DNSSEC Debugger - capost.media

Domain Name:

Time: 2026-04-05 11:21:21 UTC

Analyzing DNSSEC problems for capost.media

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 19327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to f.root-servers.net for capost.media/A
	Received 758 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 758 octets ;; HEADER SECTION ;; id = 2362 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) media. 172800 IN NS v0n0.nic.media. media. 172800 IN NS v0n1.nic.media. media. 172800 IN NS v0n2.nic.media. media. 172800 IN NS v0n3.nic.media. media. 172800 IN NS v2n0.nic.media. media. 172800 IN NS v2n1.nic.media. media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260418050000 20260405040000 54393 . PeXjM0lMMp+Q7vmKCdfGcz+ram2LG6hfprUdRqnbhMGq+80e3dN9QygIIgIHFn4qzvaena+SjMsU CpOS6WGIO7VNUBMeDalZuZKSHrjvN4XZfbzT8gDKKL2oH0PQJuigKmcBGfpP65C6lkIO0HNUnAkP lZZ277iKJVYKKuLYehVdvb21l08+0Wu3nWsrqErZSG35PP7MiPjV7hSM8dx1QJudczVqrapJtTZo 1zQHxEyG0QXE8FlRlptkU/cPv6PvDvAGIohAyQ7ZLfgEh/9/rhBo8ArwzGvdCX+4lxTIlpCaLrN7 5jGqMfAUCf3cpCF8mtqEvCBvuDjDlg4hqjT2dw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.media. 172800 IN A 65.22.20.3 v0n0.nic.media. 172800 IN AAAA 2a01:8840:16::3 v0n1.nic.media. 172800 IN A 65.22.21.3 v0n1.nic.media. 172800 IN AAAA 2a01:8840:17::3 v0n2.nic.media. 172800 IN A 65.22.22.3 v0n2.nic.media. 172800 IN AAAA 2a01:8840:18::3 v0n3.nic.media. 172800 IN A 161.232.10.3 v0n3.nic.media. 172800 IN AAAA 2a01:8840:f4::3 v2n0.nic.media. 172800 IN A 65.22.23.3 v2n0.nic.media. 172800 IN AAAA 2a01:8840:19::3 v2n1.nic.media. 172800 IN A 161.232.11.3 v2n1.nic.media. 172800 IN AAAA 2a01:8840:f5::3 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for media/DNSKEY
	Received 751 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 751 octets ;; HEADER SECTION ;; id = 8948 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) media. 172800 IN NS v0n0.nic.media. media. 172800 IN NS v0n1.nic.media. media. 172800 IN NS v0n2.nic.media. media. 172800 IN NS v0n3.nic.media. media. 172800 IN NS v2n0.nic.media. media. 172800 IN NS v2n1.nic.media. media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260418050000 20260405040000 54393 . PeXjM0lMMp+Q7vmKCdfGcz+ram2LG6hfprUdRqnbhMGq+80e3dN9QygIIgIHFn4qzvaena+SjMsU CpOS6WGIO7VNUBMeDalZuZKSHrjvN4XZfbzT8gDKKL2oH0PQJuigKmcBGfpP65C6lkIO0HNUnAkP lZZ277iKJVYKKuLYehVdvb21l08+0Wu3nWsrqErZSG35PP7MiPjV7hSM8dx1QJudczVqrapJtTZo 1zQHxEyG0QXE8FlRlptkU/cPv6PvDvAGIohAyQ7ZLfgEh/9/rhBo8ArwzGvdCX+4lxTIlpCaLrN7 5jGqMfAUCf3cpCF8mtqEvCBvuDjDlg4hqjT2dw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.media. 172800 IN A 65.22.20.3 v0n1.nic.media. 172800 IN A 65.22.21.3 v0n2.nic.media. 172800 IN A 65.22.22.3 v0n3.nic.media. 172800 IN A 161.232.10.3 v2n0.nic.media. 172800 IN A 65.22.23.3 v2n1.nic.media. 172800 IN A 161.232.11.3 v0n0.nic.media. 172800 IN AAAA 2a01:8840:16::3 v0n1.nic.media. 172800 IN AAAA 2a01:8840:17::3 v0n2.nic.media. 172800 IN AAAA 2a01:8840:18::3 v0n3.nic.media. 172800 IN AAAA 2a01:8840:f4::3 v2n0.nic.media. 172800 IN AAAA 2a01:8840:19::3 v2n1.nic.media. 172800 IN AAAA 2a01:8840:f5::3 ;; { "EDNS-VERSION": 0 }
	Found child zone media

media

	Checking DS between . and media
	Query to l.root-servers.net for media/DS
	Received 369 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 369 octets ;; HEADER SECTION ;; id = 50412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DS ;; ANSWER SECTION (2 records) media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260418050000 20260405040000 54393 . PeXjM0lMMp+Q7vmKCdfGcz+ram2LG6hfprUdRqnbhMGq+80e3dN9QygIIgIHFn4qzvaena+SjMsU CpOS6WGIO7VNUBMeDalZuZKSHrjvN4XZfbzT8gDKKL2oH0PQJuigKmcBGfpP65C6lkIO0HNUnAkP lZZ277iKJVYKKuLYehVdvb21l08+0Wu3nWsrqErZSG35PP7MiPjV7hSM8dx1QJudczVqrapJtTZo 1zQHxEyG0QXE8FlRlptkU/cPv6PvDvAGIohAyQ7ZLfgEh/9/rhBo8ArwzGvdCX+4lxTIlpCaLrN7 5jGqMfAUCf3cpCF8mtqEvCBvuDjDlg4hqjT2dw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for media in the . zone
	DS=54649/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`media. 86400 IN RRSIG ( DS 8 1 86400 20260418050000 20260405040000 54393 . PeXjM0lMMp+Q7vmKCdfGcz+ram2LG6hfprUdRqnbhMGq+80e3dN9QygIIgIHFn4qzvaena+SjMsU CpOS6WGIO7VNUBMeDalZuZKSHrjvN4XZfbzT8gDKKL2oH0PQJuigKmcBGfpP65C6lkIO0HNUnAkP lZZ277iKJVYKKuLYehVdvb21l08+0Wu3nWsrqErZSG35PP7MiPjV7hSM8dx1QJudczVqrapJtTZo 1zQHxEyG0QXE8FlRlptkU/cPv6PvDvAGIohAyQ7ZLfgEh/9/rhBo8ArwzGvdCX+4lxTIlpCaLrN7 5jGqMfAUCf3cpCF8mtqEvCBvuDjDlg4hqjT2dw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=54649/SHA-256 is now in the chain-of-trust
	`media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 )`
	Query to v0n2.nic.media for media/DNSKEY
	Received 899 bytes from 65.22.22.3
	;; Response received from [65.22.22.3] 899 octets ;; HEADER SECTION ;; id = 37466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DNSKEY ;; ANSWER SECTION (4 records) media. 3600 IN DNSKEY ( 257 3 8 AwEAAbjsdPQYDKV3qpXRCGI5BUfuXnkAsgjxeou91n88J4aqrsXw4reAAGOJoScdghzkuh5kaiQK +eHY/88y+9ZscVclat5Lwp0i1klFw+SyAoITzgz5lUgaAVJpb1Wt2xB3H/n/Hyudn9xmLzGE8Xj5 7KTTRcpOlg4tJNPVFWzOYUMWc0Q3ETJAOsFcDZDR7XJkYQrN7dIIN5CBMphtz6YxEWcHEEyNVHqT lc2hTKi+aNQh/dnQzal+yMN5rDBp2qka/p6zPULgOzuhEeu56MG4LoBKC0ZM5owuL3xd+8wCIFau 1HCTZaglSuORPsXYkBE0sKvtZoyu5+hNf8mvyfnJn3M= ) ; keytag 54649 media. 3600 IN DNSKEY ( 256 3 8 AwEAAaMIM+w/Tve9uvlv2DCarWzRoc0fmCnZ10ws5fqFSmNwtNAUi0lRIaNz+IqJCpqSCabwXzbJ iKE+zyj1jZjT1oTn5ehkY1yld3JVG4NIiyzgSJbRU1dAdbzFuHFdT2xrbeZWYDhxYTpuMYs+kuue cZYLea+4R+seVZj8ZrZkngrB ) ; keytag 50028 media. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7K0oK3yH0qZHIXO/IXTX2hu2FQ4E7ac+OKeBMfL7PS/zUgdvTXbjcyu/Ulp24fs3H31GhZ zxekPrcQZ+ugzG2QKb7KfzJE1Uq9UrJDL5xTwr/0jZ7debJNf5Soyy5n4nEiVaPU2nQ4uwpeUFa3 /xgv2U7n/0ZcD0kcBCH+Q4H/ ) ; keytag 8541 media. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260422153310 20260401143310 54649 media. px0+7IWu5qEEWN0yn2nuzzz4QRcOJt9bf1B4JgMWFkeZoR7LIWUqfrkFI9bs3z1E2m/GokZ0d14e RCLr52XCP9oat0UemkFtmTDdrk1hv8aAItHMgsC8HeTZglkAERD7Y7+c6XBQ8N6i3ozb+jG5RTo2 JyphsFzq6k+vipQqUM/9wxfb360PdZhe25HRYywR5ker09l/HCqh4L+BJkQi9ckUuWxXEUPznm9x IaPJrJfalvXu9lHFXGm56DrmeMuenCVYnRkYg7hlemgL6B6OJI9WDi9ew8dR8zQ+JjtJRqZSBJk6 dlVbGnly7VHioEyDd5y+40YzNTfiW7lhFLmccA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for media
	`media. 3600 IN DNSKEY ( 257 3 8 AwEAAbjsdPQYDKV3qpXRCGI5BUfuXnkAsgjxeou91n88J4aqrsXw4reAAGOJoScdghzkuh5kaiQK +eHY/88y+9ZscVclat5Lwp0i1klFw+SyAoITzgz5lUgaAVJpb1Wt2xB3H/n/Hyudn9xmLzGE8Xj5 7KTTRcpOlg4tJNPVFWzOYUMWc0Q3ETJAOsFcDZDR7XJkYQrN7dIIN5CBMphtz6YxEWcHEEyNVHqT lc2hTKi+aNQh/dnQzal+yMN5rDBp2qka/p6zPULgOzuhEeu56MG4LoBKC0ZM5owuL3xd+8wCIFau 1HCTZaglSuORPsXYkBE0sKvtZoyu5+hNf8mvyfnJn3M= ) ; keytag 54649`
	`media. 3600 IN DNSKEY ( 256 3 8 AwEAAaMIM+w/Tve9uvlv2DCarWzRoc0fmCnZ10ws5fqFSmNwtNAUi0lRIaNz+IqJCpqSCabwXzbJ iKE+zyj1jZjT1oTn5ehkY1yld3JVG4NIiyzgSJbRU1dAdbzFuHFdT2xrbeZWYDhxYTpuMYs+kuue cZYLea+4R+seVZj8ZrZkngrB ) ; keytag 50028`
	`media. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7K0oK3yH0qZHIXO/IXTX2hu2FQ4E7ac+OKeBMfL7PS/zUgdvTXbjcyu/Ulp24fs3H31GhZ zxekPrcQZ+ugzG2QKb7KfzJE1Uq9UrJDL5xTwr/0jZ7debJNf5Soyy5n4nEiVaPU2nQ4uwpeUFa3 /xgv2U7n/0ZcD0kcBCH+Q4H/ ) ; keytag 8541`
	DNSKEY=54649/SEP is now in the chain-of-trust
	DS=54649/SHA-256 verifies DNSKEY=54649/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`media. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260422153310 20260401143310 54649 media. px0+7IWu5qEEWN0yn2nuzzz4QRcOJt9bf1B4JgMWFkeZoR7LIWUqfrkFI9bs3z1E2m/GokZ0d14e RCLr52XCP9oat0UemkFtmTDdrk1hv8aAItHMgsC8HeTZglkAERD7Y7+c6XBQ8N6i3ozb+jG5RTo2 JyphsFzq6k+vipQqUM/9wxfb360PdZhe25HRYywR5ker09l/HCqh4L+BJkQi9ckUuWxXEUPznm9x IaPJrJfalvXu9lHFXGm56DrmeMuenCVYnRkYg7hlemgL6B6OJI9WDi9ew8dR8zQ+JjtJRqZSBJk6 dlVbGnly7VHioEyDd5y+40YzNTfiW7lhFLmccA== )`
	RRSIG=54649 and DNSKEY=54649/SEP verifies the DNSKEY RRset
	DNSKEY=50028 is now in the chain-of-trust
	DNSKEY=8541 is now in the chain-of-trust
	Query to v0n1.nic.media for capost.media/A
	Received 594 bytes from 65.22.21.3
	;; Response received from [65.22.21.3] 594 octets ;; HEADER SECTION ;; id = 53881 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) capost.media. 3600 IN NS 5579.ns1.abovedomains.com. capost.media. 3600 IN NS 5579.ns2.abovedomains.com. vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN NSEC3 ( 1 1 0 73 vu4p9jh1grftqalun1f5ml5pv2tdbn2i NS SOA RRSIG DNSKEY NSEC3PARAM ) vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260426111906 20260405101906 8541 media. AlgztUqdxbcNBhCjRX4hCmpbnM0ZJWYfWRuJqVq5IRjEWUXn82He0G5KLG55RurK6lXykBi8VAus Q7aevjkzBJSiubYYnuUbZIkCNhQpNEYoPj2XcTcPDgoLiNbp6r8IN/gKrtMSKjVIvZ8ot7WqnoYi yI7GrvGSlAIXQSlt1Uc= ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN NSEC3 ( 1 1 0 73 298kq2pe6kod4qgr1t1oqs8goueb4ap7 NS DS RRSIG ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260422153310 20260401143310 8541 media. St70QEVUN9/56YKM6WEAZJC84H9jr7xpld6XRTLhxhxVNvWEz6HExKEYMwxa9U1rXJ2LFTMi78Ii hiPt2nljphTo4AtWwEcenNZsSa22zGgJ6kJyRAt/p25GriIAY2OJlq7UWg5zJPU54L1X1EOdr8cZ GPWYvPj5nZpIOFOJPjA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v2n0.nic.media for capost.media/DNSKEY
	Received 594 bytes from 65.22.23.3
	;; Response received from [65.22.23.3] 594 octets ;; HEADER SECTION ;; id = 6648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) capost.media. 3600 IN NS 5579.ns1.abovedomains.com. capost.media. 3600 IN NS 5579.ns2.abovedomains.com. vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN NSEC3 ( 1 1 0 73 vu4p9jh1grftqalun1f5ml5pv2tdbn2i NS SOA RRSIG DNSKEY NSEC3PARAM ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN NSEC3 ( 1 1 0 73 298kq2pe6kod4qgr1t1oqs8goueb4ap7 NS DS RRSIG ) vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260426111906 20260405101906 8541 media. AlgztUqdxbcNBhCjRX4hCmpbnM0ZJWYfWRuJqVq5IRjEWUXn82He0G5KLG55RurK6lXykBi8VAus Q7aevjkzBJSiubYYnuUbZIkCNhQpNEYoPj2XcTcPDgoLiNbp6r8IN/gKrtMSKjVIvZ8ot7WqnoYi yI7GrvGSlAIXQSlt1Uc= ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260422153310 20260401143310 8541 media. St70QEVUN9/56YKM6WEAZJC84H9jr7xpld6XRTLhxhxVNvWEz6HExKEYMwxa9U1rXJ2LFTMi78Ii hiPt2nljphTo4AtWwEcenNZsSa22zGgJ6kJyRAt/p25GriIAY2OJlq7UWg5zJPU54L1X1EOdr8cZ GPWYvPj5nZpIOFOJPjA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone capost.media

capost.media

	Checking DS between media and capost.media
	Query to v2n1.nic.media for capost.media/DS
	Received 765 bytes from 161.232.11.3
	;; Response received from [161.232.11.3] 765 octets ;; HEADER SECTION ;; id = 26175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) media. 3600 IN SOA ( v0n0.nic.media. hostmaster.donuts.email. 1775387748 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN NSEC3 ( 1 1 0 73 vu4p9jh1grftqalun1f5ml5pv2tdbn2i NS SOA RRSIG DNSKEY NSEC3PARAM ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN NSEC3 ( 1 1 0 73 298kq2pe6kod4qgr1t1oqs8goueb4ap7 NS DS RRSIG ) media. 3600 IN RRSIG ( SOA 8 1 3600 20260426111906 20260405101906 8541 media. IZ4rI7iv6MSHgm7vD8ggf7yhhxQrxzlb63znzUqRAEHhJ1qzY7HVGi4kVLzPV2DKEOP4v3OHKmR/ moSRqo5kPaS+oAqV/px7VH4lLycyq0EKWD4DAarFFwDMY1xASLs0RdcVbvH3srji/I5E7JcBsVZO y6HoCX81E0hbY8P8HE4= ) vu3ddfv7fd94odh9dmnkl605onrk29el.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260426111906 20260405101906 8541 media. AlgztUqdxbcNBhCjRX4hCmpbnM0ZJWYfWRuJqVq5IRjEWUXn82He0G5KLG55RurK6lXykBi8VAus Q7aevjkzBJSiubYYnuUbZIkCNhQpNEYoPj2XcTcPDgoLiNbp6r8IN/gKrtMSKjVIvZ8ot7WqnoYi yI7GrvGSlAIXQSlt1Uc= ) 28tm5e3vg7a2vk98ufs5auu9qrup1pv7.media. 3600 IN RRSIG ( NSEC3 8 2 3600 20260422153310 20260401143310 8541 media. St70QEVUN9/56YKM6WEAZJC84H9jr7xpld6XRTLhxhxVNvWEz6HExKEYMwxa9U1rXJ2LFTMi78Ii hiPt2nljphTo4AtWwEcenNZsSa22zGgJ6kJyRAt/p25GriIAY2OJlq7UWg5zJPU54L1X1EOdr8cZ GPWYvPj5nZpIOFOJPjA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for capost.media in the media zone
	Query to 5579.ns1.abovedomains.com for capost.media/DNSKEY
	Received 117 bytes from 103.224.182.9
	;; Response received from [103.224.182.9] 117 octets ;; HEADER SECTION ;; id = 15016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) capost.media. 60 IN SOA ( ns1.abovedomains.com. hostmaster.trellian.com. 2026040501 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to 5579.ns2.abovedomains.com for capost.media/A
	Received 57 bytes from 103.224.182.10
	;; Response received from [103.224.182.10] 57 octets ;; HEADER SECTION ;; id = 65331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (1 record) capost.media. 3600 IN A 103.224.212.206 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	5579.ns2.abovedomains.com is authoritative for capost.media
	Query to 5579.ns1.abovedomains.com for capost.media/SOA
	Received 117 bytes from 103.224.182.9
	;; Response received from [103.224.182.9] 117 octets ;; HEADER SECTION ;; id = 52570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN SOA ;; ANSWER SECTION (1 record) capost.media. 60 IN SOA ( ns1.abovedomains.com. hostmaster.trellian.com. 2026040501 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to 5579.ns2.abovedomains.com for capost.media/A
	Received 57 bytes from 103.224.182.10
	;; Response received from [103.224.182.10] 57 octets ;; HEADER SECTION ;; id = 38980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (1 record) capost.media. 3600 IN A 103.224.212.206 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capost.media A RR has value 103.224.212.206
	No RRSIGs found

capost.media

	Query to 5579.ns1.abovedomains.com for capost.media/A
	Received 57 bytes from 103.224.182.9
	;; Response received from [103.224.182.9] 57 octets ;; HEADER SECTION ;; id = 11569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (1 record) capost.media. 3600 IN A 103.224.212.206 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	5579.ns1.abovedomains.com is authoritative for capost.media
	Query to 5579.ns1.abovedomains.com for capost.media/A
	Received 57 bytes from 103.224.212.9
	;; Response received from [103.224.212.9] 57 octets ;; HEADER SECTION ;; id = 4085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capost.media. IN A ;; ANSWER SECTION (1 record) capost.media. 3600 IN A 103.224.212.206 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capost.media A RR has value 103.224.212.206
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test capost.media at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: