DNSSEC Debugger - comcast.net

Domain Name:

Time: 2026-03-14 18:44:25 UTC

Analyzing DNSSEC problems for comcast.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 62135 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for comcast.net/A
	Received 1171 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1171 octets ;; HEADER SECTION ;; id = 16029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260327050000 20260314040000 21831 . JZccl94ScDTaUpAdWPlcpd139JwNb9SY0FX/TI1+7Rq9QkuQcEngy062ukmzOc79UslFGHzAjxVC 7oje3PouY9MaOqKexEnxARy4ff6z04kY9ZBXKzhLJrFI2JwldEgmFzV60sM+sVj+mT+ROGwp7bDS usi3df0zRWo4wuhq2/J/PtGrB02d77UhyBq1diq0LYq/MFLsvgLsFUvSSr44fotV8Wy0njJcQuje XDY9M7S9iGoB85ZoAn4qHlPIFVDB/U/obTGGblSe+LbGmMhkBSqi1wJSfSieQvb+PsEql4kwCnZj PyzkUzMMnVrgOCrTqag4xlKmgrVnbQW1AriBaQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1160 octets ;; HEADER SECTION ;; id = 59616 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . nLLPuQW6wlkWXhlYjPz8rg9LgHgIbyLC3bHDxvFUxpnqzMVOl7cQ8tHV/7HX9qEk7D3moXGJQvZ6 UkkpakI6SHNJ4sOTpltNbO2TP2ICh8iqNdLHK1hAdujLY+31310mXcZwicjMEIxHGAjVbV2s+sQS oJV3h43UFoVKTNtGrJ96dsqRhT6kl96mxnCZWFoBF3yzyGzKHsqi28TZ6yq1yxng+zm5Uz43VPhk 9AvpLENSJ3swy3sLYTxX7IvRyuM+S7Q1efWYFa9hghAtvod+qeQ8t6EpmYmKHnLmI3maoH0qlCGM iPPX4yLS5mk8/bXbeR9an6ujCl6os+B+/NwbTQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 43858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . nLLPuQW6wlkWXhlYjPz8rg9LgHgIbyLC3bHDxvFUxpnqzMVOl7cQ8tHV/7HX9qEk7D3moXGJQvZ6 UkkpakI6SHNJ4sOTpltNbO2TP2ICh8iqNdLHK1hAdujLY+31310mXcZwicjMEIxHGAjVbV2s+sQS oJV3h43UFoVKTNtGrJ96dsqRhT6kl96mxnCZWFoBF3yzyGzKHsqi28TZ6yq1yxng+zm5Uz43VPhk 9AvpLENSJ3swy3sLYTxX7IvRyuM+S7Q1efWYFa9hghAtvod+qeQ8t6EpmYmKHnLmI3maoH0qlCGM iPPX4yLS5mk8/bXbeR9an6ujCl6os+B+/NwbTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . nLLPuQW6wlkWXhlYjPz8rg9LgHgIbyLC3bHDxvFUxpnqzMVOl7cQ8tHV/7HX9qEk7D3moXGJQvZ6 UkkpakI6SHNJ4sOTpltNbO2TP2ICh8iqNdLHK1hAdujLY+31310mXcZwicjMEIxHGAjVbV2s+sQS oJV3h43UFoVKTNtGrJ96dsqRhT6kl96mxnCZWFoBF3yzyGzKHsqi28TZ6yq1yxng+zm5Uz43VPhk 9AvpLENSJ3swy3sLYTxX7IvRyuM+S7Q1efWYFa9hghAtvod+qeQ8t6EpmYmKHnLmI3maoH0qlCGM iPPX4yLS5mk8/bXbeR9an6ujCl6os+B+/NwbTQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 291 octets ;; HEADER SECTION ;; id = 55819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260323141035 20260308140535 37331 net. 4z4EhgVGiU4VyMTg1rGc4D6U3BAqZt5qT4leERO75fRUFBKiKqUJbWutMVUmHcnRWWMLuuW6lCxk 5p1/dBxE2g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260323141035 20260308140535 37331 net. 4z4EhgVGiU4VyMTg1rGc4D6U3BAqZt5qT4leERO75fRUFBKiKqUJbWutMVUmHcnRWWMLuuW6lCxk 5p1/dBxE2g== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44109 is now in the chain-of-trust
	Query to m.gtld-servers.net for comcast.net/A
	Received 548 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 548 octets ;; HEADER SECTION ;; id = 4682 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20260319031427 20260312020427 44109 net. KkErq/L+fSt6ZjrMbUBMPcXio2uNW5kcLWdd25+kac2HXJ0L25gAt7R5H+Qo0CwIYxYOnOZS0d+I OsXKxOg4Ow== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; { "EDNS-VERSION": 0 }
	Query to a.gtld-servers.net for comcast.net/DNSKEY
	Received 548 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 548 octets ;; HEADER SECTION ;; id = 52211 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20260319031427 20260312020427 44109 net. KkErq/L+fSt6ZjrMbUBMPcXio2uNW5kcLWdd25+kac2HXJ0L25gAt7R5H+Qo0CwIYxYOnOZS0d+I OsXKxOg4Ow== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; { "EDNS-VERSION": 0 }
	Found child zone comcast.net

comcast.net

	Checking DS between net and comcast.net
	Query to c.gtld-servers.net for comcast.net/DS
	Received 1115 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 1115 octets ;; HEADER SECTION ;; id = 27558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DS ;; ANSWER SECTION (3 records) comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20260319031427 20260312020427 44109 net. KkErq/L+fSt6ZjrMbUBMPcXio2uNW5kcLWdd25+kac2HXJ0L25gAt7R5H+Qo0CwIYxYOnOZS0d+I OsXKxOg4Ow== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260321032359 20260314021359 44109 net. K/j/njBzOqGBI0y3xO2zVw5SH3POwWtVK8ZhaRAeEDOHZKLWNclDTciKIo56141F2LQpZl9p8ef+ QMvBjK0XIA== ) ;; ADDITIONAL SECTION (27 records) f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for comcast.net in the net zone
	DS=40909/SHA-1 uses a deprecated digest algorithm
	DS=40909/SHA-256 has algorithm RSASHA1
	DS=40909/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20260319031427 20260312020427 44109 net. KkErq/L+fSt6ZjrMbUBMPcXio2uNW5kcLWdd25+kac2HXJ0L25gAt7R5H+Qo0CwIYxYOnOZS0d+I OsXKxOg4Ow== )`
	RRSIG=44109 and DNSKEY=44109 verifies the DS RRset
	DS=40909/SHA-256 is now in the chain-of-trust
	`comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 )`
	`comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1`
	Query to dns102.comcast.net for comcast.net/DNSKEY
	Received 934 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 934 octets ;; HEADER SECTION ;; id = 13144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (4 records) comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; keytag 40909 comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; keytag 26550 comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260328144436 20260311143936 26550 comcast.net. sAt5V4IAFICWkZMRMdSTPwlg9czs5/HF63Rs0JVhlGm2PvkJpIu9Lg08+CqNS02WQBO+MnTrLtyV g/DYtPMOtiwHRlLC0PrbEX4dMxvJNA0DtvSnYKr4KbYMnfFTTvEoCaS0+gijBmVQfK2oMs8Ahl2Z cbeECayFUXgfsjD0RdM= ) comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260702144436 20260304104436 40909 comcast.net. slrcncCwP74gKJJFuzPJ9F3Y11kcxiCxe1J6aKSmflVHdXmcy0XFQ39DhofkQv32o4JUz/Q1SCjn Jath/vFp2NVkLHcrwjPKzT6Hz3s5tsRJgPpbXgOLh0sRRqwB7qgwYd+bPnlSHC0AlX6/g468iWne 6KhrtEtOSvJag6S3SOkEryIuxExF1q7LnQYtW+SG8LkeuK6Z7ih/on2IVfCVmGJ9JalU8ASCEqQF YBpGTHkJLUW13FqiLq35SmDV3DtBzsA18wMXLzGA8sPeemR3Dr22rAj0AO1resxiWQSNtSc46xn0 Ya+9VlKFJRM/s83KBHnaFpMTjNiyToxTyarGWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for comcast.net
	`comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; keytag 40909`
	`comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; keytag 26550`
	DNSKEY=40909/SEP is now in the chain-of-trust
	DS=40909/SHA-256 verifies DNSKEY=40909/SEP
	DS=40909/SHA-1 verifies DNSKEY=40909/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260328144436 20260311143936 26550 comcast.net. sAt5V4IAFICWkZMRMdSTPwlg9czs5/HF63Rs0JVhlGm2PvkJpIu9Lg08+CqNS02WQBO+MnTrLtyV g/DYtPMOtiwHRlLC0PrbEX4dMxvJNA0DtvSnYKr4KbYMnfFTTvEoCaS0+gijBmVQfK2oMs8Ahl2Z cbeECayFUXgfsjD0RdM= )`
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260702144436 20260304104436 40909 comcast.net. slrcncCwP74gKJJFuzPJ9F3Y11kcxiCxe1J6aKSmflVHdXmcy0XFQ39DhofkQv32o4JUz/Q1SCjn Jath/vFp2NVkLHcrwjPKzT6Hz3s5tsRJgPpbXgOLh0sRRqwB7qgwYd+bPnlSHC0AlX6/g468iWne 6KhrtEtOSvJag6S3SOkEryIuxExF1q7LnQYtW+SG8LkeuK6Z7ih/on2IVfCVmGJ9JalU8ASCEqQF YBpGTHkJLUW13FqiLq35SmDV3DtBzsA18wMXLzGA8sPeemR3Dr22rAj0AO1resxiWQSNtSc46xn0 Ya+9VlKFJRM/s83KBHnaFpMTjNiyToxTyarGWw== )`
	RRSIG=26550 and DNSKEY=26550 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=40909 and DNSKEY=40909/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 21151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns101.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns104.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 282 octets ;; HEADER SECTION ;; id = 35295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008258740 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20260328144436 20260311143936 26550 comcast.net. FAN9ACzHWK5dBBUl6BOmZylBbH7261e9Z4OJKIRugr9nfT1qJb2iqRuJ/MCIuexr0J1d90nAT6P9 wTbcrDlJ18HeZMqhI0KOL+YIbE4M+ZrxKO1V+gNAstt08iwniv/AsV3KqeUGEq1yo7Fhdcfs26et VwXUnquT999pcGAz3fg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns103.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 282 octets ;; HEADER SECTION ;; id = 40417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008258740 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20260328144436 20260311143936 26550 comcast.net. FAN9ACzHWK5dBBUl6BOmZylBbH7261e9Z4OJKIRugr9nfT1qJb2iqRuJ/MCIuexr0J1d90nAT6P9 wTbcrDlJ18HeZMqhI0KOL+YIbE4M+ZrxKO1V+gNAstt08iwniv/AsV3KqeUGEq1yo7Fhdcfs26et VwXUnquT999pcGAz3fg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns102.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 282 octets ;; HEADER SECTION ;; id = 50741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008258740 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20260328144436 20260311143936 26550 comcast.net. FAN9ACzHWK5dBBUl6BOmZylBbH7261e9Z4OJKIRugr9nfT1qJb2iqRuJ/MCIuexr0J1d90nAT6P9 wTbcrDlJ18HeZMqhI0KOL+YIbE4M+ZrxKO1V+gNAstt08iwniv/AsV3KqeUGEq1yo7Fhdcfs26et VwXUnquT999pcGAz3fg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns105.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 282 octets ;; HEADER SECTION ;; id = 24883 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008258740 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20260328144436 20260311143936 26550 comcast.net. FAN9ACzHWK5dBBUl6BOmZylBbH7261e9Z4OJKIRugr9nfT1qJb2iqRuJ/MCIuexr0J1d90nAT6P9 wTbcrDlJ18HeZMqhI0KOL+YIbE4M+ZrxKO1V+gNAstt08iwniv/AsV3KqeUGEq1yo7Fhdcfs26et VwXUnquT999pcGAz3fg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 39607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= )`
	RRSIG=26550 and DNSKEY=26550 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

comcast.net

	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 58795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns103.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 26195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= )`
	RRSIG=26550 and DNSKEY=26550 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

comcast.net

	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 56060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns102.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 14313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= )`
	RRSIG=26550 and DNSKEY=26550 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

comcast.net

	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 40693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns104.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 37975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= )`
	RRSIG=26550 and DNSKEY=26550 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

comcast.net

	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 22827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns105.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 41822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20260328144436 20260311143936 26550 comcast.net. LVHERDPJhjOcYYwL9mxKPouMyn1Oa1eIoizBzpC9I7x1/Ke7ngp9xm7RkxKQofTif4UdlRIBi6p2 RCbELvVUbiFHezOXKRCnSYC1S0gsU8hXXBkgNIsnUJcTt9UjAbsdzC2AQz9JU5yUXts1sSKUyQ9P 5RRs2E/+8KHFf2lDEYw= )`
	RRSIG=26550 and DNSKEY=26550 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comcast.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: