DNSSEC Debugger

Domain Name:

Time: 2026-02-13 07:20:03 UTC

Analyzing DNSSEC problems for all.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 54539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for all.id/A
	Received 687 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 687 octets ;; HEADER SECTION ;; id = 27966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . Lga8SeXYem8CQ9qbxfjrDTZ4X1mgeRsp9F2+U9y6qK3cH9kAjgLqlUjjifBe+ENWpkaXiVtYvEa6 3h5VyJ1OjWkznbZOdY2QPJD62K9U4VERPxQW2BR6IqLWWcAoOFE5brKTqo1eNdreZ8sH2UzNqInf y+UBeO3aeCQUknVXZmVXMSI+G1ypl0TNwB8QYHrtIVzSaf6VXdx5L14qJ0g2q9VB44Ji1bKZ+TCo 1u81Piz79jFn779Dn8Q3gvzVpQlJnTS8RLFUUrL+5CsIJUFG47HKyr6SVqOKWnjHFAKfYEqczjyB bdpTcEMaKWRgTA0YnvCiwvUdHabaU78fDvLRtQ== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for id/DNSKEY
	Received 683 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 683 octets ;; HEADER SECTION ;; id = 32905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS d.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS e.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS b.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . Lga8SeXYem8CQ9qbxfjrDTZ4X1mgeRsp9F2+U9y6qK3cH9kAjgLqlUjjifBe+ENWpkaXiVtYvEa6 3h5VyJ1OjWkznbZOdY2QPJD62K9U4VERPxQW2BR6IqLWWcAoOFE5brKTqo1eNdreZ8sH2UzNqInf y+UBeO3aeCQUknVXZmVXMSI+G1ypl0TNwB8QYHrtIVzSaf6VXdx5L14qJ0g2q9VB44Ji1bKZ+TCo 1u81Piz79jFn779Dn8Q3gvzVpQlJnTS8RLFUUrL+5CsIJUFG47HKyr6SVqOKWnjHFAKfYEqczjyB bdpTcEMaKWRgTA0YnvCiwvUdHabaU78fDvLRtQ== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to e.root-servers.net for id/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 49583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . Lga8SeXYem8CQ9qbxfjrDTZ4X1mgeRsp9F2+U9y6qK3cH9kAjgLqlUjjifBe+ENWpkaXiVtYvEa6 3h5VyJ1OjWkznbZOdY2QPJD62K9U4VERPxQW2BR6IqLWWcAoOFE5brKTqo1eNdreZ8sH2UzNqInf y+UBeO3aeCQUknVXZmVXMSI+G1ypl0TNwB8QYHrtIVzSaf6VXdx5L14qJ0g2q9VB44Ji1bKZ+TCo 1u81Piz79jFn779Dn8Q3gvzVpQlJnTS8RLFUUrL+5CsIJUFG47HKyr6SVqOKWnjHFAKfYEqczjyB bdpTcEMaKWRgTA0YnvCiwvUdHabaU78fDvLRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . Lga8SeXYem8CQ9qbxfjrDTZ4X1mgeRsp9F2+U9y6qK3cH9kAjgLqlUjjifBe+ENWpkaXiVtYvEa6 3h5VyJ1OjWkznbZOdY2QPJD62K9U4VERPxQW2BR6IqLWWcAoOFE5brKTqo1eNdreZ8sH2UzNqInf y+UBeO3aeCQUknVXZmVXMSI+G1ypl0TNwB8QYHrtIVzSaf6VXdx5L14qJ0g2q9VB44Ji1bKZ+TCo 1u81Piz79jFn779Dn8Q3gvzVpQlJnTS8RLFUUrL+5CsIJUFG47HKyr6SVqOKWnjHFAKfYEqczjyB bdpTcEMaKWRgTA0YnvCiwvUdHabaU78fDvLRtQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to d.dns.id for id/DNSKEY
	Received 873 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 873 octets ;; HEADER SECTION ;; id = 56086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (3 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260307204456 20260205201801 26887 id. vs2ynf/HnP+zHvbNxTk+iZCKFFPsAzmjL9jDNPnl+F6k+y3OgBAd5HJm2He4pWTenhIBEWs2XRUN OtkWmz0kUXpjNIkJpuDjyBqk4xIPTn3eA9kNv+fvLypdGcSUOi6Tyu5SQOnJHPxsd8TXt3Tnvhtp wqE0kWBaOqtplgPpaFR8E/0KQykAwciKSGvkTX7Gg8TOT7ceFAClOnTSg0EGkd+FyaBzjlgqkkSq cpJQ/grOIlL8Fb4kxzgcb6MidG8bJzHoDbX3MhIIt30+ty1Byyo6/YRBigTN/NkP0WhKZR1RuxTn svEd6bar4TGwps4+BKoj/eQlzM4YQ3b9xBMmYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260307204456 20260205201801 26887 id. vs2ynf/HnP+zHvbNxTk+iZCKFFPsAzmjL9jDNPnl+F6k+y3OgBAd5HJm2He4pWTenhIBEWs2XRUN OtkWmz0kUXpjNIkJpuDjyBqk4xIPTn3eA9kNv+fvLypdGcSUOi6Tyu5SQOnJHPxsd8TXt3Tnvhtp wqE0kWBaOqtplgPpaFR8E/0KQykAwciKSGvkTX7Gg8TOT7ceFAClOnTSg0EGkd+FyaBzjlgqkkSq cpJQ/grOIlL8Fb4kxzgcb6MidG8bJzHoDbX3MhIIt30+ty1Byyo6/YRBigTN/NkP0WhKZR1RuxTn svEd6bar4TGwps4+BKoj/eQlzM4YQ3b9xBMmYg== )`
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to c.dns.id for all.id/A
	Received 496 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 496 octets ;; HEADER SECTION ;; id = 5278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260306095143 20260204090208 22449 id. KubBi7UJG0HPFILfIn+4WSc8nAZb9S5qWb4trSbM2UtAvWkFnYgAQvxwOdExXFvOoRahOUU1DeRg g3LIep12PYI7XVdoumTkmlFHfz5MHytGK/SjOE5efA7s1yE25TaD+IVBN93PoXUhbsvt6vCHm0Zr Vq7qhafsrVg271HG2ZE0i1E8VgzD4XbQwRLjqeKgtS6/ZU3zeJLLMaRvhgsRXIJRj26Xb+7tECCf 6F8UIR0/fEaVXhegtkht83loyRMl9I37uLfq28AohClVMuJYSYT+u8YOYB+9nGf+YjHcRvEC2OdO 76O2X4jS+0hiZTSxM7x8OqoVOx34KyAi6JhsAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for all.id/DNSKEY
	Received 496 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 496 octets ;; HEADER SECTION ;; id = 19916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260306095143 20260204090208 22449 id. KubBi7UJG0HPFILfIn+4WSc8nAZb9S5qWb4trSbM2UtAvWkFnYgAQvxwOdExXFvOoRahOUU1DeRg g3LIep12PYI7XVdoumTkmlFHfz5MHytGK/SjOE5efA7s1yE25TaD+IVBN93PoXUhbsvt6vCHm0Zr Vq7qhafsrVg271HG2ZE0i1E8VgzD4XbQwRLjqeKgtS6/ZU3zeJLLMaRvhgsRXIJRj26Xb+7tECCf 6F8UIR0/fEaVXhegtkht83loyRMl9I37uLfq28AohClVMuJYSYT+u8YOYB+9nGf+YjHcRvEC2OdO 76O2X4jS+0hiZTSxM7x8OqoVOx34KyAi6JhsAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone all.id

all.id

	Checking DS between id and all.id
	Query to ns4.apnic.net for all.id/DS
	Received 709 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 709 octets ;; HEADER SECTION ;; id = 11266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) id. 86400 IN SOA ( b.dns.id. hostmaster.pandi.id. 2025791508 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 172800 ;minimum ) id. 86400 IN RRSIG ( SOA 8 1 86400 20260315071932 20260213061932 22449 id. gX13Q4WGNqA8f4ci9hsZkc6dKKX7uKClXTkvvQMYyEDf9RxmFRDd3jKYlVYM36Nho8UqJzoVxrcj m5DSlveDx/EYE44MZsI2vVyh+2qhauH42rZuw+uBngnQoND5YvX3H8DdVN909XetsvdJIthffH1K pHfGa3qa7wWY4Aeo6gu1I5pB0vvXdVKqgwdnYrWsQpP9fYlMRvy2v/MADFf+334W7H2rAZM7IDRK zOHu4WsldWXSOH1Y1LrYIYcVFOzEUwFQ9WldpITHMH+CSiwY3e0JgV+YC98QEZRWB8xzqYWYH0wi 3WDu/wSs/GBqopfRJSvHgZjitaSFokYvAW95Ug== ) all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260306095143 20260204090208 22449 id. KubBi7UJG0HPFILfIn+4WSc8nAZb9S5qWb4trSbM2UtAvWkFnYgAQvxwOdExXFvOoRahOUU1DeRg g3LIep12PYI7XVdoumTkmlFHfz5MHytGK/SjOE5efA7s1yE25TaD+IVBN93PoXUhbsvt6vCHm0Zr Vq7qhafsrVg271HG2ZE0i1E8VgzD4XbQwRLjqeKgtS6/ZU3zeJLLMaRvhgsRXIJRj26Xb+7tECCf 6F8UIR0/fEaVXhegtkht83loyRMl9I37uLfq28AohClVMuJYSYT+u8YOYB+9nGf+YjHcRvEC2OdO 76O2X4jS+0hiZTSxM7x8OqoVOx34KyAi6JhsAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for all.id in the id zone
	Query to ns-985.awsdns-59.net for all.id/DNSKEY
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 19428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 54136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-985.awsdns-59.net is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/SOA
	Received 236 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 236 octets ;; HEADER SECTION ;; id = 42345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1157.awsdns-16.org for all.id/SOA
	Received 236 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 236 octets ;; HEADER SECTION ;; id = 21955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1761.awsdns-28.co.uk for all.id/SOA
	Received 236 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 236 octets ;; HEADER SECTION ;; id = 23821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 23936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 27730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-174.awsdns-21.com is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 11825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 61132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1761.awsdns-28.co.uk is authoritative for all.id
	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 28274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 24575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1157.awsdns-16.org is authoritative for all.id
	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 18525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test all.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: