DNSSEC Debugger - afrinic.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 08:41:06 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 45973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to m.root-servers.net for afrinic.net/A
	Received 1171 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1171 octets ;; HEADER SECTION ;; id = 56532 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . TtXhrHBA1jlKKPDjxT1N7dVKt6zbA6csQhB1fJW6cSHpXsDUUUpKlE35D7UXeor0TRDniSf8uzsi xxqZC4DlRdPI6hEsFyII6Gjt/xWnrL3OJQx4yIj6Edadk9NHxF8EkudapV5n78/m+/OsiQVZBHzI EXv4V7oKjNI9ZsmCNcyYj7SqaOpO8kSFbTmpBnGw8bqal/qyOiblCF+mVfSGUCACLVZCGGRRvr+p 5jh+CCS9iL77xO2jE0BC9ABy2LkejsRMe/fv6vmu0o5bVTlPu1IwL+H1rNa/hMXdJFOlL/b8qYOv N7Ge2Xy2LqH40mpKbZ1g7wveuA4Pk6Qa5kMCkA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1160 octets ;; HEADER SECTION ;; id = 48584 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . TtXhrHBA1jlKKPDjxT1N7dVKt6zbA6csQhB1fJW6cSHpXsDUUUpKlE35D7UXeor0TRDniSf8uzsi xxqZC4DlRdPI6hEsFyII6Gjt/xWnrL3OJQx4yIj6Edadk9NHxF8EkudapV5n78/m+/OsiQVZBHzI EXv4V7oKjNI9ZsmCNcyYj7SqaOpO8kSFbTmpBnGw8bqal/qyOiblCF+mVfSGUCACLVZCGGRRvr+p 5jh+CCS9iL77xO2jE0BC9ABy2LkejsRMe/fv6vmu0o5bVTlPu1IwL+H1rNa/hMXdJFOlL/b8qYOv N7Ge2Xy2LqH40mpKbZ1g7wveuA4Pk6Qa5kMCkA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to k.root-servers.net for net/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 44443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . TtXhrHBA1jlKKPDjxT1N7dVKt6zbA6csQhB1fJW6cSHpXsDUUUpKlE35D7UXeor0TRDniSf8uzsi xxqZC4DlRdPI6hEsFyII6Gjt/xWnrL3OJQx4yIj6Edadk9NHxF8EkudapV5n78/m+/OsiQVZBHzI EXv4V7oKjNI9ZsmCNcyYj7SqaOpO8kSFbTmpBnGw8bqal/qyOiblCF+mVfSGUCACLVZCGGRRvr+p 5jh+CCS9iL77xO2jE0BC9ABy2LkejsRMe/fv6vmu0o5bVTlPu1IwL+H1rNa/hMXdJFOlL/b8qYOv N7Ge2Xy2LqH40mpKbZ1g7wveuA4Pk6Qa5kMCkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . TtXhrHBA1jlKKPDjxT1N7dVKt6zbA6csQhB1fJW6cSHpXsDUUUpKlE35D7UXeor0TRDniSf8uzsi xxqZC4DlRdPI6hEsFyII6Gjt/xWnrL3OJQx4yIj6Edadk9NHxF8EkudapV5n78/m+/OsiQVZBHzI EXv4V7oKjNI9ZsmCNcyYj7SqaOpO8kSFbTmpBnGw8bqal/qyOiblCF+mVfSGUCACLVZCGGRRvr+p 5jh+CCS9iL77xO2jE0BC9ABy2LkejsRMe/fv6vmu0o5bVTlPu1IwL+H1rNa/hMXdJFOlL/b8qYOv N7Ge2Xy2LqH40mpKbZ1g7wveuA4Pk6Qa5kMCkA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to a.gtld-servers.net for net/DNSKEY
	Received 371 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 371 octets ;; HEADER SECTION ;; id = 38315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260422141035 20260407140535 37331 net. najS5ey6nS7QF2a0+Wuc4/Vx5oVv4wOC53V4Hx1DtlH9FxmLWtWEzIkWTS2UCIYJ+4FxWTkpBH7d mXJ+QADxQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 t2SrYFBW+j+SfG9o6F55gP5p7TkfKF9qIXXCYzDzv8gg67T/M80Mul4UATJ7yH7F0Ictyl6o6Cd9 +q9mJoeozg== ) ; keytag 1560`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260422141035 20260407140535 37331 net. najS5ey6nS7QF2a0+Wuc4/Vx5oVv4wOC53V4Hx1DtlH9FxmLWtWEzIkWTS2UCIYJ+4FxWTkpBH7d mXJ+QADxQA== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=1560 is now in the chain-of-trust
	DNSKEY=44109 is now in the chain-of-trust
	Query to b.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 589 octets ;; HEADER SECTION ;; id = 13687 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260421031937 20260414020937 44109 net. o1G67Ah8PA2JiWx3aZ6IZfBV3hpfW3a0S10K1F2an94Rf062OvhXlsfhGVWFwHVIi7qrzrLV2CFW GrxJ6Ly0+g== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to m.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 589 octets ;; HEADER SECTION ;; id = 11653 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260421031937 20260414020937 44109 net. o1G67Ah8PA2JiWx3aZ6IZfBV3hpfW3a0S10K1F2an94Rf062OvhXlsfhGVWFwHVIi7qrzrLV2CFW GrxJ6Ly0+g== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to m.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 1079 octets ;; HEADER SECTION ;; id = 57309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260421031937 20260414020937 44109 net. o1G67Ah8PA2JiWx3aZ6IZfBV3hpfW3a0S10K1F2an94Rf062OvhXlsfhGVWFwHVIi7qrzrLV2CFW GrxJ6Ly0+g== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260422032400 20260415021400 44109 net. X/NSJAuEYROo4ojDVu85u8hdpjxY0vUYvpWMyGNHND4j8q+6mPTg7nmTopUk2cauYyxlRdmgxWcx VAxlXaHaxQ== ) ;; ADDITIONAL SECTION (27 records) j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=29929/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20260421031937 20260414020937 44109 net. o1G67Ah8PA2JiWx3aZ6IZfBV3hpfW3a0S10K1F2an94Rf062OvhXlsfhGVWFwHVIi7qrzrLV2CFW GrxJ6Ly0+g== )`
	RRSIG=44109 and DNSKEY=44109 verifies the DS RRset
	DS=29929/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 29929 8 2 cd4e37dba33326ced80384f8c939d49049ec5b6e56bc2444ed6226cb66e0a72d )`
	Query to ns4.apnic.net for afrinic.net/DNSKEY
	Received 911 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 911 octets ;; HEADER SECTION ;; id = 7832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcWeOUU3TD+obRFL4VIitfWD/1JBp5rzIALPGl5NrAldN6QXTjz9bvX0FGit0Jxz9R5H4Hcs yK+swVjTYaJSbWvIp0swn/wlHE1AcVMpUdwOzBY5OsBWDq0SOKDjzOLzw+2ms8pnxqru/xv3/LHt vt5aYjRr8ZaLE71AsLgM614Z ) ; keytag 9348 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAc5xFHnhG7Nm10f4+prACNg9mDLJ6xLO9YTFi2M0IDZ8dKypZ+lrDvbE7gdWZbKUL1H9y/U/ 8I7gLic4PP6shnAHKnoUS2l5+xCShKgQhctDKKIqhd0Y9cVRtVJnwe7LG/jOERk2pGc9pBLw/Tpd 7ZHjnTNB33/JBhKLj8EZMVk7 ) ; keytag 37920 afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260515182822 20260415100006 29929 afrinic.net. aMYAIgHHM9A3HVTcexRrlpWIAAigBBf3kpjFyYN2FTCHPKiTcnR0284YGtUTloEkmOKAB+V7r4yp 8TQ9WwhHtggQRxt6yO88/mhcF3HO5LGId8IHhMei6nrLCFtXNFp2w9drfSy14JyHi2/eeoMoJozO us0jWSj3wmmCPKV8WZ0aDde9tqRcrOCpX2g4B5lUTZkvIMThz9Ddv1+G5KsgXEJk6VYwGXeF8G8n JGhuZEmD4CnrYbz8Gra5+NK1+gJDmUUZ16HZsOLGHsm4vMvtfXWGpFQr72ZN5HqXsCEzsT3XCsDh xXwo2CWQB6vh5/cZ/iHGndgajpNaIpRkvGfyDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAcWeOUU3TD+obRFL4VIitfWD/1JBp5rzIALPGl5NrAldN6QXTjz9bvX0FGit0Jxz9R5H4Hcs yK+swVjTYaJSbWvIp0swn/wlHE1AcVMpUdwOzBY5OsBWDq0SOKDjzOLzw+2ms8pnxqru/xv3/LHt vt5aYjRr8ZaLE71AsLgM614Z ) ; keytag 9348`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAc5xFHnhG7Nm10f4+prACNg9mDLJ6xLO9YTFi2M0IDZ8dKypZ+lrDvbE7gdWZbKUL1H9y/U/ 8I7gLic4PP6shnAHKnoUS2l5+xCShKgQhctDKKIqhd0Y9cVRtVJnwe7LG/jOERk2pGc9pBLw/Tpd 7ZHjnTNB33/JBhKLj8EZMVk7 ) ; keytag 37920`
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaJfVGgojnN5feJFPsrk5S/+W9RAbkVl4tbk67y+/DPpKrFH4Gjoq+hfAEIp5cnvECCa9nKr 6FZ/8vgyF7rWCPDQXK5AeI8YIXnHKsmS/W1JbjQOYyJeeN5KwMvux8R9MQcY/bRPUsrWDWXSvmej wyPXrj2sdHtHzLh4LH8zSFrxqfRR+YCW3faWLI+So+W8dKVbD3lKYunq5ipZwBrDwtx2tdnl8nva jqMu2l6HqevrQFzQc/QIyUnlWsbgzNGWIlsDUgcILV9Tt3jacV30/kMo2KzGT3JmCDFJu9mU7PWP NfGrPQLclUnOk6VUP+VAi4653JGl7ugYG7DbsdYEaFk= ) ; keytag 29929`
	DNSKEY=29929/SEP is now in the chain-of-trust
	DS=29929/SHA-256 verifies DNSKEY=29929/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260515182822 20260415100006 29929 afrinic.net. aMYAIgHHM9A3HVTcexRrlpWIAAigBBf3kpjFyYN2FTCHPKiTcnR0284YGtUTloEkmOKAB+V7r4yp 8TQ9WwhHtggQRxt6yO88/mhcF3HO5LGId8IHhMei6nrLCFtXNFp2w9drfSy14JyHi2/eeoMoJozO us0jWSj3wmmCPKV8WZ0aDde9tqRcrOCpX2g4B5lUTZkvIMThz9Ddv1+G5KsgXEJk6VYwGXeF8G8n JGhuZEmD4CnrYbz8Gra5+NK1+gJDmUUZ16HZsOLGHsm4vMvtfXWGpFQr72ZN5HqXsCEzsT3XCsDh xXwo2CWQB6vh5/cZ/iHGndgajpNaIpRkvGfyDA== )`
	RRSIG=29929 and DNSKEY=29929/SEP verifies the DNSKEY RRset
	DNSKEY=9348 is now in the chain-of-trust
	DNSKEY=37920 is now in the chain-of-trust
	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 39476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1049 octets ;; HEADER SECTION ;; id = 42107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026041709 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260518060657 20260417070006 37920 afrinic.net. FZwq1huNtehV/XHOUcjifeq8gv8iFBw+3dttn4lZdrrtO/gsMF5A+1GwoUB+JXY7jMwYk3UN1V5w 3jq/BaZLG5Yo8BQdKjWJqgE4NVoqstWnhOrkeO0t9oOq3G190z4ksc9CjZLJ5JaIKZwsEq2fo88h +hlGNAUXWIVCwAOF1LU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260506140212 20260406110007 37920 afrinic.net. FuGiPsRwnOqgMC0vFzr0xF25wEEeKRMXwmDjd2vDMpFUArBfj68huXQK/n/XZsxODN69Kqifjde3 VMt+ER80RQV6gGR6NXveK86duY+guaHA1N4OOxWeChzOqj4eiNlV+6e0Q0eS/dxpgT+WDNOzcWvQ A5miG+APpw54vewKg/8= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260428164105 20260329220006 37920 afrinic.net. L2Vooxf9Ts0mJu25os0qJoYVg05kmgf1cbiR7v+Wkv4b+7yfsuWdGa1HIyULie0Ly856XyDBJC05 E5yzlb8CgZUhRinB0hpM3CRD+QnMPyreTxY+FvUXcK+DQh0lmMAdF9uDXKfYF3CfQKMJfPaye1gO 8wfebU0yx2oZWqtDGXA= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260514110353 20260414090006 37920 afrinic.net. u3yVMZahyHxUG7IshhuIRAGHqt4R7eoCDdlwhIc33CL4FyIRWSL9ghDXumYdPTXrb8WkjxU2k2QX SYwY4MDO+z/1W+uxkh/z/lGQJ2k4cNww+mz8edGij23PU4Gq7nZ3yEiDOgUbs1S5d4jVg4FuaOVi bQycnoDMDAD4XIQ209E= ) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 51585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026041709 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260518060657 20260417070006 37920 afrinic.net. FZwq1huNtehV/XHOUcjifeq8gv8iFBw+3dttn4lZdrrtO/gsMF5A+1GwoUB+JXY7jMwYk3UN1V5w 3jq/BaZLG5Yo8BQdKjWJqgE4NVoqstWnhOrkeO0t9oOq3G190z4ksc9CjZLJ5JaIKZwsEq2fo88h +hlGNAUXWIVCwAOF1LU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 60587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026041709 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260518060657 20260417070006 37920 afrinic.net. FZwq1huNtehV/XHOUcjifeq8gv8iFBw+3dttn4lZdrrtO/gsMF5A+1GwoUB+JXY7jMwYk3UN1V5w 3jq/BaZLG5Yo8BQdKjWJqgE4NVoqstWnhOrkeO0t9oOq3G190z4ksc9CjZLJ5JaIKZwsEq2fo88h +hlGNAUXWIVCwAOF1LU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.afrinic.net for afrinic.net/SOA
	Received 261 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 261 octets ;; HEADER SECTION ;; id = 36957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026041709 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260518060657 20260417070006 37920 afrinic.net. FZwq1huNtehV/XHOUcjifeq8gv8iFBw+3dttn4lZdrrtO/gsMF5A+1GwoUB+JXY7jMwYk3UN1V5w 3jq/BaZLG5Yo8BQdKjWJqgE4NVoqstWnhOrkeO0t9oOq3G190z4ksc9CjZLJ5JaIKZwsEq2fo88h +hlGNAUXWIVCwAOF1LU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1049 octets ;; HEADER SECTION ;; id = 32759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2026041709 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20260518060657 20260417070006 37920 afrinic.net. FZwq1huNtehV/XHOUcjifeq8gv8iFBw+3dttn4lZdrrtO/gsMF5A+1GwoUB+JXY7jMwYk3UN1V5w 3jq/BaZLG5Yo8BQdKjWJqgE4NVoqstWnhOrkeO0t9oOq3G190z4ksc9CjZLJ5JaIKZwsEq2fo88h +hlGNAUXWIVCwAOF1LU= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260506140212 20260406110007 37920 afrinic.net. FuGiPsRwnOqgMC0vFzr0xF25wEEeKRMXwmDjd2vDMpFUArBfj68huXQK/n/XZsxODN69Kqifjde3 VMt+ER80RQV6gGR6NXveK86duY+guaHA1N4OOxWeChzOqj4eiNlV+6e0Q0eS/dxpgT+WDNOzcWvQ A5miG+APpw54vewKg/8= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260428164105 20260329220006 37920 afrinic.net. L2Vooxf9Ts0mJu25os0qJoYVg05kmgf1cbiR7v+Wkv4b+7yfsuWdGa1HIyULie0Ly856XyDBJC05 E5yzlb8CgZUhRinB0hpM3CRD+QnMPyreTxY+FvUXcK+DQh0lmMAdF9uDXKfYF3CfQKMJfPaye1gO 8wfebU0yx2oZWqtDGXA= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260514110353 20260414090006 37920 afrinic.net. u3yVMZahyHxUG7IshhuIRAGHqt4R7eoCDdlwhIc33CL4FyIRWSL9ghDXumYdPTXrb8WkjxU2k2QX SYwY4MDO+z/1W+uxkh/z/lGQJ2k4cNww+mz8edGij23PU4Gq7nZ3yEiDOgUbs1S5d4jVg4FuaOVi bQycnoDMDAD4XIQ209E= ) ;; { "EDNS-VERSION": 0 }
	Query to rirns.arin.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 34144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

afrinic.net

	Query to ns2.afrinic.net for afrinic.net/A
	Received 227 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 227 octets ;; HEADER SECTION ;; id = 24967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns2.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 49895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

afrinic.net

	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 8270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260506140212 20260406110007 37920 afrinic.net. FuGiPsRwnOqgMC0vFzr0xF25wEEeKRMXwmDjd2vDMpFUArBfj68huXQK/n/XZsxODN69Kqifjde3 VMt+ER80RQV6gGR6NXveK86duY+guaHA1N4OOxWeChzOqj4eiNlV+6e0Q0eS/dxpgT+WDNOzcWvQ A5miG+APpw54vewKg/8= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260428164105 20260329220006 37920 afrinic.net. L2Vooxf9Ts0mJu25os0qJoYVg05kmgf1cbiR7v+Wkv4b+7yfsuWdGa1HIyULie0Ly856XyDBJC05 E5yzlb8CgZUhRinB0hpM3CRD+QnMPyreTxY+FvUXcK+DQh0lmMAdF9uDXKfYF3CfQKMJfPaye1gO 8wfebU0yx2oZWqtDGXA= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260514110353 20260414090006 37920 afrinic.net. u3yVMZahyHxUG7IshhuIRAGHqt4R7eoCDdlwhIc33CL4FyIRWSL9ghDXumYdPTXrb8WkjxU2k2QX SYwY4MDO+z/1W+uxkh/z/lGQJ2k4cNww+mz8edGij23PU4Gq7nZ3yEiDOgUbs1S5d4jVg4FuaOVi bQycnoDMDAD4XIQ209E= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260429033557 20260330050007 37920 afrinic.net. LzcDbsk7NegFd1LhpbzCAqpHa+OjuMuGMdlouMbHvcPpJu2uqZSEhDeqcEXXQXMgwslMU/41MiUI C8jxUXPio9TS9XNZEtgo9IbzxDtSUlwRdsyMU9LWKwwduowspvL5nv1VMb/kykDd+Kj38cvnx0L8 kNwG2h+0KxlATsT0wYI= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns3.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 22635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20260506140212 20260406110007 37920 afrinic.net. FuGiPsRwnOqgMC0vFzr0xF25wEEeKRMXwmDjd2vDMpFUArBfj68huXQK/n/XZsxODN69Kqifjde3 VMt+ER80RQV6gGR6NXveK86duY+guaHA1N4OOxWeChzOqj4eiNlV+6e0Q0eS/dxpgT+WDNOzcWvQ A5miG+APpw54vewKg/8= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20260428164105 20260329220006 37920 afrinic.net. L2Vooxf9Ts0mJu25os0qJoYVg05kmgf1cbiR7v+Wkv4b+7yfsuWdGa1HIyULie0Ly856XyDBJC05 E5yzlb8CgZUhRinB0hpM3CRD+QnMPyreTxY+FvUXcK+DQh0lmMAdF9uDXKfYF3CfQKMJfPaye1gO 8wfebU0yx2oZWqtDGXA= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20260514110353 20260414090006 37920 afrinic.net. u3yVMZahyHxUG7IshhuIRAGHqt4R7eoCDdlwhIc33CL4FyIRWSL9ghDXumYdPTXrb8WkjxU2k2QX SYwY4MDO+z/1W+uxkh/z/lGQJ2k4cNww+mz8edGij23PU4Gq7nZ3yEiDOgUbs1S5d4jVg4FuaOVi bQycnoDMDAD4XIQ209E= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20260429033557 20260330050007 37920 afrinic.net. LzcDbsk7NegFd1LhpbzCAqpHa+OjuMuGMdlouMbHvcPpJu2uqZSEhDeqcEXXQXMgwslMU/41MiUI C8jxUXPio9TS9XNZEtgo9IbzxDtSUlwRdsyMU9LWKwwduowspvL5nv1VMb/kykDd+Kj38cvnx0L8 kNwG2h+0KxlATsT0wYI= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20260504094556 20260404230628 37920 afrinic.net. oldzsTQmYg44YOnkr77HeGp2wSZhNspklGuOTfy3w6qdWBVhF5dAxe4+VWLH8FnfwCQXtSWA1D1e Ylr7oA2QjjWAS0GQv6Im6z0HzKswxJiHn1eKjmEZx4rzMGwqBXzwGbSFXJnBQL/g9ctQCQLDUuqr JsDtjwpSy356wt6QKJc= )`
	RRSIG=37920 and DNSKEY=37920 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: