DNSSEC Debugger - empyrean.cash

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-22 11:40:32 UTC

Analyzing DNSSEC problems for empyrean.cash

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 8348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to j.root-servers.net for empyrean.cash/A
	Received 759 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 759 octets ;; HEADER SECTION ;; id = 1370 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cash. 172800 IN NS v0n0.nic.cash. cash. 172800 IN NS v0n1.nic.cash. cash. 172800 IN NS v0n2.nic.cash. cash. 172800 IN NS v0n3.nic.cash. cash. 172800 IN NS v2n0.nic.cash. cash. 172800 IN NS v2n1.nic.cash. cash. 86400 IN DS ( 38860 8 2 8ff5818a6631fe5ed105d1e518de91a91535a52cf8c0e90ba448f0dc78fdf536 ) cash. 86400 IN RRSIG ( DS 8 1 86400 20260604050000 20260522040000 54393 . XHMo159qfbdJG5zMDa91bPIaeI7uPk+kIwIUJZ0/UfIIAjlqywS4z7OJxaQHOM1sgFQto1snDHs3 pXIJrbRmBk7dAqH68sEXveZg789f/dRn4H06RwSagbNZv5HP2ovCHJkzTjxNqdADdOfvDDKw9AZT wtNYtl4B/q936kbALI1bQzf/N6yWTvzwD2MLx6F9wAw0iesREFPYAtNh+rUfMua93gQvrznUBIXj D83O6FuZoDJBVQ0t+LBHscJFHjH/BBFbVjtEBF5X9hxpyQYiHyt/Te/v/iiu6HR2bcC6P2EX8ipV P/yQbyYfldVYvNAdRncSeWqdq9eEwiLaJRfKGA== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.cash. 172800 IN A 65.22.32.44 v0n0.nic.cash. 172800 IN AAAA 2a01:8840:22::44 v0n1.nic.cash. 172800 IN A 65.22.33.44 v0n1.nic.cash. 172800 IN AAAA 2a01:8840:23::44 v0n2.nic.cash. 172800 IN A 65.22.34.44 v0n2.nic.cash. 172800 IN AAAA 2a01:8840:24::44 v0n3.nic.cash. 172800 IN A 161.232.16.44 v0n3.nic.cash. 172800 IN AAAA 2a01:8840:fa::44 v2n0.nic.cash. 172800 IN A 65.22.35.44 v2n0.nic.cash. 172800 IN AAAA 2a01:8840:25::44 v2n1.nic.cash. 172800 IN A 161.232.17.44 v2n1.nic.cash. 172800 IN AAAA 2a01:8840:fb::44 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for cash/DNSKEY
	Received 754 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 754 octets ;; HEADER SECTION ;; id = 30963 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cash. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cash. 172800 IN NS v0n3.nic.cash. cash. 172800 IN NS v2n1.nic.cash. cash. 172800 IN NS v0n0.nic.cash. cash. 172800 IN NS v0n2.nic.cash. cash. 172800 IN NS v0n1.nic.cash. cash. 172800 IN NS v2n0.nic.cash. cash. 86400 IN DS ( 38860 8 2 8ff5818a6631fe5ed105d1e518de91a91535a52cf8c0e90ba448f0dc78fdf536 ) cash. 86400 IN RRSIG ( DS 8 1 86400 20260604050000 20260522040000 54393 . XHMo159qfbdJG5zMDa91bPIaeI7uPk+kIwIUJZ0/UfIIAjlqywS4z7OJxaQHOM1sgFQto1snDHs3 pXIJrbRmBk7dAqH68sEXveZg789f/dRn4H06RwSagbNZv5HP2ovCHJkzTjxNqdADdOfvDDKw9AZT wtNYtl4B/q936kbALI1bQzf/N6yWTvzwD2MLx6F9wAw0iesREFPYAtNh+rUfMua93gQvrznUBIXj D83O6FuZoDJBVQ0t+LBHscJFHjH/BBFbVjtEBF5X9hxpyQYiHyt/Te/v/iiu6HR2bcC6P2EX8ipV P/yQbyYfldVYvNAdRncSeWqdq9eEwiLaJRfKGA== ) ;; ADDITIONAL SECTION (13 records) v2n1.nic.cash. 172800 IN A 161.232.17.44 v2n0.nic.cash. 172800 IN A 65.22.35.44 v0n3.nic.cash. 172800 IN A 161.232.16.44 v0n2.nic.cash. 172800 IN A 65.22.34.44 v0n1.nic.cash. 172800 IN A 65.22.33.44 v0n0.nic.cash. 172800 IN A 65.22.32.44 v2n1.nic.cash. 172800 IN AAAA 2a01:8840:fb::44 v2n0.nic.cash. 172800 IN AAAA 2a01:8840:25::44 v0n3.nic.cash. 172800 IN AAAA 2a01:8840:fa::44 v0n2.nic.cash. 172800 IN AAAA 2a01:8840:24::44 v0n1.nic.cash. 172800 IN AAAA 2a01:8840:23::44 v0n0.nic.cash. 172800 IN AAAA 2a01:8840:22::44 ;; { "EDNS-VERSION": 0 }
	Found child zone cash

cash

	Checking DS between . and cash
	Query to g.root-servers.net for cash/DS
	Received 368 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 368 octets ;; HEADER SECTION ;; id = 38953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cash. IN DS ;; ANSWER SECTION (2 records) cash. 86400 IN DS ( 38860 8 2 8ff5818a6631fe5ed105d1e518de91a91535a52cf8c0e90ba448f0dc78fdf536 ) cash. 86400 IN RRSIG ( DS 8 1 86400 20260604050000 20260522040000 54393 . XHMo159qfbdJG5zMDa91bPIaeI7uPk+kIwIUJZ0/UfIIAjlqywS4z7OJxaQHOM1sgFQto1snDHs3 pXIJrbRmBk7dAqH68sEXveZg789f/dRn4H06RwSagbNZv5HP2ovCHJkzTjxNqdADdOfvDDKw9AZT wtNYtl4B/q936kbALI1bQzf/N6yWTvzwD2MLx6F9wAw0iesREFPYAtNh+rUfMua93gQvrznUBIXj D83O6FuZoDJBVQ0t+LBHscJFHjH/BBFbVjtEBF5X9hxpyQYiHyt/Te/v/iiu6HR2bcC6P2EX8ipV P/yQbyYfldVYvNAdRncSeWqdq9eEwiLaJRfKGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cash in the . zone
	DS=38860/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cash. 86400 IN RRSIG ( DS 8 1 86400 20260604050000 20260522040000 54393 . XHMo159qfbdJG5zMDa91bPIaeI7uPk+kIwIUJZ0/UfIIAjlqywS4z7OJxaQHOM1sgFQto1snDHs3 pXIJrbRmBk7dAqH68sEXveZg789f/dRn4H06RwSagbNZv5HP2ovCHJkzTjxNqdADdOfvDDKw9AZT wtNYtl4B/q936kbALI1bQzf/N6yWTvzwD2MLx6F9wAw0iesREFPYAtNh+rUfMua93gQvrznUBIXj D83O6FuZoDJBVQ0t+LBHscJFHjH/BBFbVjtEBF5X9hxpyQYiHyt/Te/v/iiu6HR2bcC6P2EX8ipV P/yQbyYfldVYvNAdRncSeWqdq9eEwiLaJRfKGA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=38860/SHA-256 is now in the chain-of-trust
	`cash. 86400 IN DS ( 38860 8 2 8ff5818a6631fe5ed105d1e518de91a91535a52cf8c0e90ba448f0dc78fdf536 )`
	Query to v0n3.nic.cash for cash/DNSKEY
	Received 897 bytes from 161.232.16.44
	;; Response received from [161.232.16.44] 897 octets ;; HEADER SECTION ;; id = 28236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cash. IN DNSKEY ;; ANSWER SECTION (4 records) cash. 3600 IN DNSKEY ( 256 3 8 AwEAAc/UpHx7ZP2WHAQiPykbDb/E4vH+3iAlEyeDrxDP/o+x0vaNFLb/yM6kRRL4IGtNyYtJpIht A4ZNLj/WEKCRfsiFldLbKaBbyGWCZd6ugBSfxgXVrSVEdBV7+JhafifRc3bdwwo/CDj97RBRgYUW k5sBQfpdOXZXEbEYSkSgtIZD ) ; keytag 25323 cash. 3600 IN DNSKEY ( 256 3 8 AwEAAdxEwrM2BD9Jq2GFS9J09GJCVpFEDlta9auJRSItsLlXtmTHAwXOzvUr4nxEr2s+TiSDEePX Xmfs9xmc4x4KdPjVdeoH/vtUCpdae52jog6tSDcbGSnN5+6q2du7+hHTmNwLTbXLXoo3PQWw0vHC Fk/MLZ41IOMtfMUHHw23xq7J ) ; keytag 50676 cash. 3600 IN DNSKEY ( 257 3 8 AwEAAfD9+DEic/ugL+d0zBQ6obEae8edHRvanQMT+f/OIXhZ97cIwuGiRQjHd3GuY2pi5Y8NcJ78 nCTbvm6EA7HIAfMiRvnHa4j2m1/MILnTfYp6S+4MGA3r7rLzPiFIvCOif7ODkZxvoi4EiYFoZ086 9D9Zg5baV56igRSJzl2CN+FMWXC7c/9XHryPHBxSQZmS5f3G/59R8iuP5NmnwCe3u1A15xNzzDeG 0pTVz6jzgT2bZI7DqxmevoFSel21B0aUDcc6ToBrgxTxFMWCuhbH8LAmPQ9D0y5bV1WqOls6ciHf hIEgj8fQRIcprI7Pk9yimEe+MgxB86Nk01Z2EwsacSs= ) ; keytag 38860 cash. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260607152401 20260517142401 38860 cash. w5ujhuhN1Cz8PGW8TN4O+k/DUX4O9kJNeWxOA2+8dWPuxRmQrXKZA2BOk0wax1mymrBtBQUjLgDd +ZNATndNY7mTk5yfo8C/OX5ugIa/ZJxR+gjojs4N+kp1G3af5tLZr+QOShSxtJCDgBkKh/g2WINn TBIxz0y5xIQQ0zZdXYZg1Py/Cs+eISTtZdXLOz3Sh4D8Bh1v4ydUYG2RQc3zvStEFBxOsFhDKHTI IjFYA0q7yWTXrKh3jZoqtKxr2V2Q1919RmQ2/7zYCC3W1nU62ngOiWmLCh3g/yqQe3+yFNVeKVJY SZKJORRN7fU9wMU+i9fqlNoPhevdjQKck/kf+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for cash
	`cash. 3600 IN DNSKEY ( 256 3 8 AwEAAc/UpHx7ZP2WHAQiPykbDb/E4vH+3iAlEyeDrxDP/o+x0vaNFLb/yM6kRRL4IGtNyYtJpIht A4ZNLj/WEKCRfsiFldLbKaBbyGWCZd6ugBSfxgXVrSVEdBV7+JhafifRc3bdwwo/CDj97RBRgYUW k5sBQfpdOXZXEbEYSkSgtIZD ) ; keytag 25323`
	`cash. 3600 IN DNSKEY ( 256 3 8 AwEAAdxEwrM2BD9Jq2GFS9J09GJCVpFEDlta9auJRSItsLlXtmTHAwXOzvUr4nxEr2s+TiSDEePX Xmfs9xmc4x4KdPjVdeoH/vtUCpdae52jog6tSDcbGSnN5+6q2du7+hHTmNwLTbXLXoo3PQWw0vHC Fk/MLZ41IOMtfMUHHw23xq7J ) ; keytag 50676`
	`cash. 3600 IN DNSKEY ( 257 3 8 AwEAAfD9+DEic/ugL+d0zBQ6obEae8edHRvanQMT+f/OIXhZ97cIwuGiRQjHd3GuY2pi5Y8NcJ78 nCTbvm6EA7HIAfMiRvnHa4j2m1/MILnTfYp6S+4MGA3r7rLzPiFIvCOif7ODkZxvoi4EiYFoZ086 9D9Zg5baV56igRSJzl2CN+FMWXC7c/9XHryPHBxSQZmS5f3G/59R8iuP5NmnwCe3u1A15xNzzDeG 0pTVz6jzgT2bZI7DqxmevoFSel21B0aUDcc6ToBrgxTxFMWCuhbH8LAmPQ9D0y5bV1WqOls6ciHf hIEgj8fQRIcprI7Pk9yimEe+MgxB86Nk01Z2EwsacSs= ) ; keytag 38860`
	DNSKEY=38860/SEP is now in the chain-of-trust
	DS=38860/SHA-256 verifies DNSKEY=38860/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cash. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260607152401 20260517142401 38860 cash. w5ujhuhN1Cz8PGW8TN4O+k/DUX4O9kJNeWxOA2+8dWPuxRmQrXKZA2BOk0wax1mymrBtBQUjLgDd +ZNATndNY7mTk5yfo8C/OX5ugIa/ZJxR+gjojs4N+kp1G3af5tLZr+QOShSxtJCDgBkKh/g2WINn TBIxz0y5xIQQ0zZdXYZg1Py/Cs+eISTtZdXLOz3Sh4D8Bh1v4ydUYG2RQc3zvStEFBxOsFhDKHTI IjFYA0q7yWTXrKh3jZoqtKxr2V2Q1919RmQ2/7zYCC3W1nU62ngOiWmLCh3g/yqQe3+yFNVeKVJY SZKJORRN7fU9wMU+i9fqlNoPhevdjQKck/kf+w== )`
	RRSIG=38860 and DNSKEY=38860/SEP verifies the DNSKEY RRset
	DNSKEY=25323 is now in the chain-of-trust
	DNSKEY=50676 is now in the chain-of-trust
	Query to v2n0.nic.cash for empyrean.cash/A
	Received 588 bytes from 65.22.35.44
	;; Response received from [65.22.35.44] 588 octets ;; HEADER SECTION ;; id = 62082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) empyrean.cash. 3600 IN NS donald.ns.cloudflare.com. empyrean.cash. 3600 IN NS nora.ns.cloudflare.com. jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN NSEC3 ( 1 1 0 73 jsgnpcm22m25to4o03rckpmu7ev3gtfn NS SOA RRSIG DNSKEY NSEC3PARAM ) jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260612113531 20260522103531 25323 cash. XVh5ZIrxx59Cd5d5K+oDje6OKwffvAZYovmklbpuFPqXrUcvlAWDVRgyP+SYz9EDAqtz5PBSaIi2 rKXNuB46lSzXYBKt6RDZDM5FsOrX+naLXE5RBKEy1QkZLA4CCJZcoeY/oePq12lN8txSr+DSTP9E 4Aen1yCyFypLGyecl5U= ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN NSEC3 ( 1 1 0 73 d9k5ah7d61d4elogir22t8v2govoul6r NS DS RRSIG ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260610145925 20260520135925 25323 cash. TnM8GbH2C/4zPkV2vHMDDdBCEeYKhOVIhHugc2b/YjblhB+49Aush0959bxFh4manPE97kpXM96s 2006nRY66yJnAln7LqHExcrjkPdsbgHMOW23mneMuCeziHPLNpdkYz0wElcQei5Jv063309LeKNX I3wONq3I/+JybwI3b4c= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v2n0.nic.cash for empyrean.cash/DNSKEY
	Received 588 bytes from 65.22.35.44
	;; Response received from [65.22.35.44] 588 octets ;; HEADER SECTION ;; id = 47209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) empyrean.cash. 3600 IN NS nora.ns.cloudflare.com. empyrean.cash. 3600 IN NS donald.ns.cloudflare.com. jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN NSEC3 ( 1 1 0 73 jsgnpcm22m25to4o03rckpmu7ev3gtfn NS SOA RRSIG DNSKEY NSEC3PARAM ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN NSEC3 ( 1 1 0 73 d9k5ah7d61d4elogir22t8v2govoul6r NS DS RRSIG ) jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260612113531 20260522103531 25323 cash. XVh5ZIrxx59Cd5d5K+oDje6OKwffvAZYovmklbpuFPqXrUcvlAWDVRgyP+SYz9EDAqtz5PBSaIi2 rKXNuB46lSzXYBKt6RDZDM5FsOrX+naLXE5RBKEy1QkZLA4CCJZcoeY/oePq12lN8txSr+DSTP9E 4Aen1yCyFypLGyecl5U= ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260610145925 20260520135925 25323 cash. TnM8GbH2C/4zPkV2vHMDDdBCEeYKhOVIhHugc2b/YjblhB+49Aush0959bxFh4manPE97kpXM96s 2006nRY66yJnAln7LqHExcrjkPdsbgHMOW23mneMuCeziHPLNpdkYz0wElcQei5Jv063309LeKNX I3wONq3I/+JybwI3b4c= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone empyrean.cash

empyrean.cash

	Checking DS between cash and empyrean.cash
	Query to v0n1.nic.cash for empyrean.cash/DS
	Received 763 bytes from 65.22.33.44
	;; Response received from [65.22.33.44] 763 octets ;; HEADER SECTION ;; id = 56936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN NSEC3 ( 1 1 0 73 jsgnpcm22m25to4o03rckpmu7ev3gtfn NS SOA RRSIG DNSKEY NSEC3PARAM ) jpnbrp9lf6jel4re6fb5go56qc01519d.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260612113531 20260522103531 25323 cash. XVh5ZIrxx59Cd5d5K+oDje6OKwffvAZYovmklbpuFPqXrUcvlAWDVRgyP+SYz9EDAqtz5PBSaIi2 rKXNuB46lSzXYBKt6RDZDM5FsOrX+naLXE5RBKEy1QkZLA4CCJZcoeY/oePq12lN8txSr+DSTP9E 4Aen1yCyFypLGyecl5U= ) cash. 3600 IN SOA ( v0n0.nic.cash. hostmaster.donuts.email. 1779449541 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) cash. 3600 IN RRSIG ( SOA 8 1 3600 20260612113531 20260522103531 25323 cash. afBn4DepehvqTRpFQCqDKDXi+gb/lsSBuaNPKdyLjMvdxAkRTaHY9Z36uIPA+Bwj+bcLgtb+JHRy voTc5jTvE/d41Sxi/TBwi4HGLEs9oRSvhAIe993FAhZrk8jMX4HrV26GjsznUzWiy94kc2HpDnJu QPKIX7fhOHs44O8kQLc= ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN NSEC3 ( 1 1 0 73 d9k5ah7d61d4elogir22t8v2govoul6r NS DS RRSIG ) d84me3flo384lqq4m5cd2plq947st5na.cash. 3600 IN RRSIG ( NSEC3 8 2 3600 20260610145925 20260520135925 25323 cash. TnM8GbH2C/4zPkV2vHMDDdBCEeYKhOVIhHugc2b/YjblhB+49Aush0959bxFh4manPE97kpXM96s 2006nRY66yJnAln7LqHExcrjkPdsbgHMOW23mneMuCeziHPLNpdkYz0wElcQei5Jv063309LeKNX I3wONq3I/+JybwI3b4c= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for empyrean.cash in the cash zone
	Query to nora.ns.cloudflare.com for empyrean.cash/DNSKEY
	Received 106 bytes from 108.162.192.213
	;; Response received from [108.162.192.213] 106 octets ;; HEADER SECTION ;; id = 47427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) empyrean.cash. 1800 IN SOA ( donald.ns.cloudflare.com. dns.cloudflare.com. 2404060141 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to donald.ns.cloudflare.com for empyrean.cash/A
	Received 58 bytes from 108.162.193.158
	;; Response received from [108.162.193.158] 58 octets ;; HEADER SECTION ;; id = 3649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN A ;; ANSWER SECTION (1 record) empyrean.cash. 3600 IN A 76.76.21.21 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	donald.ns.cloudflare.com is authoritative for empyrean.cash
	Query to nora.ns.cloudflare.com for empyrean.cash/SOA
	Received 106 bytes from 172.64.32.213
	;; Response received from [172.64.32.213] 106 octets ;; HEADER SECTION ;; id = 18418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN SOA ;; ANSWER SECTION (1 record) empyrean.cash. 1800 IN SOA ( donald.ns.cloudflare.com. dns.cloudflare.com. 2404060141 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to donald.ns.cloudflare.com for empyrean.cash/A
	empyrean.cash A RR has value 76.76.21.21
	No RRSIGs found

empyrean.cash

	Query to nora.ns.cloudflare.com for empyrean.cash/A
	Received 58 bytes from 173.245.58.213
	;; Response received from [173.245.58.213] 58 octets ;; HEADER SECTION ;; id = 28543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; empyrean.cash. IN A ;; ANSWER SECTION (1 record) empyrean.cash. 3600 IN A 76.76.21.21 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nora.ns.cloudflare.com is authoritative for empyrean.cash
	Query to nora.ns.cloudflare.com for empyrean.cash/A
	empyrean.cash A RR has value 76.76.21.21
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test empyrean.cash at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: