DNSSEC Debugger

Domain Name:

Time: 2024-05-19 03:08:54 UTC

Analyzing DNSSEC problems for gov.tr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 7605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for gov.tr/A
	Received 677 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 677 octets ;; HEADER SECTION ;; id = 48322 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns74.nic.tr. tr. 172800 IN NS ns61.nic.tr. tr. 172800 IN NS ns41.nic.tr. tr. 172800 IN NS ns42.nic.tr. tr. 172800 IN NS ns73.nic.tr. tr. 172800 IN NS ns71.nic.tr. tr. 172800 IN NS ns72.nic.tr. tr. 86400 IN DS ( 52321 13 2 31fca215aa6690c3d1c265d141cc879576d16f8f06dbfb99d38893e8f9e33d23 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . bHWCkQVZQED0eiMNHov0B9MRw+uXre1SjwhxEO1ddpRq006zTOpvkD3MUZyBj7jYD9wXXnJfH1wz 1SzuNUNSI3F0vEVsYRU1PWyFtmdtAAKJ2MjpLdGa9ZKsC5IukWY7VtJ4JuwWgHLkr0Er7/uS6K6x MKE8D2NyumqFQL1+Xl0z5Ripc7jJ1gmTq2mnjFujxhv2p9LpjlLbovY0zmAv7/sqHtHLW0XYzXHI dGm4W1hd6Uhhjf1uCRXrM5ZkLlf1/LbiT4bODXTvmNQXL1GMJUaJOWG4IwIYJsLypgmLABQhkV9J SaDdB9ZVoRGwHL1aIKGrGqEXaCdMKItuCtoVkw== ) ;; ADDITIONAL SECTION (10 records) ns74.nic.tr. 172800 IN A 31.145.253.160 ns73.nic.tr. 172800 IN A 31.145.253.159 ns72.nic.tr. 172800 IN A 40.68.114.66 ns71.nic.tr. 172800 IN A 185.67.32.53 ns61.nic.tr. 172800 IN A 206.51.254.1 ns42.nic.tr. 172800 IN A 185.7.0.3 ns41.nic.tr. 172800 IN A 185.7.0.2 ns72.nic.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.nic.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for tr/DNSKEY
	Received 673 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 673 octets ;; HEADER SECTION ;; id = 64950 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns41.nic.tr. tr. 172800 IN NS ns61.nic.tr. tr. 172800 IN NS ns71.nic.tr. tr. 172800 IN NS ns74.nic.tr. tr. 172800 IN NS ns73.nic.tr. tr. 172800 IN NS ns42.nic.tr. tr. 172800 IN NS ns72.nic.tr. tr. 86400 IN DS ( 52321 13 2 31fca215aa6690c3d1c265d141cc879576d16f8f06dbfb99d38893e8f9e33d23 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . bHWCkQVZQED0eiMNHov0B9MRw+uXre1SjwhxEO1ddpRq006zTOpvkD3MUZyBj7jYD9wXXnJfH1wz 1SzuNUNSI3F0vEVsYRU1PWyFtmdtAAKJ2MjpLdGa9ZKsC5IukWY7VtJ4JuwWgHLkr0Er7/uS6K6x MKE8D2NyumqFQL1+Xl0z5Ripc7jJ1gmTq2mnjFujxhv2p9LpjlLbovY0zmAv7/sqHtHLW0XYzXHI dGm4W1hd6Uhhjf1uCRXrM5ZkLlf1/LbiT4bODXTvmNQXL1GMJUaJOWG4IwIYJsLypgmLABQhkV9J SaDdB9ZVoRGwHL1aIKGrGqEXaCdMKItuCtoVkw== ) ;; ADDITIONAL SECTION (10 records) ns74.nic.tr. 172800 IN A 31.145.253.160 ns73.nic.tr. 172800 IN A 31.145.253.159 ns72.nic.tr. 172800 IN A 40.68.114.66 ns71.nic.tr. 172800 IN A 185.67.32.53 ns61.nic.tr. 172800 IN A 206.51.254.1 ns42.nic.tr. 172800 IN A 185.7.0.3 ns41.nic.tr. 172800 IN A 185.7.0.2 ns72.nic.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.nic.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; { "EDNS-VERSION": 0 }
	Found child zone tr

	Checking DS between . and tr
	Query to j.root-servers.net for tr/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 33140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DS ;; ANSWER SECTION (2 records) tr. 86400 IN DS ( 52321 13 2 31fca215aa6690c3d1c265d141cc879576d16f8f06dbfb99d38893e8f9e33d23 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . bHWCkQVZQED0eiMNHov0B9MRw+uXre1SjwhxEO1ddpRq006zTOpvkD3MUZyBj7jYD9wXXnJfH1wz 1SzuNUNSI3F0vEVsYRU1PWyFtmdtAAKJ2MjpLdGa9ZKsC5IukWY7VtJ4JuwWgHLkr0Er7/uS6K6x MKE8D2NyumqFQL1+Xl0z5Ripc7jJ1gmTq2mnjFujxhv2p9LpjlLbovY0zmAv7/sqHtHLW0XYzXHI dGm4W1hd6Uhhjf1uCRXrM5ZkLlf1/LbiT4bODXTvmNQXL1GMJUaJOWG4IwIYJsLypgmLABQhkV9J SaDdB9ZVoRGwHL1aIKGrGqEXaCdMKItuCtoVkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tr in the . zone
	DS=52321/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tr. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . bHWCkQVZQED0eiMNHov0B9MRw+uXre1SjwhxEO1ddpRq006zTOpvkD3MUZyBj7jYD9wXXnJfH1wz 1SzuNUNSI3F0vEVsYRU1PWyFtmdtAAKJ2MjpLdGa9ZKsC5IukWY7VtJ4JuwWgHLkr0Er7/uS6K6x MKE8D2NyumqFQL1+Xl0z5Ripc7jJ1gmTq2mnjFujxhv2p9LpjlLbovY0zmAv7/sqHtHLW0XYzXHI dGm4W1hd6Uhhjf1uCRXrM5ZkLlf1/LbiT4bODXTvmNQXL1GMJUaJOWG4IwIYJsLypgmLABQhkV9J SaDdB9ZVoRGwHL1aIKGrGqEXaCdMKItuCtoVkw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=52321/SHA-256 is now in the chain-of-trust
	`tr. 86400 IN DS ( 52321 13 2 31fca215aa6690c3d1c265d141cc879576d16f8f06dbfb99d38893e8f9e33d23 )`
	Query to ns71.nic.tr for tr/DNSKEY
	Received 289 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 289 octets ;; HEADER SECTION ;; id = 26489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (3 records) tr. 43200 IN DNSKEY ( 256 3 13 v6EWvJ2Yauc27/czVMovnb0+euH3FJ4f4mz/HLAKtl+ftUjEMV1VAGNP9lqp8Vk2moS30dRzYOGh m0bZmOmWVA== ) ; Key ID = 5575 tr. 43200 IN DNSKEY ( 257 3 13 pMlihqp0gb4nlIiy87yb5B+0qEThyqKcEBRVJJNikqH5d17Zu/zrZlktYKteRJ9nSJhcB8qjyRA+ gyTJz5Fa3w== ) ; Key ID = 52321 tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20240531221808 20240516111059 52321 tr. 8rL0rMamCBT9oKHAUiK5sharlX1+aZ1/rFuRUS4thitqM1udemXUxQF+bDeBl+gs9O4DV3wRrOM2 dWayl1SPvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for tr
	`tr. 43200 IN DNSKEY ( 256 3 13 v6EWvJ2Yauc27/czVMovnb0+euH3FJ4f4mz/HLAKtl+ftUjEMV1VAGNP9lqp8Vk2moS30dRzYOGh m0bZmOmWVA== ) ; Key ID = 5575`
	`tr. 43200 IN DNSKEY ( 257 3 13 pMlihqp0gb4nlIiy87yb5B+0qEThyqKcEBRVJJNikqH5d17Zu/zrZlktYKteRJ9nSJhcB8qjyRA+ gyTJz5Fa3w== ) ; Key ID = 52321`
	DNSKEY=52321/SEP is now in the chain-of-trust
	DS=52321/SHA-256 verifies DNSKEY=52321/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20240531221808 20240516111059 52321 tr. 8rL0rMamCBT9oKHAUiK5sharlX1+aZ1/rFuRUS4thitqM1udemXUxQF+bDeBl+gs9O4DV3wRrOM2 dWayl1SPvg== )`
	RRSIG=52321 and DNSKEY=52321/SEP verifies the DNSKEY RRset
	DNSKEY=5575 is now in the chain-of-trust
	Query to ns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 383 octets ;; HEADER SECTION ;; id = 20493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns72.nic.tr is authoritative for gov.tr
	Query to ns41.nic.tr for gov.tr/DNSKEY
	Received 297 bytes from 185.7.0.2
	;; Response received from [185.7.0.2] 297 octets ;; HEADER SECTION ;; id = 51527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 256 3 13 oVjFHGRoHRnaIIErWrFljqkJBZdvsDSW840X+9K7sfd8I4HLcRRmkuLLY04JnxlRk5Am73PaYt+/ qn2BSkSL9A== ) ; Key ID = 52722 gov.tr. 43200 IN DNSKEY ( 257 3 13 osCDYc1oebN/WCXa/G/D00SGg1FttC8mMhwUNRl740CK4oR3Xw9edcd6uvyLNR0XioRebJeRyRBY 2IwnipSJmA== ) ; Key ID = 47333 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20240603034742 20240518232659 47333 gov.tr. jB6cLA4Kkps29ZBSDDoTq+0dK92D5VhYpuJyD87pS5g8LMYKk7dxgXwef4Zeu/DYUPVYEy5N0rMy YcAy9FdOSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone gov.tr
	Attempting to learn nameservers for gov.tr
	Query to ns41.nic.tr for gov.tr/NS
	Received 261 bytes from 185.7.0.2
	;; Response received from [185.7.0.2] 261 octets ;; HEADER SECTION ;; id = 35754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN NS ;; ANSWER SECTION (7 records) gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found gov.tr nameservers: lns72.nic.tr, lns73.nic.tr, lns74.nic.tr, lns41.nic.tr, lns42.nic.tr, lns71.nic.tr

gov.tr

	Checking DS between tr and gov.tr
	Query to ns73.nic.tr for gov.tr/DS
	Received 181 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 181 octets ;; HEADER SECTION ;; id = 59110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DS ;; ANSWER SECTION (2 records) gov.tr. 43200 IN DS ( 47333 13 2 df96ac5321168a64a30f5d2396fde1ef8d457b3b3c84cc9ab040894b04c39a2c ) gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20240530035253 20240515111019 5575 tr. xXJ9mxvFdeF1LM4ZllRUlB5EPQwtDfM6+IB8PQcVu4MofTK6zpT54XFhEIfeYU/ex2feN6zzniqJ jW6rflpBsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.tr in the tr zone
	DS=47333/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20240530035253 20240515111019 5575 tr. xXJ9mxvFdeF1LM4ZllRUlB5EPQwtDfM6+IB8PQcVu4MofTK6zpT54XFhEIfeYU/ex2feN6zzniqJ jW6rflpBsg== )`
	RRSIG=5575 and DNSKEY=5575 verifies the DS RRset
	DS=47333/SHA-256 is now in the chain-of-trust
	`gov.tr. 43200 IN DS ( 47333 13 2 df96ac5321168a64a30f5d2396fde1ef8d457b3b3c84cc9ab040894b04c39a2c )`
	Query to lns42.nic.tr for gov.tr/DNSKEY
	Received 297 bytes from 185.7.0.3
	;; Response received from [185.7.0.3] 297 octets ;; HEADER SECTION ;; id = 32840 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 256 3 13 oVjFHGRoHRnaIIErWrFljqkJBZdvsDSW840X+9K7sfd8I4HLcRRmkuLLY04JnxlRk5Am73PaYt+/ qn2BSkSL9A== ) ; Key ID = 52722 gov.tr. 43200 IN DNSKEY ( 257 3 13 osCDYc1oebN/WCXa/G/D00SGg1FttC8mMhwUNRl740CK4oR3Xw9edcd6uvyLNR0XioRebJeRyRBY 2IwnipSJmA== ) ; Key ID = 47333 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20240603034742 20240518232659 47333 gov.tr. jB6cLA4Kkps29ZBSDDoTq+0dK92D5VhYpuJyD87pS5g8LMYKk7dxgXwef4Zeu/DYUPVYEy5N0rMy YcAy9FdOSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov.tr
	`gov.tr. 43200 IN DNSKEY ( 256 3 13 oVjFHGRoHRnaIIErWrFljqkJBZdvsDSW840X+9K7sfd8I4HLcRRmkuLLY04JnxlRk5Am73PaYt+/ qn2BSkSL9A== ) ; Key ID = 52722`
	`gov.tr. 43200 IN DNSKEY ( 257 3 13 osCDYc1oebN/WCXa/G/D00SGg1FttC8mMhwUNRl740CK4oR3Xw9edcd6uvyLNR0XioRebJeRyRBY 2IwnipSJmA== ) ; Key ID = 47333`
	DNSKEY=47333/SEP is now in the chain-of-trust
	DS=47333/SHA-256 verifies DNSKEY=47333/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20240603034742 20240518232659 47333 gov.tr. jB6cLA4Kkps29ZBSDDoTq+0dK92D5VhYpuJyD87pS5g8LMYKk7dxgXwef4Zeu/DYUPVYEy5N0rMy YcAy9FdOSQ== )`
	RRSIG=47333 and DNSKEY=47333/SEP verifies the DNSKEY RRset
	DNSKEY=52722 is now in the chain-of-trust
	Query to lns42.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.3
	;; Response received from [185.7.0.3] 383 octets ;; HEADER SECTION ;; id = 39657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns42.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns73.nic.tr for gov.tr/SOA
	Received 415 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 415 octets ;; HEADER SECTION ;; id = 65509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lns71.nic.tr for gov.tr/SOA
	Received 415 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 415 octets ;; HEADER SECTION ;; id = 50602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lns74.nic.tr for gov.tr/SOA
	Received 415 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 415 octets ;; HEADER SECTION ;; id = 43990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lns41.nic.tr for gov.tr/SOA
	Received 415 bytes from 185.7.0.2
	;; Response received from [185.7.0.2] 415 octets ;; HEADER SECTION ;; id = 54896 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lns72.nic.tr for gov.tr/SOA
	Received 415 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 415 octets ;; HEADER SECTION ;; id = 25868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20240529124901 20240514131144 52722 gov.tr. T8v5XF716qFu+MUojnwygoP9czAgYb0Mnimg1JozmC2oGwDweB2/A2o6T2SsIA5yNrW3UYHwNRQh sB1WTXuUOQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lns42.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.3
	;; Response received from [185.7.0.3] 383 octets ;; HEADER SECTION ;; id = 31524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

gov.tr

	Query to lns74.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 383 octets ;; HEADER SECTION ;; id = 43606 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns74.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns74.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 383 octets ;; HEADER SECTION ;; id = 50822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

gov.tr

	Query to lns71.nic.tr for gov.tr/A
	Received 383 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 383 octets ;; HEADER SECTION ;; id = 45855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns71.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns71.nic.tr for gov.tr/A
	Received 383 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 383 octets ;; HEADER SECTION ;; id = 49604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

gov.tr

	Query to lns73.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 383 octets ;; HEADER SECTION ;; id = 695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns73.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns73.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 383 octets ;; HEADER SECTION ;; id = 48451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

gov.tr

	Query to lns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 383 octets ;; HEADER SECTION ;; id = 18365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns72.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 383 octets ;; HEADER SECTION ;; id = 22489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

gov.tr

	Query to lns41.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.2
	;; Response received from [185.7.0.2] 383 octets ;; HEADER SECTION ;; id = 40637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lns41.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns41.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.2
	;; Response received from [185.7.0.2] 383 octets ;; HEADER SECTION ;; id = 4024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1716078419 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN NSEC3 ( 1 0 5 dca8581d52c124bf 6kn63dur9s7ba3m39fh4ucf3jpmahprm NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kic1u13hgvjn0shjt7vklpnbnrb5htl.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20240602185024 20240518210427 52722 gov.tr. KDCIvyTBwTkyWqx4D0F7kG069xGkxHNl2xuCUGfgPBRegXIRT2DwVkf0CQL8gMCJLSb2qZ+r052q HVlc7LSMuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20240602173530 20240518232659 52722 gov.tr. JzlkGBdX0bvwIqJ3Jw/VdKVdd7yWUBgyvrvFTYvEuD8PDvIAJbl4SDHk/3xfYlFnFiq3ztYS4hL2 6/mCzFFUnQ== )`
	RRSIG=52722 and DNSKEY=52722 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.tr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: