DNSSEC Debugger

Domain Name:

Time: 2025-07-10 14:16:50 UTC

Analyzing DNSSEC problems for all.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1417 octets ;; HEADER SECTION ;; id = 54876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for all.id/A
	Received 685 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 685 octets ;; HEADER SECTION ;; id = 60754 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . G7R/FRcxl0odsyvOgycqnumg8uxJpUeBEcYpFtY+fnLqPLlmzkmXB9p/a4U9MMqzD0oBvpnkjX6g 5FTSMFLGDNTT2AcxXtJLNj9T+sMSKNLqGnJQIlyO3ricTLJawrvMw1SMwm6nazmd4gWjKefQUTrm /75kR9+phPjhlS+zUI4f5ZXuMKyg2SU9ApzvD6X84AmKq47PiwZh2vKRx4qCGVIHCvyF6XqPHcpL p5N/0DtMOX92/rFePTH9mOEPO79iWWJAsGGnVZ+6dBP7iDUg8iKcM0NJlwqr0mqhfuAlh1lY03AV VECHe8cSzJ/4LHnsZv7qStNS8Ih8K0eXJLL76w== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for id/DNSKEY
	Received 683 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 683 octets ;; HEADER SECTION ;; id = 290 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS c.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . G7R/FRcxl0odsyvOgycqnumg8uxJpUeBEcYpFtY+fnLqPLlmzkmXB9p/a4U9MMqzD0oBvpnkjX6g 5FTSMFLGDNTT2AcxXtJLNj9T+sMSKNLqGnJQIlyO3ricTLJawrvMw1SMwm6nazmd4gWjKefQUTrm /75kR9+phPjhlS+zUI4f5ZXuMKyg2SU9ApzvD6X84AmKq47PiwZh2vKRx4qCGVIHCvyF6XqPHcpL p5N/0DtMOX92/rFePTH9mOEPO79iWWJAsGGnVZ+6dBP7iDUg8iKcM0NJlwqr0mqhfuAlh1lY03AV VECHe8cSzJ/4LHnsZv7qStNS8Ih8K0eXJLL76w== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to b.root-servers.net for id/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 34099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . G7R/FRcxl0odsyvOgycqnumg8uxJpUeBEcYpFtY+fnLqPLlmzkmXB9p/a4U9MMqzD0oBvpnkjX6g 5FTSMFLGDNTT2AcxXtJLNj9T+sMSKNLqGnJQIlyO3ricTLJawrvMw1SMwm6nazmd4gWjKefQUTrm /75kR9+phPjhlS+zUI4f5ZXuMKyg2SU9ApzvD6X84AmKq47PiwZh2vKRx4qCGVIHCvyF6XqPHcpL p5N/0DtMOX92/rFePTH9mOEPO79iWWJAsGGnVZ+6dBP7iDUg8iKcM0NJlwqr0mqhfuAlh1lY03AV VECHe8cSzJ/4LHnsZv7qStNS8Ih8K0eXJLL76w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . G7R/FRcxl0odsyvOgycqnumg8uxJpUeBEcYpFtY+fnLqPLlmzkmXB9p/a4U9MMqzD0oBvpnkjX6g 5FTSMFLGDNTT2AcxXtJLNj9T+sMSKNLqGnJQIlyO3ricTLJawrvMw1SMwm6nazmd4gWjKefQUTrm /75kR9+phPjhlS+zUI4f5ZXuMKyg2SU9ApzvD6X84AmKq47PiwZh2vKRx4qCGVIHCvyF6XqPHcpL p5N/0DtMOX92/rFePTH9mOEPO79iWWJAsGGnVZ+6dBP7iDUg8iKcM0NJlwqr0mqhfuAlh1lY03AV VECHe8cSzJ/4LHnsZv7qStNS8Ih8K0eXJLL76w== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to ns4.apnic.net for id/DNSKEY
	Received 873 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 873 octets ;; HEADER SECTION ;; id = 2676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (3 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250726023113 20250626020511 26887 id. EZXtr5/zEtXK4r0lI52vXVSK2sJBNBzRf5uoUEKfXLyhVuF9tKeEfoYiesswx6JnBEmAQhQFhay3 cdQCBkCN8UIF7VGN42gz1ydeeUfTT4u9J1Ng99AB1Qt7nDDulRMZODMu1CNTU1MISqX8y3Wyp2+L xLbJptZ56YjVsmvEMtc79ddPKXk299Dl/7MMGRo1SKGH5onu1fLkOKAr59vN8wcyordkGxAFQlxk GcifJ7Mux74d8Dwkjgbri61u9VV7mAiVXn6LzsqTPCaLMtsw9sueZa5Vx9GrvltZKi0Lqoqz5L7J a9YRGIW6zy+ba2ijp637qrW+ETv273+A4Yqjeg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250726023113 20250626020511 26887 id. EZXtr5/zEtXK4r0lI52vXVSK2sJBNBzRf5uoUEKfXLyhVuF9tKeEfoYiesswx6JnBEmAQhQFhay3 cdQCBkCN8UIF7VGN42gz1ydeeUfTT4u9J1Ng99AB1Qt7nDDulRMZODMu1CNTU1MISqX8y3Wyp2+L xLbJptZ56YjVsmvEMtc79ddPKXk299Dl/7MMGRo1SKGH5onu1fLkOKAr59vN8wcyordkGxAFQlxk GcifJ7Mux74d8Dwkjgbri61u9VV7mAiVXn6LzsqTPCaLMtsw9sueZa5Vx9GrvltZKi0Lqoqz5L7J a9YRGIW6zy+ba2ijp637qrW+ETv273+A4Yqjeg== )`
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to ns4.apnic.net for all.id/A
	Received 496 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 496 octets ;; HEADER SECTION ;; id = 10343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20250724141114 20250624134459 22449 id. XzmOB/mWAif4wK96Z1wVy6+JkelWE+QPyDvw1ocOmf3adNMqEnT4CGZPYUJuxhE38d4g4QSCXHK7 ankdu9KI0VtrYutVNF+8AXDA8ke1gl93F3Uh2GAqpQh1CHymVgbn0ev+epUGeeaFE/zi7wYJxZ9l xvWdV8iKjTPLb8yK+EvL7GpjBDuojKYGARkkpLRLME3t8jCTIJISK6QWRQkmiOd3nuqMF7jqMdKs UI98yV+/AmAFrtwTzseSo0E2EPD4EFR9t3IsFbDz12DCPIUb6Rc1i97GzlFrT5U7vS/MB9Itdqm0 qd0pceJDarfbGeuYge3pgec46aw9aTf1tplFQA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.dns.id for all.id/DNSKEY
	Received 496 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 496 octets ;; HEADER SECTION ;; id = 34066 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20250724141114 20250624134459 22449 id. XzmOB/mWAif4wK96Z1wVy6+JkelWE+QPyDvw1ocOmf3adNMqEnT4CGZPYUJuxhE38d4g4QSCXHK7 ankdu9KI0VtrYutVNF+8AXDA8ke1gl93F3Uh2GAqpQh1CHymVgbn0ev+epUGeeaFE/zi7wYJxZ9l xvWdV8iKjTPLb8yK+EvL7GpjBDuojKYGARkkpLRLME3t8jCTIJISK6QWRQkmiOd3nuqMF7jqMdKs UI98yV+/AmAFrtwTzseSo0E2EPD4EFR9t3IsFbDz12DCPIUb6Rc1i97GzlFrT5U7vS/MB9Itdqm0 qd0pceJDarfbGeuYge3pgec46aw9aTf1tplFQA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone all.id

all.id

	Checking DS between id and all.id
	Query to d.dns.id for all.id/DS
	Received 705 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 705 octets ;; HEADER SECTION ;; id = 53198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) id. 86400 IN SOA ( b.dns.id. hostmaster.pandi.id. 2025270328 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 172800 ;minimum ) all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC id. 86400 IN RRSIG ( SOA 8 1 86400 20250809141550 20250710131550 22449 id. xc561Lm1nwuEXKxA+OXyVwmGQeumeCB23WLwdrYCd63QqSkvo1vIUs19FgZLQ6AO8whLwtaW5Vej rLV2CNYK+uE7GdFkGwHGpPv7WCPCbRjowQ3c6GL50fn0rqAg1QbJWzQCzNV2ByhWbDEiPR7XV2Oc rjEmdMSSc+OUcHf4F4hPqBJpGyQ7tiRXdwrkoZntfHlql6N5RHam1PySkv8GN/IRI+Jgr/kaYqwC oyDrwCO4SMRSbt1PICeqaVunhns4TKtOlkbVo4fv0X+D5AySWLRMjQ5Y37OiX9/sVcoqTFCOexvq N3mcPCU2IHn3gVxFCtJq4v7FW37z36bfXGzmdQ== ) all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20250724141114 20250624134459 22449 id. XzmOB/mWAif4wK96Z1wVy6+JkelWE+QPyDvw1ocOmf3adNMqEnT4CGZPYUJuxhE38d4g4QSCXHK7 ankdu9KI0VtrYutVNF+8AXDA8ke1gl93F3Uh2GAqpQh1CHymVgbn0ev+epUGeeaFE/zi7wYJxZ9l xvWdV8iKjTPLb8yK+EvL7GpjBDuojKYGARkkpLRLME3t8jCTIJISK6QWRQkmiOd3nuqMF7jqMdKs UI98yV+/AmAFrtwTzseSo0E2EPD4EFR9t3IsFbDz12DCPIUb6Rc1i97GzlFrT5U7vS/MB9Itdqm0 qd0pceJDarfbGeuYge3pgec46aw9aTf1tplFQA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for all.id in the id zone
	Query to ns-1761.awsdns-28.co.uk for all.id/DNSKEY
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 10151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 1731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-985.awsdns-59.net is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/SOA
	Received 236 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 236 octets ;; HEADER SECTION ;; id = 279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1157.awsdns-16.org for all.id/SOA
	Received 236 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 236 octets ;; HEADER SECTION ;; id = 31409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1761.awsdns-28.co.uk for all.id/SOA
	Received 236 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 236 octets ;; HEADER SECTION ;; id = 58032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 46654 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 62808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1157.awsdns-16.org is authoritative for all.id
	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 45779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 15675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1761.awsdns-28.co.uk is authoritative for all.id
	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 26400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 10451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-174.awsdns-21.com is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 64502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test all.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: