DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-16 02:59:29 UTC

Analyzing DNSSEC problems for ac.ma

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 31745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to k.root-servers.net for ac.ma/A
	Received 879 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 879 octets ;; HEADER SECTION ;; id = 30252 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 19 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS d.tld.ma. ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS ns-ma.nic.fr. ma. 86400 IN DS ( 3254 8 2 a7a6874e207948d079fa7037a7ec89c890cc748c6dddb00523b832991b806aa0 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . J4/iKDiS5LYo8VxLelRLzfhL/jmeWmCNeqppp5CnZHhGm9m8jZwK6bm9zT0BcfuJjFFMrycdK9L5 3RI2oBtPZdKt8vmyrANYEX+XimlaJQoa/TJAL2vZScQ2BxB/xdBADAotivSX+MXBxgimHiZ1CItf SZhW05KM8YGDjqtz5DfGlm0EOpDCeFKz4MmRsLDGfOXNv/7mrREhrSPDTRIYUyXZ0jURK6m5cTXP tlOaqep+QiXwLsn7mF1FlZU6NN3mSzL3rg8gpeb+ZQCDnKBySUrCdRfDWi+3Upqt4J/GgGGo1XjN ZpogW5kQjNXiv/b7lPqA7MrAulFao9K9PrNacw== ) ;; ADDITIONAL SECTION (19 records) a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 e.tld.ma. 172800 IN A 105.73.80.236 f.tld.ma. 172800 IN A 41.214.240.4 dns.inria.fr. 172800 IN A 193.51.208.13 ns-ma.nic.fr. 172800 IN A 194.0.9.1 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 f.tld.ma. 172800 IN AAAA 2c0f:fb20:100:fc::33 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ma/DNSKEY
	Received 880 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 880 octets ;; HEADER SECTION ;; id = 37351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 19 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS d.tld.ma. ma. 172800 IN NS ns-ma.nic.fr. ma. 86400 IN DS ( 3254 8 2 a7a6874e207948d079fa7037a7ec89c890cc748c6dddb00523b832991b806aa0 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . J4/iKDiS5LYo8VxLelRLzfhL/jmeWmCNeqppp5CnZHhGm9m8jZwK6bm9zT0BcfuJjFFMrycdK9L5 3RI2oBtPZdKt8vmyrANYEX+XimlaJQoa/TJAL2vZScQ2BxB/xdBADAotivSX+MXBxgimHiZ1CItf SZhW05KM8YGDjqtz5DfGlm0EOpDCeFKz4MmRsLDGfOXNv/7mrREhrSPDTRIYUyXZ0jURK6m5cTXP tlOaqep+QiXwLsn7mF1FlZU6NN3mSzL3rg8gpeb+ZQCDnKBySUrCdRfDWi+3Upqt4J/GgGGo1XjN ZpogW5kQjNXiv/b7lPqA7MrAulFao9K9PrNacw== ) ;; ADDITIONAL SECTION (19 records) ns-ma.nic.fr. 172800 IN A 194.0.9.1 dns.inria.fr. 172800 IN A 193.51.208.13 f.tld.ma. 172800 IN A 41.214.240.4 e.tld.ma. 172800 IN A 105.73.80.236 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 f.tld.ma. 172800 IN AAAA 2c0f:fb20:100:fc::33 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 ;; { "EDNS-VERSION": 0 }
	Found child zone ma

	Checking DS between . and ma
	Query to l.root-servers.net for ma/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 50540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DS ;; ANSWER SECTION (2 records) ma. 86400 IN DS ( 3254 8 2 a7a6874e207948d079fa7037a7ec89c890cc748c6dddb00523b832991b806aa0 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . J4/iKDiS5LYo8VxLelRLzfhL/jmeWmCNeqppp5CnZHhGm9m8jZwK6bm9zT0BcfuJjFFMrycdK9L5 3RI2oBtPZdKt8vmyrANYEX+XimlaJQoa/TJAL2vZScQ2BxB/xdBADAotivSX+MXBxgimHiZ1CItf SZhW05KM8YGDjqtz5DfGlm0EOpDCeFKz4MmRsLDGfOXNv/7mrREhrSPDTRIYUyXZ0jURK6m5cTXP tlOaqep+QiXwLsn7mF1FlZU6NN3mSzL3rg8gpeb+ZQCDnKBySUrCdRfDWi+3Upqt4J/GgGGo1XjN ZpogW5kQjNXiv/b7lPqA7MrAulFao9K9PrNacw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ma in the . zone
	DS=3254/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ma. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . J4/iKDiS5LYo8VxLelRLzfhL/jmeWmCNeqppp5CnZHhGm9m8jZwK6bm9zT0BcfuJjFFMrycdK9L5 3RI2oBtPZdKt8vmyrANYEX+XimlaJQoa/TJAL2vZScQ2BxB/xdBADAotivSX+MXBxgimHiZ1CItf SZhW05KM8YGDjqtz5DfGlm0EOpDCeFKz4MmRsLDGfOXNv/7mrREhrSPDTRIYUyXZ0jURK6m5cTXP tlOaqep+QiXwLsn7mF1FlZU6NN3mSzL3rg8gpeb+ZQCDnKBySUrCdRfDWi+3Upqt4J/GgGGo1XjN ZpogW5kQjNXiv/b7lPqA7MrAulFao9K9PrNacw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=3254/SHA-256 is now in the chain-of-trust
	`ma. 86400 IN DS ( 3254 8 2 a7a6874e207948d079fa7037a7ec89c890cc748c6dddb00523b832991b806aa0 )`
	Query to dns.inria.fr for ma/DNSKEY
	Received 1203 bytes from 193.51.208.13
	;; Response received from [193.51.208.13] 1203 octets ;; HEADER SECTION ;; id = 51801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (6 records) ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAaVIFPqdsJqzhJJTyrhqLsu//hU43wqQ3CbAZy60ATBwVMSehU0+GQ+KLU5n51CDCbibbtH3 HjzO3UoyBtOQYYaImZiB1Yz/1Bj2tVKTXiWHFfS1g2DMPLIOosIq0QOxMfDg2CRGVtrVVd4fvhzM TgYxL+Rf6FhaolwRcMEAfYxIK+A9VWYSBUgZft/eS8Dt/Eox7zCXDZSfgqKaGhdDQctZUb21svTG p+g9gsCBecTrHkSjWTMjTNpOkvbJtjVcqyz3TcsxmIQ8FWDxQPaHmfG1DjujP49K+AAY7Lm6bc/G V6fSNnPpgiwG+keL+WgUAyjiMM3RIXwVvQZ3vFUWhEU= ) ; keytag 3254 ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAbHteJL+UMMqEm0Sdgb84QeHUJYJnJsuHWqeNT0TOFTYliCY7nGXWH0Y05PSLgFQ2yGKASf0 n/tScOyGVklqf2n9BWdOvn9x7bn1O6+Z6WTVNZDXrXg4xCp1cU4FblGjWNbPeMJsuq9UVhGkEp0n dGl9pS0mGEcD7hMQmrixgInP ) ; keytag 46756 ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAdthw88tjeyi2qqlVoLU3PHoN7iGjc2NwffcizLmJjsbmrpaCasiGbC/sdGhfjC9z4rrdirz jpIb9J5G0khHT4TmiW8oSyXJ91yBLCFYGrHy6/YdrQiijPFdImV6GBoOjr8iqKp1bHWnttZWsYm2 AURkSQ4BtC/afh7rsKaRDiOB ) ; keytag 55348 ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcxc/f85O+bB5vFHO/ilc6+Tg9AaamVePGqSg1hrvqyz718k9BPNGXuGFl1aX21l4ivFJYrj KXgiwukZu/JxOthSjQRktQ1OrPA86x9Cap2QDQkUlZb74ZRF7jSYk7GtbyWpdRcr2iVb8xpjCPsj roCk9FXdgRWftGvMGz8CK7VZ ) ; keytag 4399 ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20260613011726 20260514003250 3254 ma. D8yvTEpGjhOw/43q9J/dAd0ZwGe7Q3R/cd/dxcsCYAHHjuX16cHokQwEZsLF9G8DqyJymtnJwnao OTWFLyoUbKarI40/t9bkVXdCUc4p8jv3NsyiHTByfs3v4CUcHHbkPp75V1Y0aTSyyJZCWtXCI5TS RZnLktrggvaFGPr3SuhvEYsu9dkd5ZTIV1AA1YyEVx5FTYt5ECYM77X+yNi1cZOjChm5h6Seov1h XQGHqmXmULAKtau4yOScqoQ8IMEoHd4C5c1zOMPJ/KjjjGRT5e8t9nFBhg9iWGjIJ40WzZbz5XN5 9WS3jbnt6TS1N0SDqNg3elrL1cx8evD0S9u6Dw== ) ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20260613011726 20260514003250 46756 ma. e/36SuV+7PWUnf9iUV7NfH5mIu1IPvF7yH8leAYh/KOv1tltroq1YsbU5jNsdDI/rdIWGOnRasit h370Wuh1y8fRh2PF6kImbrt/cOEJBPlGlB86V/TmNyR9LBDHBD1k6La76GVSyBXGZ4xdOmfgR2wz qAkG1sJdPpri5oGp0x8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for ma
	`ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAaVIFPqdsJqzhJJTyrhqLsu//hU43wqQ3CbAZy60ATBwVMSehU0+GQ+KLU5n51CDCbibbtH3 HjzO3UoyBtOQYYaImZiB1Yz/1Bj2tVKTXiWHFfS1g2DMPLIOosIq0QOxMfDg2CRGVtrVVd4fvhzM TgYxL+Rf6FhaolwRcMEAfYxIK+A9VWYSBUgZft/eS8Dt/Eox7zCXDZSfgqKaGhdDQctZUb21svTG p+g9gsCBecTrHkSjWTMjTNpOkvbJtjVcqyz3TcsxmIQ8FWDxQPaHmfG1DjujP49K+AAY7Lm6bc/G V6fSNnPpgiwG+keL+WgUAyjiMM3RIXwVvQZ3vFUWhEU= ) ; keytag 3254`
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAbHteJL+UMMqEm0Sdgb84QeHUJYJnJsuHWqeNT0TOFTYliCY7nGXWH0Y05PSLgFQ2yGKASf0 n/tScOyGVklqf2n9BWdOvn9x7bn1O6+Z6WTVNZDXrXg4xCp1cU4FblGjWNbPeMJsuq9UVhGkEp0n dGl9pS0mGEcD7hMQmrixgInP ) ; keytag 46756`
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAdthw88tjeyi2qqlVoLU3PHoN7iGjc2NwffcizLmJjsbmrpaCasiGbC/sdGhfjC9z4rrdirz jpIb9J5G0khHT4TmiW8oSyXJ91yBLCFYGrHy6/YdrQiijPFdImV6GBoOjr8iqKp1bHWnttZWsYm2 AURkSQ4BtC/afh7rsKaRDiOB ) ; keytag 55348`
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcxc/f85O+bB5vFHO/ilc6+Tg9AaamVePGqSg1hrvqyz718k9BPNGXuGFl1aX21l4ivFJYrj KXgiwukZu/JxOthSjQRktQ1OrPA86x9Cap2QDQkUlZb74ZRF7jSYk7GtbyWpdRcr2iVb8xpjCPsj roCk9FXdgRWftGvMGz8CK7VZ ) ; keytag 4399`
	DNSKEY=3254/SEP is now in the chain-of-trust
	DS=3254/SHA-256 verifies DNSKEY=3254/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20260613011726 20260514003250 3254 ma. D8yvTEpGjhOw/43q9J/dAd0ZwGe7Q3R/cd/dxcsCYAHHjuX16cHokQwEZsLF9G8DqyJymtnJwnao OTWFLyoUbKarI40/t9bkVXdCUc4p8jv3NsyiHTByfs3v4CUcHHbkPp75V1Y0aTSyyJZCWtXCI5TS RZnLktrggvaFGPr3SuhvEYsu9dkd5ZTIV1AA1YyEVx5FTYt5ECYM77X+yNi1cZOjChm5h6Seov1h XQGHqmXmULAKtau4yOScqoQ8IMEoHd4C5c1zOMPJ/KjjjGRT5e8t9nFBhg9iWGjIJ40WzZbz5XN5 9WS3jbnt6TS1N0SDqNg3elrL1cx8evD0S9u6Dw== )`
	`ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20260613011726 20260514003250 46756 ma. e/36SuV+7PWUnf9iUV7NfH5mIu1IPvF7yH8leAYh/KOv1tltroq1YsbU5jNsdDI/rdIWGOnRasit h370Wuh1y8fRh2PF6kImbrt/cOEJBPlGlB86V/TmNyR9LBDHBD1k6La76GVSyBXGZ4xdOmfgR2wz qAkG1sJdPpri5oGp0x8= )`
	RRSIG=3254 and DNSKEY=3254/SEP verifies the DNSKEY RRset
	RRSIG=46756 and DNSKEY=46756 verifies the DNSKEY RRset
	DNSKEY=46756 is now in the chain-of-trust
	DNSKEY=55348 is now in the chain-of-trust
	DNSKEY=4399 is now in the chain-of-trust
	Query to b.tld.ma for ac.ma/A
	Received 509 bytes from 81.192.171.132
	;; Response received from [81.192.171.132] 509 octets ;; HEADER SECTION ;; id = 43834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.tld.ma is authoritative for ac.ma
	Query to dns.inria.fr for ac.ma/DNSKEY
	Received 1212 bytes from 193.51.208.13
	;; Response received from [193.51.208.13] 1212 octets ;; HEADER SECTION ;; id = 40212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN DNSKEY ;; ANSWER SECTION (6 records) ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAZuph3gP92XFDgatcmy3yHBEev+1/rkc9Usoq2T85J9ESCGPradUeuGERYPS7Cdlwz8cBUtt pd4EZU7nA1wzDKMse71tjd/EAvCOg7RGH8LwArblXvJF4aHy5V69iV0NQziiOLb0waocGyx0iVvv g6g0vQRjMa8Y7FWU5ayKvO8Z ) ; keytag 12825 ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAbF5ncafJSqKBAKOM2OnlgV+t/l+0HXEZijaPgGhhAUhdr/RM8FpX5GgKsb19KpHlLAI447K FDXyCVinKKA9JMXO+V/4+DtGa12ZLGIwOE628iGfgDBitKdYyHoGuF2ny7LNVGQvcg0HO+AYW8wD UUkgfrMcYu7Pko4A4elnWbx1 ) ; keytag 19218 ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcdHtS17izIza5829PtypwpxW5qMOG46GzdcxFDL27+ww4jCg1wgTcbXG1IHe3CmdGVFGZcP JJt8S7ZwgcbDWkyKCBOPwFLIOcV8IcZA+qfiiAt8TRptVHN8bosfK8sZl59TLrdwms4phkHP7HKi n/1N5QhvoZhwphGFt1ypEYql ) ; keytag 36594 ac.ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAcYGBc6Xg37p/MobwHpb9dcNV/zNUKaEvHqupFuiafyzVgtsf8y7IK1f2BR97F4UenpgFSfp xE39s3O6tg4ri5xM0O70sflh4UueF64hfu5M+2rnERZR+1eLktpYTVu4uo+cBuQA+/8uPeoEo4j2 O4AHf9vM/huIe5+ZrTMMef23bzBgi4pdirO5WSOydjXFP5Iab0GH3sTWACawqZUfNYvZl6C3PGmn BCNa1qp96H5EgbnXTgju4DJzQm/a0pf24dj+P1JO4aeN8IR9Ut4UWSOfrfFvo71fWTLsNb5AHB3L W/2Qon/XFnPUSF8xAh2s+kqirHp21D2aAF/UJajLSFM= ) ; keytag 29779 ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 19218 ac.ma. VFL8vg1Jaa9gOFmsuwzirL6JlV+A9tUxxFPpPy5lXAvIQLjM572SyVG0XB3E+eizwaIFeV9Vxs1r KleI7zACQt0AhhFjcB5798ciH7IR+Y/q4cB7wcoDXBFO/eCM8eEvynSJ03lxGBZaRemufopkYDNl cHBJuxuC0nu+aHU3cQ4= ) ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 29779 ac.ma. b3XQdU37OzjXce6iAw+mOcXcsg1jNWTTXyGAny0VZBaqzoN8ETItJpjGTqAFbxWBrNqmBbZrZ1zl AhLY5s/3Ev0ws2pZoB+QstiHr5iDd3Krq8OmGlICbsze3excqFBzK0d6FFDNz0OLCcIETPJ1D9wp H0ngnQH2R7gHxzt6Khz/Fgq21yc0kCHNuiyyXL6lyOQynRHIOooqBtxmLeQ5BTiqaGoCSVi7C4dG r4AFUhmvZXu3fXVPf3LQy6z/6umdNiIDqNVuvsRxEXthHu4TL63ghffDLLjc9TYNx9VNttC9mhLL +zcPhTtJyjcGfGAUie93j/hI+na4B6lfOdQ6qg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ac.ma
	Attempting to learn nameservers for ac.ma
	Query to a.tld.ma for ac.ma/NS
	Received 353 bytes from 81.192.171.131
	;; Response received from [81.192.171.131] 353 octets ;; HEADER SECTION ;; id = 48305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN NS ;; ANSWER SECTION (9 records) ac.ma. 28800 IN NS a.tld.ma. ac.ma. 28800 IN NS d.tld.ma. ac.ma. 28800 IN NS dns.inria.fr. ac.ma. 28800 IN NS b.tld.ma. ac.ma. 28800 IN NS ns-ma.nic.fr. ac.ma. 28800 IN NS c.tld.ma. ac.ma. 28800 IN NS f.tld.ma. ac.ma. 28800 IN NS e.tld.ma. ac.ma. 28800 IN RRSIG ( NS 8 2 28800 20260614092937 20260515085421 19218 ac.ma. H47gOBByXEvkwAhb5NXraW8BTwAP5WznBz16rhH3FYX/kN2ajDYGNwSAfz1y2ApK7nUM6Anya5rY j4QsGopFTTl0yysNvT9QmM4009XjaeEFSCy+cs69d1LCyjagBS/LAppMyMCXysHNfnsEmCihso5U jISrgv+TzQxAiVhQQD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ac.ma nameservers: a.tld.ma, d.tld.ma, dns.inria.fr, b.tld.ma, ns-ma.nic.fr, c.tld.ma, f.tld.ma, e.tld.ma

ac.ma

	Checking DS between ma and ac.ma
	Query to c.tld.ma for ac.ma/DS
	Received 280 bytes from 81.192.171.139
	;; Response received from [81.192.171.139] 280 octets ;; HEADER SECTION ;; id = 32892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN DS ;; ANSWER SECTION (3 records) ac.ma. 108000 IN DS 29779 8 1 6e53bfed3451ac519545fd1fac4f258b89d9d492 ac.ma. 108000 IN DS ( 29779 8 2 1573f5c460bc72caa5619f085bf18b3c6ee7556afd8dcfd4bc3b8715decc3f24 ) ac.ma. 108000 IN RRSIG ( DS 8 2 108000 20260609013123 20260510010212 46756 ma. i1dc0I1XnqqaBwR7kLZPxqt3ss/K3XB+QreHTdWm2ltUugMj2wsuUfMihUbKtrJU9XsEODB0pvyw OAV7h9oVF5Kl2dX9ubdYhJE8SjwBE7qUMPf+HiyZDib/HX1mqbc/9gtaEXmljQih4CY4PGsbhe4V i579EmwT5M7y/dLH1EE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ac.ma in the ma zone
	DS=29779/SHA-1 uses a deprecated digest algorithm
	DS=29779/SHA-1 has algorithm RSASHA256
	DS=29779/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ac.ma. 108000 IN RRSIG ( DS 8 2 108000 20260609013123 20260510010212 46756 ma. i1dc0I1XnqqaBwR7kLZPxqt3ss/K3XB+QreHTdWm2ltUugMj2wsuUfMihUbKtrJU9XsEODB0pvyw OAV7h9oVF5Kl2dX9ubdYhJE8SjwBE7qUMPf+HiyZDib/HX1mqbc/9gtaEXmljQih4CY4PGsbhe4V i579EmwT5M7y/dLH1EE= )`
	RRSIG=46756 and DNSKEY=46756 verifies the DS RRset
	DS=29779/SHA-1 is now in the chain-of-trust
	`ac.ma. 108000 IN DS 29779 8 1 6e53bfed3451ac519545fd1fac4f258b89d9d492`
	`ac.ma. 108000 IN DS ( 29779 8 2 1573f5c460bc72caa5619f085bf18b3c6ee7556afd8dcfd4bc3b8715decc3f24 )`
	Query to e.tld.ma for ac.ma/DNSKEY
	Received 1212 bytes from 105.73.80.236
	;; Response received from [105.73.80.236] 1212 octets ;; HEADER SECTION ;; id = 35108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN DNSKEY ;; ANSWER SECTION (6 records) ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAbF5ncafJSqKBAKOM2OnlgV+t/l+0HXEZijaPgGhhAUhdr/RM8FpX5GgKsb19KpHlLAI447K FDXyCVinKKA9JMXO+V/4+DtGa12ZLGIwOE628iGfgDBitKdYyHoGuF2ny7LNVGQvcg0HO+AYW8wD UUkgfrMcYu7Pko4A4elnWbx1 ) ; keytag 19218 ac.ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAcYGBc6Xg37p/MobwHpb9dcNV/zNUKaEvHqupFuiafyzVgtsf8y7IK1f2BR97F4UenpgFSfp xE39s3O6tg4ri5xM0O70sflh4UueF64hfu5M+2rnERZR+1eLktpYTVu4uo+cBuQA+/8uPeoEo4j2 O4AHf9vM/huIe5+ZrTMMef23bzBgi4pdirO5WSOydjXFP5Iab0GH3sTWACawqZUfNYvZl6C3PGmn BCNa1qp96H5EgbnXTgju4DJzQm/a0pf24dj+P1JO4aeN8IR9Ut4UWSOfrfFvo71fWTLsNb5AHB3L W/2Qon/XFnPUSF8xAh2s+kqirHp21D2aAF/UJajLSFM= ) ; keytag 29779 ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAZuph3gP92XFDgatcmy3yHBEev+1/rkc9Usoq2T85J9ESCGPradUeuGERYPS7Cdlwz8cBUtt pd4EZU7nA1wzDKMse71tjd/EAvCOg7RGH8LwArblXvJF4aHy5V69iV0NQziiOLb0waocGyx0iVvv g6g0vQRjMa8Y7FWU5ayKvO8Z ) ; keytag 12825 ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcdHtS17izIza5829PtypwpxW5qMOG46GzdcxFDL27+ww4jCg1wgTcbXG1IHe3CmdGVFGZcP JJt8S7ZwgcbDWkyKCBOPwFLIOcV8IcZA+qfiiAt8TRptVHN8bosfK8sZl59TLrdwms4phkHP7HKi n/1N5QhvoZhwphGFt1ypEYql ) ; keytag 36594 ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 19218 ac.ma. VFL8vg1Jaa9gOFmsuwzirL6JlV+A9tUxxFPpPy5lXAvIQLjM572SyVG0XB3E+eizwaIFeV9Vxs1r KleI7zACQt0AhhFjcB5798ciH7IR+Y/q4cB7wcoDXBFO/eCM8eEvynSJ03lxGBZaRemufopkYDNl cHBJuxuC0nu+aHU3cQ4= ) ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 29779 ac.ma. b3XQdU37OzjXce6iAw+mOcXcsg1jNWTTXyGAny0VZBaqzoN8ETItJpjGTqAFbxWBrNqmBbZrZ1zl AhLY5s/3Ev0ws2pZoB+QstiHr5iDd3Krq8OmGlICbsze3excqFBzK0d6FFDNz0OLCcIETPJ1D9wp H0ngnQH2R7gHxzt6Khz/Fgq21yc0kCHNuiyyXL6lyOQynRHIOooqBtxmLeQ5BTiqaGoCSVi7C4dG r4AFUhmvZXu3fXVPf3LQy6z/6umdNiIDqNVuvsRxEXthHu4TL63ghffDLLjc9TYNx9VNttC9mhLL +zcPhTtJyjcGfGAUie93j/hI+na4B6lfOdQ6qg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for ac.ma
	`ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAbF5ncafJSqKBAKOM2OnlgV+t/l+0HXEZijaPgGhhAUhdr/RM8FpX5GgKsb19KpHlLAI447K FDXyCVinKKA9JMXO+V/4+DtGa12ZLGIwOE628iGfgDBitKdYyHoGuF2ny7LNVGQvcg0HO+AYW8wD UUkgfrMcYu7Pko4A4elnWbx1 ) ; keytag 19218`
	`ac.ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAcYGBc6Xg37p/MobwHpb9dcNV/zNUKaEvHqupFuiafyzVgtsf8y7IK1f2BR97F4UenpgFSfp xE39s3O6tg4ri5xM0O70sflh4UueF64hfu5M+2rnERZR+1eLktpYTVu4uo+cBuQA+/8uPeoEo4j2 O4AHf9vM/huIe5+ZrTMMef23bzBgi4pdirO5WSOydjXFP5Iab0GH3sTWACawqZUfNYvZl6C3PGmn BCNa1qp96H5EgbnXTgju4DJzQm/a0pf24dj+P1JO4aeN8IR9Ut4UWSOfrfFvo71fWTLsNb5AHB3L W/2Qon/XFnPUSF8xAh2s+kqirHp21D2aAF/UJajLSFM= ) ; keytag 29779`
	`ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAZuph3gP92XFDgatcmy3yHBEev+1/rkc9Usoq2T85J9ESCGPradUeuGERYPS7Cdlwz8cBUtt pd4EZU7nA1wzDKMse71tjd/EAvCOg7RGH8LwArblXvJF4aHy5V69iV0NQziiOLb0waocGyx0iVvv g6g0vQRjMa8Y7FWU5ayKvO8Z ) ; keytag 12825`
	`ac.ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcdHtS17izIza5829PtypwpxW5qMOG46GzdcxFDL27+ww4jCg1wgTcbXG1IHe3CmdGVFGZcP JJt8S7ZwgcbDWkyKCBOPwFLIOcV8IcZA+qfiiAt8TRptVHN8bosfK8sZl59TLrdwms4phkHP7HKi n/1N5QhvoZhwphGFt1ypEYql ) ; keytag 36594`
	DNSKEY=29779/SEP is now in the chain-of-trust
	DS=29779/SHA-1 verifies DNSKEY=29779/SEP
	DS=29779/SHA-256 verifies DNSKEY=29779/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 19218 ac.ma. VFL8vg1Jaa9gOFmsuwzirL6JlV+A9tUxxFPpPy5lXAvIQLjM572SyVG0XB3E+eizwaIFeV9Vxs1r KleI7zACQt0AhhFjcB5798ciH7IR+Y/q4cB7wcoDXBFO/eCM8eEvynSJ03lxGBZaRemufopkYDNl cHBJuxuC0nu+aHU3cQ4= )`
	`ac.ma. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20260614092143 20260515084305 29779 ac.ma. b3XQdU37OzjXce6iAw+mOcXcsg1jNWTTXyGAny0VZBaqzoN8ETItJpjGTqAFbxWBrNqmBbZrZ1zl AhLY5s/3Ev0ws2pZoB+QstiHr5iDd3Krq8OmGlICbsze3excqFBzK0d6FFDNz0OLCcIETPJ1D9wp H0ngnQH2R7gHxzt6Khz/Fgq21yc0kCHNuiyyXL6lyOQynRHIOooqBtxmLeQ5BTiqaGoCSVi7C4dG r4AFUhmvZXu3fXVPf3LQy6z/6umdNiIDqNVuvsRxEXthHu4TL63ghffDLLjc9TYNx9VNttC9mhLL +zcPhTtJyjcGfGAUie93j/hI+na4B6lfOdQ6qg== )`
	RRSIG=19218 and DNSKEY=19218 verifies the DNSKEY RRset
	RRSIG=29779 and DNSKEY=29779/SEP verifies the DNSKEY RRset
	DNSKEY=19218 is now in the chain-of-trust
	DNSKEY=12825 is now in the chain-of-trust
	DNSKEY=36594 is now in the chain-of-trust
	Query to dns.inria.fr for ac.ma/A
	Received 509 bytes from 193.51.208.13
	;; Response received from [193.51.208.13] 509 octets ;; HEADER SECTION ;; id = 15571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.inria.fr is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to f.tld.ma for ac.ma/SOA
	Received 260 bytes from 41.214.240.4
	;; Response received from [41.214.240.4] 260 octets ;; HEADER SECTION ;; id = 13870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.tld.ma for ac.ma/SOA
	Received 260 bytes from 81.192.171.131
	;; Response received from [81.192.171.131] 260 octets ;; HEADER SECTION ;; id = 16577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.tld.ma for ac.ma/SOA
	Received 260 bytes from 81.192.171.116
	;; Response received from [81.192.171.116] 260 octets ;; HEADER SECTION ;; id = 61420 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.tld.ma for ac.ma/SOA
	Received 579 bytes from 105.73.80.236
	;; Response received from [105.73.80.236] 579 octets ;; HEADER SECTION ;; id = 7198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (9 records) ac.ma. 28800 IN NS ns-ma.nic.fr. ac.ma. 28800 IN NS dns.inria.fr. ac.ma. 28800 IN NS f.tld.ma. ac.ma. 28800 IN NS a.tld.ma. ac.ma. 28800 IN NS d.tld.ma. ac.ma. 28800 IN NS c.tld.ma. ac.ma. 28800 IN NS e.tld.ma. ac.ma. 28800 IN NS b.tld.ma. ac.ma. 28800 IN RRSIG ( NS 8 2 28800 20260614092937 20260515085421 19218 ac.ma. H47gOBByXEvkwAhb5NXraW8BTwAP5WznBz16rhH3FYX/kN2ajDYGNwSAfz1y2ApK7nUM6Anya5rY j4QsGopFTTl0yysNvT9QmM4009XjaeEFSCy+cs69d1LCyjagBS/LAppMyMCXysHNfnsEmCihso5U jISrgv+TzQxAiVhQQD4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.tld.ma for ac.ma/SOA
	Received 260 bytes from 81.192.171.139
	;; Response received from [81.192.171.139] 260 octets ;; HEADER SECTION ;; id = 29730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-ma.nic.fr for ac.ma/SOA
	Received 256 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 256 octets ;; HEADER SECTION ;; id = 65530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.tld.ma for ac.ma/SOA
	Received 260 bytes from 81.192.171.84
	;; Response received from [81.192.171.84] 260 octets ;; HEADER SECTION ;; id = 30359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN SOA ;; ANSWER SECTION (2 records) ac.ma. 28800 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 28800 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns.inria.fr for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to b.tld.ma for ac.ma/A
	b.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to b.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to d.tld.ma for ac.ma/A
	Received 509 bytes from 81.192.171.140
	;; Response received from [81.192.171.140] 509 octets ;; HEADER SECTION ;; id = 5803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to d.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to ns-ma.nic.fr for ac.ma/A
	Received 505 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 505 octets ;; HEADER SECTION ;; id = 4380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-ma.nic.fr is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to ns-ma.nic.fr for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to e.tld.ma for ac.ma/A
	Received 509 bytes from 105.73.80.236
	;; Response received from [105.73.80.236] 509 octets ;; HEADER SECTION ;; id = 28560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to e.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to a.tld.ma for ac.ma/A
	Received 509 bytes from 81.192.171.131
	;; Response received from [81.192.171.131] 509 octets ;; HEADER SECTION ;; id = 61610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to a.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to c.tld.ma for ac.ma/A
	Received 509 bytes from 81.192.171.139
	;; Response received from [81.192.171.139] 509 octets ;; HEADER SECTION ;; id = 38081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to c.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

ac.ma

	Query to f.tld.ma for ac.ma/A
	Received 509 bytes from 41.214.240.4
	;; Response received from [41.214.240.4] 509 octets ;; HEADER SECTION ;; id = 23646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.ma. 900 IN SOA ( ns3.registre.ma. ma.anrt.ma. 74697 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN NSEC3 ( 1 0 10 d5fd13a2 l8r6qtjgfshs0nn7ttlbek5qbn57imgd NS SOA RRSIG DNSKEY NSEC3PARAM ) L7T0UGF28F44JGLTA36BLF04PLURDKD5.ac.ma. 900 IN RRSIG ( NSEC3 8 3 900 20260614092354 20260515084312 19218 ac.ma. GtTBCzDHhhYSKxMrnrzTqDxExbAq9rIg0kQ1gIIwqKOLhRBe2pEY2PBxeqP8AZCDwecs8SbB1Fpy jcOYr+9A4oLqm8AhIZ6Lic6IeHpx0wvzwUzvKn3/U7xWIorBdJMYeq4lgBBvtC2eJ2vkOG7Ectes N0ORUqfRejgptyTd2E8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f.tld.ma is authoritative for ac.ma
	Found RRSIG signed by ac.ma zone
	Query to f.tld.ma for ac.ma/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.ma. 900 IN RRSIG ( SOA 8 2 28800 20260614204801 20260515194801 19218 ac.ma. WFeUIRSUwnVF8lxbnbFlBICLjU/aXGc9N81owVDWMcSIBSWnCDgfvM7nQbmSj4Ki0GxSuAzc9GvR N+Y5yEoQZX/ST+bcjacCVmp9MfE7PuESsdKhDGOYSivCXw03wx/zVc7ghbJ4E0wG2LiotcL8MhsV p2RWJvXg2Kr4+OUgBT0= )`
	RRSIG=19218 and DNSKEY=19218 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ac.ma at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: