DNSSEC Debugger

Domain Name:

Time: 2025-12-16 21:40:30 UTC

Analyzing DNSSEC problems for co.mw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 53262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for co.mw/A
	Received 831 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 831 octets ;; HEADER SECTION ;; id = 24906 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 172800 IN NS domwe.sdn.mw. mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS rip.psg.com. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (15 records) chambo.sdnp.org.mw. 172800 IN A 102.219.183.67 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 pch1.nic.mw. 172800 IN A 204.61.216.131 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 rip.psg.com. 172800 IN A 147.28.0.39 ns4.apnic.net. 172800 IN A 202.12.31.53 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 rip.psg.com. 172800 IN AAAA 2001:418:1::39 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::99 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for mw/DNSKEY
	Received 828 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 828 octets ;; HEADER SECTION ;; id = 9628 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS domwe.sdn.mw. mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS rip.psg.com. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (15 records) chambo.sdnp.org.mw. 172800 IN A 102.219.183.67 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 pch1.nic.mw. 172800 IN A 204.61.216.131 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 rip.psg.com. 172800 IN A 147.28.0.39 ns4.apnic.net. 172800 IN A 202.12.31.53 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 rip.psg.com. 172800 IN AAAA 2001:418:1::39 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::99 ;; { "EDNS-VERSION": 0 }
	Found child zone mw

	Checking DS between . and mw
	Query to c.root-servers.net for mw/DS
	Received 703 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 703 octets ;; HEADER SECTION ;; id = 8586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2025121601 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20251229170000 20251216160000 61809 . LaFXrfcxoFB568fw6c96mzLqml5iONQq5Z6vEaSpkzvQOjS4e0jQ3d0RjQd2uwSa926a40i6xht9 BNxbEOylC4ECPlsxZucQFgVdI/DMZlMFf4qYwS+OBo6rs6RV17Bx4SS8S72400Vri1dhNF1o3/6p I5v+FMxkJPYukS3IK2A/IyBdOMJG+bJlMct7nxzc95SxlQ4ENtL0ppLejWNZ2Hr01cO3Prbq0Sjw w20q4p1sFd2AmmUFr6R0GjEDPjehniqsBKMyVopz0KvUNZqYZfyvhqMeE3LzRa5sL/3z1hyaY14O WUFnyD9Es7LWlymide9dKCUKH99IQBu2X3/L/w== ) mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mw in the . zone
	Query to rip.psg.com for mw/DNSKEY
	Received 101 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 101 octets ;; HEADER SECTION ;; id = 39941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915501 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to pch1.nic.mw for co.mw/A
	Received 108 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 108 octets ;; HEADER SECTION ;; id = 30835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch1.nic.mw is authoritative for co.mw
	Query to pch1.nic.mw for co.mw/DNSKEY
	Received 108 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 108 octets ;; HEADER SECTION ;; id = 40634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.mw
	Attempting to learn nameservers for co.mw
	Query to domwe.sdn.mw for co.mw/NS
	Received 203 bytes from 41.87.5.162
	;; Response received from [41.87.5.162] 203 octets ;; HEADER SECTION ;; id = 40043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN NS ;; ANSWER SECTION (6 records) co.mw. 18000 IN NS pch1.nic.mw. co.mw. 18000 IN NS mw-e.ns.nic.cz. co.mw. 18000 IN NS ns4.apnic.net. co.mw. 18000 IN NS rip.psg.com. co.mw. 18000 IN NS chambo.sdnp.org.mw. co.mw. 18000 IN NS domwe.sdn.mw. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.mw nameservers: pch1.nic.mw, mw-e.ns.nic.cz, ns4.apnic.net, rip.psg.com, chambo.sdnp.org.mw, domwe.sdn.mw

co.mw

	Checking DS between mw and co.mw
	Query to mw.cctld.authdns.ripe.net for co.mw/DS
	Received 104 bytes from 193.0.9.99
	;; Response received from [193.0.9.99] 104 octets ;; HEADER SECTION ;; id = 35641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915501 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for co.mw in the mw zone
	Query to pch1.nic.mw for co.mw/DNSKEY
	Received 108 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 108 octets ;; HEADER SECTION ;; id = 30594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to chambo.sdnp.org.mw for co.mw/A
	Received 104 bytes from 102.219.183.67
	;; Response received from [102.219.183.67] 104 octets ;; HEADER SECTION ;; id = 61681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	chambo.sdnp.org.mw is authoritative for co.mw
	Query to rip.psg.com for co.mw/SOA
	Received 104 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 104 octets ;; HEADER SECTION ;; id = 51214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN SOA ;; ANSWER SECTION (1 record) co.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to domwe.sdn.mw for co.mw/SOA
	Received 259 bytes from 41.87.5.162
	;; Response received from [41.87.5.162] 259 octets ;; HEADER SECTION ;; id = 49150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN SOA ;; ANSWER SECTION (1 record) co.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (6 records) co.mw. 18000 IN NS pch1.nic.mw. co.mw. 18000 IN NS rip.psg.com. co.mw. 18000 IN NS chambo.sdnp.org.mw. co.mw. 18000 IN NS ns4.apnic.net. co.mw. 18000 IN NS mw-e.ns.nic.cz. co.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pch1.nic.mw for co.mw/SOA
	Received 253 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 253 octets ;; HEADER SECTION ;; id = 56217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN SOA ;; ANSWER SECTION (1 record) co.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (6 records) co.mw. 18000 IN NS pch1.nic.mw. co.mw. 18000 IN NS mw-e.ns.nic.cz. co.mw. 18000 IN NS chambo.sdnp.org.mw. co.mw. 18000 IN NS ns4.apnic.net. co.mw. 18000 IN NS rip.psg.com. co.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for co.mw/SOA
	Received 108 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 108 octets ;; HEADER SECTION ;; id = 5877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN SOA ;; ANSWER SECTION (1 record) co.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to mw-e.ns.nic.cz for co.mw/SOA
	Received 104 bytes from 185.43.134.10
	;; Response received from [185.43.134.10] 104 octets ;; HEADER SECTION ;; id = 64837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN SOA ;; ANSWER SECTION (1 record) co.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to chambo.sdnp.org.mw for co.mw/A
	Received 104 bytes from 196.45.188.5
	;; Response received from [196.45.188.5] 104 octets ;; HEADER SECTION ;; id = 57772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

co.mw

	Query to mw-e.ns.nic.cz for co.mw/A
	Received 104 bytes from 185.43.134.10
	;; Response received from [185.43.134.10] 104 octets ;; HEADER SECTION ;; id = 10832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mw-e.ns.nic.cz is authoritative for co.mw
	Query to mw-e.ns.nic.cz for co.mw/A
	Received 104 bytes from 185.43.134.10
	;; Response received from [185.43.134.10] 104 octets ;; HEADER SECTION ;; id = 12447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

co.mw

	Query to pch1.nic.mw for co.mw/A
	Received 108 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 108 octets ;; HEADER SECTION ;; id = 23177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch1.nic.mw is authoritative for co.mw
	Query to pch1.nic.mw for co.mw/A
	Received 108 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 108 octets ;; HEADER SECTION ;; id = 10491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

co.mw

	Query to domwe.sdn.mw for co.mw/A
	Received 108 bytes from 41.87.5.162
	;; Response received from [41.87.5.162] 108 octets ;; HEADER SECTION ;; id = 34793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	domwe.sdn.mw is authoritative for co.mw
	Query to domwe.sdn.mw for co.mw/A
	Received 108 bytes from 41.87.2.154
	;; Response received from [41.87.2.154] 108 octets ;; HEADER SECTION ;; id = 34985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

co.mw

	Query to ns4.apnic.net for co.mw/A
	Received 108 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 108 octets ;; HEADER SECTION ;; id = 35797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for co.mw
	Query to ns4.apnic.net for co.mw/A
	Received 108 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 108 octets ;; HEADER SECTION ;; id = 14844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

co.mw

	Query to rip.psg.com for co.mw/A
	Received 104 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 104 octets ;; HEADER SECTION ;; id = 59517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rip.psg.com is authoritative for co.mw
	Query to rip.psg.com for co.mw/A
	Received 104 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 104 octets ;; HEADER SECTION ;; id = 57760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) co.mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915502 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test co.mw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: