DNSSEC Analyzer - dnssec.pw

Domain Name:

Time: 2021-04-22 11:47:49 UTC, NTP stratum 4

Analyzing DNSSEC problems for dnssec.pw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 18919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to i.root-servers.net for dnssec.pw/A
	Received 663 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (663 bytes) ;; HEADER SECTION ;; id = 17957 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns6.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns2.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . YBtR5bb67dhthQQLJ9ygj2OFk2CgmoNdJKh9z6YPvH2p6GLPeiQdAR2D4MBO8upyLZAjb+rF7Kao uGA0Nk6R/RsPxwzV5XOq+VpaoyBznMkjxEwo2vn0mfJkzEc40HQISfRgC3afbR/kfv5B3Gx2rlIc vmchUVJ2LCqbhUjw+uRdbunT9+ydGeC8dVAlcyrPACIoNzUoFgEEj3Y2xhzAWiROIWcYXaB/GB4n zBDlOQdAUIN6so6Rjz32DvIh8Zh1NcT3KNvCfYo6XVjQlqP9XWwBpv8MzpxB7HRlLlJDI9TEyzh8 C/69XIC0MJh5qPpxZ07NpSC43Il5S5Vd/vpzdw== ) ;; ADDITIONAL SECTION (9 records) ns6.nic.pw. 172800 IN A 212.18.249.12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns1.nic.pw. 172800 IN A 194.169.218.12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for pw/DNSKEY
	Received 654 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (654 bytes) ;; HEADER SECTION ;; id = 13304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns2.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 172800 IN NS ns6.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . YBtR5bb67dhthQQLJ9ygj2OFk2CgmoNdJKh9z6YPvH2p6GLPeiQdAR2D4MBO8upyLZAjb+rF7Kao uGA0Nk6R/RsPxwzV5XOq+VpaoyBznMkjxEwo2vn0mfJkzEc40HQISfRgC3afbR/kfv5B3Gx2rlIc vmchUVJ2LCqbhUjw+uRdbunT9+ydGeC8dVAlcyrPACIoNzUoFgEEj3Y2xhzAWiROIWcYXaB/GB4n zBDlOQdAUIN6so6Rjz32DvIh8Zh1NcT3KNvCfYo6XVjQlqP9XWwBpv8MzpxB7HRlLlJDI9TEyzh8 C/69XIC0MJh5qPpxZ07NpSC43Il5S5Vd/vpzdw== ) ;; ADDITIONAL SECTION (9 records) ns1.nic.pw. 172800 IN A 194.169.218.12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns6.nic.pw. 172800 IN A 212.18.249.12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone pw

	Checking DS between . and pw
	Query to k.root-servers.net for pw/DS
	Received 402 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (402 bytes) ;; HEADER SECTION ;; id = 46518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DS ;; ANSWER SECTION (3 records) pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . YBtR5bb67dhthQQLJ9ygj2OFk2CgmoNdJKh9z6YPvH2p6GLPeiQdAR2D4MBO8upyLZAjb+rF7Kao uGA0Nk6R/RsPxwzV5XOq+VpaoyBznMkjxEwo2vn0mfJkzEc40HQISfRgC3afbR/kfv5B3Gx2rlIc vmchUVJ2LCqbhUjw+uRdbunT9+ydGeC8dVAlcyrPACIoNzUoFgEEj3Y2xhzAWiROIWcYXaB/GB4n zBDlOQdAUIN6so6Rjz32DvIh8Zh1NcT3KNvCfYo6XVjQlqP9XWwBpv8MzpxB7HRlLlJDI9TEyzh8 C/69XIC0MJh5qPpxZ07NpSC43Il5S5Vd/vpzdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for pw in the . zone
	DS=26645/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=26645/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`pw. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . YBtR5bb67dhthQQLJ9ygj2OFk2CgmoNdJKh9z6YPvH2p6GLPeiQdAR2D4MBO8upyLZAjb+rF7Kao uGA0Nk6R/RsPxwzV5XOq+VpaoyBznMkjxEwo2vn0mfJkzEc40HQISfRgC3afbR/kfv5B3Gx2rlIc vmchUVJ2LCqbhUjw+uRdbunT9+ydGeC8dVAlcyrPACIoNzUoFgEEj3Y2xhzAWiROIWcYXaB/GB4n zBDlOQdAUIN6so6Rjz32DvIh8Zh1NcT3KNvCfYo6XVjQlqP9XWwBpv8MzpxB7HRlLlJDI9TEyzh8 C/69XIC0MJh5qPpxZ07NpSC43Il5S5Vd/vpzdw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=26645/SHA-1 is now in the chain-of-trust
	`pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40`
	`pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 )`
	Query to ns6.nic.pw for pw/DNSKEY
	Received 895 bytes from 212.18.249.12
	;; Answer received from 212.18.249.12 (895 bytes) ;; HEADER SECTION ;; id = 40747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (4 records) pw. 3600 IN DNSKEY ( 256 3 7 AwEAAY1+CTPfTiPW8KsnyONs2bh3MUUkLs25ODv287jFzslRTarv9gm73f/5NC7Db6ZNIk+9ZlTv g3uxVA7cG8cvF2cpxmJqNp7I5h9hGsOd6061qQ4nDhNkdKmLq2wxSbxEvu9gbHor/LTHCC/1fDI0 LD56V8BGDbyipoduVOKtJqSL ) ; Key ID = 22152 pw. 3600 IN DNSKEY ( 256 3 7 AwEAAc4nataDFbuz9U6M7unCRtxohVVKO3xKTDJSBsIxyKrp2o1But99nS9Ofta4UgL+ZlvmXE6L 42DiY0RvAWbVpbcuAbYy4kjSIuHM3TogFg6BlN7A7p/9KmgA6/mxO+dm7+n/2hSJbjTakflzwTkw VHxYHhenGi09AJKG28WXLZ+l ) ; Key ID = 58155 pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645 pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20210427220212 20210329021759 26645 pw. e9PQipNZGgmNrOraj5dbltt7Bk/GH1CQ/fHkt5SPkB0cxO+4p55eG8JndsCZ1WcqPGqM3jwVafks LRKhmKoF0qG8U6dQvKRgX183bV16LP4OVOqIv3okwkb9xD0HVsdcQRV53P/VTGgWV6CtvblYrJYK k1iWsUA0HXMigaWk0y09biGlVrKMQ8ttGk4En5EkqxdiSF+zLQZ+6KdXXiIkxHETdZlzXKc55l5Q OqsUs4QVg+4lrZVM3Wmhdes3L/VrIY4856Tvuw8+A94Fc7mcB+61HJoWkI/2n1C+Od7ggJ8l6iK4 VuGsqtrlVmaj57Y9CMwMznpunwXqSfQqmJZpVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for pw
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAY1+CTPfTiPW8KsnyONs2bh3MUUkLs25ODv287jFzslRTarv9gm73f/5NC7Db6ZNIk+9ZlTv g3uxVA7cG8cvF2cpxmJqNp7I5h9hGsOd6061qQ4nDhNkdKmLq2wxSbxEvu9gbHor/LTHCC/1fDI0 LD56V8BGDbyipoduVOKtJqSL ) ; Key ID = 22152`
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAc4nataDFbuz9U6M7unCRtxohVVKO3xKTDJSBsIxyKrp2o1But99nS9Ofta4UgL+ZlvmXE6L 42DiY0RvAWbVpbcuAbYy4kjSIuHM3TogFg6BlN7A7p/9KmgA6/mxO+dm7+n/2hSJbjTakflzwTkw VHxYHhenGi09AJKG28WXLZ+l ) ; Key ID = 58155`
	`pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645`
	DNSKEY=26645/SEP is now in the chain-of-trust
	DS=26645/SHA-1 verifies DNSKEY=26645/SEP
	DS=26645/SHA-256 verifies DNSKEY=26645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20210427220212 20210329021759 26645 pw. e9PQipNZGgmNrOraj5dbltt7Bk/GH1CQ/fHkt5SPkB0cxO+4p55eG8JndsCZ1WcqPGqM3jwVafks LRKhmKoF0qG8U6dQvKRgX183bV16LP4OVOqIv3okwkb9xD0HVsdcQRV53P/VTGgWV6CtvblYrJYK k1iWsUA0HXMigaWk0y09biGlVrKMQ8ttGk4En5EkqxdiSF+zLQZ+6KdXXiIkxHETdZlzXKc55l5Q OqsUs4QVg+4lrZVM3Wmhdes3L/VrIY4856Tvuw8+A94Fc7mcB+61HJoWkI/2n1C+Od7ggJ8l6iK4 VuGsqtrlVmaj57Y9CMwMznpunwXqSfQqmJZpVg== )`
	RRSIG=26645 and DNSKEY=26645/SEP verifies the DNSKEY RRset
	DNSKEY=22152 is now in the chain-of-trust
	DNSKEY=58155 is now in the chain-of-trust
	Query to ns1.nic.pw for dnssec.pw/A
	Received 324 bytes from 194.169.218.12
	;; Answer received from 194.169.218.12 (324 bytes) ;; HEADER SECTION ;; id = 30971 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210507114747 20210407213909 22152 pw. TNTCJPSwnV7m4IYqdNd0cm55SsSEb8alOjopLBt8zNsGm6JzHUgcqKGn9lCrH7nzKk0evLf0adJS rMR1+oY8hg8y8yj8CNSHo2RcfSzagihkPyOMn76PP0FRHZBhYJT4PZpX+jfzaV1IxRsh43cN14nt kgh7KpA0W2BwLPhKOZo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns5.nic.pw for dnssec.pw/DNSKEY
	Received 324 bytes from 212.18.248.12
	;; Answer received from 212.18.248.12 (324 bytes) ;; HEADER SECTION ;; id = 5976 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210507114747 20210407213909 22152 pw. TNTCJPSwnV7m4IYqdNd0cm55SsSEb8alOjopLBt8zNsGm6JzHUgcqKGn9lCrH7nzKk0evLf0adJS rMR1+oY8hg8y8yj8CNSHo2RcfSzagihkPyOMn76PP0FRHZBhYJT4PZpX+jfzaV1IxRsh43cN14nt kgh7KpA0W2BwLPhKOZo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnssec.pw

dnssec.pw

	Checking DS between pw and dnssec.pw
	Query to ns6.nic.pw for dnssec.pw/DS
	Received 248 bytes from 212.18.249.12
	;; Answer received from 212.18.249.12 (248 bytes) ;; HEADER SECTION ;; id = 34138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DS ;; ANSWER SECTION (2 records) dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210507114747 20210407213909 22152 pw. TNTCJPSwnV7m4IYqdNd0cm55SsSEb8alOjopLBt8zNsGm6JzHUgcqKGn9lCrH7nzKk0evLf0adJS rMR1+oY8hg8y8yj8CNSHo2RcfSzagihkPyOMn76PP0FRHZBhYJT4PZpX+jfzaV1IxRsh43cN14nt kgh7KpA0W2BwLPhKOZo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for dnssec.pw in the pw zone
	DS=21795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20210507114747 20210407213909 22152 pw. TNTCJPSwnV7m4IYqdNd0cm55SsSEb8alOjopLBt8zNsGm6JzHUgcqKGn9lCrH7nzKk0evLf0adJS rMR1+oY8hg8y8yj8CNSHo2RcfSzagihkPyOMn76PP0FRHZBhYJT4PZpX+jfzaV1IxRsh43cN14nt kgh7KpA0W2BwLPhKOZo= )`
	RRSIG=22152 and DNSKEY=22152 verifies the DS RRset
	DS=21795/SHA-256 is now in the chain-of-trust
	`dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 )`
	Query to name.servers.arkanar.org for dnssec.pw/DNSKEY
	Received 1184 bytes from 138.68.66.132
	;; Answer received from 138.68.66.132 (1184 bytes) ;; HEADER SECTION ;; id = 24244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (4 records) dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795 dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909 dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210514182617 20210414174321 8909 dnssec.pw. Q5qzZPvp57ojmVCchgunkwqjgfUyh+BoLZ4MrmCAf6xFFwibZKppXybSjU3Zo6nlIr2sCZLOX2jG N3BZZj6cD/qg7H0xtIsYm2m8+i8/7iLFiEMWaBDY5WqiPWJ+00Sx+IvEYRsOf5elU7+c5ndgBzMu zIfBRmjOcBSnStrOU2Ad2Clbpns8Fz4VtiTNltqSruCR/cfnRdqOw9cedaghMi3P0DcNmY2YXclw 9eOwSapckKijWegwcHvRPF7PE0Aaem48YTFuzyOVl/tETMaD32699NLGP49Pimbp0sESdNmBRzQY myGZIkR5Dx+ea7Vpxug0/Bmx3IG0y7bPLtkgVA== ) dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210514182617 20210414174321 21795 dnssec.pw. SUOik3vHSOkRRpONhDgp9mO21MXLsy/dA0/lJcAnQ5fEsrd7K5lUHUq1hr5l7HgDCuHbJCLxPSaW 3zunnhkcOv1nJw1Qa2zkpiHENyBO4Ut2WgaULZcG5KvJ3LyAkqfrStCLf+U79+vWrZoQQGUldIYN VfPVRCEDG4IjCdwUvs9pDU8K2y8W649sBlGLtPOu0mQhzXIZLESD2KNngSS/j7Bi3zSQmJTUjqcx PXjtIEJK05IvC+gX2Q2HB0OZT9UZguWTzjKRMv6hatyakiIrVSnsNtQAvaE7jtpGrZWzaxnI3sWb goMDp9magw4a++ABWyCNZk9Ue/gz43SX4HmDJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dnssec.pw
	`dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795`
	`dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909`
	DNSKEY=21795/SEP is now in the chain-of-trust
	DS=21795/SHA-256 verifies DNSKEY=21795/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210514182617 20210414174321 8909 dnssec.pw. Q5qzZPvp57ojmVCchgunkwqjgfUyh+BoLZ4MrmCAf6xFFwibZKppXybSjU3Zo6nlIr2sCZLOX2jG N3BZZj6cD/qg7H0xtIsYm2m8+i8/7iLFiEMWaBDY5WqiPWJ+00Sx+IvEYRsOf5elU7+c5ndgBzMu zIfBRmjOcBSnStrOU2Ad2Clbpns8Fz4VtiTNltqSruCR/cfnRdqOw9cedaghMi3P0DcNmY2YXclw 9eOwSapckKijWegwcHvRPF7PE0Aaem48YTFuzyOVl/tETMaD32699NLGP49Pimbp0sESdNmBRzQY myGZIkR5Dx+ea7Vpxug0/Bmx3IG0y7bPLtkgVA== )`
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20210514182617 20210414174321 21795 dnssec.pw. SUOik3vHSOkRRpONhDgp9mO21MXLsy/dA0/lJcAnQ5fEsrd7K5lUHUq1hr5l7HgDCuHbJCLxPSaW 3zunnhkcOv1nJw1Qa2zkpiHENyBO4Ut2WgaULZcG5KvJ3LyAkqfrStCLf+U79+vWrZoQQGUldIYN VfPVRCEDG4IjCdwUvs9pDU8K2y8W649sBlGLtPOu0mQhzXIZLESD2KNngSS/j7Bi3zSQmJTUjqcx PXjtIEJK05IvC+gX2Q2HB0OZT9UZguWTzjKRMv6hatyakiIrVSnsNtQAvaE7jtpGrZWzaxnI3sWb goMDp9magw4a++ABWyCNZk9Ue/gz43SX4HmDJg== )`
	RRSIG=8909 and DNSKEY=8909 verifies the DNSKEY RRset
	RRSIG=21795 and DNSKEY=21795/SEP verifies the DNSKEY RRset
	DNSKEY=8909 is now in the chain-of-trust
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Answer received from 138.68.66.132 (724 bytes) ;; HEADER SECTION ;; id = 24341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210517203817 20210417201410 8909 dnssec.pw. pTJfhgMv88sK5yB1b8nh+DdUTw3AffndFy0CYeoRPEJIqfoAtey/cN6nDFlk1g1NtRGmBeK1HmTV vyeSLt75PziQItB0TZqjiiUjHCQ7+kEdnpsM8M6NQdfr+P35XBxDKEiEnYTy4Kv2S+qLa5i6PsJB lLARsnW0qPOzqzMq3hOagv1Nw7+93rInWBfFljLxRaWdAa8wH4GZkLHXTkR+NrCFHkXnCwgWd1pU PeZ0F39xTN3zpYX+MndRBa1oBM9DXlFKD0KtA2gIEyuNXlKwpkPBCK+A+CrfAOdeJf+zgmBg0WGb eKEAYqwbUk7J5GJBuGvugEIsah5NIH4A9OHWBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.org is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/SOA
	Received 754 bytes from 46.137.158.193
	;; Answer received from 46.137.158.193 (754 bytes) ;; HEADER SECTION ;; id = 56330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN SOA ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN SOA ( name.servers.arkanar.net. dns.io7.nl. 2013053464 ;serial 7200 ;refresh 3600 ;retry 86400 ;expire 900 ;minimum ) dnssec.pw. 600 IN RRSIG ( SOA 7 2 600 20210517211410 20210417201410 8909 dnssec.pw. tKiQVk1dJcFRBciSPgIte6HWd7jw24thRfykMBT6cBXzKOUgCSVyp+1+9/y+sEFqG+MbIYRY4TGM gm/blCfOgHC9+nfDZTbdeUb39/5R6ln5BCYbF3fmJ9iZO074juM4++ko29bylxUtElKtgD6U2KaG psTabFDzvbV8PLgLU1lDLbsrIkUmsjVqjQBnaZ75/sAPsT29tOg/uQb0gLYj7rhUPQ3HQ8tL8mN8 9nWQraNiCFF9epnfuaCT3o2DcDAVkKYFjkf0NdAudcP9dEzoWD3NGlkSlCSJoMqYckp1DNdTXEug WJ8dyzsd27f7xUFzNFv1AKhc6jIH8zfWTblkjQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210517203817 20210417201410 8909 dnssec.pw. pTJfhgMv88sK5yB1b8nh+DdUTw3AffndFy0CYeoRPEJIqfoAtey/cN6nDFlk1g1NtRGmBeK1HmTV vyeSLt75PziQItB0TZqjiiUjHCQ7+kEdnpsM8M6NQdfr+P35XBxDKEiEnYTy4Kv2S+qLa5i6PsJB lLARsnW0qPOzqzMq3hOagv1Nw7+93rInWBfFljLxRaWdAa8wH4GZkLHXTkR+NrCFHkXnCwgWd1pU PeZ0F39xTN3zpYX+MndRBa1oBM9DXlFKD0KtA2gIEyuNXlKwpkPBCK+A+CrfAOdeJf+zgmBg0WGb eKEAYqwbUk7J5GJBuGvugEIsah5NIH4A9OHWBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Answer received from 138.68.66.132 (724 bytes) ;; HEADER SECTION ;; id = 39648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210517203817 20210417201410 8909 dnssec.pw. pTJfhgMv88sK5yB1b8nh+DdUTw3AffndFy0CYeoRPEJIqfoAtey/cN6nDFlk1g1NtRGmBeK1HmTV vyeSLt75PziQItB0TZqjiiUjHCQ7+kEdnpsM8M6NQdfr+P35XBxDKEiEnYTy4Kv2S+qLa5i6PsJB lLARsnW0qPOzqzMq3hOagv1Nw7+93rInWBfFljLxRaWdAa8wH4GZkLHXTkR+NrCFHkXnCwgWd1pU PeZ0F39xTN3zpYX+MndRBa1oBM9DXlFKD0KtA2gIEyuNXlKwpkPBCK+A+CrfAOdeJf+zgmBg0WGb eKEAYqwbUk7J5GJBuGvugEIsah5NIH4A9OHWBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

dnssec.pw

	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Answer received from 46.137.158.193 (724 bytes) ;; HEADER SECTION ;; id = 53662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210517203817 20210417201410 8909 dnssec.pw. pTJfhgMv88sK5yB1b8nh+DdUTw3AffndFy0CYeoRPEJIqfoAtey/cN6nDFlk1g1NtRGmBeK1HmTV vyeSLt75PziQItB0TZqjiiUjHCQ7+kEdnpsM8M6NQdfr+P35XBxDKEiEnYTy4Kv2S+qLa5i6PsJB lLARsnW0qPOzqzMq3hOagv1Nw7+93rInWBfFljLxRaWdAa8wH4GZkLHXTkR+NrCFHkXnCwgWd1pU PeZ0F39xTN3zpYX+MndRBa1oBM9DXlFKD0KtA2gIEyuNXlKwpkPBCK+A+CrfAOdeJf+zgmBg0WGb eKEAYqwbUk7J5GJBuGvugEIsah5NIH4A9OHWBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.net is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Answer received from 46.137.158.193 (724 bytes) ;; HEADER SECTION ;; id = 40186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20210517203817 20210417201410 8909 dnssec.pw. pTJfhgMv88sK5yB1b8nh+DdUTw3AffndFy0CYeoRPEJIqfoAtey/cN6nDFlk1g1NtRGmBeK1HmTV vyeSLt75PziQItB0TZqjiiUjHCQ7+kEdnpsM8M6NQdfr+P35XBxDKEiEnYTy4Kv2S+qLa5i6PsJB lLARsnW0qPOzqzMq3hOagv1Nw7+93rInWBfFljLxRaWdAa8wH4GZkLHXTkR+NrCFHkXnCwgWd1pU PeZ0F39xTN3zpYX+MndRBa1oBM9DXlFKD0KtA2gIEyuNXlKwpkPBCK+A+CrfAOdeJf+zgmBg0WGb eKEAYqwbUk7J5GJBuGvugEIsah5NIH4A9OHWBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20210509091031 20210409085613 8909 dnssec.pw. MZvd1Bks8UjeVgZn49dQY05QRnWBxbl5ELymbaphJ/qdTZ578uiLslDqYV3he/kWAk6gCa9g6iTu lUxhg/oato+eKmanNywm6qT3sssAkE3aI+inexK/udlqH1QgJDP9rxPl2hR9fSeIOxaantwMw7k9 hubekU+P18VjnptNJKlPzHEJSogUeR/t3cJ/MyI5EyHwEof5KXzzxYOdhXoMyW0e6ubONGXGG8Qk iqKQngCQbGMlu4y/OW5lU2wbKKXa2uh/flaPHNLlqI6nf3UHR8w4qgmVaLJsUh+mZxjySl8ciC12 zbHCwfTFidwCI2HwnVwQdSKKaXEexdFKFVbRXQ== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec.pw at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: