DNSSEC Debugger - www.jpcert.or.jp

Domain Name:

Time: 2024-05-19 05:51:57 UTC

Analyzing DNSSEC problems for www.jpcert.or.jp

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 26411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for www.jpcert.or.jp/A
	Received 840 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 840 octets ;; HEADER SECTION ;; id = 36486 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 16 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.jpcert.or.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS h.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 86400 IN DS ( 22111 8 2 e5a43534b9beafbf35d6c6b3eaa1e9ae7fe2b4d8961252126fd67b5172322286 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cR2QehBIvmHBA/DLaeYBWewUxDM+qaouJ8isuBdU5kSl1cfRRw7E5dowIqgUh4OKi4P2qlewTXnL EBXTl0PE6fqx6YAOrlCCDfLikoPv7vZXeZiiAxA8IpobqEzVbAGdwUaDp2krcf1cD3FmmpVkV14u nyfkl0BG4NKh0eKzaryJb9PBSef8rJImJXFH8KDnkU0aozErI8VH2t973CHI/LYsnw1twJJ7Tzfu nZxt8t+RKpsEax1R+uQufLQLlLFzxY6Vt+LKwYqkrqYu2F+hzFwXGjIwWdrXLVn/lHkGMH2U24+i QL1EiGUIVS5jkIM/UmSRRf1mY+iJrP4MqrAqAw== ) ;; ADDITIONAL SECTION (16 records) h.dns.jp. 172800 IN A 161.232.72.25 g.dns.jp. 172800 IN A 203.119.40.1 f.dns.jp. 172800 IN A 150.100.6.8 e.dns.jp. 172800 IN A 192.50.43.53 d.dns.jp. 172800 IN A 210.138.175.244 c.dns.jp. 172800 IN A 156.154.100.5 b.dns.jp. 172800 IN A 202.12.30.131 a.dns.jp. 172800 IN A 203.119.1.1 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 d.dns.jp. 172800 IN AAAA 2001:240::53 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 b.dns.jp. 172800 IN AAAA 2001:dc2::1 a.dns.jp. 172800 IN AAAA 2001:dc4::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for jp/DNSKEY
	Received 822 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 822 octets ;; HEADER SECTION ;; id = 32591 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 16 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 86400 IN DS ( 22111 8 2 e5a43534b9beafbf35d6c6b3eaa1e9ae7fe2b4d8961252126fd67b5172322286 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cR2QehBIvmHBA/DLaeYBWewUxDM+qaouJ8isuBdU5kSl1cfRRw7E5dowIqgUh4OKi4P2qlewTXnL EBXTl0PE6fqx6YAOrlCCDfLikoPv7vZXeZiiAxA8IpobqEzVbAGdwUaDp2krcf1cD3FmmpVkV14u nyfkl0BG4NKh0eKzaryJb9PBSef8rJImJXFH8KDnkU0aozErI8VH2t973CHI/LYsnw1twJJ7Tzfu nZxt8t+RKpsEax1R+uQufLQLlLFzxY6Vt+LKwYqkrqYu2F+hzFwXGjIwWdrXLVn/lHkGMH2U24+i QL1EiGUIVS5jkIM/UmSRRf1mY+iJrP4MqrAqAw== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 b.dns.jp. 172800 IN A 202.12.30.131 c.dns.jp. 172800 IN A 156.154.100.5 d.dns.jp. 172800 IN A 210.138.175.244 e.dns.jp. 172800 IN A 192.50.43.53 f.dns.jp. 172800 IN A 150.100.6.8 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Found child zone jp

	Checking DS between . and jp
	Query to d.root-servers.net for jp/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 30055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DS ;; ANSWER SECTION (2 records) jp. 86400 IN DS ( 22111 8 2 e5a43534b9beafbf35d6c6b3eaa1e9ae7fe2b4d8961252126fd67b5172322286 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cR2QehBIvmHBA/DLaeYBWewUxDM+qaouJ8isuBdU5kSl1cfRRw7E5dowIqgUh4OKi4P2qlewTXnL EBXTl0PE6fqx6YAOrlCCDfLikoPv7vZXeZiiAxA8IpobqEzVbAGdwUaDp2krcf1cD3FmmpVkV14u nyfkl0BG4NKh0eKzaryJb9PBSef8rJImJXFH8KDnkU0aozErI8VH2t973CHI/LYsnw1twJJ7Tzfu nZxt8t+RKpsEax1R+uQufLQLlLFzxY6Vt+LKwYqkrqYu2F+hzFwXGjIwWdrXLVn/lHkGMH2U24+i QL1EiGUIVS5jkIM/UmSRRf1mY+iJrP4MqrAqAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jp in the . zone
	DS=22111/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jp. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cR2QehBIvmHBA/DLaeYBWewUxDM+qaouJ8isuBdU5kSl1cfRRw7E5dowIqgUh4OKi4P2qlewTXnL EBXTl0PE6fqx6YAOrlCCDfLikoPv7vZXeZiiAxA8IpobqEzVbAGdwUaDp2krcf1cD3FmmpVkV14u nyfkl0BG4NKh0eKzaryJb9PBSef8rJImJXFH8KDnkU0aozErI8VH2t973CHI/LYsnw1twJJ7Tzfu nZxt8t+RKpsEax1R+uQufLQLlLFzxY6Vt+LKwYqkrqYu2F+hzFwXGjIwWdrXLVn/lHkGMH2U24+i QL1EiGUIVS5jkIM/UmSRRf1mY+iJrP4MqrAqAw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=22111/SHA-256 is now in the chain-of-trust
	`jp. 86400 IN DS ( 22111 8 2 e5a43534b9beafbf35d6c6b3eaa1e9ae7fe2b4d8961252126fd67b5172322286 )`
	Query to d.dns.jp for jp/DNSKEY
	Received 893 bytes from 210.138.175.244
	;; Response received from [210.138.175.244] 893 octets ;; HEADER SECTION ;; id = 30351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (4 records) jp. 86400 IN DNSKEY ( 256 3 8 AwEAAeCLclwWpZXcrlKEYfYq2ARrxe9zvA6vBe2rcqjuNwP4FagyzkWBwLeHj29jqyJT1CWip9qx DZhwJ1W7ohmBxIHQzxQgKHKCQeVHKNQxloVfLCpZ8ax7O/x6mu8pA2XsCl8P6gX9Zbm+7k/4FQx3 14PbAHcp6CLsebSP9hjY3/q7 ) ; Key ID = 51420 jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcCDiqIfFSEaMXsaeyb0ERKzt4k41wDWLwK7IPsfNAUhPihkhJvurr+1XYZOjr38bW0anrWH skoXyI8F675QWRGotsU//s7f3E0adVsT1k78gjTDn0yP0LlN5YcRwS0AXevfIvcJd2O+asyBe41x Xp5MtyPwRv1HC452icb/YMWf ) ; Key ID = 23565 jp. 86400 IN DNSKEY ( 257 3 8 AwEAAbrW7WPh2xPcwQsxNYrAD1pM/GBe/3yBrEuK2+7kHv5jH538EXW6/bPwfBI5ie6qhVAxCQlR x/awLZQxn+MO2AUWLcBcsDNM5/+9BUHIaKEOdENgfUSelDzyGU4dRE57Fe48jQgETFkGZllylP3c VJXtmSJflZzYBm6rBgeG1VEoFD9yOEgPBiyqSFs4WCGejZU29z+P4Clzwq51G4bT4Ihco3kLm50g ZAmPmv9FUd/76lYqXeZnZWY9z7Dx6SMDllXGr0aXeB5Be+tBBGXuOmu3h//eHuAnhdfSwOygqGt2 59gQglVZuo4kFyu/aGp6Hjd/hfwRvByLv7SBdHPyyRM= ) ; Key ID = 22111 jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240707184500 20240507184500 22111 jp. SZez1iW0M6dRAuckvBLgb+VDXGW0OJqjg7XIXdvU4HdQ6qFkCR+KmLjJeF90mjHgMEdkRnDDkCyC 4lKXTNB3NIpBJX28XTLDW7Jtn4eh071gJTxAzQBGttwbbBg0DYFhbiP6k9dPudcOgghWO6KbO2qB nt2r18SO6+3HT6KpxWuyqpkVePqRML0XtbNtxJgvMb4lbebszC4u2deBRj9xU7OMkOnKbp9PTt1M jGEBLyeVc4MI54KEb19XFd9vZsbG7ZP4grXfqY3VKwc9UfJ3Y10a54An99Ebo67PnysLeo7zceA0 QumJVwlZoRzgqgqc4ossViXcEZq0qO2xGyySkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for jp
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAeCLclwWpZXcrlKEYfYq2ARrxe9zvA6vBe2rcqjuNwP4FagyzkWBwLeHj29jqyJT1CWip9qx DZhwJ1W7ohmBxIHQzxQgKHKCQeVHKNQxloVfLCpZ8ax7O/x6mu8pA2XsCl8P6gX9Zbm+7k/4FQx3 14PbAHcp6CLsebSP9hjY3/q7 ) ; Key ID = 51420`
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcCDiqIfFSEaMXsaeyb0ERKzt4k41wDWLwK7IPsfNAUhPihkhJvurr+1XYZOjr38bW0anrWH skoXyI8F675QWRGotsU//s7f3E0adVsT1k78gjTDn0yP0LlN5YcRwS0AXevfIvcJd2O+asyBe41x Xp5MtyPwRv1HC452icb/YMWf ) ; Key ID = 23565`
	`jp. 86400 IN DNSKEY ( 257 3 8 AwEAAbrW7WPh2xPcwQsxNYrAD1pM/GBe/3yBrEuK2+7kHv5jH538EXW6/bPwfBI5ie6qhVAxCQlR x/awLZQxn+MO2AUWLcBcsDNM5/+9BUHIaKEOdENgfUSelDzyGU4dRE57Fe48jQgETFkGZllylP3c VJXtmSJflZzYBm6rBgeG1VEoFD9yOEgPBiyqSFs4WCGejZU29z+P4Clzwq51G4bT4Ihco3kLm50g ZAmPmv9FUd/76lYqXeZnZWY9z7Dx6SMDllXGr0aXeB5Be+tBBGXuOmu3h//eHuAnhdfSwOygqGt2 59gQglVZuo4kFyu/aGp6Hjd/hfwRvByLv7SBdHPyyRM= ) ; Key ID = 22111`
	DNSKEY=22111/SEP is now in the chain-of-trust
	DS=22111/SHA-256 verifies DNSKEY=22111/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240707184500 20240507184500 22111 jp. SZez1iW0M6dRAuckvBLgb+VDXGW0OJqjg7XIXdvU4HdQ6qFkCR+KmLjJeF90mjHgMEdkRnDDkCyC 4lKXTNB3NIpBJX28XTLDW7Jtn4eh071gJTxAzQBGttwbbBg0DYFhbiP6k9dPudcOgghWO6KbO2qB nt2r18SO6+3HT6KpxWuyqpkVePqRML0XtbNtxJgvMb4lbebszC4u2deBRj9xU7OMkOnKbp9PTt1M jGEBLyeVc4MI54KEb19XFd9vZsbG7ZP4grXfqY3VKwc9UfJ3Y10a54An99Ebo67PnysLeo7zceA0 QumJVwlZoRzgqgqc4ossViXcEZq0qO2xGyySkA== )`
	RRSIG=22111 and DNSKEY=22111/SEP verifies the DNSKEY RRset
	DNSKEY=51420 is now in the chain-of-trust
	DNSKEY=23565 is now in the chain-of-trust
	Query to h.dns.jp for www.jpcert.or.jp/A
	Received 394 bytes from 161.232.72.25
	;; Response received from [161.232.72.25] 394 octets ;; HEADER SECTION ;; id = 33124 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.jpcert.or.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.info. jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.jp. jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.net. jpcert.or.jp. 7200 IN DS ( 7865 13 2 3cdaf12de3107b865b66fda5c49ef8ff0f71661f09e6a09783629c3584edaa74 ) jpcert.or.jp. 7200 IN RRSIG ( DS 8 3 7200 20240617174502 20240518174502 23565 jp. wAwn4iWESZKFGSFZLok7whT7iuZiAIsf5I0xvKHpophSq162v9aj5wdUBCX3JWxQ0BTPCGXI770t mwkWb0E8lr/ti98mYZSGxnRs6qklwQn2MArMSxrkcq807yOzyMptdEDN3VNAFQ+pDXE1PsCYxy1S 4CnWFcG7BGFfY5UxUQg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.dns.jp for or.jp/DNSKEY
	Received 486 bytes from 192.50.43.53
	;; Response received from [192.50.43.53] 486 octets ;; HEADER SECTION ;; id = 34907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; or.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1716097502 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) jp. 900 IN RRSIG ( SOA 8 1 86400 20240617174502 20240518174502 23565 jp. p56JZcfYBIXGyrBD5oPika78G1w0FwL3xlHZH6Zs49k+LMf6TLWvvSa0MIPT1nWHZiT9MD0YJwoE IjUFUV8waMVHcfTThJzp20EHwxRn5NxWv01uFgo4XlABSaVAu4Ps6FbbXRNWFF1wALYIoDfCbAIx ZZsptA7j88Mg7zbGKpU= ) S6FIR9SDOEHNM8JR9R47J0L30SES5AI6.jp. 900 IN NSEC3 ( 1 1 0 - s6g62kn3m04kuq71betcjscud053aiq8 TXT RRSIG ) S6FIR9SDOEHNM8JR9R47J0L30SES5AI6.jp. 900 IN RRSIG ( NSEC3 8 2 900 20240617174502 20240518174502 23565 jp. m9jdj7MOF/FoCUWVQB47SimZqEoSnJQepRg6lgu+OiktFodEXvDAxqS1Jzfml4l5a0Kt7Fh42l8M FFoghfxF2apcPhQKOYRqEiUedmujverianOPBE2qkQGgR5J22NgklbBMkmMgMs6876+mx9k9hzi1 BqiHli5dMR27xq03EEI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to h.dns.jp for jpcert.or.jp/DNSKEY
	Received 390 bytes from 161.232.72.25
	;; Response received from [161.232.72.25] 390 octets ;; HEADER SECTION ;; id = 58465 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jpcert.or.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.jp. jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.net. jpcert.or.jp. 86400 IN NS ns017-100a7mrhgjjacs4t.1.d-53.info. jpcert.or.jp. 7200 IN DS ( 7865 13 2 3cdaf12de3107b865b66fda5c49ef8ff0f71661f09e6a09783629c3584edaa74 ) jpcert.or.jp. 7200 IN RRSIG ( DS 8 3 7200 20240617174502 20240518174502 23565 jp. wAwn4iWESZKFGSFZLok7whT7iuZiAIsf5I0xvKHpophSq162v9aj5wdUBCX3JWxQ0BTPCGXI770t mwkWb0E8lr/ti98mYZSGxnRs6qklwQn2MArMSxrkcq807yOzyMptdEDN3VNAFQ+pDXE1PsCYxy1S 4CnWFcG7BGFfY5UxUQg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone jpcert.or.jp

jpcert.or.jp

	Checking DS between jp and jpcert.or.jp
	Query to g.dns.jp for jpcert.or.jp/DS
	Received 251 bytes from 203.119.40.1
	;; Response received from [203.119.40.1] 251 octets ;; HEADER SECTION ;; id = 23382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jpcert.or.jp. IN DS ;; ANSWER SECTION (2 records) jpcert.or.jp. 7200 IN DS ( 7865 13 2 3cdaf12de3107b865b66fda5c49ef8ff0f71661f09e6a09783629c3584edaa74 ) jpcert.or.jp. 7200 IN RRSIG ( DS 8 3 7200 20240617174502 20240518174502 23565 jp. wAwn4iWESZKFGSFZLok7whT7iuZiAIsf5I0xvKHpophSq162v9aj5wdUBCX3JWxQ0BTPCGXI770t mwkWb0E8lr/ti98mYZSGxnRs6qklwQn2MArMSxrkcq807yOzyMptdEDN3VNAFQ+pDXE1PsCYxy1S 4CnWFcG7BGFfY5UxUQg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jpcert.or.jp in the jp zone
	DS=7865/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`jpcert.or.jp. 7200 IN RRSIG ( DS 8 3 7200 20240617174502 20240518174502 23565 jp. wAwn4iWESZKFGSFZLok7whT7iuZiAIsf5I0xvKHpophSq162v9aj5wdUBCX3JWxQ0BTPCGXI770t mwkWb0E8lr/ti98mYZSGxnRs6qklwQn2MArMSxrkcq807yOzyMptdEDN3VNAFQ+pDXE1PsCYxy1S 4CnWFcG7BGFfY5UxUQg= )`
	RRSIG=23565 and DNSKEY=23565 verifies the DS RRset
	DS=7865/SHA-256 is now in the chain-of-trust
	`jpcert.or.jp. 7200 IN DS ( 7865 13 2 3cdaf12de3107b865b66fda5c49ef8ff0f71661f09e6a09783629c3584edaa74 )`
	Query to ns017-100a7mrhgjjacs4t.1.d-53.net for jpcert.or.jp/DNSKEY
	Received 309 bytes from 210.138.20.108
	;; Response received from [210.138.20.108] 309 octets ;; HEADER SECTION ;; id = 528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jpcert.or.jp. IN DNSKEY ;; ANSWER SECTION (3 records) jpcert.or.jp. 28800 IN DNSKEY ( 256 3 13 ylD6sECvfVsH6z1BjJfhaUd5GOAd6ukxUOXrceOie7fYn3E22T0OdPdTFRDha06kpaAGHQ8bR5cZ HNGCGORjNw== ) ; Key ID = 5269 jpcert.or.jp. 28800 IN DNSKEY ( 257 3 13 PLQ6jac6E8WleHqG+Ex6b5JKtiWYcFtIPTdefYNXehpdn7y8X0pU0utfhlUwLgVKOHYs50DFIEti EN8CJoDctg== ) ; Key ID = 7865 jpcert.or.jp. 28800 IN RRSIG ( DNSKEY 13 3 28800 20240616080917 20240516080917 7865 jpcert.or.jp. OQd6BQvw0xyvMUugp8se5y+uhf4pm8vd4vaA3Uo+RgWdxDnKe4gluJJySPQjprfgpUH+H86bTn5i CvrMBe7g/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for jpcert.or.jp
	`jpcert.or.jp. 28800 IN DNSKEY ( 256 3 13 ylD6sECvfVsH6z1BjJfhaUd5GOAd6ukxUOXrceOie7fYn3E22T0OdPdTFRDha06kpaAGHQ8bR5cZ HNGCGORjNw== ) ; Key ID = 5269`
	`jpcert.or.jp. 28800 IN DNSKEY ( 257 3 13 PLQ6jac6E8WleHqG+Ex6b5JKtiWYcFtIPTdefYNXehpdn7y8X0pU0utfhlUwLgVKOHYs50DFIEti EN8CJoDctg== ) ; Key ID = 7865`
	DNSKEY=7865/SEP is now in the chain-of-trust
	DS=7865/SHA-256 verifies DNSKEY=7865/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jpcert.or.jp. 28800 IN RRSIG ( DNSKEY 13 3 28800 20240616080917 20240516080917 7865 jpcert.or.jp. OQd6BQvw0xyvMUugp8se5y+uhf4pm8vd4vaA3Uo+RgWdxDnKe4gluJJySPQjprfgpUH+H86bTn5i CvrMBe7g/g== )`
	RRSIG=7865 and DNSKEY=7865/SEP verifies the DNSKEY RRset
	DNSKEY=5269 is now in the chain-of-trust
	Query to ns017-100a7mrhgjjacs4t.1.d-53.net for www.jpcert.or.jp/A
	Received 195 bytes from 210.138.20.108
	;; Response received from [210.138.20.108] 195 octets ;; HEADER SECTION ;; id = 24739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.jpcert.or.jp. IN A ;; ANSWER SECTION (2 records) www.jpcert.or.jp. 300 IN CNAME d81drv6iivfiw.cloudfront.net. www.jpcert.or.jp. 300 IN RRSIG ( CNAME 13 4 300 20240616080917 20240516080917 5269 jpcert.or.jp. XeWK79rCdjaspwaifRUOS04LwtXlhOp3Vqm3W5SHY1q1MDdtESvKAXiN2MtRMSB/tKY0umZR84Gh Ts1WyO2qVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns017-100a7mrhgjjacs4t.1.d-53.net is authoritative for www.jpcert.or.jp
	Query to ns017-100a7mrhgjjacs4t.1.d-53.jp for www.jpcert.or.jp/DNSKEY
	Received 195 bytes from 203.180.146.108
	;; Response received from [203.180.146.108] 195 octets ;; HEADER SECTION ;; id = 59642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.jpcert.or.jp. IN DNSKEY ;; ANSWER SECTION (2 records) www.jpcert.or.jp. 300 IN CNAME d81drv6iivfiw.cloudfront.net. www.jpcert.or.jp. 300 IN RRSIG ( CNAME 13 4 300 20240616080917 20240516080917 5269 jpcert.or.jp. XeWK79rCdjaspwaifRUOS04LwtXlhOp3Vqm3W5SHY1q1MDdtESvKAXiN2MtRMSB/tKY0umZR84Gh Ts1WyO2qVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by jpcert.or.jp zone
	www.jpcert.or.jp is a CNAME to d81drv6iivfiw.cloudfront.net
	Found 1 RRSIGs over CNAME RRset
	`www.jpcert.or.jp. 300 IN RRSIG ( CNAME 13 4 300 20240616080917 20240516080917 5269 jpcert.or.jp. XeWK79rCdjaspwaifRUOS04LwtXlhOp3Vqm3W5SHY1q1MDdtESvKAXiN2MtRMSB/tKY0umZR84Gh Ts1WyO2qVg== )`
	RRSIG=5269 and DNSKEY=5269 verifies the CNAME RRset

	Query to k.root-servers.net for d81drv6iivfiw.cloudfront.net/A
	Received 1185 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1185 octets ;; HEADER SECTION ;; id = 41551 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . TQv2PxgksAb1CVN1Sc7KnShHHAUJ7EwfDMmHPSuJQIRl0jt8F6vvzJau+FY1IM5m/JEgPlB0GfUq EBQEFKrlanUEicOv196Nb8d6WM269p40SlYEOUW6IlReV6ymFcCrFd0/w2Qc8+ZYVEa0lmijI8Hs 4lVQMth+1gdOsWP5h/6ymZ6SiAz1KtbiHZn8IPCEfGkpA6NXzP5HIOzf3a2rns2PDPo1J85ZB/2i Jp25rSNxuNaPoz5yP/kcqkc0P2DQWDYxVjCOCejl0qnyHdSZvX9sHIF05oywJtiinh8jJhFA0BHX ESezSh43Q6GPwXlgiT4kOUJvwXFOR4/Mqv7/5g== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1160 octets ;; HEADER SECTION ;; id = 52772 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . TQv2PxgksAb1CVN1Sc7KnShHHAUJ7EwfDMmHPSuJQIRl0jt8F6vvzJau+FY1IM5m/JEgPlB0GfUq EBQEFKrlanUEicOv196Nb8d6WM269p40SlYEOUW6IlReV6ymFcCrFd0/w2Qc8+ZYVEa0lmijI8Hs 4lVQMth+1gdOsWP5h/6ymZ6SiAz1KtbiHZn8IPCEfGkpA6NXzP5HIOzf3a2rns2PDPo1J85ZB/2i Jp25rSNxuNaPoz5yP/kcqkc0P2DQWDYxVjCOCejl0qnyHdSZvX9sHIF05oywJtiinh8jJhFA0BHX ESezSh43Q6GPwXlgiT4kOUJvwXFOR4/Mqv7/5g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to l.root-servers.net for net/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 63331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . TQv2PxgksAb1CVN1Sc7KnShHHAUJ7EwfDMmHPSuJQIRl0jt8F6vvzJau+FY1IM5m/JEgPlB0GfUq EBQEFKrlanUEicOv196Nb8d6WM269p40SlYEOUW6IlReV6ymFcCrFd0/w2Qc8+ZYVEa0lmijI8Hs 4lVQMth+1gdOsWP5h/6ymZ6SiAz1KtbiHZn8IPCEfGkpA6NXzP5HIOzf3a2rns2PDPo1J85ZB/2i Jp25rSNxuNaPoz5yP/kcqkc0P2DQWDYxVjCOCejl0qnyHdSZvX9sHIF05oywJtiinh8jJhFA0BHX ESezSh43Q6GPwXlgiT4kOUJvwXFOR4/Mqv7/5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . TQv2PxgksAb1CVN1Sc7KnShHHAUJ7EwfDMmHPSuJQIRl0jt8F6vvzJau+FY1IM5m/JEgPlB0GfUq EBQEFKrlanUEicOv196Nb8d6WM269p40SlYEOUW6IlReV6ymFcCrFd0/w2Qc8+ZYVEa0lmijI8Hs 4lVQMth+1gdOsWP5h/6ymZ6SiAz1KtbiHZn8IPCEfGkpA6NXzP5HIOzf3a2rns2PDPo1J85ZB/2i Jp25rSNxuNaPoz5yP/kcqkc0P2DQWDYxVjCOCejl0qnyHdSZvX9sHIF05oywJtiinh8jJhFA0BHX ESezSh43Q6GPwXlgiT4kOUJvwXFOR4/Mqv7/5g== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to m.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 291 octets ;; HEADER SECTION ;; id = 52218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to k.gtld-servers.net for d81drv6iivfiw.cloudfront.net/A
	Received 567 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 567 octets ;; HEADER SECTION ;; id = 59271 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240523064901 20240516053901 51809 net. aoDR734CHi6+YdREiUwPALBhtgDtiUJ1ZqpcyIursMt1WBu6EtQf+QRS04utsBLWuXDvt1tfR9OZ yg91pP1Krg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for cloudfront.net/DNSKEY
	Received 553 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 553 octets ;; HEADER SECTION ;; id = 4917 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240523064901 20240516053901 51809 net. aoDR734CHi6+YdREiUwPALBhtgDtiUJ1ZqpcyIursMt1WBu6EtQf+QRS04utsBLWuXDvt1tfR9OZ yg91pP1Krg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; { "EDNS-VERSION": 0 }
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to c.gtld-servers.net for cloudfront.net/DS
	Received 572 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 572 octets ;; HEADER SECTION ;; id = 33725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1716097894 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240526055134 20240519044134 51809 net. Zn5CvHwBtw5mPmsFz0XZmS+/rILTarQeKomXA0Nz2I5naMIHYzjr7BHGZ0uJEnLeSoEGQe9nNoFz o5KLS2YY1w== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240523064901 20240516053901 51809 net. aoDR734CHi6+YdREiUwPALBhtgDtiUJ1ZqpcyIursMt1WBu6EtQf+QRS04utsBLWuXDvt1tfR9OZ yg91pP1Krg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cloudfront.net in the net zone
	Query to ns-418.awsdns-52.com for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.193.162
	;; Response received from [205.251.193.162] 110 octets ;; HEADER SECTION ;; id = 12647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-418.awsdns-52.com for d81drv6iivfiw.cloudfront.net/A
	Received 194 bytes from 205.251.193.162
	;; Response received from [205.251.193.162] 194 octets ;; HEADER SECTION ;; id = 29943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-666.awsdns-19.net for d81drv6iivfiw.cloudfront.net/DNSKEY
	Received 194 bytes from 205.251.194.154
	;; Response received from [205.251.194.154] 194 octets ;; HEADER SECTION ;; id = 6600 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 1831 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone d81drv6iivfiw.cloudfront.net

d81drv6iivfiw.cloudfront.net

	Checking DS between cloudfront.net and d81drv6iivfiw.cloudfront.net
	Query to ns-1597.awsdns-07.co.uk for d81drv6iivfiw.cloudfront.net/DS
	Received 124 bytes from 205.251.198.61
	;; Response received from [205.251.198.61] 124 octets ;; HEADER SECTION ;; id = 30757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for d81drv6iivfiw.cloudfront.net in the cloudfront.net zone
	Query to ns-462.awsdns-57.com for d81drv6iivfiw.cloudfront.net/DNSKEY
	Received 144 bytes from 205.251.193.206
	;; Response received from [205.251.193.206] 144 octets ;; HEADER SECTION ;; id = 42301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) d81drv6iivfiw.cloudfront.net. 60 IN SOA ( ns-1621.awsdns-10.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1621.awsdns-10.co.uk for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.198.85
	;; Response received from [205.251.198.85] 258 octets ;; HEADER SECTION ;; id = 42195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1621.awsdns-10.co.uk is authoritative for d81drv6iivfiw.cloudfront.net
	Query to ns-1144.awsdns-15.org for d81drv6iivfiw.cloudfront.net/SOA
	Received 255 bytes from 205.251.196.120
	;; Response received from [205.251.196.120] 255 octets ;; HEADER SECTION ;; id = 40649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d81drv6iivfiw.cloudfront.net. 60 IN SOA ( ns-1621.awsdns-10.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-602.awsdns-11.net for d81drv6iivfiw.cloudfront.net/SOA
	Received 255 bytes from 205.251.194.90
	;; Response received from [205.251.194.90] 255 octets ;; HEADER SECTION ;; id = 38203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d81drv6iivfiw.cloudfront.net. 60 IN SOA ( ns-1621.awsdns-10.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-462.awsdns-57.com for d81drv6iivfiw.cloudfront.net/SOA
	Received 255 bytes from 205.251.193.206
	;; Response received from [205.251.193.206] 255 octets ;; HEADER SECTION ;; id = 24530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d81drv6iivfiw.cloudfront.net. 60 IN SOA ( ns-1621.awsdns-10.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1621.awsdns-10.co.uk for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.198.85
	;; Response received from [205.251.198.85] 258 octets ;; HEADER SECTION ;; id = 18945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.18
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.67
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.25
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.111
	No RRSIGs found

d81drv6iivfiw.cloudfront.net

	Query to ns-462.awsdns-57.com for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.193.206
	;; Response received from [205.251.193.206] 258 octets ;; HEADER SECTION ;; id = 12743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-462.awsdns-57.com is authoritative for d81drv6iivfiw.cloudfront.net
	Query to ns-462.awsdns-57.com for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.193.206
	;; Response received from [205.251.193.206] 258 octets ;; HEADER SECTION ;; id = 64469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.67
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.111
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.25
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.18
	No RRSIGs found

d81drv6iivfiw.cloudfront.net

	Query to ns-602.awsdns-11.net for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.194.90
	;; Response received from [205.251.194.90] 258 octets ;; HEADER SECTION ;; id = 31128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-602.awsdns-11.net is authoritative for d81drv6iivfiw.cloudfront.net
	Query to ns-602.awsdns-11.net for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.194.90
	;; Response received from [205.251.194.90] 258 octets ;; HEADER SECTION ;; id = 15159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.25
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.67
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.111
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.18
	No RRSIGs found

d81drv6iivfiw.cloudfront.net

	Query to ns-1144.awsdns-15.org for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.196.120
	;; Response received from [205.251.196.120] 258 octets ;; HEADER SECTION ;; id = 19331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1144.awsdns-15.org is authoritative for d81drv6iivfiw.cloudfront.net
	Query to ns-1144.awsdns-15.org for d81drv6iivfiw.cloudfront.net/A
	Received 258 bytes from 205.251.196.120
	;; Response received from [205.251.196.120] 258 octets ;; HEADER SECTION ;; id = 44207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d81drv6iivfiw.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.25 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.67 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.111 d81drv6iivfiw.cloudfront.net. 60 IN A 3.162.112.18 ;; AUTHORITY SECTION (4 records) d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1144.awsdns-15.org. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-1621.awsdns-10.co.uk. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-462.awsdns-57.com. d81drv6iivfiw.cloudfront.net. 172800 IN NS ns-602.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.25
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.67
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.111
	d81drv6iivfiw.cloudfront.net A RR has value 3.162.112.18
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.jpcert.or.jp at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: