DNSSEC Debugger

Domain Name:

Time: 2024-05-21 23:02:02 UTC

Analyzing DNSSEC problems for gov.lv

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 2684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for gov.lv/A
	Received 719 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 719 octets ;; HEADER SECTION ;; id = 58315 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lv. 172800 IN NS a.nic.lv. lv. 172800 IN NS b.nic.lv. lv. 172800 IN NS d.nic.lv. lv. 172800 IN NS n.nic.lv. lv. 172800 IN NS nu.nic.lv. lv. 172800 IN NS sunic.sunet.se. lv. 86400 IN DS ( 42018 8 2 7e932a4f9cf9b1cd047c277e3cd323a53d42347d47c7bf1dd6018ff4b344fc1c ) lv. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . W0AuJGHo/SkLXwK6adtozRjEBsPrXczjc7dRAxhpPZuuXIE3VGBvuCE7bY0FBaTQ2xTBHi+5MBEq Z+DcP/QtoedRhn1Ir2B41QbXps42Iz8NV+1T0NR5kF3IyfZ24OpSNRzkGHwvt/TUD8TY7DUBkfqQ 7YczWBmahYiAhakUlIm588cK/rRZnzqGj4KdzINDP+ejYBrSFt4Hf8IjkLapuPY0ZSh0afFLZYHU tgaa6RbnrHEdZVEdGiq20jbC+BEiIQ49SEGPgC+2gKjtsXCjv40wGi5WdBOXvWbkrbzfrpFa3Hrz vyHOxCAT1Z4ql/TC+wt+KsCbNGBPX1MhvEx+7A== ) ;; ADDITIONAL SECTION (12 records) a.nic.lv. 172800 IN A 194.0.48.1 a.nic.lv. 172800 IN AAAA 2001:678:7c::7c b.nic.lv. 172800 IN A 92.240.70.1 d.nic.lv. 172800 IN A 194.0.8.1 d.nic.lv. 172800 IN AAAA 2001:678:b:1::1 n.nic.lv. 172800 IN A 194.146.106.150 n.nic.lv. 172800 IN AAAA 2001:67c:1010:38::53 nu.nic.lv. 172800 IN A 77.72.229.249 nu.nic.lv. 172800 IN AAAA 2a01:3f0:0:312::53 sunic.sunet.se. 172800 IN A 192.36.125.2 sunic.sunet.se. 172800 IN AAAA 2001:6b0:7::2 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for lv/DNSKEY
	Received 715 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 715 octets ;; HEADER SECTION ;; id = 50789 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lv. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lv. 172800 IN NS a.nic.lv. lv. 172800 IN NS b.nic.lv. lv. 172800 IN NS d.nic.lv. lv. 172800 IN NS n.nic.lv. lv. 172800 IN NS nu.nic.lv. lv. 172800 IN NS sunic.sunet.se. lv. 86400 IN DS ( 42018 8 2 7e932a4f9cf9b1cd047c277e3cd323a53d42347d47c7bf1dd6018ff4b344fc1c ) lv. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . W0AuJGHo/SkLXwK6adtozRjEBsPrXczjc7dRAxhpPZuuXIE3VGBvuCE7bY0FBaTQ2xTBHi+5MBEq Z+DcP/QtoedRhn1Ir2B41QbXps42Iz8NV+1T0NR5kF3IyfZ24OpSNRzkGHwvt/TUD8TY7DUBkfqQ 7YczWBmahYiAhakUlIm588cK/rRZnzqGj4KdzINDP+ejYBrSFt4Hf8IjkLapuPY0ZSh0afFLZYHU tgaa6RbnrHEdZVEdGiq20jbC+BEiIQ49SEGPgC+2gKjtsXCjv40wGi5WdBOXvWbkrbzfrpFa3Hrz vyHOxCAT1Z4ql/TC+wt+KsCbNGBPX1MhvEx+7A== ) ;; ADDITIONAL SECTION (12 records) a.nic.lv. 172800 IN A 194.0.48.1 b.nic.lv. 172800 IN A 92.240.70.1 d.nic.lv. 172800 IN A 194.0.8.1 n.nic.lv. 172800 IN A 194.146.106.150 nu.nic.lv. 172800 IN A 77.72.229.249 sunic.sunet.se. 172800 IN A 192.36.125.2 a.nic.lv. 172800 IN AAAA 2001:678:7c::7c d.nic.lv. 172800 IN AAAA 2001:678:b:1::1 n.nic.lv. 172800 IN AAAA 2001:67c:1010:38::53 nu.nic.lv. 172800 IN AAAA 2a01:3f0:0:312::53 sunic.sunet.se. 172800 IN AAAA 2001:6b0:7::2 ;; { "EDNS-VERSION": 0 }
	Found child zone lv

	Checking DS between . and lv
	Query to i.root-servers.net for lv/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 35491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lv. IN DS ;; ANSWER SECTION (2 records) lv. 86400 IN DS ( 42018 8 2 7e932a4f9cf9b1cd047c277e3cd323a53d42347d47c7bf1dd6018ff4b344fc1c ) lv. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . W0AuJGHo/SkLXwK6adtozRjEBsPrXczjc7dRAxhpPZuuXIE3VGBvuCE7bY0FBaTQ2xTBHi+5MBEq Z+DcP/QtoedRhn1Ir2B41QbXps42Iz8NV+1T0NR5kF3IyfZ24OpSNRzkGHwvt/TUD8TY7DUBkfqQ 7YczWBmahYiAhakUlIm588cK/rRZnzqGj4KdzINDP+ejYBrSFt4Hf8IjkLapuPY0ZSh0afFLZYHU tgaa6RbnrHEdZVEdGiq20jbC+BEiIQ49SEGPgC+2gKjtsXCjv40wGi5WdBOXvWbkrbzfrpFa3Hrz vyHOxCAT1Z4ql/TC+wt+KsCbNGBPX1MhvEx+7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for lv in the . zone
	DS=42018/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`lv. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . W0AuJGHo/SkLXwK6adtozRjEBsPrXczjc7dRAxhpPZuuXIE3VGBvuCE7bY0FBaTQ2xTBHi+5MBEq Z+DcP/QtoedRhn1Ir2B41QbXps42Iz8NV+1T0NR5kF3IyfZ24OpSNRzkGHwvt/TUD8TY7DUBkfqQ 7YczWBmahYiAhakUlIm588cK/rRZnzqGj4KdzINDP+ejYBrSFt4Hf8IjkLapuPY0ZSh0afFLZYHU tgaa6RbnrHEdZVEdGiq20jbC+BEiIQ49SEGPgC+2gKjtsXCjv40wGi5WdBOXvWbkrbzfrpFa3Hrz vyHOxCAT1Z4ql/TC+wt+KsCbNGBPX1MhvEx+7A== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=42018/SHA-256 is now in the chain-of-trust
	`lv. 86400 IN DS ( 42018 8 2 7e932a4f9cf9b1cd047c277e3cd323a53d42347d47c7bf1dd6018ff4b344fc1c )`
	Query to sunic.sunet.se for lv/DNSKEY
	Received 1165 bytes from 192.36.125.2
	;; Response received from [192.36.125.2] 1165 octets ;; HEADER SECTION ;; id = 4017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lv. IN DNSKEY ;; ANSWER SECTION (4 records) lv. 1800 IN DNSKEY ( 256 3 8 AwEAAcDygkF9GrWafQuFEgldV8cU2zKs//pQvWGt6Mr12kw+IH3ILlzGQodUem6BhD0/zEsbfy/K iHiQ7QbcXBn7etz70bmHzb/ovH3//uNfjFfUgBdcFbtTRoYA1Hk67ibAI/1phRsOkdycOnk85mon J8fakMVG+7IMoeAcp2S+XBKMfK7aaMTCjG8nRmVyw4m2PnHiiGrwPfEJQBy80SuSbECn5CMMYhmp Ln9EzvW33itnM3lCy2rBZj2spPiCzlZEnTeLNgp/Tao45kselo6zN+WhmDLzi2Om86wnO5YYCtad CKVZAWNAc4gMC5OKKPIV8WMuIrcyMp5NI89nioHf+zM= ) ; Key ID = 31113 lv. 1800 IN DNSKEY ( 257 3 8 BQEAAAAByLU9dUcHHcl1eLgjLidTJKlwxsU9a580xierZ+WyfRBI47L3LLXAZZ0ub6Sea3qKP2mh P5ZBG/reXvyh3OSlHa39WoMiUUZFcuouCajBg7XeLGVPL4U1Ja1UW9wq/Oc8WU1dq4e+2Q8Dt8ti pFvbL0AD0BhJAsfQuT3wperedwQAUKId0/JQOFNTWhEJaYN2P5IIhyRKWQp8OhtKmdNYQ5jfqqpX VO4zyqV+4ZxWurXJS8c7bKrE3OAewWEGAtTjeElfQ2CFAKWVjMOLeZ86+mgw7p3UHhGB+KuRaKg6 fAtTcQYBF78Xe40wuj9EgGL19mp9v6tDwFe+Epow4SFSPQ== ) ; Key ID = 42018 lv. 1800 IN RRSIG ( DNSKEY 8 1 1800 20240531004736 20240521004358 31113 lv. GipnChzbdxvNhWHBJydy84oeXeo9YE+spW41h8V/dw7ugrzzbKmyF+PgAmbLmjWCBwjFtI7WvXy5 mX8ea7TwtpooKcwBbIqt9CFaBDh50WW2nmhXQ1jIsc97mP8JI6wHX8TkOpJU0qGbRLjKSfXaX0mI gmob70XFNF3PKV1zoC5N4ujzAcE2A65uZyYzmrALKqk8iG0j8k2egFA4bls1PRi6JW2dMx4wCpuv 8mf4Dqo7dCgqL7przkaA2vDWw5TQjqb9NCvoLdrDpb95LHN2tktBVxR5IfWXTJr7EFUnOXn1YDPq JuowgOkFg+8qX2X5gWmoA/bMv8vRJ2qWoQsQnQ== ) lv. 1800 IN RRSIG ( DNSKEY 8 1 1800 20240531004736 20240521004358 42018 lv. Xdu4+6K8Lx+JTWdoHb40scfeKM8hDKegOOMb/6yt4c/0BHL2vu4GLOG2Gp3FKJxlRwYWdx5hAckt MAxRKLibueKQbOKyb6iA/vrktxqZvL1ET0kLZwOssgm7bB4lfBID6rQoGTiCt7K+j40wLTauoJGf 1lXCZbISgQvLUGJPMcGnZUwTbrits43NozasInmxw0G7ZQn5DJLS+94+1n0CAKW7VXVwf21G3F1T jVkdQHg6I5hCyWY2f4vjrGn9zYLcrU0pX+wgO7RtwZYkIHiK8yS2Foms0K0WrDoXHatADHgBtqUX Spk147IODMiTDWnwGEINXtKtD5f7L0eZsEk4Mg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for lv
	`lv. 1800 IN DNSKEY ( 256 3 8 AwEAAcDygkF9GrWafQuFEgldV8cU2zKs//pQvWGt6Mr12kw+IH3ILlzGQodUem6BhD0/zEsbfy/K iHiQ7QbcXBn7etz70bmHzb/ovH3//uNfjFfUgBdcFbtTRoYA1Hk67ibAI/1phRsOkdycOnk85mon J8fakMVG+7IMoeAcp2S+XBKMfK7aaMTCjG8nRmVyw4m2PnHiiGrwPfEJQBy80SuSbECn5CMMYhmp Ln9EzvW33itnM3lCy2rBZj2spPiCzlZEnTeLNgp/Tao45kselo6zN+WhmDLzi2Om86wnO5YYCtad CKVZAWNAc4gMC5OKKPIV8WMuIrcyMp5NI89nioHf+zM= ) ; Key ID = 31113`
	`lv. 1800 IN DNSKEY ( 257 3 8 BQEAAAAByLU9dUcHHcl1eLgjLidTJKlwxsU9a580xierZ+WyfRBI47L3LLXAZZ0ub6Sea3qKP2mh P5ZBG/reXvyh3OSlHa39WoMiUUZFcuouCajBg7XeLGVPL4U1Ja1UW9wq/Oc8WU1dq4e+2Q8Dt8ti pFvbL0AD0BhJAsfQuT3wperedwQAUKId0/JQOFNTWhEJaYN2P5IIhyRKWQp8OhtKmdNYQ5jfqqpX VO4zyqV+4ZxWurXJS8c7bKrE3OAewWEGAtTjeElfQ2CFAKWVjMOLeZ86+mgw7p3UHhGB+KuRaKg6 fAtTcQYBF78Xe40wuj9EgGL19mp9v6tDwFe+Epow4SFSPQ== ) ; Key ID = 42018`
	DNSKEY=42018/SEP is now in the chain-of-trust
	DS=42018/SHA-256 verifies DNSKEY=42018/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`lv. 1800 IN RRSIG ( DNSKEY 8 1 1800 20240531004736 20240521004358 31113 lv. GipnChzbdxvNhWHBJydy84oeXeo9YE+spW41h8V/dw7ugrzzbKmyF+PgAmbLmjWCBwjFtI7WvXy5 mX8ea7TwtpooKcwBbIqt9CFaBDh50WW2nmhXQ1jIsc97mP8JI6wHX8TkOpJU0qGbRLjKSfXaX0mI gmob70XFNF3PKV1zoC5N4ujzAcE2A65uZyYzmrALKqk8iG0j8k2egFA4bls1PRi6JW2dMx4wCpuv 8mf4Dqo7dCgqL7przkaA2vDWw5TQjqb9NCvoLdrDpb95LHN2tktBVxR5IfWXTJr7EFUnOXn1YDPq JuowgOkFg+8qX2X5gWmoA/bMv8vRJ2qWoQsQnQ== )`
	`lv. 1800 IN RRSIG ( DNSKEY 8 1 1800 20240531004736 20240521004358 42018 lv. Xdu4+6K8Lx+JTWdoHb40scfeKM8hDKegOOMb/6yt4c/0BHL2vu4GLOG2Gp3FKJxlRwYWdx5hAckt MAxRKLibueKQbOKyb6iA/vrktxqZvL1ET0kLZwOssgm7bB4lfBID6rQoGTiCt7K+j40wLTauoJGf 1lXCZbISgQvLUGJPMcGnZUwTbrits43NozasInmxw0G7ZQn5DJLS+94+1n0CAKW7VXVwf21G3F1T jVkdQHg6I5hCyWY2f4vjrGn9zYLcrU0pX+wgO7RtwZYkIHiK8yS2Foms0K0WrDoXHatADHgBtqUX Spk147IODMiTDWnwGEINXtKtD5f7L0eZsEk4Mg== )`
	RRSIG=31113 and DNSKEY=31113 verifies the DNSKEY RRset
	RRSIG=42018 and DNSKEY=42018/SEP verifies the DNSKEY RRset
	DNSKEY=31113 is now in the chain-of-trust
	Query to n.nic.lv for gov.lv/A
	Received 886 bytes from 194.146.106.150
	;; Response received from [194.146.106.150] 886 octets ;; HEADER SECTION ;; id = 45053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.lv. 1800 IN NS c.gov.lv. gov.lv. 1800 IN NS b.gov.lv. gov.lv. 1800 IN NS a.gov.lv. 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d 981lbih44ee4affh9i63scq57cla7r3b NS SOA RRSIG DNSKEY NSEC3PARAM ) 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240528040813 20240518033003 31113 lv. JSP9GbT3WzgMxQF80rjjSc665n89F0CzP1mLNWG1hyAjk1FUo3u5rK7XV2vtFKKVQV6hckwlp6qC XnWtf1DlDqoLqopaZkKzYqa9whuqWfojfjKpannt9qpcIcfJLlzksGzDKnRfe72L2KHrCYUFxEvk Vw7ab0iQ9rfEousdLI5eTwPn8oMrG7qQb/hxAamrTMlPP+JrmKoiaxEzbBp+Dl9RxAMC5nwKxsaZ RTzN4LS27rFH4wIoqiKrfj9+viod7r8qMcXCLrUM45cJrtNn8DG2hH2NzHj9pEjsFroQJxnJe6jg G4PuUwIu5P5oVRV9xj6M7a7iOrdYaLihB7+LKA== ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d hop919al4l7olh929ee68a17qvtrfns9 NS DS RRSIG ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240531150121 20240521144856 31113 lv. Ih/1qmx4P/KnFXHyALMFlAtiogCgOKSwjPc6CxnlAJTxvirEXT/EV7+Ra61RKk+MHNITkSPQgbPh Kj8ie0BnGeEBFykcCwJZdr4rUaevsR2vFomfVJ7ILlW+dIdErsMP26AM/9SEQI4K146NN89h5D8G 8tKcNVOsVAtIe3gyWJpyvsWroBfQ08vsW5w1lVwrKGPe6jpL2Nai0w9YlbJGd3D/7HzFrmbxmifv Rh039mZSHrsFTTahYtYSFq614yo5Ugpni3mzoTcBihG6kl5Z6ibaDPrp1+hzdOhqxx5KDO7GQtW5 juqWWnLQclZRj4B4bzAZCWddbSSuDNJ5/eJsyA== ) ;; ADDITIONAL SECTION (4 records) c.gov.lv. 1800 IN A 194.0.50.3 b.gov.lv. 1800 IN A 212.70.163.230 a.gov.lv. 1800 IN A 212.70.163.100 ;; { "EDNS-VERSION": 0 }
	Query to b.nic.lv for gov.lv/DNSKEY
	Received 886 bytes from 92.240.70.1
	;; Response received from [92.240.70.1] 886 octets ;; HEADER SECTION ;; id = 28636 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.lv. 1800 IN NS c.gov.lv. gov.lv. 1800 IN NS b.gov.lv. gov.lv. 1800 IN NS a.gov.lv. 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d 981lbih44ee4affh9i63scq57cla7r3b NS SOA RRSIG DNSKEY NSEC3PARAM ) 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240528040813 20240518033003 31113 lv. JSP9GbT3WzgMxQF80rjjSc665n89F0CzP1mLNWG1hyAjk1FUo3u5rK7XV2vtFKKVQV6hckwlp6qC XnWtf1DlDqoLqopaZkKzYqa9whuqWfojfjKpannt9qpcIcfJLlzksGzDKnRfe72L2KHrCYUFxEvk Vw7ab0iQ9rfEousdLI5eTwPn8oMrG7qQb/hxAamrTMlPP+JrmKoiaxEzbBp+Dl9RxAMC5nwKxsaZ RTzN4LS27rFH4wIoqiKrfj9+viod7r8qMcXCLrUM45cJrtNn8DG2hH2NzHj9pEjsFroQJxnJe6jg G4PuUwIu5P5oVRV9xj6M7a7iOrdYaLihB7+LKA== ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d hop919al4l7olh929ee68a17qvtrfns9 NS DS RRSIG ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240531150121 20240521144856 31113 lv. Ih/1qmx4P/KnFXHyALMFlAtiogCgOKSwjPc6CxnlAJTxvirEXT/EV7+Ra61RKk+MHNITkSPQgbPh Kj8ie0BnGeEBFykcCwJZdr4rUaevsR2vFomfVJ7ILlW+dIdErsMP26AM/9SEQI4K146NN89h5D8G 8tKcNVOsVAtIe3gyWJpyvsWroBfQ08vsW5w1lVwrKGPe6jpL2Nai0w9YlbJGd3D/7HzFrmbxmifv Rh039mZSHrsFTTahYtYSFq614yo5Ugpni3mzoTcBihG6kl5Z6ibaDPrp1+hzdOhqxx5KDO7GQtW5 juqWWnLQclZRj4B4bzAZCWddbSSuDNJ5/eJsyA== ) ;; ADDITIONAL SECTION (4 records) c.gov.lv. 1800 IN A 194.0.50.3 b.gov.lv. 1800 IN A 212.70.163.230 a.gov.lv. 1800 IN A 212.70.163.100 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.lv

gov.lv

	Checking DS between lv and gov.lv
	Query to d.nic.lv for gov.lv/DS
	Received 1126 bytes from 194.0.8.1
	;; Response received from [194.0.8.1] 1126 octets ;; HEADER SECTION ;; id = 26981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d 981lbih44ee4affh9i63scq57cla7r3b NS SOA RRSIG DNSKEY NSEC3PARAM ) 98069SFTH4TTNF008C49C783M75J5J7B.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240528040813 20240518033003 31113 lv. JSP9GbT3WzgMxQF80rjjSc665n89F0CzP1mLNWG1hyAjk1FUo3u5rK7XV2vtFKKVQV6hckwlp6qC XnWtf1DlDqoLqopaZkKzYqa9whuqWfojfjKpannt9qpcIcfJLlzksGzDKnRfe72L2KHrCYUFxEvk Vw7ab0iQ9rfEousdLI5eTwPn8oMrG7qQb/hxAamrTMlPP+JrmKoiaxEzbBp+Dl9RxAMC5nwKxsaZ RTzN4LS27rFH4wIoqiKrfj9+viod7r8qMcXCLrUM45cJrtNn8DG2hH2NzHj9pEjsFroQJxnJe6jg G4PuUwIu5P5oVRV9xj6M7a7iOrdYaLihB7+LKA== ) lv. 1800 IN SOA ( a.nic.lv. dns.nic.lv. 1716332405 ;serial 3600 ;refresh 900 ;retry 1296000 ;expire 1800 ;minimum ) lv. 1800 IN RRSIG ( SOA 8 1 1800 20240531230114 20240521220114 31113 lv. W7zW1ziBDBbz6gPclE1HYJBTXAD49R14QtXOfJPJIAFepyl851eAedSEyErKX01UDh9muNWL22Vi GWTc4waQq4GRiN4tCjnd90OXteUSUnMvWsg+udm2otmFs9bk6L6cJxyIM9dN1oXrGmfYxfOHxDI7 zMHgSPYInR4FsuZFlGxsXhoy5wWmIuz8acPjC6jl0ZlJCDrTAYmqqbIKdc554C/yZTj7+eLPkjSZ F6Wt+Wr14jwpEF97HHrRDAO4r3+lU1cqnYbKeG1wKP3tDj10aroe1pJmfCI9vUPOLrdPSTL/k9p6 n25tSXORKtUiOhzVrducPD9lVi57VX5etRUr3A== ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN NSEC3 ( 1 1 10 4dde32dd446fbc9d hop919al4l7olh929ee68a17qvtrfns9 NS DS RRSIG ) HOM47AE3EJKQT27276CVGFNS74ET4GDH.lv. 1800 IN RRSIG ( NSEC3 8 2 1800 20240531150121 20240521144856 31113 lv. Ih/1qmx4P/KnFXHyALMFlAtiogCgOKSwjPc6CxnlAJTxvirEXT/EV7+Ra61RKk+MHNITkSPQgbPh Kj8ie0BnGeEBFykcCwJZdr4rUaevsR2vFomfVJ7ILlW+dIdErsMP26AM/9SEQI4K146NN89h5D8G 8tKcNVOsVAtIe3gyWJpyvsWroBfQ08vsW5w1lVwrKGPe6jpL2Nai0w9YlbJGd3D/7HzFrmbxmifv Rh039mZSHrsFTTahYtYSFq614yo5Ugpni3mzoTcBihG6kl5Z6ibaDPrp1+hzdOhqxx5KDO7GQtW5 juqWWnLQclZRj4B4bzAZCWddbSSuDNJ5/eJsyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for gov.lv in the lv zone
	Query to c.gov.lv for gov.lv/DNSKEY
	Received 83 bytes from 194.0.50.3
	;; Response received from [194.0.50.3] 83 octets ;; HEADER SECTION ;; id = 45365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.lv. 3600 IN SOA ( a.gov.lv. dns.lvrtc.lv. 2024042600 ;serial 3600 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to c.gov.lv for gov.lv/A
	Received 147 bytes from 194.0.50.3
	;; Response received from [194.0.50.3] 147 octets ;; HEADER SECTION ;; id = 12794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	c.gov.lv is authoritative for gov.lv
	Query to a.gov.lv for gov.lv/SOA
	Received 177 bytes from 212.70.163.100
	;; Response received from [212.70.163.100] 177 octets ;; HEADER SECTION ;; id = 14472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN SOA ;; ANSWER SECTION (1 record) gov.lv. 3600 IN SOA ( a.gov.lv. dns.lvrtc.lv. 2024042600 ;serial 3600 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	Query to b.gov.lv for gov.lv/SOA
	Received 177 bytes from 212.70.163.230
	;; Response received from [212.70.163.230] 177 octets ;; HEADER SECTION ;; id = 8828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN SOA ;; ANSWER SECTION (1 record) gov.lv. 3600 IN SOA ( a.gov.lv. dns.lvrtc.lv. 2024042600 ;serial 3600 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	Query to c.gov.lv for gov.lv/A
	Received 147 bytes from 194.0.50.3
	;; Response received from [194.0.50.3] 147 octets ;; HEADER SECTION ;; id = 59986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	gov.lv A RR has value 212.70.165.107
	No RRSIGs found

gov.lv

	Query to a.gov.lv for gov.lv/A
	Received 147 bytes from 212.70.163.100
	;; Response received from [212.70.163.100] 147 octets ;; HEADER SECTION ;; id = 39970 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	a.gov.lv is authoritative for gov.lv
	Query to a.gov.lv for gov.lv/A
	Received 147 bytes from 212.70.163.100
	;; Response received from [212.70.163.100] 147 octets ;; HEADER SECTION ;; id = 41324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	gov.lv A RR has value 212.70.165.107
	No RRSIGs found

gov.lv

	Query to b.gov.lv for gov.lv/A
	Received 147 bytes from 212.70.163.230
	;; Response received from [212.70.163.230] 147 octets ;; HEADER SECTION ;; id = 30855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	b.gov.lv is authoritative for gov.lv
	Query to b.gov.lv for gov.lv/A
	Received 147 bytes from 212.70.163.230
	;; Response received from [212.70.163.230] 147 octets ;; HEADER SECTION ;; id = 28916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.lv. IN A ;; ANSWER SECTION (1 record) gov.lv. 3600 IN A 212.70.165.107 ;; AUTHORITY SECTION (3 records) gov.lv. 3600 IN NS c.gov.lv. gov.lv. 3600 IN NS a.gov.lv. gov.lv. 3600 IN NS b.gov.lv. ;; ADDITIONAL SECTION (4 records) a.gov.lv. 3600 IN A 212.70.163.100 b.gov.lv. 3600 IN A 212.70.163.230 c.gov.lv. 3600 IN A 194.0.50.3 ;; { "EDNS-VERSION": 0 }
	gov.lv A RR has value 212.70.165.107
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.lv at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: