DNSSEC Analyzer - admin.ch

Domain Name:

Time: 2020-08-13 06:02:56 UTC, NTP stratum 4

Analyzing DNSSEC problems for admin.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 38709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to e.root-servers.net for admin.ch/A
	Received 796 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (796 bytes) ;; HEADER SECTION ;; id = 28415 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN A 74.116.178.40 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN A 194.0.1.40 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN A 85.119.5.230 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for ch/DNSKEY
	Received 790 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (790 bytes) ;; HEADER SECTION ;; id = 4356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN A 74.116.178.40 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN A 194.0.1.40 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN A 85.119.5.230 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to f.root-servers.net for ch/DS
	Received 366 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (366 bytes) ;; HEADER SECTION ;; id = 39647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for ch in the . zone
	DS=55966/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=55966/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 )`
	Query to a.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.41
	;; Answer received from 130.59.31.41 (369 bytes) ;; HEADER SECTION ;; id = 9233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 QejQZ1AAfT/Fao3Jxq54xGTwRDn1Be7QWljy+kF3TmPHYl3onEqoD+cnUVr0/s6FrSUHzfGZOtdK zj5Q5E+elA== ) ; Key ID = 13190 ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966 ch. 86400 IN DNSKEY ( 256 3 13 BkG29KZIT4tzHJAMVM9/jBZOnnxmzvvL8Ri4RC3dBNruWJMu16W6pOIGPwEiAhXldhMx4nCslMzi WyJIhmAa6g== ) ; Key ID = 16948 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200927100909 20200812090909 55966 ch. jZEyJoTL1n240EyEUwTdpVeWU4QWMGsLKCC1ejTxyoPHkDYCpwj3xyvH6G+lLASmx18oiky2JaLR myXimI+GFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 QejQZ1AAfT/Fao3Jxq54xGTwRDn1Be7QWljy+kF3TmPHYl3onEqoD+cnUVr0/s6FrSUHzfGZOtdK zj5Q5E+elA== ) ; Key ID = 13190`
	`ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966`
	`ch. 86400 IN DNSKEY ( 256 3 13 BkG29KZIT4tzHJAMVM9/jBZOnnxmzvvL8Ri4RC3dBNruWJMu16W6pOIGPwEiAhXldhMx4nCslMzi WyJIhmAa6g== ) ; Key ID = 16948`
	DNSKEY=55966/SEP is now in the chain-of-trust
	DS=55966/SHA-256 verifies DNSKEY=55966/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200927100909 20200812090909 55966 ch. jZEyJoTL1n240EyEUwTdpVeWU4QWMGsLKCC1ejTxyoPHkDYCpwj3xyvH6G+lLASmx18oiky2JaLR myXimI+GFQ== )`
	RRSIG=55966 and DNSKEY=55966/SEP verifies the DNSKEY RRset
	DNSKEY=13190 is now in the chain-of-trust
	DNSKEY=16948 is now in the chain-of-trust
	Query to e.nic.ch for admin.ch/A
	Received 364 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (364 bytes) ;; HEADER SECTION ;; id = 62619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN DS ( 9064 8 2 ea31e8d8c680b2b4eb6ce0e51fd1291f6015af73098308527765effaeb095c9d ) admin.ch. 3600 IN DS ( 40657 8 2 74b7ba5166627a82b7244b604954705c7184fd257f8cedf730d4a9bd4ba88472 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20200907172446 20200808170153 16948 ch. vFjW4yJ8GdaU/XO3QzSxKarpm7WNgTc19/bp2nWtYrx9aIjPPy0AwMN4RUalTf5kwLwjsLBCaDCp b3VNHoVJ2Q== ) ;; ADDITIONAL SECTION (5 records) ins3.admin.ch. 3600 IN A 212.103.72.85 ins2.admin.ch. 3600 IN A 162.23.37.160 ins1.admin.ch. 3600 IN A 162.23.37.16 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.nic.ch for admin.ch/DNSKEY
	Received 364 bytes from 130.59.31.43
	;; Answer received from 130.59.31.43 (364 bytes) ;; HEADER SECTION ;; id = 59861 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN DS ( 9064 8 2 ea31e8d8c680b2b4eb6ce0e51fd1291f6015af73098308527765effaeb095c9d ) admin.ch. 3600 IN DS ( 40657 8 2 74b7ba5166627a82b7244b604954705c7184fd257f8cedf730d4a9bd4ba88472 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20200907172446 20200808170153 16948 ch. vFjW4yJ8GdaU/XO3QzSxKarpm7WNgTc19/bp2nWtYrx9aIjPPy0AwMN4RUalTf5kwLwjsLBCaDCp b3VNHoVJ2Q== ) ;; ADDITIONAL SECTION (5 records) ins3.admin.ch. 3600 IN A 212.103.72.85 ins2.admin.ch. 3600 IN A 162.23.37.160 ins1.admin.ch. 3600 IN A 162.23.37.16 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone admin.ch

admin.ch

	Checking DS between ch and admin.ch
	Query to f.nic.ch for admin.ch/DS
	Received 231 bytes from 194.146.106.10
	;; Answer received from 194.146.106.10 (231 bytes) ;; HEADER SECTION ;; id = 26475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DS ;; ANSWER SECTION (3 records) admin.ch. 3600 IN DS ( 9064 8 2 ea31e8d8c680b2b4eb6ce0e51fd1291f6015af73098308527765effaeb095c9d ) admin.ch. 3600 IN DS ( 40657 8 2 74b7ba5166627a82b7244b604954705c7184fd257f8cedf730d4a9bd4ba88472 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20200907172446 20200808170153 16948 ch. vFjW4yJ8GdaU/XO3QzSxKarpm7WNgTc19/bp2nWtYrx9aIjPPy0AwMN4RUalTf5kwLwjsLBCaDCp b3VNHoVJ2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for admin.ch in the ch zone
	DS=9064/SHA-256 has algorithm RSASHA256
	DS=40657/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20200907172446 20200808170153 16948 ch. vFjW4yJ8GdaU/XO3QzSxKarpm7WNgTc19/bp2nWtYrx9aIjPPy0AwMN4RUalTf5kwLwjsLBCaDCp b3VNHoVJ2Q== )`
	RRSIG=16948 and DNSKEY=16948 verifies the DS RRset
	DS=9064/SHA-256 is now in the chain-of-trust
	DS=40657/SHA-256 is now in the chain-of-trust
	`admin.ch. 3600 IN DS ( 9064 8 2 ea31e8d8c680b2b4eb6ce0e51fd1291f6015af73098308527765effaeb095c9d )`
	`admin.ch. 3600 IN DS ( 40657 8 2 74b7ba5166627a82b7244b604954705c7184fd257f8cedf730d4a9bd4ba88472 )`
	Query to ins2.admin.ch for admin.ch/DNSKEY
	Received 1073 bytes from 162.23.37.160
	;; Answer received from 162.23.37.160 (1073 bytes) ;; HEADER SECTION ;; id = 18709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (5 records) admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAcSAK60cODIwWvzl+pXM1ujqrv73sa07swVaS3/hLQoRGyN20txFzmJazOxZSLfi8kGW/NRi egwsqP1Gbc7pMnHmwPRG4SLsVwi0nNaJVTaJuSsqyVe56x906oklDKsmrw3nmVJLUvOF5vcWz5vv Pp826s1A8QK+4Wrc/aGAUuikJLPXi2o3I5YaSyu8M4BacPFlOai58J39UHtQc64O5TkawwDYwpgx zki5gnupoZCExd05B2y+24l1LkGZJnwIUBEaKaleudtwcVWBBcV1oTE81MgMieh8cIVUm/kRUbXQ NvX7ZeqnBOXB3UaFP3OMzxC/BsaTzE9CmqFIGx4Vlic= ) ; Key ID = 40657 admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAbZ6bvkAggidEOUHoG8yeh5xp2x1TtcW8tZbvifbsEX+SfFZv/oe8NeHyfAv2hTscJTuNucX Okg2rjiR+QiN4tU5igmjCX5uMFBl7JzvYS5fdqNHOQspbUFKE+nG/ftcIOuXaf4Sewz1bekzpVio H86WHC1oKesUEMg1CLgirTIl ) ; Key ID = 58806 admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAfbz/jBqlvy+A9+H5rikF1TUOl3+8z6+JgNYwEwKyWqNicMD/qfe2NQuu9QemBv2c5V3dVGK 5rTeiguR/6H9YHT+oPHXwlyeRg3HaPBjbHuCdE7RIXlHEViuIfyU84BTXOooQ1hx2QHCYyci0crF jnjdHGX42nJtYAMLsdubhcgH ) ; Key ID = 28893 admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816140538 20200812130629 28893 admin.ch. yY5TqhMl2KPpSw/Ceftpn3l34ci/8/wImMtCTgNGDfSUnCZTlhiUA59ThWutAca3Z2OE4k/VDZeg SJDnPPgJOdLoTCJe2ekATSvRzL9c6GH0zQVYXPKTHVlKMficp/Lb0g/G179T+aJhC8DCRPqgScXv alunNf6f+N/jyTUbIjc= ) admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816140538 20200812130629 40657 admin.ch. i5RT90Sbar82MZzWoFhv+F2ttALsuJ7BtNIrLXb23L1DVStTrt8cRYQBz++SNM2+NgqDQntMrgPQ YqUxp/5xBSVIVtIiQHPi8f8E0BIin3iDDiBaApM2QRmOhzh1S9mPrzEcfXxlJkrdnn/nOA3CphMp sFev1hkUtbQFcKf8X4xDzPNVpVqUjV+DK6VyfR9+c4jls7VzLpCZvwjpR0ud5vLco01Tp7MSoVM7 sTr/QkPLmw/ewCcuCBK6A2gCzGyXWfxmpLrmsGW+R54th2ZQEF4d4MfEPU5WcYkpXxcbZrdupnMa 6+nSkZC9Fyx+HKg3J/rqBGfsB59wDFOMNMpgxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for admin.ch
	`admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAcSAK60cODIwWvzl+pXM1ujqrv73sa07swVaS3/hLQoRGyN20txFzmJazOxZSLfi8kGW/NRi egwsqP1Gbc7pMnHmwPRG4SLsVwi0nNaJVTaJuSsqyVe56x906oklDKsmrw3nmVJLUvOF5vcWz5vv Pp826s1A8QK+4Wrc/aGAUuikJLPXi2o3I5YaSyu8M4BacPFlOai58J39UHtQc64O5TkawwDYwpgx zki5gnupoZCExd05B2y+24l1LkGZJnwIUBEaKaleudtwcVWBBcV1oTE81MgMieh8cIVUm/kRUbXQ NvX7ZeqnBOXB3UaFP3OMzxC/BsaTzE9CmqFIGx4Vlic= ) ; Key ID = 40657`
	`admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAbZ6bvkAggidEOUHoG8yeh5xp2x1TtcW8tZbvifbsEX+SfFZv/oe8NeHyfAv2hTscJTuNucX Okg2rjiR+QiN4tU5igmjCX5uMFBl7JzvYS5fdqNHOQspbUFKE+nG/ftcIOuXaf4Sewz1bekzpVio H86WHC1oKesUEMg1CLgirTIl ) ; Key ID = 58806`
	`admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAfbz/jBqlvy+A9+H5rikF1TUOl3+8z6+JgNYwEwKyWqNicMD/qfe2NQuu9QemBv2c5V3dVGK 5rTeiguR/6H9YHT+oPHXwlyeRg3HaPBjbHuCdE7RIXlHEViuIfyU84BTXOooQ1hx2QHCYyci0crF jnjdHGX42nJtYAMLsdubhcgH ) ; Key ID = 28893`
	DNSKEY=40657/SEP is now in the chain-of-trust
	DS=40657/SHA-256 verifies DNSKEY=40657/SEP
	DS=9064/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816140538 20200812130629 28893 admin.ch. yY5TqhMl2KPpSw/Ceftpn3l34ci/8/wImMtCTgNGDfSUnCZTlhiUA59ThWutAca3Z2OE4k/VDZeg SJDnPPgJOdLoTCJe2ekATSvRzL9c6GH0zQVYXPKTHVlKMficp/Lb0g/G179T+aJhC8DCRPqgScXv alunNf6f+N/jyTUbIjc= )`
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816140538 20200812130629 40657 admin.ch. i5RT90Sbar82MZzWoFhv+F2ttALsuJ7BtNIrLXb23L1DVStTrt8cRYQBz++SNM2+NgqDQntMrgPQ YqUxp/5xBSVIVtIiQHPi8f8E0BIin3iDDiBaApM2QRmOhzh1S9mPrzEcfXxlJkrdnn/nOA3CphMp sFev1hkUtbQFcKf8X4xDzPNVpVqUjV+DK6VyfR9+c4jls7VzLpCZvwjpR0ud5vLco01Tp7MSoVM7 sTr/QkPLmw/ewCcuCBK6A2gCzGyXWfxmpLrmsGW+R54th2ZQEF4d4MfEPU5WcYkpXxcbZrdupnMa 6+nSkZC9Fyx+HKg3J/rqBGfsB59wDFOMNMpgxQ== )`
	RRSIG=28893 and DNSKEY=28893 verifies the DNSKEY RRset
	RRSIG=40657 and DNSKEY=40657/SEP verifies the DNSKEY RRset
	DNSKEY=58806 is now in the chain-of-trust
	DNSKEY=28893 is now in the chain-of-trust
	Query to ins1.admin.ch for admin.ch/A
	Received 1194 bytes from 162.23.37.16
	;; Answer received from 162.23.37.16 (1194 bytes) ;; HEADER SECTION ;; id = 21030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN A ;; ANSWER SECTION (2 records) admin.ch. 3600 IN A 162.23.130.190 admin.ch. 3600 IN RRSIG ( A 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 7qhPLWXsvjHMvQ8rMCFM1/uAdvSOoQhPtdN8D+eOD3B6yMgTnXdZEcmVEo52J6as2yUDnx40JoKo pcfgMRda8zkISt9xKH9KPmefJMzqgX5H3wXVuZ5Fxmbw/smRXwilTQnDrqCK45uXcj3AFrhmuUVP 1KSYlWPc3BZLTdSUVRY= ) ;; AUTHORITY SECTION (4 records) admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN RRSIG ( NS 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 6M/xOmKcaNTW+/j08MTpgCZtyNuXx2r3ZIAZTCFu8fYN0CBLYo5yG0pfFg8gltqhwIgpT32TGJZY dzuo0rFaL1ilq3rlbLpJ8wp9vuVni067Sa3gy1ytV0qRLkatbbHs5m8g9KZWG8M6eiM1TqMmYlno 31PhtyY+qHY3Gyh4/VQ= ) ;; ADDITIONAL SECTION (9 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ins1.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815084917 20200811081147 28893 admin.ch. M73fuGYbnQKa+UtGfS0zzZCitC4JOD9i3Rag6qAYqmb1gmcM0rY0CCP8fabzQFS8QEpnN68bRHlB 5EHodyzRfR8KJOyMD59zNQW6DmwiDH7zQoEBrwJ8DPxAj0n1r1ZTznk08ScA2SbpOEuZjKtE3Qxv KAsp5D4xBsVLijYRsm8= ) ins2.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815032508 20200811023128 28893 admin.ch. g+uMLayAaalpYIZtfXo0wDwCfCV3NHUR492zZsa8aSm93M19jJhoEtne334Vk19a2k//OVly0Mw4 aM9ajTiJpgjss756ZQGUOTmEgeFxa8L2uB600YbKSDLotLYYvCqwEkDzcFEUm3zU0q4Qc3FzKpdO e5xXItN9RL1RdKPL+5E= ) ins3.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815022128 20200811015903 28893 admin.ch. joIi07KtaTi1Zb2P4jFfkCvoMfZEbVj3K6uFaeea7nodk/gApJKMPyfO6aK88I8plvEBOfa9xMQZ ofuOD3ulz7nofHOVnBOOJmCm4Nr6BlvDycKIf9F/MzL+aG447x2tSzmueSiNgn4QYYX8ixMFArvJ n3D9V6/Gjk+8UBqta+4= ) ins3.admin.ch. 3600 IN RRSIG ( AAAA 8 3 3600 20200815022128 20200811015903 28893 admin.ch. 6s/IuE9fFWxRwHkq0/DIGZgQek1g3Ud26j/LUtetm8pPjsj1sQH/cdxjWr2KD4GXyf74TAryZ0sv FBjw77gb5Mk2wlgmktkAO2J9ZAteiFGNxh48GH+V1Rhzw8wdHxDUMB9QMsSFax5tTOliC9tpNbj/ XiHhiXp98AHkWfzrXXM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	admin.ch is authoritative for admin.ch
	Found RRSIG signed by admin.ch zone
	Query to ins1.admin.ch for admin.ch/SOA
	Received 1224 bytes from 162.23.37.16
	;; Answer received from 162.23.37.16 (1224 bytes) ;; HEADER SECTION ;; id = 60261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN SOA ;; ANSWER SECTION (2 records) admin.ch. 3600 IN SOA ( ins1.admin.ch. dnsmaster.admin.ch. 4175632 ;serial 10800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) admin.ch. 3600 IN RRSIG ( SOA 8 2 3600 20200817060001 20200813050001 28893 admin.ch. pggEG8Zqxp+VWa/t3IoKJxIL7nzL3h6OJDrMxMoxeIDbufUeMzVd3jOlxCtH6cCst6bfUaV9VR18 G6yhO1ux53IT4kg9dd3G0JWF0sQ8T8reNAjn7xbVCmM/z0jlGG7323GVvwzCtJJ5pA0neNrDnE+X 567g5K6sQjoxgpN9z6o= ) ;; AUTHORITY SECTION (4 records) admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN RRSIG ( NS 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 6M/xOmKcaNTW+/j08MTpgCZtyNuXx2r3ZIAZTCFu8fYN0CBLYo5yG0pfFg8gltqhwIgpT32TGJZY dzuo0rFaL1ilq3rlbLpJ8wp9vuVni067Sa3gy1ytV0qRLkatbbHs5m8g9KZWG8M6eiM1TqMmYlno 31PhtyY+qHY3Gyh4/VQ= ) ;; ADDITIONAL SECTION (9 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ins1.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815084917 20200811081147 28893 admin.ch. M73fuGYbnQKa+UtGfS0zzZCitC4JOD9i3Rag6qAYqmb1gmcM0rY0CCP8fabzQFS8QEpnN68bRHlB 5EHodyzRfR8KJOyMD59zNQW6DmwiDH7zQoEBrwJ8DPxAj0n1r1ZTznk08ScA2SbpOEuZjKtE3Qxv KAsp5D4xBsVLijYRsm8= ) ins2.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815032508 20200811023128 28893 admin.ch. g+uMLayAaalpYIZtfXo0wDwCfCV3NHUR492zZsa8aSm93M19jJhoEtne334Vk19a2k//OVly0Mw4 aM9ajTiJpgjss756ZQGUOTmEgeFxa8L2uB600YbKSDLotLYYvCqwEkDzcFEUm3zU0q4Qc3FzKpdO e5xXItN9RL1RdKPL+5E= ) ins3.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815022128 20200811015903 28893 admin.ch. joIi07KtaTi1Zb2P4jFfkCvoMfZEbVj3K6uFaeea7nodk/gApJKMPyfO6aK88I8plvEBOfa9xMQZ ofuOD3ulz7nofHOVnBOOJmCm4Nr6BlvDycKIf9F/MzL+aG447x2tSzmueSiNgn4QYYX8ixMFArvJ n3D9V6/Gjk+8UBqta+4= ) ins3.admin.ch. 3600 IN RRSIG ( AAAA 8 3 3600 20200815022128 20200811015903 28893 admin.ch. 6s/IuE9fFWxRwHkq0/DIGZgQek1g3Ud26j/LUtetm8pPjsj1sQH/cdxjWr2KD4GXyf74TAryZ0sv FBjw77gb5Mk2wlgmktkAO2J9ZAteiFGNxh48GH+V1Rhzw8wdHxDUMB9QMsSFax5tTOliC9tpNbj/ XiHhiXp98AHkWfzrXXM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ins3.admin.ch for admin.ch/SOA
	Received 1224 bytes from 212.103.72.85
	;; Answer received from 212.103.72.85 (1224 bytes) ;; HEADER SECTION ;; id = 41428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN SOA ;; ANSWER SECTION (2 records) admin.ch. 3600 IN SOA ( ins1.admin.ch. dnsmaster.admin.ch. 4175632 ;serial 10800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) admin.ch. 3600 IN RRSIG ( SOA 8 2 3600 20200817060001 20200813050001 28893 admin.ch. pggEG8Zqxp+VWa/t3IoKJxIL7nzL3h6OJDrMxMoxeIDbufUeMzVd3jOlxCtH6cCst6bfUaV9VR18 G6yhO1ux53IT4kg9dd3G0JWF0sQ8T8reNAjn7xbVCmM/z0jlGG7323GVvwzCtJJ5pA0neNrDnE+X 567g5K6sQjoxgpN9z6o= ) ;; AUTHORITY SECTION (4 records) admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN RRSIG ( NS 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 6M/xOmKcaNTW+/j08MTpgCZtyNuXx2r3ZIAZTCFu8fYN0CBLYo5yG0pfFg8gltqhwIgpT32TGJZY dzuo0rFaL1ilq3rlbLpJ8wp9vuVni067Sa3gy1ytV0qRLkatbbHs5m8g9KZWG8M6eiM1TqMmYlno 31PhtyY+qHY3Gyh4/VQ= ) ;; ADDITIONAL SECTION (9 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ins1.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815084917 20200811081147 28893 admin.ch. M73fuGYbnQKa+UtGfS0zzZCitC4JOD9i3Rag6qAYqmb1gmcM0rY0CCP8fabzQFS8QEpnN68bRHlB 5EHodyzRfR8KJOyMD59zNQW6DmwiDH7zQoEBrwJ8DPxAj0n1r1ZTznk08ScA2SbpOEuZjKtE3Qxv KAsp5D4xBsVLijYRsm8= ) ins2.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815032508 20200811023128 28893 admin.ch. g+uMLayAaalpYIZtfXo0wDwCfCV3NHUR492zZsa8aSm93M19jJhoEtne334Vk19a2k//OVly0Mw4 aM9ajTiJpgjss756ZQGUOTmEgeFxa8L2uB600YbKSDLotLYYvCqwEkDzcFEUm3zU0q4Qc3FzKpdO e5xXItN9RL1RdKPL+5E= ) ins3.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815022128 20200811015903 28893 admin.ch. joIi07KtaTi1Zb2P4jFfkCvoMfZEbVj3K6uFaeea7nodk/gApJKMPyfO6aK88I8plvEBOfa9xMQZ ofuOD3ulz7nofHOVnBOOJmCm4Nr6BlvDycKIf9F/MzL+aG447x2tSzmueSiNgn4QYYX8ixMFArvJ n3D9V6/Gjk+8UBqta+4= ) ins3.admin.ch. 3600 IN RRSIG ( AAAA 8 3 3600 20200815022128 20200811015903 28893 admin.ch. 6s/IuE9fFWxRwHkq0/DIGZgQek1g3Ud26j/LUtetm8pPjsj1sQH/cdxjWr2KD4GXyf74TAryZ0sv FBjw77gb5Mk2wlgmktkAO2J9ZAteiFGNxh48GH+V1Rhzw8wdHxDUMB9QMsSFax5tTOliC9tpNbj/ XiHhiXp98AHkWfzrXXM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ins2.admin.ch for admin.ch/SOA
	Received 1224 bytes from 162.23.37.160
	;; Answer received from 162.23.37.160 (1224 bytes) ;; HEADER SECTION ;; id = 45483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN SOA ;; ANSWER SECTION (2 records) admin.ch. 3600 IN SOA ( ins1.admin.ch. dnsmaster.admin.ch. 4175632 ;serial 10800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) admin.ch. 3600 IN RRSIG ( SOA 8 2 3600 20200817060001 20200813050001 28893 admin.ch. pggEG8Zqxp+VWa/t3IoKJxIL7nzL3h6OJDrMxMoxeIDbufUeMzVd3jOlxCtH6cCst6bfUaV9VR18 G6yhO1ux53IT4kg9dd3G0JWF0sQ8T8reNAjn7xbVCmM/z0jlGG7323GVvwzCtJJ5pA0neNrDnE+X 567g5K6sQjoxgpN9z6o= ) ;; AUTHORITY SECTION (4 records) admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN RRSIG ( NS 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 6M/xOmKcaNTW+/j08MTpgCZtyNuXx2r3ZIAZTCFu8fYN0CBLYo5yG0pfFg8gltqhwIgpT32TGJZY dzuo0rFaL1ilq3rlbLpJ8wp9vuVni067Sa3gy1ytV0qRLkatbbHs5m8g9KZWG8M6eiM1TqMmYlno 31PhtyY+qHY3Gyh4/VQ= ) ;; ADDITIONAL SECTION (9 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ins1.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815084917 20200811081147 28893 admin.ch. M73fuGYbnQKa+UtGfS0zzZCitC4JOD9i3Rag6qAYqmb1gmcM0rY0CCP8fabzQFS8QEpnN68bRHlB 5EHodyzRfR8KJOyMD59zNQW6DmwiDH7zQoEBrwJ8DPxAj0n1r1ZTznk08ScA2SbpOEuZjKtE3Qxv KAsp5D4xBsVLijYRsm8= ) ins2.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815032508 20200811023128 28893 admin.ch. g+uMLayAaalpYIZtfXo0wDwCfCV3NHUR492zZsa8aSm93M19jJhoEtne334Vk19a2k//OVly0Mw4 aM9ajTiJpgjss756ZQGUOTmEgeFxa8L2uB600YbKSDLotLYYvCqwEkDzcFEUm3zU0q4Qc3FzKpdO e5xXItN9RL1RdKPL+5E= ) ins3.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815022128 20200811015903 28893 admin.ch. joIi07KtaTi1Zb2P4jFfkCvoMfZEbVj3K6uFaeea7nodk/gApJKMPyfO6aK88I8plvEBOfa9xMQZ ofuOD3ulz7nofHOVnBOOJmCm4Nr6BlvDycKIf9F/MzL+aG447x2tSzmueSiNgn4QYYX8ixMFArvJ n3D9V6/Gjk+8UBqta+4= ) ins3.admin.ch. 3600 IN RRSIG ( AAAA 8 3 3600 20200815022128 20200811015903 28893 admin.ch. 6s/IuE9fFWxRwHkq0/DIGZgQek1g3Ud26j/LUtetm8pPjsj1sQH/cdxjWr2KD4GXyf74TAryZ0sv FBjw77gb5Mk2wlgmktkAO2J9ZAteiFGNxh48GH+V1Rhzw8wdHxDUMB9QMsSFax5tTOliC9tpNbj/ XiHhiXp98AHkWfzrXXM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ins1.admin.ch for admin.ch/A
	Received 1194 bytes from 162.23.37.16
	;; Answer received from 162.23.37.16 (1194 bytes) ;; HEADER SECTION ;; id = 63282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN A ;; ANSWER SECTION (2 records) admin.ch. 3600 IN A 162.23.130.190 admin.ch. 3600 IN RRSIG ( A 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 7qhPLWXsvjHMvQ8rMCFM1/uAdvSOoQhPtdN8D+eOD3B6yMgTnXdZEcmVEo52J6as2yUDnx40JoKo pcfgMRda8zkISt9xKH9KPmefJMzqgX5H3wXVuZ5Fxmbw/smRXwilTQnDrqCK45uXcj3AFrhmuUVP 1KSYlWPc3BZLTdSUVRY= ) ;; AUTHORITY SECTION (4 records) admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN RRSIG ( NS 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 6M/xOmKcaNTW+/j08MTpgCZtyNuXx2r3ZIAZTCFu8fYN0CBLYo5yG0pfFg8gltqhwIgpT32TGJZY dzuo0rFaL1ilq3rlbLpJ8wp9vuVni067Sa3gy1ytV0qRLkatbbHs5m8g9KZWG8M6eiM1TqMmYlno 31PhtyY+qHY3Gyh4/VQ= ) ;; ADDITIONAL SECTION (9 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ins1.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815084917 20200811081147 28893 admin.ch. M73fuGYbnQKa+UtGfS0zzZCitC4JOD9i3Rag6qAYqmb1gmcM0rY0CCP8fabzQFS8QEpnN68bRHlB 5EHodyzRfR8KJOyMD59zNQW6DmwiDH7zQoEBrwJ8DPxAj0n1r1ZTznk08ScA2SbpOEuZjKtE3Qxv KAsp5D4xBsVLijYRsm8= ) ins2.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815032508 20200811023128 28893 admin.ch. g+uMLayAaalpYIZtfXo0wDwCfCV3NHUR492zZsa8aSm93M19jJhoEtne334Vk19a2k//OVly0Mw4 aM9ajTiJpgjss756ZQGUOTmEgeFxa8L2uB600YbKSDLotLYYvCqwEkDzcFEUm3zU0q4Qc3FzKpdO e5xXItN9RL1RdKPL+5E= ) ins3.admin.ch. 3600 IN RRSIG ( A 8 3 3600 20200815022128 20200811015903 28893 admin.ch. joIi07KtaTi1Zb2P4jFfkCvoMfZEbVj3K6uFaeea7nodk/gApJKMPyfO6aK88I8plvEBOfa9xMQZ ofuOD3ulz7nofHOVnBOOJmCm4Nr6BlvDycKIf9F/MzL+aG447x2tSzmueSiNgn4QYYX8ixMFArvJ n3D9V6/Gjk+8UBqta+4= ) ins3.admin.ch. 3600 IN RRSIG ( AAAA 8 3 3600 20200815022128 20200811015903 28893 admin.ch. 6s/IuE9fFWxRwHkq0/DIGZgQek1g3Ud26j/LUtetm8pPjsj1sQH/cdxjWr2KD4GXyf74TAryZ0sv FBjw77gb5Mk2wlgmktkAO2J9ZAteiFGNxh48GH+V1Rhzw8wdHxDUMB9QMsSFax5tTOliC9tpNbj/ XiHhiXp98AHkWfzrXXM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	admin.ch A RR has value 162.23.130.190
	Found 1 RRSIGs over A RRset
	`admin.ch. 3600 IN RRSIG ( A 8 2 3600 20200815063613 20200811054508 28893 admin.ch. 7qhPLWXsvjHMvQ8rMCFM1/uAdvSOoQhPtdN8D+eOD3B6yMgTnXdZEcmVEo52J6as2yUDnx40JoKo pcfgMRda8zkISt9xKH9KPmefJMzqgX5H3wXVuZ5Fxmbw/smRXwilTQnDrqCK45uXcj3AFrhmuUVP 1KSYlWPc3BZLTdSUVRY= )`
	RRSIG=28893 and DNSKEY=28893 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test admin.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: