DNSSEC Debugger - afrinic.net

Domain Name:

Time: 2025-03-15 20:00:20 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 29309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to c.root-servers.net for afrinic.net/A
	Received 1171 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1171 octets ;; HEADER SECTION ;; id = 61372 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 38129 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to i.root-servers.net for net/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 52059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20250328170000 20250315160000 26470 . hbvoKF8fvw5hr/wWsNRuMNFtBUvtbTkPnFdp5aLxrjUs2HkBOQkhFdeT9o/j+tHNp8oEXvdRNGX3 Ph6IDU+KJGIsH46qC/NLEDyhcl5ZGpQS7BZN3550paoxaQtyRve1U4Gj3x/Ba0pQRPNUFRsyCBuG 98tM69mfHxrQ5Dikox+FzKPbBEUy/Ua0soPNTNLhMbvAC5Sy1IHn3RyL+eYfJKQFjIWH3Fvae5pO Xk7DuzLENtu2ulPZpEpVElylSsOCyrXtXo8HfptPyJVeH2lPxpvSyMOqAKnvjWtzCisGukwrpr8B DV2j0Prsw/c5vjsOvx5yl1hq+W2Qzm1sR0T8Pg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to m.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 291 octets ;; HEADER SECTION ;; id = 26926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 DcRLo7wZKZVjZtXzAPruukiCt5wkgTSNlYeUefnfNfc935+zFdfirhH0VZW/SYAqPA7blb0yRNL3 mkptK4sDnQ== ) ; keytag 10024 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250328141035 20250313140535 37331 net. EdDVToF/Q0VjpU1h69A5YYFkdknPhA0cLESXFVSXQ8tJxmwJBctloMmBlSwr+Cpqf+6FkJRABBqI eenOdv9nOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 DcRLo7wZKZVjZtXzAPruukiCt5wkgTSNlYeUefnfNfc935+zFdfirhH0VZW/SYAqPA7blb0yRNL3 mkptK4sDnQ== ) ; keytag 10024`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250328141035 20250313140535 37331 net. EdDVToF/Q0VjpU1h69A5YYFkdknPhA0cLESXFVSXQ8tJxmwJBctloMmBlSwr+Cpqf+6FkJRABBqI eenOdv9nOw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=10024 is now in the chain-of-trust
	Query to e.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 589 octets ;; HEADER SECTION ;; id = 14899 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250321030204 20250314015204 10024 net. 7Gw2Ug9Ax8Y5202gr+bMeD1t3CqNP120+3hX11hQwqJGYAyGrj9FocXnXV5DQ6nehoHpGjXWGN4V mRYY/jkkIQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to l.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 589 octets ;; HEADER SECTION ;; id = 33425 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250321030204 20250314015204 10024 net. 7Gw2Ug9Ax8Y5202gr+bMeD1t3CqNP120+3hX11hQwqJGYAyGrj9FocXnXV5DQ6nehoHpGjXWGN4V mRYY/jkkIQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to h.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 1079 octets ;; HEADER SECTION ;; id = 34319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250321030204 20250314015204 10024 net. 7Gw2Ug9Ax8Y5202gr+bMeD1t3CqNP120+3hX11hQwqJGYAyGrj9FocXnXV5DQ6nehoHpGjXWGN4V mRYY/jkkIQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20250322030857 20250315015857 10024 net. xjIlfhK1VLkvHWxnzT6aUiEsZfi3NeumO7S5u7ulk/MlPHkr+5/pdNHkteDwnlNmQ6USKwWYsgMW 1jgNwiqMSA== ) ;; ADDITIONAL SECTION (27 records) l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=26750/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20250321030204 20250314015204 10024 net. 7Gw2Ug9Ax8Y5202gr+bMeD1t3CqNP120+3hX11hQwqJGYAyGrj9FocXnXV5DQ6nehoHpGjXWGN4V mRYY/jkkIQ== )`
	RRSIG=10024 and DNSKEY=10024 verifies the DS RRset
	DS=26750/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec )`
	Query to ns2.afrinic.net for afrinic.net/DNSKEY
	Received 911 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 911 octets ;; HEADER SECTION ;; id = 35990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbrvdxuliyZGfGSLyllMJeQ8sqsovNCNv6YWM46boGnJODTrLdmXKgPni+ICK8Kzr8nCytY9 s4R3MmM0/OHDsw1vb+DQfo11fO6ZdBJB1q6MVinMfJPnwDg2zgOLr5OzE6bhFqnBVEjiFjKyI8hT Fp676/wjm4JSGS/wWgKrD2xf ) ; keytag 8683 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAdX3nGOgq/ke99pNDYgdGqO/Oo2SIyc7KyCpL3N812bQ9xoZDBvOec5hnRC39hsN0kdBy5k8 fFP5il6J0tAMCkF/lVSxXGX97/E0Aw1V6AQRhu4APx9BIQtecCROOVtgqBKPs2Lb61ZyFAFe16BI 7QyYDGlOebeuzWQ2KtFlntUz ) ; keytag 54493 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20250328133902 20250226155136 26750 afrinic.net. rkx4rQBXs5Plz4WGl/IR8yB8nm+2hMrALseI0x/L+smaPhwJXZuB+I4S5qmOJE299TzALv/uqWH3 aob2iVxhp6iUQGpRexq6IIncgNb34ZgwNoItym6ZizPrWaHe2T270iDPCwmPijqRF86wxsN8kLfU Cmgl1yl8aI4HnTxvfMwsVTRV7XKkz3z6IQ9g00PTOGVyrmQ8xqhY9Dw3XsVx0TMckh/UuQv8Rmpj bXER06hSwnRfgZ0WIjLsiZb/NDsyEyRPhgipuyDXEkKWRHNNDyaVrVc4isgjTvi9BUw5l767tZVo yyltGHO9nuU8SYUejHW2WsEEX8Jib8mizX7ruQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbrvdxuliyZGfGSLyllMJeQ8sqsovNCNv6YWM46boGnJODTrLdmXKgPni+ICK8Kzr8nCytY9 s4R3MmM0/OHDsw1vb+DQfo11fO6ZdBJB1q6MVinMfJPnwDg2zgOLr5OzE6bhFqnBVEjiFjKyI8hT Fp676/wjm4JSGS/wWgKrD2xf ) ; keytag 8683`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAdX3nGOgq/ke99pNDYgdGqO/Oo2SIyc7KyCpL3N812bQ9xoZDBvOec5hnRC39hsN0kdBy5k8 fFP5il6J0tAMCkF/lVSxXGX97/E0Aw1V6AQRhu4APx9BIQtecCROOVtgqBKPs2Lb61ZyFAFe16BI 7QyYDGlOebeuzWQ2KtFlntUz ) ; keytag 54493`
	DNSKEY=26750/SEP is now in the chain-of-trust
	DS=26750/SHA-256 verifies DNSKEY=26750/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20250328133902 20250226155136 26750 afrinic.net. rkx4rQBXs5Plz4WGl/IR8yB8nm+2hMrALseI0x/L+smaPhwJXZuB+I4S5qmOJE299TzALv/uqWH3 aob2iVxhp6iUQGpRexq6IIncgNb34ZgwNoItym6ZizPrWaHe2T270iDPCwmPijqRF86wxsN8kLfU Cmgl1yl8aI4HnTxvfMwsVTRV7XKkz3z6IQ9g00PTOGVyrmQ8xqhY9Dw3XsVx0TMckh/UuQv8Rmpj bXER06hSwnRfgZ0WIjLsiZb/NDsyEyRPhgipuyDXEkKWRHNNDyaVrVc4isgjTvi9BUw5l767tZVo yyltGHO9nuU8SYUejHW2WsEEX8Jib8mizX7ruQ== )`
	RRSIG=26750 and DNSKEY=26750/SEP verifies the DNSKEY RRset
	DNSKEY=8683 is now in the chain-of-trust
	DNSKEY=54493 is now in the chain-of-trust
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 40360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250329120831 20250227190007 54493 afrinic.net. JEWNsazpMpYC/wGOfgLvkBp9s3xRKvSDfh7ta19JHz7HknRSDw4x2iL3i9fRGVsvToj3cp19SGou xvRVSEoXttx4uQckrfutlY4nP8aA0ViZebVUoXJSI3j4O21287dZY2ymdwRKOi/nyLb5pf6Au2Fa FMh5t106poJZuxGjPu8= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 40327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025031518 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20250415065542 20250315150006 54493 afrinic.net. vn/NtdWmCOj608TfEFyX9S3FQ5d8fuSMPXW299b7h2t0FzyaGTCrF7J1WXGcQgxjYB6CR1l3V5wv hR+jjAxbtZ/0LtQ0/xZLJdJw6oTALARtte+zkWlZLvSwv57c9wq9Gh8gtfcE5MZJMcpxlYswLvWP awx4U7+jku0bTpYD3bI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 60346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025031522 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20250414221024 20250315190005 54493 afrinic.net. fetVPPn7Os5hyjwBJkIF8FLQai5KydpcmjO0bzwGRt4fwigRNo29e6cAsHhSITf3Ddo63xvN7rQk vJyKIZQdwnIJuI34YmW8KwuZ2370AW5pFzRABevFi1oNbDBmnMhytYw2n3Lll6tO5OT2z7AQJ5fz 02CDnDHWvfRCOdBnqo4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net serial (2025031522) differs from rirns.arin.net serial (2025031518)
	Query to ns3.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1049 octets ;; HEADER SECTION ;; id = 5695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025031521 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20250414090758 20250315180005 54493 afrinic.net. tncH0uRMWxNCKyZxr5rIHXLiXi/8JXe97J9nKQIUe/amskXxMLNMtzoSqSUf2L2xv1cJcOdtRspw l/DXnxwWQ0cRG1LxStcgOxbJACxmmYiwk78ZoXoe4T+2tRSLqptAKXfvjF069XDxDuBfpTrtayJV ROGu3frV7UR5F9dJYjE= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net serial (2025031521) differs from rirns.arin.net serial (2025031518)
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1040 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1040 octets ;; HEADER SECTION ;; id = 6706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025031522 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20250414221024 20250315190005 54493 afrinic.net. fetVPPn7Os5hyjwBJkIF8FLQai5KydpcmjO0bzwGRt4fwigRNo29e6cAsHhSITf3Ddo63xvN7rQk vJyKIZQdwnIJuI34YmW8KwuZ2370AW5pFzRABevFi1oNbDBmnMhytYw2n3Lll6tO5OT2z7AQJ5fz 02CDnDHWvfRCOdBnqo4= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net serial (2025031522) differs from rirns.arin.net serial (2025031518)
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 55014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025031522 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20250414221024 20250315190005 54493 afrinic.net. fetVPPn7Os5hyjwBJkIF8FLQai5KydpcmjO0bzwGRt4fwigRNo29e6cAsHhSITf3Ddo63xvN7rQk vJyKIZQdwnIJuI34YmW8KwuZ2370AW5pFzRABevFi1oNbDBmnMhytYw2n3Lll6tO5OT2z7AQJ5fz 02CDnDHWvfRCOdBnqo4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net serial (2025031522) differs from rirns.arin.net serial (2025031518)
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 53729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250329120831 20250227190007 54493 afrinic.net. JEWNsazpMpYC/wGOfgLvkBp9s3xRKvSDfh7ta19JHz7HknRSDw4x2iL3i9fRGVsvToj3cp19SGou xvRVSEoXttx4uQckrfutlY4nP8aA0ViZebVUoXJSI3j4O21287dZY2ymdwRKOi/nyLb5pf6Au2Fa FMh5t106poJZuxGjPu8= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 61455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 60955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 55182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 40485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 44238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 48408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

afrinic.net

	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 19113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 8494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1181 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1181 octets ;; HEADER SECTION ;; id = 49495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	Received 1181 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1181 octets ;; HEADER SECTION ;; id = 44758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20250406061031 20250307020006 54493 afrinic.net. K49i8s5D2klact3KSyYlJEhZVExAY0XgWUDT2/x3N09t33S7ol4mYtWTW326++b8o+l+qXmVpttS GhL2Ldv8E5luf8UhdssR4TG6kEPzdzNDVNlE0xbtzH3iuVrM5AYD40jYcHXc6lLpQhKzeg1uCHjA Ed+LPESpxaLgK3bbAgo= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20250401132558 20250302030006 54493 afrinic.net. IVQxmb0rwxUzSTfomjaaXdWrKLWiuqRQ5Jk3sTh+ac5DRzDwh4NlsHhQjW9NU4f5aaQF44z6zI/A izHhmDA9pFns3h/lewQFMlbcrik4BV//VSEv/MxBPE9H32NgtE/oGTD3cap81cZHSrGDsS4YJdf4 XaxDJza7R2CSqUuoZ3Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20250325032206 20250224020006 8683 afrinic.net. AxUwrxNHarkqJwPjOrhPajil55YP/t8t/UMubjIA5VGB4VMN3aqjw3h6wn3mpEQv+04ZU7gYPM4t J/lZeOM48lowCnxobLq/txbvoaDioX4mvrZ5X35MYaNnGGhd9KBB1pYK+zJ7mPithkKwlMHc06Qd CZbO440SHiQFiLkVB+0= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20250405162115 20250306130006 54493 afrinic.net. NnhV1wUwssMDs1zjB6Do+2wSn70nixko/XMORv7CCs+iv+C/yGvmCbbkJwrZNm5oubgo/r3ZhqkR VLmzRCjxadDMGk5I8Bjxt4E0q7kL8qCslZKFJhjK6njuZXfG5z7IOuSKIs7FeQ291a8yDVkUPWLW aMFlxFYAlbMBPYzGuU0= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20250413141337 20250315104416 54493 afrinic.net. NIz8dIKbpkF5VXmcjLb38cUIj+DWFL8q4+I/OXgvnsXeWhKTele//YsaqKUQft7Y27Nrbsd6PSVJ xfb6cuB0GW1GmkyNTnYbmlU8LpxlMl/m7icSfVCEvmHbOfeaoj1FeUdkeQhet9HTU/8/RX12P52c of2cttMEif5wV0J/FwU= )`
	RRSIG=54493 and DNSKEY=54493 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: