DNSSEC Debugger - afrinic.net

Domain Name:

Time: 2025-10-26 17:41:13 UTC

Analyzing DNSSEC problems for afrinic.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 57068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for afrinic.net/A
	Received 1168 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1168 octets ;; HEADER SECTION ;; id = 18189 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251108050000 20251026040000 61809 . fTztLOY80Y/uA8OvWiroIsvItAp/dL2IEJSH4GZrUXTkLtcLgODeKYmONvaPnE47F7fE4QnP8YDJ wxukQfSCbW0q2FdLT/4SYf4NoeX6IsddZ4ULqKkfmDkDi7Z/fh4tfjUf/uVijUNzLrgJlK+ex30y LLz5Fg8oQEcBtVAdUxU7H/KURAdZLQGELlen57Te5bgMukULvwpI7j9owx7ddtlY4RAzBqhM8JuM TbpzCg9N0cCUUWQLISq1ib4bVGnX4PKcWb86feYcnfZk3uhRZVdCVd2KoMXH5TVct/gG5qI944Ao lUS7TKVkn5qa3y6+mDQ4T3IGeTp1VZPoP21xeA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for net/DNSKEY
	Received 1160 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1160 octets ;; HEADER SECTION ;; id = 47370 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251108050000 20251026040000 61809 . fTztLOY80Y/uA8OvWiroIsvItAp/dL2IEJSH4GZrUXTkLtcLgODeKYmONvaPnE47F7fE4QnP8YDJ wxukQfSCbW0q2FdLT/4SYf4NoeX6IsddZ4ULqKkfmDkDi7Z/fh4tfjUf/uVijUNzLrgJlK+ex30y LLz5Fg8oQEcBtVAdUxU7H/KURAdZLQGELlen57Te5bgMukULvwpI7j9owx7ddtlY4RAzBqhM8JuM TbpzCg9N0cCUUWQLISq1ib4bVGnX4PKcWb86feYcnfZk3uhRZVdCVd2KoMXH5TVct/gG5qI944Ao lUS7TKVkn5qa3y6+mDQ4T3IGeTp1VZPoP21xeA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to l.root-servers.net for net/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 54128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251108050000 20251026040000 61809 . fTztLOY80Y/uA8OvWiroIsvItAp/dL2IEJSH4GZrUXTkLtcLgODeKYmONvaPnE47F7fE4QnP8YDJ wxukQfSCbW0q2FdLT/4SYf4NoeX6IsddZ4ULqKkfmDkDi7Z/fh4tfjUf/uVijUNzLrgJlK+ex30y LLz5Fg8oQEcBtVAdUxU7H/KURAdZLQGELlen57Te5bgMukULvwpI7j9owx7ddtlY4RAzBqhM8JuM TbpzCg9N0cCUUWQLISq1ib4bVGnX4PKcWb86feYcnfZk3uhRZVdCVd2KoMXH5TVct/gG5qI944Ao lUS7TKVkn5qa3y6+mDQ4T3IGeTp1VZPoP21xeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20251108050000 20251026040000 61809 . fTztLOY80Y/uA8OvWiroIsvItAp/dL2IEJSH4GZrUXTkLtcLgODeKYmONvaPnE47F7fE4QnP8YDJ wxukQfSCbW0q2FdLT/4SYf4NoeX6IsddZ4ULqKkfmDkDi7Z/fh4tfjUf/uVijUNzLrgJlK+ex30y LLz5Fg8oQEcBtVAdUxU7H/KURAdZLQGELlen57Te5bgMukULvwpI7j9owx7ddtlY4RAzBqhM8JuM TbpzCg9N0cCUUWQLISq1ib4bVGnX4PKcWb86feYcnfZk3uhRZVdCVd2KoMXH5TVct/gG5qI944Ao lUS7TKVkn5qa3y6+mDQ4T3IGeTp1VZPoP21xeA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to m.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 291 octets ;; HEADER SECTION ;; id = 17232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251103141035 20251019140535 37331 net. jrfgUSnNiuYsoaveCO0do2wYo2uTEM6Nmxj5G8Itc2hyX7rVZuoMQqA/lsGe1sVhCDImxzikFMgM SHJjcQau+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251103141035 20251019140535 37331 net. jrfgUSnNiuYsoaveCO0do2wYo2uTEM6Nmxj5G8Itc2hyX7rVZuoMQqA/lsGe1sVhCDImxzikFMgM SHJjcQau+A== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	Query to i.gtld-servers.net for afrinic.net/A
	Received 589 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 589 octets ;; HEADER SECTION ;; id = 52464 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20251031030452 20251024015452 17133 net. D6OJG7jpR8g2rZivTrIngr2TCmXzvO1Of+fF5fDRuLvxfgS1fMhJmS5f1/IpAWsyiL+yptWa4gHv yHbHShwbiA== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to d.gtld-servers.net for afrinic.net/DNSKEY
	Received 589 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 589 octets ;; HEADER SECTION ;; id = 52319 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) afrinic.net. 172800 IN NS ns1.afrinic.net. afrinic.net. 172800 IN NS ns4.apnic.net. afrinic.net. 172800 IN NS ns3.afrinic.net. afrinic.net. 172800 IN NS ns2.afrinic.net. afrinic.net. 172800 IN NS afrinic.authdns.ripe.net. afrinic.net. 172800 IN NS rirns.arin.net. afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20251031030452 20251024015452 17133 net. D6OJG7jpR8g2rZivTrIngr2TCmXzvO1Of+fF5fDRuLvxfgS1fMhJmS5f1/IpAWsyiL+yptWa4gHv yHbHShwbiA== ) ;; ADDITIONAL SECTION (13 records) ns1.afrinic.net. 172800 IN A 196.216.2.1 ns1.afrinic.net. 172800 IN AAAA 2001:42d0::200:2:1 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 ns2.afrinic.net. 172800 IN A 196.216.168.10 ns2.afrinic.net. 172800 IN AAAA 2001:43f8:120::10 afrinic.authdns.ripe.net. 172800 IN A 193.0.9.8 afrinic.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::8 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone afrinic.net

afrinic.net

	Checking DS between net and afrinic.net
	Query to c.gtld-servers.net for afrinic.net/DS
	Received 1079 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 1079 octets ;; HEADER SECTION ;; id = 41115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DS ;; ANSWER SECTION (2 records) afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec ) afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20251031030452 20251024015452 17133 net. D6OJG7jpR8g2rZivTrIngr2TCmXzvO1Of+fF5fDRuLvxfgS1fMhJmS5f1/IpAWsyiL+yptWa4gHv yHbHShwbiA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20251101031242 20251025020242 17133 net. RsJwcNn2pUrgbbkbIoO+biMJZw+X/n0TcuRhFyOOtS7cXsjMvtSw3K9cUk45QNnL4IS4lLxNPgpa OhaEfODTbQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for afrinic.net in the net zone
	DS=26750/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`afrinic.net. 86400 IN RRSIG ( DS 13 2 86400 20251031030452 20251024015452 17133 net. D6OJG7jpR8g2rZivTrIngr2TCmXzvO1Of+fF5fDRuLvxfgS1fMhJmS5f1/IpAWsyiL+yptWa4gHv yHbHShwbiA== )`
	RRSIG=17133 and DNSKEY=17133 verifies the DS RRset
	DS=26750/SHA-256 is now in the chain-of-trust
	`afrinic.net. 86400 IN DS ( 26750 8 2 3c56b5b80448a3f535a274d7a3d9e4d1f2ead0aa0a562e17a5b369d3a75e38ec )`
	Query to ns4.apnic.net for afrinic.net/DNSKEY
	Received 911 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 911 octets ;; HEADER SECTION ;; id = 11353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN DNSKEY ;; ANSWER SECTION (4 records) afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAciublOXBKv9PdDJpW2P0e8bZpQuV+Gc45E7X0/0a9CyfiQ1RoYGzHT1g40A8VoDD9NVB6X1 dXIBpzmsXFiqTLAj5WI5fEKXzA/jgiRK2VksLfaRX/5DiWzR0UCHo8HumBL0ex2uI/vDHfWObJEl hq0tI+FtjCD7HE2JR1xvgB/N ) ; keytag 19555 afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAb0kEeLokIklWaugSeNYQit3vY9cLFjH7PHjUGnnATFGWgSzvwhRC5JTEBZXRhBisMUnTxg1 69iIrNruvF5/BcDPEZxxlQkU62M7466gnjaJDvASTAKV4fnRLM+Xt9hXEbiGd/fZR7pcbFXmZmSl 13gSZfFHLHEWe2vWakQRJG2h ) ; keytag 60169 afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750 afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251124013059 20251024163044 26750 afrinic.net. QPejQDk0b0I0J3FUQItQGFwew0+iwmw4/9DcfWbuDcbm/6A01F7W8huyFWF2tctSycRzU52Xzh3f BRU6tSf9IZNcOk5uGXs4vO9Rj8PD7N8BJ5rKw4GQmRk9JFZv/UPeIOGiD5rWlpnDJ770Arh1zHc/ 3WuBhMeQBCG0dLq2GCuXFrViwoVYwxGGbHKMMuUJHZwh+svK1TXKqcV3tiZCW4Cfy3Vn/pcu2ULN TBWlRNcgcusVR1vw4jytHmfdFlAaWDxeoLOAuIi0hQtwNttneTqbLLb3DeAUxeo/B+6IVfx+e0Rc lLJ4VyhhAgzGYXobujs11INn7QVugJ5bhhK8+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for afrinic.net
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAciublOXBKv9PdDJpW2P0e8bZpQuV+Gc45E7X0/0a9CyfiQ1RoYGzHT1g40A8VoDD9NVB6X1 dXIBpzmsXFiqTLAj5WI5fEKXzA/jgiRK2VksLfaRX/5DiWzR0UCHo8HumBL0ex2uI/vDHfWObJEl hq0tI+FtjCD7HE2JR1xvgB/N ) ; keytag 19555`
	`afrinic.net. 3600 IN DNSKEY ( 256 3 8 AwEAAb0kEeLokIklWaugSeNYQit3vY9cLFjH7PHjUGnnATFGWgSzvwhRC5JTEBZXRhBisMUnTxg1 69iIrNruvF5/BcDPEZxxlQkU62M7466gnjaJDvASTAKV4fnRLM+Xt9hXEbiGd/fZR7pcbFXmZmSl 13gSZfFHLHEWe2vWakQRJG2h ) ; keytag 60169`
	`afrinic.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5DpdMok9VRWJ6k9VCBal4NaA+n/oJGxVnmoVLxDv6WarFLnRUOPF+qh23ubU8h/em3eLDL TWS9oz8tmcNKNxSx6c75n4g0nUGghUJdz/V4TO//QA3WJ5kvinpw6p4MMCv2fXkcwy6/Xo/jSnz8 a0TF+ve1S0zM0wZV9nasOnNycGEBNQqFGTSnrT83vrqsZsCSbDU9Eh8iUs8p5N5Y3rvTVfzXcMLA EL24t4Kzxcvd9X/HBgXhVchGzmcEtF9f6/yydipiEin2oO6tDA57bozLC3xVZce+bzFl3trOzkfH nYfd2Oq94zNlDl0mL5nnU7vUT+HIae48Und6jKb2GkM= ) ; keytag 26750`
	DNSKEY=26750/SEP is now in the chain-of-trust
	DS=26750/SHA-256 verifies DNSKEY=26750/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`afrinic.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251124013059 20251024163044 26750 afrinic.net. QPejQDk0b0I0J3FUQItQGFwew0+iwmw4/9DcfWbuDcbm/6A01F7W8huyFWF2tctSycRzU52Xzh3f BRU6tSf9IZNcOk5uGXs4vO9Rj8PD7N8BJ5rKw4GQmRk9JFZv/UPeIOGiD5rWlpnDJ770Arh1zHc/ 3WuBhMeQBCG0dLq2GCuXFrViwoVYwxGGbHKMMuUJHZwh+svK1TXKqcV3tiZCW4Cfy3Vn/pcu2ULN TBWlRNcgcusVR1vw4jytHmfdFlAaWDxeoLOAuIi0hQtwNttneTqbLLb3DeAUxeo/B+6IVfx+e0Rc lLJ4VyhhAgzGYXobujs11INn7QVugJ5bhhK8+A== )`
	RRSIG=26750 and DNSKEY=26750/SEP verifies the DNSKEY RRset
	DNSKEY=19555 is now in the chain-of-trust
	DNSKEY=60169 is now in the chain-of-trust
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 49110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251116061510 20251016190006 60169 afrinic.net. L9/M3TZ4KWx8NIPFHnTle2wB4oHft6D0fOA/og6KZWgZhbPiDd9Fcb8Tf66bQtEXp14TdPNdDP+4 FxPirwPmCxew+5Z0G6JpdbL848nKEJOhozArzEQ/f3XQPSOQoXfBNMNQMW97r+dcg4MY0kftJYEY otR69jZH6vwDfn3DiB4= ) ;; { "EDNS-VERSION": 0 }
	ns2.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1049 octets ;; HEADER SECTION ;; id = 49202 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025102617 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251125081045 20251026160006 19555 afrinic.net. WY4p8dwZUk88D3dnZ2yz54KFZzYr5QVQ0zMkv6A5vKcmdlqWjr2jnjTzsH2dqOqXgdFhyD1+QFWc 3mW/YnFIpsAszby+QYiMFaFhGHMAaRt0K24CiK/xAvpXRZg5UFnXh4CSlHuiv0hfIjhlB2XZVJeX i8enPEymR0c0ZKkc3ak= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for afrinic.net/SOA
	Received 261 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 261 octets ;; HEADER SECTION ;; id = 11323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025102617 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251125081045 20251026160006 19555 afrinic.net. WY4p8dwZUk88D3dnZ2yz54KFZzYr5QVQ0zMkv6A5vKcmdlqWjr2jnjTzsH2dqOqXgdFhyD1+QFWc 3mW/YnFIpsAszby+QYiMFaFhGHMAaRt0K24CiK/xAvpXRZg5UFnXh4CSlHuiv0hfIjhlB2XZVJeX i8enPEymR0c0ZKkc3ak= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to rirns.arin.net for afrinic.net/SOA
	Received 261 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 261 octets ;; HEADER SECTION ;; id = 10279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025102617 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251125081045 20251026160006 19555 afrinic.net. WY4p8dwZUk88D3dnZ2yz54KFZzYr5QVQ0zMkv6A5vKcmdlqWjr2jnjTzsH2dqOqXgdFhyD1+QFWc 3mW/YnFIpsAszby+QYiMFaFhGHMAaRt0K24CiK/xAvpXRZg5UFnXh4CSlHuiv0hfIjhlB2XZVJeX i8enPEymR0c0ZKkc3ak= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.afrinic.net for afrinic.net/SOA
	Received 1049 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1049 octets ;; HEADER SECTION ;; id = 28185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025102617 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251125081045 20251026160006 19555 afrinic.net. WY4p8dwZUk88D3dnZ2yz54KFZzYr5QVQ0zMkv6A5vKcmdlqWjr2jnjTzsH2dqOqXgdFhyD1+QFWc 3mW/YnFIpsAszby+QYiMFaFhGHMAaRt0K24CiK/xAvpXRZg5UFnXh4CSlHuiv0hfIjhlB2XZVJeX i8enPEymR0c0ZKkc3ak= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (9 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ;; { "EDNS-VERSION": 0 }
	Query to afrinic.authdns.ripe.net for afrinic.net/SOA
	Received 261 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 261 octets ;; HEADER SECTION ;; id = 44428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN SOA ;; ANSWER SECTION (2 records) afrinic.net. 3600 IN SOA ( ns1.afrinic.net. dns-admin.afrinic.net. 2025102617 ;serial 14400 ;refresh 3600 ;retry 36288000 ;expire 3600 ;minimum ) afrinic.net. 3600 IN RRSIG ( SOA 8 2 3600 20251125081045 20251026160006 19555 afrinic.net. WY4p8dwZUk88D3dnZ2yz54KFZzYr5QVQ0zMkv6A5vKcmdlqWjr2jnjTzsH2dqOqXgdFhyD1+QFWc 3mW/YnFIpsAszby+QYiMFaFhGHMAaRt0K24CiK/xAvpXRZg5UFnXh4CSlHuiv0hfIjhlB2XZVJeX i8enPEymR0c0ZKkc3ak= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.afrinic.net for afrinic.net/A
	Received 1097 bytes from 196.216.168.10
	;; Response received from [196.216.168.10] 1097 octets ;; HEADER SECTION ;; id = 18246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (7 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns2.afrinic.net. 60 IN A 196.216.168.10 ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ns3.afrinic.net. 3600 IN A 204.61.216.100 ns3.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251116061510 20251016190006 60169 afrinic.net. L9/M3TZ4KWx8NIPFHnTle2wB4oHft6D0fOA/og6KZWgZhbPiDd9Fcb8Tf66bQtEXp14TdPNdDP+4 FxPirwPmCxew+5Z0G6JpdbL848nKEJOhozArzEQ/f3XQPSOQoXfBNMNQMW97r+dcg4MY0kftJYEY otR69jZH6vwDfn3DiB4= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

afrinic.net

	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 14870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns3.afrinic.net for afrinic.net/A
	Received 1190 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 1190 octets ;; HEADER SECTION ;; id = 4602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

afrinic.net

	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 36248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ;; { "EDNS-VERSION": 0 }
	ns1.afrinic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns1.afrinic.net for afrinic.net/A
	Received 1190 bytes from 196.216.2.1
	;; Response received from [196.216.2.1] 1190 octets ;; HEADER SECTION ;; id = 43078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (7 records) afrinic.net. 3600 IN NS ns3.afrinic.net. afrinic.net. 3600 IN NS ns1.afrinic.net. afrinic.net. 3600 IN NS rirns.arin.net. afrinic.net. 3600 IN NS afrinic.authdns.ripe.net. afrinic.net. 3600 IN NS ns2.afrinic.net. afrinic.net. 3600 IN NS ns4.apnic.net. afrinic.net. 3600 IN RRSIG ( NS 8 2 3600 20251125204842 20251026000005 19555 afrinic.net. ih2nVBOXbPug2HYvvE+E+eZHel0uAjjrMnQMkbyUSa1dSKZvgDvHZYQOFRCw6b06rJSPvn2loUpn EhogBxV8GHldQAavqsb7zsa4nW2/xCoLu00Hlaro9YYHxIcVUtFeppPILloatdR/Lbx4buTLM4x9 RI4XEAbzD0K4Qu5rSi0= ) ;; ADDITIONAL SECTION (10 records) ns1.afrinic.net. 3600 IN A 196.216.2.1 ns2.afrinic.net. 60 IN A 196.216.168.10 ns3.afrinic.net. 3600 IN A 204.61.216.100 ns1.afrinic.net. 3600 IN AAAA 2001:42d0::200:2:1 ns2.afrinic.net. 60 IN AAAA 2001:43f8:120::10 ns3.afrinic.net. 3600 IN AAAA 2001:500:14:6100:ad::1 ns1.afrinic.net. 3600 IN RRSIG ( A 8 3 3600 20251119082437 20251020000005 60169 afrinic.net. D8IWAlIMWpjYfVvvY6p2Aj47vrJp/tZ/WZqjYmYmDQu2ZUYLam816JE5PoOG68eVbOdHvildrIF/ p/UqJVnP6t1pqMInepWtaGP14FhvVXQEU/DsxJoCOGy0VFL0XoSjIO2Goa/HCXCfdfMdlu8z94eY LBNBxdpJph2yynArQ/Q= ) ns1.afrinic.net. 3600 IN RRSIG ( AAAA 8 3 3600 20251110201509 20251012140006 60169 afrinic.net. UbG/pFcF7Z5laJVtuveDCVwf2Y0FY6/B/Zb0MxItm6vN0UIdbDSx4UqjbEZ7LIGhFlWkq7zoubtf TlPHim8McQkn+oHQefONVKOedhTe995OL7UqbBYghMq7dp8ptjXO/MeXH/6qrQHzeCH8hZO/ip38 VojWtVUwL8KBYQDyGRo= ) ns2.afrinic.net. 60 IN RRSIG ( A 8 3 60 20251119035832 20251019130006 60169 afrinic.net. efixevqP3242/nu0IQzMNlMsRk5TSa6lreHk5NsSPEITvZ9Qn0QcEpCCcSiP3Z9wD4EkPzIteQ9q k0Mg/yvrkC7xnh3IJmZiYp1LgxqCoT7NJ4bzuZNNwhE4wIGbAQaF7Hb6MI8kB3vLm9gFFR7R7xZT 4jnG2Eq23gtk65u1GcA= ) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

afrinic.net

	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 48345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to rirns.arin.net for afrinic.net/A
	Received 227 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 227 octets ;; HEADER SECTION ;; id = 43842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

afrinic.net

	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 7888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to ns4.apnic.net for afrinic.net/A
	Received 227 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 227 octets ;; HEADER SECTION ;; id = 33528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

afrinic.net

	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 61719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.authdns.ripe.net is authoritative for afrinic.net
	Found RRSIG signed by afrinic.net zone
	Query to afrinic.authdns.ripe.net for afrinic.net/A
	Received 227 bytes from 193.0.9.8
	;; Response received from [193.0.9.8] 227 octets ;; HEADER SECTION ;; id = 24415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; afrinic.net. IN A ;; ANSWER SECTION (2 records) afrinic.net. 60 IN A 196.216.3.4 afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	afrinic.net A RR has value 196.216.3.4
	Found 1 RRSIGs over A RRset
	`afrinic.net. 60 IN RRSIG ( A 8 2 60 20251104083110 20251005103208 60169 afrinic.net. QkAfewvnuga/yer1UxYXi3BrdxsWTEkSwPISAbzEDZ45UIyoYf8DDh4/dZiS+I34g4sGDwBpeqyL i52v/d4HiBynu3HnGOpVO11yJmkffQ6cVIZnlbmKOD1WtV+VVxC2/9m0xQsAuQZ73h30LG9mMGNy ye88TchuGNcy029aTSQ= )`
	RRSIG=60169 and DNSKEY=60169 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test afrinic.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: