DNSSEC Debugger - berkeley.edu

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-12 07:10:16 UTC

Analyzing DNSSEC problems for berkeley.edu

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1139 octets ;; HEADER SECTION ;; id = 17082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to f.root-servers.net for berkeley.edu/A
	Received 1171 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1171 octets ;; HEADER SECTION ;; id = 6278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260925050000 20260912040000 57780 . 0w7SSlojox9VCOjMJFg/vEuwHLHXD9zNoVDZn6D82PnbIrF6slsw31dT0wfe1dV/ulxxoPgr8POE vaCcHK8JkOu7ydJZ8vPCxHA+uz9coDkq4ZA3bjMWGwm5CjbRyNex55+LIHwa9//4q29uaV+WCON6 qURrtudgIvh8bj45AyqqHRk6eZrxh+pzdVcLjPA2BgKpd9jwiWevozsxpwrmSR8owU4lC46Z8zAu Gl7FqZunzWysm+GBPlwnmOM6D1MZMBgl7BqWhUo2V2Gd4p1i8TK7u2RYhDVsZJWD3o/FPLzqz1x5 ofsb4C/LK06PMURcT0ANXzwQMgnYwdNA88o2sg== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1162 octets ;; HEADER SECTION ;; id = 10160 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260925050000 20260912040000 57780 . 0w7SSlojox9VCOjMJFg/vEuwHLHXD9zNoVDZn6D82PnbIrF6slsw31dT0wfe1dV/ulxxoPgr8POE vaCcHK8JkOu7ydJZ8vPCxHA+uz9coDkq4ZA3bjMWGwm5CjbRyNex55+LIHwa9//4q29uaV+WCON6 qURrtudgIvh8bj45AyqqHRk6eZrxh+pzdVcLjPA2BgKpd9jwiWevozsxpwrmSR8owU4lC46Z8zAu Gl7FqZunzWysm+GBPlwnmOM6D1MZMBgl7BqWhUo2V2Gd4p1i8TK7u2RYhDVsZJWD3o/FPLzqz1x5 ofsb4C/LK06PMURcT0ANXzwQMgnYwdNA88o2sg== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 b.edu-servers.net. 172800 IN A 192.33.14.30 c.edu-servers.net. 172800 IN A 192.26.92.30 d.edu-servers.net. 172800 IN A 192.31.80.30 e.edu-servers.net. 172800 IN A 192.12.94.30 f.edu-servers.net. 172800 IN A 192.35.51.30 g.edu-servers.net. 172800 IN A 192.42.93.30 h.edu-servers.net. 172800 IN A 192.54.112.30 i.edu-servers.net. 172800 IN A 192.43.172.30 j.edu-servers.net. 172800 IN A 192.48.79.30 k.edu-servers.net. 172800 IN A 192.52.178.30 l.edu-servers.net. 172800 IN A 192.41.162.30 m.edu-servers.net. 172800 IN A 192.55.83.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone edu

edu

	Checking DS between . and edu
	Query to g.root-servers.net for edu/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 19491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260925050000 20260912040000 57780 . 0w7SSlojox9VCOjMJFg/vEuwHLHXD9zNoVDZn6D82PnbIrF6slsw31dT0wfe1dV/ulxxoPgr8POE vaCcHK8JkOu7ydJZ8vPCxHA+uz9coDkq4ZA3bjMWGwm5CjbRyNex55+LIHwa9//4q29uaV+WCON6 qURrtudgIvh8bj45AyqqHRk6eZrxh+pzdVcLjPA2BgKpd9jwiWevozsxpwrmSR8owU4lC46Z8zAu Gl7FqZunzWysm+GBPlwnmOM6D1MZMBgl7BqWhUo2V2Gd4p1i8TK7u2RYhDVsZJWD3o/FPLzqz1x5 ofsb4C/LK06PMURcT0ANXzwQMgnYwdNA88o2sg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20260925050000 20260912040000 57780 . 0w7SSlojox9VCOjMJFg/vEuwHLHXD9zNoVDZn6D82PnbIrF6slsw31dT0wfe1dV/ulxxoPgr8POE vaCcHK8JkOu7ydJZ8vPCxHA+uz9coDkq4ZA3bjMWGwm5CjbRyNex55+LIHwa9//4q29uaV+WCON6 qURrtudgIvh8bj45AyqqHRk6eZrxh+pzdVcLjPA2BgKpd9jwiWevozsxpwrmSR8owU4lC46Z8zAu Gl7FqZunzWysm+GBPlwnmOM6D1MZMBgl7BqWhUo2V2Gd4p1i8TK7u2RYhDVsZJWD3o/FPLzqz1x5 ofsb4C/LK06PMURcT0ANXzwQMgnYwdNA88o2sg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to i.edu-servers.net for edu/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 38884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (3 records) edu. 86400 IN DNSKEY ( 256 3 13 /wryn57986cSrM6e2SVDL1jtnHPoPqjPRw0z/jlp5BJ6PNc5Jt0Y/Jw3eWBbu6ZJCry4ooX5uE6U 1swz4VmIRA== ) ; keytag 6705 edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260917151114 20260902150614 35663 edu. DqhePusTbssRZ9We2N2HkmMwEcnBTjYTk330YWI6Ixr9gCFXz8+bhF5iRKwtu279ii90w2cJWBA3 mPkygRRjrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 256 3 13 /wryn57986cSrM6e2SVDL1jtnHPoPqjPRw0z/jlp5BJ6PNc5Jt0Y/Jw3eWBbu6ZJCry4ooX5uE6U 1swz4VmIRA== ) ; keytag 6705`
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260917151114 20260902150614 35663 edu. DqhePusTbssRZ9We2N2HkmMwEcnBTjYTk330YWI6Ixr9gCFXz8+bhF5iRKwtu279ii90w2cJWBA3 mPkygRRjrA== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=6705 is now in the chain-of-trust
	Query to m.edu-servers.net for berkeley.edu/A
	Received 372 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 372 octets ;; HEADER SECTION ;; id = 42176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) berkeley.edu. 172800 IN NS adns1.berkeley.edu. berkeley.edu. 172800 IN NS adns2.berkeley.edu. berkeley.edu. 172800 IN NS adns3.berkeley.edu. berkeley.edu. 86400 IN DS ( 10359 10 2 90c805bdf785312d7ce4af92d697cdb1e6f5228d7364dce259d0652b8579c65b ) berkeley.edu. 86400 IN DS ( 17532 10 2 a6c9ec2b5ac641f87b436d2ff9adb8d5655bc8434de90cc47ed47f8bad65ae1f ) berkeley.edu. 86400 IN RRSIG ( DS 13 2 86400 20260918033649 20260911022649 6705 edu. KqIh2mn/eaSYaO31rtUKVMCAfje1WW8SL0KgxowIdmR8Bd0E9RriWdBRZCb8ZfhxImkXsMYWZtJH W3jMxQb//w== ) ;; ADDITIONAL SECTION (5 records) adns1.berkeley.edu. 172800 IN A 128.32.136.3 adns2.berkeley.edu. 172800 IN A 128.32.136.14 adns3.berkeley.edu. 172800 IN A 192.107.102.142 adns3.berkeley.edu. 172800 IN AAAA 2607:f140:a000:d::abc ;; { "EDNS-VERSION": 0 }
	Query to b.edu-servers.net for berkeley.edu/DNSKEY
	Received 372 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 372 octets ;; HEADER SECTION ;; id = 30454 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) berkeley.edu. 172800 IN NS adns1.berkeley.edu. berkeley.edu. 172800 IN NS adns2.berkeley.edu. berkeley.edu. 172800 IN NS adns3.berkeley.edu. berkeley.edu. 86400 IN DS ( 10359 10 2 90c805bdf785312d7ce4af92d697cdb1e6f5228d7364dce259d0652b8579c65b ) berkeley.edu. 86400 IN DS ( 17532 10 2 a6c9ec2b5ac641f87b436d2ff9adb8d5655bc8434de90cc47ed47f8bad65ae1f ) berkeley.edu. 86400 IN RRSIG ( DS 13 2 86400 20260918033649 20260911022649 6705 edu. KqIh2mn/eaSYaO31rtUKVMCAfje1WW8SL0KgxowIdmR8Bd0E9RriWdBRZCb8ZfhxImkXsMYWZtJH W3jMxQb//w== ) ;; ADDITIONAL SECTION (5 records) adns1.berkeley.edu. 172800 IN A 128.32.136.3 adns2.berkeley.edu. 172800 IN A 128.32.136.14 adns3.berkeley.edu. 172800 IN A 192.107.102.142 adns3.berkeley.edu. 172800 IN AAAA 2607:f140:a000:d::abc ;; { "EDNS-VERSION": 0 }
	Found child zone berkeley.edu

berkeley.edu

	Checking DS between edu and berkeley.edu
	Query to i.edu-servers.net for berkeley.edu/DS
	Received 1130 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 1130 octets ;; HEADER SECTION ;; id = 61291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN DS ;; ANSWER SECTION (3 records) berkeley.edu. 86400 IN DS ( 10359 10 2 90c805bdf785312d7ce4af92d697cdb1e6f5228d7364dce259d0652b8579c65b ) berkeley.edu. 86400 IN DS ( 17532 10 2 a6c9ec2b5ac641f87b436d2ff9adb8d5655bc8434de90cc47ed47f8bad65ae1f ) berkeley.edu. 86400 IN RRSIG ( DS 13 2 86400 20260918033649 20260911022649 6705 edu. KqIh2mn/eaSYaO31rtUKVMCAfje1WW8SL0KgxowIdmR8Bd0E9RriWdBRZCb8ZfhxImkXsMYWZtJH W3jMxQb//w== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20260916033928 20260909022928 6705 edu. UFyYhcl8hylxbY101E8QqcnKyC115IUoYQIKg8odfBnME02IKR0FKzOLYQB4QhV//V/GiU5zVqto NKRN1nU5zg== ) ;; ADDITIONAL SECTION (27 records) m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for berkeley.edu in the edu zone
	DS=10359/SHA-256 has algorithm RSASHA512
	DS=17532/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`berkeley.edu. 86400 IN RRSIG ( DS 13 2 86400 20260918033649 20260911022649 6705 edu. KqIh2mn/eaSYaO31rtUKVMCAfje1WW8SL0KgxowIdmR8Bd0E9RriWdBRZCb8ZfhxImkXsMYWZtJH W3jMxQb//w== )`
	RRSIG=6705 and DNSKEY=6705 verifies the DS RRset
	DS=10359/SHA-256 is now in the chain-of-trust
	DS=17532/SHA-256 is now in the chain-of-trust
	`berkeley.edu. 86400 IN DS ( 10359 10 2 90c805bdf785312d7ce4af92d697cdb1e6f5228d7364dce259d0652b8579c65b )`
	`berkeley.edu. 86400 IN DS ( 17532 10 2 a6c9ec2b5ac641f87b436d2ff9adb8d5655bc8434de90cc47ed47f8bad65ae1f )`
	Query to adns1.berkeley.edu for berkeley.edu/DNSKEY
	Received 1661 bytes from 128.32.136.3
	;; Response received from [128.32.136.3] 1661 octets ;; HEADER SECTION ;; id = 37812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN DNSKEY ;; ANSWER SECTION (7 records) berkeley.edu. 172800 IN DNSKEY ( 256 3 10 AwEAAcNvhbHTj5aRKbUJglFT+TYb9VOJTrNNi0HmNm+BA8OxFBzoP4DHnivz7yuH7uhTs7+cEsUi mn0wTW/1IfF9Icdmip4iguf+2aV3dFY/F7f5xH4RLyrLIse1W3U5NL65oUT8T+Yj2Z0dfKjkQqgs svqvq9exJFReaJ+fm6usrqK9 ) ; keytag 49277 berkeley.edu. 172800 IN DNSKEY ( 256 3 10 AwEAAbq80lSwBXWdJRhOC20jqBVFNFf+pxng1RlmdVfEmgHLEDLUqxaeFHNtY99hrJQEMsy8YhOv teeMuqQoWM+KOcuLWxZv1vR67FUe4P4kEnbE29OIT+Apt/fNpQF4SS75ToztslcYOYRbaFiGfDPH Q/A2VVaPjbUzBU/EV0V5g7rH ) ; keytag 47645 berkeley.edu. 172800 IN DNSKEY ( 257 3 10 AwEAAc6EL48CEd3oETEE0MHAjiXfQxC65TGRuT8lnb5Y59P2j3zz9bjDNjpZONqJq3vTw2FXH+Za XPh1PmbOTfPxO9LMs6Gozov5C8PTkj3R3pHIJc5Fz4Hh5chHJA+vQYVx9W98s0Ld7d+qSFDkHK2I WhcvOHL2ka4e0+0xHeoWgpx6mL7ySxZr5kPeyLZss10EKJe6QZX0ihVpVpPvJvk7uEe3kqTTJuNj azVF/FOkXWMOIkC/gOhIJpu5dRPifoJot/D8qUFK/EZoN7XUMREiJc/zhwnV9bS9wfVwLu8vNeB4 CRXWo3gYdvBxKwcTY/YZB0GrPbYLmkTUaTJQT+yHX0c= ) ; keytag 17532 berkeley.edu. 172800 IN DNSKEY ( 257 3 10 AwEAAcZJ+yIO6XteRWtHoyENQgsjlVVE1ocLC/klyeuAk1o3qmVWG8cvc/lhYOaKAEGGktk0IEXE gtN7E33wKr/ouFw3S58OJI+URNJWRlTmqnWBtbcPkGpJcvOd63lJIxVOHlybgMdrbC3yYtaTzugV zwkmyUGxeypbPMwHCY9GTSGEJ0JasDyVMTOuDe6bysODovYCauktbl9ogvS2iY5oHjjEaKx5bhsC xyj6F4+68ow6+74FUTwlyjeRywO5DPtvWvV2c+KE5Bedm5EbCRceorITYVSZMLIa9vXNyAgl7/K1 enpUtcOZA6NCVRKEQDWuO3qvYUbDQRgcMxW/ti4DmNs= ) ; keytag 40779 berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 17532 berkeley.edu. jOkPm5LDb446D92gifFVR+5sTEwRIJ5hpRghBmQ5gOYE0aLNcapK+7LLJeL8asE+pTW9NVByW6gn Y+aLsk3QDEM+bOjMo2pQv8LART9bF0W2aIEI2se3LgMuS41OwuLEWDoEKLwmYAlTBuuixUMoxx4b S1DJrEZg8MiNP4qED/X0K4hPg9NB6XMVXko8HkOkQg5G7KSV9yWr+OaSTTk8njivu6w4O049+5Kn 4Tzg+tekUuYXjY3HyMN7LECGE0Up40ooY6D6JuKaohOLc1wN4VvLtefP3+BhZYm1eD4+bSPcLGd6 G0IKiNa7XiIdoHAAi//zY7vtHOoIjmrkKN26FA== ) berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 40779 berkeley.edu. ZtQeJAeTdw4KdOkRjoC9QbF/TZ+omZKy4epSAYpxu/7YYmAI5q09AHudK321nZnuRBcMa8MLq7ZE OV7I/PMUCGYfH/CKC5FB0XDhxwOcXyD/bOWRTgm+nz+efEEiL22rvYgicfCINAhTR0KtEUE+Bv1j wAQ9KoivFtsEVUDY7JqgKtesCaRVsGYFHzfXyy/zO3QXSqQvrYA00WWOMIaSJc6nGUH2++pIdO9y opzbx6ogTOhkKMROblYsCiBFzYIkmyk4qXzk2R8DGu59FAhrsOeOjJuzYrEfc1n77H8ovZ5hv4Qo DHF3K/uf5MeZZOQDJms+IRplsy8U4uAowHXLFw== ) berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 47645 berkeley.edu. RxySqpglLeR1EVskMT9RGE33iHJdB4xphtv1Ji4QDhohxf2w2GAQuk/NK0sZFdQT18wN23iIMIEi d5L9l/KzfQvm1spO757iio0p1PaB4Ctpl7CJEbRlix9J935Pd73Ba3jcnfR2iyFwGG3+oQ/SPpvp B2SOfJdhgOvit85shJI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for berkeley.edu
	`berkeley.edu. 172800 IN DNSKEY ( 256 3 10 AwEAAcNvhbHTj5aRKbUJglFT+TYb9VOJTrNNi0HmNm+BA8OxFBzoP4DHnivz7yuH7uhTs7+cEsUi mn0wTW/1IfF9Icdmip4iguf+2aV3dFY/F7f5xH4RLyrLIse1W3U5NL65oUT8T+Yj2Z0dfKjkQqgs svqvq9exJFReaJ+fm6usrqK9 ) ; keytag 49277`
	`berkeley.edu. 172800 IN DNSKEY ( 256 3 10 AwEAAbq80lSwBXWdJRhOC20jqBVFNFf+pxng1RlmdVfEmgHLEDLUqxaeFHNtY99hrJQEMsy8YhOv teeMuqQoWM+KOcuLWxZv1vR67FUe4P4kEnbE29OIT+Apt/fNpQF4SS75ToztslcYOYRbaFiGfDPH Q/A2VVaPjbUzBU/EV0V5g7rH ) ; keytag 47645`
	`berkeley.edu. 172800 IN DNSKEY ( 257 3 10 AwEAAc6EL48CEd3oETEE0MHAjiXfQxC65TGRuT8lnb5Y59P2j3zz9bjDNjpZONqJq3vTw2FXH+Za XPh1PmbOTfPxO9LMs6Gozov5C8PTkj3R3pHIJc5Fz4Hh5chHJA+vQYVx9W98s0Ld7d+qSFDkHK2I WhcvOHL2ka4e0+0xHeoWgpx6mL7ySxZr5kPeyLZss10EKJe6QZX0ihVpVpPvJvk7uEe3kqTTJuNj azVF/FOkXWMOIkC/gOhIJpu5dRPifoJot/D8qUFK/EZoN7XUMREiJc/zhwnV9bS9wfVwLu8vNeB4 CRXWo3gYdvBxKwcTY/YZB0GrPbYLmkTUaTJQT+yHX0c= ) ; keytag 17532`
	`berkeley.edu. 172800 IN DNSKEY ( 257 3 10 AwEAAcZJ+yIO6XteRWtHoyENQgsjlVVE1ocLC/klyeuAk1o3qmVWG8cvc/lhYOaKAEGGktk0IEXE gtN7E33wKr/ouFw3S58OJI+URNJWRlTmqnWBtbcPkGpJcvOd63lJIxVOHlybgMdrbC3yYtaTzugV zwkmyUGxeypbPMwHCY9GTSGEJ0JasDyVMTOuDe6bysODovYCauktbl9ogvS2iY5oHjjEaKx5bhsC xyj6F4+68ow6+74FUTwlyjeRywO5DPtvWvV2c+KE5Bedm5EbCRceorITYVSZMLIa9vXNyAgl7/K1 enpUtcOZA6NCVRKEQDWuO3qvYUbDQRgcMxW/ti4DmNs= ) ; keytag 40779`
	DNSKEY=17532/SEP is now in the chain-of-trust
	DS=17532/SHA-256 verifies DNSKEY=17532/SEP
	DS=10359/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 17532 berkeley.edu. jOkPm5LDb446D92gifFVR+5sTEwRIJ5hpRghBmQ5gOYE0aLNcapK+7LLJeL8asE+pTW9NVByW6gn Y+aLsk3QDEM+bOjMo2pQv8LART9bF0W2aIEI2se3LgMuS41OwuLEWDoEKLwmYAlTBuuixUMoxx4b S1DJrEZg8MiNP4qED/X0K4hPg9NB6XMVXko8HkOkQg5G7KSV9yWr+OaSTTk8njivu6w4O049+5Kn 4Tzg+tekUuYXjY3HyMN7LECGE0Up40ooY6D6JuKaohOLc1wN4VvLtefP3+BhZYm1eD4+bSPcLGd6 G0IKiNa7XiIdoHAAi//zY7vtHOoIjmrkKN26FA== )`
	`berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 40779 berkeley.edu. ZtQeJAeTdw4KdOkRjoC9QbF/TZ+omZKy4epSAYpxu/7YYmAI5q09AHudK321nZnuRBcMa8MLq7ZE OV7I/PMUCGYfH/CKC5FB0XDhxwOcXyD/bOWRTgm+nz+efEEiL22rvYgicfCINAhTR0KtEUE+Bv1j wAQ9KoivFtsEVUDY7JqgKtesCaRVsGYFHzfXyy/zO3QXSqQvrYA00WWOMIaSJc6nGUH2++pIdO9y opzbx6ogTOhkKMROblYsCiBFzYIkmyk4qXzk2R8DGu59FAhrsOeOjJuzYrEfc1n77H8ovZ5hv4Qo DHF3K/uf5MeZZOQDJms+IRplsy8U4uAowHXLFw== )`
	`berkeley.edu. 172800 IN RRSIG ( DNSKEY 10 2 172800 20260915165409 20260911165105 47645 berkeley.edu. RxySqpglLeR1EVskMT9RGE33iHJdB4xphtv1Ji4QDhohxf2w2GAQuk/NK0sZFdQT18wN23iIMIEi d5L9l/KzfQvm1spO757iio0p1PaB4Ctpl7CJEbRlix9J935Pd73Ba3jcnfR2iyFwGG3+oQ/SPpvp B2SOfJdhgOvit85shJI= )`
	RRSIG=17532 and DNSKEY=17532/SEP verifies the DNSKEY RRset
	RRSIG=40779 and DNSKEY=40779/SEP verifies the DNSKEY RRset
	RRSIG=47645 and DNSKEY=47645 verifies the DNSKEY RRset
	DNSKEY=49277 is now in the chain-of-trust
	DNSKEY=47645 is now in the chain-of-trust
	DNSKEY=40779/SEP is now in the chain-of-trust
	Query to adns3.berkeley.edu for berkeley.edu/A
	Received 245 bytes from 192.107.102.142
	;; Response received from [192.107.102.142] 245 octets ;; HEADER SECTION ;; id = 57478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN A ;; ANSWER SECTION (3 records) berkeley.edu. 300 IN A 141.193.213.21 berkeley.edu. 300 IN A 141.193.213.20 berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns3.berkeley.edu is authoritative for berkeley.edu
	Found RRSIG signed by berkeley.edu zone
	Query to adns2.berkeley.edu for berkeley.edu/SOA
	Received 277 bytes from 128.32.136.14
	;; Response received from [128.32.136.14] 277 octets ;; HEADER SECTION ;; id = 23140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN SOA ;; ANSWER SECTION (2 records) berkeley.edu. 10800 IN SOA ( ewdc-vps-ib1.net.berkeley.edu. hostmaster.berkeley.edu. 2071791436 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) berkeley.edu. 10800 IN RRSIG ( SOA 10 2 10800 20260916070918 20260912060918 47645 berkeley.edu. KsG0ndolDJaxRyeQxTo9QoTa0TvclZ0xCVxc86h04HU5v1bO1F3wvDlWPfTin8s0Uyrhhp1FHBDV 0JRiLE69xQtwpGd++ApfCrBuHo2f1CFl95QXryE9C3CI1AAItBJU+gYmARDyWK3+JzwVaP+4n35R 44HlSanZzgMWnx8JIks= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns1.berkeley.edu for berkeley.edu/SOA
	Received 277 bytes from 128.32.136.3
	;; Response received from [128.32.136.3] 277 octets ;; HEADER SECTION ;; id = 37310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN SOA ;; ANSWER SECTION (2 records) berkeley.edu. 10800 IN SOA ( ewdc-vps-ib1.net.berkeley.edu. hostmaster.berkeley.edu. 2071791436 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) berkeley.edu. 10800 IN RRSIG ( SOA 10 2 10800 20260916070918 20260912060918 47645 berkeley.edu. KsG0ndolDJaxRyeQxTo9QoTa0TvclZ0xCVxc86h04HU5v1bO1F3wvDlWPfTin8s0Uyrhhp1FHBDV 0JRiLE69xQtwpGd++ApfCrBuHo2f1CFl95QXryE9C3CI1AAItBJU+gYmARDyWK3+JzwVaP+4n35R 44HlSanZzgMWnx8JIks= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns3.berkeley.edu for berkeley.edu/A
	berkeley.edu A RR has value 141.193.213.21
	berkeley.edu A RR has value 141.193.213.20
	Found 1 RRSIGs over A RRset
	`berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= )`
	RRSIG=47645 and DNSKEY=47645 verifies the A RRset

berkeley.edu

	Query to adns2.berkeley.edu for berkeley.edu/A
	Received 245 bytes from 128.32.136.14
	;; Response received from [128.32.136.14] 245 octets ;; HEADER SECTION ;; id = 14229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN A ;; ANSWER SECTION (3 records) berkeley.edu. 300 IN A 141.193.213.20 berkeley.edu. 300 IN A 141.193.213.21 berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.berkeley.edu is authoritative for berkeley.edu
	Found RRSIG signed by berkeley.edu zone
	Query to adns2.berkeley.edu for berkeley.edu/A
	berkeley.edu A RR has value 141.193.213.20
	berkeley.edu A RR has value 141.193.213.21
	Found 1 RRSIGs over A RRset
	`berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= )`
	RRSIG=47645 and DNSKEY=47645 verifies the A RRset

berkeley.edu

	Query to adns1.berkeley.edu for berkeley.edu/A
	Received 245 bytes from 128.32.136.3
	;; Response received from [128.32.136.3] 245 octets ;; HEADER SECTION ;; id = 42750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berkeley.edu. IN A ;; ANSWER SECTION (3 records) berkeley.edu. 300 IN A 141.193.213.21 berkeley.edu. 300 IN A 141.193.213.20 berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.berkeley.edu is authoritative for berkeley.edu
	Found RRSIG signed by berkeley.edu zone
	Query to adns1.berkeley.edu for berkeley.edu/A
	berkeley.edu A RR has value 141.193.213.21
	berkeley.edu A RR has value 141.193.213.20
	Found 1 RRSIGs over A RRset
	`berkeley.edu. 300 IN RRSIG ( A 10 2 300 20260915202230 20260911201542 47645 berkeley.edu. PW8nM2DpR2oIvwNlgLKoX4zG9JPZTw2JCx3aX9h9rkKQamCl0f/EyWFe3tpoW521KZubsJMJaU7G hTc59ezKpXy9vaE6GVzgko8YA525mgdymhwZSztkA95mJGRR6InrtJ3N3Lkm+L8qhPxa87t7l3S7 wUsfn/AQqeP9Ry0XFaw= )`
	RRSIG=47645 and DNSKEY=47645 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test berkeley.edu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: