DNSSEC Debugger - afrinic.net

Domain Name:

Time: 2025-09-18 06:59:23 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 6765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for afrinic.net/A
	Received 1171 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1171 octets ;; HEADER SECTION ;; id = 53139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251001050000 20250918040000 46441 . FPA0nPRFvp3XJbHNULgeFMgXhkhwWl1RD9kkuNXcun7KmAvKsNovhTHW/SUjdpRT21sfNp5/ncRg X33L+3JjfF4JVfZNQu5vZDq5H0viRRehDPdyMr5Kj6u+2LVhS/cKnWa/t38yxDWlOCVdqIERSNd0 tkTChiQlI3pKzb/0uumbSOqavSVlOxe+pGqk8eMFNrrhvLgXWGFtlsRV/GHsgeGqSnSZFPLW/ccW rC/fTSnCS2QBYw3eWVSUsKdtG5oKrYp6f2+Q7jtiyoAjP9zEGy2KoeUgl90jAQBVJ00M4SVWYjyV O7vrSEXjkjtpBGSsm63K33Wnb6KSIU/iITy5Nw== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for net/DNSKEY
	Received 1160 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1160 octets ;; HEADER SECTION ;; id = 48977 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251001050000 20250918040000 46441 . FPA0nPRFvp3XJbHNULgeFMgXhkhwWl1RD9kkuNXcun7KmAvKsNovhTHW/SUjdpRT21sfNp5/ncRg X33L+3JjfF4JVfZNQu5vZDq5H0viRRehDPdyMr5Kj6u+2LVhS/cKnWa/t38yxDWlOCVdqIERSNd0 tkTChiQlI3pKzb/0uumbSOqavSVlOxe+pGqk8eMFNrrhvLgXWGFtlsRV/GHsgeGqSnSZFPLW/ccW rC/fTSnCS2QBYw3eWVSUsKdtG5oKrYp6f2+Q7jtiyoAjP9zEGy2KoeUgl90jAQBVJ00M4SVWYjyV O7vrSEXjkjtpBGSsm63K33Wnb6KSIU/iITy5Nw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to i.root-servers.net for net/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 24402 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251001050000 20250918040000 46441 . FPA0nPRFvp3XJbHNULgeFMgXhkhwWl1RD9kkuNXcun7KmAvKsNovhTHW/SUjdpRT21sfNp5/ncRg X33L+3JjfF4JVfZNQu5vZDq5H0viRRehDPdyMr5Kj6u+2LVhS/cKnWa/t38yxDWlOCVdqIERSNd0 tkTChiQlI3pKzb/0uumbSOqavSVlOxe+pGqk8eMFNrrhvLgXWGFtlsRV/GHsgeGqSnSZFPLW/ccW rC/fTSnCS2QBYw3eWVSUsKdtG5oKrYp6f2+Q7jtiyoAjP9zEGy2KoeUgl90jAQBVJ00M4SVWYjyV O7vrSEXjkjtpBGSsm63K33Wnb6KSIU/iITy5Nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20251001050000 20250918040000 46441 . FPA0nPRFvp3XJbHNULgeFMgXhkhwWl1RD9kkuNXcun7KmAvKsNovhTHW/SUjdpRT21sfNp5/ncRg X33L+3JjfF4JVfZNQu5vZDq5H0viRRehDPdyMr5Kj6u+2LVhS/cKnWa/t38yxDWlOCVdqIERSNd0 tkTChiQlI3pKzb/0uumbSOqavSVlOxe+pGqk8eMFNrrhvLgXWGFtlsRV/GHsgeGqSnSZFPLW/ccW rC/fTSnCS2QBYw3eWVSUsKdtG5oKrYp6f2+Q7jtiyoAjP9zEGy2KoeUgl90jAQBVJ00M4SVWYjyV O7vrSEXjkjtpBGSsm63K33Wnb6KSIU/iITy5Nw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to b.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 291 octets ;; HEADER SECTION ;; id = 43508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250924141035 20250909140535 37331 net. ZsvQngDbHjU/4ysaofreMhZ/h/9Avi0TC0QZwO/naxdPNq7cuo5xH4FQbd6MFaDcF9lNMs2O9Fqe EIFLRUsSvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250924141035 20250909140535 37331 net. ZsvQngDbHjU/4ysaofreMhZ/h/9Avi0TC0QZwO/naxdPNq7cuo5xH4FQbd6MFaDcF9lNMs2O9Fqe EIFLRUsSvg== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=33296 is now in the chain-of-trust
	Query to g.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 589 octets ;; HEADER SECTION ;; id = 30508 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250925030159 20250918015159 33296 net. SC0zBMdpVs6sikVr0XdNT6mOZ9o7oHDoeAIbk3v1ZNsLc30svQzJ130sWKnSejJWxLBwClvxcrEb quER6lYnww== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to d.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 589 octets ;; HEADER SECTION ;; id = 60218 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250925030159 20250918015159 33296 net. SC0zBMdpVs6sikVr0XdNT6mOZ9o7oHDoeAIbk3v1ZNsLc30svQzJ130sWKnSejJWxLBwClvxcrEb quER6lYnww== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to a.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 1079 octets ;; HEADER SECTION ;; id = 44768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250925030159 20250918015159 33296 net. SC0zBMdpVs6sikVr0XdNT6mOZ9o7oHDoeAIbk3v1ZNsLc30svQzJ130sWKnSejJWxLBwClvxcrEb quER6lYnww== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20250922030651 20250915015651 33296 net. RJ+JcM1afjQHOe1iu04PO8y5WbpuLMfRAFkmjSPU58Om0m/+KWBFofh7UYksBVI5oR2axLfDjuUy 2nFJbVPeAg== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=26750/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250925030159 20250918015159 33296 net. SC0zBMdpVs6sikVr0XdNT6mOZ9o7oHDoeAIbk3v1ZNsLc30svQzJ130sWKnSejJWxLBwClvxcrEb quER6lYnww== )`
	RRSIG=33296 and DNSKEY=33296 verifies the DS RRset
	DS=26750/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec )`
	Query to rirns.arin.net for afrinic.net/DNSKEY
	Received 911 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 911 octets ;; HEADER SECTION ;; id = 63092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAblSy2yQFpaHIGUbKYyrzW8unz83CKyZ5vktIKq/ZgY2JBORZdNNRJ897CerAPxPFdPZINQL 4E/sJPP664zbxh0WGYuJ5l6w3732KjCZgSUQX5TWSbmWSilJ9no+g4/FiYfftI5JD02i5RButtT1 ZHrmQiXfi3Kg8EVysvWp+uUV ) ; keytag 50475 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbWx3AzHsvVVUuIb46fDGWiBr0P4JJpHMxF4bYMgjvBLAyxg6peFXFpB4ye/hlS1+oDnx+/h /QC2AB/3ShTL8R3VOgRS78fjx3cGQP4G7GPKdaSmXnRxnRHrG6AdaChsk5Xg0QI1mLl3f3HftkTM v+eVe+xrpR6SH8j6kOeVo2cL ) ; keytag 38061 afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20250925065942 20250825160944 26750 afrinic.net. M4J1ac2+mYY+wLJEp/pCWTlSJMBuoC3ZBniN+1NFMkU2tnLDE4bnBdkmpW9tkk8puyAzqxWmLJB3 wA+kdiI2Q9qaZtAFxRdBjNRdOQoaPg3fyDN1q4InKgevOETi/wODemZsKet6e9+BoE5jjsMmNKMI jnAieZPhvfTXFiL+GDEgUsqrQ4wJi5i1qD9DNnlADsGzFtWDlTsvpM/Rv+es2jUpj1lylNYPNJ2Y YUVK7xVnHQd01oxIAzGmH1CoerBuzSDgx8slH5XcOnizexQz5MaXfV72ISCL0xnh6N4nVYYDEaeG RxSj7X18Bi//EwSgDiZOB7ilYCIXXQmdbwZwTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAblSy2yQFpaHIGUbKYyrzW8unz83CKyZ5vktIKq/ZgY2JBORZdNNRJ897CerAPxPFdPZINQL 4E/sJPP664zbxh0WGYuJ5l6w3732KjCZgSUQX5TWSbmWSilJ9no+g4/FiYfftI5JD02i5RButtT1 ZHrmQiXfi3Kg8EVysvWp+uUV ) ; keytag 50475`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbWx3AzHsvVVUuIb46fDGWiBr0P4JJpHMxF4bYMgjvBLAyxg6peFXFpB4ye/hlS1+oDnx+/h /QC2AB/3ShTL8R3VOgRS78fjx3cGQP4G7GPKdaSmXnRxnRHrG6AdaChsk5Xg0QI1mLl3f3HftkTM v+eVe+xrpR6SH8j6kOeVo2cL ) ; keytag 38061`
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750`
	DNSKEY=26750/SEP is now in the chain-of-trust
	DS=26750/SHA-256 verifies DNSKEY=26750/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20250925065942 20250825160944 26750 afrinic.net. M4J1ac2+mYY+wLJEp/pCWTlSJMBuoC3ZBniN+1NFMkU2tnLDE4bnBdkmpW9tkk8puyAzqxWmLJB3 wA+kdiI2Q9qaZtAFxRdBjNRdOQoaPg3fyDN1q4InKgevOETi/wODemZsKet6e9+BoE5jjsMmNKMI jnAieZPhvfTXFiL+GDEgUsqrQ4wJi5i1qD9DNnlADsGzFtWDlTsvpM/Rv+es2jUpj1lylNYPNJ2Y YUVK7xVnHQd01oxIAzGmH1CoerBuzSDgx8slH5XcOnizexQz5MaXfV72ISCL0xnh6N4nVYYDEaeG RxSj7X18Bi//EwSgDiZOB7ilYCIXXQmdbwZwTg== )`
	RRSIG=26750 and DNSKEY=26750/SEP verifies the DNSKEY RRset
	DNSKEY=50475 is now in the chain-of-trust
	DNSKEY=38061 is now in the chain-of-trust
	Query to ns1.afrinic.net for afrinic.net/A
	Received 1196 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1196 octets ;; HEADER SECTION ;; id = 33302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250925150127 20250826210005 38061 afrinic.net. OCHqmIP9y4hpKl35tdurfLMyez6dC5GsPgYXsNH8mfLjBxkWpZwUvbtpt9hMTmw8vj6ySRPPtBAD 6iVPtHHknRMEmkDFqS0oWY85rn1IpUWm+qB+VOBwFOfQ9NhUIhNUztWpGklUYJPHxLdaGCENXr4y a3NbnOUrnnUkorvgGQw= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/SOA
	Received 1127 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1127 octets ;; HEADER SECTION ;; id = 40391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025091806 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251017081542 20250918050006 38061 afrinic.net. CWYZqcm9hKar5qWyysAvHiw2X656hsfkZoEkCX5FYhlaLjkwvm4kPp1u+YGiubhVySexl7qneaJ0 WA8WloFrfPKEi/TVkOcxvqoHZowQG4Lo1FHQLAXbk6PfRtiPuKJJzmNHtSke4hPNEfrkBdKMwvsk GuSSlXwAulXHyQdBypU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251001082716 20250831100007 38061 afrinic.net. ZWfvbD6uehrmNGVVrKjIbbq4+LVUEhaH20uZynas/DhetV2FtaG05KDPwwYqqAn6pQaLgc2dkycA 59ropR+zEEt0jC/TtyHV8Zr7ecVzgtRsM34iV8jJIfONWUxz+ir3I5gwzzGBlqRHE3JsekrdEyZC IsXmkNjODugkiIqbeJ0= ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1049 octets ;; HEADER SECTION ;; id = 23326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025091806 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251017081542 20250918050006 38061 afrinic.net. CWYZqcm9hKar5qWyysAvHiw2X656hsfkZoEkCX5FYhlaLjkwvm4kPp1u+YGiubhVySexl7qneaJ0 WA8WloFrfPKEi/TVkOcxvqoHZowQG4Lo1FHQLAXbk6PfRtiPuKJJzmNHtSke4hPNEfrkBdKMwvsk GuSSlXwAulXHyQdBypU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250925150127 20250826210005 38061 afrinic.net. OCHqmIP9y4hpKl35tdurfLMyez6dC5GsPgYXsNH8mfLjBxkWpZwUvbtpt9hMTmw8vj6ySRPPtBAD 6iVPtHHknRMEmkDFqS0oWY85rn1IpUWm+qB+VOBwFOfQ9NhUIhNUztWpGklUYJPHxLdaGCENXr4y a3NbnOUrnnUkorvgGQw= ) ;; { "EDNS-VERSION": 0 }
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 42214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025091806 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251017081542 20250918050006 38061 afrinic.net. CWYZqcm9hKar5qWyysAvHiw2X656hsfkZoEkCX5FYhlaLjkwvm4kPp1u+YGiubhVySexl7qneaJ0 WA8WloFrfPKEi/TVkOcxvqoHZowQG4Lo1FHQLAXbk6PfRtiPuKJJzmNHtSke4hPNEfrkBdKMwvsk GuSSlXwAulXHyQdBypU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 5099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025091806 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251017081542 20250918050006 38061 afrinic.net. CWYZqcm9hKar5qWyysAvHiw2X656hsfkZoEkCX5FYhlaLjkwvm4kPp1u+YGiubhVySexl7qneaJ0 WA8WloFrfPKEi/TVkOcxvqoHZowQG4Lo1FHQLAXbk6PfRtiPuKJJzmNHtSke4hPNEfrkBdKMwvsk GuSSlXwAulXHyQdBypU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 43967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025091806 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251017081542 20250918050006 38061 afrinic.net. CWYZqcm9hKar5qWyysAvHiw2X656hsfkZoEkCX5FYhlaLjkwvm4kPp1u+YGiubhVySexl7qneaJ0 WA8WloFrfPKEi/TVkOcxvqoHZowQG4Lo1FHQLAXbk6PfRtiPuKJJzmNHtSke4hPNEfrkBdKMwvsk GuSSlXwAulXHyQdBypU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.afrinic.net for afrinic.net/A
	Received 1196 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1196 octets ;; HEADER SECTION ;; id = 55079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250925150127 20250826210005 38061 afrinic.net. OCHqmIP9y4hpKl35tdurfLMyez6dC5GsPgYXsNH8mfLjBxkWpZwUvbtpt9hMTmw8vj6ySRPPtBAD 6iVPtHHknRMEmkDFqS0oWY85rn1IpUWm+qB+VOBwFOfQ9NhUIhNUztWpGklUYJPHxLdaGCENXr4y a3NbnOUrnnUkorvgGQw= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 34721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 29046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 5112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 31365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

afrinic.net

	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 46264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251001082716 20250831100007 38061 afrinic.net. ZWfvbD6uehrmNGVVrKjIbbq4+LVUEhaH20uZynas/DhetV2FtaG05KDPwwYqqAn6pQaLgc2dkycA 59ropR+zEEt0jC/TtyHV8Zr7ecVzgtRsM34iV8jJIfONWUxz+ir3I5gwzzGBlqRHE3JsekrdEyZC IsXmkNjODugkiIqbeJ0= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 19116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251001082716 20250831100007 38061 afrinic.net. ZWfvbD6uehrmNGVVrKjIbbq4+LVUEhaH20uZynas/DhetV2FtaG05KDPwwYqqAn6pQaLgc2dkycA 59ropR+zEEt0jC/TtyHV8Zr7ecVzgtRsM34iV8jJIfONWUxz+ir3I5gwzzGBlqRHE3JsekrdEyZC IsXmkNjODugkiIqbeJ0= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 49662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 2466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

afrinic.net

	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 9330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250925150127 20250826210005 38061 afrinic.net. OCHqmIP9y4hpKl35tdurfLMyez6dC5GsPgYXsNH8mfLjBxkWpZwUvbtpt9hMTmw8vj6ySRPPtBAD 6iVPtHHknRMEmkDFqS0oWY85rn1IpUWm+qB+VOBwFOfQ9NhUIhNUztWpGklUYJPHxLdaGCENXr4y a3NbnOUrnnUkorvgGQw= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 9255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251009101926 20250908200005 38061 afrinic.net. UP6q/G090Eqrf+1DRLJcNibbfxL71lzILLeNjNF9lM6jgvF4Ssi+4Bb6vL21C76G9P5gcEfc/uXi qTdKEJT+I8iBMR3LpOIjL6Qxj9UrQlHb4l5IYTulLpcoxdCsAbPHiXGoJpjzB8eXQrvoNmFLGME8 mHeM0PXpZGnZfsGMEdg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251003035318 20250903050005 38061 afrinic.net. smDck/22aIOQUoUiBD/ErRhzqFTQgcTVVswCdz23YXuYgSE6yi0LOiGqrjgFTzbI1bjHpqBfdSDk oxa3Go/QEbjuNuxDIUaE4s1jPFHMnYkbOcj2PyArEehierSmcs/CYrkQ9ROCONU6sEpSMOxSH8mU A1OqYWiz/NR8Eccg0K8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250925150127 20250826210005 38061 afrinic.net. OCHqmIP9y4hpKl35tdurfLMyez6dC5GsPgYXsNH8mfLjBxkWpZwUvbtpt9hMTmw8vj6ySRPPtBAD 6iVPtHHknRMEmkDFqS0oWY85rn1IpUWm+qB+VOBwFOfQ9NhUIhNUztWpGklUYJPHxLdaGCENXr4y a3NbnOUrnnUkorvgGQw= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251003035726 20250903100006 38061 afrinic.net. nyZih5MFHWcAuiznO2QTab6yxa6ku1xNxq2MgiR/tJUMJvcjeVSHSsPybkT1GUJKrQ5REFmT57ug YNi+0MtyLtDfTFs24JKAc7jMMr2DiXRPqXsIh13hwjOirq99JPvq7RqAPQtntnaOg//JRRscXT/9 gKehBeGys/yrsSGkP9w= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251011044055 20250911063038 38061 afrinic.net. N9Woz5+Mc5hzokf34o14vnCo4N9iWRNftH4JN4K/7VGacRykbh6Xn9aqW8VeodDFQO3YV8qLsZRt TIs/lsol7HkhrdLzUAvYAv2imDsJRiij9N21RGpQbimGdnzgGdzzVefBdqR8LHk+UTYVXh1Z2dD/ CvLKjS1+gaGKslgDo/E= )`
	RRSIG=38061 and DNSKEY=38061 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: