DNSSEC Debugger - home.daniil.it

Domain Name:

Time: 2024-05-19 02:54:40 UTC

Analyzing DNSSEC problems for home.daniil.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 59596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for home.daniil.it/A
	Received 769 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 769 octets ;; HEADER SECTION ;; id = 18283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; home.daniil.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 172800 IN NS a.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS d.dns.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Jp67wfKKxhhfki1nwQs31ELmJmWC6BATmKLKkSsmx8uMbtbKadXB4+EzuT8m2oRUqemDMTMTmds8 /an3WZIUqtL13OY2aALPwn6GCzTQFDge4u2nFfvk/4LWoOmSC98Mfa6VNi1/T4kUJYsZ8vF4b8ac P6/mfORcJGMhiP/Bxq08BEDBlKcLS8jg8qLLWlAhcLQod3dvAoXpSwn9dPgl+dhGFvkoGY2hzKc/ JXAI5JfgzZQywvfWr7qHRDfogQ1rrrGboReHmkR1P2f4NM5u15v3RM81TK+F3910LNpea5CCQPWF y/f32230bhs0ccVtRI1DlslB6zHVf+skpYLG8w== ) ;; ADDITIONAL SECTION (13 records) nameserver.cnr.it. 172800 IN A 194.119.192.34 dns.nic.it. 172800 IN A 192.12.192.5 r.dns.it. 172800 IN A 193.206.141.46 m.dns.it. 172800 IN A 217.29.76.4 d.dns.it. 172800 IN A 45.142.220.39 a.dns.it. 172800 IN A 194.0.16.215 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for it/DNSKEY
	Received 749 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 749 octets ;; HEADER SECTION ;; id = 8720 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Jp67wfKKxhhfki1nwQs31ELmJmWC6BATmKLKkSsmx8uMbtbKadXB4+EzuT8m2oRUqemDMTMTmds8 /an3WZIUqtL13OY2aALPwn6GCzTQFDge4u2nFfvk/4LWoOmSC98Mfa6VNi1/T4kUJYsZ8vF4b8ac P6/mfORcJGMhiP/Bxq08BEDBlKcLS8jg8qLLWlAhcLQod3dvAoXpSwn9dPgl+dhGFvkoGY2hzKc/ JXAI5JfgzZQywvfWr7qHRDfogQ1rrrGboReHmkR1P2f4NM5u15v3RM81TK+F3910LNpea5CCQPWF y/f32230bhs0ccVtRI1DlslB6zHVf+skpYLG8w== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 d.dns.it. 172800 IN A 45.142.220.39 m.dns.it. 172800 IN A 217.29.76.4 r.dns.it. 172800 IN A 193.206.141.46 dns.nic.it. 172800 IN A 192.12.192.5 nameserver.cnr.it. 172800 IN A 194.119.192.34 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; { "EDNS-VERSION": 0 }
	Found child zone it

	Checking DS between . and it
	Query to k.root-servers.net for it/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 60222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Jp67wfKKxhhfki1nwQs31ELmJmWC6BATmKLKkSsmx8uMbtbKadXB4+EzuT8m2oRUqemDMTMTmds8 /an3WZIUqtL13OY2aALPwn6GCzTQFDge4u2nFfvk/4LWoOmSC98Mfa6VNi1/T4kUJYsZ8vF4b8ac P6/mfORcJGMhiP/Bxq08BEDBlKcLS8jg8qLLWlAhcLQod3dvAoXpSwn9dPgl+dhGFvkoGY2hzKc/ JXAI5JfgzZQywvfWr7qHRDfogQ1rrrGboReHmkR1P2f4NM5u15v3RM81TK+F3910LNpea5CCQPWF y/f32230bhs0ccVtRI1DlslB6zHVf+skpYLG8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Jp67wfKKxhhfki1nwQs31ELmJmWC6BATmKLKkSsmx8uMbtbKadXB4+EzuT8m2oRUqemDMTMTmds8 /an3WZIUqtL13OY2aALPwn6GCzTQFDge4u2nFfvk/4LWoOmSC98Mfa6VNi1/T4kUJYsZ8vF4b8ac P6/mfORcJGMhiP/Bxq08BEDBlKcLS8jg8qLLWlAhcLQod3dvAoXpSwn9dPgl+dhGFvkoGY2hzKc/ JXAI5JfgzZQywvfWr7qHRDfogQ1rrrGboReHmkR1P2f4NM5u15v3RM81TK+F3910LNpea5CCQPWF y/f32230bhs0ccVtRI1DlslB6zHVf+skpYLG8w== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to r.dns.it for it/DNSKEY
	Received 1163 bytes from 193.206.141.46
	;; Response received from [193.206.141.46] 1163 octets ;; HEADER SECTION ;; id = 13034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (4 records) it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901 it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395 it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240618010459 20240519010459 18395 it. aG94WNJs6wbbwmzsrpg7OUFRg0TMPQ+lv7GZr/82FrB3tdFhck3DB4L8fMUauPnclrAvOGMZeIQB ui436xdB6uEZQnSiKtvjx4r86xIOIA9GPtSIe7X3xc6kMIaGa1gYq8a94pVFoYXkEy8vbv+gOqqJ ewqmZInPPXEhcXQJTSFqCPcbnlqo6t3hwdgQ4S+9pHbsfdx3PF52eSCAmsoJxCDZtu9Wokje59fr hu9lTsYccbe7g9hcEoMZbeo1eahngYwTUewNkC3T9nHpzccRzl9ID45Mf6hb6+Q0pCeqNG7qgcKJ s14edR9Pt2NArW/WYydUoJC2GygnxDtAuFAWSg== ) it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240618010459 20240519010459 41901 it. W2UD+ONQdGG0TtTV4eUESYy2oibd7BTAPc9wP3RpPpEl8y7P/1fQSPkKF2F5+GZOD5e9zjmvycGH TgHyxj5cDmtWNaD/ilXUY7jD51iVI/B6Lias12G3Kcc+YlGnlaiVT91vDUqE7V4xR3ABDyHPjK63 NWE5B3HlBfkUaFLYgJSpeQqdZdhuI9UONk3vc5rpz5zQueWQEaInt+2EMDzmonID5lNHboPzZ8fQ 3vUqet/e4H26kTVCfpADTIVY/CB2LgyS8aksPI2TMqPqWaXVNhX4wk8KR7EdKy5ITvtPeu4xVffR MJqFNz4bLx4fKiMn3SLV1TUu/KcsdHOfOFZ7+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for it
	`it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901`
	`it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240618010459 20240519010459 18395 it. aG94WNJs6wbbwmzsrpg7OUFRg0TMPQ+lv7GZr/82FrB3tdFhck3DB4L8fMUauPnclrAvOGMZeIQB ui436xdB6uEZQnSiKtvjx4r86xIOIA9GPtSIe7X3xc6kMIaGa1gYq8a94pVFoYXkEy8vbv+gOqqJ ewqmZInPPXEhcXQJTSFqCPcbnlqo6t3hwdgQ4S+9pHbsfdx3PF52eSCAmsoJxCDZtu9Wokje59fr hu9lTsYccbe7g9hcEoMZbeo1eahngYwTUewNkC3T9nHpzccRzl9ID45Mf6hb6+Q0pCeqNG7qgcKJ s14edR9Pt2NArW/WYydUoJC2GygnxDtAuFAWSg== )`
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240618010459 20240519010459 41901 it. W2UD+ONQdGG0TtTV4eUESYy2oibd7BTAPc9wP3RpPpEl8y7P/1fQSPkKF2F5+GZOD5e9zjmvycGH TgHyxj5cDmtWNaD/ilXUY7jD51iVI/B6Lias12G3Kcc+YlGnlaiVT91vDUqE7V4xR3ABDyHPjK63 NWE5B3HlBfkUaFLYgJSpeQqdZdhuI9UONk3vc5rpz5zQueWQEaInt+2EMDzmonID5lNHboPzZ8fQ 3vUqet/e4H26kTVCfpADTIVY/CB2LgyS8aksPI2TMqPqWaXVNhX4wk8KR7EdKy5ITvtPeu4xVffR MJqFNz4bLx4fKiMn3SLV1TUu/KcsdHOfOFZ7+A== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DNSKEY RRset
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to d.dns.it for home.daniil.it/A
	Received 836 bytes from 45.142.220.39
	;; Response received from [45.142.220.39] 836 octets ;; HEADER SECTION ;; id = 16331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; home.daniil.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) daniil.it. 3600 IN NS jay.ns.cloudflare.com. daniil.it. 3600 IN NS cruz.ns.cloudflare.com. rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) dflnr3ir65g2adr3khdgsohqeguj64a1.it. 3600 IN NSEC3 ( 1 1 0 - dfnfu7u07njl6954ch0jhb9asdkcd8of NS DS RRSIG ) rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. WiAwzrGvh4gViYlo85fAIJ4y4OFqbqY17kYn7Qi6y35CMQHVNUZzs3miynLw9JiS0zBRF4wMSDJU Qy3QJL2MT3RZIhUkpiyq7QIgdVe4KLvNZGnm0fLRhmPKL/Tt1qBxSPShmEPM60XA4l5/iaU/wQqK smZ1L2fgIYmaPUvNeiCMFgyT1XjVLs62yv/7VR4xvPrgGvavPssrsL2klVCmjVIe+21wkTwq4gIz T0npgjKl4q0cUilw1I0q8VwTw7kpgdpJeHUjpcj5q9vGH1p4yBAsj5QrXXA3bhYFfW/w6b+VKNHV kN4LvgsXV6fMGVYtH3tTQoU97N3AhczdwouWFQ== ) dflnr3ir65g2adr3khdgsohqeguj64a1.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. OwBCaQ2e1jQVz7DpaDN7ksYg+80kHAc7c/g0MfqxLR8Ghpg0mq76Lq5m3JPJzHHDSwuhDaExGNdk FznxqhLLTuEOQ+f8UDHVkpQU9qGTQQvZBLXyjnGRuaAaIt06RcY9f6gXCk28k5U62vWsQfzza0L0 CG9OCdMJcVYpuqzmJ9r6OyYvQgaBMZ3QPKBxkMZ07wgT5ZVrWmasTMpjj/9xL1WqqE5wyJOlowa/ ipTiXVvdrvLk4I9UvnWAyUtwD5K3Pqyc/hHB39xxOtINcKha3Y8/eww10noc26/YspNwTCD3dgsQ 1V3L3Wd3NxozlalbQyj3utb1WfX2kvmusNpYlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nameserver.cnr.it for daniil.it/DNSKEY
	Received 831 bytes from 194.119.192.34
	;; Response received from [194.119.192.34] 831 octets ;; HEADER SECTION ;; id = 63251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) daniil.it. 3600 IN NS jay.ns.cloudflare.com. daniil.it. 3600 IN NS cruz.ns.cloudflare.com. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. WiAwzrGvh4gViYlo85fAIJ4y4OFqbqY17kYn7Qi6y35CMQHVNUZzs3miynLw9JiS0zBRF4wMSDJU Qy3QJL2MT3RZIhUkpiyq7QIgdVe4KLvNZGnm0fLRhmPKL/Tt1qBxSPShmEPM60XA4l5/iaU/wQqK smZ1L2fgIYmaPUvNeiCMFgyT1XjVLs62yv/7VR4xvPrgGvavPssrsL2klVCmjVIe+21wkTwq4gIz T0npgjKl4q0cUilw1I0q8VwTw7kpgdpJeHUjpcj5q9vGH1p4yBAsj5QrXXA3bhYFfW/w6b+VKNHV kN4LvgsXV6fMGVYtH3tTQoU97N3AhczdwouWFQ== ) DFLNR3IR65G2ADR3KHDGSOHQEGUJ64A1.it. 3600 IN NSEC3 ( 1 1 0 - dfnfu7u07njl6954ch0jhb9asdkcd8of NS DS RRSIG ) DFLNR3IR65G2ADR3KHDGSOHQEGUJ64A1.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. OwBCaQ2e1jQVz7DpaDN7ksYg+80kHAc7c/g0MfqxLR8Ghpg0mq76Lq5m3JPJzHHDSwuhDaExGNdk FznxqhLLTuEOQ+f8UDHVkpQU9qGTQQvZBLXyjnGRuaAaIt06RcY9f6gXCk28k5U62vWsQfzza0L0 CG9OCdMJcVYpuqzmJ9r6OyYvQgaBMZ3QPKBxkMZ07wgT5ZVrWmasTMpjj/9xL1WqqE5wyJOlowa/ ipTiXVvdrvLk4I9UvnWAyUtwD5K3Pqyc/hHB39xxOtINcKha3Y8/eww10noc26/YspNwTCD3dgsQ 1V3L3Wd3NxozlalbQyj3utb1WfX2kvmusNpYlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone daniil.it

daniil.it

	Checking DS between it and daniil.it
	Query to dns.nic.it for daniil.it/DS
	Received 1124 bytes from 192.12.192.5
	;; Response received from [192.12.192.5] 1124 octets ;; HEADER SECTION ;; id = 42824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; daniil.it. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. WiAwzrGvh4gViYlo85fAIJ4y4OFqbqY17kYn7Qi6y35CMQHVNUZzs3miynLw9JiS0zBRF4wMSDJU Qy3QJL2MT3RZIhUkpiyq7QIgdVe4KLvNZGnm0fLRhmPKL/Tt1qBxSPShmEPM60XA4l5/iaU/wQqK smZ1L2fgIYmaPUvNeiCMFgyT1XjVLs62yv/7VR4xvPrgGvavPssrsL2klVCmjVIe+21wkTwq4gIz T0npgjKl4q0cUilw1I0q8VwTw7kpgdpJeHUjpcj5q9vGH1p4yBAsj5QrXXA3bhYFfW/w6b+VKNHV kN4LvgsXV6fMGVYtH3tTQoU97N3AhczdwouWFQ== ) it. 3600 IN SOA ( dns.nic.it. hostmaster.nic.it. 2024051904 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) it. 3600 IN RRSIG ( SOA 10 1 86400 20240618010459 20240519010459 18395 it. nJUX+IMmzwMsypnkPSNtrC0rKZL5N9zTf29Ww73Ve8aJqcXC+7nqBH6RtwIP7Q06Or5B8ju8qL8d 2TX3lcQByfc6ruqncUbd4KJjnrZU3OIuzzAbyDSescco0DWp0377ga07+DFIlUopntVEChrT9Ngn YTdvb/Rp+tKMJx5cEQIjUTDJpTHl82CJvUkQkHiK19Sy0VIz1elWYVGwA7lTj+CL6VEjK+rY6Rko UJ1sV8Ntn5nFAIauPBd5XfvtJXPDVqgIQnPo/zggblLA2/a2tzWt3H2BHv18JTJrdIKLFLt96nyx nDLOVOfn7GFNaA84pv5E+kgQYWL1DJcnHuhh1Q== ) DFLNR3IR65G2ADR3KHDGSOHQEGUJ64A1.it. 3600 IN NSEC3 ( 1 1 0 - dfnfu7u07njl6954ch0jhb9asdkcd8of NS DS RRSIG ) DFLNR3IR65G2ADR3KHDGSOHQEGUJ64A1.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240618010459 20240519010459 18395 it. OwBCaQ2e1jQVz7DpaDN7ksYg+80kHAc7c/g0MfqxLR8Ghpg0mq76Lq5m3JPJzHHDSwuhDaExGNdk FznxqhLLTuEOQ+f8UDHVkpQU9qGTQQvZBLXyjnGRuaAaIt06RcY9f6gXCk28k5U62vWsQfzza0L0 CG9OCdMJcVYpuqzmJ9r6OyYvQgaBMZ3QPKBxkMZ07wgT5ZVrWmasTMpjj/9xL1WqqE5wyJOlowa/ ipTiXVvdrvLk4I9UvnWAyUtwD5K3Pqyc/hHB39xxOtINcKha3Y8/eww10noc26/YspNwTCD3dgsQ 1V3L3Wd3NxozlalbQyj3utb1WfX2kvmusNpYlQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for daniil.it in the it zone
	Query to cruz.ns.cloudflare.com for daniil.it/DNSKEY
	Received 303 bytes from 172.64.32.88
	;; Response received from [172.64.32.88] 303 octets ;; HEADER SECTION ;; id = 51347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; daniil.it. IN DNSKEY ;; ANSWER SECTION (3 records) daniil.it. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 daniil.it. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 daniil.it. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240708041807 20240508041807 2371 daniil.it. lMEPp16baV534BpcjtZh1tftEdcbjP1uBtuRxfYCMHnHwc5C5Y2lheZMzc+4Vl2Z/gCEKIv2cF8A cobBwVwNsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for daniil.it
	`daniil.it. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`daniil.it. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`daniil.it. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240708041807 20240508041807 2371 daniil.it. lMEPp16baV534BpcjtZh1tftEdcbjP1uBtuRxfYCMHnHwc5C5Y2lheZMzc+4Vl2Z/gCEKIv2cF8A cobBwVwNsA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to cruz.ns.cloudflare.com for home.daniil.it/A
	Received 410 bytes from 173.245.58.88
	;; Response received from [173.245.58.88] 410 octets ;; HEADER SECTION ;; id = 39585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; home.daniil.it. IN A ;; ANSWER SECTION (6 records) home.daniil.it. 300 IN CNAME dual.home.daniil.it. dual.home.daniil.it. 300 IN CNAME pi.daniil.it. pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. 5FmLnW9PVVZXnij/ako2usXZrHNSRsTOMxY1GYflV+ozAqnjuVvkJQNVJ76dQSwh5RdhKXsCxO+L LWQohcpNtg== ) home.daniil.it. 300 IN RRSIG ( CNAME 13 3 300 20240520035440 20240518015440 34505 daniil.it. TVWMwFaWXHMphYUE+L2MVT8Nb2/Rff3U51YHFkhNt1J1Mq8H58oOrtVqzphvi4viVocBgxhw0f2w Amg4nfiqdQ== ) dual.home.daniil.it. 300 IN RRSIG ( CNAME 13 4 300 20240520035440 20240518015440 34505 daniil.it. 2CZ4wYxkcrnmICLj7UDyoDO6bP7IJu1xBxhxs9Ig8OukWc/GVcb82gwsj3Tg3W6ZRrzKpogdTLr1 St4h0jrEsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cruz.ns.cloudflare.com is authoritative for home.daniil.it
	Query to cruz.ns.cloudflare.com for home.daniil.it/DNSKEY
	Received 359 bytes from 108.162.192.88
	;; Response received from [108.162.192.88] 359 octets ;; HEADER SECTION ;; id = 52915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; home.daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) home.daniil.it. 1800 IN NSEC ( \000.home.daniil.it. A HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC TLSA SMIMEA HIP OPENPGPKEY SVCB HTTPS URI CAA ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. 4ueZkQ9t9c3fcleUmrImuqVya1RkEy8kTxrnjOjwGFAUEueSL65/watr+9+phbQ48SPYGe8XTWze DBrWox+7SA== ) home.daniil.it. 1800 IN RRSIG ( NSEC 13 3 1800 20240520035440 20240518015440 34505 daniil.it. 3EqcXNU+evhtlvzwMcHLpT1qWmbufbBTEB/Hs8N0sz87b6N9UJvUrHkZB7rv5/XIPzuGtg67h/zi Pv/jtwXArQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by daniil.it zone
	home.daniil.it is a CNAME to dual.home.daniil.it
	Found 1 RRSIGs over CNAME RRset
	`home.daniil.it. 300 IN RRSIG ( CNAME 13 3 300 20240520035440 20240518015440 34505 daniil.it. TVWMwFaWXHMphYUE+L2MVT8Nb2/Rff3U51YHFkhNt1J1Mq8H58oOrtVqzphvi4viVocBgxhw0f2w Amg4nfiqdQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the CNAME RRset
	Query to cruz.ns.cloudflare.com for dual.home.daniil.it/A
	Received 291 bytes from 172.64.32.88
	;; Response received from [172.64.32.88] 291 octets ;; HEADER SECTION ;; id = 39036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dual.home.daniil.it. IN A ;; ANSWER SECTION (4 records) dual.home.daniil.it. 300 IN CNAME pi.daniil.it. pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. MdN5zYhxERtXlHQ7rSzGOpujI8ftJGnnMyn6TZYzRSkYNsNzsvpGJ9UUdPohslte8VkAQxB9vlpS faSOgK0VSg== ) dual.home.daniil.it. 300 IN RRSIG ( CNAME 13 4 300 20240520035440 20240518015440 34505 daniil.it. HWF6A34u6jRtJNWAiyHx4iPEwNrtTWEyGLQMYlvE49pKj7fAG3lpIwj0tth6TyRqUwarOo35hihr 9bEvNQ1f5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cruz.ns.cloudflare.com is authoritative for dual.home.daniil.it
	Query to jay.ns.cloudflare.com for home.daniil.it/DNSKEY
	Received 359 bytes from 172.64.33.123
	;; Response received from [172.64.33.123] 359 octets ;; HEADER SECTION ;; id = 12333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; home.daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) home.daniil.it. 1800 IN NSEC ( \000.home.daniil.it. A HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC TLSA SMIMEA HIP OPENPGPKEY SVCB HTTPS URI CAA ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. oHC9bILUNqAoPnrtTys8oetAXyA+qojrQqnyjjmt/IQ/nFqb7QMI15rzSyUzIrSpDNrNEEk0R8dH ys/DN/P7gQ== ) home.daniil.it. 1800 IN RRSIG ( NSEC 13 3 1800 20240520035440 20240518015440 34505 daniil.it. 2m5gyKGd1w3UiHrcKSEojCKGrW+n8mD8R0jY6dEbAVmMC6B80llmnj8Ecg/RRs9FHCo2pPami0SR nQ+hlyferQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to jay.ns.cloudflare.com for dual.home.daniil.it/DNSKEY
	Received 369 bytes from 108.162.193.123
	;; Response received from [108.162.193.123] 369 octets ;; HEADER SECTION ;; id = 35830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dual.home.daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) dual.home.daniil.it. 1800 IN NSEC ( \000.dual.home.daniil.it. A HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC TLSA SMIMEA HIP OPENPGPKEY SVCB HTTPS URI CAA ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. sPiPJnTGIbf0dttrW4+dqH/UeMBUfDyMqWPssQXHhYpTevIhPWqEDriuLh+5w1Rdi3SbUY3NZDVC Bi0bgmtXiQ== ) dual.home.daniil.it. 1800 IN RRSIG ( NSEC 13 4 1800 20240520035440 20240518015440 34505 daniil.it. Hd59IcRKsqzkRGxoCjyYRKdEFMhhPQ1Mqc5JX9pnhwADlgvTrg8cn87B5IUHpdoe1PWTKQvEMFLf kSh4O6YGDQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by daniil.it zone
	dual.home.daniil.it is a CNAME to pi.daniil.it
	Found 1 RRSIGs over CNAME RRset
	`dual.home.daniil.it. 300 IN RRSIG ( CNAME 13 4 300 20240520035440 20240518015440 34505 daniil.it. HWF6A34u6jRtJNWAiyHx4iPEwNrtTWEyGLQMYlvE49pKj7fAG3lpIwj0tth6TyRqUwarOo35hihr 9bEvNQ1f5w== )`
	RRSIG=34505 and DNSKEY=34505 verifies the CNAME RRset
	Query to cruz.ns.cloudflare.com for pi.daniil.it/A
	Received 162 bytes from 172.64.32.88
	;; Response received from [172.64.32.88] 162 octets ;; HEADER SECTION ;; id = 30280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN A ;; ANSWER SECTION (2 records) pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. ib8qKaw6CYnlNVsneSfOTAD9MppS4QF+PLMu/RDZdWzBWXNTIZAZKz/rDTvJLabl6uIyLjNyXN8k djm3STPJ8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cruz.ns.cloudflare.com is authoritative for pi.daniil.it
	Query to cruz.ns.cloudflare.com for pi.daniil.it/DNSKEY
	Received 355 bytes from 108.162.192.88
	;; Response received from [108.162.192.88] 355 octets ;; HEADER SECTION ;; id = 17550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) pi.daniil.it. 1800 IN NSEC ( \000.pi.daniil.it. A HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC TLSA SMIMEA HIP OPENPGPKEY SVCB HTTPS URI CAA ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. DWE3N1xdJI6PMOrbS5OfggffF9nwt/WaAoDZBDwyfpJTjbH2NgKwTLjDW7K04XR5E4gllHvCwcdb oG8etyJIQw== ) pi.daniil.it. 1800 IN RRSIG ( NSEC 13 3 1800 20240520035440 20240518015440 34505 daniil.it. aT0nBnkTaE8mqWwQQH5tgegvMO99CrZM5VH/V1/a8iunft9rZplyJqFoEkKoSaRI54jHuIA4LPcQ rgGjnh5OAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by daniil.it zone
	Query to jay.ns.cloudflare.com for daniil.it/SOA
	Received 205 bytes from 173.245.59.123
	;; Response received from [173.245.59.123] 205 octets ;; HEADER SECTION ;; id = 24866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; daniil.it. IN SOA ;; ANSWER SECTION (2 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. 3ldFLWJW3GUphzAk0GnWCs/omyUM0KrKolcPxpWoP+ogOXMVqVlloLg50NNmQqjDSJrmTvheaQGb +WZSepvPTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to cruz.ns.cloudflare.com for pi.daniil.it/A
	Received 162 bytes from 108.162.192.88
	;; Response received from [108.162.192.88] 162 octets ;; HEADER SECTION ;; id = 29429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN A ;; ANSWER SECTION (2 records) pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. 1LKw4G0+q/tYZgyBmq1sye4vpxR0O9JO/TATHqgjm2dKePH5SorcIqyr33iQuMby5F7KFG1Ephg0 SRClKEIFfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pi.daniil.it A RR has value 128.116.205.77
	Found 1 RRSIGs over A RRset
	`pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. 1LKw4G0+q/tYZgyBmq1sye4vpxR0O9JO/TATHqgjm2dKePH5SorcIqyr33iQuMby5F7KFG1Ephg0 SRClKEIFfw== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

daniil.it

	Query to jay.ns.cloudflare.com for pi.daniil.it/A
	Received 162 bytes from 173.245.59.123
	;; Response received from [173.245.59.123] 162 octets ;; HEADER SECTION ;; id = 24308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN A ;; ANSWER SECTION (2 records) pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. ZYY6rcXK0KhHJINCLWo2lBJtdqer+e0MyS5d8oACXfU5vbhOOnGhvI/YFu6TBNF71WNN3q+1DJeR k9UvzMP9Kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jay.ns.cloudflare.com is authoritative for pi.daniil.it
	Query to jay.ns.cloudflare.com for pi.daniil.it/DNSKEY
	Received 355 bytes from 172.64.33.123
	;; Response received from [172.64.33.123] 355 octets ;; HEADER SECTION ;; id = 9752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) daniil.it. 1800 IN SOA ( cruz.ns.cloudflare.com. dns.cloudflare.com. 2340713997 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) pi.daniil.it. 1800 IN NSEC ( \000.pi.daniil.it. A HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC TLSA SMIMEA HIP OPENPGPKEY SVCB HTTPS URI CAA ) daniil.it. 1800 IN RRSIG ( SOA 13 2 1800 20240520035440 20240518015440 34505 daniil.it. 7pSnz2NlnTx+EJhdDN0M5s2LasnKdp6T85XAs7VNd27V7lt0uLNFV3wAuPwO1bE8fiEsbg/BffpJ PWJnixmnWw== ) pi.daniil.it. 1800 IN RRSIG ( NSEC 13 3 1800 20240520035440 20240518015440 34505 daniil.it. YfCY4njwGnWyh2h7VWRmqCUyafk/dIzyEljXZUmEq0mq4KMTv/04lldDZOAkOQjMNrWkmruUslVN i7+aD8CqJw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by daniil.it zone
	Query to jay.ns.cloudflare.com for pi.daniil.it/A
	Received 162 bytes from 172.64.33.123
	;; Response received from [172.64.33.123] 162 octets ;; HEADER SECTION ;; id = 43020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pi.daniil.it. IN A ;; ANSWER SECTION (2 records) pi.daniil.it. 300 IN A 128.116.205.77 pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. WvejNwqe2uZjv0Y0/wCJ9qqcV9HLWQXUnWpF67YNbm9eO8+6c1rWjG1hpd08/m3ag0azEQLVi9W1 5DbkZcaGpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pi.daniil.it A RR has value 128.116.205.77
	Found 1 RRSIGs over A RRset
	`pi.daniil.it. 300 IN RRSIG ( A 13 3 300 20240520035440 20240518015440 34505 daniil.it. WvejNwqe2uZjv0Y0/wCJ9qqcV9HLWQXUnWpF67YNbm9eO8+6c1rWjG1hpd08/m3ag0azEQLVi9W1 5DbkZcaGpg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test home.daniil.it at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: