DNSSEC Debugger - graflex.org

Domain Name:

Time: 2024-05-15 06:14:29 UTC

Analyzing DNSSEC problems for graflex.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 61222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for graflex.org/A
	Received 777 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 777 octets ;; HEADER SECTION ;; id = 33458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240528050000 20240515040000 5613 . A63bC1z6/Z+DwLZtpulFqih0VYveAVvZ4zaSLjqKHAGMmi1SOLuLczoiYXzMmv2u8F7OY4nqZ23h sn6iJUP91ffr+LrDJGR3TEP+okPpH/Gh6kOojY0PH1pydWlopqkaNCouNe/fs8wA1atBRIdDddzC XSiI0JmN7BffERV/7x9WvknulZM0GQqy+7hwxeIm3Dd/M0aZmyecdIfS4hisXMN7ubEpkNn9aw/I lusB5r480grUo5AP5BnFc8ZNPW0xmpCKCIuUNyc8r+1nv2p2NRGavZ1NtKhu6x8zZq9IR8mE7x7R uaQuhkIe+6ByvZvKDuGedzr5YSbQaGn3lNKcDA== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for org/DNSKEY
	Received 772 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 772 octets ;; HEADER SECTION ;; id = 44980 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240528050000 20240515040000 5613 . A63bC1z6/Z+DwLZtpulFqih0VYveAVvZ4zaSLjqKHAGMmi1SOLuLczoiYXzMmv2u8F7OY4nqZ23h sn6iJUP91ffr+LrDJGR3TEP+okPpH/Gh6kOojY0PH1pydWlopqkaNCouNe/fs8wA1atBRIdDddzC XSiI0JmN7BffERV/7x9WvknulZM0GQqy+7hwxeIm3Dd/M0aZmyecdIfS4hisXMN7ubEpkNn9aw/I lusB5r480grUo5AP5BnFc8ZNPW0xmpCKCIuUNyc8r+1nv2p2NRGavZ1NtKhu6x8zZq9IR8mE7x7R uaQuhkIe+6ByvZvKDuGedzr5YSbQaGn3lNKcDA== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to d.root-servers.net for org/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 15374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240528050000 20240515040000 5613 . A63bC1z6/Z+DwLZtpulFqih0VYveAVvZ4zaSLjqKHAGMmi1SOLuLczoiYXzMmv2u8F7OY4nqZ23h sn6iJUP91ffr+LrDJGR3TEP+okPpH/Gh6kOojY0PH1pydWlopqkaNCouNe/fs8wA1atBRIdDddzC XSiI0JmN7BffERV/7x9WvknulZM0GQqy+7hwxeIm3Dd/M0aZmyecdIfS4hisXMN7ubEpkNn9aw/I lusB5r480grUo5AP5BnFc8ZNPW0xmpCKCIuUNyc8r+1nv2p2NRGavZ1NtKhu6x8zZq9IR8mE7x7R uaQuhkIe+6ByvZvKDuGedzr5YSbQaGn3lNKcDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20240528050000 20240515040000 5613 . A63bC1z6/Z+DwLZtpulFqih0VYveAVvZ4zaSLjqKHAGMmi1SOLuLczoiYXzMmv2u8F7OY4nqZ23h sn6iJUP91ffr+LrDJGR3TEP+okPpH/Gh6kOojY0PH1pydWlopqkaNCouNe/fs8wA1atBRIdDddzC XSiI0JmN7BffERV/7x9WvknulZM0GQqy+7hwxeIm3Dd/M0aZmyecdIfS4hisXMN7ubEpkNn9aw/I lusB5r480grUo5AP5BnFc8ZNPW0xmpCKCIuUNyc8r+1nv2p2NRGavZ1NtKhu6x8zZq9IR8mE7x7R uaQuhkIe+6ByvZvKDuGedzr5YSbQaGn3lNKcDA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to b0.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 895 octets ;; HEADER SECTION ;; id = 13085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093 org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530152824 20240509142824 26974 org. t6vwvTdw0/xEIYULhUjp4XzRh83Y4fmhoYNQld2i2bv34HDw1ZZBlNDNuHnAr16uppF//sPa1mlq /u0P17qbnioBEKN60fbhVBxocvF0XL4OnZNE85dBAJyCZriRoKJPiXPCJ3057hSFvEBUrDli0afu 3JRtz3U3IDcE6Jkl7nwDzQYTQp3h6xo65lNwA6Agn0Kl5hK8QvDl9y0yUr7QJNUt+KjlvMjIgO+T Bp7hBSu8PpJ7WwLKtl2vuKJYgWnL/jDDUf6/q9CeHn7zH8LwY3l8GqHJn2idn/fnZwGTn0GIvoLy nzFv1D/uVeTFTod1Usf3hrWc1YjgB4ideF8yeQ== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=3093 is now in the chain-of-trust
	DNSKEY=55149 is now in the chain-of-trust
	Query to b2.org.afilias-nst.org for graflex.org/A
	Received 670 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 670 octets ;; HEADER SECTION ;; id = 53006 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) graflex.org. 3600 IN NS ns2.he.net. graflex.org. 3600 IN NS ns3.he.net. graflex.org. 3600 IN NS ns3.graflex.org. graflex.org. 3600 IN NS ns4.he.net. graflex.org. 3600 IN NS ns5.he.net. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a vl66jpskunqj1ius7f6j5ugm4ep0475h NS DS RRSIG ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240605061107 20240515051107 3093 org. rVeJN8eyrjVnUcxju8nA/t9zFHNUx3eY8XpoyYDDvXODLizan+kzJQryWMNOQ6pO8VyxZwEh9uOv JEQHYyBjiffCkDy8IruGJmUhHBokE34wlCe+sSUaTPgBMpDcqNOCzycQMQs+nrgwT7LxGydM9+QZ hi8UKIB01aOA/tFqPDE= ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240530152824 20240509142824 3093 org. iYNMXEfSETlYcwu65cTCoH79jfYAJDAfIKxZr4hb9Uw6QdgMCyqrZDCsb1/snbzRFAgwPNo150MR n1vRiBqeq5VwPqrY2ho8D78swSVAyBV5G64VYRPbhplB8G98mN+P8pePK9c/oSoKxXs7ey/zffhN jNssb5HmpVRY2HXDMWY= ) ;; ADDITIONAL SECTION (2 records) ns3.graflex.org. 3600 IN A 173.164.210.105 ;; { "EDNS-VERSION": 0 }
	Query to c0.org.afilias-nst.info for graflex.org/DNSKEY
	Received 653 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 653 octets ;; HEADER SECTION ;; id = 32245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) graflex.org. 3600 IN NS ns5.he.net. graflex.org. 3600 IN NS ns3.he.net. graflex.org. 3600 IN NS ns2.he.net. graflex.org. 3600 IN NS ns3.graflex.org. graflex.org. 3600 IN NS ns4.he.net. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240605061107 20240515051107 3093 org. rVeJN8eyrjVnUcxju8nA/t9zFHNUx3eY8XpoyYDDvXODLizan+kzJQryWMNOQ6pO8VyxZwEh9uOv JEQHYyBjiffCkDy8IruGJmUhHBokE34wlCe+sSUaTPgBMpDcqNOCzycQMQs+nrgwT7LxGydM9+QZ hi8UKIB01aOA/tFqPDE= ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a vl66jpskunqj1ius7f6j5ugm4ep0475h NS DS RRSIG ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240530152824 20240509142824 3093 org. iYNMXEfSETlYcwu65cTCoH79jfYAJDAfIKxZr4hb9Uw6QdgMCyqrZDCsb1/snbzRFAgwPNo150MR n1vRiBqeq5VwPqrY2ho8D78swSVAyBV5G64VYRPbhplB8G98mN+P8pePK9c/oSoKxXs7ey/zffhN jNssb5HmpVRY2HXDMWY= ) ;; ADDITIONAL SECTION (2 records) ns3.graflex.org. 3600 IN A 173.164.210.105 ;; { "EDNS-VERSION": 0 }
	Found child zone graflex.org

graflex.org

	Checking DS between org and graflex.org
	Query to a2.org.afilias-nst.info for graflex.org/DS
	Received 786 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 786 octets ;; HEADER SECTION ;; id = 23229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) org. 3600 IN SOA ( a0.org.afilias-nst.info. hostmaster.donuts.email. 1715753114 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a vl66jpskunqj1ius7f6j5ugm4ep0475h NS DS RRSIG ) org. 3600 IN RRSIG ( SOA 8 1 3600 20240605061107 20240515051107 3093 org. fkgpE1vuifm19T1qkCunwqMDfvDYGQKfg26fM1kSkvPPWelCJ491J/VrNc2m62IVxN0fWntbu/V2 HjYnXPVNwaBfX2sMsoDTNLezJ6vwVubvaHu5f2oTpFbZIUdE6i0gkHCmAWJ8fQz8r11EfPxS+MD7 Li+sRBtiIDDpNtAcgiU= ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240605061107 20240515051107 3093 org. rVeJN8eyrjVnUcxju8nA/t9zFHNUx3eY8XpoyYDDvXODLizan+kzJQryWMNOQ6pO8VyxZwEh9uOv JEQHYyBjiffCkDy8IruGJmUhHBokE34wlCe+sSUaTPgBMpDcqNOCzycQMQs+nrgwT7LxGydM9+QZ hi8UKIB01aOA/tFqPDE= ) vl6491a5rbnhrqc49sh9pru5opsdlqkt.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20240530152824 20240509142824 3093 org. iYNMXEfSETlYcwu65cTCoH79jfYAJDAfIKxZr4hb9Uw6QdgMCyqrZDCsb1/snbzRFAgwPNo150MR n1vRiBqeq5VwPqrY2ho8D78swSVAyBV5G64VYRPbhplB8G98mN+P8pePK9c/oSoKxXs7ey/zffhN jNssb5HmpVRY2HXDMWY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for graflex.org in the org zone
	Query to ns5.he.net for graflex.org/DNSKEY
	Received 1082 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 1082 octets ;; HEADER SECTION ;; id = 58647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN DNSKEY ;; ANSWER SECTION (5 records) graflex.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbtQFX6V969VBidF1KRDmjN0POv3zEdsIkBl+6VMyV/pstggCDx9rEuPWky1SuIe3BtmDGki 5oud43vzPqhMGKRKWiJs9y7Sw/dVmPKGAsStfhsS/GRsGBtQ1AMhQByAUZJgE6Hswb/igh5DiY/y iCXdq78z1TcbS7fBqLct38wB ) ; Key ID = 58434 graflex.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240612185655 20240513175655 58434 graflex.org. cSfK788EnG/EPxgzPN6CLxv9TE7JYIHAxik3sGUWzb1XhaB9wZnDYzG2pRfxBDTDRAeNmDJuFalE X2ofIGGtd/67CsXbJ1opOEIOf3LWvKrg7++hLhCnUAlMxDPtg/PzrEDoVGgoy2GH+F1ukdsnCUOd lgVi51lqFJ1en+6Cprs= ) graflex.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdIVJCfVVG65I9woe96SNmBqKPsBPGP6J3ZurwOsKSIKTrcZGuxqpO+Z1/LjHizclAiigJqW 9I4bHTygsNnwRLzgKdbdQklo7rc7sH3WKZWHEtndmNsFLrbHOBup/vHZ5JRKpiWB/uQ7fCLADv25 Pop4q4qpNQp65+nGtOJXZo6B ) ; Key ID = 31251 graflex.org. 3600 IN DNSKEY ( 257 3 8 AwEAAcVEzsq650ML5Z0eqcr6VRJlpmaOWjpJUJvO/KmjDmjQilYRvGxGNXPMYU985ZOKRp0qMlUT avgO16QqmEwQIuzJ/sQx6JvJ2p2PQKxM5CrFCmjyyytVD8VAad3nGMt+6gXCPA6KN2jnXnFupPEP 541gbGP/k3LiqeLvn9qgFO3gZyEb8ydaOeHKTJjJHeqNen10VawJP2RcrPxsZgKR7GmHppQuDcsR /y/ESc1odKpwnAvvuhasWWNkiaAl+DR/VxXWZvjV2K2uZeU0Fn+trGcS23BpJYlASL2E3ixZH1YZ 3CB2JKYBiVf+yam4zO7TYcsEg/slKNO6XhsuCxTaiO0= ) ; Key ID = 17587 graflex.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240612185655 20240513175655 17587 graflex.org. PsUnoCPrZQ/oneoUdRY7iSLAqulPiQJhz1Mn8d6IWwEQlMXcnlBbH0n6WVA2neKNxmx0fjkAnPjU i9WlJZUUpnQ3YWN4VZadgv1rCWGEMQWEhntkI+ClIBRyoLf1+yU1Nmo1wcuw+XQvwUQt69sotCap aVJzYVLUGNAShE4Elc9zzX1iBEde9PILrvn7wFLhdsWBBj1038RQWljkI9DZM1cA78deCIsq6SpU FKL5Qyh9dqVE1CPRsfpppZCYEpWnr5B2u41QXmEnBIWjfkDoGeA8dkGUR+0RWyS06te4nUbslgrQ RHk00dZ8JD/k++mPVafjOiUfspAzMbs9i0GHSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for graflex.org
	`graflex.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbtQFX6V969VBidF1KRDmjN0POv3zEdsIkBl+6VMyV/pstggCDx9rEuPWky1SuIe3BtmDGki 5oud43vzPqhMGKRKWiJs9y7Sw/dVmPKGAsStfhsS/GRsGBtQ1AMhQByAUZJgE6Hswb/igh5DiY/y iCXdq78z1TcbS7fBqLct38wB ) ; Key ID = 58434`
	`graflex.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdIVJCfVVG65I9woe96SNmBqKPsBPGP6J3ZurwOsKSIKTrcZGuxqpO+Z1/LjHizclAiigJqW 9I4bHTygsNnwRLzgKdbdQklo7rc7sH3WKZWHEtndmNsFLrbHOBup/vHZ5JRKpiWB/uQ7fCLADv25 Pop4q4qpNQp65+nGtOJXZo6B ) ; Key ID = 31251`
	`graflex.org. 3600 IN DNSKEY ( 257 3 8 AwEAAcVEzsq650ML5Z0eqcr6VRJlpmaOWjpJUJvO/KmjDmjQilYRvGxGNXPMYU985ZOKRp0qMlUT avgO16QqmEwQIuzJ/sQx6JvJ2p2PQKxM5CrFCmjyyytVD8VAad3nGMt+6gXCPA6KN2jnXnFupPEP 541gbGP/k3LiqeLvn9qgFO3gZyEb8ydaOeHKTJjJHeqNen10VawJP2RcrPxsZgKR7GmHppQuDcsR /y/ESc1odKpwnAvvuhasWWNkiaAl+DR/VxXWZvjV2K2uZeU0Fn+trGcS23BpJYlASL2E3ixZH1YZ 3CB2JKYBiVf+yam4zO7TYcsEg/slKNO6XhsuCxTaiO0= ) ; Key ID = 17587`
	Found 2 RRSIGs over DNSKEY RRset
	`graflex.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240612185655 20240513175655 58434 graflex.org. cSfK788EnG/EPxgzPN6CLxv9TE7JYIHAxik3sGUWzb1XhaB9wZnDYzG2pRfxBDTDRAeNmDJuFalE X2ofIGGtd/67CsXbJ1opOEIOf3LWvKrg7++hLhCnUAlMxDPtg/PzrEDoVGgoy2GH+F1ukdsnCUOd lgVi51lqFJ1en+6Cprs= )`
	`graflex.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240612185655 20240513175655 17587 graflex.org. PsUnoCPrZQ/oneoUdRY7iSLAqulPiQJhz1Mn8d6IWwEQlMXcnlBbH0n6WVA2neKNxmx0fjkAnPjU i9WlJZUUpnQ3YWN4VZadgv1rCWGEMQWEhntkI+ClIBRyoLf1+yU1Nmo1wcuw+XQvwUQt69sotCap aVJzYVLUGNAShE4Elc9zzX1iBEde9PILrvn7wFLhdsWBBj1038RQWljkI9DZM1cA78deCIsq6SpU FKL5Qyh9dqVE1CPRsfpppZCYEpWnr5B2u41QXmEnBIWjfkDoGeA8dkGUR+0RWyS06te4nUbslgrQ RHk00dZ8JD/k++mPVafjOiUfspAzMbs9i0GHSQ== )`
	RRSIG=58434 and DNSKEY=58434 verifies the DNSKEY RRset
	RRSIG=17587 and DNSKEY=17587/SEP verifies the DNSKEY RRset
	Query to ns2.he.net for graflex.org/A
	Received 227 bytes from 216.218.131.2
	;; Response received from [216.218.131.2] 227 octets ;; HEADER SECTION ;; id = 21368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) graflex.org. 3600 IN A 173.164.210.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.he.net is authoritative for graflex.org
	Found RRSIG signed by graflex.org zone
	Query to ns5.he.net for graflex.org/SOA
	Received 257 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 257 octets ;; HEADER SECTION ;; id = 33 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN SOA ;; ANSWER SECTION (2 records) graflex.org. 3600 IN SOA ( ns3.graflex.org. klotz.graflex.org. 2024051302 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) graflex.org. 3600 IN RRSIG ( SOA 8 2 3600 20240612185655 20240513175655 58434 graflex.org. K/KVJUR5GLaewFIhsXxt6Q2VjaH0YvNnIzTbd+Xp8swyGqwy2fNU7dUyqclYr4rLMDQNpm2Q9Khp z/2+VvbW8XHxBbUgqfJtD488NHBtvd33d5gvOrXYgp1ztfL0ZnAXAE3RVn3cgATrAG17blwyAsa5 DxiS0Hg+T/8B2KMMNK8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.graflex.org for graflex.org/SOA
	Received 912 bytes from 173.164.210.105
	;; Response received from [173.164.210.105] 912 octets ;; HEADER SECTION ;; id = 45676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN SOA ;; ANSWER SECTION (2 records) graflex.org. 3600 IN SOA ( ns3.graflex.org. klotz.graflex.org. 2024051302 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) graflex.org. 3600 IN RRSIG ( SOA 8 2 3600 20240612185655 20240513175655 58434 graflex.org. K/KVJUR5GLaewFIhsXxt6Q2VjaH0YvNnIzTbd+Xp8swyGqwy2fNU7dUyqclYr4rLMDQNpm2Q9Khp z/2+VvbW8XHxBbUgqfJtD488NHBtvd33d5gvOrXYgp1ztfL0ZnAXAE3RVn3cgATrAG17blwyAsa5 DxiS0Hg+T/8B2KMMNK8= ) ;; AUTHORITY SECTION (7 records) graflex.org. 3600 IN NS ns4.he.net. graflex.org. 3600 IN NS ns2.he.net. graflex.org. 3600 IN NS ns3.graflex.org. graflex.org. 3600 IN NS ns5.he.net. graflex.org. 3600 IN NS ns3.he.net. graflex.org. 3600 IN NS ns2.graflex.org. graflex.org. 3600 IN RRSIG ( NS 8 2 3600 20240612185655 20240513175655 58434 graflex.org. reg2y2T1tWNjZ+fC5MBFTyaqKbU/5s8vVPsv7cbZroi6+RCeVqiyckHCJ/xmIpYCi7nAcJX7xfiL Hlp1EcIz3MGkhwDzFsVCAwF5ukIUX2tmRH8vshFuEjFdiF8s3O0u668ZoImKtUu1wDVl5w8wpgVC iAMf858H9K9uEYNtOn0= ) ;; ADDITIONAL SECTION (5 records) ns2.graflex.org. 3600 IN A 173.164.210.106 ns3.graflex.org. 3600 IN A 173.164.210.105 ns2.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. FaFAnWmm0GrRMH2tG0UF1QcpIK3p9lwyXXGVB1hmERGodgwZ8grQPGzptRt6eG499PAf2eovu4mL P5y5HzczVTpXtL1Hoq4yEhx7JJe51Zoe1WZCasE89fqV4RybiSODA1HWB3sdCRi3WvceoygylPQG 61rJgJwrXIPEaxSlkpo= ) ns3.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. rEEMMsnItwGlCj7jCjLFjSPIaESZ9ya2Fwl07lxqupt/JERWTaH3F0ueVZ41gTgUk2f+15UMedYS 6OSLTQw6kUzA7Vwc1GhHHFLL+tMWZok9jv97iu/7h45T3vLJDmGZXF5WOTPVlvhQlJv9XI51GH3F F6dccZsFkzar7VcrUWk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.he.net for graflex.org/SOA
	Received 257 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 257 octets ;; HEADER SECTION ;; id = 20189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN SOA ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( SOA 8 2 3600 20240612185655 20240513175655 58434 graflex.org. K/KVJUR5GLaewFIhsXxt6Q2VjaH0YvNnIzTbd+Xp8swyGqwy2fNU7dUyqclYr4rLMDQNpm2Q9Khp z/2+VvbW8XHxBbUgqfJtD488NHBtvd33d5gvOrXYgp1ztfL0ZnAXAE3RVn3cgATrAG17blwyAsa5 DxiS0Hg+T/8B2KMMNK8= ) graflex.org. 3600 IN SOA ( ns3.graflex.org. klotz.graflex.org. 2024051302 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.he.net for graflex.org/SOA
	Received 257 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 257 octets ;; HEADER SECTION ;; id = 3399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN SOA ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( SOA 8 2 3600 20240612185655 20240513175655 58434 graflex.org. K/KVJUR5GLaewFIhsXxt6Q2VjaH0YvNnIzTbd+Xp8swyGqwy2fNU7dUyqclYr4rLMDQNpm2Q9Khp z/2+VvbW8XHxBbUgqfJtD488NHBtvd33d5gvOrXYgp1ztfL0ZnAXAE3RVn3cgATrAG17blwyAsa5 DxiS0Hg+T/8B2KMMNK8= ) graflex.org. 3600 IN SOA ( ns3.graflex.org. klotz.graflex.org. 2024051302 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.he.net for graflex.org/A
	Received 227 bytes from 216.218.131.2
	;; Response received from [216.218.131.2] 227 octets ;; HEADER SECTION ;; id = 38580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) graflex.org. 3600 IN A 173.164.210.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graflex.org A RR has value 173.164.210.105
	Found 1 RRSIGs over A RRset
	`graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= )`
	RRSIG=58434 and DNSKEY=58434 verifies the A RRset

graflex.org

	Query to ns3.he.net for graflex.org/A
	Received 227 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 227 octets ;; HEADER SECTION ;; id = 27823 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) graflex.org. 3600 IN A 173.164.210.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.he.net is authoritative for graflex.org
	Found RRSIG signed by graflex.org zone
	Query to ns3.he.net for graflex.org/A
	Received 227 bytes from 216.218.132.2
	;; Response received from [216.218.132.2] 227 octets ;; HEADER SECTION ;; id = 24628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN A 173.164.210.105 graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graflex.org A RR has value 173.164.210.105
	Found 1 RRSIGs over A RRset
	`graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= )`
	RRSIG=58434 and DNSKEY=58434 verifies the A RRset

graflex.org

	Query to ns5.he.net for graflex.org/A
	Received 227 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 227 octets ;; HEADER SECTION ;; id = 6448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN A 173.164.210.105 graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.he.net is authoritative for graflex.org
	Found RRSIG signed by graflex.org zone
	Query to ns5.he.net for graflex.org/A
	Received 227 bytes from 216.66.80.18
	;; Response received from [216.66.80.18] 227 octets ;; HEADER SECTION ;; id = 64345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN A 173.164.210.105 graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graflex.org A RR has value 173.164.210.105
	Found 1 RRSIGs over A RRset
	`graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= )`
	RRSIG=58434 and DNSKEY=58434 verifies the A RRset

graflex.org

	Query to ns4.he.net for graflex.org/A
	Received 227 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 227 octets ;; HEADER SECTION ;; id = 50879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) graflex.org. 3600 IN A 173.164.210.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.he.net is authoritative for graflex.org
	Found RRSIG signed by graflex.org zone
	Query to ns4.he.net for graflex.org/A
	Received 227 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 227 octets ;; HEADER SECTION ;; id = 64150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) graflex.org. 3600 IN A 173.164.210.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graflex.org A RR has value 173.164.210.105
	Found 1 RRSIGs over A RRset
	`graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= )`
	RRSIG=58434 and DNSKEY=58434 verifies the A RRset

graflex.org

	Query to ns3.graflex.org for graflex.org/A
	Received 886 bytes from 173.164.210.105
	;; Response received from [173.164.210.105] 886 octets ;; HEADER SECTION ;; id = 51343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN A 173.164.210.105 graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) ;; AUTHORITY SECTION (7 records) graflex.org. 3600 IN NS ns2.he.net. graflex.org. 3600 IN NS ns2.graflex.org. graflex.org. 3600 IN NS ns3.he.net. graflex.org. 3600 IN NS ns4.he.net. graflex.org. 3600 IN NS ns3.graflex.org. graflex.org. 3600 IN NS ns5.he.net. graflex.org. 3600 IN RRSIG ( NS 8 2 3600 20240612185655 20240513175655 58434 graflex.org. reg2y2T1tWNjZ+fC5MBFTyaqKbU/5s8vVPsv7cbZroi6+RCeVqiyckHCJ/xmIpYCi7nAcJX7xfiL Hlp1EcIz3MGkhwDzFsVCAwF5ukIUX2tmRH8vshFuEjFdiF8s3O0u668ZoImKtUu1wDVl5w8wpgVC iAMf858H9K9uEYNtOn0= ) ;; ADDITIONAL SECTION (5 records) ns2.graflex.org. 3600 IN A 173.164.210.106 ns3.graflex.org. 3600 IN A 173.164.210.105 ns2.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. FaFAnWmm0GrRMH2tG0UF1QcpIK3p9lwyXXGVB1hmERGodgwZ8grQPGzptRt6eG499PAf2eovu4mL P5y5HzczVTpXtL1Hoq4yEhx7JJe51Zoe1WZCasE89fqV4RybiSODA1HWB3sdCRi3WvceoygylPQG 61rJgJwrXIPEaxSlkpo= ) ns3.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. rEEMMsnItwGlCj7jCjLFjSPIaESZ9ya2Fwl07lxqupt/JERWTaH3F0ueVZ41gTgUk2f+15UMedYS 6OSLTQw6kUzA7Vwc1GhHHFLL+tMWZok9jv97iu/7h45T3vLJDmGZXF5WOTPVlvhQlJv9XI51GH3F F6dccZsFkzar7VcrUWk= ) ;; { "EDNS-VERSION": 0 }
	ns3.graflex.org is authoritative for graflex.org
	Found RRSIG signed by graflex.org zone
	Query to ns3.graflex.org for graflex.org/A
	Received 886 bytes from 173.164.210.105
	;; Response received from [173.164.210.105] 886 octets ;; HEADER SECTION ;; id = 58894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; graflex.org. IN A ;; ANSWER SECTION (2 records) graflex.org. 3600 IN A 173.164.210.105 graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= ) ;; AUTHORITY SECTION (7 records) graflex.org. 3600 IN NS ns5.he.net. graflex.org. 3600 IN NS ns3.graflex.org. graflex.org. 3600 IN NS ns2.he.net. graflex.org. 3600 IN NS ns2.graflex.org. graflex.org. 3600 IN NS ns4.he.net. graflex.org. 3600 IN NS ns3.he.net. graflex.org. 3600 IN RRSIG ( NS 8 2 3600 20240612185655 20240513175655 58434 graflex.org. reg2y2T1tWNjZ+fC5MBFTyaqKbU/5s8vVPsv7cbZroi6+RCeVqiyckHCJ/xmIpYCi7nAcJX7xfiL Hlp1EcIz3MGkhwDzFsVCAwF5ukIUX2tmRH8vshFuEjFdiF8s3O0u668ZoImKtUu1wDVl5w8wpgVC iAMf858H9K9uEYNtOn0= ) ;; ADDITIONAL SECTION (5 records) ns2.graflex.org. 3600 IN A 173.164.210.106 ns3.graflex.org. 3600 IN A 173.164.210.105 ns2.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. FaFAnWmm0GrRMH2tG0UF1QcpIK3p9lwyXXGVB1hmERGodgwZ8grQPGzptRt6eG499PAf2eovu4mL P5y5HzczVTpXtL1Hoq4yEhx7JJe51Zoe1WZCasE89fqV4RybiSODA1HWB3sdCRi3WvceoygylPQG 61rJgJwrXIPEaxSlkpo= ) ns3.graflex.org. 3600 IN RRSIG ( A 8 3 3600 20240612185655 20240513175655 58434 graflex.org. rEEMMsnItwGlCj7jCjLFjSPIaESZ9ya2Fwl07lxqupt/JERWTaH3F0ueVZ41gTgUk2f+15UMedYS 6OSLTQw6kUzA7Vwc1GhHHFLL+tMWZok9jv97iu/7h45T3vLJDmGZXF5WOTPVlvhQlJv9XI51GH3F F6dccZsFkzar7VcrUWk= ) ;; { "EDNS-VERSION": 0 }
	graflex.org A RR has value 173.164.210.105
	Found 1 RRSIGs over A RRset
	`graflex.org. 3600 IN RRSIG ( A 8 2 3600 20240612185655 20240513175655 58434 graflex.org. iyVpvV8fdF4UZbp5lULNzTQK7CW9EqQHu1Yw+z/eY4HxV2JISIRUpckPOn8bIW22Ye6fwpHTh49A sI0BYSltHexFsSlXIw9YVhK7eWLSaWIzZZLMhigPGdImr+xwm8CGGK2JAq+38AFLaqX9+6tcyDIN HmtYABwuVeIpCUTCkEw= )`
	RRSIG=58434 and DNSKEY=58434 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test graflex.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: