DNSSEC Analyzer - ed448.ch

Domain Name:

Time: 2022-11-28 17:29:06 UTC, NTP stratum 16

Analyzing DNSSEC problems for ed448.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (864 octets) ;; HEADER SECTION ;; id = 54771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to h.root-servers.net for ed448.ch/A
	Received 676 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (676 octets) ;; HEADER SECTION ;; id = 50549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.root-servers.net for ch/DNSKEY
	Received 670 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (670 octets) ;; HEADER SECTION ;; id = 38882 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to l.root-servers.net for ch/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (366 octets) ;; HEADER SECTION ;; id = 20502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ch in the . zone
	DS=11648/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=11648/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 )`
	Query to f.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (369 octets) ;; HEADER SECTION ;; id = 5743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 MbgLhfGjTaKk6LnRGr8YZNdfmYS2Fe6BbUMTeQ6tKL5pBGmqI+bYRGo6tYaBRP1d9MJ7YxisPQvN 1j6M+8mihw== ) ; Key ID = 48609 ch. 86400 IN DNSKEY ( 256 3 13 sm04bixp52VrqHXrIEPp1sYUMmFVsQht5wcRcy6YowRi2VZ3ZuKTgbSq86Hi35ECu5Q3exHBm6V/ e1fId+gPuQ== ) ; Key ID = 56913 ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20221216100909 20221031090909 11648 ch. ZMITjfVh2GRktmdGKs7KwE6FRMcmR+psQy4PTHmvCbt+tIt+koAYOOAkZhFz1GcDFde2tIk8JxQB jvDltDJdmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 MbgLhfGjTaKk6LnRGr8YZNdfmYS2Fe6BbUMTeQ6tKL5pBGmqI+bYRGo6tYaBRP1d9MJ7YxisPQvN 1j6M+8mihw== ) ; Key ID = 48609`
	`ch. 86400 IN DNSKEY ( 256 3 13 sm04bixp52VrqHXrIEPp1sYUMmFVsQht5wcRcy6YowRi2VZ3ZuKTgbSq86Hi35ECu5Q3exHBm6V/ e1fId+gPuQ== ) ; Key ID = 56913`
	`ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648`
	DNSKEY=11648/SEP is now in the chain-of-trust
	DS=11648/SHA-256 verifies DNSKEY=11648/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20221216100909 20221031090909 11648 ch. ZMITjfVh2GRktmdGKs7KwE6FRMcmR+psQy4PTHmvCbt+tIt+koAYOOAkZhFz1GcDFde2tIk8JxQB jvDltDJdmw== )`
	RRSIG=11648 and DNSKEY=11648/SEP verifies the DNSKEY RRset
	DNSKEY=48609 is now in the chain-of-trust
	DNSKEY=56913 is now in the chain-of-trust
	Query to e.nic.ch for ed448.ch/A
	Received 386 bytes from 194.0.17.1
	;; Response received from 194.0.17.1 (386 octets) ;; HEADER SECTION ;; id = 21416 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN DS ( 19736 16 2 f6527825a1a3f18562b46ccefbb170306f28ec4a92663f747f5363f2db1a6206 ) ed448.ch. 3600 IN RRSIG ( DS 13 2 3600 20221219233722 20221124123002 48609 ch. qJ3DKrW6oU7llkkZ+n4616la7Q1Khxebpwn7AI7dwGi4G7Vz+M3xY9Q7U2VjA6AOS0GbqJKEqY76 F84qKRHAug== ) ;; ADDITIONAL SECTION (7 records) burger.anooky-dns.ch. 3600 IN A 185.42.137.98 steak.anooky-dns.ch. 3600 IN A 194.58.192.32 ns.ed448.ch. 3600 IN A 212.51.129.129 burger.anooky-dns.ch. 3600 IN AAAA 2a01:3f0:400::32 steak.anooky-dns.ch. 3600 IN AAAA 2a01:3f1:32::53 ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.ch for ed448.ch/DNSKEY
	Received 386 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (386 octets) ;; HEADER SECTION ;; id = 17102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN DS ( 19736 16 2 f6527825a1a3f18562b46ccefbb170306f28ec4a92663f747f5363f2db1a6206 ) ed448.ch. 3600 IN RRSIG ( DS 13 2 3600 20221219233722 20221124123002 48609 ch. qJ3DKrW6oU7llkkZ+n4616la7Q1Khxebpwn7AI7dwGi4G7Vz+M3xY9Q7U2VjA6AOS0GbqJKEqY76 F84qKRHAug== ) ;; ADDITIONAL SECTION (7 records) burger.anooky-dns.ch. 3600 IN A 185.42.137.98 steak.anooky-dns.ch. 3600 IN A 194.58.192.32 ns.ed448.ch. 3600 IN A 212.51.129.129 burger.anooky-dns.ch. 3600 IN AAAA 2a01:3f0:400::32 steak.anooky-dns.ch. 3600 IN AAAA 2a01:3f1:32::53 ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ed448.ch

ed448.ch

	Checking DS between ch and ed448.ch
	Query to e.nic.ch for ed448.ch/DS
	e.nic.ch returns SERVFAIL for ed448.ch/DS
	Query to b.nic.ch for ed448.ch/DS
	Received 183 bytes from 130.59.31.43
	;; Response received from 130.59.31.43 (183 octets) ;; HEADER SECTION ;; id = 35834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN DS ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN DS ( 19736 16 2 f6527825a1a3f18562b46ccefbb170306f28ec4a92663f747f5363f2db1a6206 ) ed448.ch. 3600 IN RRSIG ( DS 13 2 3600 20221219233722 20221124123002 48609 ch. qJ3DKrW6oU7llkkZ+n4616la7Q1Khxebpwn7AI7dwGi4G7Vz+M3xY9Q7U2VjA6AOS0GbqJKEqY76 F84qKRHAug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ed448.ch in the ch zone
	DS=19736/SHA-256 has algorithm ED448
	Found 1 RRSIGs over DS RRset
	`ed448.ch. 3600 IN RRSIG ( DS 13 2 3600 20221219233722 20221124123002 48609 ch. qJ3DKrW6oU7llkkZ+n4616la7Q1Khxebpwn7AI7dwGi4G7Vz+M3xY9Q7U2VjA6AOS0GbqJKEqY76 F84qKRHAug== )`
	RRSIG=48609 and DNSKEY=48609 verifies the DS RRset
	DS=19736/SHA-256 is now in the chain-of-trust
	`ed448.ch. 3600 IN DS ( 19736 16 2 f6527825a1a3f18562b46ccefbb170306f28ec4a92663f747f5363f2db1a6206 )`
	Query to burger.anooky-dns.ch for ed448.ch/DNSKEY
	Received 264 bytes from 185.42.137.98
	;; Response received from 185.42.137.98 (264 octets) ;; HEADER SECTION ;; id = 25974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN DNSKEY ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN DNSKEY ( 257 3 16 mhiCEqo6JGfVT4QXYKTrRYdH3uGMly5uEKS5xpiQEbaB7mZe91peLLC0SZT5jhBkWHovOw/JSXkA ) ; Key ID = 19736 ed448.ch. 3600 IN RRSIG ( DNSKEY 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. a45HwtAS5LsHr1tDuY+/qfXspe8x0+35ZLrtws+wEzgfvrdaTaUI1WF69/Lj8TMhIgcU5rmhGxCA nwWZH5RBPPBvmJO+B6LXNnWQkKZhK8Hr5HOdMm8D0rDJi5nfQJ1cuWJZ/u4lNkoqSIWXyAfKmxsA ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ed448.ch
	`ed448.ch. 3600 IN DNSKEY ( 257 3 16 mhiCEqo6JGfVT4QXYKTrRYdH3uGMly5uEKS5xpiQEbaB7mZe91peLLC0SZT5jhBkWHovOw/JSXkA ) ; Key ID = 19736`
	DNSKEY=19736/SEP is now in the chain-of-trust
	DS=19736/SHA-256 verifies DNSKEY=19736/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ed448.ch. 3600 IN RRSIG ( DNSKEY 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. a45HwtAS5LsHr1tDuY+/qfXspe8x0+35ZLrtws+wEzgfvrdaTaUI1WF69/Lj8TMhIgcU5rmhGxCA nwWZH5RBPPBvmJO+B6LXNnWQkKZhK8Hr5HOdMm8D0rDJi5nfQJ1cuWJZ/u4lNkoqSIWXyAfKmxsA )`
	RRSIG=19736 and DNSKEY=19736/SEP verifies the DNSKEY RRset
	Query to ns.ed448.ch for ed448.ch/A
	Received 207 bytes from 212.51.129.129
	;; Response received from 212.51.129.129 (207 octets) ;; HEADER SECTION ;; id = 1199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ed448.ch. 3600 IN A 35.185.44.232 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns.ed448.ch is authoritative for ed448.ch
	Found RRSIG signed by ed448.ch zone
	Query to burger.anooky-dns.ch for ed448.ch/SOA
	Received 811 bytes from 185.42.137.98
	;; Response received from 185.42.137.98 (811 octets) ;; HEADER SECTION ;; id = 6238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN SOA ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN SOA ( ns.ed448.ch. dnsadmin.ed448.ch. 59309 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 3600 ;minimum ) ed448.ch. 3600 IN RRSIG ( SOA 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. TqUHv0vQOG7a8wuxjR1LimuJT/INbWpO1FjGwLgA39b0MclKBlDdqqnLkrKYHoV5EvkDlsXSmhgA sGdnNIsoki4Tva5wBPV6b8icAzl2rF80eYm7GbFgKhEDffiSg0qtqlrnSt2WdjgUby81uQtcPQ8A ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to steak.anooky-dns.ch for ed448.ch/SOA
	Received 811 bytes from 194.58.192.32
	;; Response received from 194.58.192.32 (811 octets) ;; HEADER SECTION ;; id = 1316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN SOA ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN SOA ( ns.ed448.ch. dnsadmin.ed448.ch. 59309 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 3600 ;minimum ) ed448.ch. 3600 IN RRSIG ( SOA 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. TqUHv0vQOG7a8wuxjR1LimuJT/INbWpO1FjGwLgA39b0MclKBlDdqqnLkrKYHoV5EvkDlsXSmhgA sGdnNIsoki4Tva5wBPV6b8icAzl2rF80eYm7GbFgKhEDffiSg0qtqlrnSt2WdjgUby81uQtcPQ8A ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.ed448.ch for ed448.ch/A
	Received 207 bytes from 212.51.129.129
	;; Response received from 212.51.129.129 (207 octets) ;; HEADER SECTION ;; id = 10417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ed448.ch. 3600 IN A 35.185.44.232 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ed448.ch A RR has value 35.185.44.232
	Found 1 RRSIGs over A RRset
	`ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA )`
	RRSIG=19736 and DNSKEY=19736/SEP verifies the A RRset

ed448.ch

	Query to steak.anooky-dns.ch for ed448.ch/A
	Received 782 bytes from 194.58.192.32
	;; Response received from 194.58.192.32 (782 octets) ;; HEADER SECTION ;; id = 49525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN A 35.185.44.232 ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	steak.anooky-dns.ch is authoritative for ed448.ch
	Found RRSIG signed by ed448.ch zone
	Query to steak.anooky-dns.ch for ed448.ch/A
	Received 782 bytes from 194.58.192.32
	;; Response received from 194.58.192.32 (782 octets) ;; HEADER SECTION ;; id = 53678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN A 35.185.44.232 ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ed448.ch A RR has value 35.185.44.232
	Found 1 RRSIGs over A RRset
	`ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA )`
	RRSIG=19736 and DNSKEY=19736/SEP verifies the A RRset

ed448.ch

	Query to burger.anooky-dns.ch for ed448.ch/A
	Received 782 bytes from 185.42.137.98
	;; Response received from 185.42.137.98 (782 octets) ;; HEADER SECTION ;; id = 21185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN A 35.185.44.232 ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	burger.anooky-dns.ch is authoritative for ed448.ch
	Found RRSIG signed by ed448.ch zone
	Query to burger.anooky-dns.ch for ed448.ch/A
	Received 782 bytes from 185.42.137.98
	;; Response received from 185.42.137.98 (782 octets) ;; HEADER SECTION ;; id = 51674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ed448.ch. IN A ;; ANSWER SECTION (2 records) ed448.ch. 3600 IN A 35.185.44.232 ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA ) ;; AUTHORITY SECTION (4 records) ed448.ch. 3600 IN NS ns.ed448.ch. ed448.ch. 3600 IN NS steak.anooky-dns.ch. ed448.ch. 3600 IN NS burger.anooky-dns.ch. ed448.ch. 3600 IN RRSIG ( NS 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. Hn8Q9oABSlxpMfq5qLYusG8hQhI1rLKqUqINr2FZSQ+JbNbhxgWKxVqZDejHA5neFzuWqUS7vGmA AaVNJh5bHVu52vvhq6B5C3CwBuaFfyhdeceJ6TkODbVQc1z/dJhTZgQn33QACK60BPuzl1CxiiYA ) ;; ADDITIONAL SECTION (5 records) ns.ed448.ch. 3600 IN A 212.51.129.129 ns.ed448.ch. 3600 IN RRSIG ( A 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. al5ojuc18NckjItAgWTPM7WtHnwmm00q2nbcmCOJk1v8IZ1V/7GtQJnqLwALAe+FxaV1awHXq/8A X7sOPJN/UMZA2FaL6i5UdvV94Y4B+pPgNA46uCF3jRiO5ox0b0Trq6TnR3wq2J4u25djQj5ICwEA ) ns.ed448.ch. 3600 IN AAAA 2a02:168:7809:23::ed:448 ns.ed448.ch. 3600 IN RRSIG ( AAAA 16 3 3600 20221208000000 20221117000000 19736 ed448.ch. vY0EZoevrGwt+ZsMLG112N6FrrTdrUVKUz7eSB/yHEQcAbZJG2Qov615MumzF7yc/Rfx43ICUQKA DVPAbJI2AfKzv1eL1wyj7QOgrh5HzNJQsLxLSFnP+fQ5xs/nSwdwOtS60bvju2wwvVtotY1GgRsA ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ed448.ch A RR has value 35.185.44.232
	Found 1 RRSIGs over A RRset
	`ed448.ch. 3600 IN RRSIG ( A 16 2 3600 20221208000000 20221117000000 19736 ed448.ch. yyqCiCSi5rgxVumZKO7cLE0CyH8zBctQJm1OQ7O9Ab6Ogzd3Ynj4k18WE0dbgmcr3m+LsVYBBw2A DCQINpcT+zOnY77GcMDRyT8gGJj3Qoiofw1936RlB5zWhWl5x7wwqqVlRWWnAq7BcRNVvvLr0hYA )`
	RRSIG=19736 and DNSKEY=19736/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ed448.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: