DNSSEC Debugger

Domain Name:

Time: 2024-05-19 20:41:47 UTC

Analyzing DNSSEC problems for go.tz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 864 octets ;; HEADER SECTION ;; id = 42073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for go.tz/A
	Received 731 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 731 octets ;; HEADER SECTION ;; id = 30546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tz. 172800 IN NS ns.anycast.co.tz. tz. 172800 IN NS ns2.tznic.or.tz. tz. 172800 IN NS rip.psg.com. tz. 172800 IN NS fork.sth.dnsnode.net. tz. 172800 IN NS tz-e.ns.nic.cz. tz. 86400 IN DS ( 30234 13 2 3d83825b9f7d66f9b28b5566ba5371798e8d3b88ef079bb88f52617811c1b9a0 ) tz. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . MKB4nxrCcQbyUfZe3f//D5O2bzhXWOwca9Ab3FJkFD8ljXyV8LXb7Y01jwOl8heneYbJeRshjLN+ GqfYmFWKdWSIcHKIAD5rFB7CG1Js2jMJL1hrKliUjfbMK35uXNvwIHEWX9ULIRHzMFHilv2T4DAH mVFrmN8p2anZYbdXoMJNA5NeEUT6Jy/VWohACf3gPRgTjCZ+YlOp6zRf1CCePZvTjcVf9Bd5Ga+y ACBfQ9Zh8T0M4Ck0GDC5B4qMmSe+QXE7f5i1/oiRlhqzDQG3Xtm8lw2mmytstoRNH7K4R4ERZLyY l1HQ7jRX9ueWxu7lWJ0Z4MWgnK8jN7dfSGiEyg== ) ;; ADDITIONAL SECTION (11 records) ns.anycast.co.tz. 172800 IN A 204.61.216.15 ns2.tznic.or.tz. 172800 IN A 196.216.162.67 rip.psg.com. 172800 IN A 147.28.0.39 fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 tz-e.ns.nic.cz. 172800 IN A 185.43.134.11 ns.anycast.co.tz. 172800 IN AAAA 2001:500:14:6015:ad::1 ns2.tznic.or.tz. 172800 IN AAAA 2001:43f8:e0:1::67 rip.psg.com. 172800 IN AAAA 2001:418:1::39 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 tz-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::11 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for tz/DNSKEY
	Received 728 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 728 octets ;; HEADER SECTION ;; id = 48822 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tz. 172800 IN NS ns.anycast.co.tz. tz. 172800 IN NS ns2.tznic.or.tz. tz. 172800 IN NS rip.psg.com. tz. 172800 IN NS fork.sth.dnsnode.net. tz. 172800 IN NS tz-e.ns.nic.cz. tz. 86400 IN DS ( 30234 13 2 3d83825b9f7d66f9b28b5566ba5371798e8d3b88ef079bb88f52617811c1b9a0 ) tz. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . MKB4nxrCcQbyUfZe3f//D5O2bzhXWOwca9Ab3FJkFD8ljXyV8LXb7Y01jwOl8heneYbJeRshjLN+ GqfYmFWKdWSIcHKIAD5rFB7CG1Js2jMJL1hrKliUjfbMK35uXNvwIHEWX9ULIRHzMFHilv2T4DAH mVFrmN8p2anZYbdXoMJNA5NeEUT6Jy/VWohACf3gPRgTjCZ+YlOp6zRf1CCePZvTjcVf9Bd5Ga+y ACBfQ9Zh8T0M4Ck0GDC5B4qMmSe+QXE7f5i1/oiRlhqzDQG3Xtm8lw2mmytstoRNH7K4R4ERZLyY l1HQ7jRX9ueWxu7lWJ0Z4MWgnK8jN7dfSGiEyg== ) ;; ADDITIONAL SECTION (11 records) ns.anycast.co.tz. 172800 IN A 204.61.216.15 ns2.tznic.or.tz. 172800 IN A 196.216.162.67 rip.psg.com. 172800 IN A 147.28.0.39 fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 tz-e.ns.nic.cz. 172800 IN A 185.43.134.11 ns.anycast.co.tz. 172800 IN AAAA 2001:500:14:6015:ad::1 ns2.tznic.or.tz. 172800 IN AAAA 2001:43f8:e0:1::67 rip.psg.com. 172800 IN AAAA 2001:418:1::39 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 tz-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::11 ;; { "EDNS-VERSION": 0 }
	Found child zone tz

	Checking DS between . and tz
	Query to b.root-servers.net for tz/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tz. IN DS ;; ANSWER SECTION (2 records) tz. 86400 IN DS ( 30234 13 2 3d83825b9f7d66f9b28b5566ba5371798e8d3b88ef079bb88f52617811c1b9a0 ) tz. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . MKB4nxrCcQbyUfZe3f//D5O2bzhXWOwca9Ab3FJkFD8ljXyV8LXb7Y01jwOl8heneYbJeRshjLN+ GqfYmFWKdWSIcHKIAD5rFB7CG1Js2jMJL1hrKliUjfbMK35uXNvwIHEWX9ULIRHzMFHilv2T4DAH mVFrmN8p2anZYbdXoMJNA5NeEUT6Jy/VWohACf3gPRgTjCZ+YlOp6zRf1CCePZvTjcVf9Bd5Ga+y ACBfQ9Zh8T0M4Ck0GDC5B4qMmSe+QXE7f5i1/oiRlhqzDQG3Xtm8lw2mmytstoRNH7K4R4ERZLyY l1HQ7jRX9ueWxu7lWJ0Z4MWgnK8jN7dfSGiEyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tz in the . zone
	DS=30234/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tz. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . MKB4nxrCcQbyUfZe3f//D5O2bzhXWOwca9Ab3FJkFD8ljXyV8LXb7Y01jwOl8heneYbJeRshjLN+ GqfYmFWKdWSIcHKIAD5rFB7CG1Js2jMJL1hrKliUjfbMK35uXNvwIHEWX9ULIRHzMFHilv2T4DAH mVFrmN8p2anZYbdXoMJNA5NeEUT6Jy/VWohACf3gPRgTjCZ+YlOp6zRf1CCePZvTjcVf9Bd5Ga+y ACBfQ9Zh8T0M4Ck0GDC5B4qMmSe+QXE7f5i1/oiRlhqzDQG3Xtm8lw2mmytstoRNH7K4R4ERZLyY l1HQ7jRX9ueWxu7lWJ0Z4MWgnK8jN7dfSGiEyg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=30234/SHA-256 is now in the chain-of-trust
	`tz. 86400 IN DS ( 30234 13 2 3d83825b9f7d66f9b28b5566ba5371798e8d3b88ef079bb88f52617811c1b9a0 )`
	Query to ns.anycast.co.tz for tz/DNSKEY
	Received 289 bytes from 204.61.216.15
	;; Response received from [204.61.216.15] 289 octets ;; HEADER SECTION ;; id = 677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tz. IN DNSKEY ;; ANSWER SECTION (3 records) tz. 3600 IN DNSKEY ( 256 3 13 rACAdpcPCLWVIMlynFPv0+CO2VWBbEugnOHJTIYYA0ydIgOs2P2vt3TH0wtUEWECI2GMpynj90Li fQs2+nujnw== ) ; Key ID = 46321 tz. 3600 IN DNSKEY ( 257 3 13 jODuzjdndSn5n8Bu7bDjBisC8q+YuCa7Lvfd4/iOHlv9oLjj5orSbdT9bdu1iq4cPjPMwekLqNAY il99GNh6aw== ) ; Key ID = 30234 tz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240529200752 20240515200622 30234 tz. Wy5kHAXw1QV/dmexms55hOUthTc74P1wUdXiymrEGiosC66h94n7BSLJ3dv4BUlkCsTJ4/e0Nz7k UK5V/T0eYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for tz
	`tz. 3600 IN DNSKEY ( 256 3 13 rACAdpcPCLWVIMlynFPv0+CO2VWBbEugnOHJTIYYA0ydIgOs2P2vt3TH0wtUEWECI2GMpynj90Li fQs2+nujnw== ) ; Key ID = 46321`
	`tz. 3600 IN DNSKEY ( 257 3 13 jODuzjdndSn5n8Bu7bDjBisC8q+YuCa7Lvfd4/iOHlv9oLjj5orSbdT9bdu1iq4cPjPMwekLqNAY il99GNh6aw== ) ; Key ID = 30234`
	DNSKEY=30234/SEP is now in the chain-of-trust
	DS=30234/SHA-256 verifies DNSKEY=30234/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240529200752 20240515200622 30234 tz. Wy5kHAXw1QV/dmexms55hOUthTc74P1wUdXiymrEGiosC66h94n7BSLJ3dv4BUlkCsTJ4/e0Nz7k UK5V/T0eYw== )`
	RRSIG=30234 and DNSKEY=30234/SEP verifies the DNSKEY RRset
	DNSKEY=46321 is now in the chain-of-trust
	Query to fork.sth.dnsnode.net for go.tz/A
	Received 776 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 776 octets ;; HEADER SECTION ;; id = 348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fork.sth.dnsnode.net is authoritative for go.tz
	Query to fork.sth.dnsnode.net for go.tz/DNSKEY
	Received 1448 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 1448 octets ;; HEADER SECTION ;; id = 49439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN DNSKEY ;; ANSWER SECTION (5 records) go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAb/pgW9y0qSgbd+KgLjKmVIEg0PTZssn2FOVr4bLY+GIad+jTnZoM2MDsQcTEvmsyyakC9pS LTGQ3y/CnhTGkKLxVc5w3Ics4itxJ8/2/V2k8FNyuLG1tv3qOgoO1xSO9D3M35ZXmT4aSYusmtWb ewfVG1bec4MUsXdnxjFX3sM+sBHUhdi36eIr/dwP5f3/PbIZpFacBFvTjayOfT8SrowcDVKw0GtQ 3WmFaaVdN3jB6IKKT67/646bzUfm0pBn7jx9zgewXZZHk/0Tx9jYdCi6zwP9t6JbnEbePlr7rgg0 90rTiWrf6PUZIDgg8PJgsgiOkmZndvQ/ACTTaruxz7c= ) ; Key ID = 63438 go.tz. 3600 IN DNSKEY ( 256 3 10 AwEAAbCxH6ubaQqlczck5c94hpWBKMOY/czTr5DRLHBa2buJtG7v0aeQj/7iR/fPjUhBulRFWsw1 m56pZKYRzYE1Xna29YJCjZov8bAET5dLogJz9DK+BvnGbsooJOrLrnCIXZu1CGmnAdyQmBDyafIT hP0XJ/C8WGGfnmsK+5qY7EzBsZ4Vw0ROgEs3ZuwfSFVPbN4zpXr4FwgTjphT4jB6oHnNasYsWnPa 0iwsrn9hS1uzJbCQ+Tf2rLT2Z2h2ufLEJbgsQXy+grK+foOjmCC+iIICUw41rQLxGDn12FxEFJrE /ptXrssVGLzPuWj4CZs84EW5/MUMSNhtMsodMzi+ntk= ) ; Key ID = 2018 go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAd7AncyGQZxfSHbIDkyjXU95rQDZfbh1Rt112Kdw3WSMmu1jJiQei9eyud2n04vVPMCyrX92 rVH0zac1mRR1Foh4Pbz+B+yN3bVoXWso3765Y4JsFZO+Ve0OzrUjd9uKWX0pgPBS9QnkrR88gzIc apRlxnw8AAB++y1Erh3mpIK2oSDyjkKgcmf5TkXGp/5/BR2zlYWPp3LRh/Arcxv/QvXCs1z6BsNy tnpwAKIMR0krTbGvHOA5cVCCT2vViOGh/XHCZZHP/jOodDeuvyKr2IGHM+8jUjOohgL1O5t42112 jl3eSV/uA8SLZ0EstZJx6GNwv1ULPUbFIogoADYTaqU= ) ; Key ID = 23886 go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 23886 go.tz. N5keJ7wtv1bHycMaZK+wIFKOGu3nqiCjziUDdn1aAHfqeNC8K92emTrf/YrUdj1Gd23TXuH69qzA dkQQIObGS8Od+4PCufzeO7PWKTWc6AyOhi3z7EXTpxPnq9h63mzA/HYWvcn0L8CLAPWiF7byD8KV UPhqgOCTvYYgiekKl5rngZGmK2wwvqqrCCKobulFwvUXdgLSbMssrdFoc/hMNYf3vd6OgricpNlN xpi5I7/dN3J62pUUwTfV6BgqiDlJWvwuH5GTi6t/Im7m29A87io7ByLtWZdd6ju1NyTuj09RMCdA hdwV+I+Lpf3X1+Rx3VWxDnR9cyucC48BwEJdrQ== ) go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 63438 go.tz. RgdhxPyBZ7Vos5zYpctofp7y84R9CfVZktChnWzDKX1sWcrQn7mPZwXrO5gXBLeTWboa41/c/ZK7 uXy7Q/J9YpivzZQl48PefjxKqYEEUB/uA/Uaiywcvy59tH0qpFGvGqVBawA4LCtUe17SyNNoOWPq 3ECRQV3hsV8TTapeV1e+Ns3LqWZEmw/V7NEl5RACUVhPHAbxvNJeLzPs+xQdLWe+hFzaygUKp08I /Ccy/npwlB07wCtVieUyVQNxLuCkKysoIRntJDiduzmarUmbmmsfKM1cKBkw2f5SyEfQQRrDea/I Boeibi8aBKBShjqEfBMHWQYENkk0hAa6+udAqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone go.tz
	Attempting to learn nameservers for go.tz
	Query to ns2.tznic.or.tz for go.tz/NS
	Received 473 bytes from 196.216.162.67
	;; Response received from [196.216.162.67] 473 octets ;; HEADER SECTION ;; id = 50415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN NS ;; ANSWER SECTION (6 records) go.tz. 18000 IN NS ns2.tznic.or.tz. go.tz. 18000 IN NS fork.sth.dnsnode.net. go.tz. 18000 IN NS tz-e.ns.nic.cz. go.tz. 18000 IN NS ns.anycast.co.tz. go.tz. 18000 IN NS rip.psg.com. go.tz. 18000 IN RRSIG ( NS 10 2 18000 20240528155004 20240514190901 2018 go.tz. M0zdkOc0znQrppVlFlm0OYxFwPLhkAnGSc8fUAVwHm5oTVkYDTY+ElnWS2gQ2Ht1yMH/Yh7df7u3 5zq4473OihnYXpkaclcZJlUOIIAcgR+hwBbm0gwvbbBbAs0Ktasm0mElNxuD/0gH1G0QMTsM5Cx8 hEWFSFiVD9N+hMvDWpZ0P+yyU4SVwGXquuotH078O0NhjPF33GSlsObYIm13PRXSc5V32J2kBaSB hDAJYXWRf1oGIgTDuC1Ign3WUhUoAz7LjDvq8WFuDipfpDxnarU/jNRFbB21JzRxJs3q+IiqlmeE dfnceq/tf95CLUezyvPkDFGdcpV/gOSmkx/V0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found go.tz nameservers: ns2.tznic.or.tz, fork.sth.dnsnode.net, tz-e.ns.nic.cz, ns.anycast.co.tz, rip.psg.com

go.tz

	Checking DS between tz and go.tz
	Query to ns2.tznic.or.tz for go.tz/DS
	Received 180 bytes from 196.216.162.67
	;; Response received from [196.216.162.67] 180 octets ;; HEADER SECTION ;; id = 35679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN DS ;; ANSWER SECTION (2 records) go.tz. 18000 IN DS ( 63438 10 2 b0684f6ca09c961dfe54fe5f32172ab8d26297afaf21c353cc73951a2b11cb28 ) go.tz. 18000 IN RRSIG ( DS 13 2 18000 20240529062312 20240515060741 46321 tz. aP4vdI9uU+eJGRA4AWkG8GIVujhw6g5WMJqbLwu6PlZai6l6QRrm4MecG5qibuZoYIH0Bi7+losk eLghJnSAUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for go.tz in the tz zone
	DS=63438/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`go.tz. 18000 IN RRSIG ( DS 13 2 18000 20240529062312 20240515060741 46321 tz. aP4vdI9uU+eJGRA4AWkG8GIVujhw6g5WMJqbLwu6PlZai6l6QRrm4MecG5qibuZoYIH0Bi7+losk eLghJnSAUQ== )`
	RRSIG=46321 and DNSKEY=46321 verifies the DS RRset
	DS=63438/SHA-256 is now in the chain-of-trust
	`go.tz. 18000 IN DS ( 63438 10 2 b0684f6ca09c961dfe54fe5f32172ab8d26297afaf21c353cc73951a2b11cb28 )`
	Query to fork.sth.dnsnode.net for go.tz/DNSKEY
	Received 1448 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 1448 octets ;; HEADER SECTION ;; id = 42587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN DNSKEY ;; ANSWER SECTION (5 records) go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAb/pgW9y0qSgbd+KgLjKmVIEg0PTZssn2FOVr4bLY+GIad+jTnZoM2MDsQcTEvmsyyakC9pS LTGQ3y/CnhTGkKLxVc5w3Ics4itxJ8/2/V2k8FNyuLG1tv3qOgoO1xSO9D3M35ZXmT4aSYusmtWb ewfVG1bec4MUsXdnxjFX3sM+sBHUhdi36eIr/dwP5f3/PbIZpFacBFvTjayOfT8SrowcDVKw0GtQ 3WmFaaVdN3jB6IKKT67/646bzUfm0pBn7jx9zgewXZZHk/0Tx9jYdCi6zwP9t6JbnEbePlr7rgg0 90rTiWrf6PUZIDgg8PJgsgiOkmZndvQ/ACTTaruxz7c= ) ; Key ID = 63438 go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAd7AncyGQZxfSHbIDkyjXU95rQDZfbh1Rt112Kdw3WSMmu1jJiQei9eyud2n04vVPMCyrX92 rVH0zac1mRR1Foh4Pbz+B+yN3bVoXWso3765Y4JsFZO+Ve0OzrUjd9uKWX0pgPBS9QnkrR88gzIc apRlxnw8AAB++y1Erh3mpIK2oSDyjkKgcmf5TkXGp/5/BR2zlYWPp3LRh/Arcxv/QvXCs1z6BsNy tnpwAKIMR0krTbGvHOA5cVCCT2vViOGh/XHCZZHP/jOodDeuvyKr2IGHM+8jUjOohgL1O5t42112 jl3eSV/uA8SLZ0EstZJx6GNwv1ULPUbFIogoADYTaqU= ) ; Key ID = 23886 go.tz. 3600 IN DNSKEY ( 256 3 10 AwEAAbCxH6ubaQqlczck5c94hpWBKMOY/czTr5DRLHBa2buJtG7v0aeQj/7iR/fPjUhBulRFWsw1 m56pZKYRzYE1Xna29YJCjZov8bAET5dLogJz9DK+BvnGbsooJOrLrnCIXZu1CGmnAdyQmBDyafIT hP0XJ/C8WGGfnmsK+5qY7EzBsZ4Vw0ROgEs3ZuwfSFVPbN4zpXr4FwgTjphT4jB6oHnNasYsWnPa 0iwsrn9hS1uzJbCQ+Tf2rLT2Z2h2ufLEJbgsQXy+grK+foOjmCC+iIICUw41rQLxGDn12FxEFJrE /ptXrssVGLzPuWj4CZs84EW5/MUMSNhtMsodMzi+ntk= ) ; Key ID = 2018 go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 23886 go.tz. N5keJ7wtv1bHycMaZK+wIFKOGu3nqiCjziUDdn1aAHfqeNC8K92emTrf/YrUdj1Gd23TXuH69qzA dkQQIObGS8Od+4PCufzeO7PWKTWc6AyOhi3z7EXTpxPnq9h63mzA/HYWvcn0L8CLAPWiF7byD8KV UPhqgOCTvYYgiekKl5rngZGmK2wwvqqrCCKobulFwvUXdgLSbMssrdFoc/hMNYf3vd6OgricpNlN xpi5I7/dN3J62pUUwTfV6BgqiDlJWvwuH5GTi6t/Im7m29A87io7ByLtWZdd6ju1NyTuj09RMCdA hdwV+I+Lpf3X1+Rx3VWxDnR9cyucC48BwEJdrQ== ) go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 63438 go.tz. RgdhxPyBZ7Vos5zYpctofp7y84R9CfVZktChnWzDKX1sWcrQn7mPZwXrO5gXBLeTWboa41/c/ZK7 uXy7Q/J9YpivzZQl48PefjxKqYEEUB/uA/Uaiywcvy59tH0qpFGvGqVBawA4LCtUe17SyNNoOWPq 3ECRQV3hsV8TTapeV1e+Ns3LqWZEmw/V7NEl5RACUVhPHAbxvNJeLzPs+xQdLWe+hFzaygUKp08I /Ccy/npwlB07wCtVieUyVQNxLuCkKysoIRntJDiduzmarUmbmmsfKM1cKBkw2f5SyEfQQRrDea/I Boeibi8aBKBShjqEfBMHWQYENkk0hAa6+udAqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for go.tz
	`go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAb/pgW9y0qSgbd+KgLjKmVIEg0PTZssn2FOVr4bLY+GIad+jTnZoM2MDsQcTEvmsyyakC9pS LTGQ3y/CnhTGkKLxVc5w3Ics4itxJ8/2/V2k8FNyuLG1tv3qOgoO1xSO9D3M35ZXmT4aSYusmtWb ewfVG1bec4MUsXdnxjFX3sM+sBHUhdi36eIr/dwP5f3/PbIZpFacBFvTjayOfT8SrowcDVKw0GtQ 3WmFaaVdN3jB6IKKT67/646bzUfm0pBn7jx9zgewXZZHk/0Tx9jYdCi6zwP9t6JbnEbePlr7rgg0 90rTiWrf6PUZIDgg8PJgsgiOkmZndvQ/ACTTaruxz7c= ) ; Key ID = 63438`
	`go.tz. 3600 IN DNSKEY ( 257 3 10 AwEAAd7AncyGQZxfSHbIDkyjXU95rQDZfbh1Rt112Kdw3WSMmu1jJiQei9eyud2n04vVPMCyrX92 rVH0zac1mRR1Foh4Pbz+B+yN3bVoXWso3765Y4JsFZO+Ve0OzrUjd9uKWX0pgPBS9QnkrR88gzIc apRlxnw8AAB++y1Erh3mpIK2oSDyjkKgcmf5TkXGp/5/BR2zlYWPp3LRh/Arcxv/QvXCs1z6BsNy tnpwAKIMR0krTbGvHOA5cVCCT2vViOGh/XHCZZHP/jOodDeuvyKr2IGHM+8jUjOohgL1O5t42112 jl3eSV/uA8SLZ0EstZJx6GNwv1ULPUbFIogoADYTaqU= ) ; Key ID = 23886`
	`go.tz. 3600 IN DNSKEY ( 256 3 10 AwEAAbCxH6ubaQqlczck5c94hpWBKMOY/czTr5DRLHBa2buJtG7v0aeQj/7iR/fPjUhBulRFWsw1 m56pZKYRzYE1Xna29YJCjZov8bAET5dLogJz9DK+BvnGbsooJOrLrnCIXZu1CGmnAdyQmBDyafIT hP0XJ/C8WGGfnmsK+5qY7EzBsZ4Vw0ROgEs3ZuwfSFVPbN4zpXr4FwgTjphT4jB6oHnNasYsWnPa 0iwsrn9hS1uzJbCQ+Tf2rLT2Z2h2ufLEJbgsQXy+grK+foOjmCC+iIICUw41rQLxGDn12FxEFJrE /ptXrssVGLzPuWj4CZs84EW5/MUMSNhtMsodMzi+ntk= ) ; Key ID = 2018`
	DNSKEY=63438/SEP is now in the chain-of-trust
	DS=63438/SHA-256 verifies DNSKEY=63438/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 23886 go.tz. N5keJ7wtv1bHycMaZK+wIFKOGu3nqiCjziUDdn1aAHfqeNC8K92emTrf/YrUdj1Gd23TXuH69qzA dkQQIObGS8Od+4PCufzeO7PWKTWc6AyOhi3z7EXTpxPnq9h63mzA/HYWvcn0L8CLAPWiF7byD8KV UPhqgOCTvYYgiekKl5rngZGmK2wwvqqrCCKobulFwvUXdgLSbMssrdFoc/hMNYf3vd6OgricpNlN xpi5I7/dN3J62pUUwTfV6BgqiDlJWvwuH5GTi6t/Im7m29A87io7ByLtWZdd6ju1NyTuj09RMCdA hdwV+I+Lpf3X1+Rx3VWxDnR9cyucC48BwEJdrQ== )`
	`go.tz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20240531122634 20240517140901 63438 go.tz. RgdhxPyBZ7Vos5zYpctofp7y84R9CfVZktChnWzDKX1sWcrQn7mPZwXrO5gXBLeTWboa41/c/ZK7 uXy7Q/J9YpivzZQl48PefjxKqYEEUB/uA/Uaiywcvy59tH0qpFGvGqVBawA4LCtUe17SyNNoOWPq 3ECRQV3hsV8TTapeV1e+Ns3LqWZEmw/V7NEl5RACUVhPHAbxvNJeLzPs+xQdLWe+hFzaygUKp08I /Ccy/npwlB07wCtVieUyVQNxLuCkKysoIRntJDiduzmarUmbmmsfKM1cKBkw2f5SyEfQQRrDea/I Boeibi8aBKBShjqEfBMHWQYENkk0hAa6+udAqw== )`
	RRSIG=23886 and DNSKEY=23886/SEP verifies the DNSKEY RRset
	RRSIG=63438 and DNSKEY=63438/SEP verifies the DNSKEY RRset
	DNSKEY=23886/SEP is now in the chain-of-trust
	DNSKEY=2018 is now in the chain-of-trust
	Query to fork.sth.dnsnode.net for go.tz/A
	Received 776 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 776 octets ;; HEADER SECTION ;; id = 47752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fork.sth.dnsnode.net is authoritative for go.tz
	Found RRSIG signed by go.tz zone
	Query to tz-e.ns.nic.cz for go.tz/SOA
	Received 391 bytes from 185.43.134.11
	;; Response received from [185.43.134.11] 391 octets ;; HEADER SECTION ;; id = 40616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN SOA ;; ANSWER SECTION (2 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to rip.psg.com for go.tz/SOA
	Received 391 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 391 octets ;; HEADER SECTION ;; id = 1255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN SOA ;; ANSWER SECTION (2 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716145742 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602093114 20240519180901 2018 go.tz. P05oYENMrMKIoWSO5sbRGkHIrNf+UQ7HCA+EXaZgrokw6ei8HTenkOUpFwN7DojlJFUOr5OXZmQk 2mAGAjCvxuGbFoG9MAUv7NIZ/XH/xxmpR2UcxxqnMI9fDNz3jtEYDkMpeCCMzOWiGc2roewNJ9jM yGjJK6+78IFLJqxXY1ShtiKk2KP5riEMI/Nosq+tFQTZGl6hI7p9fFavNZv6d/6okcMb3Ig2GWKu dQbgKCqwIhhW+l9TeHoCCTtioMgmAWz3bXIc0kthyqsr5p3ZySotE3uTCRVKSJHUExroGdFQt/Lj gEkMorglV9pScH8ca65VzFlmNsgbwFEM1R4IYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rip.psg.com serial (1716145742) differs from tz-e.ns.nic.cz serial (1716149342)
	Query to ns2.tznic.or.tz for go.tz/SOA
	Received 819 bytes from 196.216.162.67
	;; Response received from [196.216.162.67] 819 octets ;; HEADER SECTION ;; id = 8522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN SOA ;; ANSWER SECTION (2 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) ;; AUTHORITY SECTION (6 records) go.tz. 18000 IN NS ns.anycast.co.tz. go.tz. 18000 IN NS ns2.tznic.or.tz. go.tz. 18000 IN NS rip.psg.com. go.tz. 18000 IN NS fork.sth.dnsnode.net. go.tz. 18000 IN NS tz-e.ns.nic.cz. go.tz. 18000 IN RRSIG ( NS 10 2 18000 20240528155004 20240514190901 2018 go.tz. M0zdkOc0znQrppVlFlm0OYxFwPLhkAnGSc8fUAVwHm5oTVkYDTY+ElnWS2gQ2Ht1yMH/Yh7df7u3 5zq4473OihnYXpkaclcZJlUOIIAcgR+hwBbm0gwvbbBbAs0Ktasm0mElNxuD/0gH1G0QMTsM5Cx8 hEWFSFiVD9N+hMvDWpZ0P+yyU4SVwGXquuotH078O0NhjPF33GSlsObYIm13PRXSc5V32J2kBaSB hDAJYXWRf1oGIgTDuC1Ign3WUhUoAz7LjDvq8WFuDipfpDxnarU/jNRFbB21JzRxJs3q+IiqlmeE dfnceq/tf95CLUezyvPkDFGdcpV/gOSmkx/V0A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.anycast.co.tz for go.tz/SOA
	Received 819 bytes from 204.61.216.15
	;; Response received from [204.61.216.15] 819 octets ;; HEADER SECTION ;; id = 1351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN SOA ;; ANSWER SECTION (2 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) ;; AUTHORITY SECTION (6 records) go.tz. 18000 IN NS ns.anycast.co.tz. go.tz. 18000 IN NS tz-e.ns.nic.cz. go.tz. 18000 IN NS fork.sth.dnsnode.net. go.tz. 18000 IN NS ns2.tznic.or.tz. go.tz. 18000 IN NS rip.psg.com. go.tz. 18000 IN RRSIG ( NS 10 2 18000 20240528155004 20240514190901 2018 go.tz. M0zdkOc0znQrppVlFlm0OYxFwPLhkAnGSc8fUAVwHm5oTVkYDTY+ElnWS2gQ2Ht1yMH/Yh7df7u3 5zq4473OihnYXpkaclcZJlUOIIAcgR+hwBbm0gwvbbBbAs0Ktasm0mElNxuD/0gH1G0QMTsM5Cx8 hEWFSFiVD9N+hMvDWpZ0P+yyU4SVwGXquuotH078O0NhjPF33GSlsObYIm13PRXSc5V32J2kBaSB hDAJYXWRf1oGIgTDuC1Ign3WUhUoAz7LjDvq8WFuDipfpDxnarU/jNRFbB21JzRxJs3q+IiqlmeE dfnceq/tf95CLUezyvPkDFGdcpV/gOSmkx/V0A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to fork.sth.dnsnode.net for go.tz/A
	Received 776 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 776 octets ;; HEADER SECTION ;; id = 14667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== )`
	RRSIG=2018 and DNSKEY=2018 verifies the SOA RRset

go.tz

	Query to ns.anycast.co.tz for go.tz/A
	Received 776 bytes from 204.61.216.15
	;; Response received from [204.61.216.15] 776 octets ;; HEADER SECTION ;; id = 2078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.anycast.co.tz is authoritative for go.tz
	Found RRSIG signed by go.tz zone
	Query to ns.anycast.co.tz for go.tz/A
	Received 776 bytes from 204.61.216.15
	;; Response received from [204.61.216.15] 776 octets ;; HEADER SECTION ;; id = 62622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== )`
	RRSIG=2018 and DNSKEY=2018 verifies the SOA RRset

go.tz

	Query to ns2.tznic.or.tz for go.tz/A
	Received 776 bytes from 196.216.162.67
	;; Response received from [196.216.162.67] 776 octets ;; HEADER SECTION ;; id = 60712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.tznic.or.tz is authoritative for go.tz
	Found RRSIG signed by go.tz zone
	Query to ns2.tznic.or.tz for go.tz/A
	Received 776 bytes from 196.216.162.67
	;; Response received from [196.216.162.67] 776 octets ;; HEADER SECTION ;; id = 15536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== )`
	RRSIG=2018 and DNSKEY=2018 verifies the SOA RRset

go.tz

	Query to tz-e.ns.nic.cz for go.tz/A
	Received 772 bytes from 185.43.134.11
	;; Response received from [185.43.134.11] 772 octets ;; HEADER SECTION ;; id = 45588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tz-e.ns.nic.cz is authoritative for go.tz
	Found RRSIG signed by go.tz zone
	Query to tz-e.ns.nic.cz for go.tz/A
	Received 769 bytes from 185.43.134.11
	;; Response received from [185.43.134.11] 769 octets ;; HEADER SECTION ;; id = 12896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716149342 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602084508 20240519190901 2018 go.tz. rkOnUO/1JRD18d4MXn8m6n7Me0rd1BKlRtbeS8zqzI2HhotoFa992mEuiL/ij1jT1XfQrXrPgH2O zHegsF+FVCDfoex5zeGwnAPTmCFnkItTBeaAEcevScw3iKBB3AMbYTgQ9Jv4tOCyx6sgZ0Jb70h6 VgrLdFCDsVZ0A942CEg+M1jFyDIGha7NY1FNvSdBPHd1zyfA0rDHhh+hkYOYEDzxrervU9/RZF/j Bngbqzg0afcMJuXm+9RFXaNphwewIImgmS9waS3RE2W7Jd6m3K0bP0i8tLXBeOrT2yQ5pyk1fP4i vAEY1Zp5IdkC/7TC4dmEUL5E/oToAmaC/Xat7g== )`
	RRSIG=2018 and DNSKEY=2018 verifies the SOA RRset

go.tz

	Query to rip.psg.com for go.tz/A
	Received 772 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 772 octets ;; HEADER SECTION ;; id = 16140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716145742 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602093114 20240519180901 2018 go.tz. P05oYENMrMKIoWSO5sbRGkHIrNf+UQ7HCA+EXaZgrokw6ei8HTenkOUpFwN7DojlJFUOr5OXZmQk 2mAGAjCvxuGbFoG9MAUv7NIZ/XH/xxmpR2UcxxqnMI9fDNz3jtEYDkMpeCCMzOWiGc2roewNJ9jM yGjJK6+78IFLJqxXY1ShtiKk2KP5riEMI/Nosq+tFQTZGl6hI7p9fFavNZv6d/6okcMb3Ig2GWKu dQbgKCqwIhhW+l9TeHoCCTtioMgmAWz3bXIc0kthyqsr5p3ZySotE3uTCRVKSJHUExroGdFQt/Lj gEkMorglV9pScH8ca65VzFlmNsgbwFEM1R4IYA== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rip.psg.com is authoritative for go.tz
	Found RRSIG signed by go.tz zone
	Query to rip.psg.com for go.tz/A
	Received 772 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 772 octets ;; HEADER SECTION ;; id = 56621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.tz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.tz. 3600 IN SOA ( ns2.tznic.or.tz. rajisi.tcra.go.tz. 1716145742 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN NSEC3 ( 1 0 5 b2bca1f39eba1c8d 2qbkqhgp6l6fp0qjq233bfvl8qm3jsf8 NS SOA RRSIG DNSKEY NSEC3PARAM ) go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602093114 20240519180901 2018 go.tz. P05oYENMrMKIoWSO5sbRGkHIrNf+UQ7HCA+EXaZgrokw6ei8HTenkOUpFwN7DojlJFUOr5OXZmQk 2mAGAjCvxuGbFoG9MAUv7NIZ/XH/xxmpR2UcxxqnMI9fDNz3jtEYDkMpeCCMzOWiGc2roewNJ9jM yGjJK6+78IFLJqxXY1ShtiKk2KP5riEMI/Nosq+tFQTZGl6hI7p9fFavNZv6d/6okcMb3Ig2GWKu dQbgKCqwIhhW+l9TeHoCCTtioMgmAWz3bXIc0kthyqsr5p3ZySotE3uTCRVKSJHUExroGdFQt/Lj gEkMorglV9pScH8ca65VzFlmNsgbwFEM1R4IYA== ) 2poj56dfp9qvnq2s5b3r5ftkhvp38cg7.go.tz. 3600 IN RRSIG ( NSEC3 10 3 3600 20240530031736 20240516000901 2018 go.tz. Cefz2biURmhQmMmMobZ7PcTkb2B0KbUlBJgUYs9/n+0XFIQ0i+4Za89OdxA5q5NX86Qlz7ou/tgg aEpIYiQ5+Z6vFRCS4CjK5bnkfyT97ZuVGRWx2IBL9IYoBHxWxlYe9pyGA35shmirCmvFtDRwq3i8 Eks1hYlE8dddf/NPqYh3J6FGXa/0GFUkcEBsdd3DzAFdrbLbg5nDWkTBhKUjWz91W11B3xnWoS5T 5ky79fWCXgmbKSSZrItxx2yE6WWsWVn+xQ0bsDLrKTaO7Fpx9+SRG1IH4Q++DVKi/br4sb19ZMqQ qtjAO0BWOisg5zOmV06f4oxkfm1qarVdPUHYgA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`go.tz. 3600 IN RRSIG ( SOA 10 2 3600 20240602093114 20240519180901 2018 go.tz. P05oYENMrMKIoWSO5sbRGkHIrNf+UQ7HCA+EXaZgrokw6ei8HTenkOUpFwN7DojlJFUOr5OXZmQk 2mAGAjCvxuGbFoG9MAUv7NIZ/XH/xxmpR2UcxxqnMI9fDNz3jtEYDkMpeCCMzOWiGc2roewNJ9jM yGjJK6+78IFLJqxXY1ShtiKk2KP5riEMI/Nosq+tFQTZGl6hI7p9fFavNZv6d/6okcMb3Ig2GWKu dQbgKCqwIhhW+l9TeHoCCTtioMgmAWz3bXIc0kthyqsr5p3ZySotE3uTCRVKSJHUExroGdFQt/Lj gEkMorglV9pScH8ca65VzFlmNsgbwFEM1R4IYA== )`
	RRSIG=2018 and DNSKEY=2018 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test go.tz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: