DNSSEC Debugger - google.my

Domain Name:

Time: 2024-05-18 17:41:50 UTC

Analyzing DNSSEC problems for google.my

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 35149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for google.my/A
	Received 899 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 899 octets ;; HEADER SECTION ;; id = 35809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) my. 172800 IN NS ns01.trs-dns.com. my. 172800 IN NS a.mynic.centralnic-dns.com. my. 172800 IN NS b.mynic.centralnic-dns.com. my. 172800 IN NS c.mynic.centralnic-dns.com. my. 172800 IN NS d.mynic.centralnic-dns.com. my. 172800 IN NS a1.nic.my. my. 172800 IN NS a.nic.my. my. 172800 IN NS ns01.trs-dns.net. my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IP4oS3iWmAFe3a5TcMywGTYI2iJ7nSspunkMfcmBuqM9LFKGI/W2Z21pgRq9bl3BQ6RFYcpAhDw4 pDo9jL+BRt5vxAMdg9yoBH/1IvOc1/j7tKDvrr15SOs+u7bSQiMIVgreJSCo9tnP903rZmO/SaQ0 jjoJxFBT1p+KvWy+ffyjCTaen99UmpiUpkyfE0DXQiIrj2eerI32nISI+L+FrkQv0tkLNeZ0Sxuw k4qFaop0z+AUh44Bq/LsPL89wMrDZAS02u4s0aa9GsLjJOxPTzDaUZwRbjBWBBvu7cQaiVNhequ+ rf5tt/8de+4iyh5w4+Y7V+XZvgvUkTb4X8KX4g== ) ;; ADDITIONAL SECTION (15 records) ns01.trs-dns.com. 172800 IN A 64.96.1.1 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 a.mynic.centralnic-dns.com. 172800 IN A 194.169.218.114 a.mynic.centralnic-dns.com. 172800 IN AAAA 2001:67c:13cc::1:114 b.mynic.centralnic-dns.com. 172800 IN A 185.24.64.114 b.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13cc::1:114 c.mynic.centralnic-dns.com. 172800 IN A 212.18.248.114 c.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ee::114 d.mynic.centralnic-dns.com. 172800 IN A 212.18.249.114 d.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ff::114 a1.nic.my. 172800 IN A 202.171.47.204 a.nic.my. 172800 IN A 103.44.108.53 a.nic.my. 172800 IN AAAA 2001:ddc:0:53::53 ns01.trs-dns.net. 172800 IN A 64.96.2.1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for my/DNSKEY
	Received 892 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 892 octets ;; HEADER SECTION ;; id = 50104 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) my. 172800 IN NS ns01.trs-dns.com. my. 172800 IN NS a.mynic.centralnic-dns.com. my. 172800 IN NS b.mynic.centralnic-dns.com. my. 172800 IN NS c.mynic.centralnic-dns.com. my. 172800 IN NS d.mynic.centralnic-dns.com. my. 172800 IN NS a1.nic.my. my. 172800 IN NS a.nic.my. my. 172800 IN NS ns01.trs-dns.net. my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IP4oS3iWmAFe3a5TcMywGTYI2iJ7nSspunkMfcmBuqM9LFKGI/W2Z21pgRq9bl3BQ6RFYcpAhDw4 pDo9jL+BRt5vxAMdg9yoBH/1IvOc1/j7tKDvrr15SOs+u7bSQiMIVgreJSCo9tnP903rZmO/SaQ0 jjoJxFBT1p+KvWy+ffyjCTaen99UmpiUpkyfE0DXQiIrj2eerI32nISI+L+FrkQv0tkLNeZ0Sxuw k4qFaop0z+AUh44Bq/LsPL89wMrDZAS02u4s0aa9GsLjJOxPTzDaUZwRbjBWBBvu7cQaiVNhequ+ rf5tt/8de+4iyh5w4+Y7V+XZvgvUkTb4X8KX4g== ) ;; ADDITIONAL SECTION (15 records) ns01.trs-dns.com. 172800 IN A 64.96.1.1 ns01.trs-dns.com. 172800 IN AAAA 2620:57:4001::1 a.mynic.centralnic-dns.com. 172800 IN A 194.169.218.114 a.mynic.centralnic-dns.com. 172800 IN AAAA 2001:67c:13cc::1:114 b.mynic.centralnic-dns.com. 172800 IN A 185.24.64.114 b.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13cc::1:114 c.mynic.centralnic-dns.com. 172800 IN A 212.18.248.114 c.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ee::114 d.mynic.centralnic-dns.com. 172800 IN A 212.18.249.114 d.mynic.centralnic-dns.com. 172800 IN AAAA 2a04:2b00:13ff::114 a1.nic.my. 172800 IN A 202.171.47.204 a.nic.my. 172800 IN A 103.44.108.53 a.nic.my. 172800 IN AAAA 2001:ddc:0:53::53 ns01.trs-dns.net. 172800 IN A 64.96.2.1 ;; { "EDNS-VERSION": 0 }
	Found child zone my

	Checking DS between . and my
	Query to d.root-servers.net for my/DS
	Received 414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 414 octets ;; HEADER SECTION ;; id = 28151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DS ;; ANSWER SECTION (3 records) my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 ) my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 ) my. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IP4oS3iWmAFe3a5TcMywGTYI2iJ7nSspunkMfcmBuqM9LFKGI/W2Z21pgRq9bl3BQ6RFYcpAhDw4 pDo9jL+BRt5vxAMdg9yoBH/1IvOc1/j7tKDvrr15SOs+u7bSQiMIVgreJSCo9tnP903rZmO/SaQ0 jjoJxFBT1p+KvWy+ffyjCTaen99UmpiUpkyfE0DXQiIrj2eerI32nISI+L+FrkQv0tkLNeZ0Sxuw k4qFaop0z+AUh44Bq/LsPL89wMrDZAS02u4s0aa9GsLjJOxPTzDaUZwRbjBWBBvu7cQaiVNhequ+ rf5tt/8de+4iyh5w4+Y7V+XZvgvUkTb4X8KX4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for my in the . zone
	DS=174/SHA-256 has algorithm RSASHA256
	DS=35481/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`my. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IP4oS3iWmAFe3a5TcMywGTYI2iJ7nSspunkMfcmBuqM9LFKGI/W2Z21pgRq9bl3BQ6RFYcpAhDw4 pDo9jL+BRt5vxAMdg9yoBH/1IvOc1/j7tKDvrr15SOs+u7bSQiMIVgreJSCo9tnP903rZmO/SaQ0 jjoJxFBT1p+KvWy+ffyjCTaen99UmpiUpkyfE0DXQiIrj2eerI32nISI+L+FrkQv0tkLNeZ0Sxuw k4qFaop0z+AUh44Bq/LsPL89wMrDZAS02u4s0aa9GsLjJOxPTzDaUZwRbjBWBBvu7cQaiVNhequ+ rf5tt/8de+4iyh5w4+Y7V+XZvgvUkTb4X8KX4g== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=174/SHA-256 is now in the chain-of-trust
	DS=35481/SHA-256 is now in the chain-of-trust
	`my. 86400 IN DS ( 174 8 2 fb9e2f10f50a09e3614a9e6a2c76c1ae7554711e5242b7f516a8078d86ed87b9 )`
	`my. 86400 IN DS ( 35481 8 2 ae555a40f6bdb488eb025822a71c91c94e1f339fdd71e0386561c3c4b7d2b198 )`
	Query to ns01.trs-dns.com for my/DNSKEY
	Received 1463 bytes from 64.96.1.1
	;; Response received from [64.96.1.1] 1463 octets ;; HEADER SECTION ;; id = 34383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; my. IN DNSKEY ;; ANSWER SECTION (6 records) my. 3600 IN DNSKEY ( 256 3 8 AwEAAcmQ2baE+vGSbBwfOjWEYrJPbiQ1zv3k6i6q5mqWuUGwXk7UsfT8RSsV/X+mUfjC6ZEsiYgi nP++BiqctJZBscHPxSqbhOVG2QRuc4bnQ39fF+/ePL7Euz/XEC7iGKB0zpwIKtEQTFRdeMAXFFVG FfiUC/SAUL/oHLyWJN/DfNr9 ) ; Key ID = 43344 my. 3600 IN DNSKEY ( 256 3 8 AwEAAex+phiaDpGw7hldyrNug8AhLkncGgk5g2GBQvfWe72YAKmSDYOA6ovEYXSPFRcVHkYTdFLA SUAWF/DxbegF3UupC+QOfDSoQ6Im4VOiu6OkIUufOzyKVGS4QggQ3JwowKCKlyX0RRgmeNz73ghs mBrzTnlRyi7kZ47UFnVu2h8f ) ; Key ID = 26466 my. 3600 IN DNSKEY ( 257 3 8 BQEAAAABwpDOYvR1Bt1aS1ZQ1XIBIqEuE6j9obHoENDmFP4smVbmXC3dugacLbT5jILO0kby4XZJ XeXamiANBBcucZj6qEUEj+WEv9jnJ/NTMtJ333Z4GCXoYfb3VKFcAzpxmsNsgtZmyfb1Pkn6psfX NAayvno8ZaBHV+F+8J1S9siAGXDchRPKnBqT8W4XowBBrLy6iotAB82eBeKT1ZwUXhuol6Cz6VZA CrB2vlquiUoAosLSmeHqCbp2sx45oARjOzwAQQAgpoKzxgulp2KBCVsc2In+/OkoKDtPnG//9y42 7vif3pvGkURC0D2IFdIWCCUc2HZFuNQ5IT4wPm4Nj6yPtQ== ) ; Key ID = 35481 my. 3600 IN DNSKEY ( 257 3 8 BQEAAAAB3vby1Tn66L/j8Ory2qwpyjGGclouOIFDzkFhUav0Wo55FR0KN3LaNNLereW27e/+SlDJ dmzDDfEWjCDow85KZ0v8Dv1GlvbV9k61Uthc1QKLlPLoDFr02nvILDallIFDyKKJi79ql5W/0DpY aocxBeYJVbOcc9QnIRZXB57r2WoFSnArJcUP5bsy9dTWsJmzE5Qyb31cSc8QcCj56hQMD+yb62h6 YLIuQPDzrQvw9Qkh97FuneBBTklLboul+IsimcCNMrQJVRUbbXyJxKFBpca1eMivUr0JfmTklWhL lSo8exRIickwwX7obBMidFw1Xs9d+NHCfp67E7Yu0TFo6Q== ) ; Key ID = 174 my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 174 my. 2GKMtwHDwDjLkQGRzG5VQiddG4PA/FZxHTSUma6VoYsTn2/9mOpkSi0z/X1ybJNgslXJYKC2UV8c 4xp3BpWs77th9KZcvDbslz7HXzWMkDDXrJmljX6aaWbdtO7aN3ED/vuHGbrMI/7p4ncFI5L3BB6R DbcIy+u1OUihU5xe+A6sR62UZ41WGUiNFBhh2Ul3tGvICwjClC1YTr3f1gSrpjfvKg+9F0BuEGpE 1fIBQ0s4WXNPEoXlFF9+EdX5bAKzcz2m4oj41Vq14Qa8A1GfRWJ+EBgjkwRABRKDRuUprVFyaoqN z/LV94qQDCjYcuqy4jqDVar1sS96M+Bn153UDg== ) my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 35481 my. ueB5uP85sQDDJZWYWILJifvwCZXJeu7hjino+qw2s+E4fLTmwM1NWAt2ONgVtMGent9FG2XklvgH kfg4xu0Ukl01ZlO2p1PrU3ASrzM8a19v6p6cv7wgcxq+Qk99JlrHFx5qiuzLfy6D0WviUc4oNGyw +r7+2N/wSKfnT9ra7UCLQC4lQitvezTptCJlNDZ4StueIsFgzeCl6sQFx+tHRD+DWyDijOiN3eZM du7Gs/UIe6q/SklAyrnRMb9vHC2DcVjIOGufIB78dE1ygNNOJfMpE7/QG4Ao4ZF69Ei5D5w10fHC g70pn1L5Rf7wbHydOKsq5IOp4ioT11CtXigr1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for my
	`my. 3600 IN DNSKEY ( 256 3 8 AwEAAcmQ2baE+vGSbBwfOjWEYrJPbiQ1zv3k6i6q5mqWuUGwXk7UsfT8RSsV/X+mUfjC6ZEsiYgi nP++BiqctJZBscHPxSqbhOVG2QRuc4bnQ39fF+/ePL7Euz/XEC7iGKB0zpwIKtEQTFRdeMAXFFVG FfiUC/SAUL/oHLyWJN/DfNr9 ) ; Key ID = 43344`
	`my. 3600 IN DNSKEY ( 256 3 8 AwEAAex+phiaDpGw7hldyrNug8AhLkncGgk5g2GBQvfWe72YAKmSDYOA6ovEYXSPFRcVHkYTdFLA SUAWF/DxbegF3UupC+QOfDSoQ6Im4VOiu6OkIUufOzyKVGS4QggQ3JwowKCKlyX0RRgmeNz73ghs mBrzTnlRyi7kZ47UFnVu2h8f ) ; Key ID = 26466`
	`my. 3600 IN DNSKEY ( 257 3 8 BQEAAAABwpDOYvR1Bt1aS1ZQ1XIBIqEuE6j9obHoENDmFP4smVbmXC3dugacLbT5jILO0kby4XZJ XeXamiANBBcucZj6qEUEj+WEv9jnJ/NTMtJ333Z4GCXoYfb3VKFcAzpxmsNsgtZmyfb1Pkn6psfX NAayvno8ZaBHV+F+8J1S9siAGXDchRPKnBqT8W4XowBBrLy6iotAB82eBeKT1ZwUXhuol6Cz6VZA CrB2vlquiUoAosLSmeHqCbp2sx45oARjOzwAQQAgpoKzxgulp2KBCVsc2In+/OkoKDtPnG//9y42 7vif3pvGkURC0D2IFdIWCCUc2HZFuNQ5IT4wPm4Nj6yPtQ== ) ; Key ID = 35481`
	`my. 3600 IN DNSKEY ( 257 3 8 BQEAAAAB3vby1Tn66L/j8Ory2qwpyjGGclouOIFDzkFhUav0Wo55FR0KN3LaNNLereW27e/+SlDJ dmzDDfEWjCDow85KZ0v8Dv1GlvbV9k61Uthc1QKLlPLoDFr02nvILDallIFDyKKJi79ql5W/0DpY aocxBeYJVbOcc9QnIRZXB57r2WoFSnArJcUP5bsy9dTWsJmzE5Qyb31cSc8QcCj56hQMD+yb62h6 YLIuQPDzrQvw9Qkh97FuneBBTklLboul+IsimcCNMrQJVRUbbXyJxKFBpca1eMivUr0JfmTklWhL lSo8exRIickwwX7obBMidFw1Xs9d+NHCfp67E7Yu0TFo6Q== ) ; Key ID = 174`
	DNSKEY=35481/SEP is now in the chain-of-trust
	DS=35481/SHA-256 verifies DNSKEY=35481/SEP
	DNSKEY=174/SEP is now in the chain-of-trust
	DS=174/SHA-256 verifies DNSKEY=174/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 174 my. 2GKMtwHDwDjLkQGRzG5VQiddG4PA/FZxHTSUma6VoYsTn2/9mOpkSi0z/X1ybJNgslXJYKC2UV8c 4xp3BpWs77th9KZcvDbslz7HXzWMkDDXrJmljX6aaWbdtO7aN3ED/vuHGbrMI/7p4ncFI5L3BB6R DbcIy+u1OUihU5xe+A6sR62UZ41WGUiNFBhh2Ul3tGvICwjClC1YTr3f1gSrpjfvKg+9F0BuEGpE 1fIBQ0s4WXNPEoXlFF9+EdX5bAKzcz2m4oj41Vq14Qa8A1GfRWJ+EBgjkwRABRKDRuUprVFyaoqN z/LV94qQDCjYcuqy4jqDVar1sS96M+Bn153UDg== )`
	`my. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240608034225 20240509131918 35481 my. ueB5uP85sQDDJZWYWILJifvwCZXJeu7hjino+qw2s+E4fLTmwM1NWAt2ONgVtMGent9FG2XklvgH kfg4xu0Ukl01ZlO2p1PrU3ASrzM8a19v6p6cv7wgcxq+Qk99JlrHFx5qiuzLfy6D0WviUc4oNGyw +r7+2N/wSKfnT9ra7UCLQC4lQitvezTptCJlNDZ4StueIsFgzeCl6sQFx+tHRD+DWyDijOiN3eZM du7Gs/UIe6q/SklAyrnRMb9vHC2DcVjIOGufIB78dE1ygNNOJfMpE7/QG4Ao4ZF69Ei5D5w10fHC g70pn1L5Rf7wbHydOKsq5IOp4ioT11CtXigr1g== )`
	RRSIG=174 and DNSKEY=174/SEP verifies the DNSKEY RRset
	RRSIG=35481 and DNSKEY=35481/SEP verifies the DNSKEY RRset
	DNSKEY=43344 is now in the chain-of-trust
	DNSKEY=26466 is now in the chain-of-trust
	Query to a.mynic.centralnic-dns.com for google.my/A
	Received 567 bytes from 194.169.218.114
	;; Response received from [194.169.218.114] 567 octets ;; HEADER SECTION ;; id = 30171 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) google.my. 86400 IN NS ns1.google.com. google.my. 86400 IN NS ns2.google.com. 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN NSEC3 ( 1 1 1 - j2di73ms344jqioc69ml440ptr3tf8ia NS DS RRSIG ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608103917 20240509131918 43344 my. Psrf7UUgqZU8Q6W/aaU7y3HYRELfaEk4pB/vsd+M9r/agAUw0LVzMMgXWa+z399KtqDKN8xKmNBY 8xSKsg9taJUZBB4pIsY9bsNQ8DKZD1KW42wlvLpMGtdTBsX5F29V5asColfI9b/ZORmjvTJEYBYU pQxY3SDjpeaNLmZduIs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns01.trs-dns.net for google.my/DNSKEY
	Received 567 bytes from 64.96.2.1
	;; Response received from [64.96.2.1] 567 octets ;; HEADER SECTION ;; id = 16666 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) google.my. 86400 IN NS ns2.google.com. google.my. 86400 IN NS ns1.google.com. 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN NSEC3 ( 1 1 1 - j2di73ms344jqioc69ml440ptr3tf8ia NS DS RRSIG ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608103917 20240509131918 43344 my. Psrf7UUgqZU8Q6W/aaU7y3HYRELfaEk4pB/vsd+M9r/agAUw0LVzMMgXWa+z399KtqDKN8xKmNBY 8xSKsg9taJUZBB4pIsY9bsNQ8DKZD1KW42wlvLpMGtdTBsX5F29V5asColfI9b/ZORmjvTJEYBYU pQxY3SDjpeaNLmZduIs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone google.my

google.my

	Checking DS between my and google.my
	Query to a1.nic.my for google.my/DS
	Received 738 bytes from 202.171.47.204
	;; Response received from [202.171.47.204] 738 octets ;; HEADER SECTION ;; id = 14642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN NSEC3 ( 1 1 1 - 4fp8j433s33gdn21tev3fq5dhltb1rqq NS SOA RRSIG DNSKEY NSEC3PARAM ) 4ehm55iugo1pll99plj6cdflaeue42sn.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608171452 20240509131918 43344 my. LIuhvhz0gXPuNm065wqX1v5KrhiCm4fAJhAm/FwrhIqN0xIvKW0axyP8ZksWtEXVw5awa2btebwk dFbVKuRHqOGUHQ8zR8HCZDbZM5x3jRqz8hXXTGz3AiUL6mEClKSi3ts/YSl9XAPnmZv/tfXJbOOT xsp1Zf5mRTYbuxU0BnA= ) my. 3600 IN SOA ( a.nic.my. hostmaster.nic.my. 2024040577 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) my. 3600 IN RRSIG ( SOA 8 1 3600 20240617220201 20240518153916 43344 my. EPJ3tZVmvsIL2ZIpL/O9YSE9E0cJSuXVyrjzEoqQznr+1G3Cvvsc38VyqeNz4sxMVhW3HrDZELZy fqB5yAUNlO03cfGsYiXxWw9hqWlWxG948+H4I4Lgkjv11LcgcMta4IBLmFDfVNmQ0HJ+INKJ3BTU G3ekrtacO9Jy2aEIPMQ= ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN NSEC3 ( 1 1 1 - j2di73ms344jqioc69ml440ptr3tf8ia NS DS RRSIG ) ishgspmeosi5505egbd3ssp7thfbaeg9.my. 3600 IN RRSIG ( NSEC3 8 2 3600 20240608103917 20240509131918 43344 my. Psrf7UUgqZU8Q6W/aaU7y3HYRELfaEk4pB/vsd+M9r/agAUw0LVzMMgXWa+z399KtqDKN8xKmNBY 8xSKsg9taJUZBB4pIsY9bsNQ8DKZD1KW42wlvLpMGtdTBsX5F29V5asColfI9b/ZORmjvTJEYBYU pQxY3SDjpeaNLmZduIs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for google.my in the my zone
	Query to ns2.google.com for google.my/DNSKEY
	Received 98 bytes from 216.239.34.10
	;; Response received from [216.239.34.10] 98 octets ;; HEADER SECTION ;; id = 43183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.google.com for google.my/A
	Received 98 bytes from 216.239.32.10
	;; Response received from [216.239.32.10] 98 octets ;; HEADER SECTION ;; id = 6 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.google.com is authoritative for google.my
	Query to ns2.google.com for google.my/SOA
	Received 342 bytes from 216.239.34.10
	;; Response received from [216.239.34.10] 342 octets ;; HEADER SECTION ;; id = 44565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN SOA ;; ANSWER SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (4 records) google.my. 345600 IN NS ns1.google.com. google.my. 345600 IN NS ns2.google.com. google.my. 345600 IN NS ns3.google.com. google.my. 345600 IN NS ns4.google.com. ;; ADDITIONAL SECTION (9 records) ns1.google.com. 345600 IN A 216.239.32.10 ns1.google.com. 345600 IN AAAA 2001:4860:4802:32::a ns2.google.com. 345600 IN A 216.239.34.10 ns2.google.com. 345600 IN AAAA 2001:4860:4802:34::a ns3.google.com. 345600 IN A 216.239.36.10 ns3.google.com. 345600 IN AAAA 2001:4860:4802:36::a ns4.google.com. 345600 IN A 216.239.38.10 ns4.google.com. 345600 IN AAAA 2001:4860:4802:38::a ;; { "EDNS-VERSION": 0 }
	Query to ns1.google.com for google.my/A
	Received 98 bytes from 216.239.32.10
	;; Response received from [216.239.32.10] 98 octets ;; HEADER SECTION ;; id = 22211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

google.my

	Query to ns2.google.com for google.my/A
	Received 98 bytes from 216.239.34.10
	;; Response received from [216.239.34.10] 98 octets ;; HEADER SECTION ;; id = 28909 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.google.com is authoritative for google.my
	Query to ns2.google.com for google.my/A
	Received 98 bytes from 216.239.34.10
	;; Response received from [216.239.34.10] 98 octets ;; HEADER SECTION ;; id = 25243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; google.my. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) google.my. 60 IN SOA ( ns1.google.com. dns-admin.google.com. 634692657 ;serial 900 ;refresh 900 ;retry 1800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test google.my at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: