DNSSEC Debugger - freebsd.org

Domain Name:

Time: 2024-05-17 06:31:54 UTC

Analyzing DNSSEC problems for freebsd.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 16495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for freebsd.org/A
	Received 777 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 777 octets ;; HEADER SECTION ;; id = 23151 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . jgcjz15EoCn52nC5q0Af8BM58F41mk+eH1qjTRIx8h4WZqGakrOAa+hmruSGnabjNJMDygUDGxoa NsXcFWqxOyHieQNX+eD2VqnPbx4ZDWvYBP8Qa9HBfFuF69zBmO4CktfVFvEwuwhP+cn+Smy3+8sN fweuE8S8PxuDRM55HByMqwnK/Gif59Iq2Aap4Ihik9dV1BfQqd6M7bSlm1ZkktkeyG/FsLtrpWWW MAi0e7wbw9CytO8H89NqUcfzxtF7TUTfBTVpz7nmMcDM/gu+iw2YBSukzsgFZeqAA3TOQTckj+YF pV8Yg1TNDQY/RzUyUg6ayC7yQyCQykr/75A9gg== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for org/DNSKEY
	Received 769 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 769 octets ;; HEADER SECTION ;; id = 23434 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . jgcjz15EoCn52nC5q0Af8BM58F41mk+eH1qjTRIx8h4WZqGakrOAa+hmruSGnabjNJMDygUDGxoa NsXcFWqxOyHieQNX+eD2VqnPbx4ZDWvYBP8Qa9HBfFuF69zBmO4CktfVFvEwuwhP+cn+Smy3+8sN fweuE8S8PxuDRM55HByMqwnK/Gif59Iq2Aap4Ihik9dV1BfQqd6M7bSlm1ZkktkeyG/FsLtrpWWW MAi0e7wbw9CytO8H89NqUcfzxtF7TUTfBTVpz7nmMcDM/gu+iw2YBSukzsgFZeqAA3TOQTckj+YF pV8Yg1TNDQY/RzUyUg6ayC7yQyCQykr/75A9gg== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to k.root-servers.net for org/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 17175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . jgcjz15EoCn52nC5q0Af8BM58F41mk+eH1qjTRIx8h4WZqGakrOAa+hmruSGnabjNJMDygUDGxoa NsXcFWqxOyHieQNX+eD2VqnPbx4ZDWvYBP8Qa9HBfFuF69zBmO4CktfVFvEwuwhP+cn+Smy3+8sN fweuE8S8PxuDRM55HByMqwnK/Gif59Iq2Aap4Ihik9dV1BfQqd6M7bSlm1ZkktkeyG/FsLtrpWWW MAi0e7wbw9CytO8H89NqUcfzxtF7TUTfBTVpz7nmMcDM/gu+iw2YBSukzsgFZeqAA3TOQTckj+YF pV8Yg1TNDQY/RzUyUg6ayC7yQyCQykr/75A9gg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . jgcjz15EoCn52nC5q0Af8BM58F41mk+eH1qjTRIx8h4WZqGakrOAa+hmruSGnabjNJMDygUDGxoa NsXcFWqxOyHieQNX+eD2VqnPbx4ZDWvYBP8Qa9HBfFuF69zBmO4CktfVFvEwuwhP+cn+Smy3+8sN fweuE8S8PxuDRM55HByMqwnK/Gif59Iq2Aap4Ihik9dV1BfQqd6M7bSlm1ZkktkeyG/FsLtrpWWW MAi0e7wbw9CytO8H89NqUcfzxtF7TUTfBTVpz7nmMcDM/gu+iw2YBSukzsgFZeqAA3TOQTckj+YF pV8Yg1TNDQY/RzUyUg6ayC7yQyCQykr/75A9gg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to d0.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 895 octets ;; HEADER SECTION ;; id = 23936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=3093 is now in the chain-of-trust
	DNSKEY=55149 is now in the chain-of-trust
	Query to d0.org.afilias-nst.org for freebsd.org/A
	Received 435 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 435 octets ;; HEADER SECTION ;; id = 25115 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. MlV6xWtHbWat887fEhSrF74v/Bbj+f8bmiU/zASZmEIRzMg6ogihjr7JZEHLHzpqC3ZPzwGvtI08 ch1H0/614A6yOHrjwyg5vpH4lhQ6eNXxcIjjO2syUlGYoyKyMc5gk1szxoD5Zr+uLAnilWWlD/uX DVqugAk0XxUfFezly40= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; { "EDNS-VERSION": 0 }
	Query to a2.org.afilias-nst.info for freebsd.org/DNSKEY
	Received 435 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 435 octets ;; HEADER SECTION ;; id = 33054 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. MlV6xWtHbWat887fEhSrF74v/Bbj+f8bmiU/zASZmEIRzMg6ogihjr7JZEHLHzpqC3ZPzwGvtI08 ch1H0/614A6yOHrjwyg5vpH4lhQ6eNXxcIjjO2syUlGYoyKyMc5gk1szxoD5Zr+uLAnilWWlD/uX DVqugAk0XxUfFezly40= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; { "EDNS-VERSION": 0 }
	Found child zone freebsd.org

freebsd.org

	Checking DS between org and freebsd.org
	Query to b0.org.afilias-nst.org for freebsd.org/DS
	Received 251 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 251 octets ;; HEADER SECTION ;; id = 3332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DS ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. MlV6xWtHbWat887fEhSrF74v/Bbj+f8bmiU/zASZmEIRzMg6ogihjr7JZEHLHzpqC3ZPzwGvtI08 ch1H0/614A6yOHrjwyg5vpH4lhQ6eNXxcIjjO2syUlGYoyKyMc5gk1szxoD5Zr+uLAnilWWlD/uX DVqugAk0XxUfFezly40= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for freebsd.org in the org zone
	DS=920/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20240530152824 20240509142824 3093 org. MlV6xWtHbWat887fEhSrF74v/Bbj+f8bmiU/zASZmEIRzMg6ogihjr7JZEHLHzpqC3ZPzwGvtI08 ch1H0/614A6yOHrjwyg5vpH4lhQ6eNXxcIjjO2syUlGYoyKyMc5gk1szxoD5Zr+uLAnilWWlD/uX DVqugAk0XxUfFezly40= )`
	RRSIG=3093 and DNSKEY=3093 verifies the DS RRset
	DS=920/SHA-256 is now in the chain-of-trust
	`freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 )`
	Query to ns5.he.net for freebsd.org/DNSKEY
	Received 1167 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 1167 octets ;; HEADER SECTION ;; id = 39798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (4 records) freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4TBiFC7nS0ftub6cRdtP7gEzXExRhGagjfYbV9ffRM0sja8OZFDQDlTE01o4szsSIsa7m2 zR6zMiCoRDQtNDEcffEvs3aoZuiUm95ce5Vqqx3Uq5ZtCFRnulxOVnkVs3JYMViC3GJZ4DO+tWGM oNrNsUlbMrS4ixvyXhA2gG1/tCG31Ya1vVp/UJOsjmy+FaOQA1NpVdUXhxiRxVx+QecimMtzAVDN 4S1QWSBk2/PVzyHnqBkzt1wZpPHLPbkSgsJKU0h0xKmkgLrbjx9PEu+d3TTRg7ThVmspwej6YNKK a5U7b6aarn7EIzrcg5nBugKxj18kh54lQOGyhmeR9R8= ) ; Key ID = 50134 freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAeogC6aJzRlO5Vcv9kynDgdrgr2P6ayNZ2/8UW7znheZld3LN68BTjwLckxJsj0H836YIEqD yPdeE4jjPh+OP3kH6WRVwU+Jj9iOGb+XmWJKyJ/tVf8WulJOkE6WxGwdvWrv6pS4xJiNLwkF3RXp myns2ioyE1jbWwJ55UnuvP4a9h7SB2F0vNL0gSuo+SfEn9kmPDyjVMlDJo4wcTc0pZ4e/U33uj8X eMM0pjjfa2Lay0bV6g4zQTsYRmQcCxFkmae5qB5YQdK4mYEBRN1jkBmuHZXduSvL0oI/QvfFfMfK JHw1j+jYViCKjBvU8oVKDenD7I6TDoe+Ls6t8bnDyj0= ) ; Key ID = 920 freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240529111844 20240514232359 920 freebsd.org. gc6yLle3QAINeB9/h6HMakmcPa/4wk1egvPg0SDPZh3/LL0RUvotz2V9KCyR4VxyHNXS37oqQGQS yB5pdJ8mDeiRIjURgpSk3kd4BD9HJQR0cWpTJHY0wYwXCYnknrcD1kxJ+6zDJZYUhIXFU7wAFwwv EAvVApnMySAVPhAYeeEeICsWR1ImWFMSCKZRKFIbyz8xwbOFwLnjbVtKC3/7WVZ9OHpEnHVxKupP grUjlMjULE5mN8Sx5f+N/zUsxbG2QZPI8ZpqXVOfuKE00q4sLIDBMKB/HxZWvAuy/msg4fQQ+ue9 aK5Li+i00NQwL0Rjkx+7uSd5JzGq9TvPt9dusQ== ) freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAaALAy/b3sJzRFVBSu2WOA1nCFX1afExcFwr/TXS/jsVUGeAjQVo1DoEBkujBtA2nv0ClQjj 2jqWAS5uWyz/T/+6PS82Np92v4aC0gP1k6AXsnrhWx9OpT6g189Z7eZzpRhCE87j4ZUhb9DglAMe cN+s9P6XJwz7fXa+QknFIcvB/hmRsROz3MlVnmW+1rlX1rGpm85AlC2AlXHS4XXqphnVw6tbjG0p glfndRpuASlRWqDBLiWcdhRL+2EF4F7y1FGAn7/PSYmu6plqBuuOszpbBzwhzgExNGRk6ZUyrSs+ uytArTRt+1HahESKfHTsu1ZyCsFwW4ItlxLneDXF4mc= ) ; Key ID = 21606 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for freebsd.org
	`freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4TBiFC7nS0ftub6cRdtP7gEzXExRhGagjfYbV9ffRM0sja8OZFDQDlTE01o4szsSIsa7m2 zR6zMiCoRDQtNDEcffEvs3aoZuiUm95ce5Vqqx3Uq5ZtCFRnulxOVnkVs3JYMViC3GJZ4DO+tWGM oNrNsUlbMrS4ixvyXhA2gG1/tCG31Ya1vVp/UJOsjmy+FaOQA1NpVdUXhxiRxVx+QecimMtzAVDN 4S1QWSBk2/PVzyHnqBkzt1wZpPHLPbkSgsJKU0h0xKmkgLrbjx9PEu+d3TTRg7ThVmspwej6YNKK a5U7b6aarn7EIzrcg5nBugKxj18kh54lQOGyhmeR9R8= ) ; Key ID = 50134`
	`freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAeogC6aJzRlO5Vcv9kynDgdrgr2P6ayNZ2/8UW7znheZld3LN68BTjwLckxJsj0H836YIEqD yPdeE4jjPh+OP3kH6WRVwU+Jj9iOGb+XmWJKyJ/tVf8WulJOkE6WxGwdvWrv6pS4xJiNLwkF3RXp myns2ioyE1jbWwJ55UnuvP4a9h7SB2F0vNL0gSuo+SfEn9kmPDyjVMlDJo4wcTc0pZ4e/U33uj8X eMM0pjjfa2Lay0bV6g4zQTsYRmQcCxFkmae5qB5YQdK4mYEBRN1jkBmuHZXduSvL0oI/QvfFfMfK JHw1j+jYViCKjBvU8oVKDenD7I6TDoe+Ls6t8bnDyj0= ) ; Key ID = 920`
	`freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAaALAy/b3sJzRFVBSu2WOA1nCFX1afExcFwr/TXS/jsVUGeAjQVo1DoEBkujBtA2nv0ClQjj 2jqWAS5uWyz/T/+6PS82Np92v4aC0gP1k6AXsnrhWx9OpT6g189Z7eZzpRhCE87j4ZUhb9DglAMe cN+s9P6XJwz7fXa+QknFIcvB/hmRsROz3MlVnmW+1rlX1rGpm85AlC2AlXHS4XXqphnVw6tbjG0p glfndRpuASlRWqDBLiWcdhRL+2EF4F7y1FGAn7/PSYmu6plqBuuOszpbBzwhzgExNGRk6ZUyrSs+ uytArTRt+1HahESKfHTsu1ZyCsFwW4ItlxLneDXF4mc= ) ; Key ID = 21606`
	DNSKEY=920/SEP is now in the chain-of-trust
	DS=920/SHA-256 verifies DNSKEY=920/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240529111844 20240514232359 920 freebsd.org. gc6yLle3QAINeB9/h6HMakmcPa/4wk1egvPg0SDPZh3/LL0RUvotz2V9KCyR4VxyHNXS37oqQGQS yB5pdJ8mDeiRIjURgpSk3kd4BD9HJQR0cWpTJHY0wYwXCYnknrcD1kxJ+6zDJZYUhIXFU7wAFwwv EAvVApnMySAVPhAYeeEeICsWR1ImWFMSCKZRKFIbyz8xwbOFwLnjbVtKC3/7WVZ9OHpEnHVxKupP grUjlMjULE5mN8Sx5f+N/zUsxbG2QZPI8ZpqXVOfuKE00q4sLIDBMKB/HxZWvAuy/msg4fQQ+ue9 aK5Li+i00NQwL0Rjkx+7uSd5JzGq9TvPt9dusQ== )`
	RRSIG=920 and DNSKEY=920/SEP verifies the DNSKEY RRset
	DNSKEY=50134 is now in the chain-of-trust
	DNSKEY=21606 is now in the chain-of-trust
	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from [163.237.210.233] 355 octets ;; HEADER SECTION ;; id = 23417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns3.he.net for freebsd.org/SOA
	Received 390 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 390 octets ;; HEADER SECTION ;; id = 37460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20240530232334 20240517050807 21606 freebsd.org. X547PdtMCqHhazRiAyuueQWdabpxr8gWXSu/cWszbk7eDMuToU/lbWxFrULOBog9AHBsOrk3Dmey /cqE367zCL1qAyIb+0Lkmecgpl6J1Uv1u/GfcWfiJ2yZR7pzKq+brM9gfcP+TuBJPpAh9Yj7tepp kKmJZGNeZt0ezJfMliVV2sulKSvCr+kjQtA8HFYSJOQtQbYClgXxnB7VblMS9zNa+JVMb7d/Frcp +UNt2AjsHSya+xXhJndBCdlKAKOIc+8Gaqb84y8mhZZ9nNRDlObYtW/bcqnNhDew9b7UzPkn/Agr D1l0SBBaY+g9eNwh0X8cWP3c8E1roK57zJxOmg== ) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2024051706 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.freebsd.org for freebsd.org/SOA
	Received 390 bytes from 163.237.210.11
	;; Response received from [163.237.210.11] 390 octets ;; HEADER SECTION ;; id = 56653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2024051706 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20240530232334 20240517050807 21606 freebsd.org. X547PdtMCqHhazRiAyuueQWdabpxr8gWXSu/cWszbk7eDMuToU/lbWxFrULOBog9AHBsOrk3Dmey /cqE367zCL1qAyIb+0Lkmecgpl6J1Uv1u/GfcWfiJ2yZR7pzKq+brM9gfcP+TuBJPpAh9Yj7tepp kKmJZGNeZt0ezJfMliVV2sulKSvCr+kjQtA8HFYSJOQtQbYClgXxnB7VblMS9zNa+JVMb7d/Frcp +UNt2AjsHSya+xXhJndBCdlKAKOIc+8Gaqb84y8mhZZ9nNRDlObYtW/bcqnNhDew9b7UzPkn/Agr D1l0SBBaY+g9eNwh0X8cWP3c8E1roK57zJxOmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 390 octets ;; HEADER SECTION ;; id = 4459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20240530232334 20240517050807 21606 freebsd.org. X547PdtMCqHhazRiAyuueQWdabpxr8gWXSu/cWszbk7eDMuToU/lbWxFrULOBog9AHBsOrk3Dmey /cqE367zCL1qAyIb+0Lkmecgpl6J1Uv1u/GfcWfiJ2yZR7pzKq+brM9gfcP+TuBJPpAh9Yj7tepp kKmJZGNeZt0ezJfMliVV2sulKSvCr+kjQtA8HFYSJOQtQbYClgXxnB7VblMS9zNa+JVMb7d/Frcp +UNt2AjsHSya+xXhJndBCdlKAKOIc+8Gaqb84y8mhZZ9nNRDlObYtW/bcqnNhDew9b7UzPkn/Agr D1l0SBBaY+g9eNwh0X8cWP3c8E1roK57zJxOmg== ) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2024051706 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 390 octets ;; HEADER SECTION ;; id = 32670 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2024051706 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20240530232334 20240517050807 21606 freebsd.org. X547PdtMCqHhazRiAyuueQWdabpxr8gWXSu/cWszbk7eDMuToU/lbWxFrULOBog9AHBsOrk3Dmey /cqE367zCL1qAyIb+0Lkmecgpl6J1Uv1u/GfcWfiJ2yZR7pzKq+brM9gfcP+TuBJPpAh9Yj7tepp kKmJZGNeZt0ezJfMliVV2sulKSvCr+kjQtA8HFYSJOQtQbYClgXxnB7VblMS9zNa+JVMb7d/Frcp +UNt2AjsHSya+xXhJndBCdlKAKOIc+8Gaqb84y8mhZZ9nNRDlObYtW/bcqnNhDew9b7UzPkn/Agr D1l0SBBaY+g9eNwh0X8cWP3c8E1roK57zJxOmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from [163.237.210.233] 355 octets ;; HEADER SECTION ;; id = 37373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== )`
	RRSIG=21606 and DNSKEY=21606 verifies the A RRset

freebsd.org

	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 355 octets ;; HEADER SECTION ;; id = 36424 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 355 octets ;; HEADER SECTION ;; id = 50195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== )`
	RRSIG=21606 and DNSKEY=21606 verifies the A RRset

freebsd.org

	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 355 octets ;; HEADER SECTION ;; id = 39790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 355 octets ;; HEADER SECTION ;; id = 15179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== )`
	RRSIG=21606 and DNSKEY=21606 verifies the A RRset

freebsd.org

	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 355 octets ;; HEADER SECTION ;; id = 41752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 355 octets ;; HEADER SECTION ;; id = 37171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== )`
	RRSIG=21606 and DNSKEY=21606 verifies the A RRset

freebsd.org

	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from [163.237.210.11] 355 octets ;; HEADER SECTION ;; id = 33205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from [163.237.210.11] 355 octets ;; HEADER SECTION ;; id = 48149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20240528172909 20240515002408 21606 freebsd.org. ctPTVJDmERRRYbu2ciQmQbKpC3YUGbzyR4C5HBapy093WgYwFSJMLUzY3ZDZ/eA0agh44ag85VNm w4xkSPXYvsT5NNWNAO2ZV5NyUODEoJ63il35eM7hxvBbHV3PrOjfgxtfUthYB9Z9Xk0TbZbADglY k4mY/kvE0iQdy1YFkIcragTUUZWqEzJvii+2/MUo57iN6LL0fydUDXbPwjInehfhvddxMCJEMThN 7S/PgflH3fc2SWwg4vdQsmz6KGUzABa4ilCDJXI5fZJNWhQ4ac1KgNjzqsLBCGR3Z3J5hEBlvmns SdMGdeXmTSfOIFkJlWU1H4SRvPa/b4qMr2cWgw== )`
	RRSIG=21606 and DNSKEY=21606 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freebsd.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: