DNSSEC Analyzer - dnssec.pw

Domain Name:

Time: 2021-07-31 15:47:13 UTC, NTP stratum 16

Analyzing DNSSEC problems for dnssec.pw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 47472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to i.root-servers.net for dnssec.pw/A
	Received 663 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (663 octets) ;; HEADER SECTION ;; id = 61257 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns2.nic.pw. pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns6.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . AOK+m0tGsPEBDqEd7UKk7SGpTRTpyTszGm+SqOPGD2RixFKW3i6W18HylsP7o9YMhqGZfz3wSYv7 NR0MY5ZCUjFt9qt57whpL73EfMpeVVaJNVCSRWuNcrswMyhXcI5ElyAM8sBmLw+z9AaMcSdg8ZV4 WdDb4ayvIQZZa+uwf8hKo2lZfOSQpZrZz1jfVDPisdH7WxlkYtd4v/R/JUpZTlufZHyGpv/kePJg D8xo6STVLpCezJxS/yN8xi5QaEvChF59TFiF02jeQqqSABeY7asYr/eYQAjgmqPPr5Fm9N0mzaGN uVxuRfjSE0RODTmv+ALA+lWgOf42rO3O12hdFQ== ) ;; ADDITIONAL SECTION (9 records) ns6.nic.pw. 172800 IN A 212.18.249.12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns1.nic.pw. 172800 IN A 194.169.218.12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for pw/DNSKEY
	Received 654 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (654 octets) ;; HEADER SECTION ;; id = 16937 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns2.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 172800 IN NS ns6.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . AOK+m0tGsPEBDqEd7UKk7SGpTRTpyTszGm+SqOPGD2RixFKW3i6W18HylsP7o9YMhqGZfz3wSYv7 NR0MY5ZCUjFt9qt57whpL73EfMpeVVaJNVCSRWuNcrswMyhXcI5ElyAM8sBmLw+z9AaMcSdg8ZV4 WdDb4ayvIQZZa+uwf8hKo2lZfOSQpZrZz1jfVDPisdH7WxlkYtd4v/R/JUpZTlufZHyGpv/kePJg D8xo6STVLpCezJxS/yN8xi5QaEvChF59TFiF02jeQqqSABeY7asYr/eYQAjgmqPPr5Fm9N0mzaGN uVxuRfjSE0RODTmv+ALA+lWgOf42rO3O12hdFQ== ) ;; ADDITIONAL SECTION (9 records) ns1.nic.pw. 172800 IN A 194.169.218.12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns6.nic.pw. 172800 IN A 212.18.249.12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone pw

	Checking DS between . and pw
	Query to g.root-servers.net for pw/DS
	Received 402 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (402 octets) ;; HEADER SECTION ;; id = 13882 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DS ;; ANSWER SECTION (3 records) pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . AOK+m0tGsPEBDqEd7UKk7SGpTRTpyTszGm+SqOPGD2RixFKW3i6W18HylsP7o9YMhqGZfz3wSYv7 NR0MY5ZCUjFt9qt57whpL73EfMpeVVaJNVCSRWuNcrswMyhXcI5ElyAM8sBmLw+z9AaMcSdg8ZV4 WdDb4ayvIQZZa+uwf8hKo2lZfOSQpZrZz1jfVDPisdH7WxlkYtd4v/R/JUpZTlufZHyGpv/kePJg D8xo6STVLpCezJxS/yN8xi5QaEvChF59TFiF02jeQqqSABeY7asYr/eYQAjgmqPPr5Fm9N0mzaGN uVxuRfjSE0RODTmv+ALA+lWgOf42rO3O12hdFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for pw in the . zone
	DS=26645/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=26645/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`pw. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . AOK+m0tGsPEBDqEd7UKk7SGpTRTpyTszGm+SqOPGD2RixFKW3i6W18HylsP7o9YMhqGZfz3wSYv7 NR0MY5ZCUjFt9qt57whpL73EfMpeVVaJNVCSRWuNcrswMyhXcI5ElyAM8sBmLw+z9AaMcSdg8ZV4 WdDb4ayvIQZZa+uwf8hKo2lZfOSQpZrZz1jfVDPisdH7WxlkYtd4v/R/JUpZTlufZHyGpv/kePJg D8xo6STVLpCezJxS/yN8xi5QaEvChF59TFiF02jeQqqSABeY7asYr/eYQAjgmqPPr5Fm9N0mzaGN uVxuRfjSE0RODTmv+ALA+lWgOf42rO3O12hdFQ== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=26645/SHA-256 is now in the chain-of-trust
	`pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 )`
	`pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40`
	Query to ns2.nic.pw for pw/DNSKEY
	Received 895 bytes from 185.24.64.12
	;; Response received from 185.24.64.12 (895 octets) ;; HEADER SECTION ;; id = 39125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (4 records) pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645 pw. 3600 IN DNSKEY ( 256 3 7 AwEAAbEYaMCCBreIOUmZG+GN8bTeSA/xJHa6Qyc1Q43dwGovNDma/ISVgqWvL0czggHF6RtisMwg MkkPsihf3ymzWOWiEOxI8loPZl96DJNH/KMOfNoyi0ytIKh5kj8WX/hj0yBdMpPEDSaznZuVudov dVwSJfcDKf+O1L1flJ5/c4R7 ) ; Key ID = 46958 pw. 3600 IN DNSKEY ( 256 3 7 AwEAAbeD/7n7N3b0LFak277+r09Zx3yeO3cHzlHad7fTDOlZK///wJTY8rmggFKBYYoItKJ3/Iyh TsBz4n0tKB3Ub+xW6pn+IQ3C+WKpk45vGUflXwYGzeimo6CLAF4kPMb2jQY08s5cuVefysK6rUSg atu91Xh16tBewYe7JAObLc4h ) ; Key ID = 50757 pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20210824163912 20210725222246 26645 pw. hSuobkHCrGLSvFalmuE2sSZfrC9R8Rt0kXTCw0ujoiA7MFyuuFr0kMZAiWk63/NBiHsbrXdxFdtV g4GQ1Ac0uKVqpr88nPQX5MYNRgfePs6Bxh1dnjwXUelg9JFBLvlqt1QCBuXqjKEEyZBH7IBv+kiL W6eSGPVN4GVeEAbsTSCucaKIDiOz7MMwxItOj+rt8ydJi4zaynotQXI03c7TnmzIIzJ9LlwMA2sm kLDz7KawUIoArwVQRJITOJTa85d7du+7lN5Dnuz1OgbBAZwOZ7FHKCYYvO69xbpsOe+G7ZzLYhiU 7FRvlh1IFd2OOXz7W9UIcGANdnR53SP9HKHUNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for pw
	`pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645`
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAbEYaMCCBreIOUmZG+GN8bTeSA/xJHa6Qyc1Q43dwGovNDma/ISVgqWvL0czggHF6RtisMwg MkkPsihf3ymzWOWiEOxI8loPZl96DJNH/KMOfNoyi0ytIKh5kj8WX/hj0yBdMpPEDSaznZuVudov dVwSJfcDKf+O1L1flJ5/c4R7 ) ; Key ID = 46958`
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAbeD/7n7N3b0LFak277+r09Zx3yeO3cHzlHad7fTDOlZK///wJTY8rmggFKBYYoItKJ3/Iyh TsBz4n0tKB3Ub+xW6pn+IQ3C+WKpk45vGUflXwYGzeimo6CLAF4kPMb2jQY08s5cuVefysK6rUSg atu91Xh16tBewYe7JAObLc4h ) ; Key ID = 50757`
	DNSKEY=26645/SEP is now in the chain-of-trust
	DS=26645/SHA-256 verifies DNSKEY=26645/SEP
	DS=26645/SHA-1 verifies DNSKEY=26645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20210824163912 20210725222246 26645 pw. hSuobkHCrGLSvFalmuE2sSZfrC9R8Rt0kXTCw0ujoiA7MFyuuFr0kMZAiWk63/NBiHsbrXdxFdtV g4GQ1Ac0uKVqpr88nPQX5MYNRgfePs6Bxh1dnjwXUelg9JFBLvlqt1QCBuXqjKEEyZBH7IBv+kiL W6eSGPVN4GVeEAbsTSCucaKIDiOz7MMwxItOj+rt8ydJi4zaynotQXI03c7TnmzIIzJ9LlwMA2sm kLDz7KawUIoArwVQRJITOJTa85d7du+7lN5Dnuz1OgbBAZwOZ7FHKCYYvO69xbpsOe+G7ZzLYhiU 7FRvlh1IFd2OOXz7W9UIcGANdnR53SP9HKHUNg== )`
	RRSIG=26645 and DNSKEY=26645/SEP verifies the DNSKEY RRset
	DNSKEY=46958 is now in the chain-of-trust
	DNSKEY=50757 is now in the chain-of-trust
	Query to ns1.nic.pw for dnssec.pw/A
	Received 324 bytes from 194.169.218.12
	;; Response received from 194.169.218.12 (324 octets) ;; HEADER SECTION ;; id = 44957 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210805062406 20210705190952 50757 pw. gPTV9VVyw0YlNJ+E3MWwHb02ay7IO8usTvV0JxjsIUcf0i4GtPIBxXRk7X8Q/JLsWuF9vQ9kO11N CQiK7a9njmsH6jQbRcSZFbk6W96FqB3D8EM4RYTVmtS66PVdmlQR4K/yjY2ipbg+RDVoLTCeYKf5 4ubAwFlW/NlUXsPIWhc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.nic.pw for dnssec.pw/DNSKEY
	Received 324 bytes from 185.24.64.12
	;; Response received from 185.24.64.12 (324 octets) ;; HEADER SECTION ;; id = 43945 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210805062406 20210705190952 50757 pw. gPTV9VVyw0YlNJ+E3MWwHb02ay7IO8usTvV0JxjsIUcf0i4GtPIBxXRk7X8Q/JLsWuF9vQ9kO11N CQiK7a9njmsH6jQbRcSZFbk6W96FqB3D8EM4RYTVmtS66PVdmlQR4K/yjY2ipbg+RDVoLTCeYKf5 4ubAwFlW/NlUXsPIWhc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnssec.pw

dnssec.pw

	Checking DS between pw and dnssec.pw
	Query to ns5.nic.pw for dnssec.pw/DS
	Received 248 bytes from 212.18.248.12
	;; Response received from 212.18.248.12 (248 octets) ;; HEADER SECTION ;; id = 49411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DS ;; ANSWER SECTION (2 records) dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210805062406 20210705190952 50757 pw. gPTV9VVyw0YlNJ+E3MWwHb02ay7IO8usTvV0JxjsIUcf0i4GtPIBxXRk7X8Q/JLsWuF9vQ9kO11N CQiK7a9njmsH6jQbRcSZFbk6W96FqB3D8EM4RYTVmtS66PVdmlQR4K/yjY2ipbg+RDVoLTCeYKf5 4ubAwFlW/NlUXsPIWhc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for dnssec.pw in the pw zone
	DS=21795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210805062406 20210705190952 50757 pw. gPTV9VVyw0YlNJ+E3MWwHb02ay7IO8usTvV0JxjsIUcf0i4GtPIBxXRk7X8Q/JLsWuF9vQ9kO11N CQiK7a9njmsH6jQbRcSZFbk6W96FqB3D8EM4RYTVmtS66PVdmlQR4K/yjY2ipbg+RDVoLTCeYKf5 4ubAwFlW/NlUXsPIWhc= )`
	RRSIG=50757 and DNSKEY=50757 verifies the DS RRset
	DS=21795/SHA-256 is now in the chain-of-trust
	`dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 )`
	Query to name.servers.arkanar.org for dnssec.pw/DNSKEY
	Received 1184 bytes from 138.68.66.132
	;; Response received from 138.68.66.132 (1184 octets) ;; HEADER SECTION ;; id = 23986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (4 records) dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909 dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795 dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210812164703 20210713163608 8909 dnssec.pw. cErQOH0uIfKW4UfEqZ4qaYxuQXiY55ziyLGpNGfmaDPjDuGNuWTHTyT1YfFXBs0V794T57krV0Ox LcLt6KxyuVvyfpdY7U9nLvilNT7Z86IrQthxGePxXsPDC6eK7rRCI5LCwFTTkI8TRTfg022afmz2 0IWRa9yLYQNymvme9/GbD/we8xXDQkeNQW3EFXxzRTelZnLw07Yxv0J04rQXnVvUDRJ6/1PMH6en +h25+5OrqchGMWQzw3fQh5y+Xp0pb+Wm0qD+gTcP/0ghNycHO9RWfBuEpzK2tfK6IOAxjPvvSOh9 +EwNQ6DqPldwpKTS3h3WJE77b4pbSqR2uKW7Ng== ) dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210812164703 20210713163608 21795 dnssec.pw. z4H4jTKSnbKm2sRsLjNkEvKDHFs2T29cwgWUQxbDG02YutJweAogMwkrTJqB6p7oRe4iTA2SZPMG xhb2ATIsbvQTwJRECT3HKL6N2fofw/I6vdmDoeS9m/Vx9g8VwgoFNAGRt/jcWYY4jjQBxM+i/0Jl XL1O5eAkBy1I/+5SvOxpACE9rkzOPPa/xYCSXBKgWcBhmrKxU0r6YKcsPsmG7qycuuVQNCB7nHNH wPkXE5bo7j/YUNE5o2i7cO7G3i37Ea09SaXMYnB0UnonghFqP9EyZbkc5Y4q5BYqTGdSA/nuUIQp OO/D1EyVWJha3aPBgmPoYQD6X2BHYwE7hYEA+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dnssec.pw
	`dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909`
	`dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795`
	DNSKEY=21795/SEP is now in the chain-of-trust
	DS=21795/SHA-256 verifies DNSKEY=21795/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210812164703 20210713163608 8909 dnssec.pw. cErQOH0uIfKW4UfEqZ4qaYxuQXiY55ziyLGpNGfmaDPjDuGNuWTHTyT1YfFXBs0V794T57krV0Ox LcLt6KxyuVvyfpdY7U9nLvilNT7Z86IrQthxGePxXsPDC6eK7rRCI5LCwFTTkI8TRTfg022afmz2 0IWRa9yLYQNymvme9/GbD/we8xXDQkeNQW3EFXxzRTelZnLw07Yxv0J04rQXnVvUDRJ6/1PMH6en +h25+5OrqchGMWQzw3fQh5y+Xp0pb+Wm0qD+gTcP/0ghNycHO9RWfBuEpzK2tfK6IOAxjPvvSOh9 +EwNQ6DqPldwpKTS3h3WJE77b4pbSqR2uKW7Ng== )`
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210812164703 20210713163608 21795 dnssec.pw. z4H4jTKSnbKm2sRsLjNkEvKDHFs2T29cwgWUQxbDG02YutJweAogMwkrTJqB6p7oRe4iTA2SZPMG xhb2ATIsbvQTwJRECT3HKL6N2fofw/I6vdmDoeS9m/Vx9g8VwgoFNAGRt/jcWYY4jjQBxM+i/0Jl XL1O5eAkBy1I/+5SvOxpACE9rkzOPPa/xYCSXBKgWcBhmrKxU0r6YKcsPsmG7qycuuVQNCB7nHNH wPkXE5bo7j/YUNE5o2i7cO7G3i37Ea09SaXMYnB0UnonghFqP9EyZbkc5Y4q5BYqTGdSA/nuUIQp OO/D1EyVWJha3aPBgmPoYQD6X2BHYwE7hYEA+g== )`
	RRSIG=8909 and DNSKEY=8909 verifies the DNSKEY RRset
	RRSIG=21795 and DNSKEY=21795/SEP verifies the DNSKEY RRset
	DNSKEY=8909 is now in the chain-of-trust
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Response received from 138.68.66.132 (724 octets) ;; HEADER SECTION ;; id = 18392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210815184915 20210716175526 8909 dnssec.pw. FZYr4E7ZUKKjZheeJmigcHier7lTCvfPo2vpwrmoTLc7iST47sXiOHHRwdq5ecs1AHFszVDdEKKW ZgT8nnAxZexeGMR50LvMr8kBokIKcj59VE4qTYD3jg0nxb6oPxU96tVPNftSzMBqa1lTfajMxczj HNYV1KRv2r0+4xW3l+oVxDfQa7AdCyUFeMdkCd2kTYyKAXtbq5/mODNCMjL3BXLnZYZ0UnwKWFvF X20anHsLZT/AapHW26y6FnbZ+jBbnUJMy60mnmxguH13FZUx4d1ouiGOvlr4xX92HWM+ITIvRpBK KVi4HoflonQ8HlQs34U4rhFdXwctEreubwa3CA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.org is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/SOA
	Received 754 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (754 octets) ;; HEADER SECTION ;; id = 587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN SOA ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN SOA ( name.servers.arkanar.net. dns.io7.nl. 2013053485 ;serial 7200 ;refresh 3600 ;retry 86400 ;expire 900 ;minimum ) dnssec.pw. 600 IN RRSIG ( SOA 7 2 600 20210829181835 20210730171835 8909 dnssec.pw. LLou7OQJFz46YUpQ09crtgnVdYtjcrcULGb26KA/kRJI+CvWo+cFRLqzeLM4xzwgIyltl/g3WGqP qbGaeV3ksh8R0FMNNKPgKC5hZ+/jY2QB0OBF9NZT/GsiDEyyGdcKsdqu97pVsjzL5vtwJ8DnGXTO 8kBwL+fbQMRDYyp27QT8ysaJr6YVQbTuZqdy2RB9TToYvTw+3qxPDeWKnAJMhIbeioLMULdwdpPR voPcA8NY/A5g+YtzoYzQVXyeX8KnYwMr9bt3/plhTML9Xl+dZR+7LfNpGDDKOQpsHd1BtCqXai6z 2ExcD9S2HvjMA387mAtMh9LOM6IbCFM+xEHkog== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210815184915 20210716175526 8909 dnssec.pw. FZYr4E7ZUKKjZheeJmigcHier7lTCvfPo2vpwrmoTLc7iST47sXiOHHRwdq5ecs1AHFszVDdEKKW ZgT8nnAxZexeGMR50LvMr8kBokIKcj59VE4qTYD3jg0nxb6oPxU96tVPNftSzMBqa1lTfajMxczj HNYV1KRv2r0+4xW3l+oVxDfQa7AdCyUFeMdkCd2kTYyKAXtbq5/mODNCMjL3BXLnZYZ0UnwKWFvF X20anHsLZT/AapHW26y6FnbZ+jBbnUJMy60mnmxguH13FZUx4d1ouiGOvlr4xX92HWM+ITIvRpBK KVi4HoflonQ8HlQs34U4rhFdXwctEreubwa3CA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Response received from 138.68.66.132 (724 octets) ;; HEADER SECTION ;; id = 42760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210815184915 20210716175526 8909 dnssec.pw. FZYr4E7ZUKKjZheeJmigcHier7lTCvfPo2vpwrmoTLc7iST47sXiOHHRwdq5ecs1AHFszVDdEKKW ZgT8nnAxZexeGMR50LvMr8kBokIKcj59VE4qTYD3jg0nxb6oPxU96tVPNftSzMBqa1lTfajMxczj HNYV1KRv2r0+4xW3l+oVxDfQa7AdCyUFeMdkCd2kTYyKAXtbq5/mODNCMjL3BXLnZYZ0UnwKWFvF X20anHsLZT/AapHW26y6FnbZ+jBbnUJMy60mnmxguH13FZUx4d1ouiGOvlr4xX92HWM+ITIvRpBK KVi4HoflonQ8HlQs34U4rhFdXwctEreubwa3CA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

dnssec.pw

	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (724 octets) ;; HEADER SECTION ;; id = 20032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210815184915 20210716175526 8909 dnssec.pw. FZYr4E7ZUKKjZheeJmigcHier7lTCvfPo2vpwrmoTLc7iST47sXiOHHRwdq5ecs1AHFszVDdEKKW ZgT8nnAxZexeGMR50LvMr8kBokIKcj59VE4qTYD3jg0nxb6oPxU96tVPNftSzMBqa1lTfajMxczj HNYV1KRv2r0+4xW3l+oVxDfQa7AdCyUFeMdkCd2kTYyKAXtbq5/mODNCMjL3BXLnZYZ0UnwKWFvF X20anHsLZT/AapHW26y6FnbZ+jBbnUJMy60mnmxguH13FZUx4d1ouiGOvlr4xX92HWM+ITIvRpBK KVi4HoflonQ8HlQs34U4rhFdXwctEreubwa3CA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.net is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (724 octets) ;; HEADER SECTION ;; id = 38248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210815184915 20210716175526 8909 dnssec.pw. FZYr4E7ZUKKjZheeJmigcHier7lTCvfPo2vpwrmoTLc7iST47sXiOHHRwdq5ecs1AHFszVDdEKKW ZgT8nnAxZexeGMR50LvMr8kBokIKcj59VE4qTYD3jg0nxb6oPxU96tVPNftSzMBqa1lTfajMxczj HNYV1KRv2r0+4xW3l+oVxDfQa7AdCyUFeMdkCd2kTYyKAXtbq5/mODNCMjL3BXLnZYZ0UnwKWFvF X20anHsLZT/AapHW26y6FnbZ+jBbnUJMy60mnmxguH13FZUx4d1ouiGOvlr4xX92HWM+ITIvRpBK KVi4HoflonQ8HlQs34U4rhFdXwctEreubwa3CA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210829181501 20210730171835 8909 dnssec.pw. P1keoSztAk4G3Lteedtj7+wuzQY21+KkcOiFaP8g9aW8mJoJJQZzgtOTxiQyCDRSElaNfzHdtyZE nUATXiMZ35u6y+f7VZWCH8oBGFLvvX+R7p3RvTwo57USDY0NaYZzEZKgWdVAVTBSxtVmGVo+XAVN xFmvUxA/ONA1JfNFuieTBfRX4gACV/wqmZD+tOa5tg8jtd5n9Cb15G4H5f7ZDvhLGGec860YdDVS dfpsTJfUYGsGwgLAax8Mar1JLXos/nunxZ86a6Hqn4Pc+wKLnnvFu90J5Hj9o2Y7QzywQpdn3pwT ANhenSQqnUYbV4LSscOFakiLskxULqpAMZILsQ== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec.pw at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: