DNSSEC Debugger - bnn.go.id

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 02:17:32 UTC

Analyzing DNSSEC problems for bnn.go.id

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 51603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to e.root-servers.net for bnn.go.id/A
	Received 688 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 688 octets ;; HEADER SECTION ;; id = 17393 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bnn.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN A 103.19.178.178 c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN A 45.126.57.57 d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN A 103.19.177.177 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for id/DNSKEY
	Received 683 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 683 octets ;; HEADER SECTION ;; id = 42130 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS e.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS b.dns.id. id. 172800 IN NS d.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to b.root-servers.net for id/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 55968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . Z2XqD+gcHaKqMcf5w6c/1ZXMLAmaTiFT6+jz9CgYY1UGS7G3KXVKfCc9+FdmcDtz9ycxp2JdYoV6 e8OiB7U/MhcNGdddDfG8wQ5/bZv0k+lqulgk4Rh6vGZAG9fFXOAO4gNfCkVDritdhZg2t3KbsyqD jUCioesiWB1EzgXLVu5dg1MXB1EJPih8vnqmci4/p9fwwcABfExI9EFKLvihy0f7u2B+UayuzeZW na8TgtRY7fRhd0+VvA1tXYMnJgp5tJycs7G7JxGXTtcO4KM8qIKqkqGahh38BVtrNR8WEx21DAM5 K7f8nhorj/quNMf5Ao7zntNnxJOjQhetzx+MZw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to d.dns.id for id/DNSKEY
	Received 873 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 873 octets ;; HEADER SECTION ;; id = 18383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (3 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260628055352 20260529052533 26887 id. I/mrsKEXUjNIqJ/HY+klg6wJ+bWHUjsGcKxBKQXIlNR8+eqa4OauI/9YIk3f0tOQSv8EVjav5Cf/ 0eooxCy7ddzJi0392+NxQJiY2VI99wkxHxTjk7IjJXPWwDLklCMP6+/DrABMR0wRgCUITNStKdge 3i5XbdVugOwEbans3MhdFi/Bj9ZLng1rcuD1HAJcCWzvjbznMC0goF0sZ0hKkIpybtlW5GNEw41T tqk+zKNnhvWWiAPzCemXg67hFF6b3oQY9VIaAekgVNOSdMKGJpce7W4TTBsa+2BbjHfthFz1C0ma GA6V90fy+5adcf4raElH1bv05picZ+DOWAGdJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260628055352 20260529052533 26887 id. I/mrsKEXUjNIqJ/HY+klg6wJ+bWHUjsGcKxBKQXIlNR8+eqa4OauI/9YIk3f0tOQSv8EVjav5Cf/ 0eooxCy7ddzJi0392+NxQJiY2VI99wkxHxTjk7IjJXPWwDLklCMP6+/DrABMR0wRgCUITNStKdge 3i5XbdVugOwEbans3MhdFi/Bj9ZLng1rcuD1HAJcCWzvjbznMC0goF0sZ0hKkIpybtlW5GNEw41T tqk+zKNnhvWWiAPzCemXg67hFF6b3oQY9VIaAekgVNOSdMKGJpce7W4TTBsa+2BbjHfthFz1C0ma GA6V90fy+5adcf4raElH1bv05picZ+DOWAGdJA== )`
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to c.dns.id for bnn.go.id/A
	Received 311 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 311 octets ;; HEADER SECTION ;; id = 13414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bnn.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bnn.go.id. 3600 IN NS nx1.bnn.go.id. bnn.go.id. 3600 IN NS nx2.bnn.go.id. bnn.go.id. 3600 IN DS ( 46157 13 2 55c9968fb9ddfe855d9743b069f404b8ed972983acb7753c5b456414b8dfbcee ) bnn.go.id. 3600 IN RRSIG ( DS 13 3 3600 20260714024451 20260614023431 6358 go.id. ftv27a9LJRYYqXbolYyQr52mpQzn/BhBg8DxPPwXZh57dEefHp0trbU76ilefA9R6haDCpnQBQ8U R4x9WvMEog== ) ;; ADDITIONAL SECTION (5 records) nx1.bnn.go.id. 3600 IN A 103.3.70.1 nx2.bnn.go.id. 3600 IN A 103.112.223.1 nx1.bnn.go.id. 3600 IN AAAA 2001:df5:3600::903:1 nx2.bnn.go.id. 3600 IN AAAA 2001:df4:bd00::990:1 ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for go.id/DNSKEY
	Received 676 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 676 octets ;; HEADER SECTION ;; id = 55662 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) go.id. 3600 IN NS d.dns.id. go.id. 3600 IN NS c.dns.id. go.id. 3600 IN NS e.dns.id. go.id. 3600 IN NS b.dns.id. go.id. 3600 IN NS f.dns.id. go.id. 13300 IN DS ( 53081 13 2 a90380c64104a5a74e4bfee814ed4604e48276b5f06b14d3ff88874d7ced2872 ) go.id. 13300 IN RRSIG ( DS 8 2 13300 20260702105123 20260602100559 22449 id. jbPj2bKBcxLf7VGGBdld/1VdEp7a8kRZRLorntnjYc06NTGuH5OFBoPqgz14A/4D7iZ+X7YtvRQ9 Egv2XSS/tjgsSuobUtUs5Sf2Upq0r6ag3GRLmxkuzGEYReT5K3Cak5jBvOUroACRQcM38zgjMa2/ WNFRySVYlYNa3o9h1ug+2UegZa+I7OpvtiJffJfPe/xOpsyFP2WYs1tjUggV/k+QCjKrodO+DSMU 814bh10eddrAH23YSaNO3Asl09JuFGOm/GLLU1K/i0xupuQHVp/U/IlZGp2cz2YclC458pajwxDb emC4rX5mwgYoW+tCyflKrR2JQLrAQHTOdWMzKg== ) ;; ADDITIONAL SECTION (11 records) f.dns.id. 3600 IN A 203.119.112.112 e.dns.id. 86400 IN A 103.19.177.177 d.dns.id. 86400 IN A 45.126.57.57 c.dns.id. 86400 IN A 103.19.178.178 b.dns.id. 86400 IN A 103.19.179.179 f.dns.id. 86400 IN AAAA 2001:dd8:1f::f e.dns.id. 86400 IN AAAA 2001:df5:4000:4::4 d.dns.id. 86400 IN AAAA 2402:ee80:d::d c.dns.id. 86400 IN AAAA 2402:ee80:c::c b.dns.id. 86400 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Found child zone go.id

go.id

	Checking DS between id and go.id
	Query to c.dns.id for go.id/DS
	Received 372 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 372 octets ;; HEADER SECTION ;; id = 52147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DS ;; ANSWER SECTION (2 records) go.id. 13300 IN DS ( 53081 13 2 a90380c64104a5a74e4bfee814ed4604e48276b5f06b14d3ff88874d7ced2872 ) go.id. 13300 IN RRSIG ( DS 8 2 13300 20260702105123 20260602100559 22449 id. jbPj2bKBcxLf7VGGBdld/1VdEp7a8kRZRLorntnjYc06NTGuH5OFBoPqgz14A/4D7iZ+X7YtvRQ9 Egv2XSS/tjgsSuobUtUs5Sf2Upq0r6ag3GRLmxkuzGEYReT5K3Cak5jBvOUroACRQcM38zgjMa2/ WNFRySVYlYNa3o9h1ug+2UegZa+I7OpvtiJffJfPe/xOpsyFP2WYs1tjUggV/k+QCjKrodO+DSMU 814bh10eddrAH23YSaNO3Asl09JuFGOm/GLLU1K/i0xupuQHVp/U/IlZGp2cz2YclC458pajwxDb emC4rX5mwgYoW+tCyflKrR2JQLrAQHTOdWMzKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for go.id in the id zone
	DS=53081/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`go.id. 13300 IN RRSIG ( DS 8 2 13300 20260702105123 20260602100559 22449 id. jbPj2bKBcxLf7VGGBdld/1VdEp7a8kRZRLorntnjYc06NTGuH5OFBoPqgz14A/4D7iZ+X7YtvRQ9 Egv2XSS/tjgsSuobUtUs5Sf2Upq0r6ag3GRLmxkuzGEYReT5K3Cak5jBvOUroACRQcM38zgjMa2/ WNFRySVYlYNa3o9h1ug+2UegZa+I7OpvtiJffJfPe/xOpsyFP2WYs1tjUggV/k+QCjKrodO+DSMU 814bh10eddrAH23YSaNO3Asl09JuFGOm/GLLU1K/i0xupuQHVp/U/IlZGp2cz2YclC458pajwxDb emC4rX5mwgYoW+tCyflKrR2JQLrAQHTOdWMzKg== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=53081/SHA-256 is now in the chain-of-trust
	`go.id. 13300 IN DS ( 53081 13 2 a90380c64104a5a74e4bfee814ed4604e48276b5f06b14d3ff88874d7ced2872 )`
	Query to f.dns.id for go.id/DNSKEY
	Received 295 bytes from 203.119.112.112
	;; Response received from [203.119.112.112] 295 octets ;; HEADER SECTION ;; id = 42325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DNSKEY ;; ANSWER SECTION (3 records) go.id. 86400 IN DNSKEY ( 256 3 13 yRodYKsowKIljuA/kF1TW/eox2wJW+8bnoCMt6cFKdMAUQOYv80ZMTcoSTmUtI6ANOYbDsGzLoUU XRxDlwGdEA== ) ; keytag 6358 go.id. 86400 IN DNSKEY ( 257 3 13 T3w2iw97ZKUCGLQkTWrO6juUU9uaYMoTw7CgHQAI3S81FEx3v6euK7tfaGBD4Meh9FlZvRFxw32d yfiPvjgzbg== ) ; keytag 53081 go.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260707094616 20260607092125 53081 go.id. cHwt4UCOZQ4tmllzLn7fTdlArS/VjvSe0yi2TzL7KlvxXp/ZrQtcn6cOSKJPW0J93cDGFA6hdnNi 1Jj26Hw3FQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for go.id
	`go.id. 86400 IN DNSKEY ( 256 3 13 yRodYKsowKIljuA/kF1TW/eox2wJW+8bnoCMt6cFKdMAUQOYv80ZMTcoSTmUtI6ANOYbDsGzLoUU XRxDlwGdEA== ) ; keytag 6358`
	`go.id. 86400 IN DNSKEY ( 257 3 13 T3w2iw97ZKUCGLQkTWrO6juUU9uaYMoTw7CgHQAI3S81FEx3v6euK7tfaGBD4Meh9FlZvRFxw32d yfiPvjgzbg== ) ; keytag 53081`
	DNSKEY=53081/SEP is now in the chain-of-trust
	DS=53081/SHA-256 verifies DNSKEY=53081/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`go.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260707094616 20260607092125 53081 go.id. cHwt4UCOZQ4tmllzLn7fTdlArS/VjvSe0yi2TzL7KlvxXp/ZrQtcn6cOSKJPW0J93cDGFA6hdnNi 1Jj26Hw3FQ== )`
	RRSIG=53081 and DNSKEY=53081/SEP verifies the DNSKEY RRset
	DNSKEY=6358 is now in the chain-of-trust
	Query to f.dns.id for bnn.go.id/A
	Received 311 bytes from 203.119.112.112
	;; Response received from [203.119.112.112] 311 octets ;; HEADER SECTION ;; id = 3927 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bnn.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bnn.go.id. 3600 IN NS nx1.bnn.go.id. bnn.go.id. 3600 IN NS nx2.bnn.go.id. bnn.go.id. 3600 IN DS ( 46157 13 2 55c9968fb9ddfe855d9743b069f404b8ed972983acb7753c5b456414b8dfbcee ) bnn.go.id. 3600 IN RRSIG ( DS 13 3 3600 20260714024451 20260614023431 6358 go.id. ftv27a9LJRYYqXbolYyQr52mpQzn/BhBg8DxPPwXZh57dEefHp0trbU76ilefA9R6haDCpnQBQ8U R4x9WvMEog== ) ;; ADDITIONAL SECTION (5 records) nx1.bnn.go.id. 3600 IN A 103.3.70.1 nx2.bnn.go.id. 3600 IN A 103.112.223.1 nx1.bnn.go.id. 3600 IN AAAA 2001:df5:3600::903:1 nx2.bnn.go.id. 3600 IN AAAA 2001:df4:bd00::990:1 ;; { "EDNS-VERSION": 0 }
	Query to f.dns.id for bnn.go.id/DNSKEY
	Received 311 bytes from 203.119.112.112
	;; Response received from [203.119.112.112] 311 octets ;; HEADER SECTION ;; id = 9405 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bnn.go.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bnn.go.id. 3600 IN NS nx1.bnn.go.id. bnn.go.id. 3600 IN NS nx2.bnn.go.id. bnn.go.id. 3600 IN DS ( 46157 13 2 55c9968fb9ddfe855d9743b069f404b8ed972983acb7753c5b456414b8dfbcee ) bnn.go.id. 3600 IN RRSIG ( DS 13 3 3600 20260714024451 20260614023431 6358 go.id. ftv27a9LJRYYqXbolYyQr52mpQzn/BhBg8DxPPwXZh57dEefHp0trbU76ilefA9R6haDCpnQBQ8U R4x9WvMEog== ) ;; ADDITIONAL SECTION (5 records) nx1.bnn.go.id. 3600 IN A 103.3.70.1 nx2.bnn.go.id. 3600 IN A 103.112.223.1 nx1.bnn.go.id. 3600 IN AAAA 2001:df5:3600::903:1 nx2.bnn.go.id. 3600 IN AAAA 2001:df4:bd00::990:1 ;; { "EDNS-VERSION": 0 }
	Found child zone bnn.go.id

bnn.go.id

	Checking DS between go.id and bnn.go.id
	Query to c.dns.id for bnn.go.id/DS
	Received 187 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 187 octets ;; HEADER SECTION ;; id = 23121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bnn.go.id. IN DS ;; ANSWER SECTION (2 records) bnn.go.id. 3600 IN DS ( 46157 13 2 55c9968fb9ddfe855d9743b069f404b8ed972983acb7753c5b456414b8dfbcee ) bnn.go.id. 3600 IN RRSIG ( DS 13 3 3600 20260714024451 20260614023431 6358 go.id. ftv27a9LJRYYqXbolYyQr52mpQzn/BhBg8DxPPwXZh57dEefHp0trbU76ilefA9R6haDCpnQBQ8U R4x9WvMEog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bnn.go.id in the go.id zone
	DS=46157/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`bnn.go.id. 3600 IN RRSIG ( DS 13 3 3600 20260714024451 20260614023431 6358 go.id. ftv27a9LJRYYqXbolYyQr52mpQzn/BhBg8DxPPwXZh57dEefHp0trbU76ilefA9R6haDCpnQBQ8U R4x9WvMEog== )`
	RRSIG=6358 and DNSKEY=6358 verifies the DS RRset
	DS=46157/SHA-256 is now in the chain-of-trust
	`bnn.go.id. 3600 IN DS ( 46157 13 2 55c9968fb9ddfe855d9743b069f404b8ed972983acb7753c5b456414b8dfbcee )`
	Query to nx2.bnn.go.id for bnn.go.id/DNSKEY
	Timeout querying nx2.bnn.go.id/223.27.149.70 for bnn.go.id/DNSKEY
	All Queries to nx2.bnn.go.id for bnn.go.id/DNSKEY timed out or failed
	Query to nx1.bnn.go.id for bnn.go.id/DNSKEY
	Timeout querying nx1.bnn.go.id/103.3.70.1 for bnn.go.id/DNSKEY
	All Queries to nx1.bnn.go.id for bnn.go.id/DNSKEY timed out or failed
	Failed to get DNSKEY RR set for zone bnn.go.id
	No response from bnn.go.id nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bnn.go.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: