DNSSEC Debugger - afrinic.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-25 16:43:41 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 50980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260910000000 20260820000000 20326 . hQqYrSY1hgaqax9ke/8SFj0ZozkRgdHJJlXvIU5t2Bsrcmu3J87WkgjeMLeMiKK/TsFIlpb+XCl3 3T8C3Ja04IyZ2ifVGuMlrDAp7qg3lkO6gXmQ9V7DQscPFbUmicFX0SyhR9wy3JxDQ/tVQx11sMlx phdhRx5kBobY2DeRG0SS2WODJi4qCFLk7bvQ0uRQ3adCI7MS8F6QX5NZEy7oHnmERYF1vosrJhTT w/lDOL6qx6k2LklIWnJI8gvAlhwqOWlQZk8hjkYkkrmgAW2s+pwGqeeYmz1Ttfs7yY2yreKEnJhd eg08q4NURPM1FrNeR5F4k38P3Es8vAIn5r/xYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260910000000 20260820000000 20326 . hQqYrSY1hgaqax9ke/8SFj0ZozkRgdHJJlXvIU5t2Bsrcmu3J87WkgjeMLeMiKK/TsFIlpb+XCl3 3T8C3Ja04IyZ2ifVGuMlrDAp7qg3lkO6gXmQ9V7DQscPFbUmicFX0SyhR9wy3JxDQ/tVQx11sMlx phdhRx5kBobY2DeRG0SS2WODJi4qCFLk7bvQ0uRQ3adCI7MS8F6QX5NZEy7oHnmERYF1vosrJhTT w/lDOL6qx6k2LklIWnJI8gvAlhwqOWlQZk8hjkYkkrmgAW2s+pwGqeeYmz1Ttfs7yY2yreKEnJhd eg08q4NURPM1FrNeR5F4k38P3Es8vAIn5r/xYw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to a.root-servers.net for afrinic.net/A
	Received 1168 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1168 octets ;; HEADER SECTION ;; id = 43066 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260907050000 20260825040000 57780 . c0ufWQQw4P5YpdhyTOQGA+BbmMUrg5vZZ6bhNRjkJ33RsyM1AqzA8gKk9eznKCpHMRX4BueVKq2R uDtPhHkNvhLwZztZFNV/KwjruCKgrLyQvyT4pLAzSBmnaPAHziFRHtUJxYdRCECJ2xkEzje8zf8J iKbeROQmbK14XKtLNui8c4F8pvWc6qfBiaosq1hbdPtF/17rBvoh5dMK2daQpe5TLPFR9tYrEYok LAYeL9Oo0nO7zDaCWGwgt94+Rn0WiSe5QiFNg2YPkemAaf6UQMGQC6fJOVa12WysmlbOevbwVvFP GxvJtnc2+J8lv3qpRP4z/fazQ9yjgjq1bqY0kA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1160 octets ;; HEADER SECTION ;; id = 17950 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260907050000 20260825040000 57780 . c0ufWQQw4P5YpdhyTOQGA+BbmMUrg5vZZ6bhNRjkJ33RsyM1AqzA8gKk9eznKCpHMRX4BueVKq2R uDtPhHkNvhLwZztZFNV/KwjruCKgrLyQvyT4pLAzSBmnaPAHziFRHtUJxYdRCECJ2xkEzje8zf8J iKbeROQmbK14XKtLNui8c4F8pvWc6qfBiaosq1hbdPtF/17rBvoh5dMK2daQpe5TLPFR9tYrEYok LAYeL9Oo0nO7zDaCWGwgt94+Rn0WiSe5QiFNg2YPkemAaf6UQMGQC6fJOVa12WysmlbOevbwVvFP GxvJtnc2+J8lv3qpRP4z/fazQ9yjgjq1bqY0kA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 53749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260907050000 20260825040000 57780 . c0ufWQQw4P5YpdhyTOQGA+BbmMUrg5vZZ6bhNRjkJ33RsyM1AqzA8gKk9eznKCpHMRX4BueVKq2R uDtPhHkNvhLwZztZFNV/KwjruCKgrLyQvyT4pLAzSBmnaPAHziFRHtUJxYdRCECJ2xkEzje8zf8J iKbeROQmbK14XKtLNui8c4F8pvWc6qfBiaosq1hbdPtF/17rBvoh5dMK2daQpe5TLPFR9tYrEYok LAYeL9Oo0nO7zDaCWGwgt94+Rn0WiSe5QiFNg2YPkemAaf6UQMGQC6fJOVa12WysmlbOevbwVvFP GxvJtnc2+J8lv3qpRP4z/fazQ9yjgjq1bqY0kA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260907050000 20260825040000 57780 . c0ufWQQw4P5YpdhyTOQGA+BbmMUrg5vZZ6bhNRjkJ33RsyM1AqzA8gKk9eznKCpHMRX4BueVKq2R uDtPhHkNvhLwZztZFNV/KwjruCKgrLyQvyT4pLAzSBmnaPAHziFRHtUJxYdRCECJ2xkEzje8zf8J iKbeROQmbK14XKtLNui8c4F8pvWc6qfBiaosq1hbdPtF/17rBvoh5dMK2daQpe5TLPFR9tYrEYok LAYeL9Oo0nO7zDaCWGwgt94+Rn0WiSe5QiFNg2YPkemAaf6UQMGQC6fJOVa12WysmlbOevbwVvFP GxvJtnc2+J8lv3qpRP4z/fazQ9yjgjq1bqY0kA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to e.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 291 octets ;; HEADER SECTION ;; id = 3773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260909141035 20260825140535 37331 net. l2Pxt8BF5qEcdOH3jBKX1YXkrybcIX3o8q9gqoP4gBMgrVXCeqHq5+FEUIhIX14fkMaojLCts1YS iuwWExpICQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260909141035 20260825140535 37331 net. l2Pxt8BF5qEcdOH3jBKX1YXkrybcIX3o8q9gqoP4gBMgrVXCeqHq5+FEUIhIX14fkMaojLCts1YS iuwWExpICQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=7272 is now in the chain-of-trust
	Query to m.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 589 octets ;; HEADER SECTION ;; id = 45325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260831034220 20260824023220 7272 net. 2Qd3u4+cruZ2fC2A4TVI4hIzzcWBqGypiVC4+xhFLJThbeDW9WYg3iptZTn7KCPbPCKAMQoJym7a qXZlPJf7UQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to b.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 589 octets ;; HEADER SECTION ;; id = 36434 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260831034220 20260824023220 7272 net. 2Qd3u4+cruZ2fC2A4TVI4hIzzcWBqGypiVC4+xhFLJThbeDW9WYg3iptZTn7KCPbPCKAMQoJym7a qXZlPJf7UQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to d.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1079 octets ;; HEADER SECTION ;; id = 38008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260831034220 20260824023220 7272 net. 2Qd3u4+cruZ2fC2A4TVI4hIzzcWBqGypiVC4+xhFLJThbeDW9WYg3iptZTn7KCPbPCKAMQoJym7a qXZlPJf7UQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260901034339 20260825023339 7272 net. lOzlwBCtp2VyE+7E5qefBd/QHXaRmkckc99URJvgKSUjYFC8CeygPl202IQLfGqJ1HppyZar7XEf n4nz0aCoKQ== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=29929/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260831034220 20260824023220 7272 net. 2Qd3u4+cruZ2fC2A4TVI4hIzzcWBqGypiVC4+xhFLJThbeDW9WYg3iptZTn7KCPbPCKAMQoJym7a qXZlPJf7UQ== )`
	RRSIG=7272 and DNSKEY=7272 verifies the DS RRset
	DS=29929/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d )`
	Query to rirns.arin.net for afrinic.net/DNSKEY
	Received 911 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 911 octets ;; HEADER SECTION ;; id = 26346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAekFAAeERyci+1BiT+v/97tM/AYR9zKzs5VQOGhWZYH8NVf6sy2eeLFhQVriQArzv0GDdjdF BT7oEr0NNN0Y4gtB5ktDwtk857zEKrnol8u62FICkjJIi9VK3sbilYq+dDUMOV3200Mx+JR9zYh2 P7P9x3cvQ+yI06tZvzGvhayf ) ; keytag 30931 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbwqK03dmEvDejqaF/edP2gzfQW0LwpJ0MF2n4LlCNieAApMcMjNERwcv97MZHYdFmukMffx +eV4HkqZG+JdV/UUSqFL0wenMTAV/d7KLsKipqatTBF75AliJ3YGLJV9lAYClWiy9TryrfuBPAtL HH1phzU+QCN5sccxZlHJM/Yh ) ; keytag 6738 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260920011211 20260820165956 29929 afrinic.net. Lob8GVLpZw4ifXzhAl2M4Znae8adk1Q551/W0Y/YjXZHBNcWimjqaB0q+nI7niZmSQ2HCsPnIaLy 24rYZvFBkPHBChtpRZbvb0VAqnG8zwAkxspwm7/RMbpCPbE8bC5i4WQEv/+UaTzQg7JOtd/SlxBt seUMPfgQ15Fa4gHZmjo4n/IOrbXVlskKDwFFl9CnQp8Ifq1iTtoPccoZmRrE09j/gKHoUrwAL9rx njvOZytRNxUYNKNmZkN3PmFBKbfYiPbFUOQmvmt67OqxhKuStSs4AW/b1ZBFE7NgU9yD8Y/a5X+G j8pfaxDlGVjnDvAmnwIraKAwxXs4UQLDDq5clg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAekFAAeERyci+1BiT+v/97tM/AYR9zKzs5VQOGhWZYH8NVf6sy2eeLFhQVriQArzv0GDdjdF BT7oEr0NNN0Y4gtB5ktDwtk857zEKrnol8u62FICkjJIi9VK3sbilYq+dDUMOV3200Mx+JR9zYh2 P7P9x3cvQ+yI06tZvzGvhayf ) ; keytag 30931`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbwqK03dmEvDejqaF/edP2gzfQW0LwpJ0MF2n4LlCNieAApMcMjNERwcv97MZHYdFmukMffx +eV4HkqZG+JdV/UUSqFL0wenMTAV/d7KLsKipqatTBF75AliJ3YGLJV9lAYClWiy9TryrfuBPAtL HH1phzU+QCN5sccxZlHJM/Yh ) ; keytag 6738`
	DNSKEY=29929/SEP is now in the chain-of-trust
	DS=29929/SHA-256 verifies DNSKEY=29929/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260920011211 20260820165956 29929 afrinic.net. Lob8GVLpZw4ifXzhAl2M4Znae8adk1Q551/W0Y/YjXZHBNcWimjqaB0q+nI7niZmSQ2HCsPnIaLy 24rYZvFBkPHBChtpRZbvb0VAqnG8zwAkxspwm7/RMbpCPbE8bC5i4WQEv/+UaTzQg7JOtd/SlxBt seUMPfgQ15Fa4gHZmjo4n/IOrbXVlskKDwFFl9CnQp8Ifq1iTtoPccoZmRrE09j/gKHoUrwAL9rx njvOZytRNxUYNKNmZkN3PmFBKbfYiPbFUOQmvmt67OqxhKuStSs4AW/b1ZBFE7NgU9yD8Y/a5X+G j8pfaxDlGVjnDvAmnwIraKAwxXs4UQLDDq5clg== )`
	RRSIG=29929 and DNSKEY=29929/SEP verifies the DNSKEY RRset
	DNSKEY=30931 is now in the chain-of-trust
	DNSKEY=6738 is now in the chain-of-trust
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 58563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260922023950 20260823200006 30931 afrinic.net. o5ug4xKulaqEHQwqpCw494LVNjak1H+nOEK/IDK5cBuQqUVyLP0plFOm6Jiz78pBG8k+v782ul33 7PDUNHPXC5y/fB/sErf/hLRjQrpqzUIAOczoJ/EhuRjEQIrKvcW914AOSh3n6PTp4gjHHSelljUk 3Wzf3QADcRVvkA1jfcg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260913044155 20260814030006 6738 afrinic.net. o2wOU1tv7tzgmDe6EqPxXv+0u+wfCgHZx6MVgaNw0Bjmsk6ER7lsOeSgr/X6Fwl5C6HxZqP9nMjp eRFCK/U4W6SPmEHWqlqQdRt1R7WDOXpfhH668bP+zghyrcuZqcCNkD0X8rmGfrPFW+1IChfNJIph 5FR24alvDfPQ3/tyJz8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260905144607 20260806220006 6738 afrinic.net. Q0n/U3WZEpTeAggiEPs43bhdpVN17M6FbTtOsAkqK1edx6g+whZZPYzV+8Iwb0jg0+/vQfpPnerm 9TWd4OwPZiGu4ZW3RNGS93abNqaEPUscQd36SLmNqoPTFagE2me4P6lALZ7HuYR2GJ8MNGtMb+yE vhImUQjuqMrRDjMMPrU= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260912184804 20260813110006 6738 afrinic.net. YRr1LSkaDgOb6nwl52MXPIWfDRyopS1dMMJ5U59pdsT3DVSNRToDx/q08wFDgscUCceZCCt0psV4 IK7PrC7BwEDupuaE5mF2C1hZM2AvurrATN7cbYs2yriNShy75itM+N2EOJxpNyShUqYJY9twGMXe xZZBcFjrph+p4pKFw5s= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/SOA
	Received 1127 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1127 octets ;; HEADER SECTION ;; id = 13603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026082516 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260923213641 20260825150004 30931 afrinic.net. QywzBheq9S88HxDzKvUwCTunDnFEuSF1H/3ztgW9mr/g4rkRtVGFSXDkEST6dclij+669SbJqRR7 gwa99aV+gKKvpsV9t/5+waI/G9PzLEqZ9j1/Oecz1eZ95X6ErWI0S6fAtxqyJXJStBPTAj/NGK38 50ciIc+NYBIK1OnNHJA= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260922023950 20260823200006 30931 afrinic.net. o5ug4xKulaqEHQwqpCw494LVNjak1H+nOEK/IDK5cBuQqUVyLP0plFOm6Jiz78pBG8k+v782ul33 7PDUNHPXC5y/fB/sErf/hLRjQrpqzUIAOczoJ/EhuRjEQIrKvcW914AOSh3n6PTp4gjHHSelljUk 3Wzf3QADcRVvkA1jfcg= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260913044155 20260814030006 6738 afrinic.net. o2wOU1tv7tzgmDe6EqPxXv+0u+wfCgHZx6MVgaNw0Bjmsk6ER7lsOeSgr/X6Fwl5C6HxZqP9nMjp eRFCK/U4W6SPmEHWqlqQdRt1R7WDOXpfhH668bP+zghyrcuZqcCNkD0X8rmGfrPFW+1IChfNJIph 5FR24alvDfPQ3/tyJz8= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260912184804 20260813110006 6738 afrinic.net. YRr1LSkaDgOb6nwl52MXPIWfDRyopS1dMMJ5U59pdsT3DVSNRToDx/q08wFDgscUCceZCCt0psV4 IK7PrC7BwEDupuaE5mF2C1hZM2AvurrATN7cbYs2yriNShy75itM+N2EOJxpNyShUqYJY9twGMXe xZZBcFjrph+p4pKFw5s= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260906230655 20260808170007 6738 afrinic.net. ml7yKDHHkFX3cIP17jeGRru/Qqfbpq2JUhH6ftjh+5P3W8bqQmlHHeXWQ9pTuZT1AHb5tk+N+Slr 2NLsOIY49L+aN3vbv3+XtCsUV9ldQEh0bmkvqNp5Vp1u19sFHM2M99uaSCtBX6Dm2/5j3TkXAZBp xC/yTeNShjbwuiWhNcA= ) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 27603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026082516 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260923213641 20260825150004 30931 afrinic.net. QywzBheq9S88HxDzKvUwCTunDnFEuSF1H/3ztgW9mr/g4rkRtVGFSXDkEST6dclij+669SbJqRR7 gwa99aV+gKKvpsV9t/5+waI/G9PzLEqZ9j1/Oecz1eZ95X6ErWI0S6fAtxqyJXJStBPTAj/NGK38 50ciIc+NYBIK1OnNHJA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 29483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026082516 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260923213641 20260825150004 30931 afrinic.net. QywzBheq9S88HxDzKvUwCTunDnFEuSF1H/3ztgW9mr/g4rkRtVGFSXDkEST6dclij+669SbJqRR7 gwa99aV+gKKvpsV9t/5+waI/G9PzLEqZ9j1/Oecz1eZ95X6ErWI0S6fAtxqyJXJStBPTAj/NGK38 50ciIc+NYBIK1OnNHJA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1049 octets ;; HEADER SECTION ;; id = 7781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026082516 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260923213641 20260825150004 30931 afrinic.net. QywzBheq9S88HxDzKvUwCTunDnFEuSF1H/3ztgW9mr/g4rkRtVGFSXDkEST6dclij+669SbJqRR7 gwa99aV+gKKvpsV9t/5+waI/G9PzLEqZ9j1/Oecz1eZ95X6ErWI0S6fAtxqyJXJStBPTAj/NGK38 50ciIc+NYBIK1OnNHJA= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260922023950 20260823200006 30931 afrinic.net. o5ug4xKulaqEHQwqpCw494LVNjak1H+nOEK/IDK5cBuQqUVyLP0plFOm6Jiz78pBG8k+v782ul33 7PDUNHPXC5y/fB/sErf/hLRjQrpqzUIAOczoJ/EhuRjEQIrKvcW914AOSh3n6PTp4gjHHSelljUk 3Wzf3QADcRVvkA1jfcg= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260913044155 20260814030006 6738 afrinic.net. o2wOU1tv7tzgmDe6EqPxXv+0u+wfCgHZx6MVgaNw0Bjmsk6ER7lsOeSgr/X6Fwl5C6HxZqP9nMjp eRFCK/U4W6SPmEHWqlqQdRt1R7WDOXpfhH668bP+zghyrcuZqcCNkD0X8rmGfrPFW+1IChfNJIph 5FR24alvDfPQ3/tyJz8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260905144607 20260806220006 6738 afrinic.net. Q0n/U3WZEpTeAggiEPs43bhdpVN17M6FbTtOsAkqK1edx6g+whZZPYzV+8Iwb0jg0+/vQfpPnerm 9TWd4OwPZiGu4ZW3RNGS93abNqaEPUscQd36SLmNqoPTFagE2me4P6lALZ7HuYR2GJ8MNGtMb+yE vhImUQjuqMrRDjMMPrU= ) ;; { "EDNS-VERSION": 0 }
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 48546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026082516 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260923213641 20260825150004 30931 afrinic.net. QywzBheq9S88HxDzKvUwCTunDnFEuSF1H/3ztgW9mr/g4rkRtVGFSXDkEST6dclij+669SbJqRR7 gwa99aV+gKKvpsV9t/5+waI/G9PzLEqZ9j1/Oecz1eZ95X6ErWI0S6fAtxqyJXJStBPTAj/NGK38 50ciIc+NYBIK1OnNHJA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

afrinic.net

	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 43903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260922023950 20260823200006 30931 afrinic.net. o5ug4xKulaqEHQwqpCw494LVNjak1H+nOEK/IDK5cBuQqUVyLP0plFOm6Jiz78pBG8k+v782ul33 7PDUNHPXC5y/fB/sErf/hLRjQrpqzUIAOczoJ/EhuRjEQIrKvcW914AOSh3n6PTp4gjHHSelljUk 3Wzf3QADcRVvkA1jfcg= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260913044155 20260814030006 6738 afrinic.net. o2wOU1tv7tzgmDe6EqPxXv+0u+wfCgHZx6MVgaNw0Bjmsk6ER7lsOeSgr/X6Fwl5C6HxZqP9nMjp eRFCK/U4W6SPmEHWqlqQdRt1R7WDOXpfhH668bP+zghyrcuZqcCNkD0X8rmGfrPFW+1IChfNJIph 5FR24alvDfPQ3/tyJz8= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260912184804 20260813110006 6738 afrinic.net. YRr1LSkaDgOb6nwl52MXPIWfDRyopS1dMMJ5U59pdsT3DVSNRToDx/q08wFDgscUCceZCCt0psV4 IK7PrC7BwEDupuaE5mF2C1hZM2AvurrATN7cbYs2yriNShy75itM+N2EOJxpNyShUqYJY9twGMXe xZZBcFjrph+p4pKFw5s= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260906230655 20260808170007 6738 afrinic.net. ml7yKDHHkFX3cIP17jeGRru/Qqfbpq2JUhH6ftjh+5P3W8bqQmlHHeXWQ9pTuZT1AHb5tk+N+Slr 2NLsOIY49L+aN3vbv3+XtCsUV9ldQEh0bmkvqNp5Vp1u19sFHM2M99uaSCtBX6Dm2/5j3TkXAZBp xC/yTeNShjbwuiWhNcA= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 29208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 57938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260922023950 20260823200006 30931 afrinic.net. o5ug4xKulaqEHQwqpCw494LVNjak1H+nOEK/IDK5cBuQqUVyLP0plFOm6Jiz78pBG8k+v782ul33 7PDUNHPXC5y/fB/sErf/hLRjQrpqzUIAOczoJ/EhuRjEQIrKvcW914AOSh3n6PTp4gjHHSelljUk 3Wzf3QADcRVvkA1jfcg= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260913044155 20260814030006 6738 afrinic.net. o2wOU1tv7tzgmDe6EqPxXv+0u+wfCgHZx6MVgaNw0Bjmsk6ER7lsOeSgr/X6Fwl5C6HxZqP9nMjp eRFCK/U4W6SPmEHWqlqQdRt1R7WDOXpfhH668bP+zghyrcuZqcCNkD0X8rmGfrPFW+1IChfNJIph 5FR24alvDfPQ3/tyJz8= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260905144607 20260806220006 6738 afrinic.net. Q0n/U3WZEpTeAggiEPs43bhdpVN17M6FbTtOsAkqK1edx6g+whZZPYzV+8Iwb0jg0+/vQfpPnerm 9TWd4OwPZiGu4ZW3RNGS93abNqaEPUscQd36SLmNqoPTFagE2me4P6lALZ7HuYR2GJ8MNGtMb+yE vhImUQjuqMrRDjMMPrU= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260912184804 20260813110006 6738 afrinic.net. YRr1LSkaDgOb6nwl52MXPIWfDRyopS1dMMJ5U59pdsT3DVSNRToDx/q08wFDgscUCceZCCt0psV4 IK7PrC7BwEDupuaE5mF2C1hZM2AvurrATN7cbYs2yriNShy75itM+N2EOJxpNyShUqYJY9twGMXe xZZBcFjrph+p4pKFw5s= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 63463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 34280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260917113819 20260818000005 6738 afrinic.net. kDKvRBY4zm3uV7aHoOKVV7TeLJ3Xa/D3V/HeMu9nb1kVPL1htYEtcyPtuTaGeN8HX7ozc6ru5xDs 0MBsCzJctOPzIdghxW4JYDM9hmvxeUdcKuaXtMX4unRzTcndgMHbQNDMX6mtBxqR3e6iNyZRu6qb 01r+2Tp2OV1Co9h61Do= )`
	RRSIG=6738 and DNSKEY=6738 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: