DNSSEC Analyzer

Analyzing DNSSEC problems for nic.cz

	Checking DS between Trust Anchor and .
	`. 0 IN DS 19036 8 1 B256BD09DC8DD59F0E0F0D8541B8328DD986DF6E ; xosih-kezeb-nulum-tohin-zafab-zyfom-hubur-masam-tikam-kelek-vyxex`
	`. 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 ; xidep-pybec-tyvak-zonag-kesud-vohip-cumul-fysuk-bivac-pubam-hugeb-buzud-symes-tylaf-dosog-vufor-huxax`
	Query to f.root-servers.net for ./DNSKEY
	Received 736 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (736 bytes) ;; HEADER SECTION ;; id = 46606 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY 256 3 8 ( AwEAAZ/NErKzyMlImJ+2HTmK9qeH2sLUywls F+mJbTP5GKoYFHoU2vn2Zqr261Lk7a6jfBKY ny5GX7BDRJcVvig36TgOinE9QP5KVS0RxdrO l98gKLwFMORfNf/wjCwjPdEl1GgaGYl0npJ4 c+x+o6aa/xmDKJo9zUlpvb7BLxbJ7HwF ) ; Key ID = 51201 . 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxh JhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd 0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJR kxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/V HL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68 LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtu A6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoB Qzgul0sGIcGOYl7OyQdXfZ57relSQageu+ip AdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwh YB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN RRSIG DNSKEY 8 0 172800 20120204235959 ( 20120121000000 19036 . dltfd0sTnyEf1U8a1d+VaLmE5+T42HdouXgf92w6LkHcy pz4qwmgzefAZiJ/q+TF2T1Okyt3SlfDhuxk2UC0gdmd+2 vrl0Oj9NUcSbsR9+k2rbfv1CJcNTY36BNRrX0jVcVd6rO rpC4DNKhDoIwFOOV1gMcjjZWiok9XQ46bN9EspYcEP9f/ 9GcDC8i8TyUM1HStPSiFbWKIyR8ghc+ziX5V7mot1riRP 8f3n2+pBw32xy1sY01jBhfoHdfNPo+xAgLZVpM5BqELYm kMBdlg93/3ZuhAaAdDaLPUHx4H7lfhB+BSGPRr7HT8Mmf /eVlJ+AfXsx3yxPpiYiXyuExX+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY 256 3 8 ( AwEAAZ/NErKzyMlImJ+2HTmK9qeH2sLUywls F+mJbTP5GKoYFHoU2vn2Zqr261Lk7a6jfBKY ny5GX7BDRJcVvig36TgOinE9QP5KVS0RxdrO l98gKLwFMORfNf/wjCwjPdEl1GgaGYl0npJ4 c+x+o6aa/xmDKJo9zUlpvb7BLxbJ7HwF ) ; Key ID = 51201`
	`. 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxh JhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd 0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJR kxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/V HL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68 LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtu A6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoB Qzgul0sGIcGOYl7OyQdXfZ57relSQageu+ip AdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwh YB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA1 verifies DNSKEY=19036/SEP
	DS=19036/SHA256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG DNSKEY 8 0 172800 20120204235959 ( 20120121000000 19036 . dltfd0sTnyEf1U8a1d+VaLmE5+T42HdouXgf92w6LkHcy pz4qwmgzefAZiJ/q+TF2T1Okyt3SlfDhuxk2UC0gdmd+2 vrl0Oj9NUcSbsR9+k2rbfv1CJcNTY36BNRrX0jVcVd6rO rpC4DNKhDoIwFOOV1gMcjjZWiok9XQ46bN9EspYcEP9f/ 9GcDC8i8TyUM1HStPSiFbWKIyR8ghc+ziX5V7mot1riRP 8f3n2+pBw32xy1sY01jBhfoHdfNPo+xAgLZVpM5BqELYm kMBdlg93/3ZuhAaAdDaLPUHx4H7lfhB+BSGPRr7HT8Mmf /eVlJ+AfXsx3yxPpiYiXyuExX+Q== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=51201 is now in the chain-of-trust
	Query to k.root-servers.net for nic.cz/A
	Received 545 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (545 bytes) ;; HEADER SECTION ;; id = 5679 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS f.ns.nic.cz. cz. 86400 IN DS 14568 10 2 342afb8ba56277ec54f17ed007937f794b9f8257bf6cd544137b10df5d2910ef ; xetad-pavym-rynyk-dotav-sahiz-cozut-bicun-fozal-nedin-ziboh-lozak-sehyg-gegul-rogat-zolyd-nagyv-zoxyx cz. 86400 IN RRSIG DS 8 1 86400 20120204000000 ( 20120127230000 51201 . nVhQ07AFuOizM2qVAG1Jmb9x7uTkByrdh6Dha9x2Rx07Q w+oPUvKAo0ixhQjW7R72rtZxhPRvYTkwa7TpAI/C4D+Gj gcBUwpUXdepR5a4KlsBsi/5jbe3Vd3uf8le29swxQJ6Kk XCmXig4JuM9LHXwGL9gg45bRd+pqEbiXJcl8= ) ;; ADDITIONAL SECTION (11 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 f.ns.nic.cz. 172800 IN A 193.171.255.48 a.ns.nic.cz. 172800 IN AAAA 2001:678:f:0:0:0:0:1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10:0:0:0:0:1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11:0:0:0:0:1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1:0:0:0:0:1 f.ns.nic.cz. 172800 IN AAAA 2001:628:453:420:0:0:0:48 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to g.root-servers.net for cz/DNSKEY
	Received 545 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (545 bytes) ;; HEADER SECTION ;; id = 19268 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS f.ns.nic.cz. cz. 86400 IN DS 14568 10 2 342afb8ba56277ec54f17ed007937f794b9f8257bf6cd544137b10df5d2910ef ; xetad-pavym-rynyk-dotav-sahiz-cozut-bicun-fozal-nedin-ziboh-lozak-sehyg-gegul-rogat-zolyd-nagyv-zoxyx cz. 86400 IN RRSIG DS 8 1 86400 20120204000000 ( 20120127230000 51201 . nVhQ07AFuOizM2qVAG1Jmb9x7uTkByrdh6Dha9x2Rx07Q w+oPUvKAo0ixhQjW7R72rtZxhPRvYTkwa7TpAI/C4D+Gj gcBUwpUXdepR5a4KlsBsi/5jbe3Vd3uf8le29swxQJ6Kk XCmXig4JuM9LHXwGL9gg45bRd+pqEbiXJcl8= ) ;; ADDITIONAL SECTION (11 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 f.ns.nic.cz. 172800 IN A 193.171.255.48 a.ns.nic.cz. 172800 IN AAAA 2001:678:f:0:0:0:0:1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10:0:0:0:0:1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11:0:0:0:0:1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1:0:0:0:0:1 f.ns.nic.cz. 172800 IN AAAA 2001:628:453:420:0:0:0:48 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found child zone cz

	Checking DS between . and cz
	Query to i.root-servers.net for cz/DS
	Received 1067 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1067 bytes) ;; HEADER SECTION ;; id = 37842 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 23 ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS 14568 10 2 342afb8ba56277ec54f17ed007937f794b9f8257bf6cd544137b10df5d2910ef ; xetad-pavym-rynyk-dotav-sahiz-cozut-bicun-fozal-nedin-ziboh-lozak-sehyg-gegul-rogat-zolyd-nagyv-zoxyx cz. 86400 IN RRSIG DS 8 1 86400 20120204000000 ( 20120127230000 51201 . nVhQ07AFuOizM2qVAG1Jmb9x7uTkByrdh6Dha9x2Rx07Q w+oPUvKAo0ixhQjW7R72rtZxhPRvYTkwa7TpAI/C4D+Gj gcBUwpUXdepR5a4KlsBsi/5jbe3Vd3uf8le29swxQJ6Kk XCmXig4JuM9LHXwGL9gg45bRd+pqEbiXJcl8= ) ;; AUTHORITY SECTION (14 records) . 518400 IN NS f.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS d.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS m.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS c.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN RRSIG NS 8 0 518400 20120204000000 ( 20120127230000 51201 . M5GKFoPbHTo7eBVTHegRXEtwNG1Mb6wqW4ivxNzJ+sf8a 2IQ7RaamAGryjKflUoCPfd+98UHmf+KedhTCwRqQ1ReIw cpZDV6AM3PRrCCUBjZ13cHGW+Oj99kfDi8czCuVQe2g4F Gba8HTo9XR2BzDv6qKTlICdyIFAySvIrRLys= ) ;; ADDITIONAL SECTION (23 records) a.root-servers.net. 3600000 IN A 198.41.0.4 a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e:0:0:0:2:30 b.root-servers.net. 3600000 IN A 192.228.79.201 c.root-servers.net. 3600000 IN A 192.33.4.12 d.root-servers.net. 3600000 IN A 128.8.10.90 d.root-servers.net. 3600000 IN AAAA 2001:500:2d:0:0:0:0:d e.root-servers.net. 3600000 IN A 192.203.230.10 f.root-servers.net. 3600000 IN A 192.5.5.241 f.root-servers.net. 3600000 IN AAAA 2001:500:2f:0:0:0:0:f g.root-servers.net. 3600000 IN A 192.112.36.4 h.root-servers.net. 3600000 IN A 128.63.2.53 h.root-servers.net. 3600000 IN AAAA 2001:500:1:0:0:0:803f:235 i.root-servers.net. 3600000 IN A 192.36.148.17 i.root-servers.net. 3600000 IN AAAA 2001:7fe:0:0:0:0:0:53 j.root-servers.net. 3600000 IN A 192.58.128.30 j.root-servers.net. 3600000 IN AAAA 2001:503:c27:0:0:0:2:30 k.root-servers.net. 3600000 IN A 193.0.14.129 k.root-servers.net. 3600000 IN AAAA 2001:7fd:0:0:0:0:0:1 l.root-servers.net. 3600000 IN A 199.7.83.42 l.root-servers.net. 3600000 IN AAAA 2001:500:3:0:0:0:0:42 m.root-servers.net. 3600000 IN A 202.12.27.33 m.root-servers.net. 3600000 IN AAAA 2001:dc3:0:0:0:0:0:35 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 1 DS records for cz in the . zone
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG DS 8 1 86400 20120204000000 ( 20120127230000 51201 . nVhQ07AFuOizM2qVAG1Jmb9x7uTkByrdh6Dha9x2Rx07Q w+oPUvKAo0ixhQjW7R72rtZxhPRvYTkwa7TpAI/C4D+Gj gcBUwpUXdepR5a4KlsBsi/5jbe3Vd3uf8le29swxQJ6Kk XCmXig4JuM9LHXwGL9gg45bRd+pqEbiXJcl8= )`
	RRSIG=51201 and DNSKEY=51201 verifies the DS RRset
	DS=14568/SHA256 is now in the chain-of-trust
	`cz. 86400 IN DS 14568 10 2 342afb8ba56277ec54f17ed007937f794b9f8257bf6cd544137b10df5d2910ef ; xetad-pavym-rynyk-dotav-sahiz-cozut-bicun-fozal-nedin-ziboh-lozak-sehyg-gegul-rogat-zolyd-nagyv-zoxyx`
	Query to b.ns.nic.cz for cz/DNSKEY
	Received 911 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (911 bytes) ;; HEADER SECTION ;; id = 17542 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (4 records) cz. 3600 IN DNSKEY 256 3 10 ( BQEAAAAB1iIgLq7eKm9iGHIRzD5sZ+xm1FMW HhVQ2sxZGecLQ6JHj51BGN6mhE/eu52GV0cX wuX9HWJiyOy+wGqk+2q9NurBC25XMHqe6FEh oHdLFr8jVzaBOF8Us78ptZNuYt6kCE2kl3R+ OGbNBwiBu+Mte4SGMfIPtsHqp36ZF8YfCCk= ) ; Key ID = 62212 cz. 3600 IN DNSKEY 257 3 10 ( AwEAAaVU8EMQrZ6Tix2zBaAmizMQ7W0m94qS JUXV4eVWS9ZpXh9t1uj8U/B5Nnqge4G0Te0/ NJIqflihZKXs8HyhJqjF852RKnvNWPu2wMuj YjHP0T4lIhu4rTym9+sPNsfioqvMyyDeqyhV Px21nvLW5oaKjaLd3XJxijRbDTddRU97mJVV S50PKdDmh5n/4KdRKV7ifR2Ap8L1bvUiCOxl 4GAqLoXft+L896bkVj6mefdCSyYaCbgsDc2+ 10ZBOSF1t89NJ6O1yO+y5/7vS3dYKEqj+p4y gaCY0spvrhZxncUeASixg224bNYZM5TLk2/Y oKgAEjaIoCwu7SAXB5iUvLU= ) ; Key ID = 14568 cz. 3600 IN RRSIG DNSKEY 10 1 3600 20120207234529 ( 20120127073935 14568 cz. GpsFZSC9w9GsBoqoPWmodm+kwSx7vHj/HSQXYSZJUqMFq c+UHOeMUaYUOasDZd2EUAc1UD7LdXFg+g1MtkC3hEopMU r6OTcnrTUTWaoNp58vv4268BPewUTLEsy9d+Zl5kWV6hX S36XgD7pBe3lt2IbyLwJOzI76dJFxoogDF1itswT8094d 2WZqadqXBkB+mnAjY2VbIWZMYitwFt/zXkzZvzdGElJtq UQa2QVOXfBsr007XOH16zjVVDKf6ZW+OMTxk3bWBqIY/s L5rcvmNaMl8ZObxt4xCwwK0SHYEWbtpaOiOGE4XYP75Fc 10p788qHNOKEIx94fo4GqhYEY9A== ) cz. 3600 IN RRSIG DNSKEY 10 1 3600 20120206182251 ( 20120123230929 62212 cz. UVPFUceT4blMbXQrhHQaIvNnd8XTs/OgzSIf/xeLN2fED ogDbQmDQNHn/WBFSif3nNyPN5Maj4j2uBLCGhpVXd53QU 9t2bvMbS0KJ6S0Wrc86RIll6DABrNqzsWvg2WlR8kh6Pd ZMNU7AdSzwQ0MOhHj5xOq3TnYjM2HwqNY+Fc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY 256 3 10 ( BQEAAAAB1iIgLq7eKm9iGHIRzD5sZ+xm1FMW HhVQ2sxZGecLQ6JHj51BGN6mhE/eu52GV0cX wuX9HWJiyOy+wGqk+2q9NurBC25XMHqe6FEh oHdLFr8jVzaBOF8Us78ptZNuYt6kCE2kl3R+ OGbNBwiBu+Mte4SGMfIPtsHqp36ZF8YfCCk= ) ; Key ID = 62212`
	`cz. 3600 IN DNSKEY 257 3 10 ( AwEAAaVU8EMQrZ6Tix2zBaAmizMQ7W0m94qS JUXV4eVWS9ZpXh9t1uj8U/B5Nnqge4G0Te0/ NJIqflihZKXs8HyhJqjF852RKnvNWPu2wMuj YjHP0T4lIhu4rTym9+sPNsfioqvMyyDeqyhV Px21nvLW5oaKjaLd3XJxijRbDTddRU97mJVV S50PKdDmh5n/4KdRKV7ifR2Ap8L1bvUiCOxl 4GAqLoXft+L896bkVj6mefdCSyYaCbgsDc2+ 10ZBOSF1t89NJ6O1yO+y5/7vS3dYKEqj+p4y gaCY0spvrhZxncUeASixg224bNYZM5TLk2/Y oKgAEjaIoCwu7SAXB5iUvLU= ) ; Key ID = 14568`
	DNSKEY=14568/SEP is now in the chain-of-trust
	DS=14568/SHA256 verifies DNSKEY=14568/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG DNSKEY 10 1 3600 20120207234529 ( 20120127073935 14568 cz. GpsFZSC9w9GsBoqoPWmodm+kwSx7vHj/HSQXYSZJUqMFq c+UHOeMUaYUOasDZd2EUAc1UD7LdXFg+g1MtkC3hEopMU r6OTcnrTUTWaoNp58vv4268BPewUTLEsy9d+Zl5kWV6hX S36XgD7pBe3lt2IbyLwJOzI76dJFxoogDF1itswT8094d 2WZqadqXBkB+mnAjY2VbIWZMYitwFt/zXkzZvzdGElJtq UQa2QVOXfBsr007XOH16zjVVDKf6ZW+OMTxk3bWBqIY/s L5rcvmNaMl8ZObxt4xCwwK0SHYEWbtpaOiOGE4XYP75Fc 10p788qHNOKEIx94fo4GqhYEY9A== )`
	`cz. 3600 IN RRSIG DNSKEY 10 1 3600 20120206182251 ( 20120123230929 62212 cz. UVPFUceT4blMbXQrhHQaIvNnd8XTs/OgzSIf/xeLN2fED ogDbQmDQNHn/WBFSif3nNyPN5Maj4j2uBLCGhpVXd53QU 9t2bvMbS0KJ6S0Wrc86RIll6DABrNqzsWvg2WlR8kh6Pd ZMNU7AdSzwQ0MOhHj5xOq3TnYjM2HwqNY+Fc= )`
	RRSIG=14568 and DNSKEY=14568/SEP verifies the DNSKEY RRset
	RRSIG=62212 and DNSKEY=62212 verifies the DNSKEY RRset
	DNSKEY=62212 is now in the chain-of-trust
	Query to a.ns.nic.cz for nic.cz/A
	Received 1568 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1568 bytes) ;; HEADER SECTION ;; id = 12617 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG A 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. SHdQqOZg9WRMVAZF/FK+SZHR2HmZea8D4ByvKjAVZjtdc Jufnyg3rJgbWD8icP3bKi89PBlxZj94O6FXpN8LUNNuiJ N2+WZ1dkBiR52MZ1xwXZLVoPIEcYMxlaaWL0lM4Xvhnw+ +NUhGK4wVLg4fI63hYdRgmugS1TINuZ2mVGo= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	cz is authoritative for nic.cz
	Query to b.ns.nic.cz for nic.cz/DNSKEY
	Received 929 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (929 bytes) ;; HEADER SECTION ;; id = 9499 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (4 records) nic.cz. 3600 IN DNSKEY 257 3 5 ( BQEAAAABt3LenoCVTV0okqKYPDnnVJqvwCD9 MKJNXg8fcOCdLQYncyoehpwM5RK2UkZDcDxW kMo7yMa35ej+Mhpaji9si4xXD+Syl4Q06LFi FkdN/5GlVlrIdE3GW7zC7Z4sS14Vz8FbYfcR mhsh19Ob718jGZneGfw2UPbvkyxUR8wD7mgu Zn02fQ6tjj/Ktp4uSW9tpz3bjGMo2rX+iZk4 xgbPaesAOlR/AaHdatGZsWC9CPon8mnLZeu6 czm8CBDgBmnf3PE8c5+uyWj1Pw4pp0VQmnX5 UrnuGpErg7qXhJm7wY2CRVRMcLX3zmjVWXW1 uT9JFh2G+/pZzxnASfKKltZpuw== ) ; Key ID = 59916 nic.cz. 3600 IN DNSKEY 256 3 5 ( BQEAAAABu0IuO6zXBQNvlWuxySlsv7jMO+By R9VoWfukcbBJXUKTTsg88zCHdDovUl89gn6O PEeECV4f9Dh4XyvRu/VTU1ePv+haMx2dOqHs ns29NHjXolOxbSou8GmXvbgD+An8VANpGLdY I1j0VHCDmKiSA8EzrJh+bGj3KOBJw6Do9AU= ) ; Key ID = 7262 nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 7262 nic.cz. VlpvUvU2dQDbwvA/Pb47ioC8OhcHhQLUHIom5xVhx6ZJS K78DaDTDgvidNpuNGRtj1qWHiuCCTu+jdOUKuFfosIlRT 9XILeLTv8janihQjHPhtSZP04PP+vEbkdOYQPJ9vLu2v2 zbEN0yd4f3ewYSkwRvs5Uyh/2HhkHYVsRAuk= ) nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 59916 nic.cz. VgCLVPfQtcDmWqD+2KqdFkDhAeSJLrkqNE50+QsMJwhq4 yMTkkG3PIbZyr5p7yxg7IdkQjzCdRy1qa8iZPPfXM5Zb6 yMpw5egDbWUECpx2ybDB+eB/GbvQHe5u1kzxXzN3cpc9y ZN7HrSq5HktuCSUyFhPBR+BanjPY25B8SSQNPPuTYtyfE V7ovz3y21oIZUML1sY4CJah6QRqej1ntgJRE0smV6ZbP/ q+V+osUE3eQ3Ed21e0fcA9oKmQvvR7IsSSuub6DhCLhqN CmvdaPa/ZKBvg/aeei30+I4M0bCi+pTwJyWLR06zX6/HY SkVqmJeRy/JrrW2XVwwHv//YlLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Found child zone nic.cz
	Attempting to learn nameservers for nic.cz
	Query to b.ns.nic.cz for nic.cz/NS
	Received 1386 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (1386 bytes) ;; HEADER SECTION ;; id = 30186 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN NS ;; ANSWER SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Found nic.cz nameservers: a.ns.nic.cz, b.ns.nic.cz, d.ns.nic.cz

nic.cz

	Checking DS between cz and nic.cz
	Query to b.ns.nic.cz for nic.cz/DS
	Received 652 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (652 bytes) ;; HEADER SECTION ;; id = 81 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 7 ;; QUESTION SECTION (1 record) ;; nic.cz. IN DS ;; ANSWER SECTION (3 records) nic.cz. 18000 IN DS 27979 5 1 ff11e740a0254ec63c738a47e52abf3ad91d8c43 ; xuzoc-cunug-bimud-hafus-kezal-fidig-linyd-puzef-pukoc-tefug-fuxax nic.cz. 18000 IN DS 59916 5 1 144130216e45c4ec2bb8595e817916e8b060d87b ; xehag-casyd-curug-hyciv-supar-mikuh-vubul-nihov-misyk-bykal-rexux nic.cz. 18000 IN RRSIG DS 10 2 18000 20120206090811 ( 20120123213951 62212 cz. Xg5yqX1KdiYZLBHav6xgwnXbkdNqDJx2QkXzRyIPFa+RT pLrs8kNIseNp+TGk9ngaRK2To7ZGkkKKZ5a8p8Xmi0GbS diPht1x2HF4RFcKPAcFeV33kHV8wg0UndysSldN9F6ymv W1NmRj1iGueMHev229jybMR0RwvtHf8qxHNQ= ) ;; AUTHORITY SECTION (6 records) cz. 18000 IN NS a.ns.nic.cz. cz. 18000 IN NS b.ns.nic.cz. cz. 18000 IN NS c.ns.nic.cz. cz. 18000 IN NS d.ns.nic.cz. cz. 18000 IN NS f.ns.nic.cz. cz. 18000 IN RRSIG NS 10 1 18000 20120209134357 ( 20120128063934 62212 cz. iKCjxS5k3f/MtvSdo+Y5TzfyZppsHBP1Otv/EvuRzpYE9 U9EEFJR37tZDmsvXVFlZQXLBWXMW95BsioJufkUAL9m+2 66uDmKaVQlWgYBlh+SHN+WpN8yCUYD8YYg2wodQmemlUl wBFuRl0VtGUvfjLx2UmCODS/b5bk99y78O+M= ) ;; ADDITIONAL SECTION (7 records) a.ns.nic.cz. 18000 IN A 194.0.12.1 b.ns.nic.cz. 18000 IN A 194.0.13.1 d.ns.nic.cz. 18000 IN A 193.29.206.1 a.ns.nic.cz. 18000 IN AAAA 2001:678:f:0:0:0:0:1 b.ns.nic.cz. 18000 IN AAAA 2001:678:10:0:0:0:0:1 d.ns.nic.cz. 18000 IN AAAA 2001:678:1:0:0:0:0:1 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Found 2 DS records for nic.cz in the cz zone
	Found 1 RRSIGs over DS RRset
	`nic.cz. 18000 IN RRSIG DS 10 2 18000 20120206090811 ( 20120123213951 62212 cz. Xg5yqX1KdiYZLBHav6xgwnXbkdNqDJx2QkXzRyIPFa+RT pLrs8kNIseNp+TGk9ngaRK2To7ZGkkKKZ5a8p8Xmi0GbS diPht1x2HF4RFcKPAcFeV33kHV8wg0UndysSldN9F6ymv W1NmRj1iGueMHev229jybMR0RwvtHf8qxHNQ= )`
	RRSIG=62212 and DNSKEY=62212 verifies the DS RRset
	DS=27979/SHA1 is now in the chain-of-trust
	DS=59916/SHA1 is now in the chain-of-trust
	`nic.cz. 18000 IN DS 27979 5 1 ff11e740a0254ec63c738a47e52abf3ad91d8c43 ; xuzoc-cunug-bimud-hafus-kezal-fidig-linyd-puzef-pukoc-tefug-fuxax`
	`nic.cz. 18000 IN DS 59916 5 1 144130216e45c4ec2bb8595e817916e8b060d87b ; xehag-casyd-curug-hyciv-supar-mikuh-vubul-nihov-misyk-bykal-rexux`
	Query to d.ns.nic.cz for nic.cz/DNSKEY
	Received 923 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (923 bytes) ;; HEADER SECTION ;; id = 64471 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (4 records) nic.cz. 3600 IN DNSKEY 256 3 5 ( BQEAAAABu0IuO6zXBQNvlWuxySlsv7jMO+By R9VoWfukcbBJXUKTTsg88zCHdDovUl89gn6O PEeECV4f9Dh4XyvRu/VTU1ePv+haMx2dOqHs ns29NHjXolOxbSou8GmXvbgD+An8VANpGLdY I1j0VHCDmKiSA8EzrJh+bGj3KOBJw6Do9AU= ) ; Key ID = 7262 nic.cz. 3600 IN DNSKEY 257 3 5 ( BQEAAAABt3LenoCVTV0okqKYPDnnVJqvwCD9 MKJNXg8fcOCdLQYncyoehpwM5RK2UkZDcDxW kMo7yMa35ej+Mhpaji9si4xXD+Syl4Q06LFi FkdN/5GlVlrIdE3GW7zC7Z4sS14Vz8FbYfcR mhsh19Ob718jGZneGfw2UPbvkyxUR8wD7mgu Zn02fQ6tjj/Ktp4uSW9tpz3bjGMo2rX+iZk4 xgbPaesAOlR/AaHdatGZsWC9CPon8mnLZeu6 czm8CBDgBmnf3PE8c5+uyWj1Pw4pp0VQmnX5 UrnuGpErg7qXhJm7wY2CRVRMcLX3zmjVWXW1 uT9JFh2G+/pZzxnASfKKltZpuw== ) ; Key ID = 59916 nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 7262 nic.cz. VlpvUvU2dQDbwvA/Pb47ioC8OhcHhQLUHIom5xVhx6ZJS K78DaDTDgvidNpuNGRtj1qWHiuCCTu+jdOUKuFfosIlRT 9XILeLTv8janihQjHPhtSZP04PP+vEbkdOYQPJ9vLu2v2 zbEN0yd4f3ewYSkwRvs5Uyh/2HhkHYVsRAuk= ) nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 59916 nic.cz. VgCLVPfQtcDmWqD+2KqdFkDhAeSJLrkqNE50+QsMJwhq4 yMTkkG3PIbZyr5p7yxg7IdkQjzCdRy1qa8iZPPfXM5Zb6 yMpw5egDbWUECpx2ybDB+eB/GbvQHe5u1kzxXzN3cpc9y ZN7HrSq5HktuCSUyFhPBR+BanjPY25B8SSQNPPuTYtyfE V7ovz3y21oIZUML1sY4CJah6QRqej1ntgJRE0smV6ZbP/ q+V+osUE3eQ3Ed21e0fcA9oKmQvvR7IsSSuub6DhCLhqN CmvdaPa/ZKBvg/aeei30+I4M0bCi+pTwJyWLR06zX6/HY SkVqmJeRy/JrrW2XVwwHv//YlLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 2 DNSKEY records for nic.cz
	`nic.cz. 3600 IN DNSKEY 256 3 5 ( BQEAAAABu0IuO6zXBQNvlWuxySlsv7jMO+By R9VoWfukcbBJXUKTTsg88zCHdDovUl89gn6O PEeECV4f9Dh4XyvRu/VTU1ePv+haMx2dOqHs ns29NHjXolOxbSou8GmXvbgD+An8VANpGLdY I1j0VHCDmKiSA8EzrJh+bGj3KOBJw6Do9AU= ) ; Key ID = 7262`
	`nic.cz. 3600 IN DNSKEY 257 3 5 ( BQEAAAABt3LenoCVTV0okqKYPDnnVJqvwCD9 MKJNXg8fcOCdLQYncyoehpwM5RK2UkZDcDxW kMo7yMa35ej+Mhpaji9si4xXD+Syl4Q06LFi FkdN/5GlVlrIdE3GW7zC7Z4sS14Vz8FbYfcR mhsh19Ob718jGZneGfw2UPbvkyxUR8wD7mgu Zn02fQ6tjj/Ktp4uSW9tpz3bjGMo2rX+iZk4 xgbPaesAOlR/AaHdatGZsWC9CPon8mnLZeu6 czm8CBDgBmnf3PE8c5+uyWj1Pw4pp0VQmnX5 UrnuGpErg7qXhJm7wY2CRVRMcLX3zmjVWXW1 uT9JFh2G+/pZzxnASfKKltZpuw== ) ; Key ID = 59916`
	DNSKEY=59916/SEP is now in the chain-of-trust
	DS=59916/SHA1 verifies DNSKEY=59916/SEP
	DS=27979/SHA1 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 7262 nic.cz. VlpvUvU2dQDbwvA/Pb47ioC8OhcHhQLUHIom5xVhx6ZJS K78DaDTDgvidNpuNGRtj1qWHiuCCTu+jdOUKuFfosIlRT 9XILeLTv8janihQjHPhtSZP04PP+vEbkdOYQPJ9vLu2v2 zbEN0yd4f3ewYSkwRvs5Uyh/2HhkHYVsRAuk= )`
	`nic.cz. 3600 IN RRSIG DNSKEY 5 2 3600 20120210010302 ( 20120127010302 59916 nic.cz. VgCLVPfQtcDmWqD+2KqdFkDhAeSJLrkqNE50+QsMJwhq4 yMTkkG3PIbZyr5p7yxg7IdkQjzCdRy1qa8iZPPfXM5Zb6 yMpw5egDbWUECpx2ybDB+eB/GbvQHe5u1kzxXzN3cpc9y ZN7HrSq5HktuCSUyFhPBR+BanjPY25B8SSQNPPuTYtyfE V7ovz3y21oIZUML1sY4CJah6QRqej1ntgJRE0smV6ZbP/ q+V+osUE3eQ3Ed21e0fcA9oKmQvvR7IsSSuub6DhCLhqN CmvdaPa/ZKBvg/aeei30+I4M0bCi+pTwJyWLR06zX6/HY SkVqmJeRy/JrrW2XVwwHv//YlLQ== )`
	RRSIG=7262 and DNSKEY=7262 verifies the DNSKEY RRset
	RRSIG=59916 and DNSKEY=59916/SEP verifies the DNSKEY RRset
	DNSKEY=7262 is now in the chain-of-trust
	Query to a.ns.nic.cz for nic.cz/A
	Received 1568 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1568 bytes) ;; HEADER SECTION ;; id = 15709 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG A 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. SHdQqOZg9WRMVAZF/FK+SZHR2HmZea8D4ByvKjAVZjtdc Jufnyg3rJgbWD8icP3bKi89PBlxZj94O6FXpN8LUNNuiJ N2+WZ1dkBiR52MZ1xwXZLVoPIEcYMxlaaWL0lM4Xvhnw+ +NUhGK4wVLg4fI63hYdRgmugS1TINuZ2mVGo= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	nic.cz is authoritative for nic.cz
	Found RRSIG signed by nic.cz zone
	Query to b.ns.nic.cz for nic.cz/SOA
	Received 1599 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (1599 bytes) ;; HEADER SECTION ;; id = 59308 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA a.ns.nic.cz. hostmaster.nic.cz. ( 1327629782 ; Serial 10800 ; Refresh 3600 ; Retry 1209600 ; Expire 7200 ) ; Minimum TTL nic.cz. 1800 IN RRSIG SOA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. Qtg4KfWEDsG7OFkbVwIZ/0JDyjy1Dza+o1D9y5x0KlPeS FdEJVmJwHIjQ0uX0Ubbv2jWyBgNlWo9kmOe9nRenrO9JV HjjSVPs9MTGPz5U5r9XlHCoi+HVHDclzaC4EmwxeEhw4Y NQzCxhjqqnG6sU6nFQvr8dSgioYFT9RLsso8= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to d.ns.nic.cz for nic.cz/SOA
	Received 1593 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (1593 bytes) ;; HEADER SECTION ;; id = 43822 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA a.ns.nic.cz. hostmaster.nic.cz. ( 1327629782 ; Serial 10800 ; Refresh 3600 ; Retry 1209600 ; Expire 7200 ) ; Minimum TTL nic.cz. 1800 IN RRSIG SOA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. Qtg4KfWEDsG7OFkbVwIZ/0JDyjy1Dza+o1D9y5x0KlPeS FdEJVmJwHIjQ0uX0Ubbv2jWyBgNlWo9kmOe9nRenrO9JV HjjSVPs9MTGPz5U5r9XlHCoi+HVHDclzaC4EmwxeEhw4Y NQzCxhjqqnG6sU6nFQvr8dSgioYFT9RLsso8= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to a.ns.nic.cz for nic.cz/SOA
	Received 1599 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1599 bytes) ;; HEADER SECTION ;; id = 47753 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA a.ns.nic.cz. hostmaster.nic.cz. ( 1327629782 ; Serial 10800 ; Refresh 3600 ; Retry 1209600 ; Expire 7200 ) ; Minimum TTL nic.cz. 1800 IN RRSIG SOA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. Qtg4KfWEDsG7OFkbVwIZ/0JDyjy1Dza+o1D9y5x0KlPeS FdEJVmJwHIjQ0uX0Ubbv2jWyBgNlWo9kmOe9nRenrO9JV HjjSVPs9MTGPz5U5r9XlHCoi+HVHDclzaC4EmwxeEhw4Y NQzCxhjqqnG6sU6nFQvr8dSgioYFT9RLsso8= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to a.ns.nic.cz for nic.cz/A
	Received 1568 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1568 bytes) ;; HEADER SECTION ;; id = 30969 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG A 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. SHdQqOZg9WRMVAZF/FK+SZHR2HmZea8D4ByvKjAVZjtdc Jufnyg3rJgbWD8icP3bKi89PBlxZj94O6FXpN8LUNNuiJ N2+WZ1dkBiR52MZ1xwXZLVoPIEcYMxlaaWL0lM4Xvhnw+ +NUhGK4wVLg4fI63hYdRgmugS1TINuZ2mVGo= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	nic.cz A RR has value 217.31.205.50
	Found 1 RRSIGs over A RRset
	`nic.cz. 1800 IN RRSIG A 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. SHdQqOZg9WRMVAZF/FK+SZHR2HmZea8D4ByvKjAVZjtdc Jufnyg3rJgbWD8icP3bKi89PBlxZj94O6FXpN8LUNNuiJ N2+WZ1dkBiR52MZ1xwXZLVoPIEcYMxlaaWL0lM4Xvhnw+ +NUhGK4wVLg4fI63hYdRgmugS1TINuZ2mVGo= )`
	RRSIG=7262 and DNSKEY=7262 verifies the A RRset
	Query to a.ns.nic.cz for nic.cz/AAAA
	Received 1580 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1580 bytes) ;; HEADER SECTION ;; id = 19052 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN AAAA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN AAAA 2001:1488:0:3:0:0:0:2 nic.cz. 1800 IN RRSIG AAAA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. q8oBzncCk8AFyTUzd7X7j/tiuX0Gwzjq/N7XiyTtQzHMB 6J+NdGUhRUykKsZ0I5q2K1Glujjl39i2p7s4BFxjMZJkl JhU5biQtoTuGkYsQcPVBso1DzfKa2HO5VpY9hm/+XJ7aB 9jt72X1Ttus1jUiLtkAWDuM2PHEO4D0JPsxQ= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	nic.cz AAAA RR has value 2001:1488:0:3:0:0:0:2
	Found 1 RRSIGs over AAAA RRset
	`nic.cz. 1800 IN RRSIG AAAA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. q8oBzncCk8AFyTUzd7X7j/tiuX0Gwzjq/N7XiyTtQzHMB 6J+NdGUhRUykKsZ0I5q2K1Glujjl39i2p7s4BFxjMZJkl JhU5biQtoTuGkYsQcPVBso1DzfKa2HO5VpY9hm/+XJ7aB 9jt72X1Ttus1jUiLtkAWDuM2PHEO4D0JPsxQ= )`
	RRSIG=7262 and DNSKEY=7262 verifies the AAAA RRset
	Query to a.ns.nic.cz for nic.cz/MX
	Received 2382 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (2382 bytes) ;; HEADER SECTION ;; id = 279 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 4 arcount = 21 ;; QUESTION SECTION (1 record) ;; nic.cz. IN MX ;; ANSWER SECTION (5 records) nic.cz. 1800 IN MX 10 mail.nic.cz. nic.cz. 1800 IN MX 15 mail4.nic.cz. nic.cz. 1800 IN MX 20 mx.cznic.org. nic.cz. 1800 IN MX 30 bh.nic.cz. nic.cz. 1800 IN RRSIG MX 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. nXB1OiFQyUsfSeX8u28S4XQ+J60G6xI5UfOHZHiyMJYxH XWA2F9IOXTl3ZVBExbGVxyxLRf4GHrO5z8a/rv9FU9S5O WJqL2rcjobai+6sWrlefCq42m0GdXpN+bkvXAOFNfVLdU VUK2ZTB6hHXpi1WsVQmmu8EJGN5dDCjOzmyA= ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; ADDITIONAL SECTION (21 records) mail.nic.cz. 1800 IN A 217.31.204.67 mail.nic.cz. 1800 IN RRSIG A 5 3 1800 20120210010302 ( 20120127010302 7262 nic.cz. kJWpGLBJ7OCkDLBP+A+roWzHpB/lqKCu1i1iveZf2Xvoo dFbvwThGHk628ATuQzE4qn3EdC0SspR/MFvHRgZ5H+bzk dkTyo+pLlGSfbQHWAppImXC0JBsnJ9X2qVkVvVKnaoBGW puX4AU5uhppFxDPNVn2Xew7KZE/VpCJdIaOQ= ) mail4.nic.cz. 1800 IN A 217.31.204.67 mail4.nic.cz. 1800 IN RRSIG A 5 3 1800 20120210010302 ( 20120127010302 7262 nic.cz. RryDkfaysaKhoC612deUnm96BL/T5Ndca3uGUUV17K2cf CgVMqwthqMypUQfH56PjOgC298XaZwZSmtxbNFfgNT+XF fbpgfDvL3RElfXR4hXqKqr2iZnkXwYnSvRgFMnobtQXcN bOlJPacVZPIm5muB1ZbofJz4qQwio43tRe7U= ) bh.nic.cz. 1800 IN A 217.31.204.252 bh.nic.cz. 1800 IN RRSIG A 5 3 1800 20120210010302 ( 20120127010302 7262 nic.cz. G5ygN11eSnhy7UVX48BrRgGI+rZ4TgmEQNBH0Od5VQxyG qOBfWOfhvHxRGJYSo1udIShD4DjRTDbKg+i/HdFhWoH5Z MUQm5XnSsiC/6gNVYe/FoVwvoKRoqJHhuUJPIxp2nGplg HmDv9XNYvXCzbMZdEcCuK04mTjRmx5yxMoBk= ) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) mail.nic.cz. 1800 IN AAAA 2001:1488:800:400:0:0:0:400 mail.nic.cz. 1800 IN RRSIG AAAA 5 3 1800 20120210010302 ( 20120127010302 7262 nic.cz. RUnehaEbVOnOEfqVIUnJKvjTteFJNEk1XX9gS4ICTwFrb MiUBR5fML6m9TIOb30UOE2aoYy027joiE2olJqTyniLGQ SZGs77OAxVoZdw/xIUYI8u3OgVpM7GwD0NzQ6Y1DqqXQ8 e/Jug5Yb7aXuQ/2xEL0+AMXXTp24DQh2LbyU= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	nic.cz MX RR has value 10 mail.nic.cz.
	nic.cz MX RR has value 15 mail4.nic.cz.
	nic.cz MX RR has value 20 mx.cznic.org.
	nic.cz MX RR has value 30 bh.nic.cz.
	Found 1 RRSIGs over MX RRset
	`nic.cz. 1800 IN RRSIG MX 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. nXB1OiFQyUsfSeX8u28S4XQ+J60G6xI5UfOHZHiyMJYxH XWA2F9IOXTl3ZVBExbGVxyxLRf4GHrO5z8a/rv9FU9S5O WJqL2rcjobai+6sWrlefCq42m0GdXpN+bkvXAOFNfVLdU VUK2ZTB6hHXpi1WsVQmmu8EJGN5dDCjOzmyA= )`
	RRSIG=7262 and DNSKEY=7262 verifies the MX RRset
	Query to a.ns.nic.cz for nic.cz/PTR
	Received 459 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (459 bytes) ;; HEADER SECTION ;; id = 63467 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; QUESTION SECTION (1 record) ;; nic.cz. IN PTR ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN SOA a.ns.nic.cz. hostmaster.nic.cz. ( 1327629782 ; Serial 10800 ; Refresh 3600 ; Retry 1209600 ; Expire 7200 ) ; Minimum TTL nic.cz. 1800 IN RRSIG SOA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. Qtg4KfWEDsG7OFkbVwIZ/0JDyjy1Dza+o1D9y5x0KlPeS FdEJVmJwHIjQ0uX0Ubbv2jWyBgNlWo9kmOe9nRenrO9JV HjjSVPs9MTGPz5U5r9XlHCoi+HVHDclzaC4EmwxeEhw4Y NQzCxhjqqnG6sU6nFQvr8dSgioYFT9RLsso8= ) nic.cz. 7200 IN NSEC 6to4.nic.cz. A AAAA DNSKEY MX NS NSEC RRSIG SOA nic.cz. 7200 IN RRSIG NSEC 5 2 7200 20120210010302 ( 20120127010302 7262 nic.cz. d5RQFRJb2q9YNamg7m8DDGrlILFdZFEQhWbJ6zQddxynT +WCa5xdcJYHxag4Awid9qaAjwEQ+HG25cQC5kJ0p53VOW xvdVQ+WKB+7eTdhOyHkCX/QwJh1DAaAEeG5rTbd+9fSZf CL/B/rQmOkRTa+OI3bW+HF3557mrgmvgVWxY= ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to a.ns.nic.cz for nic.cz/TXT
	Received 459 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (459 bytes) ;; HEADER SECTION ;; id = 49008 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; QUESTION SECTION (1 record) ;; nic.cz. IN TXT ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN SOA a.ns.nic.cz. hostmaster.nic.cz. ( 1327629782 ; Serial 10800 ; Refresh 3600 ; Retry 1209600 ; Expire 7200 ) ; Minimum TTL nic.cz. 1800 IN RRSIG SOA 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. Qtg4KfWEDsG7OFkbVwIZ/0JDyjy1Dza+o1D9y5x0KlPeS FdEJVmJwHIjQ0uX0Ubbv2jWyBgNlWo9kmOe9nRenrO9JV HjjSVPs9MTGPz5U5r9XlHCoi+HVHDclzaC4EmwxeEhw4Y NQzCxhjqqnG6sU6nFQvr8dSgioYFT9RLsso8= ) nic.cz. 7200 IN NSEC 6to4.nic.cz. A AAAA DNSKEY MX NS NSEC RRSIG SOA nic.cz. 7200 IN RRSIG NSEC 5 2 7200 20120210010302 ( 20120127010302 7262 nic.cz. d5RQFRJb2q9YNamg7m8DDGrlILFdZFEQhWbJ6zQddxynT +WCa5xdcJYHxag4Awid9qaAjwEQ+HG25cQC5kJ0p53VOW xvdVQ+WKB+7eTdhOyHkCX/QwJh1DAaAEeG5rTbd+9fSZf CL/B/rQmOkRTa+OI3bW+HF3557mrgmvgVWxY= ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to a.ns.nic.cz for nic.cz/NS
	Received 1386 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (1386 bytes) ;; HEADER SECTION ;; id = 53588 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 13 ;; QUESTION SECTION (1 record) ;; nic.cz. IN NS ;; ANSWER SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. ihLBn1hfoe9glekvohXEjCLDjIIaBeEUDRI+u1JlRvesP 93bRvrTthWk7Iltv69Q/DBCY6v9gWqvgAeSTTy81uQ5QO EmWjimahondEqdZ4kTJkuRa+gWZIyeI9TjQj6dfF8LItm M3CFJhTWke/2KDTPMNkBorbmvxmUf4aFvn04= ) b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. W0SMlWsyqJoVLF4kYzQkH9YSxfPNJrWJ5U0w5lNM5qIW6 m6sD6+6wfzzEFQPfhn72qqAIiTDdAECTMsoeVa9aFI++X /cjaKwIlU+y7Ak7I17tN4v1AXNXPHJeXq5qxS03yMD9Sg /rLYykExuUvYOOboovub1npY7y5SQPnh9QiU= ) d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN RRSIG A 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. otxlMaozRXuEmu6fo26LE4M7pUuKsM3qikmJpFWHgJkEY VbGUtsLyQPhpftonv7ef4wQ7t45/qLUbR8M1I0JPfgqiW p2gcJwbFl8BIw3TfFdP52Nqnv6UbCthyDzl9Q9WcAU8VG MSJVPRMwmDlcytUZKf7EFf7oqHHTwS+I5ycE= ) a.ns.nic.cz. 1800 IN AAAA 2001:678:f:0:0:0:0:1 a.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. PfxdX7poOXfgC5eTLSmv9mo/RqHEJLzQ1mS0ldq+sY/lp /45LSc2YjgBPzFmIplqcJglsf/AnwkVrZmfyAOnQIzRhP QHkYwKCA3c89fW9imT1uE3FL++3Fn9Qr7xTUzlUY4afyw WfvfYnWq9Nv634yiL2e9pni931RhLn+brrhI= ) b.ns.nic.cz. 1800 IN AAAA 2001:678:10:0:0:0:0:1 b.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. fxDkb+cwxCkSCrUfXfw0Y89qhDL7jaM3J/yS1hj8CMUQe Z9YmGCbcpveRaaWLefQ6HjzQg39MW6EV/A9J/8Z4yO3Ph MN++kLdBI7dnwY9g2vb0F/sMKhZLNwVul/hHAO21EVl5U rQiLn5DfRpSQk36uCfbVeRSloT3SpXrfE56c= ) d.ns.nic.cz. 1800 IN AAAA 2001:678:1:0:0:0:0:1 d.ns.nic.cz. 1800 IN RRSIG AAAA 5 4 1800 20120210010302 ( 20120127010302 7262 nic.cz. BO7dMc1eBEKjMXuk1eBqX/7yWGUxEhxIfkmAczX+Ah56w sLvSk0+2KasgjGjyDCz18OgrXFVJseQS7X5XIrDrOyncG jDxSOnHM2hbbHhbBfS30rJcYDVagq0ba4CyII67AB7N/g rMVh6hDf4NikO7FAtEvjBImnjfjjsLZoBfrc= ) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	nic.cz NS RR has value a.ns.nic.cz.
	nic.cz NS RR has value b.ns.nic.cz.
	nic.cz NS RR has value d.ns.nic.cz.
	Found 1 RRSIGs over NS RRset
	`nic.cz. 1800 IN RRSIG NS 5 2 1800 20120210010302 ( 20120127010302 7262 nic.cz. DTqhyvGjvE48nalsLtU0lsiM1qXW+0/vugmGF8SFjmf8n +5V8yF/tVXTCwPNAd5LVjB1K6ONOl8J9rG40rUJ71gp+3 xXd8IQP0XVPfb9jWPBsjNjpqSM67dfhB47HOyvB8du2oC jShB6rozoL3i2Ky1dp0zcMKnuTA6XERvPUb8= )`
	RRSIG=7262 and DNSKEY=7262 verifies the NS RRset

Move your mouse over any

symbols for remediation hints.

Want a second opinion? Test nic.cz at dnsviz.net.

↓ Advanced options

DNSSEC Analyzer r42 2012-01-24 19:19:21

Trust Anchor:
Name Servers:

Paste a DS or DNSKEY record into the field above to use a Trust Anchor that is not published in the DNS. Validation will begin at the owner name of the DS/DNSKEY record.

You may also supply alternative starting name servers, separated by whitespace or commas. The given name servers must be authoritative for the same zone as the Trust Anchor.