DNSSEC Debugger - 4.c.d.c.2.0.a.2.ip6.arpa

Domain Name:

Time: 2026-03-17 13:00:26 UTC

Analyzing DNSSEC problems for 4.c.d.c.2.0.a.2.ip6.arpa

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 20241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to i.root-servers.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 861 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 861 octets ;; HEADER SECTION ;; id = 34741 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260330060000 20260317050000 41323 arpa. KYw+bagJc7e21xGFaokatACCzeFA753bGeJDEkUaD0r+U5PgbrARi8mEHogkNbhdv4O3kfP/wCcl 1e9U5Bpu+/SqD9usYw4DH2o0ByxiWsPQWeuF6w9qjt8GUevV0JRnQUVdKxXmcSahLFjFKRY+LVef K5R+pCT+nu3s6RXno/HdjnoByqpipp/nfpbqpvreY5XijsethyZHLHc3liBpm/mh66Jb1ZwGYSR9 7yZXX6BKWU7gJoTA7v7BNWvez6Dj6Opt7Byk0l48PrmpdD8EoncE0sJRgKS+x4XbjeSduHbyMWy4 gD+9tpXkWw/8YbylbPZB/dDMxJBz7GmEf6DCwg== ) ;; ADDITIONAL SECTION (13 records) f.ip6-servers.arpa. 172800 IN A 193.0.9.2 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 b.ip6-servers.arpa. 172800 IN A 199.253.182.182 a.ip6-servers.arpa. 172800 IN A 199.180.182.53 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for arpa/DNSKEY
	Received 877 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 877 octets ;; HEADER SECTION ;; id = 29296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DNSKEY ;; ANSWER SECTION (3 records) arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdhp2D7KL43KrfuBRyF0m4rUzo3GfnlCypjAO50OTdzEg4MDpjcssiUulWgyURVKOJV1vpFr b0kZ+72pdU9ahofVk8KmyrI9L7v4QsgylHEKNxhPjwM2z7B5NIetshWMYzJcRurx/vp+Xx3caC1j GWqEvPqqEQFS3rXIdh85A8hOaKHY5z91tIMaHUrlUvyh6qD8mLrIQPMS5l+lpWEmCCTEMbsPcEZQ fA5JMrqW16kGH3LVJSWZgK6VrECnFD/5HrccBhMkgNxyxxzhvPyBGkpss9OnpBgrgGpJMp+uDUXe nJ4CUJxReg6sW48nNBdeIUA7MlkjiOw8TH4V/mniHm0= ) ; keytag 41323 arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581 arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260402000000 20260312000000 42581 arpa. V5WstoyzZ4SWB+LhluTOz5XvljDp0k+E1KbYGlmMZI3xVT89f33J3XxjlUGTvRNSubSf/I8BWbSd /KxSWGz5BSgw0vdav0Q0aroORUj1QFat7cc9N5DF9f5FSk4YO7sqlNkNfm98vnaUw9oo3DePEZa9 SQ7GZKYnxrkbDpNXbKvRUv3sE8mFA8+XeWzDU2xgrL+jPwIgZngEJPrLPFJmUXfpbM6g6RLEEyfM i5MZgHTxTuHIE4b+86ueCuewApFUqGyAPPvPyf3B8MjfkeumQf5S5YachptCHiD5sXSwGVQtjXHt COOdKXeY2NiQY6qNz3I72HQHoRxdEtWFkuwNQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone arpa
	Attempting to learn nameservers for arpa
	Query to l.root-servers.net for arpa/NS
	Received 1048 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1048 octets ;; HEADER SECTION ;; id = 59988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 13 ;; nscount = 0 arcount = 25 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN NS ;; ANSWER SECTION (13 records) arpa. 518400 IN NS a.ns.arpa. arpa. 518400 IN NS b.ns.arpa. arpa. 518400 IN NS c.ns.arpa. arpa. 518400 IN NS d.ns.arpa. arpa. 518400 IN NS e.ns.arpa. arpa. 518400 IN NS f.ns.arpa. arpa. 518400 IN NS g.ns.arpa. arpa. 518400 IN NS h.ns.arpa. arpa. 518400 IN NS i.ns.arpa. arpa. 518400 IN NS k.ns.arpa. arpa. 518400 IN NS l.ns.arpa. arpa. 518400 IN NS m.ns.arpa. arpa. 518400 IN RRSIG ( NS 8 1 518400 20260330060000 20260317050000 41323 arpa. QZFnVaNAIXZbzRdJ6E44T2VVLoFAkAEnK0Uy7TYVKv2HMcqJPT0prGBf0cK3rHnb6P8i1ZOrvo2B v8VTk/P6vYSkwDyRErduGT0+Gi8ElcRYwUtCF48U2ov0VW5kmo5scUj1fflLb7yD8iZZraogbQnS g/66Mo/OnUAtjtPqnePABBMLA9mHW9964R9EO0TBu4vBWeeBSQzeSTmzphl4AINH2/C7xXOd56SX usGHme7o7X/ZuvdA3x31HiNaontrZmGC4hYZ6h1hjmOBNLJ26r/UuNDI5HjoPiFGA6uOHfe2BNmG Elf5xQ6lmnJMISc7vGYItrH1q8EPaVnoHH7URg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (25 records) a.ns.arpa. 518400 IN A 198.41.0.4 a.ns.arpa. 518400 IN AAAA 2001:503:ba3e::2:30 b.ns.arpa. 518400 IN A 170.247.170.2 b.ns.arpa. 518400 IN AAAA 2801:1b8:10::b c.ns.arpa. 518400 IN A 192.33.4.12 c.ns.arpa. 518400 IN AAAA 2001:500:2::c d.ns.arpa. 518400 IN A 199.7.91.13 d.ns.arpa. 518400 IN AAAA 2001:500:2d::d e.ns.arpa. 518400 IN A 192.203.230.10 e.ns.arpa. 518400 IN AAAA 2001:500:a8::e f.ns.arpa. 518400 IN A 192.5.5.241 f.ns.arpa. 518400 IN AAAA 2001:500:2f::f g.ns.arpa. 518400 IN A 192.112.36.4 g.ns.arpa. 518400 IN AAAA 2001:500:12::d0d h.ns.arpa. 518400 IN A 198.97.190.53 h.ns.arpa. 518400 IN AAAA 2001:500:1::53 i.ns.arpa. 518400 IN A 192.36.148.17 i.ns.arpa. 518400 IN AAAA 2001:7fe::53 k.ns.arpa. 518400 IN A 193.0.14.129 k.ns.arpa. 518400 IN AAAA 2001:7fd::1 l.ns.arpa. 518400 IN A 199.7.83.42 l.ns.arpa. 518400 IN AAAA 2001:500:9f::42 m.ns.arpa. 518400 IN A 202.12.27.33 m.ns.arpa. 518400 IN AAAA 2001:dc3::35 ;; { "EDNS-VERSION": 0 }
	Found arpa nameservers: a.ns.arpa, b.ns.arpa, c.ns.arpa, d.ns.arpa, e.ns.arpa, f.ns.arpa, g.ns.arpa, h.ns.arpa, i.ns.arpa, k.ns.arpa, l.ns.arpa, m.ns.arpa

arpa

	Checking DS between . and arpa
	Query to d.root-servers.net for arpa/DS
	Received 368 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 368 octets ;; HEADER SECTION ;; id = 14381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DS ;; ANSWER SECTION (2 records) arpa. 86400 IN DS ( 42581 8 2 f28391c1ed4dc0f151edd251a3103dce0b9a5a251acf6e24073771d71f3c40f9 ) arpa. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . NCvVoezSVjpOybd9GUlrqf39A4Qkw/9k6YRL8DIthevb0/vCZQ4Y6duYamTULE8BtoUCI8iwg0t/ 9OaJnbeboDEl9H0AxCYHRhnbhy2cABKmbXeqRY9TCitmz6B/qDNdXf+QjWU7Q5exhsIDvvSYv934 Ff3E0hHyiARVu0ZJgNvvIIGsH4vGnBL3DekKPCa0zWtvkYz/gmT6hqG7APpmvFoBbyrOUYpD6JF2 xo84JZt354mRXPpGckmIzBCH0GISgztkLKh+yXl11SNwWRp0zIG4JwGW0F7bQb3VEQYbS2RRKMtQ bPCpqIiPIHgm0ostCfecaD/0tOG+wZIpfYZ1/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for arpa in the . zone
	DS=42581/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`arpa. 86400 IN RRSIG ( DS 8 1 86400 20260330050000 20260317040000 21831 . NCvVoezSVjpOybd9GUlrqf39A4Qkw/9k6YRL8DIthevb0/vCZQ4Y6duYamTULE8BtoUCI8iwg0t/ 9OaJnbeboDEl9H0AxCYHRhnbhy2cABKmbXeqRY9TCitmz6B/qDNdXf+QjWU7Q5exhsIDvvSYv934 Ff3E0hHyiARVu0ZJgNvvIIGsH4vGnBL3DekKPCa0zWtvkYz/gmT6hqG7APpmvFoBbyrOUYpD6JF2 xo84JZt354mRXPpGckmIzBCH0GISgztkLKh+yXl11SNwWRp0zIG4JwGW0F7bQb3VEQYbS2RRKMtQ bPCpqIiPIHgm0ostCfecaD/0tOG+wZIpfYZ1/g== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=42581/SHA-256 is now in the chain-of-trust
	`arpa. 86400 IN DS ( 42581 8 2 f28391c1ed4dc0f151edd251a3103dce0b9a5a251acf6e24073771d71f3c40f9 )`
	Query to i.ns.arpa for arpa/DNSKEY
	Received 877 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 877 octets ;; HEADER SECTION ;; id = 39513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DNSKEY ;; ANSWER SECTION (3 records) arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdhp2D7KL43KrfuBRyF0m4rUzo3GfnlCypjAO50OTdzEg4MDpjcssiUulWgyURVKOJV1vpFr b0kZ+72pdU9ahofVk8KmyrI9L7v4QsgylHEKNxhPjwM2z7B5NIetshWMYzJcRurx/vp+Xx3caC1j GWqEvPqqEQFS3rXIdh85A8hOaKHY5z91tIMaHUrlUvyh6qD8mLrIQPMS5l+lpWEmCCTEMbsPcEZQ fA5JMrqW16kGH3LVJSWZgK6VrECnFD/5HrccBhMkgNxyxxzhvPyBGkpss9OnpBgrgGpJMp+uDUXe nJ4CUJxReg6sW48nNBdeIUA7MlkjiOw8TH4V/mniHm0= ) ; keytag 41323 arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581 arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260402000000 20260312000000 42581 arpa. V5WstoyzZ4SWB+LhluTOz5XvljDp0k+E1KbYGlmMZI3xVT89f33J3XxjlUGTvRNSubSf/I8BWbSd /KxSWGz5BSgw0vdav0Q0aroORUj1QFat7cc9N5DF9f5FSk4YO7sqlNkNfm98vnaUw9oo3DePEZa9 SQ7GZKYnxrkbDpNXbKvRUv3sE8mFA8+XeWzDU2xgrL+jPwIgZngEJPrLPFJmUXfpbM6g6RLEEyfM i5MZgHTxTuHIE4b+86ueCuewApFUqGyAPPvPyf3B8MjfkeumQf5S5YachptCHiD5sXSwGVQtjXHt COOdKXeY2NiQY6qNz3I72HQHoRxdEtWFkuwNQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for arpa
	`arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdhp2D7KL43KrfuBRyF0m4rUzo3GfnlCypjAO50OTdzEg4MDpjcssiUulWgyURVKOJV1vpFr b0kZ+72pdU9ahofVk8KmyrI9L7v4QsgylHEKNxhPjwM2z7B5NIetshWMYzJcRurx/vp+Xx3caC1j GWqEvPqqEQFS3rXIdh85A8hOaKHY5z91tIMaHUrlUvyh6qD8mLrIQPMS5l+lpWEmCCTEMbsPcEZQ fA5JMrqW16kGH3LVJSWZgK6VrECnFD/5HrccBhMkgNxyxxzhvPyBGkpss9OnpBgrgGpJMp+uDUXe nJ4CUJxReg6sW48nNBdeIUA7MlkjiOw8TH4V/mniHm0= ) ; keytag 41323`
	`arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581`
	DNSKEY=42581/SEP is now in the chain-of-trust
	DS=42581/SHA-256 verifies DNSKEY=42581/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260402000000 20260312000000 42581 arpa. V5WstoyzZ4SWB+LhluTOz5XvljDp0k+E1KbYGlmMZI3xVT89f33J3XxjlUGTvRNSubSf/I8BWbSd /KxSWGz5BSgw0vdav0Q0aroORUj1QFat7cc9N5DF9f5FSk4YO7sqlNkNfm98vnaUw9oo3DePEZa9 SQ7GZKYnxrkbDpNXbKvRUv3sE8mFA8+XeWzDU2xgrL+jPwIgZngEJPrLPFJmUXfpbM6g6RLEEyfM i5MZgHTxTuHIE4b+86ueCuewApFUqGyAPPvPyf3B8MjfkeumQf5S5YachptCHiD5sXSwGVQtjXHt COOdKXeY2NiQY6qNz3I72HQHoRxdEtWFkuwNQA== )`
	RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
	DNSKEY=41323 is now in the chain-of-trust
	Query to k.ns.arpa for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 861 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 861 octets ;; HEADER SECTION ;; id = 4643 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260330060000 20260317050000 41323 arpa. KYw+bagJc7e21xGFaokatACCzeFA753bGeJDEkUaD0r+U5PgbrARi8mEHogkNbhdv4O3kfP/wCcl 1e9U5Bpu+/SqD9usYw4DH2o0ByxiWsPQWeuF6w9qjt8GUevV0JRnQUVdKxXmcSahLFjFKRY+LVef K5R+pCT+nu3s6RXno/HdjnoByqpipp/nfpbqpvreY5XijsethyZHLHc3liBpm/mh66Jb1ZwGYSR9 7yZXX6BKWU7gJoTA7v7BNWvez6Dj6Opt7Byk0l48PrmpdD8EoncE0sJRgKS+x4XbjeSduHbyMWy4 gD+9tpXkWw/8YbylbPZB/dDMxJBz7GmEf6DCwg== ) ;; ADDITIONAL SECTION (13 records) a.ip6-servers.arpa. 172800 IN A 199.180.182.53 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 b.ip6-servers.arpa. 172800 IN A 199.253.182.182 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 f.ip6-servers.arpa. 172800 IN A 193.0.9.2 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 ;; { "EDNS-VERSION": 0 }
	Query to m.ns.arpa for ip6.arpa/DNSKEY
	Received 849 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 849 octets ;; HEADER SECTION ;; id = 27930 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260330060000 20260317050000 41323 arpa. KYw+bagJc7e21xGFaokatACCzeFA753bGeJDEkUaD0r+U5PgbrARi8mEHogkNbhdv4O3kfP/wCcl 1e9U5Bpu+/SqD9usYw4DH2o0ByxiWsPQWeuF6w9qjt8GUevV0JRnQUVdKxXmcSahLFjFKRY+LVef K5R+pCT+nu3s6RXno/HdjnoByqpipp/nfpbqpvreY5XijsethyZHLHc3liBpm/mh66Jb1ZwGYSR9 7yZXX6BKWU7gJoTA7v7BNWvez6Dj6Opt7Byk0l48PrmpdD8EoncE0sJRgKS+x4XbjeSduHbyMWy4 gD+9tpXkWw/8YbylbPZB/dDMxJBz7GmEf6DCwg== ) ;; ADDITIONAL SECTION (13 records) f.ip6-servers.arpa. 172800 IN A 193.0.9.2 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 b.ip6-servers.arpa. 172800 IN A 199.253.182.182 a.ip6-servers.arpa. 172800 IN A 199.180.182.53 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ip6.arpa

ip6.arpa

	Checking DS between arpa and ip6.arpa
	Query to k.ns.arpa for ip6.arpa/DS
	Received 473 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 473 octets ;; HEADER SECTION ;; id = 63827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DS ;; ANSWER SECTION (4 records) ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260330060000 20260317050000 41323 arpa. KYw+bagJc7e21xGFaokatACCzeFA753bGeJDEkUaD0r+U5PgbrARi8mEHogkNbhdv4O3kfP/wCcl 1e9U5Bpu+/SqD9usYw4DH2o0ByxiWsPQWeuF6w9qjt8GUevV0JRnQUVdKxXmcSahLFjFKRY+LVef K5R+pCT+nu3s6RXno/HdjnoByqpipp/nfpbqpvreY5XijsethyZHLHc3liBpm/mh66Jb1ZwGYSR9 7yZXX6BKWU7gJoTA7v7BNWvez6Dj6Opt7Byk0l48PrmpdD8EoncE0sJRgKS+x4XbjeSduHbyMWy4 gD+9tpXkWw/8YbylbPZB/dDMxJBz7GmEf6DCwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for ip6.arpa in the arpa zone
	DS=13880/SHA-256 has algorithm RSASHA256
	DS=45094/SHA-256 has algorithm RSASHA256
	DS=64060/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260330060000 20260317050000 41323 arpa. KYw+bagJc7e21xGFaokatACCzeFA753bGeJDEkUaD0r+U5PgbrARi8mEHogkNbhdv4O3kfP/wCcl 1e9U5Bpu+/SqD9usYw4DH2o0ByxiWsPQWeuF6w9qjt8GUevV0JRnQUVdKxXmcSahLFjFKRY+LVef K5R+pCT+nu3s6RXno/HdjnoByqpipp/nfpbqpvreY5XijsethyZHLHc3liBpm/mh66Jb1ZwGYSR9 7yZXX6BKWU7gJoTA7v7BNWvez6Dj6Opt7Byk0l48PrmpdD8EoncE0sJRgKS+x4XbjeSduHbyMWy4 gD+9tpXkWw/8YbylbPZB/dDMxJBz7GmEf6DCwg== )`
	RRSIG=41323 and DNSKEY=41323 verifies the DS RRset
	DS=13880/SHA-256 is now in the chain-of-trust
	DS=45094/SHA-256 is now in the chain-of-trust
	DS=64060/SHA-256 is now in the chain-of-trust
	`ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 )`
	`ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb )`
	`ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b )`
	Query to a.ip6-servers.arpa for ip6.arpa/DNSKEY
	Received 1329 bytes from 199.180.182.53
	;; Response received from [199.180.182.53] 1329 octets ;; HEADER SECTION ;; id = 3278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DNSKEY ;; ANSWER SECTION (5 records) ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAb+iy1CqMSS2fAoZhqeG0b1MxbegsUt94GIYCOe4PRQYiyVZb0Wi3s2RpSNoC1XNz1ne1CYA q2B0/XCwXzBVBppG4zJ6Hr4LAoXBRmlLSmNlbqbNJ8WCy0y5c6CNMKGRfd9KPzko1MO1wLbTRFiF DjE2h602c3K1qawngVcbRLMNnttAWJU2q+8BzdN26YeDdpsSFdPI+CbifItfwFfJx8BOIQkcOJX8 gjFxs9bvGuXTaf7qLzyNFklZG7NY63ooOdVYV9UoZH0bcdVSRg4a/Ilqryvb9eBeihkWs1+h57pp QGcR61ryfQqGc+19hSvO9DM1+X2g9uFzdxs3zg5e3n8= ) ; keytag 64060 ip6.arpa. 3600 IN DNSKEY ( 256 3 8 AwEAAeRpy1+zobogElAQVT7PzV12ejNKjO5RlaQknDPvKvTZO1xUDSnw+YmaxeQsbZK1dd21vDmY w8acX5nrMEpfNeCkOe5cwlRzF/08L9QXN6ZLMFBIWWF1A+H9z2e8ZkoZN7v1s1qofHt24UeRnpTx Q4iOIEHo81GB/ffw1IZ6np73 ) ; keytag 39156 ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAa8bJ22d6oorQjwmAivlT8diruwB75t3hz7G/FHOgFxTKnbRzkCtFItnxaBvD+lygqsj38am SqwsLYnNvejL/9kSzMdntRc5fC+9E+0m9Wq+liYSm60IxKvSL0fzApA80UgD1rpRtelBrkyiJyj3 byiRcEDJhRXPmyQOqNDnVpq3tTDPlkwEAF7uAmp3qKRZWJF6VswoAFqya7pMiCt8M+No+xiWZro8 7ZqTwRUBMJWKafO5ONH+HoZDvDeP+CNsKyt5GTROX+UxxT8xSueJidceJsKaI75HvEOp0kLAr8TP Svg4eBkk5Pgn+LvNBQ3ZdPMfHIKSLbZ+J3OOJJIkgpk= ) ; keytag 21619 ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260325163734 20260304131103 21619 ip6.arpa. lZzusAEwz6lNJ5fwAs5WQZndd0uPF++xWolSuQhRHK6V75ETqE2uXNnJuQSHPs/fGaSy4CnNWwDL k6WhS9VXQL2isbhnb3RbBh35DkfJpI1Df0j3koReJxvNpqT48OVMCkrUVcMdyO9Er/SonZol4MQT y58/fz9WevpvB7eBgG7EBNfrZidMxNjb6FbPsGv8bKtOnwg0qwmqyXVs3xTPC3j2hvoSE/5Br5om HGnhY6JgNQRqXEBvdgaebbgXe90ooF249CwWPIIRdByD2dqzRdLMjbiGNRHNDW+42a7KVLLnWAJ1 YWAFWtpGyuKUhFticRPX8yyCt5sG6ZGkyxbF9Q== ) ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260325163734 20260304131103 64060 ip6.arpa. pa8ZRuAe+iz8G2ZnBAozbdrcZe79WMnUeeUSZVkmhCi7d9Fsn+FW7O4izTr/Rzn6J5Sl58RC4MUl iQuC+tiDDednMQJAK0xz7ivxxZFlPQfyPRRf6pcZtMKFopwSZcKNM0/Bgz/7Bbx5BoVrlZPWI03Z 2yuB8dWzDiQ4sga06sqwBlh+SHvKL8PAws1xcFhEySfGaApGrQpyn1lL4pi4zELDLJswEOBgb3Dc JnwfenleTvX0x9y6w8WC7x2xNZRjMgMnx9/aynHFXPq1UWwngJ6wrY38aBwGupj17GyflfAjvLgU +D1RGSzNe2xfBpE1/8AmVIrHK9xcHo8xsu2bWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ip6.arpa
	`ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAb+iy1CqMSS2fAoZhqeG0b1MxbegsUt94GIYCOe4PRQYiyVZb0Wi3s2RpSNoC1XNz1ne1CYA q2B0/XCwXzBVBppG4zJ6Hr4LAoXBRmlLSmNlbqbNJ8WCy0y5c6CNMKGRfd9KPzko1MO1wLbTRFiF DjE2h602c3K1qawngVcbRLMNnttAWJU2q+8BzdN26YeDdpsSFdPI+CbifItfwFfJx8BOIQkcOJX8 gjFxs9bvGuXTaf7qLzyNFklZG7NY63ooOdVYV9UoZH0bcdVSRg4a/Ilqryvb9eBeihkWs1+h57pp QGcR61ryfQqGc+19hSvO9DM1+X2g9uFzdxs3zg5e3n8= ) ; keytag 64060`
	`ip6.arpa. 3600 IN DNSKEY ( 256 3 8 AwEAAeRpy1+zobogElAQVT7PzV12ejNKjO5RlaQknDPvKvTZO1xUDSnw+YmaxeQsbZK1dd21vDmY w8acX5nrMEpfNeCkOe5cwlRzF/08L9QXN6ZLMFBIWWF1A+H9z2e8ZkoZN7v1s1qofHt24UeRnpTx Q4iOIEHo81GB/ffw1IZ6np73 ) ; keytag 39156`
	`ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAa8bJ22d6oorQjwmAivlT8diruwB75t3hz7G/FHOgFxTKnbRzkCtFItnxaBvD+lygqsj38am SqwsLYnNvejL/9kSzMdntRc5fC+9E+0m9Wq+liYSm60IxKvSL0fzApA80UgD1rpRtelBrkyiJyj3 byiRcEDJhRXPmyQOqNDnVpq3tTDPlkwEAF7uAmp3qKRZWJF6VswoAFqya7pMiCt8M+No+xiWZro8 7ZqTwRUBMJWKafO5ONH+HoZDvDeP+CNsKyt5GTROX+UxxT8xSueJidceJsKaI75HvEOp0kLAr8TP Svg4eBkk5Pgn+LvNBQ3ZdPMfHIKSLbZ+J3OOJJIkgpk= ) ; keytag 21619`
	DNSKEY=64060/SEP is now in the chain-of-trust
	DS=64060/SHA-256 verifies DNSKEY=64060/SEP
	DS=13880/SHA-256 is published, but a corresponding DNSKEY is not
	DS=45094/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260325163734 20260304131103 21619 ip6.arpa. lZzusAEwz6lNJ5fwAs5WQZndd0uPF++xWolSuQhRHK6V75ETqE2uXNnJuQSHPs/fGaSy4CnNWwDL k6WhS9VXQL2isbhnb3RbBh35DkfJpI1Df0j3koReJxvNpqT48OVMCkrUVcMdyO9Er/SonZol4MQT y58/fz9WevpvB7eBgG7EBNfrZidMxNjb6FbPsGv8bKtOnwg0qwmqyXVs3xTPC3j2hvoSE/5Br5om HGnhY6JgNQRqXEBvdgaebbgXe90ooF249CwWPIIRdByD2dqzRdLMjbiGNRHNDW+42a7KVLLnWAJ1 YWAFWtpGyuKUhFticRPX8yyCt5sG6ZGkyxbF9Q== )`
	`ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260325163734 20260304131103 64060 ip6.arpa. pa8ZRuAe+iz8G2ZnBAozbdrcZe79WMnUeeUSZVkmhCi7d9Fsn+FW7O4izTr/Rzn6J5Sl58RC4MUl iQuC+tiDDednMQJAK0xz7ivxxZFlPQfyPRRf6pcZtMKFopwSZcKNM0/Bgz/7Bbx5BoVrlZPWI03Z 2yuB8dWzDiQ4sga06sqwBlh+SHvKL8PAws1xcFhEySfGaApGrQpyn1lL4pi4zELDLJswEOBgb3Dc JnwfenleTvX0x9y6w8WC7x2xNZRjMgMnx9/aynHFXPq1UWwngJ6wrY38aBwGupj17GyflfAjvLgU +D1RGSzNe2xfBpE1/8AmVIrHK9xcHo8xsu2bWA== )`
	RRSIG=21619 and DNSKEY=21619/SEP verifies the DNSKEY RRset
	RRSIG=64060 and DNSKEY=64060/SEP verifies the DNSKEY RRset
	DNSKEY=39156 is now in the chain-of-trust
	DNSKEY=21619/SEP is now in the chain-of-trust
	Query to e.ip6-servers.arpa for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 429 bytes from 203.119.86.101
	;; Response received from [203.119.86.101] 429 octets ;; HEADER SECTION ;; id = 39721 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) 0.a.2.ip6.arpa. 86400 IN NS ns3.lacnic.net. 0.a.2.ip6.arpa. 86400 IN NS ns4.apnic.net. 0.a.2.ip6.arpa. 86400 IN NS pri.authdns.ripe.net. 0.a.2.ip6.arpa. 86400 IN NS rirns.arin.net. 0.a.2.ip6.arpa. 86400 IN NS ns3.afrinic.net. 0.a.2.ip6.arpa. 86400 IN DS ( 6737 13 2 f346c2be7a1d04f367dc2b24556fa5f6ae515f4c005c7d44508b31e8d79c9694 ) 0.a.2.ip6.arpa. 86400 IN RRSIG ( DS 8 5 86400 20260407042549 20260317120004 39156 ip6.arpa. qtWXbChRib8xhWi/OSJ/gLjQnj/6lHl1Az/PNihKCWKWsiAcKKFWnhulUZwRJ0i6xodHLQVpvpRj Oli+4PZuatxKUUbeScCPSfKMHc9J3x1dVcIfiZ9vurKNIK/A2vzVPV+5ddjTQEJx7WrfwCT2y8pp J3FbEkH7aawu5wv6lL8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ip6-servers.arpa for 2.ip6.arpa/DNSKEY
	Received 484 bytes from 196.216.169.11
	;; Response received from [196.216.169.11] 484 octets ;; HEADER SECTION ;; id = 51188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022055 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260407171433 20260317115504 39156 ip6.arpa. valsAg5q/6Dqir7dq3AP3nIOEh4mdO2vGoDDwvp5Zwr3GrDH5IMHwvtEo2vURx4qzAlxZ3HrGf4l XK3JeSZ175PZfeTWUYhmFXRb1QhJiJFZbx1h0I1ii4JZPgrWQ0clhWZodHsbsHP1EFKJ/G/4F/t6 DWAR0DZBYyMdgU9lDOg= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260403060002 20260313091104 39156 ip6.arpa. r/+Sk1cooXoPlGmH8Eu/VgJw/nxNis3PRx4LKJEiji66IzfnWBUwc8/2fIAQC5EMFED/4IJvMoyL PUPZgFUEeiX+ct0j3d3IbC6Cfmu7hlrbIMMHiNDtIQUn9Rn1DXx1iEUk6P1RwxlZGSsyrT6aLTri chNMuJ1cGkbQBBXh0jI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.ip6-servers.arpa for a.2.ip6.arpa/DNSKEY
	Received 481 bytes from 193.0.9.2
	;; Response received from [193.0.9.2] 481 octets ;; HEADER SECTION ;; id = 44063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022056 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260407183250 20260317120004 39156 ip6.arpa. Mm6uyqWNpsh9W+IZAQTY8ra9szSZpwohlQP/YQ1Lwmq24S4ERNsoaZ63Evi4NlJB3ZgaHQJtPbFp VMbGcazuLfozcbtWTNSUZX1OHUGKIxL4KMcnI1UT6XWcT4VUUCcaooPel+V69+eksrePyE5rn/qF WYklkPNjgKenrnJ5WZY= ) 0.8.2.ip6.arpa. 3600 IN NSEC 0.a.2.ip6.arpa. NS DS RRSIG NSEC 0.8.2.ip6.arpa. 3600 IN RRSIG ( NSEC 8 5 3600 20260404121638 20260314191104 39156 ip6.arpa. 5GPMT4ptAazvgZbaXP2Glpk3fEpYyzfRN1+z1X1KDg6IZAg2eoyCcC+4psLlBV4tAy5oJO6r75iR Ch7l8AGnYa5hRiYJBIxvdI196jTpXMX51jYf+5h1jaxzRnrTak0xbFKDgZ/n3/gn+PV+i/ZRs/8M wtZmAST5cMyEnaWhZ0A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ip6-servers.arpa for 0.a.2.ip6.arpa/DNSKEY
	Received 405 bytes from 200.7.86.53
	;; Response received from [200.7.86.53] 405 octets ;; HEADER SECTION ;; id = 13763 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) 0.a.2.ip6.arpa. 86400 IN NS rirns.arin.net. 0.a.2.ip6.arpa. 86400 IN NS ns3.afrinic.net. 0.a.2.ip6.arpa. 86400 IN NS pri.authdns.ripe.net. 0.a.2.ip6.arpa. 86400 IN NS ns4.apnic.net. 0.a.2.ip6.arpa. 86400 IN NS ns3.lacnic.net. 0.a.2.ip6.arpa. 86400 IN DS ( 33108 13 2 82a4585f9949992b5d446d71fe8855bc3ee46d00291add210c5c4f187ab4c33e ) 0.a.2.ip6.arpa. 86400 IN RRSIG ( DS 8 5 86400 20260328023606 20260307051103 39156 ip6.arpa. oeDBn/eIWXba9SpXH5TVPqUdR6KST1S80hxCXtlSVU+xAZjjMfvP9Moe+1H+uNCXIjzOPbguYNtA 5WMW/hF1wYoDsU5v0Vi4iSoHQdqHmk9Cuqs/2nCq4P1mfb1kUTpF4e98vLRWQTcjcizPAQHVR/7c zFDlDwLfGH1td1eK6Gg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 0.a.2.ip6.arpa

0.a.2.ip6.arpa

	Checking DS between ip6.arpa and 0.a.2.ip6.arpa
	Query to e.ip6-servers.arpa for 0.a.2.ip6.arpa/DS
	Received 259 bytes from 203.119.86.101
	;; Response received from [203.119.86.101] 259 octets ;; HEADER SECTION ;; id = 29476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 0.a.2.ip6.arpa. IN DS ;; ANSWER SECTION (2 records) 0.a.2.ip6.arpa. 86400 IN DS ( 6737 13 2 f346c2be7a1d04f367dc2b24556fa5f6ae515f4c005c7d44508b31e8d79c9694 ) 0.a.2.ip6.arpa. 86400 IN RRSIG ( DS 8 5 86400 20260407042549 20260317120004 39156 ip6.arpa. qtWXbChRib8xhWi/OSJ/gLjQnj/6lHl1Az/PNihKCWKWsiAcKKFWnhulUZwRJ0i6xodHLQVpvpRj Oli+4PZuatxKUUbeScCPSfKMHc9J3x1dVcIfiZ9vurKNIK/A2vzVPV+5ddjTQEJx7WrfwCT2y8pp J3FbEkH7aawu5wv6lL8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for 0.a.2.ip6.arpa in the ip6.arpa zone
	DS=6737/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`0.a.2.ip6.arpa. 86400 IN RRSIG ( DS 8 5 86400 20260407042549 20260317120004 39156 ip6.arpa. qtWXbChRib8xhWi/OSJ/gLjQnj/6lHl1Az/PNihKCWKWsiAcKKFWnhulUZwRJ0i6xodHLQVpvpRj Oli+4PZuatxKUUbeScCPSfKMHc9J3x1dVcIfiZ9vurKNIK/A2vzVPV+5ddjTQEJx7WrfwCT2y8pp J3FbEkH7aawu5wv6lL8= )`
	RRSIG=39156 and DNSKEY=39156 verifies the DS RRset
	DS=6737/SHA-256 is now in the chain-of-trust
	`0.a.2.ip6.arpa. 86400 IN DS ( 6737 13 2 f346c2be7a1d04f367dc2b24556fa5f6ae515f4c005c7d44508b31e8d79c9694 )`
	Query to ns3.lacnic.net for 0.a.2.ip6.arpa/DNSKEY
	Received 423 bytes from 200.3.13.14
	;; Response received from [200.3.13.14] 423 octets ;; HEADER SECTION ;; id = 31088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (4 records) 0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 13 uSFdUVtYy6mQak8hq7Kfr4STK9REDsYSuL0BLppk5SoH7H3r1CNfs0Td7GZ98/GazV6Ec2AEPHxi 8bS212bo+w== ) ; keytag 33108 0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 13 ZBxgVJ36M8DmZdkR4zx05CyI1hobuAbwyiRRYkC8QGQgefQZlDX96N7KRSJB2gwqq5uw5ElbR48W a4QTHk7nsA== ) ; keytag 6737 0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 13 5 3600 20260330083002 20260316070002 6737 0.a.2.ip6.arpa. GJUmQCdpykrG+MoJ+eNBFAp8Z1UOARCHXhua2WRMNfyplFa++JzNcUn3M+PL4KYmB6SXXfcsu53n qxKx9ag92Q== ) 0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 13 5 3600 20260330083002 20260316070002 33108 0.a.2.ip6.arpa. j/aaCnKwm4XQAsF/SBKWkOf+SEOcuCstoR0C96CwCAuNovkRkHUda/ojfNqXVmTaUY82ZNU+2y2h yW3EerYn+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for 0.a.2.ip6.arpa
	`0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 13 uSFdUVtYy6mQak8hq7Kfr4STK9REDsYSuL0BLppk5SoH7H3r1CNfs0Td7GZ98/GazV6Ec2AEPHxi 8bS212bo+w== ) ; keytag 33108`
	`0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 13 ZBxgVJ36M8DmZdkR4zx05CyI1hobuAbwyiRRYkC8QGQgefQZlDX96N7KRSJB2gwqq5uw5ElbR48W a4QTHk7nsA== ) ; keytag 6737`
	DNSKEY=6737/SEP is now in the chain-of-trust
	DS=6737/SHA-256 verifies DNSKEY=6737/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 13 5 3600 20260330083002 20260316070002 6737 0.a.2.ip6.arpa. GJUmQCdpykrG+MoJ+eNBFAp8Z1UOARCHXhua2WRMNfyplFa++JzNcUn3M+PL4KYmB6SXXfcsu53n qxKx9ag92Q== )`
	`0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 13 5 3600 20260330083002 20260316070002 33108 0.a.2.ip6.arpa. j/aaCnKwm4XQAsF/SBKWkOf+SEOcuCstoR0C96CwCAuNovkRkHUda/ojfNqXVmTaUY82ZNU+2y2h yW3EerYn+A== )`
	RRSIG=6737 and DNSKEY=6737/SEP verifies the DNSKEY RRset
	RRSIG=33108 and DNSKEY=33108/SEP verifies the DNSKEY RRset
	DNSKEY=33108/SEP is now in the chain-of-trust
	Query to ns3.afrinic.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 276 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 276 octets ;; HEADER SECTION ;; id = 1152 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns2.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns3.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns1.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DS ( 12143 14 2 a2195afa3ae1dddf9062f0c8ff06e03d79f1038bb2fe6951aa52b1fa28913b97 ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DS 13 10 3600 20260325105427 20260311092427 33108 0.a.2.ip6.arpa. 82Tg3sBWhhV4Jt4AjDuCtF7CC2mtw1Qjz0paHBxXB2ZoADFfgEMnXiy2kNFBhXDnvjYFbd4+adSz BzyygPKnyQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for 2.0.a.2.ip6.arpa/DNSKEY
	Received 411 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 411 octets ;; HEADER SECTION ;; id = 5422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 0.a.2.ip6.arpa. 3600 IN SOA ( pri.authdns.ripe.net. dns.ripe.net. 1773751844 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) 0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 13 5 3600 20260331125044 20260317112044 33108 0.a.2.ip6.arpa. E+qGo7OtDg/SkTYf++GBkjUli3cIKIqNo4irGDiT8t//kZ48BbU0WIUiyPD61rTDDR+q08s949Kx ZDUtwle4jg== ) 0.0.0.8.6.c.f.f.1.0.a.2.ip6.arpa. 3600 IN NSEC ( 0.0.0.0.2.0.a.2.ip6.arpa. NS RRSIG NSEC ) 0.0.0.8.6.c.f.f.1.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC 13 14 3600 20260326110630 20260312093630 33108 0.a.2.ip6.arpa. kxpXeWbxi2e7uU0HYU2FM07Ch5CYddqO6APK0QUEZVOop+LJDeVQaen51Zgc1+W8J3+8TQS3Ao9l dvEWf5nxdQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for c.2.0.a.2.ip6.arpa/DNSKEY
	Received 419 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 419 octets ;; HEADER SECTION ;; id = 41058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; c.2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 0.a.2.ip6.arpa. 3600 IN SOA ( pri.authdns.ripe.net. dns.ripe.net. 1773751844 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) 0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 13 5 3600 20260331125044 20260317112044 33108 0.a.2.ip6.arpa. E+qGo7OtDg/SkTYf++GBkjUli3cIKIqNo4irGDiT8t//kZ48BbU0WIUiyPD61rTDDR+q08s949Kx ZDUtwle4jg== ) 7.8.f.a.2.0.a.2.ip6.arpa. 3600 IN NSEC ( 0.c.1.c.2.0.a.2.ip6.arpa. NS RRSIG NSEC ) 7.8.f.a.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC 13 10 3600 20260326110630 20260312093630 33108 0.a.2.ip6.arpa. EHhIDyqhy3PkrueYPzIMkSwaX2+S6NEFOPhkj+QNa+Ft0ZIUUzZLm2af3ph781I9ybXTrCRl4a52 1jg9xYBeHQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for d.c.2.0.a.2.ip6.arpa/DNSKEY
	Received 421 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 421 octets ;; HEADER SECTION ;; id = 51791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d.c.2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 0.a.2.ip6.arpa. 3600 IN SOA ( pri.authdns.ripe.net. dns.ripe.net. 1773751844 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) 0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 13 5 3600 20260331125044 20260317112044 33108 0.a.2.ip6.arpa. E+qGo7OtDg/SkTYf++GBkjUli3cIKIqNo4irGDiT8t//kZ48BbU0WIUiyPD61rTDDR+q08s949Kx ZDUtwle4jg== ) 2.4.c.c.2.0.a.2.ip6.arpa. 3600 IN NSEC ( 0.c.d.c.2.0.a.2.ip6.arpa. NS RRSIG NSEC ) 2.4.c.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC 13 10 3600 20260326110630 20260312093630 33108 0.a.2.ip6.arpa. 1uVE1PqbBLti/qlmhrYh5VeXkA0YTk0URJJaRggTu7VUsPtRECEY/eM8EXfITFvu9wFtY5P8xnhi 308rCkVEiw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for c.d.c.2.0.a.2.ip6.arpa/DNSKEY
	Received 423 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 423 octets ;; HEADER SECTION ;; id = 36772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; c.d.c.2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 0.a.2.ip6.arpa. 3600 IN SOA ( pri.authdns.ripe.net. dns.ripe.net. 1773751844 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) 0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 13 5 3600 20260331125044 20260317112044 33108 0.a.2.ip6.arpa. E+qGo7OtDg/SkTYf++GBkjUli3cIKIqNo4irGDiT8t//kZ48BbU0WIUiyPD61rTDDR+q08s949Kx ZDUtwle4jg== ) 2.4.c.c.2.0.a.2.ip6.arpa. 3600 IN NSEC ( 0.c.d.c.2.0.a.2.ip6.arpa. NS RRSIG NSEC ) 2.4.c.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC 13 10 3600 20260326110630 20260312093630 33108 0.a.2.ip6.arpa. 1uVE1PqbBLti/qlmhrYh5VeXkA0YTk0URJJaRggTu7VUsPtRECEY/eM8EXfITFvu9wFtY5P8xnhi 308rCkVEiw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pri.authdns.ripe.net for 4.c.d.c.2.0.a.2.ip6.arpa/DNSKEY
	Received 276 bytes from 193.0.9.5
	;; Response received from [193.0.9.5] 276 octets ;; HEADER SECTION ;; id = 12031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns1.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns2.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 86400 IN NS ns3.as59715.net. 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DS ( 12143 14 2 a2195afa3ae1dddf9062f0c8ff06e03d79f1038bb2fe6951aa52b1fa28913b97 ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DS 13 10 3600 20260325105427 20260311092427 33108 0.a.2.ip6.arpa. 82Tg3sBWhhV4Jt4AjDuCtF7CC2mtw1Qjz0paHBxXB2ZoADFfgEMnXiy2kNFBhXDnvjYFbd4+adSz BzyygPKnyQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 4.c.d.c.2.0.a.2.ip6.arpa

4.c.d.c.2.0.a.2.ip6.arpa

	Checking DS between 0.a.2.ip6.arpa and 4.c.d.c.2.0.a.2.ip6.arpa
	Query to ns4.apnic.net for 4.c.d.c.2.0.a.2.ip6.arpa/DS
	Received 211 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 211 octets ;; HEADER SECTION ;; id = 47108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN DS ;; ANSWER SECTION (2 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DS ( 12143 14 2 a2195afa3ae1dddf9062f0c8ff06e03d79f1038bb2fe6951aa52b1fa28913b97 ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DS 13 10 3600 20260325105427 20260311092427 33108 0.a.2.ip6.arpa. 82Tg3sBWhhV4Jt4AjDuCtF7CC2mtw1Qjz0paHBxXB2ZoADFfgEMnXiy2kNFBhXDnvjYFbd4+adSz BzyygPKnyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for 4.c.d.c.2.0.a.2.ip6.arpa in the 0.a.2.ip6.arpa zone
	DS=12143/SHA-256 has algorithm ECDSAP384SHA384
	Found 1 RRSIGs over DS RRset
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DS 13 10 3600 20260325105427 20260311092427 33108 0.a.2.ip6.arpa. 82Tg3sBWhhV4Jt4AjDuCtF7CC2mtw1Qjz0paHBxXB2ZoADFfgEMnXiy2kNFBhXDnvjYFbd4+adSz BzyygPKnyQ== )`
	RRSIG=33108 and DNSKEY=33108/SEP verifies the DS RRset
	DS=12143/SHA-256 is now in the chain-of-trust
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DS ( 12143 14 2 a2195afa3ae1dddf9062f0c8ff06e03d79f1038bb2fe6951aa52b1fa28913b97 )`
	Query to ns1.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/DNSKEY
	Received 429 bytes from 185.5.201.53
	;; Response received from [185.5.201.53] 429 octets ;; HEADER SECTION ;; id = 12449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN DNSKEY ;; ANSWER SECTION (3 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 14 Vdaiv5DGCQ21CU/B4Vy43qmSiNl6pQ6fIbkue8nFY0xX3at5SjRJr2ectYcfb4rGQ8D5qZVmWZxx diMC52637A3TaPXFnTcMguMQ8rzAv9UMTFIXGZjly6O4lV9jzYOX ) ; keytag 12143 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DNSKEY ( 256 3 14 88oP9fpQPrngtMNkcd+A20N/S6m1bwo9x12Jo5gn9lEK3i2Hg1toFL8N+9xlTVQIszqGzkTFWmk9 AJESG+eaOmqF17LYjaoHluzyC+DSKCHY1yJkMRCJKiAfeCTP8DJY ) ; keytag 41532 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 14 10 3600 20260331045955 20260316224323 12143 4.c.d.c.2.0.a.2.ip6.arpa. 2VV4S24bbJLGrW4yt4VdBj/EPSdNcsIJSzH1HtJm8SC+S8NekVKaQKNCdC3eBEOwM4uTRvaIlIcc iflKooCgh1aCPb/R5tIty4PQSoAIgWI2tMIcZYZa9Rb5SlVjMfPw ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for 4.c.d.c.2.0.a.2.ip6.arpa
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DNSKEY ( 257 3 14 Vdaiv5DGCQ21CU/B4Vy43qmSiNl6pQ6fIbkue8nFY0xX3at5SjRJr2ectYcfb4rGQ8D5qZVmWZxx diMC52637A3TaPXFnTcMguMQ8rzAv9UMTFIXGZjly6O4lV9jzYOX ) ; keytag 12143`
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN DNSKEY ( 256 3 14 88oP9fpQPrngtMNkcd+A20N/S6m1bwo9x12Jo5gn9lEK3i2Hg1toFL8N+9xlTVQIszqGzkTFWmk9 AJESG+eaOmqF17LYjaoHluzyC+DSKCHY1yJkMRCJKiAfeCTP8DJY ) ; keytag 41532`
	DNSKEY=12143/SEP is now in the chain-of-trust
	DS=12143/SHA-256 verifies DNSKEY=12143/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( DNSKEY 14 10 3600 20260331045955 20260316224323 12143 4.c.d.c.2.0.a.2.ip6.arpa. 2VV4S24bbJLGrW4yt4VdBj/EPSdNcsIJSzH1HtJm8SC+S8NekVKaQKNCdC3eBEOwM4uTRvaIlIcc iflKooCgh1aCPb/R5tIty4PQSoAIgWI2tMIcZYZa9Rb5SlVjMfPw )`
	RRSIG=12143 and DNSKEY=12143/SEP verifies the DNSKEY RRset
	DNSKEY=41532 is now in the chain-of-trust
	Query to ns1.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 185.5.201.53
	;; Response received from [185.5.201.53] 498 octets ;; HEADER SECTION ;; id = 56900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052304 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260331042857 20260317004323 41532 4.c.d.c.2.0.a.2.ip6.arpa. qdh/BLL7Um9soTEjXwJhsGOPioXJG5a3yLEwP/rHHZRltBOakkFCJbg4pvzk/TO/T3XhqhLti4/Z 8wYiNAA+rLBMLH2fQbqn6bcUTsHzJ1zqLs2tVaI9E084+2z8mXZz ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260330181203 20260317004323 41532 4.c.d.c.2.0.a.2.ip6.arpa. BH31/EmPUZgAEeFCgLNRvGxykeX+LK/SRXIx1WOv92htFOsi+Gp6pXvMSd31+Z2IAwfF85rOi5Nx +G4lq8etdeMwI5Odkgm/wG43KugBYEZTxVxHXW+8cuk6Os7H2FHS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.as59715.net is authoritative for 4.c.d.c.2.0.a.2.ip6.arpa
	Found RRSIG signed by 4.c.d.c.2.0.a.2.ip6.arpa zone
	Query to ns2.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/SOA
	Received 266 bytes from 185.5.202.53
	;; Response received from [185.5.202.53] 266 octets ;; HEADER SECTION ;; id = 21658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/SOA
	Received 266 bytes from 54.93.203.146
	;; Response received from [54.93.203.146] 266 octets ;; HEADER SECTION ;; id = 51804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 185.5.201.53
	;; Response received from [185.5.201.53] 498 octets ;; HEADER SECTION ;; id = 1291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052304 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260331042857 20260317004323 41532 4.c.d.c.2.0.a.2.ip6.arpa. qdh/BLL7Um9soTEjXwJhsGOPioXJG5a3yLEwP/rHHZRltBOakkFCJbg4pvzk/TO/T3XhqhLti4/Z 8wYiNAA+rLBMLH2fQbqn6bcUTsHzJ1zqLs2tVaI9E084+2z8mXZz ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260330181203 20260317004323 41532 4.c.d.c.2.0.a.2.ip6.arpa. BH31/EmPUZgAEeFCgLNRvGxykeX+LK/SRXIx1WOv92htFOsi+Gp6pXvMSd31+Z2IAwfF85rOi5Nx +G4lq8etdeMwI5Odkgm/wG43KugBYEZTxVxHXW+8cuk6Os7H2FHS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260331042857 20260317004323 41532 4.c.d.c.2.0.a.2.ip6.arpa. qdh/BLL7Um9soTEjXwJhsGOPioXJG5a3yLEwP/rHHZRltBOakkFCJbg4pvzk/TO/T3XhqhLti4/Z 8wYiNAA+rLBMLH2fQbqn6bcUTsHzJ1zqLs2tVaI9E084+2z8mXZz )`
	RRSIG=41532 and DNSKEY=41532 verifies the SOA RRset

4.c.d.c.2.0.a.2.ip6.arpa

	Query to ns2.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 185.5.202.53
	;; Response received from [185.5.202.53] 498 octets ;; HEADER SECTION ;; id = 37165 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260317035138 20260303123903 41532 4.c.d.c.2.0.a.2.ip6.arpa. Ldey+KAMMbyeU9gTWjFEXQK41j22MwQod1fNYvi/szwzr/I/9Fa4d88/o5F1nLd7/VMejp4M79yr WInQNTa2cti/8EDXEPoh+KICpw0xKfUvmIEyo194BASzgaCIGWBt ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.as59715.net is authoritative for 4.c.d.c.2.0.a.2.ip6.arpa
	Found RRSIG signed by 4.c.d.c.2.0.a.2.ip6.arpa zone
	Query to ns2.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 185.5.202.53
	;; Response received from [185.5.202.53] 498 octets ;; HEADER SECTION ;; id = 45471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260317035138 20260303123903 41532 4.c.d.c.2.0.a.2.ip6.arpa. Ldey+KAMMbyeU9gTWjFEXQK41j22MwQod1fNYvi/szwzr/I/9Fa4d88/o5F1nLd7/VMejp4M79yr WInQNTa2cti/8EDXEPoh+KICpw0xKfUvmIEyo194BASzgaCIGWBt ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV )`
	RRSIG=41532 and DNSKEY=41532 verifies the SOA RRset

4.c.d.c.2.0.a.2.ip6.arpa

	Query to ns3.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 54.93.203.146
	;; Response received from [54.93.203.146] 498 octets ;; HEADER SECTION ;; id = 26195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260317035138 20260303123903 41532 4.c.d.c.2.0.a.2.ip6.arpa. Ldey+KAMMbyeU9gTWjFEXQK41j22MwQod1fNYvi/szwzr/I/9Fa4d88/o5F1nLd7/VMejp4M79yr WInQNTa2cti/8EDXEPoh+KICpw0xKfUvmIEyo194BASzgaCIGWBt ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.as59715.net is authoritative for 4.c.d.c.2.0.a.2.ip6.arpa
	Found RRSIG signed by 4.c.d.c.2.0.a.2.ip6.arpa zone
	Query to ns3.as59715.net for 4.c.d.c.2.0.a.2.ip6.arpa/A
	Received 498 bytes from 54.93.203.146
	;; Response received from [54.93.203.146] 498 octets ;; HEADER SECTION ;; id = 5295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 4.c.d.c.2.0.a.2.ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 2025052325 ;serial 604800 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) 4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN NSEC3 ( 1 0 0 - pukqo4s03mvcn17n50lcbkfk4iimilhs NS SOA LOC RRSIG DNSKEY NSEC3PARAM ) pukqo4s03mvcn17n50lcbkfk4iimilhs.4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( NSEC3 14 11 3600 20260317035138 20260303123903 41532 4.c.d.c.2.0.a.2.ip6.arpa. Ldey+KAMMbyeU9gTWjFEXQK41j22MwQod1fNYvi/szwzr/I/9Fa4d88/o5F1nLd7/VMejp4M79yr WInQNTa2cti/8EDXEPoh+KICpw0xKfUvmIEyo194BASzgaCIGWBt ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`4.c.d.c.2.0.a.2.ip6.arpa. 3600 IN RRSIG ( SOA 14 10 3600 20260319115251 20260305084005 41532 4.c.d.c.2.0.a.2.ip6.arpa. PQ9WPXqA4aJO5m24bT+o4Kx29LExOsY5VwL1zdL38TSNTlDGEznj998L8oSAPkr5Qt8af4r6ywyg ZCHyPuJQKdSsd2+yWwcDucn6vgdlbb1f0pSztsnUvPFCGiADscQV )`
	RRSIG=41532 and DNSKEY=41532 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 4.c.d.c.2.0.a.2.ip6.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: