DNSSEC Debugger - comcast.net

Domain Name:

Time: 2025-09-15 07:38:39 UTC

Analyzing DNSSEC problems for comcast.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 28497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250930000000 20250909000000 20326 . aqj52+DKW6PhTa31l3xyxa0lbMd8T/UyK1sNUC42EY1+cSp0hSC0VlW82RsWYU5G5NmewrInT/Sx glWFlFz94yVqiKAK7ZNQr94nRbA7okrrlfnloiBi3cQ1IvEUgvNcmlZMLTeA6rINvdcBwS7ljMOH m0vQDce9IOxhQT7iAu23oiNORw5nWG/npNkYRFDD4yQvD3HsNeXFTuyDuc57ZEjs/pnIG5nkcqx7 tp/ba3XbOGllDr/V/0ubak7OeWum1eckIljqUsx5BnfBfIA7rJ2JJBIT7JMJ/O/cflTKoJFHQoKG TVYrNVBq9vsnZ01Q4ss688IvI8vO3zkP6LQLEA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for comcast.net/A
	Received 1168 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1168 octets ;; HEADER SECTION ;; id = 55296 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250928050000 20250915040000 46441 . s7Wl4vJuXM5xEIq5BAUxnPnxLW3jEwZuX2BPOK5vM4jgNDtk8QLrjnA/7o1s2+Ap8rpOVcXaWLs6 FIpILO/WxDUAvaPcpRSM0/rJ7BfByHQBdrRpOSWp+/cYFWS3zIU3Jnu90xKmTrY+1axpG633pQUn P4nBsatPJy67PtXeugd1y3lqpRdcfc4AtxEpXtpv6UnjhGEzfdfBE14xUly57I3X8+SxAZgxeoV4 mnHAUt85wwAUBvet/A4VJgpbvFMqZUi2TVYAQoPeVDwhnBlEZ86u80zjyypFd32ekhmjOFaEKA2V Z6mA5TBuPSZ51GRAJOWBEw5zALBJa4V+beaL/Q== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1160 octets ;; HEADER SECTION ;; id = 55928 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250928050000 20250915040000 46441 . s7Wl4vJuXM5xEIq5BAUxnPnxLW3jEwZuX2BPOK5vM4jgNDtk8QLrjnA/7o1s2+Ap8rpOVcXaWLs6 FIpILO/WxDUAvaPcpRSM0/rJ7BfByHQBdrRpOSWp+/cYFWS3zIU3Jnu90xKmTrY+1axpG633pQUn P4nBsatPJy67PtXeugd1y3lqpRdcfc4AtxEpXtpv6UnjhGEzfdfBE14xUly57I3X8+SxAZgxeoV4 mnHAUt85wwAUBvet/A4VJgpbvFMqZUi2TVYAQoPeVDwhnBlEZ86u80zjyypFd32ekhmjOFaEKA2V Z6mA5TBuPSZ51GRAJOWBEw5zALBJa4V+beaL/Q== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to g.root-servers.net for net/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 49894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20250928050000 20250915040000 46441 . s7Wl4vJuXM5xEIq5BAUxnPnxLW3jEwZuX2BPOK5vM4jgNDtk8QLrjnA/7o1s2+Ap8rpOVcXaWLs6 FIpILO/WxDUAvaPcpRSM0/rJ7BfByHQBdrRpOSWp+/cYFWS3zIU3Jnu90xKmTrY+1axpG633pQUn P4nBsatPJy67PtXeugd1y3lqpRdcfc4AtxEpXtpv6UnjhGEzfdfBE14xUly57I3X8+SxAZgxeoV4 mnHAUt85wwAUBvet/A4VJgpbvFMqZUi2TVYAQoPeVDwhnBlEZ86u80zjyypFd32ekhmjOFaEKA2V Z6mA5TBuPSZ51GRAJOWBEw5zALBJa4V+beaL/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20250928050000 20250915040000 46441 . s7Wl4vJuXM5xEIq5BAUxnPnxLW3jEwZuX2BPOK5vM4jgNDtk8QLrjnA/7o1s2+Ap8rpOVcXaWLs6 FIpILO/WxDUAvaPcpRSM0/rJ7BfByHQBdrRpOSWp+/cYFWS3zIU3Jnu90xKmTrY+1axpG633pQUn P4nBsatPJy67PtXeugd1y3lqpRdcfc4AtxEpXtpv6UnjhGEzfdfBE14xUly57I3X8+SxAZgxeoV4 mnHAUt85wwAUBvet/A4VJgpbvFMqZUi2TVYAQoPeVDwhnBlEZ86u80zjyypFd32ekhmjOFaEKA2V Z6mA5TBuPSZ51GRAJOWBEw5zALBJa4V+beaL/Q== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to g.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 291 octets ;; HEADER SECTION ;; id = 3867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250924141035 20250909140535 37331 net. ZsvQngDbHjU/4ysaofreMhZ/h/9Avi0TC0QZwO/naxdPNq7cuo5xH4FQbd6MFaDcF9lNMs2O9Fqe EIFLRUsSvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250924141035 20250909140535 37331 net. ZsvQngDbHjU/4ysaofreMhZ/h/9Avi0TC0QZwO/naxdPNq7cuo5xH4FQbd6MFaDcF9lNMs2O9Fqe EIFLRUsSvg== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=33296 is now in the chain-of-trust
	Query to j.gtld-servers.net for comcast.net/A
	Received 548 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 548 octets ;; HEADER SECTION ;; id = 61808 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20250920025933 20250913014933 33296 net. uZ0l8SjOGnGPDQBglWMy1JQdb+wgtKwtGNtOfXfzjGK8KNMoJNZ6DYBDXdAsSsah38tHsPYdqTVr 6YNR1Zb0bg== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; { "EDNS-VERSION": 0 }
	Query to h.gtld-servers.net for comcast.net/DNSKEY
	Received 548 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 548 octets ;; HEADER SECTION ;; id = 44573 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20250920025933 20250913014933 33296 net. uZ0l8SjOGnGPDQBglWMy1JQdb+wgtKwtGNtOfXfzjGK8KNMoJNZ6DYBDXdAsSsah38tHsPYdqTVr 6YNR1Zb0bg== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; { "EDNS-VERSION": 0 }
	Found child zone comcast.net

comcast.net

	Checking DS between net and comcast.net
	Query to h.gtld-servers.net for comcast.net/DS
	Received 1115 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 1115 octets ;; HEADER SECTION ;; id = 54279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DS ;; ANSWER SECTION (3 records) comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20250920025933 20250913014933 33296 net. uZ0l8SjOGnGPDQBglWMy1JQdb+wgtKwtGNtOfXfzjGK8KNMoJNZ6DYBDXdAsSsah38tHsPYdqTVr 6YNR1Zb0bg== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20250922030651 20250915015651 33296 net. RJ+JcM1afjQHOe1iu04PO8y5WbpuLMfRAFkmjSPU58Om0m/+KWBFofh7UYksBVI5oR2axLfDjuUy 2nFJbVPeAg== ) ;; ADDITIONAL SECTION (27 records) h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for comcast.net in the net zone
	DS=40909/SHA-1 uses a deprecated digest algorithm
	DS=40909/SHA-256 has algorithm RSASHA1
	DS=40909/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20250920025933 20250913014933 33296 net. uZ0l8SjOGnGPDQBglWMy1JQdb+wgtKwtGNtOfXfzjGK8KNMoJNZ6DYBDXdAsSsah38tHsPYdqTVr 6YNR1Zb0bg== )`
	RRSIG=33296 and DNSKEY=33296 verifies the DS RRset
	DS=40909/SHA-256 is now in the chain-of-trust
	`comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 )`
	`comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1`
	Query to dns101.comcast.net for comcast.net/DNSKEY
	Received 934 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 934 octets ;; HEADER SECTION ;; id = 50599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (4 records) comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; keytag 26550 comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; keytag 40909 comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260102144439 20250904104439 40909 comcast.net. tF3zVAXZIsAehOUhczk4X9qcpVRxA2u5rt4YgUMyry4Of8oQ11uGTEbH5ksGJX729Z1XzkOONJ+S wnWlYrn8b1k3VGf3puvw1ZlGKlf0D28AYmv/o+0vJlbUvcdyEIz/BRjUuwCPA/dI4f0f7IMaEqqI H3alWfWEiNychwrNPtHELX1pydlO4mCMU5zILW1fNmaVUmb7GPzAS4lOqzQI+GAIMm9YIbNNB9Sn k3vgfH81Z99AckEK9V1LXfEeJj3FvqJDYoEjv7ijWXp9+KGkQW00LRXdPMsnWLPhyR0q1Y0+G9hA Olmn6UapxdpE7TXwQB1OxOmU5GPI1ypuy8Rbkg== ) comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20250928144439 20250911143939 26550 comcast.net. Y+OWRXZmrJilG79/1Ffjz7boi4u8QTV0MJQG/4o1BeD5pqJFFbh93XFDeujpgxhaMx4sIYrBwg7/ TooOZyFqHnZNafR/ZCX0G56nfEYvTrLnHdz5j97RnmPl9ABB+UBE0U/q/ZNTSC9lxwMyx6v0YLa8 +rz2LmPNed776p+1rrw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for comcast.net
	`comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; keytag 26550`
	`comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; keytag 40909`
	DNSKEY=40909/SEP is now in the chain-of-trust
	DS=40909/SHA-256 verifies DNSKEY=40909/SEP
	DS=40909/SHA-1 verifies DNSKEY=40909/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20260102144439 20250904104439 40909 comcast.net. tF3zVAXZIsAehOUhczk4X9qcpVRxA2u5rt4YgUMyry4Of8oQ11uGTEbH5ksGJX729Z1XzkOONJ+S wnWlYrn8b1k3VGf3puvw1ZlGKlf0D28AYmv/o+0vJlbUvcdyEIz/BRjUuwCPA/dI4f0f7IMaEqqI H3alWfWEiNychwrNPtHELX1pydlO4mCMU5zILW1fNmaVUmb7GPzAS4lOqzQI+GAIMm9YIbNNB9Sn k3vgfH81Z99AckEK9V1LXfEeJj3FvqJDYoEjv7ijWXp9+KGkQW00LRXdPMsnWLPhyR0q1Y0+G9hA Olmn6UapxdpE7TXwQB1OxOmU5GPI1ypuy8Rbkg== )`
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20250928144439 20250911143939 26550 comcast.net. Y+OWRXZmrJilG79/1Ffjz7boi4u8QTV0MJQG/4o1BeD5pqJFFbh93XFDeujpgxhaMx4sIYrBwg7/ TooOZyFqHnZNafR/ZCX0G56nfEYvTrLnHdz5j97RnmPl9ABB+UBE0U/q/ZNTSC9lxwMyx6v0YLa8 +rz2LmPNed776p+1rrw= )`
	RRSIG=40909 and DNSKEY=40909/SEP verifies the DNSKEY RRset
	RRSIG=26550 and DNSKEY=26550 verifies the DNSKEY RRset
	DNSKEY=26550 is now in the chain-of-trust
	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 6745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns104.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 282 octets ;; HEADER SECTION ;; id = 29624 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008257991 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20250928144439 20250911143939 26550 comcast.net. JVDX+4GBT+ZD265S7FA9G57vutABbeQ6ut87z0+YgNVRiGbVRniBnUyZdLKmHifPv2c1PMStcGK9 IioiaW0RCo6lfuRfZzkwuHqcLofFATLXX88TQWiDlSp3xzopNe+fnriVr4qFNsgcsl/5EyiwjrLl lLqaNS6McrOCN94xSnc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns105.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 282 octets ;; HEADER SECTION ;; id = 42314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008257991 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20250928144439 20250911143939 26550 comcast.net. JVDX+4GBT+ZD265S7FA9G57vutABbeQ6ut87z0+YgNVRiGbVRniBnUyZdLKmHifPv2c1PMStcGK9 IioiaW0RCo6lfuRfZzkwuHqcLofFATLXX88TQWiDlSp3xzopNe+fnriVr4qFNsgcsl/5EyiwjrLl lLqaNS6McrOCN94xSnc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns103.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 282 octets ;; HEADER SECTION ;; id = 34171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008257991 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20250928144439 20250911143939 26550 comcast.net. JVDX+4GBT+ZD265S7FA9G57vutABbeQ6ut87z0+YgNVRiGbVRniBnUyZdLKmHifPv2c1PMStcGK9 IioiaW0RCo6lfuRfZzkwuHqcLofFATLXX88TQWiDlSp3xzopNe+fnriVr4qFNsgcsl/5EyiwjrLl lLqaNS6McrOCN94xSnc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns101.comcast.net for comcast.net/SOA
	Received 282 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 282 octets ;; HEADER SECTION ;; id = 21054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008257991 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20250928144439 20250911143939 26550 comcast.net. JVDX+4GBT+ZD265S7FA9G57vutABbeQ6ut87z0+YgNVRiGbVRniBnUyZdLKmHifPv2c1PMStcGK9 IioiaW0RCo6lfuRfZzkwuHqcLofFATLXX88TQWiDlSp3xzopNe+fnriVr4qFNsgcsl/5EyiwjrLl lLqaNS6McrOCN94xSnc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from [68.87.68.244] 227 octets ;; HEADER SECTION ;; id = 26170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 20924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns102.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 227 octets ;; HEADER SECTION ;; id = 20899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 24027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns101.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from [69.252.250.103] 227 octets ;; HEADER SECTION ;; id = 4140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 35681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns103.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 227 octets ;; HEADER SECTION ;; id = 5249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 40661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns105.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from [68.87.72.244] 227 octets ;; HEADER SECTION ;; id = 3537 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 7200 IN A 96.99.227.0 comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 7200 IN RRSIG ( A 5 2 7200 20250928144439 20250911143939 26550 comcast.net. HFcNOiC0uUb966AgjRqSYQbzKxt+ghTO6tgkO2XGCDZcdI6ar0exz0+acaFKazp4h1qTBAZ3QQJe sZ3j/TqBdUCZPoatSyO9zqIcq0N4BMm5VEv7X6AW0FaCkhxue0+nZZxM+sUnrhAoTEYsWBzwT3vx 4+NmpyTcd2yK2HQ6ETk= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comcast.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: