DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 02:58:01 UTC

Analyzing DNSSEC problems for all.id

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 24930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for all.id/A
	Received 685 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 685 octets ;; HEADER SECTION ;; id = 52759 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS e.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS c.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for id/DNSKEY
	Received 681 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 681 octets ;; HEADER SECTION ;; id = 39740 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to i.root-servers.net for id/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 5237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to ns4.apnic.net for id/DNSKEY
	Received 873 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 873 octets ;; HEADER SECTION ;; id = 54954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (3 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260628055352 20260529052533 26887 id. I/mrsKEXUjNIqJ/HY+klg6wJ+bWHUjsGcKxBKQXIlNR8+eqa4OauI/9YIk3f0tOQSv8EVjav5Cf/ 0eooxCy7ddzJi0392+NxQJiY2VI99wkxHxTjk7IjJXPWwDLklCMP6+/DrABMR0wRgCUITNStKdge 3i5XbdVugOwEbans3MhdFi/Bj9ZLng1rcuD1HAJcCWzvjbznMC0goF0sZ0hKkIpybtlW5GNEw41T tqk+zKNnhvWWiAPzCemXg67hFF6b3oQY9VIaAekgVNOSdMKGJpce7W4TTBsa+2BbjHfthFz1C0ma GA6V90fy+5adcf4raElH1bv05picZ+DOWAGdJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260628055352 20260529052533 26887 id. I/mrsKEXUjNIqJ/HY+klg6wJ+bWHUjsGcKxBKQXIlNR8+eqa4OauI/9YIk3f0tOQSv8EVjav5Cf/ 0eooxCy7ddzJi0392+NxQJiY2VI99wkxHxTjk7IjJXPWwDLklCMP6+/DrABMR0wRgCUITNStKdge 3i5XbdVugOwEbans3MhdFi/Bj9ZLng1rcuD1HAJcCWzvjbznMC0goF0sZ0hKkIpybtlW5GNEw41T tqk+zKNnhvWWiAPzCemXg67hFF6b3oQY9VIaAekgVNOSdMKGJpce7W4TTBsa+2BbjHfthFz1C0ma GA6V90fy+5adcf4raElH1bv05picZ+DOWAGdJA== )`
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to c.dns.id for all.id/A
	Received 496 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 496 octets ;; HEADER SECTION ;; id = 3552 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260626200020 20260527190914 22449 id. tJX2yMwWpk02bJURlB5ic1vXXQ7JYtPDntbtL2/+YAlxXnM3qA7adntDtJyrK4SMENWs07NW0paA WOxoH2cEl9lvrEeBnBgrDXMiGUZ7VwNF0ooDJwye2fsCdNEUZWFXFkxHanXSDeb9hWAWqOcP87ru RDAaGxFFUOXaVEdVgTrNo1/6bAhlv5EWl+XjggmUJth3q8WupDkG4l3+2aPzX1kkzAzlMjDsGoTZ 5izrIg3PJy6vhEWhg30pPrq73z1AYZbcTB/etZqSGJtjV+sR4xgyvCslUUxNAjhrzYMNbLQJ/9X+ UEnIILmgvy688Iw285xhhKWvNqSYKjZAW4eNiQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.dns.id for all.id/DNSKEY
	Received 496 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 496 octets ;; HEADER SECTION ;; id = 32272 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) all.id. 3600 IN NS ns-174.awsdns-21.com. all.id. 3600 IN NS ns-985.awsdns-59.net. all.id. 3600 IN NS ns-1157.awsdns-16.org. all.id. 3600 IN NS ns-1761.awsdns-28.co.uk. all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260626200020 20260527190914 22449 id. tJX2yMwWpk02bJURlB5ic1vXXQ7JYtPDntbtL2/+YAlxXnM3qA7adntDtJyrK4SMENWs07NW0paA WOxoH2cEl9lvrEeBnBgrDXMiGUZ7VwNF0ooDJwye2fsCdNEUZWFXFkxHanXSDeb9hWAWqOcP87ru RDAaGxFFUOXaVEdVgTrNo1/6bAhlv5EWl+XjggmUJth3q8WupDkG4l3+2aPzX1kkzAzlMjDsGoTZ 5izrIg3PJy6vhEWhg30pPrq73z1AYZbcTB/etZqSGJtjV+sR4xgyvCslUUxNAjhrzYMNbLQJ/9X+ UEnIILmgvy688Iw285xhhKWvNqSYKjZAW4eNiQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone all.id

all.id

	Checking DS between id and all.id
	Query to e.dns.id for all.id/DS
	Received 705 bytes from 103.19.177.177
	;; Response received from [103.19.177.177] 705 octets ;; HEADER SECTION ;; id = 480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) id. 86400 IN SOA ( b.dns.id. hostmaster.pandi.id. 2026103047 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 172800 ;minimum ) id. 86400 IN RRSIG ( SOA 8 1 86400 20260716025740 20260616015740 22449 id. t9jrCcv+YWrNdyG6ven8gAU4Y6y2RdefIiPROdqYxXaQa4nsE3pjTDBfx456VYJSIx7eb2zZgfPU EYLb+TA+4DSXLT1xCTr2W5YVbQUKLafD4MHKiN9O2L0A/ADwMgxtOtuC4sN8G7CCHYbd2BixhrtY QbAoo1d89t+i2gVHCuMgw5ev2h8WDg1H5qOSGq7jpg1TfE6/2WMvJzvYpipiaFffYYqsd+7OXpQs ZksR/GnbpFf5nqsWDEneJS6NK0ySu/O8k0uuIcHz5PjhRUDlfpPcI6+vxuEwwmAgttJG2RXYmu1f NNGamQzin0QJAguYU/xsngMHtRb3EidVVhzpVQ== ) all.id. 86400 IN NSEC all-co.id. NS RRSIG NSEC all.id. 86400 IN RRSIG ( NSEC 8 2 86400 20260626200020 20260527190914 22449 id. tJX2yMwWpk02bJURlB5ic1vXXQ7JYtPDntbtL2/+YAlxXnM3qA7adntDtJyrK4SMENWs07NW0paA WOxoH2cEl9lvrEeBnBgrDXMiGUZ7VwNF0ooDJwye2fsCdNEUZWFXFkxHanXSDeb9hWAWqOcP87ru RDAaGxFFUOXaVEdVgTrNo1/6bAhlv5EWl+XjggmUJth3q8WupDkG4l3+2aPzX1kkzAzlMjDsGoTZ 5izrIg3PJy6vhEWhg30pPrq73z1AYZbcTB/etZqSGJtjV+sR4xgyvCslUUxNAjhrzYMNbLQJ/9X+ UEnIILmgvy688Iw285xhhKWvNqSYKjZAW4eNiQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for all.id in the id zone
	Query to ns-174.awsdns-21.com for all.id/DNSKEY
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 17693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1157.awsdns-16.org for all.id/A
	Received 122 bytes from 205.251.196.133
	;; Response received from [205.251.196.133] 122 octets ;; HEADER SECTION ;; id = 24159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1157.awsdns-16.org is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/SOA
	Received 236 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 236 octets ;; HEADER SECTION ;; id = 60236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1761.awsdns-28.co.uk for all.id/SOA
	Received 236 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 236 octets ;; HEADER SECTION ;; id = 5523 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-985.awsdns-59.net for all.id/SOA
	Received 236 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 236 octets ;; HEADER SECTION ;; id = 47299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN SOA ;; ANSWER SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) all.id. 172800 IN NS ns-1157.awsdns-16.org. all.id. 172800 IN NS ns-174.awsdns-21.com. all.id. 172800 IN NS ns-1761.awsdns-28.co.uk. all.id. 172800 IN NS ns-985.awsdns-59.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1157.awsdns-16.org for all.id/A
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-1761.awsdns-28.co.uk for all.id/A
	Received 122 bytes from 205.251.198.225
	;; Response received from [205.251.198.225] 122 octets ;; HEADER SECTION ;; id = 45380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1761.awsdns-28.co.uk is authoritative for all.id
	Query to ns-1761.awsdns-28.co.uk for all.id/A
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-174.awsdns-21.com for all.id/A
	Received 122 bytes from 205.251.192.174
	;; Response received from [205.251.192.174] 122 octets ;; HEADER SECTION ;; id = 14948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-174.awsdns-21.com is authoritative for all.id
	Query to ns-174.awsdns-21.com for all.id/A
	No NSEC records in response
	No RRSIGs found

all.id

	Query to ns-985.awsdns-59.net for all.id/A
	Received 122 bytes from 205.251.195.217
	;; Response received from [205.251.195.217] 122 octets ;; HEADER SECTION ;; id = 46623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; all.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) all.id. 900 IN SOA ( ns-1761.awsdns-28.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-985.awsdns-59.net is authoritative for all.id
	Query to ns-985.awsdns-59.net for all.id/A
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test all.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: