DNSSEC Debugger - afrinic.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-27 16:24:25 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 25975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to b.root-servers.net for afrinic.net/A
	Received 1168 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1168 octets ;; HEADER SECTION ;; id = 4172 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260609050000 20260527040000 54393 . pioSsyW3LLbcHg4DCbLZgERBYfgMnUIb4ybeZiHpMRJrQGVPph8GM9DVfYTCBlgdHns306AsE9gF lLcnX+jaY/uSKEKnm5C7XFUniekT2UgZchs5HOWqAIVWr2kJXm4BJEt0nSbh9XDfVTkva3qh+Mui bFO/rzVMyRA7Jzl9GplldQ3jrdh36X7oWsdrkNKRn1/ZdAlrST4ClwA32XdmN/xamkpNnUDxMXVC 2jJbzP7dLKM3vELN3IrwhANCckb+UuarfFlAdh7bViakvIof/CQxXnIR5hOfZukHocxrwABV8fq8 VT2lLe7Bua5ltDLj4xZnw4hdIfcB/QwESWDZzg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for net/DNSKEY
	Received 1163 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1163 octets ;; HEADER SECTION ;; id = 44545 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260609050000 20260527040000 54393 . pioSsyW3LLbcHg4DCbLZgERBYfgMnUIb4ybeZiHpMRJrQGVPph8GM9DVfYTCBlgdHns306AsE9gF lLcnX+jaY/uSKEKnm5C7XFUniekT2UgZchs5HOWqAIVWr2kJXm4BJEt0nSbh9XDfVTkva3qh+Mui bFO/rzVMyRA7Jzl9GplldQ3jrdh36X7oWsdrkNKRn1/ZdAlrST4ClwA32XdmN/xamkpNnUDxMXVC 2jJbzP7dLKM3vELN3IrwhANCckb+UuarfFlAdh7bViakvIof/CQxXnIR5hOfZukHocxrwABV8fq8 VT2lLe7Bua5ltDLj4xZnw4hdIfcB/QwESWDZzg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to h.root-servers.net for net/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 22614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260609050000 20260527040000 54393 . pioSsyW3LLbcHg4DCbLZgERBYfgMnUIb4ybeZiHpMRJrQGVPph8GM9DVfYTCBlgdHns306AsE9gF lLcnX+jaY/uSKEKnm5C7XFUniekT2UgZchs5HOWqAIVWr2kJXm4BJEt0nSbh9XDfVTkva3qh+Mui bFO/rzVMyRA7Jzl9GplldQ3jrdh36X7oWsdrkNKRn1/ZdAlrST4ClwA32XdmN/xamkpNnUDxMXVC 2jJbzP7dLKM3vELN3IrwhANCckb+UuarfFlAdh7bViakvIof/CQxXnIR5hOfZukHocxrwABV8fq8 VT2lLe7Bua5ltDLj4xZnw4hdIfcB/QwESWDZzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260609050000 20260527040000 54393 . pioSsyW3LLbcHg4DCbLZgERBYfgMnUIb4ybeZiHpMRJrQGVPph8GM9DVfYTCBlgdHns306AsE9gF lLcnX+jaY/uSKEKnm5C7XFUniekT2UgZchs5HOWqAIVWr2kJXm4BJEt0nSbh9XDfVTkva3qh+Mui bFO/rzVMyRA7Jzl9GplldQ3jrdh36X7oWsdrkNKRn1/ZdAlrST4ClwA32XdmN/xamkpNnUDxMXVC 2jJbzP7dLKM3vELN3IrwhANCckb+UuarfFlAdh7bViakvIof/CQxXnIR5hOfZukHocxrwABV8fq8 VT2lLe7Bua5ltDLj4xZnw4hdIfcB/QwESWDZzg== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to h.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 291 octets ;; HEADER SECTION ;; id = 54860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260611141035 20260527140535 37331 net. 1hJQsYHQ/Aio9g8KHN3eHuJS8f/NPHlHnOw6HSC3bHkNsYDxkhctA245ZtsQKXXYL3FdWt49Kizi HGXtREV+GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260611141035 20260527140535 37331 net. 1hJQsYHQ/Aio9g8KHN3eHuJS8f/NPHlHnOw6HSC3bHkNsYDxkhctA245ZtsQKXXYL3FdWt49Kizi HGXtREV+GQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=1560 is now in the chain-of-trust
	Query to j.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 589 octets ;; HEADER SECTION ;; id = 41817 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260531032333 20260524021333 1560 net. V/+cXk0vyjSAaHbprTQEAw9uHyYZRu3aV1ESewt4XCP/XAKlKRt291JVOnK5xUPgca/VTzRjlkkx pn+rRVJ6EQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to f.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 589 octets ;; HEADER SECTION ;; id = 44053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260531032333 20260524021333 1560 net. V/+cXk0vyjSAaHbprTQEAw9uHyYZRu3aV1ESewt4XCP/XAKlKRt291JVOnK5xUPgca/VTzRjlkkx pn+rRVJ6EQ== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to f.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 1079 octets ;; HEADER SECTION ;; id = 17665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260531032333 20260524021333 1560 net. V/+cXk0vyjSAaHbprTQEAw9uHyYZRu3aV1ESewt4XCP/XAKlKRt291JVOnK5xUPgca/VTzRjlkkx pn+rRVJ6EQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260601032852 20260525021852 1560 net. NtEIom+iJyJrURTxPU4mLQuUmn93LBjU3oMQVhddqY9GWKcog0TZwJ+80RgHseRUKgdezpg1c6qx /McDXEjp3A== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=29929/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260531032333 20260524021333 1560 net. V/+cXk0vyjSAaHbprTQEAw9uHyYZRu3aV1ESewt4XCP/XAKlKRt291JVOnK5xUPgca/VTzRjlkkx pn+rRVJ6EQ== )`
	RRSIG=1560 and DNSKEY=1560 verifies the DS RRset
	DS=29929/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d )`
	Query to ns4.apnic.net for afrinic.net/DNSKEY
	Received 911 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 911 octets ;; HEADER SECTION ;; id = 24012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAb/RZo26NsRTo5tMYGRBp/s0eRf0K84l3LO3Q/IbEMOde53DqLZiWTYlUP4NABvYXpgC0ivg nwkeuCU8gEgd9WNQZ0SvXEM+iRBczEtMOsHtl2HFNQ04oGBOmSG7BQuvkJ/XG1u7j3BjacOAGR8D kwgNZ0e6Ez63k2c78xhIYEGd ) ; keytag 48781 afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcThIHHXaBuc5bWvGqpjTxWuwLTiNDJnx9V5cmb2EyJRuThvkeqrn8H4lKv00hHdBZo+tbK3 D422x6ZsLMNRkag6YNY8jSg/uF8Ab9AnyxNES1eCQNUMlAFQWj9KvseJeWKcyqZ9eAo6p2NqT1Mz Lxl5K+RdDqgoSqJtUZK1+jsz ) ; keytag 43636 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260620211935 20260522165103 29929 afrinic.net. aaefijLpSR//5wjPVuv2Ttm+SUzpcdwnCjeprsNRI/ouuvYZYQQb7eOtQ0jiJKb8whZ4Ywe+g9/I bKkMtCMC1B6LAvUjgRQ77tkKdihaJGI4mzVgMTKD9Y+hyvZ/mm8MpTHs4XnHB3tQufDNFXMRPmIj sKLlGyP0ZRNUodsLfwSOgvjlLNUgqZoqew9zG+VImbr+N5mtSOGL/TUrKi27ayx6GjPEHRnN9T+l xhinjwt+dtnDNmyYAy3ZBm38/Ez7mXSt6NSvCTM1Dd1PgncpChKIe/Zx1ISGxtDj4lb5ozOL875O WNlGmTv5mQZ0q1Vc12gj4VHleq5RuWXoOM6g2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAb/RZo26NsRTo5tMYGRBp/s0eRf0K84l3LO3Q/IbEMOde53DqLZiWTYlUP4NABvYXpgC0ivg nwkeuCU8gEgd9WNQZ0SvXEM+iRBczEtMOsHtl2HFNQ04oGBOmSG7BQuvkJ/XG1u7j3BjacOAGR8D kwgNZ0e6Ez63k2c78xhIYEGd ) ; keytag 48781`
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcThIHHXaBuc5bWvGqpjTxWuwLTiNDJnx9V5cmb2EyJRuThvkeqrn8H4lKv00hHdBZo+tbK3 D422x6ZsLMNRkag6YNY8jSg/uF8Ab9AnyxNES1eCQNUMlAFQWj9KvseJeWKcyqZ9eAo6p2NqT1Mz Lxl5K+RdDqgoSqJtUZK1+jsz ) ; keytag 43636`
	DNSKEY=29929/SEP is now in the chain-of-trust
	DS=29929/SHA-256 verifies DNSKEY=29929/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260620211935 20260522165103 29929 afrinic.net. aaefijLpSR//5wjPVuv2Ttm+SUzpcdwnCjeprsNRI/ouuvYZYQQb7eOtQ0jiJKb8whZ4Ywe+g9/I bKkMtCMC1B6LAvUjgRQ77tkKdihaJGI4mzVgMTKD9Y+hyvZ/mm8MpTHs4XnHB3tQufDNFXMRPmIj sKLlGyP0ZRNUodsLfwSOgvjlLNUgqZoqew9zG+VImbr+N5mtSOGL/TUrKi27ayx6GjPEHRnN9T+l xhinjwt+dtnDNmyYAy3ZBm38/Ez7mXSt6NSvCTM1Dd1PgncpChKIe/Zx1ISGxtDj4lb5ozOL875O WNlGmTv5mQZ0q1Vc12gj4VHleq5RuWXoOM6g2A== )`
	RRSIG=29929 and DNSKEY=29929/SEP verifies the DNSKEY RRset
	DNSKEY=48781 is now in the chain-of-trust
	DNSKEY=43636 is now in the chain-of-trust
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 37437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260621204011 20260523090005 48781 afrinic.net. izQGhAwkuz5wu+L54gFdOGk8YyUDMEqDHqh0TVQejuInHyfA0YdrJlr6Q2RcRQPRcZbgAoGJ9Wji BO0GrVNuuj8GRbLmzk2DwSzVYHWoIC0SuF25b+CZY1AA6AQH/wEdNGAEGI6HoJdEAgwkKn69hwLI 78P5yqfN0Bm/hGv7r6o= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260612124901 20260514100006 43636 afrinic.net. NatjRvCjM8PDS0vmHw7xjYSGL8HrAJMLSHclYBll5HfeVrvla6Rma0Sk+XdXcRYaFpufbAJOfQMV xJjlePFBy0MuwMpL3+czZ6bzwQvMtu/k9hZW9a1m69NQJb5lgSdIs9K3JLhFlXwqdAJSqona1Puk zg225N+FpyLzE1mof6A= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260606081104 20260507110007 43636 afrinic.net. ZcU2s8QvXUWjCVpQKKGke5k1AA1wi7nNszEoez4CFFffQaO9KqEvJdpV+B+h0EpIV+OEr8YlPNlw Kn3SFAES1ooknhqb6y3k/ca/beqjmdcTS1xWAU90CH0rgIfTc6smS6dMLChJ2JMVrZ9wsQuJt8ag MxhwO+teYmhyBJ2AFSs= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260614061653 20260515210006 43636 afrinic.net. mFSSpxwSoJfvs6d/QxsjSp/8jMBG9Jsfl3HGwIBg86KCywDz4ssgddESaD5a9ZgAlDi2UZvjtsM/ 2tuMGWDHzlIkh+uJy0vbvgRj20FCtbSPNzebiwN6a9Vwvq1CAXuP+ZWve7tlDY3SQ2cctCWwf9r5 JmE3Vx3LrwKWnss5xnU= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 64232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026052715 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260626062729 20260527140003 48781 afrinic.net. GwsP/9dqWy0dwXOkV0sXipNUHm+2vSDysBfxhfpcKVHbp1Rte46FBvXbL8pWOupdpUxdhAzvsbz3 KHDNRGHlHFPtKcW7oWZvT/QDDTjqgpzOZhbpeFhwc/t6fhTQhjE/lHCz7QwNMWQ/cyIO/K+8IQjH MUHp+vzsF0JQTCtxPP4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.afrinic.net for afrinic.net/SOA
	Received 1127 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1127 octets ;; HEADER SECTION ;; id = 14359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026052716 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260625202630 20260527150005 48781 afrinic.net. LWDJ2SELOL1j9QvLawVVK93YJhaYt9/PrCvPnxTu1eCFLwPGKt1oH8wCUKI0n8KZo6QvzVOzDhYD fv+b4Y010Sj1RQTV/stE4khdLFhWpum9I2DLdbkNiSPuQbtDrxucwqPnxDl31CsTImJPUj5OoyBw CSN2hSwhZ9W0vvnEVEY= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260621204011 20260523090005 48781 afrinic.net. izQGhAwkuz5wu+L54gFdOGk8YyUDMEqDHqh0TVQejuInHyfA0YdrJlr6Q2RcRQPRcZbgAoGJ9Wji BO0GrVNuuj8GRbLmzk2DwSzVYHWoIC0SuF25b+CZY1AA6AQH/wEdNGAEGI6HoJdEAgwkKn69hwLI 78P5yqfN0Bm/hGv7r6o= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260612124901 20260514100006 43636 afrinic.net. NatjRvCjM8PDS0vmHw7xjYSGL8HrAJMLSHclYBll5HfeVrvla6Rma0Sk+XdXcRYaFpufbAJOfQMV xJjlePFBy0MuwMpL3+czZ6bzwQvMtu/k9hZW9a1m69NQJb5lgSdIs9K3JLhFlXwqdAJSqona1Puk zg225N+FpyLzE1mof6A= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260614061653 20260515210006 43636 afrinic.net. mFSSpxwSoJfvs6d/QxsjSp/8jMBG9Jsfl3HGwIBg86KCywDz4ssgddESaD5a9ZgAlDi2UZvjtsM/ 2tuMGWDHzlIkh+uJy0vbvgRj20FCtbSPNzebiwN6a9Vwvq1CAXuP+ZWve7tlDY3SQ2cctCWwf9r5 JmE3Vx3LrwKWnss5xnU= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260608213439 20260509160007 43636 afrinic.net. dXCviaW2FOv8HU9V25oIkiM31dx9SLRdfhk7Ptjx6qBAaUXJEb3Y0X8CAN6Nf7B4F8GVjx602ryh BuLZ29qWKUfqRZeil08VTl3yyKzAy3GQHoneI/LDsiq0LU+TTfzVasGkKjCeFYDQ0dMxFnkFdGuo h4m5wK0VwnpcM5sznrA= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net serial (2026052716) differs from rirns.arin.net serial (2026052715)
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 18250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026052716 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260625202630 20260527150005 48781 afrinic.net. LWDJ2SELOL1j9QvLawVVK93YJhaYt9/PrCvPnxTu1eCFLwPGKt1oH8wCUKI0n8KZo6QvzVOzDhYD fv+b4Y010Sj1RQTV/stE4khdLFhWpum9I2DLdbkNiSPuQbtDrxucwqPnxDl31CsTImJPUj5OoyBw CSN2hSwhZ9W0vvnEVEY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net serial (2026052716) differs from rirns.arin.net serial (2026052715)
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 18120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026052716 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260625202630 20260527150005 48781 afrinic.net. LWDJ2SELOL1j9QvLawVVK93YJhaYt9/PrCvPnxTu1eCFLwPGKt1oH8wCUKI0n8KZo6QvzVOzDhYD fv+b4Y010Sj1RQTV/stE4khdLFhWpum9I2DLdbkNiSPuQbtDrxucwqPnxDl31CsTImJPUj5OoyBw CSN2hSwhZ9W0vvnEVEY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net serial (2026052716) differs from rirns.arin.net serial (2026052715)
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1049 octets ;; HEADER SECTION ;; id = 32068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026052716 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260625202630 20260527150005 48781 afrinic.net. LWDJ2SELOL1j9QvLawVVK93YJhaYt9/PrCvPnxTu1eCFLwPGKt1oH8wCUKI0n8KZo6QvzVOzDhYD fv+b4Y010Sj1RQTV/stE4khdLFhWpum9I2DLdbkNiSPuQbtDrxucwqPnxDl31CsTImJPUj5OoyBw CSN2hSwhZ9W0vvnEVEY= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260621204011 20260523090005 48781 afrinic.net. izQGhAwkuz5wu+L54gFdOGk8YyUDMEqDHqh0TVQejuInHyfA0YdrJlr6Q2RcRQPRcZbgAoGJ9Wji BO0GrVNuuj8GRbLmzk2DwSzVYHWoIC0SuF25b+CZY1AA6AQH/wEdNGAEGI6HoJdEAgwkKn69hwLI 78P5yqfN0Bm/hGv7r6o= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260612124901 20260514100006 43636 afrinic.net. NatjRvCjM8PDS0vmHw7xjYSGL8HrAJMLSHclYBll5HfeVrvla6Rma0Sk+XdXcRYaFpufbAJOfQMV xJjlePFBy0MuwMpL3+czZ6bzwQvMtu/k9hZW9a1m69NQJb5lgSdIs9K3JLhFlXwqdAJSqona1Puk zg225N+FpyLzE1mof6A= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260606081104 20260507110007 43636 afrinic.net. ZcU2s8QvXUWjCVpQKKGke5k1AA1wi7nNszEoez4CFFffQaO9KqEvJdpV+B+h0EpIV+OEr8YlPNlw Kn3SFAES1ooknhqb6y3k/ca/beqjmdcTS1xWAU90CH0rgIfTc6smS6dMLChJ2JMVrZ9wsQuJt8ag MxhwO+teYmhyBJ2AFSs= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net serial (2026052716) differs from rirns.arin.net serial (2026052715)
	Query to ns3.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 30179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 45986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

afrinic.net

	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 15380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260621204011 20260523090005 48781 afrinic.net. izQGhAwkuz5wu+L54gFdOGk8YyUDMEqDHqh0TVQejuInHyfA0YdrJlr6Q2RcRQPRcZbgAoGJ9Wji BO0GrVNuuj8GRbLmzk2DwSzVYHWoIC0SuF25b+CZY1AA6AQH/wEdNGAEGI6HoJdEAgwkKn69hwLI 78P5yqfN0Bm/hGv7r6o= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260612124901 20260514100006 43636 afrinic.net. NatjRvCjM8PDS0vmHw7xjYSGL8HrAJMLSHclYBll5HfeVrvla6Rma0Sk+XdXcRYaFpufbAJOfQMV xJjlePFBy0MuwMpL3+czZ6bzwQvMtu/k9hZW9a1m69NQJb5lgSdIs9K3JLhFlXwqdAJSqona1Puk zg225N+FpyLzE1mof6A= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260614061653 20260515210006 43636 afrinic.net. mFSSpxwSoJfvs6d/QxsjSp/8jMBG9Jsfl3HGwIBg86KCywDz4ssgddESaD5a9ZgAlDi2UZvjtsM/ 2tuMGWDHzlIkh+uJy0vbvgRj20FCtbSPNzebiwN6a9Vwvq1CAXuP+ZWve7tlDY3SQ2cctCWwf9r5 JmE3Vx3LrwKWnss5xnU= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260608213439 20260509160007 43636 afrinic.net. dXCviaW2FOv8HU9V25oIkiM31dx9SLRdfhk7Ptjx6qBAaUXJEb3Y0X8CAN6Nf7B4F8GVjx602ryh BuLZ29qWKUfqRZeil08VTl3yyKzAy3GQHoneI/LDsiq0LU+TTfzVasGkKjCeFYDQ0dMxFnkFdGuo h4m5wK0VwnpcM5sznrA= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 53658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260621204011 20260523090005 48781 afrinic.net. izQGhAwkuz5wu+L54gFdOGk8YyUDMEqDHqh0TVQejuInHyfA0YdrJlr6Q2RcRQPRcZbgAoGJ9Wji BO0GrVNuuj8GRbLmzk2DwSzVYHWoIC0SuF25b+CZY1AA6AQH/wEdNGAEGI6HoJdEAgwkKn69hwLI 78P5yqfN0Bm/hGv7r6o= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260612124901 20260514100006 43636 afrinic.net. NatjRvCjM8PDS0vmHw7xjYSGL8HrAJMLSHclYBll5HfeVrvla6Rma0Sk+XdXcRYaFpufbAJOfQMV xJjlePFBy0MuwMpL3+czZ6bzwQvMtu/k9hZW9a1m69NQJb5lgSdIs9K3JLhFlXwqdAJSqona1Puk zg225N+FpyLzE1mof6A= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260606081104 20260507110007 43636 afrinic.net. ZcU2s8QvXUWjCVpQKKGke5k1AA1wi7nNszEoez4CFFffQaO9KqEvJdpV+B+h0EpIV+OEr8YlPNlw Kn3SFAES1ooknhqb6y3k/ca/beqjmdcTS1xWAU90CH0rgIfTc6smS6dMLChJ2JMVrZ9wsQuJt8ag MxhwO+teYmhyBJ2AFSs= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260614061653 20260515210006 43636 afrinic.net. mFSSpxwSoJfvs6d/QxsjSp/8jMBG9Jsfl3HGwIBg86KCywDz4ssgddESaD5a9ZgAlDi2UZvjtsM/ 2tuMGWDHzlIkh+uJy0vbvgRj20FCtbSPNzebiwN6a9Vwvq1CAXuP+ZWve7tlDY3SQ2cctCWwf9r5 JmE3Vx3LrwKWnss5xnU= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 13565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260618144358 20260520050005 43636 afrinic.net. UDlZ0mCkvuIBBuovOgsoYhHVPScPFmViLGMPKvrG+oJKB5nFyqxPb5ZiHWxX925w5anbLNNHVKTJ 8ln5kJ6EZy3CdKjB5PYBne2+V6aWXUtRrdISk+TaRzMh0IsiwcLXq2LB7MkGbJw744lnZBnqmQit 3Ep3Rchi/D6ZMIzX3+E= )`
	RRSIG=43636 and DNSKEY=43636 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: