxwxQR5TCZQf8HAk2iY lr076baMTBT0+QGOf8Ti8RDzCbwafE/I2ROKMYp8xiICOH3Rci0DKMTK5K0/v+7OxjCgv8kX7POR dJj5ADCkx5YI0ztGOnwYvWsAGLKD1P8alxmgbqoVUac= ) ; Key ID = 8446 epd.gov.hk. 600 IN RRSIG ( DNSKEY 8 3 600 20240610175909 20240511173236 8446 epd.gov.hk. b+XHqqNRdoi9lAgPKVkv6GDSAvJaPsR8EaXjelQk6xPsSOipvN6MYM/j9VptBqWiFG77jFnEzoh0 zlMqUnv9tIQIHpsjLT2hsV2+EUPx5sONpMKKaDRgJPlA/QGyZyG83yDIS32qtjjxgHOHVlmnjRNg 8zq7gKfHM1Vf7MK0xqozBJ9RLANnTcboOueWQ/mOzrTRi1lVk3s9FmbJvvwnKQKaZHNgnYo5kuVr ZFtpS8NHzF1ZzVjiSez+UTEotkvfmE7yiYJYVWqQNCZctJ1u6H0FgVjpGe8gJTGTWvrfPLDp0S9H ZYdlwqFBNrZmUQlmk79T1OJQDPseYE4tQl64wg== ) epd.gov.hk. 600 IN RRSIG ( DNSKEY 8 3 600 20240610175909 20240511173236 26043 epd.gov.hk. ktnmc2N31nJ7r4BRX/5IR4zWQEUAZC2FuoO6wmU0pZHgpkv/7QhNKexexq4y4ec0HRutrtBsycB6 HwSLHbL/BdrqVIizuRU5Mpm5QbEEWP6QhYEX2K5jIRdJuR0zI2f8HwcrNaZouswmpqlDDFQSiU+Q 4wHbloyPhPkdpITC9L8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for epd.gov.hk
	`epd.gov.hk. 600 IN DNSKEY ( 256 3 8 AwEAAbHM+Xy+2iFm9+tLG+qam/Q1Z7RNLtRk1GrDMwn3S7AYNtrhCTjzan4mw3Qa7wfguua5zBru pTTduVth/HveZLDkrnWRNjCD4RS4/zQhrGWNA+F0vnKEolV5ujpRx2qjrgZUPnVj0TDWJYco2hdB 5QuvbrIGc1vUGmB5kCTqYEqr ) ; Key ID = 26043`
	`epd.gov.hk. 600 IN DNSKEY ( 257 3 8 AwEAAeE3SejDTYl1L5ZWuj4us1ayJlXPSD51t4lv8C7JVhRoRQbfvyoH6I6q32IGPNAzTUsDt5mL 2boppcdZpRFvjU/bN82a7LSVwtXHPyFLapozUjiUcnpmDW3bEXlHYxcA72r6EkJzQfBxUcbteJw6 2nYrKKTJs5Y0z0bygymEQ+zdQXxX7wBIPARp5FruWnFaSqS/TZZ09LgENQxwxQR5TCZQf8HAk2iY lr076baMTBT0+QGOf8Ti8RDzCbwafE/I2ROKMYp8xiICOH3Rci0DKMTK5K0/v+7OxjCgv8kX7POR dJj5ADCkx5YI0ztGOnwYvWsAGLKD1P8alxmgbqoVUac= ) ; Key ID = 8446`
	DNSKEY=8446/SEP is now in the chain-of-trust
	DS=8446/SHA-1 verifies DNSKEY=8446/SEP
	DS=8446/SHA-256 verifies DNSKEY=8446/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`epd.gov.hk. 600 IN RRSIG ( DNSKEY 8 3 600 20240610175909 20240511173236 8446 epd.gov.hk. b+XHqqNRdoi9lAgPKVkv6GDSAvJaPsR8EaXjelQk6xPsSOipvN6MYM/j9VptBqWiFG77jFnEzoh0 zlMqUnv9tIQIHpsjLT2hsV2+EUPx5sONpMKKaDRgJPlA/QGyZyG83yDIS32qtjjxgHOHVlmnjRNg 8zq7gKfHM1Vf7MK0xqozBJ9RLANnTcboOueWQ/mOzrTRi1lVk3s9FmbJvvwnKQKaZHNgnYo5kuVr ZFtpS8NHzF1ZzVjiSez+UTEotkvfmE7yiYJYVWqQNCZctJ1u6H0FgVjpGe8gJTGTWvrfPLDp0S9H ZYdlwqFBNrZmUQlmk79T1OJQDPseYE4tQl64wg== )`
	`epd.gov.hk. 600 IN RRSIG ( DNSKEY 8 3 600 20240610175909 20240511173236 26043 epd.gov.hk. ktnmc2N31nJ7r4BRX/5IR4zWQEUAZC2FuoO6wmU0pZHgpkv/7QhNKexexq4y4ec0HRutrtBsycB6 HwSLHbL/BdrqVIizuRU5Mpm5QbEEWP6QhYEX2K5jIRdJuR0zI2f8HwcrNaZouswmpqlDDFQSiU+Q 4wHbloyPhPkdpITC9L8= )`
	RRSIG=8446 and DNSKEY=8446/SEP verifies the DNSKEY RRset
	RRSIG=26043 and DNSKEY=26043 verifies the DNSKEY RRset
	DNSKEY=26043 is now in the chain-of-trust
	Query to ns22.hk.net for epd.gov.hk/A
	Received 597 bytes from 202.76.4.2
	;; Response received from [202.76.4.2] 597 octets ;; HEADER SECTION ;; id = 3920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	ns22.hk.net is authoritative for epd.gov.hk
	Found RRSIG signed by epd.gov.hk zone
	Query to ns21.hk.net for epd.gov.hk/SOA
	Received 644 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 644 octets ;; HEADER SECTION ;; id = 26472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN SOA ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN SOA ( ns21.hk.net. hostmaster.citictel-cpc.com. 2024050634 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) epd.gov.hk. 600 IN RRSIG ( SOA 8 3 600 20240616133835 20240517123835 26043 epd.gov.hk. W3kM5stVrDWyggApa/+IlBe2gdLwvsmOuJ5qrdgUGRXFubEo+ghb7tDxHReWmv6ppMS72J5YD19Y yHX5kYPxiBeTE6s8Ak0qG140dXqYZZQIbH6UCGdQ7s5Oi0Zj4/yFqrRWbNdXsWO11YWNx0z+Gavl SaZXK3tz/sEyLdAG860= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	Query to ns31.hk.net for epd.gov.hk/SOA
	Received 644 bytes from 152.101.4.137
	;; Response received from [152.101.4.137] 644 octets ;; HEADER SECTION ;; id = 25511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN SOA ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN SOA ( ns21.hk.net. hostmaster.citictel-cpc.com. 2024050634 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) epd.gov.hk. 600 IN RRSIG ( SOA 8 3 600 20240616133835 20240517123835 26043 epd.gov.hk. W3kM5stVrDWyggApa/+IlBe2gdLwvsmOuJ5qrdgUGRXFubEo+ghb7tDxHReWmv6ppMS72J5YD19Y yHX5kYPxiBeTE6s8Ak0qG140dXqYZZQIbH6UCGdQ7s5Oi0Zj4/yFqrRWbNdXsWO11YWNx0z+Gavl SaZXK3tz/sEyLdAG860= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	Query to ns32.hk.net for epd.gov.hk/SOA
	Received 644 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 644 octets ;; HEADER SECTION ;; id = 25054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN SOA ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN SOA ( ns21.hk.net. hostmaster.citictel-cpc.com. 2024050634 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) epd.gov.hk. 600 IN RRSIG ( SOA 8 3 600 20240616133835 20240517123835 26043 epd.gov.hk. W3kM5stVrDWyggApa/+IlBe2gdLwvsmOuJ5qrdgUGRXFubEo+ghb7tDxHReWmv6ppMS72J5YD19Y yHX5kYPxiBeTE6s8Ak0qG140dXqYZZQIbH6UCGdQ7s5Oi0Zj4/yFqrRWbNdXsWO11YWNx0z+Gavl SaZXK3tz/sEyLdAG860= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	Query to ns22.hk.net for epd.gov.hk/A
	Received 597 bytes from 202.76.4.2
	;; Response received from [202.76.4.2] 597 octets ;; HEADER SECTION ;; id = 16229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	epd.gov.hk A RR has value 202.73.1.99
	Found 1 RRSIGs over A RRset
	`epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= )`
	RRSIG=26043 and DNSKEY=26043 verifies the A RRset

epd.gov.hk

	Query to ns31.hk.net for epd.gov.hk/A
	Received 597 bytes from 152.101.4.137
	;; Response received from [152.101.4.137] 597 octets ;; HEADER SECTION ;; id = 7909 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	ns31.hk.net is authoritative for epd.gov.hk
	Found RRSIG signed by epd.gov.hk zone
	Query to ns31.hk.net for epd.gov.hk/A
	Received 597 bytes from 152.101.4.137
	;; Response received from [152.101.4.137] 597 octets ;; HEADER SECTION ;; id = 44805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	epd.gov.hk A RR has value 202.73.1.99
	Found 1 RRSIGs over A RRset
	`epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= )`
	RRSIG=26043 and DNSKEY=26043 verifies the A RRset

epd.gov.hk

	Query to ns32.hk.net for epd.gov.hk/A
	Received 597 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 597 octets ;; HEADER SECTION ;; id = 36392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	ns32.hk.net is authoritative for epd.gov.hk
	Found RRSIG signed by epd.gov.hk zone
	Query to ns32.hk.net for epd.gov.hk/A
	Received 597 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 597 octets ;; HEADER SECTION ;; id = 37004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	epd.gov.hk A RR has value 202.73.1.99
	Found 1 RRSIGs over A RRset
	`epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= )`
	RRSIG=26043 and DNSKEY=26043 verifies the A RRset

epd.gov.hk

	Query to ns21.hk.net for epd.gov.hk/A
	Received 597 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 597 octets ;; HEADER SECTION ;; id = 55863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	ns21.hk.net is authoritative for epd.gov.hk
	Found RRSIG signed by epd.gov.hk zone
	Query to ns21.hk.net for epd.gov.hk/A
	Received 597 bytes from 210.184.16.66
	;; Response received from [210.184.16.66] 597 octets ;; HEADER SECTION ;; id = 11490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epd.gov.hk. IN A ;; ANSWER SECTION (2 records) epd.gov.hk. 600 IN A 202.73.1.99 epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= ) ;; AUTHORITY SECTION (5 records) epd.gov.hk. 600 IN NS ns21.hk.net. epd.gov.hk. 600 IN NS ns31.hk.net. epd.gov.hk. 600 IN NS ns22.hk.net. epd.gov.hk. 600 IN NS ns32.hk.net. epd.gov.hk. 600 IN RRSIG ( NS 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. R12tba22+y8UPFjG/p1Z6hG6qDbSBOSxGnSWmRYRtBSkWS38R6rQSA49fIPKHONWTwlsAfITxN/A dCcSF9pxP6hYWCPmefSktLUJGAK22RbEEWXdMuZT2DQpRn3EzOgtcU49Q/515sJzyjADBWi+chSs nzQ2mKy15RtF8lFv18Y= ) ;; ADDITIONAL SECTION (7 records) ns21.hk.net. 600 IN A 210.184.16.66 ns21.hk.net. 600 IN AAAA 2403:2c00:2::1 ns22.hk.net. 600 IN A 202.76.4.2 ns31.hk.net. 600 IN A 152.101.4.137 ns31.hk.net. 600 IN AAAA 2403:2c00:4::8 ns32.hk.net. 600 IN A 202.76.4.2 ;; { "EDNS-VERSION": 0 }
	epd.gov.hk A RR has value 202.73.1.99
	Found 1 RRSIGs over A RRset
	`epd.gov.hk. 600 IN RRSIG ( A 8 3 600 20240610162928 20240511161232 26043 epd.gov.hk. Js9pOqq8rijetKSF0/vOb74LF0/KWHhWsQkFaovfoOFslMokUJsJv3KjKnk+kL2LHcaVcMr1oIim uXEe7jKA+4aFY2NiUlbGe6w74XLEHG6anmor7BQ2Vaf8MO24kJrfuSWAkAe2GoC38N9olDtoe8yN n+VZTjCfdmG2Njy1TDk= )`
	RRSIG=26043 and DNSKEY=26043 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test epd.gov.hk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: