DNSSEC Debugger - www.ncsc.govt.nz

Domain Name:

Time: 2024-05-17 10:41:42 UTC

Analyzing DNSSEC problems for www.ncsc.govt.nz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 2107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for www.ncsc.govt.nz/A
	Received 874 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 874 octets ;; HEADER SECTION ;; id = 32009 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ncsc.govt.nz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) nz. 172800 IN NS ns5.dns.net.nz. nz. 172800 IN NS ns2.dns.net.nz. nz. 172800 IN NS ns4.dns.net.nz. nz. 172800 IN NS ns3.dns.net.nz. nz. 172800 IN NS ns1.dns.net.nz. nz. 172800 IN NS ns6.dns.net.nz. nz. 172800 IN NS ns7.dns.net.nz. nz. 86400 IN DS ( 49157 8 2 44628e9bf710b40d5a5b19087a119eaf2c0b5ced7e7ba4268f4fc35bef14b1c0 ) nz. 86400 IN DS ( 63529 8 2 65c9663eacc1ad314058a5a7b127d409d144bba9a58ec0b6a7f4f028574df47b ) nz. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . AvEmFiHcmOFX5wywVBzGozNAvpTdvb57hjxl7Z6MS7CIdELWxorB5tTUwZRoDZqdWoyCQGrSXVxD stClGJsfgKfCfWuzsAGux2K7d/b9G6j+isFA9t2HrB/cTBit6TjwE/y/Ua/wGwlO9+df7neizJE7 Uk6tHAQahAhOZzXPsfi/NRFHUpPpHw02+V8iNHAtQ0qM6x2yGZuhTgDVUD7/6ie8JCE0IYQIxa8o Bp40CRJwtxPXYMm7ZnWnZ0XbaCeROJPFKCIOrPr+ZVaJJnpPNxHmKH7vqf7ShNh+XTJIWmc/y/Gc cYZ+5M3s1rr3mz/cBiua2vC0QgPTIOrpgn53kQ== ) ;; ADDITIONAL SECTION (15 records) ns7.dns.net.nz. 172800 IN A 194.146.106.54 ns6.dns.net.nz. 172800 IN A 185.159.198.130 ns5.dns.net.nz. 172800 IN A 185.159.197.130 ns4.dns.net.nz. 172800 IN A 202.46.189.130 ns3.dns.net.nz. 172800 IN A 202.46.188.130 ns2.dns.net.nz. 172800 IN A 202.46.187.130 ns1.dns.net.nz. 172800 IN A 202.46.190.130 ns7.dns.net.nz. 172800 IN AAAA 2001:67c:1010:13::53 ns6.dns.net.nz. 172800 IN AAAA 2620:10a:80ab::130 ns5.dns.net.nz. 172800 IN AAAA 2620:10a:80aa::130 ns4.dns.net.nz. 172800 IN AAAA 2001:dce:d454::53 ns3.dns.net.nz. 172800 IN AAAA 2001:dce:d453::53 ns2.dns.net.nz. 172800 IN AAAA 2001:dce:7000:2::130 ns1.dns.net.nz. 172800 IN AAAA 2001:dce:2000:2::130 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for nz/DNSKEY
	Received 856 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 856 octets ;; HEADER SECTION ;; id = 53294 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) nz. 172800 IN NS ns1.dns.net.nz. nz. 172800 IN NS ns2.dns.net.nz. nz. 172800 IN NS ns3.dns.net.nz. nz. 172800 IN NS ns4.dns.net.nz. nz. 172800 IN NS ns5.dns.net.nz. nz. 172800 IN NS ns6.dns.net.nz. nz. 172800 IN NS ns7.dns.net.nz. nz. 86400 IN DS ( 49157 8 2 44628e9bf710b40d5a5b19087a119eaf2c0b5ced7e7ba4268f4fc35bef14b1c0 ) nz. 86400 IN DS ( 63529 8 2 65c9663eacc1ad314058a5a7b127d409d144bba9a58ec0b6a7f4f028574df47b ) nz. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . AvEmFiHcmOFX5wywVBzGozNAvpTdvb57hjxl7Z6MS7CIdELWxorB5tTUwZRoDZqdWoyCQGrSXVxD stClGJsfgKfCfWuzsAGux2K7d/b9G6j+isFA9t2HrB/cTBit6TjwE/y/Ua/wGwlO9+df7neizJE7 Uk6tHAQahAhOZzXPsfi/NRFHUpPpHw02+V8iNHAtQ0qM6x2yGZuhTgDVUD7/6ie8JCE0IYQIxa8o Bp40CRJwtxPXYMm7ZnWnZ0XbaCeROJPFKCIOrPr+ZVaJJnpPNxHmKH7vqf7ShNh+XTJIWmc/y/Gc cYZ+5M3s1rr3mz/cBiua2vC0QgPTIOrpgn53kQ== ) ;; ADDITIONAL SECTION (15 records) ns1.dns.net.nz. 172800 IN A 202.46.190.130 ns2.dns.net.nz. 172800 IN A 202.46.187.130 ns3.dns.net.nz. 172800 IN A 202.46.188.130 ns4.dns.net.nz. 172800 IN A 202.46.189.130 ns5.dns.net.nz. 172800 IN A 185.159.197.130 ns6.dns.net.nz. 172800 IN A 185.159.198.130 ns7.dns.net.nz. 172800 IN A 194.146.106.54 ns1.dns.net.nz. 172800 IN AAAA 2001:dce:2000:2::130 ns2.dns.net.nz. 172800 IN AAAA 2001:dce:7000:2::130 ns3.dns.net.nz. 172800 IN AAAA 2001:dce:d453::53 ns4.dns.net.nz. 172800 IN AAAA 2001:dce:d454::53 ns5.dns.net.nz. 172800 IN AAAA 2620:10a:80aa::130 ns6.dns.net.nz. 172800 IN AAAA 2620:10a:80ab::130 ns7.dns.net.nz. 172800 IN AAAA 2001:67c:1010:13::53 ;; { "EDNS-VERSION": 0 }
	Found child zone nz

	Checking DS between . and nz
	Query to e.root-servers.net for nz/DS
	Received 414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 414 octets ;; HEADER SECTION ;; id = 40095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DS ;; ANSWER SECTION (3 records) nz. 86400 IN DS ( 63529 8 2 65c9663eacc1ad314058a5a7b127d409d144bba9a58ec0b6a7f4f028574df47b ) nz. 86400 IN DS ( 49157 8 2 44628e9bf710b40d5a5b19087a119eaf2c0b5ced7e7ba4268f4fc35bef14b1c0 ) nz. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . AvEmFiHcmOFX5wywVBzGozNAvpTdvb57hjxl7Z6MS7CIdELWxorB5tTUwZRoDZqdWoyCQGrSXVxD stClGJsfgKfCfWuzsAGux2K7d/b9G6j+isFA9t2HrB/cTBit6TjwE/y/Ua/wGwlO9+df7neizJE7 Uk6tHAQahAhOZzXPsfi/NRFHUpPpHw02+V8iNHAtQ0qM6x2yGZuhTgDVUD7/6ie8JCE0IYQIxa8o Bp40CRJwtxPXYMm7ZnWnZ0XbaCeROJPFKCIOrPr+ZVaJJnpPNxHmKH7vqf7ShNh+XTJIWmc/y/Gc cYZ+5M3s1rr3mz/cBiua2vC0QgPTIOrpgn53kQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nz in the . zone
	DS=63529/SHA-256 has algorithm RSASHA256
	DS=49157/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nz. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . AvEmFiHcmOFX5wywVBzGozNAvpTdvb57hjxl7Z6MS7CIdELWxorB5tTUwZRoDZqdWoyCQGrSXVxD stClGJsfgKfCfWuzsAGux2K7d/b9G6j+isFA9t2HrB/cTBit6TjwE/y/Ua/wGwlO9+df7neizJE7 Uk6tHAQahAhOZzXPsfi/NRFHUpPpHw02+V8iNHAtQ0qM6x2yGZuhTgDVUD7/6ie8JCE0IYQIxa8o Bp40CRJwtxPXYMm7ZnWnZ0XbaCeROJPFKCIOrPr+ZVaJJnpPNxHmKH7vqf7ShNh+XTJIWmc/y/Gc cYZ+5M3s1rr3mz/cBiua2vC0QgPTIOrpgn53kQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=63529/SHA-256 is now in the chain-of-trust
	DS=49157/SHA-256 is now in the chain-of-trust
	`nz. 86400 IN DS ( 63529 8 2 65c9663eacc1ad314058a5a7b127d409d144bba9a58ec0b6a7f4f028574df47b )`
	`nz. 86400 IN DS ( 49157 8 2 44628e9bf710b40d5a5b19087a119eaf2c0b5ced7e7ba4268f4fc35bef14b1c0 )`
	Query to ns6.dns.net.nz for nz/DNSKEY
	Received 1169 bytes from 185.159.198.130
	;; Response received from [185.159.198.130] 1169 octets ;; HEADER SECTION ;; id = 18233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nz. IN DNSKEY ;; ANSWER SECTION (5 records) nz. 3600 IN DNSKEY ( 256 3 8 AwEAAbu0GXVAZmFjxZ3Le3nGXydFbVBtibgqR9Cy2Fkbdkd5h0wEgzr+a+UzZm1IHEwf5i3Ny6pR ESBJTIHOlJ63MfDyD9OI81rCcxo4RQsjNyLDLlpn42jLw1uRFJ/g7I2R5SuYLoeDXrem6OG/AFaB Gjez45dSf3GR47rC7SmCYnyr ) ; Key ID = 59319 nz. 3600 IN DNSKEY ( 256 3 8 AwEAAcrfEECb9qumcm+4B+bUGaTNa3Tkhe2KhiCGBCqAX2AAb16+v7lRB+KsoteM9gNrJXAqHFV4 q8f6WRzSX1gF//Dz5uZLaZZoYkbAIn6XvJFTSpGPHGOwvIRNa94NR3Sot3O1F+Lsf4IoRboZs8tQ QTI6meP73E7ne1+vQJ2I3k1N ) ; Key ID = 58585 nz. 3600 IN DNSKEY ( 257 3 8 AwEAAaXZ0wium/vkCH7stzbgOWCBPorvSSO9hb8YFYlMqo8pXJnYqPDobyooZqsQ5LH6vOu1mm6U Wc72soxPniS4P70opfA9am3j4aRcaeUl8NhxfqlJS4A8znpT5Dqq5DPl5QXHPg2+F9Kem+tRs6ZG XJCrXSPZNjYw8Zv+rEmYaUTmVGk5GjYqDpaSYbjuDc8DRWde+a5MpXdWjuDDZ79RQu+luTL7lGyX bQdAEdZX84UNjG73gmY4IhpOHMbN8Tjwgd6E3fMP6k1W3hy51uFN9ZhO/N6agCbT+PE004jJn4TN SLViPa44qaweKiyhphqShsDTLx/HV7uIebpmM3eX9Kk= ) ; Key ID = 63529 nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcHwKiD94e4WlODhH/9iORLdYGbnTW5VBAi4QGj/AuuVV1Q7G4GHcVMInRIBN6N/WTVyvgal kqAPuycaMliTyOFhosdKIIyDiZrhmoOSYNI/pIlNEmurYT7+AZNl2y4KShy1jutVTDN2ucNy2s7O n+JAxGz3cNWXKI93IkBMIf39T7Z/MuhMMq8cmx8mdEh6Lral2wU12Qp8cwxSgwyEHKXaw4zoOZxb /8t4UYol2ZNZBnRBwp8sRjPNquroVRue/TXfcNJydo7TZTwTeapgK0HqexwbXIa/JaTzX6kC4zhW 57jfu5LcPefDQ4Qzmt6JlovRdvgBETi9YUOZJ3gr5S0= ) ; Key ID = 49157 nz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240527102616 20240512112002 63529 nz. Hv1vyWgBjJ1XpaqJXEMknci0tsV+Ha0JZTAuQVwJ92Wd4sGWXCrjxmViJ01DfM8c4254HbcgscOh OAGqqssUdAYzelwpKvtaybIiXKDXq67WUV/ZYS65SVQ30//xj2fyqz/Wc9bwOOhxCj4Th8wBjYED /Ydq4PNtfsolngKFd+/JIJgDCGnNBdfDrm5D9A8ONcPjAbzWdyzhyepqelNsk/TgdzoEn/FKmzN3 ZEQOn2hNQ0WMnhABLe+DhVeHwl5E3YYt5oYz4cSoQ7QkFuzWR/QJ4BTNQUWvpmEbVhaM4TLjwTEi 2XO1cKBOewTlDdSN1MHuD3ouZIJO8P/7sVobQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for nz
	`nz. 3600 IN DNSKEY ( 256 3 8 AwEAAbu0GXVAZmFjxZ3Le3nGXydFbVBtibgqR9Cy2Fkbdkd5h0wEgzr+a+UzZm1IHEwf5i3Ny6pR ESBJTIHOlJ63MfDyD9OI81rCcxo4RQsjNyLDLlpn42jLw1uRFJ/g7I2R5SuYLoeDXrem6OG/AFaB Gjez45dSf3GR47rC7SmCYnyr ) ; Key ID = 59319`
	`nz. 3600 IN DNSKEY ( 256 3 8 AwEAAcrfEECb9qumcm+4B+bUGaTNa3Tkhe2KhiCGBCqAX2AAb16+v7lRB+KsoteM9gNrJXAqHFV4 q8f6WRzSX1gF//Dz5uZLaZZoYkbAIn6XvJFTSpGPHGOwvIRNa94NR3Sot3O1F+Lsf4IoRboZs8tQ QTI6meP73E7ne1+vQJ2I3k1N ) ; Key ID = 58585`
	`nz. 3600 IN DNSKEY ( 257 3 8 AwEAAaXZ0wium/vkCH7stzbgOWCBPorvSSO9hb8YFYlMqo8pXJnYqPDobyooZqsQ5LH6vOu1mm6U Wc72soxPniS4P70opfA9am3j4aRcaeUl8NhxfqlJS4A8znpT5Dqq5DPl5QXHPg2+F9Kem+tRs6ZG XJCrXSPZNjYw8Zv+rEmYaUTmVGk5GjYqDpaSYbjuDc8DRWde+a5MpXdWjuDDZ79RQu+luTL7lGyX bQdAEdZX84UNjG73gmY4IhpOHMbN8Tjwgd6E3fMP6k1W3hy51uFN9ZhO/N6agCbT+PE004jJn4TN SLViPa44qaweKiyhphqShsDTLx/HV7uIebpmM3eX9Kk= ) ; Key ID = 63529`
	`nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcHwKiD94e4WlODhH/9iORLdYGbnTW5VBAi4QGj/AuuVV1Q7G4GHcVMInRIBN6N/WTVyvgal kqAPuycaMliTyOFhosdKIIyDiZrhmoOSYNI/pIlNEmurYT7+AZNl2y4KShy1jutVTDN2ucNy2s7O n+JAxGz3cNWXKI93IkBMIf39T7Z/MuhMMq8cmx8mdEh6Lral2wU12Qp8cwxSgwyEHKXaw4zoOZxb /8t4UYol2ZNZBnRBwp8sRjPNquroVRue/TXfcNJydo7TZTwTeapgK0HqexwbXIa/JaTzX6kC4zhW 57jfu5LcPefDQ4Qzmt6JlovRdvgBETi9YUOZJ3gr5S0= ) ; Key ID = 49157`
	DNSKEY=63529/SEP is now in the chain-of-trust
	DS=63529/SHA-256 verifies DNSKEY=63529/SEP
	DNSKEY=49157/SEP is now in the chain-of-trust
	DS=49157/SHA-256 verifies DNSKEY=49157/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240527102616 20240512112002 63529 nz. Hv1vyWgBjJ1XpaqJXEMknci0tsV+Ha0JZTAuQVwJ92Wd4sGWXCrjxmViJ01DfM8c4254HbcgscOh OAGqqssUdAYzelwpKvtaybIiXKDXq67WUV/ZYS65SVQ30//xj2fyqz/Wc9bwOOhxCj4Th8wBjYED /Ydq4PNtfsolngKFd+/JIJgDCGnNBdfDrm5D9A8ONcPjAbzWdyzhyepqelNsk/TgdzoEn/FKmzN3 ZEQOn2hNQ0WMnhABLe+DhVeHwl5E3YYt5oYz4cSoQ7QkFuzWR/QJ4BTNQUWvpmEbVhaM4TLjwTEi 2XO1cKBOewTlDdSN1MHuD3ouZIJO8P/7sVobQg== )`
	RRSIG=63529 and DNSKEY=63529/SEP verifies the DNSKEY RRset
	DNSKEY=59319 is now in the chain-of-trust
	DNSKEY=58585 is now in the chain-of-trust
	Query to ns2.dns.net.nz for www.ncsc.govt.nz/A
	Received 633 bytes from 202.46.187.130
	;; Response received from [202.46.187.130] 633 octets ;; HEADER SECTION ;; id = 63988 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ncsc.govt.nz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ncsc.govt.nz. 86400 IN NS ns2.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns4.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns5.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns1.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns3.digital.govt.nz. ncsc.govt.nz. 86400 IN DS ( 20931 13 2 d4e77ad23724ca43f131e520ea66fd3eda3b5520c0565aab7f18462f9f30dd1e ) ncsc.govt.nz. 86400 IN DS ( 6819 13 2 a7f254c750a0e23376ead6d0c563396ee555c534753db6cf2e9bd3a0325bbaab ) ncsc.govt.nz. 86400 IN RRSIG ( DS 8 3 86400 20240523175647 20240509112741 18364 govt.nz. I2uTliNNErLQYTdtomJmaO2sdpSq3Bf6XmP6L5gO8mb5akMCxqlyXAu/a/QwKUWneKX8BNNDFIza S9qVA2yBZ2FLRAEHjgVyQD5zxAuAfITt45j2FE3hrwVxAUXkx2j8QPIh7pk+yPsEAHgWQwhkLMOx rM6m09ZDEzCZTTuA6qU= ) ;; ADDITIONAL SECTION (11 records) ns5.digital.govt.nz. 86400 IN A 3.104.25.7 ns4.digital.govt.nz. 86400 IN A 223.165.19.121 ns3.digital.govt.nz. 86400 IN A 223.165.19.120 ns2.digital.govt.nz. 86400 IN A 223.165.18.121 ns1.digital.govt.nz. 86400 IN A 223.165.18.120 ns5.digital.govt.nz. 86400 IN AAAA 2406:da1c:3c8:cd00:233f:e9be:91cf:f15f ns4.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::3 ns3.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::2 ns2.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::3 ns1.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::2 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.net.nz for govt.nz/DNSKEY
	Received 1179 bytes from 202.46.188.130
	;; Response received from [202.46.188.130] 1179 octets ;; HEADER SECTION ;; id = 48408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; govt.nz. IN DNSKEY ;; ANSWER SECTION (5 records) govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAdYv4mXPlMxinwiWUAwAgbbxV2eTtFsrLCRkYnBEljfxR2Pxbm939+FNIqHnQLkoqLwPwqNM XoWDNDbAURcGP2jKbN5K1Pt01BMqQfiuprJDEtT9aROmIPGQ+jtAoI7yonADQYhMdb9C9yuBOGol LVKE6wljegEqoNzrBudE+ONx ) ; Key ID = 18364 govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcH/mxd7aClqMtrOXPV63cgCmgLQi/CsMzsvt0TyPkWiNkuwz5jtd6Vi0xV1b/TENVZhbAY2 P5BpXzR7uI8cY9OoXDxy/8N9RBs0N5HRNX/CU6cwMr1KgDAhfnveANAjUEz72oLl1gndrJSB3sst Z1/15mG++IRpc7hXqpBqCGHBUrdg/xbaOe1x8KNkFLaSO6vIyqWSHAqxQ0uj4j72Tx6GG50FNHQj nbMZmdAVU0WkPrnnKWbJTRa/v6iQ5TOdc4S8p3LlWeuQJvhO8VQGNm19Ftf9Kx8rrrdKoM9c9/Xf vReyKqvSXS+dqcPEUHwrjcRmqx6Lz7cBLCk9DuW5TLk= ) ; Key ID = 21092 govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAaliuQxn6wYYXNaFIgxcTIvLVi2VSoqrZZrSgkiS8dZ0Zlr9OKauj6YHIuP4uD1vlZ9N2GB2 hr0BIOBKMvIAMcfg3dFDxSU7/3L8ZqgSotnoDrYFeMitUGelPtuUxT6lKMHAubXqMCMvwlHyb3Yo KdX+RHn8vSNw10dggAzTUAQx ) ; Key ID = 9048 govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAaP/ghQxIXo1N7A9qm+l0iSRf9PvahBdKv+BQnSI/t6Rx0/fJ+SPU+kQjr6Vo37DZc7HtnW9 Z15fKl8IbBcJnjFi1SvIT7lMnaUxTk5yOu3gcS3Htf2WO2Mfrm/Bs7nHdvL8h11zSz53CmlyHF/8 4XblFVY3LHPXgYUOi1qMnIVxGV9KnaVH5de21hibwIrQG+UEpaOoxqv+Clfa7EN15SALdRNayEOc z8LWztwxq9sR+3R6+ls9th3bpRLnOz1304NJalddlW49G9uLsojjOmUQPPOhcpKC4mj8vbTXIV6y aIOc0OB9p2Ne1RPvkR9HKUls+4KdLmg/RM+M2azhWNU= ) ; Key ID = 18181 govt.nz. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240530202442 20240516224400 21092 govt.nz. FpRdjB8MT1ykWbk+zwCXh0HKbqAkebamMdrIloq6mzK4VkNFDrNBjd9nmxQu4EAaYVQgNGCPiwG9 VcCztWEY9NONrlkkevgJnCCAgw8O2y4NJ3957FteW7G+ejzi6++1N+CvR6cNsLl+c4D3/Efwpabg 0yNgneRyGefQ/fTsr5XomZb2LCfFVvvF2R+L9c43XFvTH160amK4xKA9j+d6nj3oPQu+agqg8DD/ 4eOQqR8LKLqvofUZAHP2JEhJAg4tlOEqT4B7ulk4rWgoHZaFWO+uyxvYVfmBjZonZQC9IJKRaDBF UEGNFgegItE+Om4KBTf3XYJtL+XEqF9a5Utxzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone govt.nz
	Attempting to learn nameservers for govt.nz
	Query to ns6.dns.net.nz for govt.nz/NS
	Received 337 bytes from 185.159.198.130
	;; Response received from [185.159.198.130] 337 octets ;; HEADER SECTION ;; id = 60957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; govt.nz. IN NS ;; ANSWER SECTION (8 records) govt.nz. 86400 IN NS ns1.dns.net.nz. govt.nz. 86400 IN NS ns2.dns.net.nz. govt.nz. 86400 IN NS ns3.dns.net.nz. govt.nz. 86400 IN NS ns4.dns.net.nz. govt.nz. 86400 IN NS ns5.dns.net.nz. govt.nz. 86400 IN NS ns6.dns.net.nz. govt.nz. 86400 IN NS ns7.dns.net.nz. govt.nz. 86400 IN RRSIG ( NS 8 2 86400 20240522130403 20240507085742 18364 govt.nz. u7Eyc2QGhH78rnDLvOtXtkgp5aJ6Q9OVoYGVIBldgMWB/WdGcNPC31/1VR8L6BLYfZ6a2miljz1C unjFLBcI01j5nqkAHJkRJ3jPZJ77HTZmEMBc74FLwhWYc5S6pUTGoZAcxHN7LrWOETbiLJA6vhev B72FwFSwBz/sQUHnmtE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found govt.nz nameservers: ns1.dns.net.nz, ns2.dns.net.nz, ns3.dns.net.nz, ns4.dns.net.nz, ns5.dns.net.nz, ns6.dns.net.nz, ns7.dns.net.nz

govt.nz

	Checking DS between nz and govt.nz
	Query to ns4.dns.net.nz for govt.nz/DS
	Received 366 bytes from 202.46.189.130
	;; Response received from [202.46.189.130] 366 octets ;; HEADER SECTION ;; id = 13952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; govt.nz. IN DS ;; ANSWER SECTION (5 records) govt.nz. 86400 IN DS ( 21092 8 2 73c04ed78cc75bca6804dfffdaba1665e53711112d2f5d64a5172e285ab8af2b ) govt.nz. 86400 IN DS 21092 8 1 f88c5e8b870456c189fbf83bfd963ca2b24df6be govt.nz. 86400 IN DS 18181 8 1 2fb45ef709b1a1b1c8c5fc88953ddbc10d6db4f2 govt.nz. 86400 IN DS ( 18181 8 2 3054b7019a94924948606d0fb004c8ffa44d7e8216eb28e3726da68788943b47 ) govt.nz. 86400 IN RRSIG ( DS 8 2 86400 20240530124719 20240516035012 59319 nz. FxOjrSsPQXGmQ0dDo2Wm63VKK3ybkuCArAoO4zU2dHRjHq/xo44CcUE1mv59xL28lgLmIKjI2F5j QBMoA2ccDwQNGT9b3GZh495vHe49ubmXEe51iOrI1Itz/ZUzZ/2ZtW+5rDqRSyKg1Tuaa74PyO6a MAiMW9HUhV7Iy8g28Nk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for govt.nz in the nz zone
	DS=21092/SHA-1 uses a deprecated digest algorithm
	DS=18181/SHA-1 uses a deprecated digest algorithm
	DS=21092/SHA-256 has algorithm RSASHA256
	DS=21092/SHA-1 has algorithm RSASHA256
	DS=18181/SHA-1 has algorithm RSASHA256
	DS=18181/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`govt.nz. 86400 IN RRSIG ( DS 8 2 86400 20240530124719 20240516035012 59319 nz. FxOjrSsPQXGmQ0dDo2Wm63VKK3ybkuCArAoO4zU2dHRjHq/xo44CcUE1mv59xL28lgLmIKjI2F5j QBMoA2ccDwQNGT9b3GZh495vHe49ubmXEe51iOrI1Itz/ZUzZ/2ZtW+5rDqRSyKg1Tuaa74PyO6a MAiMW9HUhV7Iy8g28Nk= )`
	RRSIG=59319 and DNSKEY=59319 verifies the DS RRset
	DS=21092/SHA-256 is now in the chain-of-trust
	DS=18181/SHA-1 is now in the chain-of-trust
	`govt.nz. 86400 IN DS ( 21092 8 2 73c04ed78cc75bca6804dfffdaba1665e53711112d2f5d64a5172e285ab8af2b )`
	`govt.nz. 86400 IN DS 21092 8 1 f88c5e8b870456c189fbf83bfd963ca2b24df6be`
	`govt.nz. 86400 IN DS 18181 8 1 2fb45ef709b1a1b1c8c5fc88953ddbc10d6db4f2`
	`govt.nz. 86400 IN DS ( 18181 8 2 3054b7019a94924948606d0fb004c8ffa44d7e8216eb28e3726da68788943b47 )`
	Query to ns4.dns.net.nz for govt.nz/DNSKEY
	Received 1179 bytes from 202.46.189.130
	;; Response received from [202.46.189.130] 1179 octets ;; HEADER SECTION ;; id = 61175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; govt.nz. IN DNSKEY ;; ANSWER SECTION (5 records) govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcH/mxd7aClqMtrOXPV63cgCmgLQi/CsMzsvt0TyPkWiNkuwz5jtd6Vi0xV1b/TENVZhbAY2 P5BpXzR7uI8cY9OoXDxy/8N9RBs0N5HRNX/CU6cwMr1KgDAhfnveANAjUEz72oLl1gndrJSB3sst Z1/15mG++IRpc7hXqpBqCGHBUrdg/xbaOe1x8KNkFLaSO6vIyqWSHAqxQ0uj4j72Tx6GG50FNHQj nbMZmdAVU0WkPrnnKWbJTRa/v6iQ5TOdc4S8p3LlWeuQJvhO8VQGNm19Ftf9Kx8rrrdKoM9c9/Xf vReyKqvSXS+dqcPEUHwrjcRmqx6Lz7cBLCk9DuW5TLk= ) ; Key ID = 21092 govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAaP/ghQxIXo1N7A9qm+l0iSRf9PvahBdKv+BQnSI/t6Rx0/fJ+SPU+kQjr6Vo37DZc7HtnW9 Z15fKl8IbBcJnjFi1SvIT7lMnaUxTk5yOu3gcS3Htf2WO2Mfrm/Bs7nHdvL8h11zSz53CmlyHF/8 4XblFVY3LHPXgYUOi1qMnIVxGV9KnaVH5de21hibwIrQG+UEpaOoxqv+Clfa7EN15SALdRNayEOc z8LWztwxq9sR+3R6+ls9th3bpRLnOz1304NJalddlW49G9uLsojjOmUQPPOhcpKC4mj8vbTXIV6y aIOc0OB9p2Ne1RPvkR9HKUls+4KdLmg/RM+M2azhWNU= ) ; Key ID = 18181 govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAaliuQxn6wYYXNaFIgxcTIvLVi2VSoqrZZrSgkiS8dZ0Zlr9OKauj6YHIuP4uD1vlZ9N2GB2 hr0BIOBKMvIAMcfg3dFDxSU7/3L8ZqgSotnoDrYFeMitUGelPtuUxT6lKMHAubXqMCMvwlHyb3Yo KdX+RHn8vSNw10dggAzTUAQx ) ; Key ID = 9048 govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAdYv4mXPlMxinwiWUAwAgbbxV2eTtFsrLCRkYnBEljfxR2Pxbm939+FNIqHnQLkoqLwPwqNM XoWDNDbAURcGP2jKbN5K1Pt01BMqQfiuprJDEtT9aROmIPGQ+jtAoI7yonADQYhMdb9C9yuBOGol LVKE6wljegEqoNzrBudE+ONx ) ; Key ID = 18364 govt.nz. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240530202442 20240516224400 21092 govt.nz. FpRdjB8MT1ykWbk+zwCXh0HKbqAkebamMdrIloq6mzK4VkNFDrNBjd9nmxQu4EAaYVQgNGCPiwG9 VcCztWEY9NONrlkkevgJnCCAgw8O2y4NJ3957FteW7G+ejzi6++1N+CvR6cNsLl+c4D3/Efwpabg 0yNgneRyGefQ/fTsr5XomZb2LCfFVvvF2R+L9c43XFvTH160amK4xKA9j+d6nj3oPQu+agqg8DD/ 4eOQqR8LKLqvofUZAHP2JEhJAg4tlOEqT4B7ulk4rWgoHZaFWO+uyxvYVfmBjZonZQC9IJKRaDBF UEGNFgegItE+Om4KBTf3XYJtL+XEqF9a5Utxzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for govt.nz
	`govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAcH/mxd7aClqMtrOXPV63cgCmgLQi/CsMzsvt0TyPkWiNkuwz5jtd6Vi0xV1b/TENVZhbAY2 P5BpXzR7uI8cY9OoXDxy/8N9RBs0N5HRNX/CU6cwMr1KgDAhfnveANAjUEz72oLl1gndrJSB3sst Z1/15mG++IRpc7hXqpBqCGHBUrdg/xbaOe1x8KNkFLaSO6vIyqWSHAqxQ0uj4j72Tx6GG50FNHQj nbMZmdAVU0WkPrnnKWbJTRa/v6iQ5TOdc4S8p3LlWeuQJvhO8VQGNm19Ftf9Kx8rrrdKoM9c9/Xf vReyKqvSXS+dqcPEUHwrjcRmqx6Lz7cBLCk9DuW5TLk= ) ; Key ID = 21092`
	`govt.nz. 3600 IN DNSKEY ( 257 3 8 AwEAAaP/ghQxIXo1N7A9qm+l0iSRf9PvahBdKv+BQnSI/t6Rx0/fJ+SPU+kQjr6Vo37DZc7HtnW9 Z15fKl8IbBcJnjFi1SvIT7lMnaUxTk5yOu3gcS3Htf2WO2Mfrm/Bs7nHdvL8h11zSz53CmlyHF/8 4XblFVY3LHPXgYUOi1qMnIVxGV9KnaVH5de21hibwIrQG+UEpaOoxqv+Clfa7EN15SALdRNayEOc z8LWztwxq9sR+3R6+ls9th3bpRLnOz1304NJalddlW49G9uLsojjOmUQPPOhcpKC4mj8vbTXIV6y aIOc0OB9p2Ne1RPvkR9HKUls+4KdLmg/RM+M2azhWNU= ) ; Key ID = 18181`
	`govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAaliuQxn6wYYXNaFIgxcTIvLVi2VSoqrZZrSgkiS8dZ0Zlr9OKauj6YHIuP4uD1vlZ9N2GB2 hr0BIOBKMvIAMcfg3dFDxSU7/3L8ZqgSotnoDrYFeMitUGelPtuUxT6lKMHAubXqMCMvwlHyb3Yo KdX+RHn8vSNw10dggAzTUAQx ) ; Key ID = 9048`
	`govt.nz. 3600 IN DNSKEY ( 256 3 8 AwEAAdYv4mXPlMxinwiWUAwAgbbxV2eTtFsrLCRkYnBEljfxR2Pxbm939+FNIqHnQLkoqLwPwqNM XoWDNDbAURcGP2jKbN5K1Pt01BMqQfiuprJDEtT9aROmIPGQ+jtAoI7yonADQYhMdb9C9yuBOGol LVKE6wljegEqoNzrBudE+ONx ) ; Key ID = 18364`
	DNSKEY=21092/SEP is now in the chain-of-trust
	DS=21092/SHA-256 verifies DNSKEY=21092/SEP
	DS=21092/SHA-1 verifies DNSKEY=21092/SEP
	DNSKEY=18181/SEP is now in the chain-of-trust
	DS=18181/SHA-1 verifies DNSKEY=18181/SEP
	DS=18181/SHA-256 verifies DNSKEY=18181/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`govt.nz. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240530202442 20240516224400 21092 govt.nz. FpRdjB8MT1ykWbk+zwCXh0HKbqAkebamMdrIloq6mzK4VkNFDrNBjd9nmxQu4EAaYVQgNGCPiwG9 VcCztWEY9NONrlkkevgJnCCAgw8O2y4NJ3957FteW7G+ejzi6++1N+CvR6cNsLl+c4D3/Efwpabg 0yNgneRyGefQ/fTsr5XomZb2LCfFVvvF2R+L9c43XFvTH160amK4xKA9j+d6nj3oPQu+agqg8DD/ 4eOQqR8LKLqvofUZAHP2JEhJAg4tlOEqT4B7ulk4rWgoHZaFWO+uyxvYVfmBjZonZQC9IJKRaDBF UEGNFgegItE+Om4KBTf3XYJtL+XEqF9a5Utxzw== )`
	RRSIG=21092 and DNSKEY=21092/SEP verifies the DNSKEY RRset
	DNSKEY=9048 is now in the chain-of-trust
	DNSKEY=18364 is now in the chain-of-trust
	Query to ns7.dns.net.nz for www.ncsc.govt.nz/A
	Received 633 bytes from 194.146.106.54
	;; Response received from [194.146.106.54] 633 octets ;; HEADER SECTION ;; id = 37011 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ncsc.govt.nz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ncsc.govt.nz. 86400 IN NS ns1.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns4.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns3.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns2.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns5.digital.govt.nz. ncsc.govt.nz. 86400 IN DS ( 6819 13 2 a7f254c750a0e23376ead6d0c563396ee555c534753db6cf2e9bd3a0325bbaab ) ncsc.govt.nz. 86400 IN DS ( 20931 13 2 d4e77ad23724ca43f131e520ea66fd3eda3b5520c0565aab7f18462f9f30dd1e ) ncsc.govt.nz. 86400 IN RRSIG ( DS 8 3 86400 20240523175647 20240509112741 18364 govt.nz. I2uTliNNErLQYTdtomJmaO2sdpSq3Bf6XmP6L5gO8mb5akMCxqlyXAu/a/QwKUWneKX8BNNDFIza S9qVA2yBZ2FLRAEHjgVyQD5zxAuAfITt45j2FE3hrwVxAUXkx2j8QPIh7pk+yPsEAHgWQwhkLMOx rM6m09ZDEzCZTTuA6qU= ) ;; ADDITIONAL SECTION (11 records) ns5.digital.govt.nz. 86400 IN A 3.104.25.7 ns4.digital.govt.nz. 86400 IN A 223.165.19.121 ns3.digital.govt.nz. 86400 IN A 223.165.19.120 ns2.digital.govt.nz. 86400 IN A 223.165.18.121 ns1.digital.govt.nz. 86400 IN A 223.165.18.120 ns5.digital.govt.nz. 86400 IN AAAA 2406:da1c:3c8:cd00:233f:e9be:91cf:f15f ns4.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::3 ns3.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::2 ns2.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::3 ns1.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::2 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.net.nz for ncsc.govt.nz/DNSKEY
	Received 629 bytes from 202.46.188.130
	;; Response received from [202.46.188.130] 629 octets ;; HEADER SECTION ;; id = 57165 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncsc.govt.nz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ncsc.govt.nz. 86400 IN NS ns1.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns5.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns3.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns2.digital.govt.nz. ncsc.govt.nz. 86400 IN NS ns4.digital.govt.nz. ncsc.govt.nz. 86400 IN DS ( 6819 13 2 a7f254c750a0e23376ead6d0c563396ee555c534753db6cf2e9bd3a0325bbaab ) ncsc.govt.nz. 86400 IN DS ( 20931 13 2 d4e77ad23724ca43f131e520ea66fd3eda3b5520c0565aab7f18462f9f30dd1e ) ncsc.govt.nz. 86400 IN RRSIG ( DS 8 3 86400 20240523175647 20240509112741 18364 govt.nz. I2uTliNNErLQYTdtomJmaO2sdpSq3Bf6XmP6L5gO8mb5akMCxqlyXAu/a/QwKUWneKX8BNNDFIza S9qVA2yBZ2FLRAEHjgVyQD5zxAuAfITt45j2FE3hrwVxAUXkx2j8QPIh7pk+yPsEAHgWQwhkLMOx rM6m09ZDEzCZTTuA6qU= ) ;; ADDITIONAL SECTION (11 records) ns5.digital.govt.nz. 86400 IN A 3.104.25.7 ns4.digital.govt.nz. 86400 IN A 223.165.19.121 ns3.digital.govt.nz. 86400 IN A 223.165.19.120 ns2.digital.govt.nz. 86400 IN A 223.165.18.121 ns1.digital.govt.nz. 86400 IN A 223.165.18.120 ns5.digital.govt.nz. 86400 IN AAAA 2406:da1c:3c8:cd00:233f:e9be:91cf:f15f ns4.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::3 ns3.digital.govt.nz. 86400 IN AAAA 2403:c200:2:1::2 ns2.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::3 ns1.digital.govt.nz. 86400 IN AAAA 2403:c200:1:1::2 ;; { "EDNS-VERSION": 0 }
	Found child zone ncsc.govt.nz

ncsc.govt.nz

	Checking DS between govt.nz and ncsc.govt.nz
	Query to ns6.dns.net.nz for ncsc.govt.nz/DS
	Received 304 bytes from 185.159.198.130
	;; Response received from [185.159.198.130] 304 octets ;; HEADER SECTION ;; id = 35833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncsc.govt.nz. IN DS ;; ANSWER SECTION (3 records) ncsc.govt.nz. 86400 IN DS ( 20931 13 2 d4e77ad23724ca43f131e520ea66fd3eda3b5520c0565aab7f18462f9f30dd1e ) ncsc.govt.nz. 86400 IN DS ( 6819 13 2 a7f254c750a0e23376ead6d0c563396ee555c534753db6cf2e9bd3a0325bbaab ) ncsc.govt.nz. 86400 IN RRSIG ( DS 8 3 86400 20240523175647 20240509112741 18364 govt.nz. I2uTliNNErLQYTdtomJmaO2sdpSq3Bf6XmP6L5gO8mb5akMCxqlyXAu/a/QwKUWneKX8BNNDFIza S9qVA2yBZ2FLRAEHjgVyQD5zxAuAfITt45j2FE3hrwVxAUXkx2j8QPIh7pk+yPsEAHgWQwhkLMOx rM6m09ZDEzCZTTuA6qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ncsc.govt.nz in the govt.nz zone
	DS=20931/SHA-256 has algorithm ECDSAP256SHA256
	DS=6819/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ncsc.govt.nz. 86400 IN RRSIG ( DS 8 3 86400 20240523175647 20240509112741 18364 govt.nz. I2uTliNNErLQYTdtomJmaO2sdpSq3Bf6XmP6L5gO8mb5akMCxqlyXAu/a/QwKUWneKX8BNNDFIza S9qVA2yBZ2FLRAEHjgVyQD5zxAuAfITt45j2FE3hrwVxAUXkx2j8QPIh7pk+yPsEAHgWQwhkLMOx rM6m09ZDEzCZTTuA6qU= )`
	RRSIG=18364 and DNSKEY=18364 verifies the DS RRset
	DS=20931/SHA-256 is now in the chain-of-trust
	DS=6819/SHA-256 is now in the chain-of-trust
	`ncsc.govt.nz. 86400 IN DS ( 20931 13 2 d4e77ad23724ca43f131e520ea66fd3eda3b5520c0565aab7f18462f9f30dd1e )`
	`ncsc.govt.nz. 86400 IN DS ( 6819 13 2 a7f254c750a0e23376ead6d0c563396ee555c534753db6cf2e9bd3a0325bbaab )`
	Query to ns5.digital.govt.nz for ncsc.govt.nz/DNSKEY
	Received 389 bytes from 3.104.25.7
	;; Response received from [3.104.25.7] 389 octets ;; HEADER SECTION ;; id = 2289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ncsc.govt.nz. IN DNSKEY ;; ANSWER SECTION (4 records) ncsc.govt.nz. 3600 IN DNSKEY ( 256 3 13 eAr2UpcW2B3hzrfWpwXSFJA4v+pbuqHSSx4lUJk3MAy1qoDCk33FGT2WKsdiXdBKs/HGLB/JKD8Z Tgna5mQWOA== ) ; Key ID = 34743 ncsc.govt.nz. 3600 IN DNSKEY ( 256 3 13 lKBFXDjPTvD5uMBWmEkZK/AVcf+FLjSRivckyzC7D2GKyKgh4WSo4xp4hAXLO2DOKTd60S04pJz5 1pnt+KnKsw== ) ; Key ID = 12732 ncsc.govt.nz. 3600 IN DNSKEY ( 257 3 13 p526q/HO6C2f002/bRMusPthGtL6+28n0NJMYkJzKMwK7XrisPw6XyNDGLZFIhTCWgnYWIBxLvNX kUDyVV+omQ== ) ; Key ID = 20931 ncsc.govt.nz. 3600 IN RRSIG ( DNSKEY 13 3 3600 20240526080059 20240512020452 20931 ncsc.govt.nz. RilylQ+K756VikUKEZ7RysTb+Q62l5K6YDwu9aImj7++yDu0zDsJaM6XVFjibBf8sfZ+xWHLCUPo PXpMAZZSuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ncsc.govt.nz
	`ncsc.govt.nz. 3600 IN DNSKEY ( 256 3 13 eAr2UpcW2B3hzrfWpwXSFJA4v+pbuqHSSx4lUJk3MAy1qoDCk33FGT2WKsdiXdBKs/HGLB/JKD8Z Tgna5mQWOA== ) ; Key ID = 34743`
	`ncsc.govt.nz. 3600 IN DNSKEY ( 256 3 13 lKBFXDjPTvD5uMBWmEkZK/AVcf+FLjSRivckyzC7D2GKyKgh4WSo4xp4hAXLO2DOKTd60S04pJz5 1pnt+KnKsw== ) ; Key ID = 12732`
	`ncsc.govt.nz. 3600 IN DNSKEY ( 257 3 13 p526q/HO6C2f002/bRMusPthGtL6+28n0NJMYkJzKMwK7XrisPw6XyNDGLZFIhTCWgnYWIBxLvNX kUDyVV+omQ== ) ; Key ID = 20931`
	DNSKEY=20931/SEP is now in the chain-of-trust
	DS=20931/SHA-256 verifies DNSKEY=20931/SEP
	DS=6819/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`ncsc.govt.nz. 3600 IN RRSIG ( DNSKEY 13 3 3600 20240526080059 20240512020452 20931 ncsc.govt.nz. RilylQ+K756VikUKEZ7RysTb+Q62l5K6YDwu9aImj7++yDu0zDsJaM6XVFjibBf8sfZ+xWHLCUPo PXpMAZZSuA== )`
	RRSIG=20931 and DNSKEY=20931/SEP verifies the DNSKEY RRset
	DNSKEY=34743 is now in the chain-of-trust
	DNSKEY=12732 is now in the chain-of-trust
	Query to ns3.digital.govt.nz for www.ncsc.govt.nz/A
	Received 187 bytes from 103.172.233.120
	;; Response received from [103.172.233.120] 187 octets ;; HEADER SECTION ;; id = 2379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ncsc.govt.nz. IN A ;; ANSWER SECTION (2 records) www.ncsc.govt.nz. 300 IN CNAME dmf3b.x.incapdns.net. www.ncsc.govt.nz. 300 IN RRSIG ( CNAME 13 4 300 20240526080059 20240512010452 12732 ncsc.govt.nz. JDVDuJcdgRudbcqSlCR3x6J7E2+qNupyxB+5/P6dvYnXY13+yMqSD6CZdZI3HjKWkbnoqrfK88R5 iaMQEK6K+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.digital.govt.nz is authoritative for www.ncsc.govt.nz
	Query to ns5.digital.govt.nz for www.ncsc.govt.nz/DNSKEY
	Received 187 bytes from 3.104.25.7
	;; Response received from [3.104.25.7] 187 octets ;; HEADER SECTION ;; id = 36641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ncsc.govt.nz. IN DNSKEY ;; ANSWER SECTION (2 records) www.ncsc.govt.nz. 300 IN CNAME dmf3b.x.incapdns.net. www.ncsc.govt.nz. 300 IN RRSIG ( CNAME 13 4 300 20240526080059 20240512010452 12732 ncsc.govt.nz. JDVDuJcdgRudbcqSlCR3x6J7E2+qNupyxB+5/P6dvYnXY13+yMqSD6CZdZI3HjKWkbnoqrfK88R5 iaMQEK6K+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ncsc.govt.nz zone
	www.ncsc.govt.nz is a CNAME to dmf3b.x.incapdns.net
	Found 1 RRSIGs over CNAME RRset
	`www.ncsc.govt.nz. 300 IN RRSIG ( CNAME 13 4 300 20240526080059 20240512010452 12732 ncsc.govt.nz. JDVDuJcdgRudbcqSlCR3x6J7E2+qNupyxB+5/P6dvYnXY13+yMqSD6CZdZI3HjKWkbnoqrfK88R5 iaMQEK6K+Q== )`
	RRSIG=12732 and DNSKEY=12732 verifies the CNAME RRset

	Query to g.root-servers.net for dmf3b.x.incapdns.net/A
	Received 1183 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1183 octets ;; HEADER SECTION ;; id = 22916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . ApDmZzEJeS8m6jSh5KEOVYD1MmNxcMUjnwVxSENSUjJ0fgXfZzvhMgi11OR9fxtMdzmVwcnXZubs HaFuMecI2rsPWaSsyinBSqbvpJK7HCaEAJ5/O+QIsT9Qo73V9lessQa7HoOSZRX2/vihNuTNYFMt QjrUHISK1Yxbdw2etv1gyLw+GsJMTLN4IHdWVzaei7OuYtKoK4lLj8LJ7wn1cEO7qH+PIHJmBDtq Lx3oE+CKqrzFrv2t1thfzVaDmNVn7ja72PUxRztYCFA0rhtx7Y+O4H4JEoBYjiOyj9t3Las2areo xoxum7ASmPEJpR9ibgUxzHuvp1wRfZQi4u1oxQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1160 octets ;; HEADER SECTION ;; id = 3774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . ApDmZzEJeS8m6jSh5KEOVYD1MmNxcMUjnwVxSENSUjJ0fgXfZzvhMgi11OR9fxtMdzmVwcnXZubs HaFuMecI2rsPWaSsyinBSqbvpJK7HCaEAJ5/O+QIsT9Qo73V9lessQa7HoOSZRX2/vihNuTNYFMt QjrUHISK1Yxbdw2etv1gyLw+GsJMTLN4IHdWVzaei7OuYtKoK4lLj8LJ7wn1cEO7qH+PIHJmBDtq Lx3oE+CKqrzFrv2t1thfzVaDmNVn7ja72PUxRztYCFA0rhtx7Y+O4H4JEoBYjiOyj9t3Las2areo xoxum7ASmPEJpR9ibgUxzHuvp1wRfZQi4u1oxQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to f.root-servers.net for net/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 17716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . ApDmZzEJeS8m6jSh5KEOVYD1MmNxcMUjnwVxSENSUjJ0fgXfZzvhMgi11OR9fxtMdzmVwcnXZubs HaFuMecI2rsPWaSsyinBSqbvpJK7HCaEAJ5/O+QIsT9Qo73V9lessQa7HoOSZRX2/vihNuTNYFMt QjrUHISK1Yxbdw2etv1gyLw+GsJMTLN4IHdWVzaei7OuYtKoK4lLj8LJ7wn1cEO7qH+PIHJmBDtq Lx3oE+CKqrzFrv2t1thfzVaDmNVn7ja72PUxRztYCFA0rhtx7Y+O4H4JEoBYjiOyj9t3Las2areo xoxum7ASmPEJpR9ibgUxzHuvp1wRfZQi4u1oxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . ApDmZzEJeS8m6jSh5KEOVYD1MmNxcMUjnwVxSENSUjJ0fgXfZzvhMgi11OR9fxtMdzmVwcnXZubs HaFuMecI2rsPWaSsyinBSqbvpJK7HCaEAJ5/O+QIsT9Qo73V9lessQa7HoOSZRX2/vihNuTNYFMt QjrUHISK1Yxbdw2etv1gyLw+GsJMTLN4IHdWVzaei7OuYtKoK4lLj8LJ7wn1cEO7qH+PIHJmBDtq Lx3oE+CKqrzFrv2t1thfzVaDmNVn7ja72PUxRztYCFA0rhtx7Y+O4H4JEoBYjiOyj9t3Las2areo xoxum7ASmPEJpR9ibgUxzHuvp1wRfZQi4u1oxQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 65306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522141035 20240507140535 37331 net. sG1F3wvmbKVzg3vyuHzxHbQJdUGnDC5n+RrNJC+eSoIAb/iGjfNvcyF+7iVtJU81W2iRpNEhDgc+ 9Vr6bmQd1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522141035 20240507140535 37331 net. sG1F3wvmbKVzg3vyuHzxHbQJdUGnDC5n+RrNJC+eSoIAb/iGjfNvcyF+7iVtJU81W2iRpNEhDgc+ 9Vr6bmQd1g== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to m.gtld-servers.net for dmf3b.x.incapdns.net/A
	Received 1012 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 1012 octets ;; HEADER SECTION ;; id = 59404 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 43 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 53236 8 2 5a75b5685db5a808275c39a9f7d4d4c227c26ab2f0c2be84ad919a018536d770 ) incapdns.net. 86400 IN DS ( 53236 8 1 5343e627ccadf36a33c3e975c0d502d08a253131 ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20240521064546 20240514053546 51809 net. 6wes3D0OPJ7h1ePArw4KC0hkCBGDWwjitAglf4es7jn9KFEjpD4wg3NYlwPo6c7D+HBpPEixwVp/ DstPiSvH+w== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Query to b.gtld-servers.net for incapdns.net/DNSKEY
	Received 1004 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 1004 octets ;; HEADER SECTION ;; id = 19477 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 43 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 53236 8 2 5a75b5685db5a808275c39a9f7d4d4c227c26ab2f0c2be84ad919a018536d770 ) incapdns.net. 86400 IN DS ( 53236 8 1 5343e627ccadf36a33c3e975c0d502d08a253131 ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20240521064546 20240514053546 51809 net. 6wes3D0OPJ7h1ePArw4KC0hkCBGDWwjitAglf4es7jn9KFEjpD4wg3NYlwPo6c7D+HBpPEixwVp/ DstPiSvH+w== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Found child zone incapdns.net

incapdns.net

	Checking DS between net and incapdns.net
	Query to l.gtld-servers.net for incapdns.net/DS
	Received 1116 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 1116 octets ;; HEADER SECTION ;; id = 39373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DS ;; ANSWER SECTION (3 records) incapdns.net. 86400 IN DS ( 53236 8 2 5a75b5685db5a808275c39a9f7d4d4c227c26ab2f0c2be84ad919a018536d770 ) incapdns.net. 86400 IN DS ( 53236 8 1 5343e627ccadf36a33c3e975c0d502d08a253131 ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20240521064546 20240514053546 51809 net. 6wes3D0OPJ7h1ePArw4KC0hkCBGDWwjitAglf4es7jn9KFEjpD4wg3NYlwPo6c7D+HBpPEixwVp/ DstPiSvH+w== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20240522065107 20240515054107 51809 net. GKBrpSLTduBlxUxK6mr3tgsuJQ9ar4Vt+8XxWUyzJ8LrWJ52BGKRMbNI0NOGmDPExh25ruDeaJiX N358Nfr2NA== ) ;; ADDITIONAL SECTION (27 records) f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for incapdns.net in the net zone
	DS=53236/SHA-1 uses a deprecated digest algorithm
	DS=53236/SHA-256 has algorithm RSASHA256
	DS=53236/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20240521064546 20240514053546 51809 net. 6wes3D0OPJ7h1ePArw4KC0hkCBGDWwjitAglf4es7jn9KFEjpD4wg3NYlwPo6c7D+HBpPEixwVp/ DstPiSvH+w== )`
	RRSIG=51809 and DNSKEY=51809 verifies the DS RRset
	DS=53236/SHA-256 is now in the chain-of-trust
	`incapdns.net. 86400 IN DS ( 53236 8 2 5a75b5685db5a808275c39a9f7d4d4c227c26ab2f0c2be84ad919a018536d770 )`
	`incapdns.net. 86400 IN DS ( 53236 8 1 5343e627ccadf36a33c3e975c0d502d08a253131 )`
	Query to ns3.incapdns.net for incapdns.net/DNSKEY
	Received 765 bytes from 198.143.63.9
	;; Response received from [198.143.63.9] 765 octets ;; HEADER SECTION ;; id = 27885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (3 records) incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAcyid0ewD6kESufwYggD8LPZVCRpuI5z5RB1oiB335ix3ejVOI03U/HmPvH72rlnTcmIHBwI mfZe7LAHWlIeTVvoQ+OThLQNBuNpXOxUnzFr6CuYoBsEVIr8Yfz7EyUe4eEJY1evYRg1plH4KJ3K ddKsF7FSzeWmk/SD08Ya44PWjk/2KO++ImvcqXd+0uxZokk73qFDIERY8n25D83Wf9dzkDR1BgH4 GioQCkcR8WoeJHeMFwKD/O3PMm2BC8xs6itMHpx2nosT/hxg/F/WdE1oPdonGlL5ub+cAUk4w91M 2n5eU4KVS6TO403uS8roCE87WXL6bIejyxW4NFnuJXM= ) ; Key ID = 53236 incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAdYemWh+9vnOtnRUwFIZL5mmMDIAGWg8GbPgsAFXCdsCP7kRzr3AaX17kCs8coRwMAed9Hap /5HMS2vZRuxAgpfuHEYjM7rVCye2hF7PklzbUT90qbVYEomOS9Kg8GD2lTnhI8fMrqxzM8arW1OT QIaSXL0pUykYzlUhWHZ/xQSH ) ; Key ID = 12336 incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240709000000 20230709000000 53236 incapdns.net. LN6y0+/K7deJECvSxzvTr6tRZCRa8RRETM9fGzn+9c2sK9DhfXgNnc8kK5Zd1txwTvYwmR6KWjDk W5hq1rGzxwnL1g9s1p39KSitD/FC3ai2JQrskklSvTcCHqzQSTgjKDqi9W8fAAlaxoOe5+wYh2U2 xR0/YkbOYEHfQbNjtnp4s+Ozz5oV0in+gm+RUnvGJYzuwvXsRN99jF8wtQJiWh75zHdqwMLPKPPT RifJsNtUyw7699BJt1bEHwgq6PqgDkTl17A1pemIZGdQUNLwcH3TWTjY2Wr/sEerrThltJTZ6/XR UaMVWdYjlQliK1pFoIgUgfugYj+CT0kkf1O95g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for incapdns.net
	`incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAcyid0ewD6kESufwYggD8LPZVCRpuI5z5RB1oiB335ix3ejVOI03U/HmPvH72rlnTcmIHBwI mfZe7LAHWlIeTVvoQ+OThLQNBuNpXOxUnzFr6CuYoBsEVIr8Yfz7EyUe4eEJY1evYRg1plH4KJ3K ddKsF7FSzeWmk/SD08Ya44PWjk/2KO++ImvcqXd+0uxZokk73qFDIERY8n25D83Wf9dzkDR1BgH4 GioQCkcR8WoeJHeMFwKD/O3PMm2BC8xs6itMHpx2nosT/hxg/F/WdE1oPdonGlL5ub+cAUk4w91M 2n5eU4KVS6TO403uS8roCE87WXL6bIejyxW4NFnuJXM= ) ; Key ID = 53236`
	`incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAdYemWh+9vnOtnRUwFIZL5mmMDIAGWg8GbPgsAFXCdsCP7kRzr3AaX17kCs8coRwMAed9Hap /5HMS2vZRuxAgpfuHEYjM7rVCye2hF7PklzbUT90qbVYEomOS9Kg8GD2lTnhI8fMrqxzM8arW1OT QIaSXL0pUykYzlUhWHZ/xQSH ) ; Key ID = 12336`
	DNSKEY=53236/SEP is now in the chain-of-trust
	DS=53236/SHA-256 verifies DNSKEY=53236/SEP
	DS=53236/SHA-1 verifies DNSKEY=53236/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240709000000 20230709000000 53236 incapdns.net. LN6y0+/K7deJECvSxzvTr6tRZCRa8RRETM9fGzn+9c2sK9DhfXgNnc8kK5Zd1txwTvYwmR6KWjDk W5hq1rGzxwnL1g9s1p39KSitD/FC3ai2JQrskklSvTcCHqzQSTgjKDqi9W8fAAlaxoOe5+wYh2U2 xR0/YkbOYEHfQbNjtnp4s+Ozz5oV0in+gm+RUnvGJYzuwvXsRN99jF8wtQJiWh75zHdqwMLPKPPT RifJsNtUyw7699BJt1bEHwgq6PqgDkTl17A1pemIZGdQUNLwcH3TWTjY2Wr/sEerrThltJTZ6/XR UaMVWdYjlQliK1pFoIgUgfugYj+CT0kkf1O95g== )`
	RRSIG=53236 and DNSKEY=53236/SEP verifies the DNSKEY RRset
	DNSKEY=12336 is now in the chain-of-trust
	Query to ns3.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.63.5
	;; Response received from [198.143.63.5] 237 octets ;; HEADER SECTION ;; id = 22337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns4.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.105
	;; Response received from [198.143.61.105] 533 octets ;; HEADER SECTION ;; id = 21546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.62.3
	;; Response received from [198.143.62.3] 539 octets ;; HEADER SECTION ;; id = 37225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns5.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.62.250
	;; Response received from [198.143.62.250] 277 octets ;; HEADER SECTION ;; id = 26324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.62.11
	;; Response received from [198.143.62.11] 277 octets ;; HEADER SECTION ;; id = 14937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.63.107
	;; Response received from [198.143.63.107] 277 octets ;; HEADER SECTION ;; id = 3074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.109
	;; Response received from [198.143.61.109] 277 octets ;; HEADER SECTION ;; id = 28431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.11
	;; Response received from [198.143.61.11] 277 octets ;; HEADER SECTION ;; id = 26436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.63.9
	;; Response received from [198.143.63.9] 237 octets ;; HEADER SECTION ;; id = 59112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

incapdns.net

	Query to ns2.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.62.200
	;; Response received from [198.143.62.200] 237 octets ;; HEADER SECTION ;; id = 48094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns4.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.105
	;; Response received from [198.143.61.105] 533 octets ;; HEADER SECTION ;; id = 4407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.63.105
	;; Response received from [198.143.63.105] 539 octets ;; HEADER SECTION ;; id = 30396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns2.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.62.9
	;; Response received from [198.143.62.9] 237 octets ;; HEADER SECTION ;; id = 44800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

incapdns.net

	Query to ns4.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.61.250
	;; Response received from [198.143.61.250] 237 octets ;; HEADER SECTION ;; id = 4200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns6.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.63.109
	;; Response received from [198.143.63.109] 533 octets ;; HEADER SECTION ;; id = 36411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.63.105
	;; Response received from [198.143.63.105] 539 octets ;; HEADER SECTION ;; id = 41279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns4.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.61.101
	;; Response received from [198.143.61.101] 237 octets ;; HEADER SECTION ;; id = 15639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

incapdns.net

	Query to ns1.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.61.9
	;; Response received from [198.143.61.9] 237 octets ;; HEADER SECTION ;; id = 51295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns1.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.2
	;; Response received from [198.143.61.2] 533 octets ;; HEADER SECTION ;; id = 8296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.61.3
	;; Response received from [198.143.61.3] 539 octets ;; HEADER SECTION ;; id = 2723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns1.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.61.5
	;; Response received from [198.143.61.5] 237 octets ;; HEADER SECTION ;; id = 30502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

incapdns.net

	Query to ns5.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.62.129
	;; Response received from [198.143.62.129] 237 octets ;; HEADER SECTION ;; id = 9781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns6.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.63.103
	;; Response received from [198.143.63.103] 533 octets ;; HEADER SECTION ;; id = 6915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.62.129
	;; Response received from [198.143.62.129] 539 octets ;; HEADER SECTION ;; id = 63278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns5.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.62.129
	;; Response received from [198.143.62.129] 237 octets ;; HEADER SECTION ;; id = 38553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

incapdns.net

	Query to ns6.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.63.129
	;; Response received from [198.143.63.129] 237 octets ;; HEADER SECTION ;; id = 22526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.incapdns.net is authoritative for dmf3b.x.incapdns.net
	Query to ns6.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.63.105
	;; Response received from [198.143.63.105] 533 octets ;; HEADER SECTION ;; id = 60645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20240709000000 20230709000000 12336 incapdns.net. ZscUSHrj6IaGQVzajy1zk4jLrsopiPS5U4gxy3fPINgjvfsQeGOMbDRPLsExSOLyr6cAEpcaK7Rp KnZO1vkINnnZuBOxLRZ/529XbVsl2WaynGO/bOZ66AuBFnMDkeGzE6MOB6ROodsHtAckBzY+HBjm vBYfmQSXUNs1xjgSBTw= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehuc1iskvf3vih8fm1buctr25gl2bve TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. TvY1sIFo4WQomPwt8HqfM8Y4HuiJT3ncqd9rZ1fGwr+iO4wPn38z3GLO3gsIsz4YyRDQNoKlalwd oGfSB5+W1+Zd8IYia+yir8HEFR3icgyCQ2NtHpPRGMkBIYXBijWD4mzJXiyK1hIP7Uh0ynPSoCsh iLkyykcblTa/AJxF6OA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for dmf3b.x.incapdns.net/DNSKEY
	Received 539 bytes from 198.143.63.105
	;; Response received from [198.143.63.105] 539 octets ;; HEADER SECTION ;; id = 15219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20240709000000 20230709000000 12336 incapdns.net. 0CwfMLjLhVIA3bktDA1HO1TfPvmFmeXihxMq6U2AzhJ22/beFA/71C6U5bTRRJwL1viQAs6+5HTQ 8b/1J1yUk9epX9csHMcDNbCvpFxoUaLwg2n65yOc6Bvh1vjU37ywbeWmShVqFH7uN8DAnb7Vz95x J/1DP888rJKzgnkjdv4= ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 f1k6h8bo6n7e2njvo4oga132glbvu88l A RRSIG ) f1k3aam4kl8icco5uht191ua5rsv7edg.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20240709000000 20230709000000 12336 incapdns.net. gduO29hZ3UvqtPha4sOZeppmJ+40beI6lDGEE7F/wM6XF3uNWxQ3cX6c/C95GEEiI4i46wELCbnF LhdDZYeWA6vC+Wy28uWe5vLM6gRWWS4ZxjKoSzebF0HW3tt2CGxI1JHUAdFnRtX/b/AxaYrPucpq cEyqEAr0ZrBQu72YaCA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns6.incapdns.net for dmf3b.x.incapdns.net/A
	Received 237 bytes from 198.143.63.109
	;; Response received from [198.143.63.109] 237 octets ;; HEADER SECTION ;; id = 8607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dmf3b.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) dmf3b.x.incapdns.net. 30 IN A 45.60.0.111 dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dmf3b.x.incapdns.net A RR has value 45.60.0.111
	Found 1 RRSIGs over A RRset
	`dmf3b.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20240709000000 20230709000000 12336 incapdns.net. xEUDeDT1ABvkgLpCazlqwhCvFnCr0tw/iWPi+vpFDoY+BB9RoovlygJXzj5adpeCk3sCHTw7m0if TXRjFk09rU93nk2PTBgmjB+N6EXm274VRN2Yf/PUZIxUsBb1/XoSFIla6K9F1OCXsyeURE+q2j0H bmeu0NTHoAAUX/bECfU= )`
	RRSIG=12336 and DNSKEY=12336 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.ncsc.govt.nz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: