DNSSEC Debugger - nic.hsbc

Domain Name:

Time: 2024-05-17 02:36:18 UTC

Analyzing DNSSEC problems for nic.hsbc

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 62374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to a.root-servers.net for nic.hsbc/A
	Received 742 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 742 octets ;; HEADER SECTION ;; id = 35667 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) hsbc. 172800 IN NS a.nic.hsbc. hsbc. 172800 IN NS c.nic.hsbc. hsbc. 172800 IN NS ns2.dns.nic.hsbc. hsbc. 172800 IN NS b.nic.hsbc. hsbc. 172800 IN NS ns3.dns.nic.hsbc. hsbc. 172800 IN NS ns1.dns.nic.hsbc. hsbc. 86400 IN DS ( 16129 8 2 1e993a683fd63ba6fa436d235eddbb949901975649b11c628dfef8105264ae9d ) hsbc. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . PC0KyTEnmHP5vtnt1vWbLRLBn9BifYSpIB4+aA64pIik0BzwLzEw34/y7KNE6MJh0wZCCKFm7581 jeUTMAalk/pydli75u5lPLOgnPUJJ8rj6gGYyIFTIZoMwEdYPnA+QA7znOGyVPbLnGiVBbO26Mh2 6KdRvAYa5SImd2vrETSeaIcRWHmUsb8oVU8Tc3je7eHTHTVZMLrg4orYuW1IAVMlSIrdFIS5/jru Ahq28enSllkpbxLwYWW9Jp4In2gAtosJZfkOdhvLjeh9JxrSTpCVO1UaS6ApFbQSDL2M/sSDgwps HDZcp4POmP0hOTTNxZszn0hEdpG0IErL7F527w== ) ;; ADDITIONAL SECTION (13 records) a.nic.hsbc. 172800 IN A 37.209.192.9 a.nic.hsbc. 172800 IN AAAA 2001:dcd:1::9 c.nic.hsbc. 172800 IN A 37.209.196.9 c.nic.hsbc. 172800 IN AAAA 2001:dcd:3::9 ns2.dns.nic.hsbc. 172800 IN A 156.154.145.76 ns2.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1072::4c b.nic.hsbc. 172800 IN A 37.209.194.9 b.nic.hsbc. 172800 IN AAAA 2001:dcd:2::9 ns3.dns.nic.hsbc. 172800 IN A 156.154.159.76 ns3.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1073::4c ns1.dns.nic.hsbc. 172800 IN A 156.154.144.76 ns1.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1071::4c ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for hsbc/DNSKEY
	Received 754 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 754 octets ;; HEADER SECTION ;; id = 19769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hsbc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) hsbc. 172800 IN NS b.nic.hsbc. hsbc. 172800 IN NS a.nic.hsbc. hsbc. 172800 IN NS ns3.dns.nic.hsbc. hsbc. 172800 IN NS ns2.dns.nic.hsbc. hsbc. 172800 IN NS c.nic.hsbc. hsbc. 172800 IN NS ns1.dns.nic.hsbc. hsbc. 86400 IN DS ( 16129 8 2 1e993a683fd63ba6fa436d235eddbb949901975649b11c628dfef8105264ae9d ) hsbc. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . PC0KyTEnmHP5vtnt1vWbLRLBn9BifYSpIB4+aA64pIik0BzwLzEw34/y7KNE6MJh0wZCCKFm7581 jeUTMAalk/pydli75u5lPLOgnPUJJ8rj6gGYyIFTIZoMwEdYPnA+QA7znOGyVPbLnGiVBbO26Mh2 6KdRvAYa5SImd2vrETSeaIcRWHmUsb8oVU8Tc3je7eHTHTVZMLrg4orYuW1IAVMlSIrdFIS5/jru Ahq28enSllkpbxLwYWW9Jp4In2gAtosJZfkOdhvLjeh9JxrSTpCVO1UaS6ApFbQSDL2M/sSDgwps HDZcp4POmP0hOTTNxZszn0hEdpG0IErL7F527w== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.hsbc. 172800 IN A 156.154.159.76 ns2.dns.nic.hsbc. 172800 IN A 156.154.145.76 ns1.dns.nic.hsbc. 172800 IN A 156.154.144.76 c.nic.hsbc. 172800 IN A 37.209.196.9 b.nic.hsbc. 172800 IN A 37.209.194.9 a.nic.hsbc. 172800 IN A 37.209.192.9 ns3.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1073::4c ns2.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1072::4c ns1.dns.nic.hsbc. 172800 IN AAAA 2610:a1:1071::4c c.nic.hsbc. 172800 IN AAAA 2001:dcd:3::9 b.nic.hsbc. 172800 IN AAAA 2001:dcd:2::9 a.nic.hsbc. 172800 IN AAAA 2001:dcd:1::9 ;; { "EDNS-VERSION": 0 }
	Found child zone hsbc

hsbc

	Checking DS between . and hsbc
	Query to j.root-servers.net for hsbc/DS
	Received 368 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 368 octets ;; HEADER SECTION ;; id = 45111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hsbc. IN DS ;; ANSWER SECTION (2 records) hsbc. 86400 IN DS ( 16129 8 2 1e993a683fd63ba6fa436d235eddbb949901975649b11c628dfef8105264ae9d ) hsbc. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . PC0KyTEnmHP5vtnt1vWbLRLBn9BifYSpIB4+aA64pIik0BzwLzEw34/y7KNE6MJh0wZCCKFm7581 jeUTMAalk/pydli75u5lPLOgnPUJJ8rj6gGYyIFTIZoMwEdYPnA+QA7znOGyVPbLnGiVBbO26Mh2 6KdRvAYa5SImd2vrETSeaIcRWHmUsb8oVU8Tc3je7eHTHTVZMLrg4orYuW1IAVMlSIrdFIS5/jru Ahq28enSllkpbxLwYWW9Jp4In2gAtosJZfkOdhvLjeh9JxrSTpCVO1UaS6ApFbQSDL2M/sSDgwps HDZcp4POmP0hOTTNxZszn0hEdpG0IErL7F527w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for hsbc in the . zone
	DS=16129/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`hsbc. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . PC0KyTEnmHP5vtnt1vWbLRLBn9BifYSpIB4+aA64pIik0BzwLzEw34/y7KNE6MJh0wZCCKFm7581 jeUTMAalk/pydli75u5lPLOgnPUJJ8rj6gGYyIFTIZoMwEdYPnA+QA7znOGyVPbLnGiVBbO26Mh2 6KdRvAYa5SImd2vrETSeaIcRWHmUsb8oVU8Tc3je7eHTHTVZMLrg4orYuW1IAVMlSIrdFIS5/jru Ahq28enSllkpbxLwYWW9Jp4In2gAtosJZfkOdhvLjeh9JxrSTpCVO1UaS6ApFbQSDL2M/sSDgwps HDZcp4POmP0hOTTNxZszn0hEdpG0IErL7F527w== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=16129/SHA-256 is now in the chain-of-trust
	`hsbc. 86400 IN DS ( 16129 8 2 1e993a683fd63ba6fa436d235eddbb949901975649b11c628dfef8105264ae9d )`
	Query to c.nic.hsbc for hsbc/DNSKEY
	Received 1253 bytes from 37.209.196.9
	;; Response received from [37.209.196.9] 1253 octets ;; HEADER SECTION ;; id = 24155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hsbc. IN DNSKEY ;; ANSWER SECTION (5 records) hsbc. 7200 IN DNSKEY ( 257 3 8 AwEAAdvjOzIxtz/zWmKQamxWNIV4C8hd9deYTMrra4Y6Qm2fT4xYvl6VgXb5PJXM+yYYEszlExcH /qQfaeoJc9GOV3vgVDLApkHJUk2/ltFXIHxJa6YUqHJEMHwwSIu4ECaQBkQM2jpyiez30d13Wrj9 A3wbpFGdlD0t6R6vo1dntuWNGIZGK1D7HIiGMLuiB45wNJv6T+09eJ/9jSDFLQ25KfSOL6RisnB1 8wkNnA1q1nEv+o6+x538WHOkZEEKNAoi0v/G88w836X7N120kF0X2pMrs5IMvEObUD3hyJbocamM TEvSEhbUTT0lho65diwG8loetYBVnxJcuPspdnCmUAU= ) ; Key ID = 44836 hsbc. 7200 IN DNSKEY ( 256 3 8 AwEAAdCJHNf6VFcYU03+9LtSsrE0rOeHD6tAprlm/+QGD6pOuuLX2zlPspbyQNtFhVqWX601g1mZ PXb8NkqjWn5WjHA4JFm7JZ3+97ENhCJtBzaN+6/kjfcM1MgP/TL79hVZ6qCeopDls32vTk+51kGR I7MG2bVSj5Is4QONTqR2AoMUfiyN2reAsY7PW/K9kLfgFdMUeAJSjWWkVCHrjfGsMmM= ) ; Key ID = 7833 hsbc. 7200 IN DNSKEY ( 257 3 8 AwEAAcXkOCCOsh0JtrHIyrSAGzJb8mG9sFuro+T0KSCJfpG+kFcUD+m8rEzad6mXilgHm7N+dj6s odhUOS6gt//Ahk78y+P52njVPO/ACIW1zAltNz3cFOEpgoPND8BYESbx6TpCkPrA3PJjyBJZFVpR aLGRT7TGTY1SvyShinufstlpf0TlQjGajp+BlERPpo2h0QUp/BqzXrei69cp8wGZyuCHRlom++V/ osNmt87GvD0zPmcr/4c7MmZZDyfLmZY/k4GJ1nG55hefT+gz7IBlkPf73DFEGwbTRiGVdl1l0N58 rALORfQXCVveWmBjx2Htx7Zja2hu1T4QyAbUbIK78JU= ) ; Key ID = 16129 hsbc. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612021432 20240513020529 7833 hsbc. ymBNZoz8akTe9j9IxkHwHMqlYX9j3WfNiBF8EbPCe114oON2pybNCwjH9BGjZ6KKSs43nPrP7g6O nSKGAfQc2WNvlt9HsuyJ87JAY5zKN1Yu+Z/hRT21BpllYm6FjcbxsrWx7rmmj/8GGBWujVHDyu3Q tlsF9EMXuJA9vSIsNEedx9uJ6GOh7OWBtbTQT9WXtDdifuIJJosAWJqS+uz6nw== ) hsbc. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612021432 20240513020529 16129 hsbc. NnBFg0Irl6J0IOzTpEwsEK4qJNQOu2C6ps09i7QISZsq6xAXImh+umERWHGIslqm/w8ok47l7aN6 aSbrBGX2W/W8uZbMJsOIA4WBPsZKi6YKuWLKDjqBOi9+UH7wJJL8wPnQ1plpoQLXVAjGa8enAg9d dsedLksvg75HSQwtVOxpA83BA15x+2vOJk2csAXtY0v16LvB7krHjN6VPM6g7CS5h99VAnhy4+YV 87m7ulvfpyQrnNB4Tvuky483MzkmS3hHy2z9YVIw3jXJDP3/N88YYJH22Snqv4tvZ0vbyxvaRiOm ZxUdYhK6fVrMj3XYKMhWk9jJIwHRVGEZ2kPvLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for hsbc
	`hsbc. 7200 IN DNSKEY ( 257 3 8 AwEAAdvjOzIxtz/zWmKQamxWNIV4C8hd9deYTMrra4Y6Qm2fT4xYvl6VgXb5PJXM+yYYEszlExcH /qQfaeoJc9GOV3vgVDLApkHJUk2/ltFXIHxJa6YUqHJEMHwwSIu4ECaQBkQM2jpyiez30d13Wrj9 A3wbpFGdlD0t6R6vo1dntuWNGIZGK1D7HIiGMLuiB45wNJv6T+09eJ/9jSDFLQ25KfSOL6RisnB1 8wkNnA1q1nEv+o6+x538WHOkZEEKNAoi0v/G88w836X7N120kF0X2pMrs5IMvEObUD3hyJbocamM TEvSEhbUTT0lho65diwG8loetYBVnxJcuPspdnCmUAU= ) ; Key ID = 44836`
	`hsbc. 7200 IN DNSKEY ( 256 3 8 AwEAAdCJHNf6VFcYU03+9LtSsrE0rOeHD6tAprlm/+QGD6pOuuLX2zlPspbyQNtFhVqWX601g1mZ PXb8NkqjWn5WjHA4JFm7JZ3+97ENhCJtBzaN+6/kjfcM1MgP/TL79hVZ6qCeopDls32vTk+51kGR I7MG2bVSj5Is4QONTqR2AoMUfiyN2reAsY7PW/K9kLfgFdMUeAJSjWWkVCHrjfGsMmM= ) ; Key ID = 7833`
	`hsbc. 7200 IN DNSKEY ( 257 3 8 AwEAAcXkOCCOsh0JtrHIyrSAGzJb8mG9sFuro+T0KSCJfpG+kFcUD+m8rEzad6mXilgHm7N+dj6s odhUOS6gt//Ahk78y+P52njVPO/ACIW1zAltNz3cFOEpgoPND8BYESbx6TpCkPrA3PJjyBJZFVpR aLGRT7TGTY1SvyShinufstlpf0TlQjGajp+BlERPpo2h0QUp/BqzXrei69cp8wGZyuCHRlom++V/ osNmt87GvD0zPmcr/4c7MmZZDyfLmZY/k4GJ1nG55hefT+gz7IBlkPf73DFEGwbTRiGVdl1l0N58 rALORfQXCVveWmBjx2Htx7Zja2hu1T4QyAbUbIK78JU= ) ; Key ID = 16129`
	DNSKEY=16129/SEP is now in the chain-of-trust
	DS=16129/SHA-256 verifies DNSKEY=16129/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`hsbc. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612021432 20240513020529 7833 hsbc. ymBNZoz8akTe9j9IxkHwHMqlYX9j3WfNiBF8EbPCe114oON2pybNCwjH9BGjZ6KKSs43nPrP7g6O nSKGAfQc2WNvlt9HsuyJ87JAY5zKN1Yu+Z/hRT21BpllYm6FjcbxsrWx7rmmj/8GGBWujVHDyu3Q tlsF9EMXuJA9vSIsNEedx9uJ6GOh7OWBtbTQT9WXtDdifuIJJosAWJqS+uz6nw== )`
	`hsbc. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612021432 20240513020529 16129 hsbc. NnBFg0Irl6J0IOzTpEwsEK4qJNQOu2C6ps09i7QISZsq6xAXImh+umERWHGIslqm/w8ok47l7aN6 aSbrBGX2W/W8uZbMJsOIA4WBPsZKi6YKuWLKDjqBOi9+UH7wJJL8wPnQ1plpoQLXVAjGa8enAg9d dsedLksvg75HSQwtVOxpA83BA15x+2vOJk2csAXtY0v16LvB7krHjN6VPM6g7CS5h99VAnhy4+YV 87m7ulvfpyQrnNB4Tvuky483MzkmS3hHy2z9YVIw3jXJDP3/N88YYJH22Snqv4tvZ0vbyxvaRiOm ZxUdYhK6fVrMj3XYKMhWk9jJIwHRVGEZ2kPvLg== )`
	RRSIG=7833 and DNSKEY=7833 verifies the DNSKEY RRset
	RRSIG=16129 and DNSKEY=16129/SEP verifies the DNSKEY RRset
	DNSKEY=44836/SEP is now in the chain-of-trust
	DNSKEY=7833 is now in the chain-of-trust
	Query to b.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.194.9
	;; Response received from [37.209.194.9] 253 octets ;; HEADER SECTION ;; id = 44991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.nic.hsbc is authoritative for nic.hsbc
	Query to ns3.dns.nic.hsbc for nic.hsbc/DNSKEY
	Received 1265 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 1265 octets ;; HEADER SECTION ;; id = 44512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN DNSKEY ;; ANSWER SECTION (5 records) nic.hsbc. 600 IN DNSKEY ( 256 3 8 AwEAAbge/07MTzwowYzS8YqV/dZ188g53xnfp1V0MHMJrm5UAdYtsscEYG4V+FPgv1CydyOXPQaF OjP2K73Ndj1bS6Un4bdHw/3MDPGtdtc5lJt0oGjpByzkuG0tS6yJJDyeyhYDVnJmJAYT+iOK5Zh5 FFw2i4wN5FoEc5S72KF7b07wQs01+TQ9kdjCrc5oObTxiYEP03mOyoPON8ub/TyFaYc= ) ; Key ID = 12171 nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAdnIqTeMVkkp7yjuXdIFmrwzCxp9T3hsuQukd+5tUiATY6BinETHEk6+4eSA/U2PwBujT/yx 4i0p3R5gnBnBdlAYBvSYw/CYVoGWtutRbhj30UoKdJ88nkVZ4v8ejG6Ctom2z1OoMHo+edXtlYT3 jU1MeuvJ/6WR5WAvYfAt8gpYkxSA/xSI/+YnACizeZed3A7/4NHLIjdzIFkZKMuavIMPDJM2zvG+ GPKmFwoajnrjEpSyDz5SKfh9xosyXo9BE9nmn1Pcx/q5riFqz2r51vGLhKXM52wHRATgBtFkY5Jr 0udUmex/tQ86dpteXo2nI+aozyi3REHC6CYY51aojAc= ) ; Key ID = 24142 nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAbjQGxydgvib09CVRek0HmSlGjmlrm92dJNwxo4dUa2XcfKZQiRZJAwj8UoEsG5ktokgLFWo C1MEM3810YPVJpernimZv+gQHmW71xWWrKLPVErAFkq2dEiwwXxjfToPanBI290ZDRv9h9slLflu FlSrNrvK75oMh8sPvyOWexxdjDi+IPNEYOjPGEP4WxyO7JHgC0nIwNZfBx+fWMxy3x1QyJhiTaBV JtxfnCGQqpGTWIpvTeM97Yf4TiuXRn3l0UXDgMBmzebZ3ToD1pu7Ebuwy/hZKbn9zKdjdYanHoSi 6SZEv9hT1VbodtDARFzYKMY+kOy7Lrtd0AzgNKzycJE= ) ; Key ID = 28279 nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 28279 nic.hsbc. lDHBGebmwsJ3qQp/n5JmNR6PdRwAdmxct1hlj4o+V7dIN5PM+VNUgBuaBOOdvyQ8vvD+2Re5yFwm PRY7ccWg0B0LWNxU/fYcE2LYY3rUcPUc9vfA+bRgQbJJXcu3SsnFWYYWiPWGfTCnUkzcXffJj9h6 4b30Hc/4WuMWs8ZRiGt0zQ/QyZ+hHvNdAFiDyiaaxb0k85PvpAWhvDWs61oeYEyDOk09K9L1G3G0 pvKRcgG8Pt5lMXQwbSfbjMCIw0ucs+yHdGy9gPUnHoHEhKxTs0La+/p9fU5/LjieLQe8GqRp3V2E XYsR3+vB0LOLpqUp0EjPIBc7TaRrUDNsKvGgSA== ) nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 12171 nic.hsbc. tF2hQ8+0XuWL5EXsirCuT4BcWQ1OKVO430tw7CIJz7sJncKgpdfQbl9EB+ywp4LzNu94h/ZbaTdb XAo+0OJsQiwNS0djW73ZSBzL5s6JAMeVbtPA/nYkJ4/1UCN+EcEkHpv4QFnBAMQyrKMByMUF6H3+ 3Q+jE5UzzZV9rQE26q4W2KvZPsosuWX7k+tIUckuZ6p0ONcoa1d+4uhRupwHow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nic.hsbc
	Attempting to learn nameservers for nic.hsbc
	Query to b.nic.hsbc for nic.hsbc/NS
	Received 1015 bytes from 37.209.194.9
	;; Response received from [37.209.194.9] 1015 octets ;; HEADER SECTION ;; id = 19181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN NS ;; ANSWER SECTION (7 records) nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (15 records) a.nic.hsbc. 86400 IN A 37.209.192.9 b.nic.hsbc. 86400 IN A 37.209.194.9 c.nic.hsbc. 86400 IN A 37.209.196.9 ns1.dns.nic.hsbc. 518400 IN A 156.154.144.76 ns2.dns.nic.hsbc. 518400 IN A 156.154.145.76 ns3.dns.nic.hsbc. 518400 IN A 156.154.159.76 a.nic.hsbc. 86400 IN AAAA 2001:dcd:1::9 b.nic.hsbc. 86400 IN AAAA 2001:dcd:2::9 c.nic.hsbc. 86400 IN AAAA 2001:dcd:3::9 ns1.dns.nic.hsbc. 518400 IN AAAA 2610:a1:1071::4c ns2.dns.nic.hsbc. 518400 IN AAAA 2610:a1:1072::4c ns3.dns.nic.hsbc. 518400 IN AAAA 2610:a1:1073::4c a.nic.hsbc. 86400 IN RRSIG ( A 8 3 86400 20240610041303 20240511034955 12171 nic.hsbc. pYdDso0jDAnuoG/61ZqJXflCNRxG6PmYbJrUXlavOM/XRCRp9HWzJpJRRqVVU6YIV1tep2WLjG8h maILzMp09qqalLv4LbO1RxWKjNjZQk5FtZ+a2C1jcA/lnLu5rR34Jdn8ninXYz6F4tXPcFW6bnDq LFdiBvihkNXqProDhEUVnhdbzyw3OrjBMXYD9rJO5/KwPOUdo6LO64rJczA6FQ== ) a.nic.hsbc. 86400 IN RRSIG ( AAAA 8 3 86400 20240610041303 20240511034955 12171 nic.hsbc. fhzveAqzceIHg3YbZKSG9a6Iq/dPI2jiTxn/phqRl/mKdne76jX6w6py0lX98ccS+5nQs5yoHW2e enkFL7y33Z7SsaG+NCHluz1+GxLw35LpuOjgOQFxzvEoJKq1ET3NHkyZa4aNnpVNT9Tfsi3joe16 d3U9d63aH+oAe5CtooZPp9Jhhj+UCPyMZ7J2OWTVsU1wiz8CNifdZ0bP7fjq3Q== ) ;; { "EDNS-VERSION": 0 }
	Found nic.hsbc nameservers: c.nic.hsbc, ns1.dns.nic.hsbc, ns2.dns.nic.hsbc, ns3.dns.nic.hsbc, a.nic.hsbc, b.nic.hsbc

nic.hsbc

	Checking DS between hsbc and nic.hsbc
	Query to ns3.dns.nic.hsbc for nic.hsbc/DS
	Received 583 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 583 octets ;; HEADER SECTION ;; id = 11315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN DS ;; ANSWER SECTION (2 records) nic.hsbc. 3600 IN DS ( 28279 8 2 c26838d045a5029f2beac7cab7bbf08bab62a0496eaf93c8a7d572b49a5bacd6 ) nic.hsbc. 3600 IN RRSIG ( DS 8 2 3600 20240614213723 20240515204539 7833 hsbc. LwLnv/D4MFxLVQPNpXGnCPHbxYatWQZ8VStwN3iBQIzWjZm6jTbhMk1ASG54cq3/Lz1JOIbQZqcT FZyC2GOoKT2Xax71K5nj2I0zLMY3VZIQC1RGvH5ZhtWgrENwa35irk8Av37iQ/LGr2jeubLNCo0o O25wXKW7ib1a/JEiZafhlz6R29uCoXKuF7x1KQ3yIZa6yFgMNX7BcrvhwSMxGg== ) ;; AUTHORITY SECTION (7 records) hsbc. 86400 IN NS a.nic.hsbc. hsbc. 86400 IN NS b.nic.hsbc. hsbc. 86400 IN NS c.nic.hsbc. hsbc. 86400 IN NS ns1.dns.nic.hsbc. hsbc. 86400 IN NS ns2.dns.nic.hsbc. hsbc. 86400 IN NS ns3.dns.nic.hsbc. hsbc. 86400 IN RRSIG ( NS 8 1 86400 20240610031058 20240511021610 7833 hsbc. pKCb9FvVV4Fj5gib0c979LH7Sp3RlLab40JPoSKDUp/t5WeeGIyR/vDXw7IaN4plLDvZuI1KByfm 02W2zh9YqyFN8jhEGJIni7o5m8jWXnu/AQ3aZXrNH9sCUP+n/vWwG7LE4Z0wdffLHzwI2Jw1XnV/ bUkKfUQYKR3Uy6IAIO49kysyUdNKaDZwF2+BrNoPlmQosg//U7nlVWVIFB4yPg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nic.hsbc in the hsbc zone
	DS=28279/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nic.hsbc. 3600 IN RRSIG ( DS 8 2 3600 20240614213723 20240515204539 7833 hsbc. LwLnv/D4MFxLVQPNpXGnCPHbxYatWQZ8VStwN3iBQIzWjZm6jTbhMk1ASG54cq3/Lz1JOIbQZqcT FZyC2GOoKT2Xax71K5nj2I0zLMY3VZIQC1RGvH5ZhtWgrENwa35irk8Av37iQ/LGr2jeubLNCo0o O25wXKW7ib1a/JEiZafhlz6R29uCoXKuF7x1KQ3yIZa6yFgMNX7BcrvhwSMxGg== )`
	RRSIG=7833 and DNSKEY=7833 verifies the DS RRset
	DS=28279/SHA-256 is now in the chain-of-trust
	`nic.hsbc. 3600 IN DS ( 28279 8 2 c26838d045a5029f2beac7cab7bbf08bab62a0496eaf93c8a7d572b49a5bacd6 )`
	Query to ns3.dns.nic.hsbc for nic.hsbc/DNSKEY
	Received 1265 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 1265 octets ;; HEADER SECTION ;; id = 37720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN DNSKEY ;; ANSWER SECTION (5 records) nic.hsbc. 600 IN DNSKEY ( 256 3 8 AwEAAbge/07MTzwowYzS8YqV/dZ188g53xnfp1V0MHMJrm5UAdYtsscEYG4V+FPgv1CydyOXPQaF OjP2K73Ndj1bS6Un4bdHw/3MDPGtdtc5lJt0oGjpByzkuG0tS6yJJDyeyhYDVnJmJAYT+iOK5Zh5 FFw2i4wN5FoEc5S72KF7b07wQs01+TQ9kdjCrc5oObTxiYEP03mOyoPON8ub/TyFaYc= ) ; Key ID = 12171 nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAdnIqTeMVkkp7yjuXdIFmrwzCxp9T3hsuQukd+5tUiATY6BinETHEk6+4eSA/U2PwBujT/yx 4i0p3R5gnBnBdlAYBvSYw/CYVoGWtutRbhj30UoKdJ88nkVZ4v8ejG6Ctom2z1OoMHo+edXtlYT3 jU1MeuvJ/6WR5WAvYfAt8gpYkxSA/xSI/+YnACizeZed3A7/4NHLIjdzIFkZKMuavIMPDJM2zvG+ GPKmFwoajnrjEpSyDz5SKfh9xosyXo9BE9nmn1Pcx/q5riFqz2r51vGLhKXM52wHRATgBtFkY5Jr 0udUmex/tQ86dpteXo2nI+aozyi3REHC6CYY51aojAc= ) ; Key ID = 24142 nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAbjQGxydgvib09CVRek0HmSlGjmlrm92dJNwxo4dUa2XcfKZQiRZJAwj8UoEsG5ktokgLFWo C1MEM3810YPVJpernimZv+gQHmW71xWWrKLPVErAFkq2dEiwwXxjfToPanBI290ZDRv9h9slLflu FlSrNrvK75oMh8sPvyOWexxdjDi+IPNEYOjPGEP4WxyO7JHgC0nIwNZfBx+fWMxy3x1QyJhiTaBV JtxfnCGQqpGTWIpvTeM97Yf4TiuXRn3l0UXDgMBmzebZ3ToD1pu7Ebuwy/hZKbn9zKdjdYanHoSi 6SZEv9hT1VbodtDARFzYKMY+kOy7Lrtd0AzgNKzycJE= ) ; Key ID = 28279 nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 28279 nic.hsbc. lDHBGebmwsJ3qQp/n5JmNR6PdRwAdmxct1hlj4o+V7dIN5PM+VNUgBuaBOOdvyQ8vvD+2Re5yFwm PRY7ccWg0B0LWNxU/fYcE2LYY3rUcPUc9vfA+bRgQbJJXcu3SsnFWYYWiPWGfTCnUkzcXffJj9h6 4b30Hc/4WuMWs8ZRiGt0zQ/QyZ+hHvNdAFiDyiaaxb0k85PvpAWhvDWs61oeYEyDOk09K9L1G3G0 pvKRcgG8Pt5lMXQwbSfbjMCIw0ucs+yHdGy9gPUnHoHEhKxTs0La+/p9fU5/LjieLQe8GqRp3V2E XYsR3+vB0LOLpqUp0EjPIBc7TaRrUDNsKvGgSA== ) nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 12171 nic.hsbc. tF2hQ8+0XuWL5EXsirCuT4BcWQ1OKVO430tw7CIJz7sJncKgpdfQbl9EB+ywp4LzNu94h/ZbaTdb XAo+0OJsQiwNS0djW73ZSBzL5s6JAMeVbtPA/nYkJ4/1UCN+EcEkHpv4QFnBAMQyrKMByMUF6H3+ 3Q+jE5UzzZV9rQE26q4W2KvZPsosuWX7k+tIUckuZ6p0ONcoa1d+4uhRupwHow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nic.hsbc
	`nic.hsbc. 600 IN DNSKEY ( 256 3 8 AwEAAbge/07MTzwowYzS8YqV/dZ188g53xnfp1V0MHMJrm5UAdYtsscEYG4V+FPgv1CydyOXPQaF OjP2K73Ndj1bS6Un4bdHw/3MDPGtdtc5lJt0oGjpByzkuG0tS6yJJDyeyhYDVnJmJAYT+iOK5Zh5 FFw2i4wN5FoEc5S72KF7b07wQs01+TQ9kdjCrc5oObTxiYEP03mOyoPON8ub/TyFaYc= ) ; Key ID = 12171`
	`nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAdnIqTeMVkkp7yjuXdIFmrwzCxp9T3hsuQukd+5tUiATY6BinETHEk6+4eSA/U2PwBujT/yx 4i0p3R5gnBnBdlAYBvSYw/CYVoGWtutRbhj30UoKdJ88nkVZ4v8ejG6Ctom2z1OoMHo+edXtlYT3 jU1MeuvJ/6WR5WAvYfAt8gpYkxSA/xSI/+YnACizeZed3A7/4NHLIjdzIFkZKMuavIMPDJM2zvG+ GPKmFwoajnrjEpSyDz5SKfh9xosyXo9BE9nmn1Pcx/q5riFqz2r51vGLhKXM52wHRATgBtFkY5Jr 0udUmex/tQ86dpteXo2nI+aozyi3REHC6CYY51aojAc= ) ; Key ID = 24142`
	`nic.hsbc. 600 IN DNSKEY ( 257 3 8 AwEAAbjQGxydgvib09CVRek0HmSlGjmlrm92dJNwxo4dUa2XcfKZQiRZJAwj8UoEsG5ktokgLFWo C1MEM3810YPVJpernimZv+gQHmW71xWWrKLPVErAFkq2dEiwwXxjfToPanBI290ZDRv9h9slLflu FlSrNrvK75oMh8sPvyOWexxdjDi+IPNEYOjPGEP4WxyO7JHgC0nIwNZfBx+fWMxy3x1QyJhiTaBV JtxfnCGQqpGTWIpvTeM97Yf4TiuXRn3l0UXDgMBmzebZ3ToD1pu7Ebuwy/hZKbn9zKdjdYanHoSi 6SZEv9hT1VbodtDARFzYKMY+kOy7Lrtd0AzgNKzycJE= ) ; Key ID = 28279`
	DNSKEY=28279/SEP is now in the chain-of-trust
	DS=28279/SHA-256 verifies DNSKEY=28279/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 28279 nic.hsbc. lDHBGebmwsJ3qQp/n5JmNR6PdRwAdmxct1hlj4o+V7dIN5PM+VNUgBuaBOOdvyQ8vvD+2Re5yFwm PRY7ccWg0B0LWNxU/fYcE2LYY3rUcPUc9vfA+bRgQbJJXcu3SsnFWYYWiPWGfTCnUkzcXffJj9h6 4b30Hc/4WuMWs8ZRiGt0zQ/QyZ+hHvNdAFiDyiaaxb0k85PvpAWhvDWs61oeYEyDOk09K9L1G3G0 pvKRcgG8Pt5lMXQwbSfbjMCIw0ucs+yHdGy9gPUnHoHEhKxTs0La+/p9fU5/LjieLQe8GqRp3V2E XYsR3+vB0LOLpqUp0EjPIBc7TaRrUDNsKvGgSA== )`
	`nic.hsbc. 600 IN RRSIG ( DNSKEY 8 2 600 20240611163745 20240512154516 12171 nic.hsbc. tF2hQ8+0XuWL5EXsirCuT4BcWQ1OKVO430tw7CIJz7sJncKgpdfQbl9EB+ywp4LzNu94h/ZbaTdb XAo+0OJsQiwNS0djW73ZSBzL5s6JAMeVbtPA/nYkJ4/1UCN+EcEkHpv4QFnBAMQyrKMByMUF6H3+ 3Q+jE5UzzZV9rQE26q4W2KvZPsosuWX7k+tIUckuZ6p0ONcoa1d+4uhRupwHow== )`
	RRSIG=28279 and DNSKEY=28279/SEP verifies the DNSKEY RRset
	RRSIG=12171 and DNSKEY=12171 verifies the DNSKEY RRset
	DNSKEY=12171 is now in the chain-of-trust
	DNSKEY=24142/SEP is now in the chain-of-trust
	Query to ns1.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.144.76
	;; Response received from [156.154.144.76] 559 octets ;; HEADER SECTION ;; id = 42261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.dns.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to ns3.dns.nic.hsbc for nic.hsbc/SOA
	Received 598 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 598 octets ;; HEADER SECTION ;; id = 37975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN SOA ;; ANSWER SECTION (2 records) nic.hsbc. 900 IN SOA ( ns1.dns.nic.hsbc. admin.tldns.godaddy. 1715859734 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) nic.hsbc. 900 IN RRSIG ( SOA 8 2 900 20240615114214 20240516104214 12171 nic.hsbc. lU0CnI8jI0v16v2xZeHKF7Lp7h7PpCAYT3ekUcbYedpeHlV7pFm5WAGk8+58POqiEdFJUhDBUxWj 1/YN8StAb0itZ+q6A1ci1xDBeJw5GdqMwSmxomEFnz4DRnos/cw9pNCb8j7Y8ZOswt6BRcxmQZf3 B48JMkU9nSssHkvHcZs1SCnz6pabb+4v/ZnAVJrt7AutIX30cCughQwsOnOPsA== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.nic.hsbc for nic.hsbc/SOA
	Received 308 bytes from 37.209.196.9
	;; Response received from [37.209.196.9] 308 octets ;; HEADER SECTION ;; id = 37126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN SOA ;; ANSWER SECTION (2 records) nic.hsbc. 900 IN SOA ( ns1.dns.nic.hsbc. admin.tldns.godaddy. 1715859734 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) nic.hsbc. 900 IN RRSIG ( SOA 8 2 900 20240615114214 20240516104214 12171 nic.hsbc. lU0CnI8jI0v16v2xZeHKF7Lp7h7PpCAYT3ekUcbYedpeHlV7pFm5WAGk8+58POqiEdFJUhDBUxWj 1/YN8StAb0itZ+q6A1ci1xDBeJw5GdqMwSmxomEFnz4DRnos/cw9pNCb8j7Y8ZOswt6BRcxmQZf3 B48JMkU9nSssHkvHcZs1SCnz6pabb+4v/ZnAVJrt7AutIX30cCughQwsOnOPsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.nic.hsbc for nic.hsbc/SOA
	Received 308 bytes from 37.209.192.9
	;; Response received from [37.209.192.9] 308 octets ;; HEADER SECTION ;; id = 26147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN SOA ;; ANSWER SECTION (2 records) nic.hsbc. 900 IN SOA ( ns1.dns.nic.hsbc. admin.tldns.godaddy. 1715859734 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) nic.hsbc. 900 IN RRSIG ( SOA 8 2 900 20240615114214 20240516104214 12171 nic.hsbc. lU0CnI8jI0v16v2xZeHKF7Lp7h7PpCAYT3ekUcbYedpeHlV7pFm5WAGk8+58POqiEdFJUhDBUxWj 1/YN8StAb0itZ+q6A1ci1xDBeJw5GdqMwSmxomEFnz4DRnos/cw9pNCb8j7Y8ZOswt6BRcxmQZf3 B48JMkU9nSssHkvHcZs1SCnz6pabb+4v/ZnAVJrt7AutIX30cCughQwsOnOPsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.nic.hsbc for nic.hsbc/SOA
	Received 308 bytes from 37.209.194.9
	;; Response received from [37.209.194.9] 308 octets ;; HEADER SECTION ;; id = 54021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN SOA ;; ANSWER SECTION (2 records) nic.hsbc. 900 IN SOA ( ns1.dns.nic.hsbc. admin.tldns.godaddy. 1715859734 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) nic.hsbc. 900 IN RRSIG ( SOA 8 2 900 20240615114214 20240516104214 12171 nic.hsbc. lU0CnI8jI0v16v2xZeHKF7Lp7h7PpCAYT3ekUcbYedpeHlV7pFm5WAGk8+58POqiEdFJUhDBUxWj 1/YN8StAb0itZ+q6A1ci1xDBeJw5GdqMwSmxomEFnz4DRnos/cw9pNCb8j7Y8ZOswt6BRcxmQZf3 B48JMkU9nSssHkvHcZs1SCnz6pabb+4v/ZnAVJrt7AutIX30cCughQwsOnOPsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.dns.nic.hsbc for nic.hsbc/SOA
	Received 598 bytes from 156.154.145.76
	;; Response received from [156.154.145.76] 598 octets ;; HEADER SECTION ;; id = 32187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN SOA ;; ANSWER SECTION (2 records) nic.hsbc. 900 IN SOA ( ns1.dns.nic.hsbc. admin.tldns.godaddy. 1715859734 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) nic.hsbc. 900 IN RRSIG ( SOA 8 2 900 20240615114214 20240516104214 12171 nic.hsbc. lU0CnI8jI0v16v2xZeHKF7Lp7h7PpCAYT3ekUcbYedpeHlV7pFm5WAGk8+58POqiEdFJUhDBUxWj 1/YN8StAb0itZ+q6A1ci1xDBeJw5GdqMwSmxomEFnz4DRnos/cw9pNCb8j7Y8ZOswt6BRcxmQZf3 B48JMkU9nSssHkvHcZs1SCnz6pabb+4v/ZnAVJrt7AutIX30cCughQwsOnOPsA== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.144.76
	;; Response received from [156.154.144.76] 559 octets ;; HEADER SECTION ;; id = 31811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

nic.hsbc

	Query to c.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.196.9
	;; Response received from [37.209.196.9] 253 octets ;; HEADER SECTION ;; id = 45044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to c.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.196.9
	;; Response received from [37.209.196.9] 253 octets ;; HEADER SECTION ;; id = 32109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

nic.hsbc

	Query to a.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.192.9
	;; Response received from [37.209.192.9] 253 octets ;; HEADER SECTION ;; id = 43693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to a.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.192.9
	;; Response received from [37.209.192.9] 253 octets ;; HEADER SECTION ;; id = 23689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

nic.hsbc

	Query to b.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.194.9
	;; Response received from [37.209.194.9] 253 octets ;; HEADER SECTION ;; id = 18957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to b.nic.hsbc for nic.hsbc/A
	Received 253 bytes from 37.209.194.9
	;; Response received from [37.209.194.9] 253 octets ;; HEADER SECTION ;; id = 21141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

nic.hsbc

	Query to ns2.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.145.76
	;; Response received from [156.154.145.76] 559 octets ;; HEADER SECTION ;; id = 28153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.dns.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to ns2.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.145.76
	;; Response received from [156.154.145.76] 559 octets ;; HEADER SECTION ;; id = 58317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

nic.hsbc

	Query to ns3.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 559 octets ;; HEADER SECTION ;; id = 14649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.dns.nic.hsbc is authoritative for nic.hsbc
	Found RRSIG signed by nic.hsbc zone
	Query to ns3.dns.nic.hsbc for nic.hsbc/A
	Received 559 bytes from 156.154.159.76
	;; Response received from [156.154.159.76] 559 octets ;; HEADER SECTION ;; id = 30050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.hsbc. IN A ;; ANSWER SECTION (2 records) nic.hsbc. 600 IN A 94.199.146.112 nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== ) ;; AUTHORITY SECTION (7 records) nic.hsbc. 86400 IN NS a.nic.hsbc. nic.hsbc. 86400 IN NS b.nic.hsbc. nic.hsbc. 86400 IN NS c.nic.hsbc. nic.hsbc. 86400 IN NS ns1.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns2.dns.nic.hsbc. nic.hsbc. 86400 IN NS ns3.dns.nic.hsbc. nic.hsbc. 86400 IN RRSIG ( NS 8 2 86400 20240612060722 20240513051100 12171 nic.hsbc. UNb1KTafHdzVX0n8AA2IPYMnHcQCBTWoZj0eh8qH+ahB68FvkhwKISD91vmhxc9joxscBIkEL8MO fy9foTgWofapTssEs/9Z3AVaDibuZpi/l89VjIEuTsLX/4hX3b1Gb5P4rZuUMn8tu+7ZoWYr0akW IwtffDbmZp9VPJG5KpJalzIwrdqvugEuVeqik1hrgM/n7Q8WOEsfXnhEaL/wLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.hsbc A RR has value 94.199.146.112
	Found 1 RRSIGs over A RRset
	`nic.hsbc. 600 IN RRSIG ( A 8 2 600 20240614054317 20240515050234 12171 nic.hsbc. q6v/fg4is/yN2FHoG9X5OMa2mBUuPnnuDFZvcddPOMzDMHJ0Ibht28tWR33JLD9uxjxDOSDqd09Y gUcAAFM3iFJr31qwtsN5QhgXNMASMBR4YK3jOIa9BMySDPZsf2aEjV10mKUJVCJPwQ2GIJ1E+i2t 5S/RyPcy6mBq0Sa9SIWMx0aRYP1R/qxx20soUk9cj61yUa8sZS4bO24dC2yPJQ== )`
	RRSIG=12171 and DNSKEY=12171 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.hsbc at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: