DNSSEC Debugger - afrinic.net

Domain Name:

Time: 2026-01-16 05:41:03 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 5203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for afrinic.net/A
	Received 1168 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1168 octets ;; HEADER SECTION ;; id = 36207 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for net/DNSKEY
	Received 1163 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1163 octets ;; HEADER SECTION ;; id = 23024 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to g.root-servers.net for net/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 54636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . O3cjFDb52Ri0Vo/HK5cR1v//Dep4EzUutJ2idPJ1fDBrV7Tip6ROJkJvBIvw1jepWWKY115f+NF+ 7ar1wG7IohWD7i0Zz4lpP6C6O1KNYnD3uDxMpapVLlFfILWgtIbrXFDgVscXTYvXihjgPHRKn8Kz 8c9EYNJbu7J63dyJFVUmm6CuK3K61lvxekgL12f60an383SCnhvXyFLgmw4vBLJ9wsahH8GLHyol WkW7y6aV+9a1+Q/8To+YO+vDnlFJimXmg7GQgZZXNYcey31OIHaL4Jsq8jeDO0G1155stuPT6VIu zlPu8aYkncb8kTDCCYG1rHGNVUOZqcNSCIeLzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . O3cjFDb52Ri0Vo/HK5cR1v//Dep4EzUutJ2idPJ1fDBrV7Tip6ROJkJvBIvw1jepWWKY115f+NF+ 7ar1wG7IohWD7i0Zz4lpP6C6O1KNYnD3uDxMpapVLlFfILWgtIbrXFDgVscXTYvXihjgPHRKn8Kz 8c9EYNJbu7J63dyJFVUmm6CuK3K61lvxekgL12f60an383SCnhvXyFLgmw4vBLJ9wsahH8GLHyol WkW7y6aV+9a1+Q/8To+YO+vDnlFJimXmg7GQgZZXNYcey31OIHaL4Jsq8jeDO0G1155stuPT6VIu zlPu8aYkncb8kTDCCYG1rHGNVUOZqcNSCIeLzg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to k.gtld-servers.net for net/DNSKEY
	Received 371 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 371 octets ;; HEADER SECTION ;; id = 26279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260122151035 20260107150535 37331 net. t984o+DLwBtXVPt5s/6tmdsut2847DIOZS/0rJCiKbFeFWqYlO9MWCBJWnL7gAHDOI/+SnC+DBZG 0nvN6mmBEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260122151035 20260107150535 37331 net. t984o+DLwBtXVPt5s/6tmdsut2847DIOZS/0rJCiKbFeFWqYlO9MWCBJWnL7gAHDOI/+SnC+DBZG 0nvN6mmBEA== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	DNSKEY=44109 is now in the chain-of-trust
	Query to f.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 589 octets ;; HEADER SECTION ;; id = 12466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260123032302 20260116021302 44109 net. 9mvhID3h++mzq1wqS91fK1n6KZrhKl3g+xkx61f3o/uNB2LeOSe7GFt3HhQy381UpzGy/W0ofuRc FqEQJ8xkyg== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to h.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 589 octets ;; HEADER SECTION ;; id = 20943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260123032302 20260116021302 44109 net. 9mvhID3h++mzq1wqS91fK1n6KZrhKl3g+xkx61f3o/uNB2LeOSe7GFt3HhQy381UpzGy/W0ofuRc FqEQJ8xkyg== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to k.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 1079 octets ;; HEADER SECTION ;; id = 20842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260123032302 20260116021302 44109 net. 9mvhID3h++mzq1wqS91fK1n6KZrhKl3g+xkx61f3o/uNB2LeOSe7GFt3HhQy381UpzGy/W0ofuRc FqEQJ8xkyg== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260120032842 20260113021842 17133 net. OXuco6Gn9Gncx9e+WPd8EUWolsdRbNS6Zlwp8oZs0AdhkvZhkwzYn4bsTmpEsURxEUm33Qhhun2x BPAlOdEfAg== ) ;; ADDITIONAL SECTION (27 records) i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=29929/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260123032302 20260116021302 44109 net. 9mvhID3h++mzq1wqS91fK1n6KZrhKl3g+xkx61f3o/uNB2LeOSe7GFt3HhQy381UpzGy/W0ofuRc FqEQJ8xkyg== )`
	RRSIG=44109 and DNSKEY=44109 verifies the DS RRset
	DS=29929/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d )`
	Query to afrinic.authdns.ripe.net for afrinic.net/DNSKEY
	Received 911 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 911 octets ;; HEADER SECTION ;; id = 11496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcLXFpz+pPg8y2GuZqsrceYipQQITgcnmRSVN18ggdL6AP6ctlycXusjmbX/Le+hY4UZTIJQ kG21MSMRZ9MmjnVPZvrjKjjOzBRI3KmvqmbtW9v8sLv7bqrZXG27o34m3Yp4YvFqFsj+BGsr6SIj W5r0pX3vmtHHDo3759VzGvo9 ) ; keytag 58840 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAc8w/xPXSTjQCONuiMDTRImFyAKTmLj26yB53h3ETP9K+gNZi/BD3BxldxE1QEuy7V7AwMTW hom2lTHOpD4MX+v3OENhkNVlJSge+KAH1rpQOoTGfHMvyDz3FwdW+g1MMXgYs3/oPem2Xqf+JsJD XC8IsbSeE/Qag2jOBbiJjFW7 ) ; keytag 36543 afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260213114103 20260114180006 29929 afrinic.net. lzF4Xgv1XR+FmBGg11tnKOZMWE3ly1OeWF+lQaFyMSNuafkYT8oZmTiuo6RKtH2q4glNF59EdM5L qizWI39YiM3b/bGHiIcStDxu0hKC7zkYO72bN/8ZS7+Au4GmEoxld4BB0xvT/RiUyxEenPfATmnb NIB+wsYXdmkzd0PJ3OQ71Ui/qmzf31ac7QdiHm7TOLBlM0oIDMswL3Iq+XKPmYH0Ws33PRyWA3Te 51IMyKRg0TY+nbBuHrUKho5C6tH6GM+IdIYZrbn3rSX2Ket7Xsb6H7nVUXqA0vLhSZIi2veKZmVq PXPBX3rXF3bWdb8esBXjoO0//gWMRJo4f3kurA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcLXFpz+pPg8y2GuZqsrceYipQQITgcnmRSVN18ggdL6AP6ctlycXusjmbX/Le+hY4UZTIJQ kG21MSMRZ9MmjnVPZvrjKjjOzBRI3KmvqmbtW9v8sLv7bqrZXG27o34m3Yp4YvFqFsj+BGsr6SIj W5r0pX3vmtHHDo3759VzGvo9 ) ; keytag 58840`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAc8w/xPXSTjQCONuiMDTRImFyAKTmLj26yB53h3ETP9K+gNZi/BD3BxldxE1QEuy7V7AwMTW hom2lTHOpD4MX+v3OENhkNVlJSge+KAH1rpQOoTGfHMvyDz3FwdW+g1MMXgYs3/oPem2Xqf+JsJD XC8IsbSeE/Qag2jOBbiJjFW7 ) ; keytag 36543`
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929`
	DNSKEY=29929/SEP is now in the chain-of-trust
	DS=29929/SHA-256 verifies DNSKEY=29929/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260213114103 20260114180006 29929 afrinic.net. lzF4Xgv1XR+FmBGg11tnKOZMWE3ly1OeWF+lQaFyMSNuafkYT8oZmTiuo6RKtH2q4glNF59EdM5L qizWI39YiM3b/bGHiIcStDxu0hKC7zkYO72bN/8ZS7+Au4GmEoxld4BB0xvT/RiUyxEenPfATmnb NIB+wsYXdmkzd0PJ3OQ71Ui/qmzf31ac7QdiHm7TOLBlM0oIDMswL3Iq+XKPmYH0Ws33PRyWA3Te 51IMyKRg0TY+nbBuHrUKho5C6tH6GM+IdIYZrbn3rSX2Ket7Xsb6H7nVUXqA0vLhSZIi2veKZmVq PXPBX3rXF3bWdb8esBXjoO0//gWMRJo4f3kurA== )`
	RRSIG=29929 and DNSKEY=29929/SEP verifies the DNSKEY RRset
	DNSKEY=58840 is now in the chain-of-trust
	DNSKEY=36543 is now in the chain-of-trust
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 1557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260210053059 20260110080006 58840 afrinic.net. UqZTVaDKRyD3H7H8deFULeWahseXmLDEUj3cENoR+gWon7QCX2QGgWEDtfRxX233W6Woqka8fUR4 6IFpQzb3YUZMd9O0/w1mtqAcpG+uMtFvYviwu1wc8q+YbiXCmbznrd/CLkYakbJjTMd7zKrWpcO4 DtHxH4lLiDm+4EpEJRA= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 49534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026011605 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260214222051 20260116040007 58840 afrinic.net. d7g16WlmBLD+6FmNRx2oVgECZrioLgvyZMBJ909bDIKnSbLIyQyD3oSez4MroWmAqPFDf96cs/0U eL6GN2HtXADReG9KG+gFBmBQ4nfYd/9KB07PeRLxst/Zbi45lt8qacy32zAbXsBRx118TrGQWSvP izGvPdJDS5uzJjV/1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 30958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026011605 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260214222051 20260116040007 58840 afrinic.net. d7g16WlmBLD+6FmNRx2oVgECZrioLgvyZMBJ909bDIKnSbLIyQyD3oSez4MroWmAqPFDf96cs/0U eL6GN2HtXADReG9KG+gFBmBQ4nfYd/9KB07PeRLxst/Zbi45lt8qacy32zAbXsBRx118TrGQWSvP izGvPdJDS5uzJjV/1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 1935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026011605 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260214222051 20260116040007 58840 afrinic.net. d7g16WlmBLD+6FmNRx2oVgECZrioLgvyZMBJ909bDIKnSbLIyQyD3oSez4MroWmAqPFDf96cs/0U eL6GN2HtXADReG9KG+gFBmBQ4nfYd/9KB07PeRLxst/Zbi45lt8qacy32zAbXsBRx118TrGQWSvP izGvPdJDS5uzJjV/1eE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.afrinic.net for afrinic.net/SOA
	Received 1127 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1127 octets ;; HEADER SECTION ;; id = 53092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026011605 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260214222051 20260116040007 58840 afrinic.net. d7g16WlmBLD+6FmNRx2oVgECZrioLgvyZMBJ909bDIKnSbLIyQyD3oSez4MroWmAqPFDf96cs/0U eL6GN2HtXADReG9KG+gFBmBQ4nfYd/9KB07PeRLxst/Zbi45lt8qacy32zAbXsBRx118TrGQWSvP izGvPdJDS5uzJjV/1eE= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260215062005 20260116030007 58840 afrinic.net. ONtM+va7zq2kqMnFO5pBlaT5UOZAtelgeKABcRbGAIQFkIwNCJv98GZyOMPuPcazeA+OJDRtmJUv QJIFrWZn2jvzOAbt6hhm9LVYrG1cVElSIST7BooviL9NjvCX5t0nGsbxy6ENBSy6x7zlO7yFiAX1 QInGgwK6fxiNSthprgQ= ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1049 octets ;; HEADER SECTION ;; id = 6441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026011605 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260214222051 20260116040007 58840 afrinic.net. d7g16WlmBLD+6FmNRx2oVgECZrioLgvyZMBJ909bDIKnSbLIyQyD3oSez4MroWmAqPFDf96cs/0U eL6GN2HtXADReG9KG+gFBmBQ4nfYd/9KB07PeRLxst/Zbi45lt8qacy32zAbXsBRx118TrGQWSvP izGvPdJDS5uzJjV/1eE= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260210053059 20260110080006 58840 afrinic.net. UqZTVaDKRyD3H7H8deFULeWahseXmLDEUj3cENoR+gWon7QCX2QGgWEDtfRxX233W6Woqka8fUR4 6IFpQzb3YUZMd9O0/w1mtqAcpG+uMtFvYviwu1wc8q+YbiXCmbznrd/CLkYakbJjTMd7zKrWpcO4 DtHxH4lLiDm+4EpEJRA= ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 40103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260210053059 20260110080006 58840 afrinic.net. UqZTVaDKRyD3H7H8deFULeWahseXmLDEUj3cENoR+gWon7QCX2QGgWEDtfRxX233W6Woqka8fUR4 6IFpQzb3YUZMd9O0/w1mtqAcpG+uMtFvYviwu1wc8q+YbiXCmbznrd/CLkYakbJjTMd7zKrWpcO4 DtHxH4lLiDm+4EpEJRA= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 53984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 2159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

afrinic.net

	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 64777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260215062005 20260116030007 58840 afrinic.net. ONtM+va7zq2kqMnFO5pBlaT5UOZAtelgeKABcRbGAIQFkIwNCJv98GZyOMPuPcazeA+OJDRtmJUv QJIFrWZn2jvzOAbt6hhm9LVYrG1cVElSIST7BooviL9NjvCX5t0nGsbxy6ENBSy6x7zlO7yFiAX1 QInGgwK6fxiNSthprgQ= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 19423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260215062005 20260116030007 58840 afrinic.net. ONtM+va7zq2kqMnFO5pBlaT5UOZAtelgeKABcRbGAIQFkIwNCJv98GZyOMPuPcazeA+OJDRtmJUv QJIFrWZn2jvzOAbt6hhm9LVYrG1cVElSIST7BooviL9NjvCX5t0nGsbxy6ENBSy6x7zlO7yFiAX1 QInGgwK6fxiNSthprgQ= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 53704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 6010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 49245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260210053059 20260110080006 58840 afrinic.net. UqZTVaDKRyD3H7H8deFULeWahseXmLDEUj3cENoR+gWon7QCX2QGgWEDtfRxX233W6Woqka8fUR4 6IFpQzb3YUZMd9O0/w1mtqAcpG+uMtFvYviwu1wc8q+YbiXCmbznrd/CLkYakbJjTMd7zKrWpcO4 DtHxH4lLiDm+4EpEJRA= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 63722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260203040905 20260103110006 58840 afrinic.net. pHZr9xaFjN5nq+4OowaACjHkZCvQK20WdcJzBybuDsez78+uxRUpdrzJ1YQcpN82LSMUB5YU5w5g qS8KQ6rAYxqUA+03casGUT+QrWE0HfXTHgaZa4Gj6BtbS3K1CZEVUgNr+2OfMkE8K51AyfjCw2PX vrfn1TXd6ekPhFAiX/E= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260127153426 20251229080025 58840 afrinic.net. tb9jVayB9VfexMtxcl7Chrtn0ATpVSYG4xXRX3p7s3CkPp1Y3HrMIZber10PPTQlMQOzdKqW9G7J oyVLH46PanLvSFz0XJs19sm29XAtfdcdYphmvXFbgXdG/OHWjhlil6LKCNli0DgZLCiw8VDe+TsP 9PTPUoXIy8juoFUV+dE= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260210053059 20260110080006 58840 afrinic.net. UqZTVaDKRyD3H7H8deFULeWahseXmLDEUj3cENoR+gWon7QCX2QGgWEDtfRxX233W6Woqka8fUR4 6IFpQzb3YUZMd9O0/w1mtqAcpG+uMtFvYviwu1wc8q+YbiXCmbznrd/CLkYakbJjTMd7zKrWpcO4 DtHxH4lLiDm+4EpEJRA= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260126174513 20251228090006 58840 afrinic.net. Ej3boq2vzhlH8Q9bH18c8FDl8Uhhja3Ve00HY12azRFt0wY6NMWsXawGMBL8tDEsPLKkMVY0gjvw nRuqKZU778bTr4GR5JkyrJabt8UzpzAgVyLFFNshOeRFQFf+1bAJ3SL0APHEU9vHPTD74Q6jAzQ8 uLIBrBqQQAnie0/3qT4= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 45479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 51633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260204072415 20260104090005 58840 afrinic.net. L6eNDULdIKEDYzNd4cea2GNW7/LBsJ/xF9klU3E7IBgyortBS6vbYS6X00FBFfaxGouY6uOQ+Clb qJkYHkJS3pctZXBiPckzvNq/FRa7n1zOnFgC5kHYSC1ot/goBCIyoKYkpO0x3OAUm2BZnX14Ylj9 POxT76ZybI7Ecub/eyc= )`
	RRSIG=58840 and DNSKEY=58840 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: