DNSSEC Debugger - madduck.net

Domain Name:

Time: 2024-05-13 11:50:59 UTC

Analyzing DNSSEC problems for madduck.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 43237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for madduck.net/A
	Received 1168 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1168 octets ;; HEADER SECTION ;; id = 26908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XnTKITqIT+Y8GwFbyGC/34Tf7qf4D8zuWeSUVClIWwkV/Xhdn4ShxnRl5VN3QyOPI/d5qQRPKTvt x9KL5dw4czNUjjP9bk6AqC90u5HzoxvWXlgbdWxdlaY0xcZHbwts+axU1oRySGnpX8yy6eCkpGC4 vZDpyYM1Mj61hJUZSwLg/qf2MGOIY1jjJE2E6mLg/bQF3tP8ZlOJH5r9aSn5WN5HTkWR3BKaXp56 RqDZi9x0DTiAFaJIivVY4RT3eWgJSC5ueIEmLS932fwmuQUXHG8IWnpvIWNQtWLPpr2ocVBjdnUU kvNYJzvINOQe+s4u5qCFPxjHjWePAv6GPzs9nw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1163 octets ;; HEADER SECTION ;; id = 58225 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XnTKITqIT+Y8GwFbyGC/34Tf7qf4D8zuWeSUVClIWwkV/Xhdn4ShxnRl5VN3QyOPI/d5qQRPKTvt x9KL5dw4czNUjjP9bk6AqC90u5HzoxvWXlgbdWxdlaY0xcZHbwts+axU1oRySGnpX8yy6eCkpGC4 vZDpyYM1Mj61hJUZSwLg/qf2MGOIY1jjJE2E6mLg/bQF3tP8ZlOJH5r9aSn5WN5HTkWR3BKaXp56 RqDZi9x0DTiAFaJIivVY4RT3eWgJSC5ueIEmLS932fwmuQUXHG8IWnpvIWNQtWLPpr2ocVBjdnUU kvNYJzvINOQe+s4u5qCFPxjHjWePAv6GPzs9nw== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 44162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XnTKITqIT+Y8GwFbyGC/34Tf7qf4D8zuWeSUVClIWwkV/Xhdn4ShxnRl5VN3QyOPI/d5qQRPKTvt x9KL5dw4czNUjjP9bk6AqC90u5HzoxvWXlgbdWxdlaY0xcZHbwts+axU1oRySGnpX8yy6eCkpGC4 vZDpyYM1Mj61hJUZSwLg/qf2MGOIY1jjJE2E6mLg/bQF3tP8ZlOJH5r9aSn5WN5HTkWR3BKaXp56 RqDZi9x0DTiAFaJIivVY4RT3eWgJSC5ueIEmLS932fwmuQUXHG8IWnpvIWNQtWLPpr2ocVBjdnUU kvNYJzvINOQe+s4u5qCFPxjHjWePAv6GPzs9nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XnTKITqIT+Y8GwFbyGC/34Tf7qf4D8zuWeSUVClIWwkV/Xhdn4ShxnRl5VN3QyOPI/d5qQRPKTvt x9KL5dw4czNUjjP9bk6AqC90u5HzoxvWXlgbdWxdlaY0xcZHbwts+axU1oRySGnpX8yy6eCkpGC4 vZDpyYM1Mj61hJUZSwLg/qf2MGOIY1jjJE2E6mLg/bQF3tP8ZlOJH5r9aSn5WN5HTkWR3BKaXp56 RqDZi9x0DTiAFaJIivVY4RT3eWgJSC5ueIEmLS932fwmuQUXHG8IWnpvIWNQtWLPpr2ocVBjdnUU kvNYJzvINOQe+s4u5qCFPxjHjWePAv6GPzs9nw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 291 octets ;; HEADER SECTION ;; id = 47698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522141035 20240507140535 37331 net. sG1F3wvmbKVzg3vyuHzxHbQJdUGnDC5n+RrNJC+eSoIAb/iGjfNvcyF+7iVtJU81W2iRpNEhDgc+ 9Vr6bmQd1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522141035 20240507140535 37331 net. sG1F3wvmbKVzg3vyuHzxHbQJdUGnDC5n+RrNJC+eSoIAb/iGjfNvcyF+7iVtJU81W2iRpNEhDgc+ 9Vr6bmQd1g== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to b.gtld-servers.net for madduck.net/A
	Received 375 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 375 octets ;; HEADER SECTION ;; id = 52156 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) madduck.net. 172800 IN NS a.ns.madduck.net. madduck.net. 172800 IN NS b.ns.madduck.net. madduck.net. 172800 IN NS ns4.he.net. madduck.net. 86400 IN DS ( 4559 8 2 2471202dfa28ace9f9b150ab0c2df15ae0128c8b8d23cbf639bed9101691d1aa ) madduck.net. 86400 IN RRSIG ( DS 13 2 86400 20240520065031 20240513054031 51809 net. 3PCYGhbbLV+GUFvLFNm41DDkAQ7FhMpb/HIjAkmb8EnsQREzPdOURg2C/qKUBgNL/mNaIBJaDUpl V6EQ2IypPQ== ) ;; ADDITIONAL SECTION (7 records) a.ns.madduck.net. 172800 IN A 188.174.253.164 a.ns.madduck.net. 172800 IN AAAA 2001:a60:902f::53:0:0 b.ns.madduck.net. 172800 IN AAAA 2001:41c8:51:7a0:0:53:: b.ns.madduck.net. 172800 IN A 213.138.112.165 ns4.he.net. 172800 IN AAAA 2001:470:400::2 ns4.he.net. 172800 IN A 216.66.1.2 ;; { "EDNS-VERSION": 0 }
	Query to k.gtld-servers.net for madduck.net/DNSKEY
	Received 375 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 375 octets ;; HEADER SECTION ;; id = 51791 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) madduck.net. 172800 IN NS a.ns.madduck.net. madduck.net. 172800 IN NS b.ns.madduck.net. madduck.net. 172800 IN NS ns4.he.net. madduck.net. 86400 IN DS ( 4559 8 2 2471202dfa28ace9f9b150ab0c2df15ae0128c8b8d23cbf639bed9101691d1aa ) madduck.net. 86400 IN RRSIG ( DS 13 2 86400 20240520065031 20240513054031 51809 net. 3PCYGhbbLV+GUFvLFNm41DDkAQ7FhMpb/HIjAkmb8EnsQREzPdOURg2C/qKUBgNL/mNaIBJaDUpl V6EQ2IypPQ== ) ;; ADDITIONAL SECTION (7 records) a.ns.madduck.net. 172800 IN A 188.174.253.164 a.ns.madduck.net. 172800 IN AAAA 2001:a60:902f::53:0:0 b.ns.madduck.net. 172800 IN AAAA 2001:41c8:51:7a0:0:53:: b.ns.madduck.net. 172800 IN A 213.138.112.165 ns4.he.net. 172800 IN AAAA 2001:470:400::2 ns4.he.net. 172800 IN A 216.66.1.2 ;; { "EDNS-VERSION": 0 }
	Found child zone madduck.net

madduck.net

	Checking DS between net and madduck.net
	Query to d.gtld-servers.net for madduck.net/DS
	Received 1079 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1079 octets ;; HEADER SECTION ;; id = 61248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN DS ;; ANSWER SECTION (2 records) madduck.net. 86400 IN DS ( 4559 8 2 2471202dfa28ace9f9b150ab0c2df15ae0128c8b8d23cbf639bed9101691d1aa ) madduck.net. 86400 IN RRSIG ( DS 13 2 86400 20240520065031 20240513054031 51809 net. 3PCYGhbbLV+GUFvLFNm41DDkAQ7FhMpb/HIjAkmb8EnsQREzPdOURg2C/qKUBgNL/mNaIBJaDUpl V6EQ2IypPQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20240518065216 20240511054216 51809 net. Tl1rnb6+/7/cIjO0hu3W+7FypXw5FCAaoZRn/7M9quDRwvOjM0JClTtR4X6F0ej5gePmToN9UxJ3 HWQl4pbF/g== ) ;; ADDITIONAL SECTION (27 records) k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for madduck.net in the net zone
	DS=4559/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`madduck.net. 86400 IN RRSIG ( DS 13 2 86400 20240520065031 20240513054031 51809 net. 3PCYGhbbLV+GUFvLFNm41DDkAQ7FhMpb/HIjAkmb8EnsQREzPdOURg2C/qKUBgNL/mNaIBJaDUpl V6EQ2IypPQ== )`
	RRSIG=51809 and DNSKEY=51809 verifies the DS RRset
	DS=4559/SHA-256 is now in the chain-of-trust
	`madduck.net. 86400 IN DS ( 4559 8 2 2471202dfa28ace9f9b150ab0c2df15ae0128c8b8d23cbf639bed9101691d1aa )`
	Query to b.ns.madduck.net for madduck.net/DNSKEY
	Received 615 bytes from 213.138.112.165
	;; Response received from [213.138.112.165] 615 octets ;; HEADER SECTION ;; id = 23320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN DNSKEY ;; ANSWER SECTION (2 records) madduck.net. 10800 IN DNSKEY ( 257 3 8 AwEAAauf9Ry+XfLSbhc/yGRVI7qvZicvcio63xDwzYp5DVJHNtCG6x6YI6DavrU+KCZhuErXIyGy iZvjjGaBN/9GBficuDWoAeMvoIGrPEsSP+cbK5TxD8M38Q0LWwxlYhGMy0qlALjVn06KT5J75ljO YNt1cMXBKeOaD3WubTNQlgfHwzIIgZZS2pu3H0as3QgT+RRTgJkN0APvFumeEJGWIom9BLHWSUTD MlUXsaWJL+nVsm0wJkK3tHCjSdU53zs5Mkaf87E0mJHovPsZ8ngW7VhvNjNkCalkLx+fDzMeCwP2 1B0iTmDdiNZ/7vBN2qXq0kJcPLml9PgcywBmMdlXM6c= ) ; Key ID = 4559 madduck.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240606000000 20240509020306 4559 madduck.net. Z8yYXHeT+SN2kFOY+EnubMViU1Ce7FNpNoYUei+YQv6NrbXJ+iXDXy8/BWt9fEbGgpBdwU/4CEV+ pwPH3N3AGaexfcRJQSjuJU7IPIgAZbZsU2oMNMnMiQO4g8kxuIdKp06yHuEcrmhoNVf9ugsJhTAP 8Z5BAD9B/e7oiZicHBWBHf+KGDBhAVFTyG8QRdV6pVQKpoe9PgZRL+9qi3flEpYcoOF8nU1vT0zp OwCVgJXrXqjx0PCs5d44wY/TDiwBVpFCKEe/x+404w8fsJcy+gKh8yITs7OmH6RDEmC8fvxDcxPx dclbtJAUHG34cLvg7njFhdrOWPonQE6XC9Gkow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for madduck.net
	`madduck.net. 10800 IN DNSKEY ( 257 3 8 AwEAAauf9Ry+XfLSbhc/yGRVI7qvZicvcio63xDwzYp5DVJHNtCG6x6YI6DavrU+KCZhuErXIyGy iZvjjGaBN/9GBficuDWoAeMvoIGrPEsSP+cbK5TxD8M38Q0LWwxlYhGMy0qlALjVn06KT5J75ljO YNt1cMXBKeOaD3WubTNQlgfHwzIIgZZS2pu3H0as3QgT+RRTgJkN0APvFumeEJGWIom9BLHWSUTD MlUXsaWJL+nVsm0wJkK3tHCjSdU53zs5Mkaf87E0mJHovPsZ8ngW7VhvNjNkCalkLx+fDzMeCwP2 1B0iTmDdiNZ/7vBN2qXq0kJcPLml9PgcywBmMdlXM6c= ) ; Key ID = 4559`
	DNSKEY=4559/SEP is now in the chain-of-trust
	DS=4559/SHA-256 verifies DNSKEY=4559/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`madduck.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240606000000 20240509020306 4559 madduck.net. Z8yYXHeT+SN2kFOY+EnubMViU1Ce7FNpNoYUei+YQv6NrbXJ+iXDXy8/BWt9fEbGgpBdwU/4CEV+ pwPH3N3AGaexfcRJQSjuJU7IPIgAZbZsU2oMNMnMiQO4g8kxuIdKp06yHuEcrmhoNVf9ugsJhTAP 8Z5BAD9B/e7oiZicHBWBHf+KGDBhAVFTyG8QRdV6pVQKpoe9PgZRL+9qi3flEpYcoOF8nU1vT0zp OwCVgJXrXqjx0PCs5d44wY/TDiwBVpFCKEe/x+404w8fsJcy+gKh8yITs7OmH6RDEmC8fvxDcxPx dclbtJAUHG34cLvg7njFhdrOWPonQE6XC9Gkow== )`
	RRSIG=4559 and DNSKEY=4559/SEP verifies the DNSKEY RRset
	Query to ns4.he.net for madduck.net/A
	Received 355 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 355 octets ;; HEADER SECTION ;; id = 29683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== ) madduck.net. 10800 IN A 188.174.253.167 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.he.net is authoritative for madduck.net
	Found RRSIG signed by madduck.net zone
	Query to b.ns.madduck.net for madduck.net/SOA
	Received 1128 bytes from 213.138.112.165
	;; Response received from [213.138.112.165] 1128 octets ;; HEADER SECTION ;; id = 13086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN SOA ;; ANSWER SECTION (2 records) madduck.net. 10800 IN SOA ( a.ns.madduck.net. hostmaster.madduck.net. 1702554902 ;serial 16384 ;refresh 2048 ;retry 1209600 ;expire 10800 ;minimum ) madduck.net. 10800 IN RRSIG ( SOA 8 2 10800 20240606000000 20240509020306 4559 madduck.net. dhXD0YpkfNJz/apwUlg9jJu5KEBAjRGbK4ssku2dhSSxuQET4atTdKNBQOMMWaFOd/eFysnDIFSB hBSd8Zh52tXwjTyVZzPPim1ROIbPN+ATmDDxceemsVRXx/CRVYHHKCwM+IxVsGt0JgW7hciMKuZd hoSEO2vVGGx5IgvlmpCN8lHnCrm+PyBJmnv/eAsSGaLPeNooPQ1rr7VOSl/c1G9W025/uXJ8JX0v vcF5AdXe8dwf9Zxab7BlRZmdCALg6riESOqxZZ4vpRIlp3ehZ7bD/p3v2sIQ9mk6IDnDhW0SISid qXO0GaDlBhWpUmE91+WRt6DzryfmK7DbOc3xtQ== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509020306 4559 madduck.net. YpzwL94urPgT9tid3RO0mYIUTccZwZ+8AUGKhbbDM/JrmYZfGkC2gqR19SqMPfYO5CuoxJo4obro QV8Qhjlr//k4GJIGgwyYyqtx+dn3WCGpzZHtgokknhh5QP4/XnAiSerKE1RR1PxbBiXO4b3V8Wfe U9rJnlWjzwY3lOh+lFpbyKuiF3mgHzcRi38pYPYIbaXw/6gMl/qukHxJ5ZVoUfZ1IdL0bo3CZ9h0 o6nJWN/d97hvAV5cLR3PDXlAxavnwk76BGxx+ePm6rQxv+a9gNKklgbYtkKsT26f3RYw1qX12KTz Dfhjd5dTCno5Yor/gIkvK1zOp97uuLgPKu/99w== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509020306 4559 madduck.net. iTocv/h4SiKQCh2MsI/w56vswb7KcnFYpOiBjxtKyLG+pqtoSfyf8CJ4IfLTZbpkTMB61J8i6N22 YNjKTCBfCicy26O6motr4Ybvtql4loSTaa+L6O5l+Wo0BZaym+soAfhoL4AFgm7h/MAFsD+QUO2r 0uv/YiMRHeYnsWhQUzNYcbEAfgiosnIvCUjG+wiXtJx86vHhWE8ZoC4oWOBGMbZUmRW9RgauzS0N Av6QJaAVNORLB/ZZbP0i0QcdRgIOT1Ncd1cCjMlNcOmFXIYXSbVulVFE19j7rwx5jj0vxdjuIQSz RgvLhGzjA8dH7j+0zPHDUNrwrgbOjOSGj8iu0w== ) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.madduck.net for madduck.net/SOA
	Received 1128 bytes from 188.174.253.164
	;; Response received from [188.174.253.164] 1128 octets ;; HEADER SECTION ;; id = 51132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN SOA ;; ANSWER SECTION (2 records) madduck.net. 10800 IN SOA ( a.ns.madduck.net. hostmaster.madduck.net. 1702554891 ;serial 16384 ;refresh 2048 ;retry 1209600 ;expire 10800 ;minimum ) madduck.net. 10800 IN RRSIG ( SOA 8 2 10800 20240606000000 20240509010304 4559 madduck.net. fCmfqK3suoCQYMd9TuG2+dJNtR4rmPu/9rFk4UeRBOm6YFReXNcESIQsu3EH1puvZqzNXVbuQhHP jqr6XgXhJBm161f+ZTI7iVZKQ+h2oXPc0FM2Hj+2xeBfgWGIjW7lqvYbFx8mrIaDTR0FC+NhqOPc 9UaG2/P7c9ystHiZOskXPNXBqWtoLFz5N8dbmdc79krJVQ0zjeCfpBehPlrJrxJWu6dED7tpBY1S Zv/90CJVcIc9/YVlZw4atggXfbpbckUMWu1OxPJWOh+Z899ta0DRQyIjCuKsIJBWe4gLTWxqqvwr rSFMBIsuoI2t/GEIVQTh9TKZsli3WG8GR4qWZg== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509010304 4559 madduck.net. LyTjb8xMovWgcKM3V7I5hz4zbG4ZNnTnBEnyeR9SdUSybaIc2fqNpWDgCGwuo7z/LPNStTA5Uh0D ByXllkld+NoKE+j7RlBHI6WQXgFVHSqzK5JBmaC28ctJEucZN8UHuiLAHYzH4XXIcLwEssZVOTyO RUkQkpOtc0Gk29sudgWH9Ri81mxHBHMn9rTvvsZtuRTKQPsDAhozqmVsFYzD2sgzZSW3MkCZUeD2 GT86v2VbbEvjcPAMJ8a6HM4p3OdoAMaXkk1fUUNFoo6C+fNaDA1KuidLfwzBWJHt3pYBQZ5VqPew YCIqBN7P/N/hQ5x4DZJwpS7S/AA47tVCQcdzNA== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509010304 4559 madduck.net. QZILvpIFjIkzdp9U+0zjDw/WhQ4kyXl5N1gs4f41nyAe5JXeNxs8iXKwGW5qfN8LyqfHzSHnpq4Z 58ReqTC9wcWo6ZFoEiwXC2JZuZ88KDuXBIrzDmorhditfPQqEufJ1YbUXrJCyJExw5Khtn8wLQP3 lZmFLkCX1ebrrOrPvq6qPNlrt5zgJ7Wm/mQVbtl7p/C4HL60P/ss2rI0a5b8Mnx3UQNdlBsnA3oT H3W/8DW4kRYJwaO5gHd9qWw9pQP/qg4E1YykMNSgr3RUYzNvC8lQsAoPE8VWbuX2aPmhFVYiTlBh P/RW+CpVDqPwH/fXuf3wZH7oeuBfy694Q6nclg== ) ;; { "EDNS-VERSION": 0 }
	a.ns.madduck.net serial (1702554891) differs from b.ns.madduck.net serial (1702554902)
	Query to ns4.he.net for madduck.net/A
	Received 355 bytes from 216.66.1.2
	;; Response received from [216.66.1.2] 355 octets ;; HEADER SECTION ;; id = 3261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== ) madduck.net. 10800 IN A 188.174.253.167 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	madduck.net A RR has value 188.174.253.167
	Found 1 RRSIGs over A RRset
	`madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== )`
	RRSIG=4559 and DNSKEY=4559/SEP verifies the A RRset

madduck.net

	Query to b.ns.madduck.net for madduck.net/A
	Received 1097 bytes from 213.138.112.165
	;; Response received from [213.138.112.165] 1097 octets ;; HEADER SECTION ;; id = 26481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN A 188.174.253.167 madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509020306 4559 madduck.net. LE1UdNWExWPAfztuS+VKDJrruDaH5p2KUF1tAdrcXAcZTd7FAx4GbC8Ry61KR1WEOJPao6oU7xEP U+HGu3bb7jHNQuTioOb+DS7CIZOoKo8Iyw7NRqORzSnjXUJbhKcrfKuykEUDY6Jd3ZCNusVUpB5o o/hOA4qSiqpX9o3xH0jBL6mjUKcATFLgMK6F2BTbL0mFOXyPczIVELgGMo5W6TfUADTtC9c60M3q UYnvGIokQQv+NFBe2c+s+UWkyUMN+vPAf4PGPaP/bhxfhYY4NW16wxUf1PpPn//TawA95xz9Q/6q vblck7WzO3HztcO4GfIEvApJkpr0Srq26MwAdg== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509020306 4559 madduck.net. YpzwL94urPgT9tid3RO0mYIUTccZwZ+8AUGKhbbDM/JrmYZfGkC2gqR19SqMPfYO5CuoxJo4obro QV8Qhjlr//k4GJIGgwyYyqtx+dn3WCGpzZHtgokknhh5QP4/XnAiSerKE1RR1PxbBiXO4b3V8Wfe U9rJnlWjzwY3lOh+lFpbyKuiF3mgHzcRi38pYPYIbaXw/6gMl/qukHxJ5ZVoUfZ1IdL0bo3CZ9h0 o6nJWN/d97hvAV5cLR3PDXlAxavnwk76BGxx+ePm6rQxv+a9gNKklgbYtkKsT26f3RYw1qX12KTz Dfhjd5dTCno5Yor/gIkvK1zOp97uuLgPKu/99w== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509020306 4559 madduck.net. iTocv/h4SiKQCh2MsI/w56vswb7KcnFYpOiBjxtKyLG+pqtoSfyf8CJ4IfLTZbpkTMB61J8i6N22 YNjKTCBfCicy26O6motr4Ybvtql4loSTaa+L6O5l+Wo0BZaym+soAfhoL4AFgm7h/MAFsD+QUO2r 0uv/YiMRHeYnsWhQUzNYcbEAfgiosnIvCUjG+wiXtJx86vHhWE8ZoC4oWOBGMbZUmRW9RgauzS0N Av6QJaAVNORLB/ZZbP0i0QcdRgIOT1Ncd1cCjMlNcOmFXIYXSbVulVFE19j7rwx5jj0vxdjuIQSz RgvLhGzjA8dH7j+0zPHDUNrwrgbOjOSGj8iu0w== ) ;; { "EDNS-VERSION": 0 }
	b.ns.madduck.net is authoritative for madduck.net
	Found RRSIG signed by madduck.net zone
	Query to b.ns.madduck.net for madduck.net/A
	Received 1097 bytes from 213.138.112.165
	;; Response received from [213.138.112.165] 1097 octets ;; HEADER SECTION ;; id = 64027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN A 188.174.253.167 madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509020306 4559 madduck.net. LE1UdNWExWPAfztuS+VKDJrruDaH5p2KUF1tAdrcXAcZTd7FAx4GbC8Ry61KR1WEOJPao6oU7xEP U+HGu3bb7jHNQuTioOb+DS7CIZOoKo8Iyw7NRqORzSnjXUJbhKcrfKuykEUDY6Jd3ZCNusVUpB5o o/hOA4qSiqpX9o3xH0jBL6mjUKcATFLgMK6F2BTbL0mFOXyPczIVELgGMo5W6TfUADTtC9c60M3q UYnvGIokQQv+NFBe2c+s+UWkyUMN+vPAf4PGPaP/bhxfhYY4NW16wxUf1PpPn//TawA95xz9Q/6q vblck7WzO3HztcO4GfIEvApJkpr0Srq26MwAdg== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509020306 4559 madduck.net. YpzwL94urPgT9tid3RO0mYIUTccZwZ+8AUGKhbbDM/JrmYZfGkC2gqR19SqMPfYO5CuoxJo4obro QV8Qhjlr//k4GJIGgwyYyqtx+dn3WCGpzZHtgokknhh5QP4/XnAiSerKE1RR1PxbBiXO4b3V8Wfe U9rJnlWjzwY3lOh+lFpbyKuiF3mgHzcRi38pYPYIbaXw/6gMl/qukHxJ5ZVoUfZ1IdL0bo3CZ9h0 o6nJWN/d97hvAV5cLR3PDXlAxavnwk76BGxx+ePm6rQxv+a9gNKklgbYtkKsT26f3RYw1qX12KTz Dfhjd5dTCno5Yor/gIkvK1zOp97uuLgPKu/99w== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509020306 4559 madduck.net. iTocv/h4SiKQCh2MsI/w56vswb7KcnFYpOiBjxtKyLG+pqtoSfyf8CJ4IfLTZbpkTMB61J8i6N22 YNjKTCBfCicy26O6motr4Ybvtql4loSTaa+L6O5l+Wo0BZaym+soAfhoL4AFgm7h/MAFsD+QUO2r 0uv/YiMRHeYnsWhQUzNYcbEAfgiosnIvCUjG+wiXtJx86vHhWE8ZoC4oWOBGMbZUmRW9RgauzS0N Av6QJaAVNORLB/ZZbP0i0QcdRgIOT1Ncd1cCjMlNcOmFXIYXSbVulVFE19j7rwx5jj0vxdjuIQSz RgvLhGzjA8dH7j+0zPHDUNrwrgbOjOSGj8iu0w== ) ;; { "EDNS-VERSION": 0 }
	madduck.net A RR has value 188.174.253.167
	Found 1 RRSIGs over A RRset
	`madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509020306 4559 madduck.net. LE1UdNWExWPAfztuS+VKDJrruDaH5p2KUF1tAdrcXAcZTd7FAx4GbC8Ry61KR1WEOJPao6oU7xEP U+HGu3bb7jHNQuTioOb+DS7CIZOoKo8Iyw7NRqORzSnjXUJbhKcrfKuykEUDY6Jd3ZCNusVUpB5o o/hOA4qSiqpX9o3xH0jBL6mjUKcATFLgMK6F2BTbL0mFOXyPczIVELgGMo5W6TfUADTtC9c60M3q UYnvGIokQQv+NFBe2c+s+UWkyUMN+vPAf4PGPaP/bhxfhYY4NW16wxUf1PpPn//TawA95xz9Q/6q vblck7WzO3HztcO4GfIEvApJkpr0Srq26MwAdg== )`
	RRSIG=4559 and DNSKEY=4559/SEP verifies the A RRset

madduck.net

	Query to a.ns.madduck.net for madduck.net/A
	Received 1097 bytes from 188.174.253.164
	;; Response received from [188.174.253.164] 1097 octets ;; HEADER SECTION ;; id = 54805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN A 188.174.253.167 madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509010304 4559 madduck.net. LyTjb8xMovWgcKM3V7I5hz4zbG4ZNnTnBEnyeR9SdUSybaIc2fqNpWDgCGwuo7z/LPNStTA5Uh0D ByXllkld+NoKE+j7RlBHI6WQXgFVHSqzK5JBmaC28ctJEucZN8UHuiLAHYzH4XXIcLwEssZVOTyO RUkQkpOtc0Gk29sudgWH9Ri81mxHBHMn9rTvvsZtuRTKQPsDAhozqmVsFYzD2sgzZSW3MkCZUeD2 GT86v2VbbEvjcPAMJ8a6HM4p3OdoAMaXkk1fUUNFoo6C+fNaDA1KuidLfwzBWJHt3pYBQZ5VqPew YCIqBN7P/N/hQ5x4DZJwpS7S/AA47tVCQcdzNA== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509010304 4559 madduck.net. QZILvpIFjIkzdp9U+0zjDw/WhQ4kyXl5N1gs4f41nyAe5JXeNxs8iXKwGW5qfN8LyqfHzSHnpq4Z 58ReqTC9wcWo6ZFoEiwXC2JZuZ88KDuXBIrzDmorhditfPQqEufJ1YbUXrJCyJExw5Khtn8wLQP3 lZmFLkCX1ebrrOrPvq6qPNlrt5zgJ7Wm/mQVbtl7p/C4HL60P/ss2rI0a5b8Mnx3UQNdlBsnA3oT H3W/8DW4kRYJwaO5gHd9qWw9pQP/qg4E1YykMNSgr3RUYzNvC8lQsAoPE8VWbuX2aPmhFVYiTlBh P/RW+CpVDqPwH/fXuf3wZH7oeuBfy694Q6nclg== ) ;; { "EDNS-VERSION": 0 }
	a.ns.madduck.net is authoritative for madduck.net
	Found RRSIG signed by madduck.net zone
	Query to a.ns.madduck.net for madduck.net/A
	Received 1097 bytes from 188.174.253.164
	;; Response received from [188.174.253.164] 1097 octets ;; HEADER SECTION ;; id = 8792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 8 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madduck.net. IN A ;; ANSWER SECTION (2 records) madduck.net. 10800 IN A 188.174.253.167 madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== ) ;; AUTHORITY SECTION (8 records) madduck.net. 86400 IN NS a.ns.madduck.net. madduck.net. 86400 IN NS b.ns.madduck.net. madduck.net. 86400 IN NS ns1.he.net. madduck.net. 86400 IN NS ns2.he.net. madduck.net. 86400 IN NS ns3.he.net. madduck.net. 86400 IN NS ns4.he.net. madduck.net. 86400 IN NS ns5.he.net. madduck.net. 86400 IN RRSIG ( NS 8 2 86400 20240606000000 20240509010304 4559 madduck.net. LyTjb8xMovWgcKM3V7I5hz4zbG4ZNnTnBEnyeR9SdUSybaIc2fqNpWDgCGwuo7z/LPNStTA5Uh0D ByXllkld+NoKE+j7RlBHI6WQXgFVHSqzK5JBmaC28ctJEucZN8UHuiLAHYzH4XXIcLwEssZVOTyO RUkQkpOtc0Gk29sudgWH9Ri81mxHBHMn9rTvvsZtuRTKQPsDAhozqmVsFYzD2sgzZSW3MkCZUeD2 GT86v2VbbEvjcPAMJ8a6HM4p3OdoAMaXkk1fUUNFoo6C+fNaDA1KuidLfwzBWJHt3pYBQZ5VqPew YCIqBN7P/N/hQ5x4DZJwpS7S/AA47tVCQcdzNA== ) ;; ADDITIONAL SECTION (3 records) a.ns.madduck.net. 10800 IN A 188.174.253.164 a.ns.madduck.net. 10800 IN RRSIG ( A 8 4 10800 20240606000000 20240509010304 4559 madduck.net. QZILvpIFjIkzdp9U+0zjDw/WhQ4kyXl5N1gs4f41nyAe5JXeNxs8iXKwGW5qfN8LyqfHzSHnpq4Z 58ReqTC9wcWo6ZFoEiwXC2JZuZ88KDuXBIrzDmorhditfPQqEufJ1YbUXrJCyJExw5Khtn8wLQP3 lZmFLkCX1ebrrOrPvq6qPNlrt5zgJ7Wm/mQVbtl7p/C4HL60P/ss2rI0a5b8Mnx3UQNdlBsnA3oT H3W/8DW4kRYJwaO5gHd9qWw9pQP/qg4E1YykMNSgr3RUYzNvC8lQsAoPE8VWbuX2aPmhFVYiTlBh P/RW+CpVDqPwH/fXuf3wZH7oeuBfy694Q6nclg== ) ;; { "EDNS-VERSION": 0 }
	madduck.net A RR has value 188.174.253.167
	Found 1 RRSIGs over A RRset
	`madduck.net. 10800 IN RRSIG ( A 8 2 10800 20240606000000 20240509010304 4559 madduck.net. LCWj9wULh6KXLdYKvxrqvQTzxjs+FbjLgEWweYoxfLme6UEaZIJ0tmScaxqKez1Ee/wOTI20TKir eD2xDlKWdXwtAB2tdxpU8qSrdLO5S6Z9jSw8T5ijZuFH7YseiBfd/XDq4CLiT6pm3mV75uwQA+zd L5SgnQrFQ4/hAw/9u0FQpj6P4qY5ZFz+XQ3JQG2+nM9c3xm8xEVrXBbBkoqfbAbZtR7/1uTLAZD3 bIMDPDkvzLVKYTlbZ7xyOtb7CAsqIT0PEAO7IbXJC0i9FJCtxNg9y5KO/07b98DUN4D0O4s+146X TEDhBcgRivfHxcvPv4vWrqHYHy1vwBITq5qILQ== )`
	RRSIG=4559 and DNSKEY=4559/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test madduck.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: