DNSSEC Analyzer - _openpgpkey.debian.org

Domain Name:

Time: 2023-09-24 17:13:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for _openpgpkey.debian.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (1139 octets) ;; HEADER SECTION ;; id = 21960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to c.root-servers.net for _openpgpkey.debian.org/A
	Received 794 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (794 octets) ;; HEADER SECTION ;; id = 211 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . FuBmnMZqelxJCIkC4LGoYsFl19i4P8WoqCe0RWh+5bchYH5ByMhDd0mdw62PQYwpfsq0I6rCbFia K+I1V3P9mzTD95Y3dLs1spi1YO5TSP+0jLNmPggxtU3stp9qCudDhb4A28bUhH4mgoBgfhgLNGWK 9HLgZcGYG8qz0MQAgfsmYQLvObrcy9uNcvLZRxWE+AIouPTdL27yctpAMMbedhVKrv2mLBpNY7sW 1UdyLoTFjeHuY/4+fOy7WuDchAwLyKxEQ1RUGqFllNXFm8OuPKcCoQduVfxN/z2ipss5y9FUapej uHKpuiqSZeut7qd/YcQmCsu9yzSdiq81tgLUyA== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for org/DNSKEY
	Received 772 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (772 octets) ;; HEADER SECTION ;; id = 54842 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . FuBmnMZqelxJCIkC4LGoYsFl19i4P8WoqCe0RWh+5bchYH5ByMhDd0mdw62PQYwpfsq0I6rCbFia K+I1V3P9mzTD95Y3dLs1spi1YO5TSP+0jLNmPggxtU3stp9qCudDhb4A28bUhH4mgoBgfhgLNGWK 9HLgZcGYG8qz0MQAgfsmYQLvObrcy9uNcvLZRxWE+AIouPTdL27yctpAMMbedhVKrv2mLBpNY7sW 1UdyLoTFjeHuY/4+fOy7WuDchAwLyKxEQ1RUGqFllNXFm8OuPKcCoQduVfxN/z2ipss5y9FUapej uHKpuiqSZeut7qd/YcQmCsu9yzSdiq81tgLUyA== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to f.root-servers.net for org/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (367 octets) ;; HEADER SECTION ;; id = 19863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . FuBmnMZqelxJCIkC4LGoYsFl19i4P8WoqCe0RWh+5bchYH5ByMhDd0mdw62PQYwpfsq0I6rCbFia K+I1V3P9mzTD95Y3dLs1spi1YO5TSP+0jLNmPggxtU3stp9qCudDhb4A28bUhH4mgoBgfhgLNGWK 9HLgZcGYG8qz0MQAgfsmYQLvObrcy9uNcvLZRxWE+AIouPTdL27yctpAMMbedhVKrv2mLBpNY7sW 1UdyLoTFjeHuY/4+fOy7WuDchAwLyKxEQ1RUGqFllNXFm8OuPKcCoQduVfxN/z2ipss5y9FUapej uHKpuiqSZeut7qd/YcQmCsu9yzSdiq81tgLUyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . FuBmnMZqelxJCIkC4LGoYsFl19i4P8WoqCe0RWh+5bchYH5ByMhDd0mdw62PQYwpfsq0I6rCbFia K+I1V3P9mzTD95Y3dLs1spi1YO5TSP+0jLNmPggxtU3stp9qCudDhb4A28bUhH4mgoBgfhgLNGWK 9HLgZcGYG8qz0MQAgfsmYQLvObrcy9uNcvLZRxWE+AIouPTdL27yctpAMMbedhVKrv2mLBpNY7sW 1UdyLoTFjeHuY/4+fOy7WuDchAwLyKxEQ1RUGqFllNXFm8OuPKcCoQduVfxN/z2ipss5y9FUapej uHKpuiqSZeut7qd/YcQmCsu9yzSdiq81tgLUyA== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a0.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.19.56.1
	;; Response received from 199.19.56.1 (895 octets) ;; HEADER SECTION ;; id = 58552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAdapv7VE8/sHI6PtgO2f9JiiPAOsVTqmzqrX8MH3Wsxd3WdHLPFo+WTo6FduxEGIFodvG35I AzTo+HZe/ET1QxAGDbtcGoSEWI0g2yCO/v9TTBbpTlWtDU1PP1L0HIbl/hxUJNngftGvtIhI7M0N c5hI5hL6BU2Zfy0tBBTFBcrv ) ; Key ID = 61110 org. 3600 IN DNSKEY ( 256 3 8 AwEAAd60OkyWGp/fBiwPxz+fVSIzTDK/VGlGU7ZleVfQTN46kxthF/xCIlze600lcjihGmhIfMgk +ydJpJ+vZJe3qW/W69Ma/6VVvhRwgqaYiYvv4fsJSEtVPh5aRVtKQenH2sekAtxjx4N9j1MlyxjP knFekXBsj+0mZq7uu4uKOBat ) ; Key ID = 35418 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231008152317 20230917142317 26974 org. xtTGRSQ/tIthF/ExX6iAo71u/RFQtTUSnwdz55YoKsyo5lz4qbgLaw3LYDuwmpsv0JjXvAAess57 G2S7fMkSpaqYTDNAK/+e8c5/nYvPm9gjd7ZbxZKz9nZvkvISQ+dU4gKHeHUZ/wbKiSXC1APmmBsa xApEPikhI5lAq5AW7b0+exSh7N+uQzHc3S1fsCpSWLM/p3709/Dx6oBfKk5xOf6fVmv5LSek3vHh t4NzYBg1LJT5F35s8AB1idsD5dR/2SkNqvTxrJtQxtKIGM4exI+/6NNg5/sHqkasu2buDv4YmDuX krZoF+D/h5OvlLQZsTSyjlmkbuB4D2cZvJArwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdapv7VE8/sHI6PtgO2f9JiiPAOsVTqmzqrX8MH3Wsxd3WdHLPFo+WTo6FduxEGIFodvG35I AzTo+HZe/ET1QxAGDbtcGoSEWI0g2yCO/v9TTBbpTlWtDU1PP1L0HIbl/hxUJNngftGvtIhI7M0N c5hI5hL6BU2Zfy0tBBTFBcrv ) ; Key ID = 61110`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAd60OkyWGp/fBiwPxz+fVSIzTDK/VGlGU7ZleVfQTN46kxthF/xCIlze600lcjihGmhIfMgk +ydJpJ+vZJe3qW/W69Ma/6VVvhRwgqaYiYvv4fsJSEtVPh5aRVtKQenH2sekAtxjx4N9j1MlyxjP knFekXBsj+0mZq7uu4uKOBat ) ; Key ID = 35418`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231008152317 20230917142317 26974 org. xtTGRSQ/tIthF/ExX6iAo71u/RFQtTUSnwdz55YoKsyo5lz4qbgLaw3LYDuwmpsv0JjXvAAess57 G2S7fMkSpaqYTDNAK/+e8c5/nYvPm9gjd7ZbxZKz9nZvkvISQ+dU4gKHeHUZ/wbKiSXC1APmmBsa xApEPikhI5lAq5AW7b0+exSh7N+uQzHc3S1fsCpSWLM/p3709/Dx6oBfKk5xOf6fVmv5LSek3vHh t4NzYBg1LJT5F35s8AB1idsD5dR/2SkNqvTxrJtQxtKIGM4exI+/6NNg5/sHqkasu2buDv4YmDuX krZoF+D/h5OvlLQZsTSyjlmkbuB4D2cZvJArwA== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=61110 is now in the chain-of-trust
	DNSKEY=35418 is now in the chain-of-trust
	Query to b2.org.afilias-nst.org for _openpgpkey.debian.org/A
	Received 370 bytes from 199.249.120.1
	;; Response received from 199.249.120.1 (370 octets) ;; HEADER SECTION ;; id = 11718 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) debian.org. 3600 IN NS nsp.dnsnode.net. debian.org. 3600 IN NS dns4.easydns.info. debian.org. 3600 IN NS sec1.rcode0.net. debian.org. 3600 IN NS sec2.rcode0.net. debian.org. 3600 IN DS ( 20225 8 2 5c50664498fe209e41eb9b1d1fd89269f6b196d203596de31caa7d7d80aa207b ) debian.org. 3600 IN RRSIG ( DS 8 2 3600 20231008152317 20230917142317 35418 org. jLUk7Qo5Y3fTiwCm0f73D+DXwL+W7mB4tqMt2CWBoUM83AXNDHQg070LUVerwSMwlXJQ26I8UsoZ +LDy6S7VQKCIOUYwGrMfwqpxNBsTOhV4/QG2TPVFcLMaI0I1y2o9OVB9cdStLi2VLEFEFmivI3l0 nuDuDhJxmTDqQDribm4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b2.org.afilias-nst.org for debian.org/DNSKEY
	Received 358 bytes from 199.249.120.1
	;; Response received from 199.249.120.1 (358 octets) ;; HEADER SECTION ;; id = 52096 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; debian.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) debian.org. 3600 IN NS dns4.easydns.info. debian.org. 3600 IN NS sec2.rcode0.net. debian.org. 3600 IN NS nsp.dnsnode.net. debian.org. 3600 IN NS sec1.rcode0.net. debian.org. 3600 IN DS ( 20225 8 2 5c50664498fe209e41eb9b1d1fd89269f6b196d203596de31caa7d7d80aa207b ) debian.org. 3600 IN RRSIG ( DS 8 2 3600 20231008152317 20230917142317 35418 org. jLUk7Qo5Y3fTiwCm0f73D+DXwL+W7mB4tqMt2CWBoUM83AXNDHQg070LUVerwSMwlXJQ26I8UsoZ +LDy6S7VQKCIOUYwGrMfwqpxNBsTOhV4/QG2TPVFcLMaI0I1y2o9OVB9cdStLi2VLEFEFmivI3l0 nuDuDhJxmTDqQDribm4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone debian.org

debian.org

	Checking DS between org and debian.org
	Query to b2.org.afilias-nst.org for debian.org/DS
	Received 250 bytes from 199.249.120.1
	;; Response received from 199.249.120.1 (250 octets) ;; HEADER SECTION ;; id = 64496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; debian.org. IN DS ;; ANSWER SECTION (2 records) debian.org. 3600 IN DS ( 20225 8 2 5c50664498fe209e41eb9b1d1fd89269f6b196d203596de31caa7d7d80aa207b ) debian.org. 3600 IN RRSIG ( DS 8 2 3600 20231008152317 20230917142317 35418 org. jLUk7Qo5Y3fTiwCm0f73D+DXwL+W7mB4tqMt2CWBoUM83AXNDHQg070LUVerwSMwlXJQ26I8UsoZ +LDy6S7VQKCIOUYwGrMfwqpxNBsTOhV4/QG2TPVFcLMaI0I1y2o9OVB9cdStLi2VLEFEFmivI3l0 nuDuDhJxmTDqQDribm4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for debian.org in the org zone
	DS=20225/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`debian.org. 3600 IN RRSIG ( DS 8 2 3600 20231008152317 20230917142317 35418 org. jLUk7Qo5Y3fTiwCm0f73D+DXwL+W7mB4tqMt2CWBoUM83AXNDHQg070LUVerwSMwlXJQ26I8UsoZ +LDy6S7VQKCIOUYwGrMfwqpxNBsTOhV4/QG2TPVFcLMaI0I1y2o9OVB9cdStLi2VLEFEFmivI3l0 nuDuDhJxmTDqQDribm4= )`
	RRSIG=35418 and DNSKEY=35418 verifies the DS RRset
	DS=20225/SHA-256 is now in the chain-of-trust
	`debian.org. 3600 IN DS ( 20225 8 2 5c50664498fe209e41eb9b1d1fd89269f6b196d203596de31caa7d7d80aa207b )`
	Query to sec2.rcode0.net for debian.org/DNSKEY
	Received 1271 bytes from 176.97.158.100
	;; Response received from 176.97.158.100 (1271 octets) ;; HEADER SECTION ;; id = 61561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; debian.org. IN DNSKEY ;; ANSWER SECTION (5 records) debian.org. 28800 IN DNSKEY ( 256 3 8 AwEAAchA2DofADy/60hws5uwIYRnXREivtT/66LrUHxxHZ9oDh1nxadtL+8MNQ4bnTbw+yqTwvPx zQWtK6GXmL7DKdZZN+8p1KTrUI+NPEkHmFQaaDtvV82898RcEbQVCx0odhZ1yDitCCL3NOunrwnF D5tr3rsjqtQzHICar7kMFlMAfjt+ffSoi/Oq3q2UexV0IdwI+9Hw1/f896ib6bb20mjDCqDLieRB UszZgRQe8u7WdrrYsReU4CSSGWP0ZRju+w== ) ; Key ID = 59038 debian.org. 28800 IN DNSKEY ( 256 3 8 AwEAAe3kxloSIuExUtaPOu52zxcAC+7LIM2od9G68iQz3t0kqP97AUZjFAL+hEckMMRzrFiQZLfY Ap0Fx2KBcQ3fCgE7Tgm1wMWdiMP8EU/y8nk0SgE7YFJBIt2QvG1hihaLRlNSLEhBDR7LfynNSGVv h4n4+oxtftZ0jSArVx5qYzEIDMlxdMNnpp54ZgLE9wbNDEJZMTNobnpAbm0Ks6K4arypUf57lMmF rBLTisYrSXExFnKuOBuVqfBO7ZzDVKCDxw== ) ; Key ID = 48340 debian.org. 28800 IN DNSKEY ( 257 3 8 AwEAAd8XYHGXHMgx7jhAhpG5IBBGfeH6QoOarkaAVcZMAg+14hC2Ls9+RCya6JcDH0pfXO8zP4Fr PUOMKTI9PxJJBLq7B5pdNT9Wnfff3V6CxKfWRpvwBJb6vo4SMx3vOOYvjxImZSxhCDDcGKjnyWwO OmKnfs5y7jBhcpipYcWAsePGNpDOQtBmeu36kUmtAKmK0S5VcuoU3RBlJu201+rvc08DXkGkQvex uRkHoBBmpDPhNVStlSe2BXO4LRiqUzl1xBasu2q6ubPdoi/rtZ8rBmeRZkGKjOoRqoaEezWkUHvL +tiORtB2p1WeGjiU9SLOB2l7LsK+XozMV1FZ8AM6pz0= ) ; Key ID = 20225 debian.org. 28800 IN RRSIG ( DNSKEY 8 2 28800 20231030085212 20230920075213 20225 debian.org. xERfBnxYLuXjgsj1JhOxs8AHwzMrw8+LUf3HFDJHy4C2Fo4W+GWsY4Z4rJQ2V7TBOZPBpYn4rsVa IjnJw3gBBTMh55GtCpTWVTt7cQC5JpkCovAgKi/uf0eMlFlbjjE0zTCp1s7psU3VQsEp3BRiaWda F6P+Bj0ut3JOzePfeF1ZUIFC18AUmO9694B8Ts7+EKs+l5+D5X/28inbPrO92GRfn/f52pHj+A92 8a6+xirT/SXLUulySFUztkMArvqt/W8HLQ7oxqFeh/ECt1IpQ4RKZHLxGivO6aPAn1LOwwcXtsmG 2tkI9Y5/NZIaVM0q8d4iUiqIqY0eIAzMNut3jA== ) debian.org. 28800 IN RRSIG ( DNSKEY 8 2 28800 20231030085212 20230920075213 48340 debian.org. 59d67fxc3DmGWaBNgTF6SBRple2rK7l3jT1d6RfRHi9JFLRkfaiSNxu5CrU7JOCpeJnuR7VuMwOI miizJSW9Wk6SykkfHTt4gs6EXY6Sj9Son9ePMNxIlqozaIgNqqdE/GWh+tVvi9wg2ehJEDwEf4DS tTakHRyoNGvKwaYoQGEA2qzdZT1/n0WOkVqh0Oc4eAPU8hOCHnbRulSBkvdzyltIPfC97qJEgLpc wSiuMm1PLTh849RoXxJTdoCoO2fr ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 3 DNSKEY records for debian.org
	`debian.org. 28800 IN DNSKEY ( 256 3 8 AwEAAchA2DofADy/60hws5uwIYRnXREivtT/66LrUHxxHZ9oDh1nxadtL+8MNQ4bnTbw+yqTwvPx zQWtK6GXmL7DKdZZN+8p1KTrUI+NPEkHmFQaaDtvV82898RcEbQVCx0odhZ1yDitCCL3NOunrwnF D5tr3rsjqtQzHICar7kMFlMAfjt+ffSoi/Oq3q2UexV0IdwI+9Hw1/f896ib6bb20mjDCqDLieRB UszZgRQe8u7WdrrYsReU4CSSGWP0ZRju+w== ) ; Key ID = 59038`
	`debian.org. 28800 IN DNSKEY ( 256 3 8 AwEAAe3kxloSIuExUtaPOu52zxcAC+7LIM2od9G68iQz3t0kqP97AUZjFAL+hEckMMRzrFiQZLfY Ap0Fx2KBcQ3fCgE7Tgm1wMWdiMP8EU/y8nk0SgE7YFJBIt2QvG1hihaLRlNSLEhBDR7LfynNSGVv h4n4+oxtftZ0jSArVx5qYzEIDMlxdMNnpp54ZgLE9wbNDEJZMTNobnpAbm0Ks6K4arypUf57lMmF rBLTisYrSXExFnKuOBuVqfBO7ZzDVKCDxw== ) ; Key ID = 48340`
	`debian.org. 28800 IN DNSKEY ( 257 3 8 AwEAAd8XYHGXHMgx7jhAhpG5IBBGfeH6QoOarkaAVcZMAg+14hC2Ls9+RCya6JcDH0pfXO8zP4Fr PUOMKTI9PxJJBLq7B5pdNT9Wnfff3V6CxKfWRpvwBJb6vo4SMx3vOOYvjxImZSxhCDDcGKjnyWwO OmKnfs5y7jBhcpipYcWAsePGNpDOQtBmeu36kUmtAKmK0S5VcuoU3RBlJu201+rvc08DXkGkQvex uRkHoBBmpDPhNVStlSe2BXO4LRiqUzl1xBasu2q6ubPdoi/rtZ8rBmeRZkGKjOoRqoaEezWkUHvL +tiORtB2p1WeGjiU9SLOB2l7LsK+XozMV1FZ8AM6pz0= ) ; Key ID = 20225`
	DNSKEY=20225/SEP is now in the chain-of-trust
	DS=20225/SHA-256 verifies DNSKEY=20225/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`debian.org. 28800 IN RRSIG ( DNSKEY 8 2 28800 20231030085212 20230920075213 20225 debian.org. xERfBnxYLuXjgsj1JhOxs8AHwzMrw8+LUf3HFDJHy4C2Fo4W+GWsY4Z4rJQ2V7TBOZPBpYn4rsVa IjnJw3gBBTMh55GtCpTWVTt7cQC5JpkCovAgKi/uf0eMlFlbjjE0zTCp1s7psU3VQsEp3BRiaWda F6P+Bj0ut3JOzePfeF1ZUIFC18AUmO9694B8Ts7+EKs+l5+D5X/28inbPrO92GRfn/f52pHj+A92 8a6+xirT/SXLUulySFUztkMArvqt/W8HLQ7oxqFeh/ECt1IpQ4RKZHLxGivO6aPAn1LOwwcXtsmG 2tkI9Y5/NZIaVM0q8d4iUiqIqY0eIAzMNut3jA== )`
	`debian.org. 28800 IN RRSIG ( DNSKEY 8 2 28800 20231030085212 20230920075213 48340 debian.org. 59d67fxc3DmGWaBNgTF6SBRple2rK7l3jT1d6RfRHi9JFLRkfaiSNxu5CrU7JOCpeJnuR7VuMwOI miizJSW9Wk6SykkfHTt4gs6EXY6Sj9Son9ePMNxIlqozaIgNqqdE/GWh+tVvi9wg2ehJEDwEf4DS tTakHRyoNGvKwaYoQGEA2qzdZT1/n0WOkVqh0Oc4eAPU8hOCHnbRulSBkvdzyltIPfC97qJEgLpc wSiuMm1PLTh849RoXxJTdoCoO2fr )`
	RRSIG=20225 and DNSKEY=20225/SEP verifies the DNSKEY RRset
	RRSIG=48340 and DNSKEY=48340 verifies the DNSKEY RRset
	DNSKEY=59038 is now in the chain-of-trust
	DNSKEY=48340 is now in the chain-of-trust
	Query to dns4.easydns.info for _openpgpkey.debian.org/A
	Received 407 bytes from 64.68.197.10
	;; Response received from 64.68.197.10 (407 octets) ;; HEADER SECTION ;; id = 36617 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) _openpgpkey.debian.org. 28800 IN NS sec1.rcode0.net. _openpgpkey.debian.org. 28800 IN NS sec2.rcode0.net. _openpgpkey.debian.org. 28800 IN NS nsp.dnsnode.net. _openpgpkey.debian.org. 3600 IN DS ( 5623 8 2 de910345d9dedc9a7b4ec1fcf7ff36d6d6afe11e75041c3eb7a61f76544a5e39 ) _openpgpkey.debian.org. 3600 IN RRSIG ( DS 8 3 3600 20231028193533 20230918192029 59038 debian.org. ocCD2M9zZbjdQZNeRINNjlffPYzaulrYgmRz98ANt/6Ljcl+5GjaStlicr77DqzSmTDwYTqnCp4Q V0lpB/cumWxuTGc0WAlH1CBgCmvxuPjr8NOAm8EdejGIYso2h1y45666r8TqMriHDD5Nc/t4PaQv xf2UeyXwO5TDSJFSxL8r2thqCUW5OFwUO+aPnZM2fjI+bi2M/0/oKy4Bv3z8zRWAmcHlQWKQYvMs rPsV5kh8A8Wm/uD4Q2gLLw0X+bCy ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nsp.dnsnode.net for _openpgpkey.debian.org/DNSKEY
	Received 509 bytes from 194.58.198.32
	;; Response received from 194.58.198.32 (509 octets) ;; HEADER SECTION ;; id = 1501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN DNSKEY ;; ANSWER SECTION (2 records) _openpgpkey.debian.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbzTis3EsuqLsmiymbXywFKFgUC13tjOqcLSTqYBb83U30johFf569br0a+jp1uD5639hLFI h7PQICToeLFvsC6wnoB71I/8N3lY2mt2nTKZFso/izPXAohNJU4x0UivtQljCPGmVuF1C56h7a40 FhACKKt47h+SvxvPztMumd+J9WwJ/4fJ0RqDTv0vEaLFpKotXFq/Hdrh1MX4drl8CC+xvutiwr+c 8P3QABFCAfcQA2QLavaPWgyZib4kL5Onnw== ) ; Key ID = 5623 _openpgpkey.debian.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20231024180736 20230914170737 5623 _openpgpkey.debian.org. VeaC+J9cZv7Qtbmfq5PddArM1HTSAIrszZo8XFwX3WbuhwzwROxnqX6XVlM/3aaU4cP6eaiIxWz0 e/oq0FEkSiq24BX/7vSIDiqXFWo7ZKtwTopYkdXZAUNIt8ogMzn5CGfbI9AQUYe1EeAIwraa5wZV feLkEKZioQnkW4Ckug1SFVHWzvAQnpxSi5kwQC8jHeX1yikiTkjOkAY4HKEIMUSESA8mYStgEXkJ MLE4NiXUZQ50pAvzuRLfNR9aiXvE ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone _openpgpkey.debian.org
	Attempting to learn nameservers for _openpgpkey.debian.org
	Query to nsp.dnsnode.net for _openpgpkey.debian.org/NS
	Received 371 bytes from 194.58.198.32
	;; Response received from 194.58.198.32 (371 octets) ;; HEADER SECTION ;; id = 19747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN NS ;; ANSWER SECTION (4 records) _openpgpkey.debian.org. 28800 IN NS sec1.rcode0.net. _openpgpkey.debian.org. 28800 IN NS sec2.rcode0.net. _openpgpkey.debian.org. 28800 IN NS nsp.dnsnode.net. _openpgpkey.debian.org. 28800 IN RRSIG ( NS 8 3 28800 20231022155909 20230912155341 5623 _openpgpkey.debian.org. EnY4EEcVVm3Iui75GgHx1NwmEb6ACiJ/08hkZ/icdHzDcDwERqjeZTMiA5V47pxQR8PvGEBKF4Mv qj6jwNfJAm09GuVwcE5wpfb+avAG8psU4GShi33U1f47g4LnaqkgzCWSUZcg/lXQG/CbRAQcWncz zjJmGmP+AKL9CWbBc88PKLQeQvrU0WBKEiGeivg3bwSlTWoQIWLWskPYOHCwm6MCyrDp0xTlhscD 8OPS+p8vevj++hB7cjT4pzJgyEed ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found _openpgpkey.debian.org nameservers: sec1.rcode0.net, sec2.rcode0.net, nsp.dnsnode.net

_openpgpkey.debian.org

	Checking DS between debian.org and _openpgpkey.debian.org
	Query to sec2.rcode0.net for _openpgpkey.debian.org/DS
	Received 333 bytes from 176.97.158.100
	;; Response received from 176.97.158.100 (333 octets) ;; HEADER SECTION ;; id = 46252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN DS ;; ANSWER SECTION (2 records) _openpgpkey.debian.org. 3600 IN RRSIG ( DS 8 3 3600 20231028193533 20230918192029 59038 debian.org. ocCD2M9zZbjdQZNeRINNjlffPYzaulrYgmRz98ANt/6Ljcl+5GjaStlicr77DqzSmTDwYTqnCp4Q V0lpB/cumWxuTGc0WAlH1CBgCmvxuPjr8NOAm8EdejGIYso2h1y45666r8TqMriHDD5Nc/t4PaQv xf2UeyXwO5TDSJFSxL8r2thqCUW5OFwUO+aPnZM2fjI+bi2M/0/oKy4Bv3z8zRWAmcHlQWKQYvMs rPsV5kh8A8Wm/uD4Q2gLLw0X+bCy ) _openpgpkey.debian.org. 3600 IN DS ( 5623 8 2 de910345d9dedc9a7b4ec1fcf7ff36d6d6afe11e75041c3eb7a61f76544a5e39 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for _openpgpkey.debian.org in the debian.org zone
	DS=5623/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`_openpgpkey.debian.org. 3600 IN RRSIG ( DS 8 3 3600 20231028193533 20230918192029 59038 debian.org. ocCD2M9zZbjdQZNeRINNjlffPYzaulrYgmRz98ANt/6Ljcl+5GjaStlicr77DqzSmTDwYTqnCp4Q V0lpB/cumWxuTGc0WAlH1CBgCmvxuPjr8NOAm8EdejGIYso2h1y45666r8TqMriHDD5Nc/t4PaQv xf2UeyXwO5TDSJFSxL8r2thqCUW5OFwUO+aPnZM2fjI+bi2M/0/oKy4Bv3z8zRWAmcHlQWKQYvMs rPsV5kh8A8Wm/uD4Q2gLLw0X+bCy )`
	RRSIG=59038 and DNSKEY=59038 verifies the DS RRset
	DS=5623/SHA-256 is now in the chain-of-trust
	`_openpgpkey.debian.org. 3600 IN DS ( 5623 8 2 de910345d9dedc9a7b4ec1fcf7ff36d6d6afe11e75041c3eb7a61f76544a5e39 )`
	Query to sec2.rcode0.net for _openpgpkey.debian.org/DNSKEY
	Received 509 bytes from 176.97.158.100
	;; Response received from 176.97.158.100 (509 octets) ;; HEADER SECTION ;; id = 25765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN DNSKEY ;; ANSWER SECTION (2 records) _openpgpkey.debian.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbzTis3EsuqLsmiymbXywFKFgUC13tjOqcLSTqYBb83U30johFf569br0a+jp1uD5639hLFI h7PQICToeLFvsC6wnoB71I/8N3lY2mt2nTKZFso/izPXAohNJU4x0UivtQljCPGmVuF1C56h7a40 FhACKKt47h+SvxvPztMumd+J9WwJ/4fJ0RqDTv0vEaLFpKotXFq/Hdrh1MX4drl8CC+xvutiwr+c 8P3QABFCAfcQA2QLavaPWgyZib4kL5Onnw== ) ; Key ID = 5623 _openpgpkey.debian.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20231024180736 20230914170737 5623 _openpgpkey.debian.org. VeaC+J9cZv7Qtbmfq5PddArM1HTSAIrszZo8XFwX3WbuhwzwROxnqX6XVlM/3aaU4cP6eaiIxWz0 e/oq0FEkSiq24BX/7vSIDiqXFWo7ZKtwTopYkdXZAUNIt8ogMzn5CGfbI9AQUYe1EeAIwraa5wZV feLkEKZioQnkW4Ckug1SFVHWzvAQnpxSi5kwQC8jHeX1yikiTkjOkAY4HKEIMUSESA8mYStgEXkJ MLE4NiXUZQ50pAvzuRLfNR9aiXvE ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DNSKEY records for _openpgpkey.debian.org
	`_openpgpkey.debian.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbzTis3EsuqLsmiymbXywFKFgUC13tjOqcLSTqYBb83U30johFf569br0a+jp1uD5639hLFI h7PQICToeLFvsC6wnoB71I/8N3lY2mt2nTKZFso/izPXAohNJU4x0UivtQljCPGmVuF1C56h7a40 FhACKKt47h+SvxvPztMumd+J9WwJ/4fJ0RqDTv0vEaLFpKotXFq/Hdrh1MX4drl8CC+xvutiwr+c 8P3QABFCAfcQA2QLavaPWgyZib4kL5Onnw== ) ; Key ID = 5623`
	DNSKEY=5623 is now in the chain-of-trust
	DS=5623/SHA-256 verifies DNSKEY=5623
	Found 1 RRSIGs over DNSKEY RRset
	`_openpgpkey.debian.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20231024180736 20230914170737 5623 _openpgpkey.debian.org. VeaC+J9cZv7Qtbmfq5PddArM1HTSAIrszZo8XFwX3WbuhwzwROxnqX6XVlM/3aaU4cP6eaiIxWz0 e/oq0FEkSiq24BX/7vSIDiqXFWo7ZKtwTopYkdXZAUNIt8ogMzn5CGfbI9AQUYe1EeAIwraa5wZV feLkEKZioQnkW4Ckug1SFVHWzvAQnpxSi5kwQC8jHeX1yikiTkjOkAY4HKEIMUSESA8mYStgEXkJ MLE4NiXUZQ50pAvzuRLfNR9aiXvE )`
	RRSIG=5623 and DNSKEY=5623 verifies the DNSKEY RRset
	Query to sec2.rcode0.net for _openpgpkey.debian.org/A
	Received 684 bytes from 176.97.158.100
	;; Response received from 176.97.158.100 (684 octets) ;; HEADER SECTION ;; id = 48307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	sec2.rcode0.net is authoritative for _openpgpkey.debian.org
	Found RRSIG signed by _openpgpkey.debian.org zone
	Query to sec1.rcode0.net for _openpgpkey.debian.org/SOA
	Received 353 bytes from 192.174.68.100
	;; Response received from 192.174.68.100 (353 octets) ;; HEADER SECTION ;; id = 25475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN SOA ;; ANSWER SECTION (2 records) _openpgpkey.debian.org. 3600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) _openpgpkey.debian.org. 3600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to nsp.dnsnode.net for _openpgpkey.debian.org/SOA
	Received 673 bytes from 194.58.198.32
	;; Response received from 194.58.198.32 (673 octets) ;; HEADER SECTION ;; id = 38367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN SOA ;; ANSWER SECTION (2 records) _openpgpkey.debian.org. 3600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 3600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 28800 IN NS nsp.dnsnode.net. _openpgpkey.debian.org. 28800 IN NS sec1.rcode0.net. _openpgpkey.debian.org. 28800 IN NS sec2.rcode0.net. _openpgpkey.debian.org. 28800 IN RRSIG ( NS 8 3 28800 20231022155909 20230912155341 5623 _openpgpkey.debian.org. EnY4EEcVVm3Iui75GgHx1NwmEb6ACiJ/08hkZ/icdHzDcDwERqjeZTMiA5V47pxQR8PvGEBKF4Mv qj6jwNfJAm09GuVwcE5wpfb+avAG8psU4GShi33U1f47g4LnaqkgzCWSUZcg/lXQG/CbRAQcWncz zjJmGmP+AKL9CWbBc88PKLQeQvrU0WBKEiGeivg3bwSlTWoQIWLWskPYOHCwm6MCyrDp0xTlhscD 8OPS+p8vevj++hB7cjT4pzJgyEed ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sec2.rcode0.net for _openpgpkey.debian.org/A
	Received 684 bytes from 176.97.158.100
	;; Response received from 176.97.158.100 (684 octets) ;; HEADER SECTION ;; id = 58074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`_openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL )`
	RRSIG=5623 and DNSKEY=5623 verifies the SOA RRset

_openpgpkey.debian.org

	Query to sec1.rcode0.net for _openpgpkey.debian.org/A
	Received 684 bytes from 192.174.68.100
	;; Response received from 192.174.68.100 (684 octets) ;; HEADER SECTION ;; id = 12401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	sec1.rcode0.net is authoritative for _openpgpkey.debian.org
	Found RRSIG signed by _openpgpkey.debian.org zone
	Query to sec1.rcode0.net for _openpgpkey.debian.org/A
	Received 684 bytes from 192.174.68.100
	;; Response received from 192.174.68.100 (684 octets) ;; HEADER SECTION ;; id = 18247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`_openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL )`
	RRSIG=5623 and DNSKEY=5623 verifies the SOA RRset

_openpgpkey.debian.org

	Query to nsp.dnsnode.net for _openpgpkey.debian.org/A
	Received 684 bytes from 194.58.198.32
	;; Response received from 194.58.198.32 (684 octets) ;; HEADER SECTION ;; id = 14725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsp.dnsnode.net is authoritative for _openpgpkey.debian.org
	Found RRSIG signed by _openpgpkey.debian.org zone
	Query to nsp.dnsnode.net for _openpgpkey.debian.org/A
	Received 684 bytes from 194.58.198.32
	;; Response received from 194.58.198.32 (684 octets) ;; HEADER SECTION ;; id = 63560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _openpgpkey.debian.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) _openpgpkey.debian.org. 600 IN SOA ( kaufmann.debian.org. hostmaster.debian.org. 2023091056 ;serial 1800 ;refresh 600 ;retry 1814400 ;expire 600 ;minimum ) _openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN NSEC3 ( 1 0 16 ee304bd7b9 qvqs939kksbm4gthv60sf3uailrcu2d2 NS SOA RRSIG DNSKEY NSEC3PARAM ) qvfeti3b5arckrgemk6uaidoa62og8mf._openpgpkey.debian.org. 600 IN RRSIG ( NSEC3 8 4 600 20231029053404 20230919052635 5623 _openpgpkey.debian.org. mTdMyQuuwUQ7NkpksoZx0fFkzn7UFKQDhZ4noAnPJ/hYeGegCDsJPrs2YtdzQjHPzfkKKJ5svL9k UJKi9CopL2GnqdqEEK9y+rHJAx//ShQIMkCWDEO9+YjeePLdoHjCWWG/OLutTTEUcw2sEu+5Z8I4 Kwoda1K+7j/fIK1hxfUbkP5ZI0qUhBkyWCDKuqG+/vUsxd7IUuEL8OHLla2ZqXp9LeQ5ITbUfsY0 kTBVVn1+aWcfz5yS0gmXzi8ayY/O ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`_openpgpkey.debian.org. 600 IN RRSIG ( SOA 8 3 3600 20231103170512 20230924160512 5623 _openpgpkey.debian.org. tuGfeHFVJKA6045Yc7860MpmfC/ziAErc/A3Puw5rtDRG+c3RBEn+8B4vlshI5FncpDsfhGXNj+T IIZyJ+/mrK5Z+dmAeh5xSBzhQrHdtQTHGY9divo6fpZyy3YAZ+GbkjYCdZnKXRbOnaao4+RToF9y 57kixhLn578B3NWGpSLF00YrhXBx67FeviCf/WhMngUYflnMrqPvtc5H9rJjRcGfIy0gwzUCmBVU ThjumicrFAgxg1LayfgEsXWd9YAL )`
	RRSIG=5623 and DNSKEY=5623 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _openpgpkey.debian.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: