DNSSEC Analyzer - freebsd.org

Domain Name:

Time: 2023-06-08 16:08:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for freebsd.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (864 octets) ;; HEADER SECTION ;; id = 48082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to g.root-servers.net for freebsd.org/A
	Received 780 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (780 octets) ;; HEADER SECTION ;; id = 45574 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . F1dNlwgkyPsgYXHkDeMLF/WwDkvYlbqhfg88tHyuKsNxCzrPpUZOh9ZOmamDY0C9F3ERUnZpI7Fy DAQRqD+Bw/Yu8BSVmahpjKW/sgnARgZrO/tun1DlXWZH98sMNC3cToKLxfEclpxO6pVw1Cn5Nq+O toLgnRZ/20v5/LpQd9qqz/wMHKs/WRC4ItPn2V7c5N5lMfH1mvIimkrVT0yCB5pVADPny2LFY1FL hFdTtMgThaFloHMtyUwh2QD5XX2MjHaFY8gzKrgMaiAxALof54BesAkQ8SE/q1zm9oCPwl7s40B0 OBs63bNYROziuK1IQg0zN6ZnvSPBA3EjTJZYUA== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for org/DNSKEY
	Received 769 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (769 octets) ;; HEADER SECTION ;; id = 5072 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . F1dNlwgkyPsgYXHkDeMLF/WwDkvYlbqhfg88tHyuKsNxCzrPpUZOh9ZOmamDY0C9F3ERUnZpI7Fy DAQRqD+Bw/Yu8BSVmahpjKW/sgnARgZrO/tun1DlXWZH98sMNC3cToKLxfEclpxO6pVw1Cn5Nq+O toLgnRZ/20v5/LpQd9qqz/wMHKs/WRC4ItPn2V7c5N5lMfH1mvIimkrVT0yCB5pVADPny2LFY1FL hFdTtMgThaFloHMtyUwh2QD5XX2MjHaFY8gzKrgMaiAxALof54BesAkQ8SE/q1zm9oCPwl7s40B0 OBs63bNYROziuK1IQg0zN6ZnvSPBA3EjTJZYUA== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to f.root-servers.net for org/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (367 octets) ;; HEADER SECTION ;; id = 20763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . F1dNlwgkyPsgYXHkDeMLF/WwDkvYlbqhfg88tHyuKsNxCzrPpUZOh9ZOmamDY0C9F3ERUnZpI7Fy DAQRqD+Bw/Yu8BSVmahpjKW/sgnARgZrO/tun1DlXWZH98sMNC3cToKLxfEclpxO6pVw1Cn5Nq+O toLgnRZ/20v5/LpQd9qqz/wMHKs/WRC4ItPn2V7c5N5lMfH1mvIimkrVT0yCB5pVADPny2LFY1FL hFdTtMgThaFloHMtyUwh2QD5XX2MjHaFY8gzKrgMaiAxALof54BesAkQ8SE/q1zm9oCPwl7s40B0 OBs63bNYROziuK1IQg0zN6ZnvSPBA3EjTJZYUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . F1dNlwgkyPsgYXHkDeMLF/WwDkvYlbqhfg88tHyuKsNxCzrPpUZOh9ZOmamDY0C9F3ERUnZpI7Fy DAQRqD+Bw/Yu8BSVmahpjKW/sgnARgZrO/tun1DlXWZH98sMNC3cToKLxfEclpxO6pVw1Cn5Nq+O toLgnRZ/20v5/LpQd9qqz/wMHKs/WRC4ItPn2V7c5N5lMfH1mvIimkrVT0yCB5pVADPny2LFY1FL hFdTtMgThaFloHMtyUwh2QD5XX2MjHaFY8gzKrgMaiAxALof54BesAkQ8SE/q1zm9oCPwl7s40B0 OBs63bNYROziuK1IQg0zN6ZnvSPBA3EjTJZYUA== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to c0.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (895 octets) ;; HEADER SECTION ;; id = 5872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4e+kY5KwlEF/IOHurOa/u7QD+wa295aX5Oq3gauGT3vFm6sjVohJxX01oKUXYhDUdFucVs tDJafoY+j6DEoLvdXoRaKgzQQeM4VKiW2BPYMWfneIhxGhRAUFNITouXNGzD5dWTKktThx9n7VgT wg+55jlt3Zz0/7pqO2hgldxF ) ; Key ID = 33369 org. 3600 IN DNSKEY ( 256 3 8 AwEAAdQvcRi7q4gPsdt+FMSl/Hdv79WE2kNGvHm20lfKPsRXsMHQiW+UNp6JWYQxpmJsbIfAQEgv NukSxnmyzg3EXVSCC+f3GPWJ8/QbfgTxq6+dLSCAYJxPVn4SNJPCTzL/689D/nrM6+iPutKeIaY0 QrFLqntV1FbPYqzwo04Y30ZX ) ; Key ID = 25533 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20230622152518 20230601142518 26974 org. Eqtb6yd9dMIrOwhgbS+OQlIOKB5yGIdF8mBuGh5AUZlX0/GH2ccq5xM7lCGNK8xJzrzJIsjex8x9 h9nSLtz4E5mkYZNXAw0ob02xdDFb6SqajtkftoFWbvFxjw9tA4lECBnWSuRsF5xlWIdsgd0ydZus KQgRlfKY1UBT/xQ62qsvdr5zfvYNKOmyDt44KbxEyzPP/VZbOWgfxMbvfhdFhqt/rSoCpZhDjXDw Ki33+wZwyKKKzEMJRK8QHlhZUWwFLauBJK8GKO8GAl2e/RoCE0KfsPHNzWpMxvpECAw9fkoc34rv wslM328sWAvGAIKuv/JFVBppXdgoXWQ0bXAmew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4e+kY5KwlEF/IOHurOa/u7QD+wa295aX5Oq3gauGT3vFm6sjVohJxX01oKUXYhDUdFucVs tDJafoY+j6DEoLvdXoRaKgzQQeM4VKiW2BPYMWfneIhxGhRAUFNITouXNGzD5dWTKktThx9n7VgT wg+55jlt3Zz0/7pqO2hgldxF ) ; Key ID = 33369`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdQvcRi7q4gPsdt+FMSl/Hdv79WE2kNGvHm20lfKPsRXsMHQiW+UNp6JWYQxpmJsbIfAQEgv NukSxnmyzg3EXVSCC+f3GPWJ8/QbfgTxq6+dLSCAYJxPVn4SNJPCTzL/689D/nrM6+iPutKeIaY0 QrFLqntV1FbPYqzwo04Y30ZX ) ; Key ID = 25533`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20230622152518 20230601142518 26974 org. Eqtb6yd9dMIrOwhgbS+OQlIOKB5yGIdF8mBuGh5AUZlX0/GH2ccq5xM7lCGNK8xJzrzJIsjex8x9 h9nSLtz4E5mkYZNXAw0ob02xdDFb6SqajtkftoFWbvFxjw9tA4lECBnWSuRsF5xlWIdsgd0ydZus KQgRlfKY1UBT/xQ62qsvdr5zfvYNKOmyDt44KbxEyzPP/VZbOWgfxMbvfhdFhqt/rSoCpZhDjXDw Ki33+wZwyKKKzEMJRK8QHlhZUWwFLauBJK8GKO8GAl2e/RoCE0KfsPHNzWpMxvpECAw9fkoc34rv wslM328sWAvGAIKuv/JFVBppXdgoXWQ0bXAmew== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=33369 is now in the chain-of-trust
	DNSKEY=25533 is now in the chain-of-trust
	Query to a2.org.afilias-nst.info for freebsd.org/A
	Received 435 bytes from 199.249.112.1
	;; Response received from 199.249.112.1 (435 octets) ;; HEADER SECTION ;; id = 33746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN DS ( 23710 8 2 710552694c349260c84430f5e7cc54406543896011c39bb79e21d9bfc3a7b62f ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20230622152518 20230601142518 33369 org. PGpMJRliPds4d0PXu5GpfszSi7j8/l15lNzQCUaPrmc/ZEKlSnzAs4MTUZyMxHWwGkGvveK4t+Dy FQtzDAHNhPTduN6Ciqm7gcbarLYuZf3v+APWYXiwbpbKxjkJf5wM4oOtGbA20GPIpszY5f+C6eUA thri/diqLJDPBxR+Sis= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a2.org.afilias-nst.info for freebsd.org/DNSKEY
	Received 435 bytes from 199.249.112.1
	;; Response received from 199.249.112.1 (435 octets) ;; HEADER SECTION ;; id = 61298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN DS ( 23710 8 2 710552694c349260c84430f5e7cc54406543896011c39bb79e21d9bfc3a7b62f ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20230622152518 20230601142518 33369 org. PGpMJRliPds4d0PXu5GpfszSi7j8/l15lNzQCUaPrmc/ZEKlSnzAs4MTUZyMxHWwGkGvveK4t+Dy FQtzDAHNhPTduN6Ciqm7gcbarLYuZf3v+APWYXiwbpbKxjkJf5wM4oOtGbA20GPIpszY5f+C6eUA thri/diqLJDPBxR+Sis= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone freebsd.org

freebsd.org

	Checking DS between org and freebsd.org
	Query to a2.org.afilias-nst.info for freebsd.org/DS
	Received 251 bytes from 199.249.112.1
	;; Response received from 199.249.112.1 (251 octets) ;; HEADER SECTION ;; id = 57031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DS ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN DS ( 23710 8 2 710552694c349260c84430f5e7cc54406543896011c39bb79e21d9bfc3a7b62f ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20230622152518 20230601142518 33369 org. PGpMJRliPds4d0PXu5GpfszSi7j8/l15lNzQCUaPrmc/ZEKlSnzAs4MTUZyMxHWwGkGvveK4t+Dy FQtzDAHNhPTduN6Ciqm7gcbarLYuZf3v+APWYXiwbpbKxjkJf5wM4oOtGbA20GPIpszY5f+C6eUA thri/diqLJDPBxR+Sis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for freebsd.org in the org zone
	DS=23710/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20230622152518 20230601142518 33369 org. PGpMJRliPds4d0PXu5GpfszSi7j8/l15lNzQCUaPrmc/ZEKlSnzAs4MTUZyMxHWwGkGvveK4t+Dy FQtzDAHNhPTduN6Ciqm7gcbarLYuZf3v+APWYXiwbpbKxjkJf5wM4oOtGbA20GPIpszY5f+C6eUA thri/diqLJDPBxR+Sis= )`
	RRSIG=33369 and DNSKEY=33369 verifies the DS RRset
	DS=23710/SHA-256 is now in the chain-of-trust
	`freebsd.org. 3600 IN DS ( 23710 8 2 710552694c349260c84430f5e7cc54406543896011c39bb79e21d9bfc3a7b62f )`
	Query to ns5.he.net for freebsd.org/DNSKEY
	Received 891 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (891 octets) ;; HEADER SECTION ;; id = 39911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (3 records) freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAawfYrf4XWLFUCEf1w3bvKcybN4T3KI18m92pd1YcttgHXdezRiZVe2W50n9jo5q8+Ez6Kjr i4r8JXMMYxj5Sd6UNv3m6igLXMvAmkPuNXYXkFaQ/cCc2ga8WtO80bxOQ96aR2n/g0U+lqdGQrI9 qrrgA5hTnPylawTCAHdsSEFyTLCWdLUZ6341BqPgjk+WtaczQlocVe7LFhNVLAIrJGsnFBZS2QfN vG4wtfM0Ghul37tQPt3b0B6F8cQgZkLPsxLhTydy/otmFDuoRzgulfuGuiFTQq6cyoA2VbzK3vES PgbzzxYmhA4RIAsazaEYxQgFxurP0nHZMLk/LjMtlSE= ) ; Key ID = 23710 freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdXeQ0MWFqBEX+71uNHA2yMbIePS3486CyFRlk3pig+oxuaOgZjN9sRawzK/AMSUpOaokT88 n2b9OHQUrqwKfO2k/WqySTpgLMiVstcn4MMll1EZa27PpdvP7BbEjpsnEGR29OY+smZD6lyTmSgs VhGxaMEsVKgj9DmlFZL8mG+PQOPOg5NY7vHFMEL/aoG3SUtfe+ReAaJ7DpYW6rO2DNdoZynhYY3k Wi1usEG9nUo2uK8erwFj6EZ1YjLTDiDdgbcme1DtX2AEzlKXeSoRimR03GwrDodtER/aHu/Q5pBx 9dh/tIznPGgFaRmKiV760b2WgkpiACI7NPHsdWvgUB8= ) ; Key ID = 62676 freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230616080954 20230602132359 23710 freebsd.org. KayCoiEyDeGUor9mFYoYhA5wNqh2NL+PxRm1OL3u+J78zVmH3NO40ah3K2r68AJyhZPHe6VErUcy wask1GpdwgrGZ5iIhi761aVlsfI82n81LBYihhlDE6sdWI3kskbeWKZ79vm+8nt1o47BkM/y69LU TRlqu453g7IVYSPPm3pC4Yjf8XdINZaARadrMMDBdRLNK+hknO7tSctD2Rgi2vVbh/mksNS5c+LG G3g/6OcU/sQN44G1Ak4/9DKcfTKqBrjU3ONDZWAV1zU/TAU3EMSXC7XjKvxwx3MBl9kKBRzZtBeW ICTmVWbXWIQm2sSFQQofOqv9sxaGBDxZC5fzVQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for freebsd.org
	`freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAawfYrf4XWLFUCEf1w3bvKcybN4T3KI18m92pd1YcttgHXdezRiZVe2W50n9jo5q8+Ez6Kjr i4r8JXMMYxj5Sd6UNv3m6igLXMvAmkPuNXYXkFaQ/cCc2ga8WtO80bxOQ96aR2n/g0U+lqdGQrI9 qrrgA5hTnPylawTCAHdsSEFyTLCWdLUZ6341BqPgjk+WtaczQlocVe7LFhNVLAIrJGsnFBZS2QfN vG4wtfM0Ghul37tQPt3b0B6F8cQgZkLPsxLhTydy/otmFDuoRzgulfuGuiFTQq6cyoA2VbzK3vES PgbzzxYmhA4RIAsazaEYxQgFxurP0nHZMLk/LjMtlSE= ) ; Key ID = 23710`
	`freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdXeQ0MWFqBEX+71uNHA2yMbIePS3486CyFRlk3pig+oxuaOgZjN9sRawzK/AMSUpOaokT88 n2b9OHQUrqwKfO2k/WqySTpgLMiVstcn4MMll1EZa27PpdvP7BbEjpsnEGR29OY+smZD6lyTmSgs VhGxaMEsVKgj9DmlFZL8mG+PQOPOg5NY7vHFMEL/aoG3SUtfe+ReAaJ7DpYW6rO2DNdoZynhYY3k Wi1usEG9nUo2uK8erwFj6EZ1YjLTDiDdgbcme1DtX2AEzlKXeSoRimR03GwrDodtER/aHu/Q5pBx 9dh/tIznPGgFaRmKiV760b2WgkpiACI7NPHsdWvgUB8= ) ; Key ID = 62676`
	DNSKEY=23710/SEP is now in the chain-of-trust
	DS=23710/SHA-256 verifies DNSKEY=23710/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20230616080954 20230602132359 23710 freebsd.org. KayCoiEyDeGUor9mFYoYhA5wNqh2NL+PxRm1OL3u+J78zVmH3NO40ah3K2r68AJyhZPHe6VErUcy wask1GpdwgrGZ5iIhi761aVlsfI82n81LBYihhlDE6sdWI3kskbeWKZ79vm+8nt1o47BkM/y69LU TRlqu453g7IVYSPPm3pC4Yjf8XdINZaARadrMMDBdRLNK+hknO7tSctD2Rgi2vVbh/mksNS5c+LG G3g/6OcU/sQN44G1Ak4/9DKcfTKqBrjU3ONDZWAV1zU/TAU3EMSXC7XjKvxwx3MBl9kKBRzZtBeW ICTmVWbXWIQm2sSFQQofOqv9sxaGBDxZC5fzVQ== )`
	RRSIG=23710 and DNSKEY=23710/SEP verifies the DNSKEY RRset
	DNSKEY=62676 is now in the chain-of-trust
	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from 216.218.132.2 (355 octets) ;; HEADER SECTION ;; id = 58059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns2.freebsd.org for freebsd.org/SOA
	Received 390 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (390 octets) ;; HEADER SECTION ;; id = 12006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023060816 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20230622063355 20230608142500 62676 freebsd.org. hfMDoAbMvaYVNhsged/bby5dLHPlMtUFX8o23jjGI6JMjP1l/N6TzLbSjSKzDgtvjtVQPobYI1t4 xy4QheLMsmSNveDoNaITu6T6Gjf8XzOR7UbbZO6H6LenAFHllloJhZJ7Do0dIYfHcDS4MafXQNea Aat0jaLnVDyoYu1xSdhqWck5Mhuft3V/t9j5aRCKTGEzlt61tOxa/qsL+PpWRUgFm0To8K4My6QQ 0BeQ8+91MpMaZ2eRyos6dcVdHkLscpmshJnHMkGQFefr6beuBBJFV/df2TbH6gOr7GxxDX1rHdBg AW2M3wY63aXsNX3vEXQ0tvl8mYr1v0F4lC+58A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.freebsd.org for freebsd.org/SOA
	Received 390 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (390 octets) ;; HEADER SECTION ;; id = 53304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023060816 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20230622063355 20230608142500 62676 freebsd.org. hfMDoAbMvaYVNhsged/bby5dLHPlMtUFX8o23jjGI6JMjP1l/N6TzLbSjSKzDgtvjtVQPobYI1t4 xy4QheLMsmSNveDoNaITu6T6Gjf8XzOR7UbbZO6H6LenAFHllloJhZJ7Do0dIYfHcDS4MafXQNea Aat0jaLnVDyoYu1xSdhqWck5Mhuft3V/t9j5aRCKTGEzlt61tOxa/qsL+PpWRUgFm0To8K4My6QQ 0BeQ8+91MpMaZ2eRyos6dcVdHkLscpmshJnHMkGQFefr6beuBBJFV/df2TbH6gOr7GxxDX1rHdBg AW2M3wY63aXsNX3vEXQ0tvl8mYr1v0F4lC+58A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns5.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (390 octets) ;; HEADER SECTION ;; id = 43338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20230622063355 20230608142500 62676 freebsd.org. hfMDoAbMvaYVNhsged/bby5dLHPlMtUFX8o23jjGI6JMjP1l/N6TzLbSjSKzDgtvjtVQPobYI1t4 xy4QheLMsmSNveDoNaITu6T6Gjf8XzOR7UbbZO6H6LenAFHllloJhZJ7Do0dIYfHcDS4MafXQNea Aat0jaLnVDyoYu1xSdhqWck5Mhuft3V/t9j5aRCKTGEzlt61tOxa/qsL+PpWRUgFm0To8K4My6QQ 0BeQ8+91MpMaZ2eRyos6dcVdHkLscpmshJnHMkGQFefr6beuBBJFV/df2TbH6gOr7GxxDX1rHdBg AW2M3wY63aXsNX3vEXQ0tvl8mYr1v0F4lC+58A== ) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023060816 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (390 octets) ;; HEADER SECTION ;; id = 30365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20230622063355 20230608142500 62676 freebsd.org. hfMDoAbMvaYVNhsged/bby5dLHPlMtUFX8o23jjGI6JMjP1l/N6TzLbSjSKzDgtvjtVQPobYI1t4 xy4QheLMsmSNveDoNaITu6T6Gjf8XzOR7UbbZO6H6LenAFHllloJhZJ7Do0dIYfHcDS4MafXQNea Aat0jaLnVDyoYu1xSdhqWck5Mhuft3V/t9j5aRCKTGEzlt61tOxa/qsL+PpWRUgFm0To8K4My6QQ 0BeQ8+91MpMaZ2eRyos6dcVdHkLscpmshJnHMkGQFefr6beuBBJFV/df2TbH6gOr7GxxDX1rHdBg AW2M3wY63aXsNX3vEXQ0tvl8mYr1v0F4lC+58A== ) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023060816 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from 216.218.132.2 (355 octets) ;; HEADER SECTION ;; id = 30326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== )`
	RRSIG=62676 and DNSKEY=62676 verifies the A RRset

freebsd.org

	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (355 octets) ;; HEADER SECTION ;; id = 36496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (355 octets) ;; HEADER SECTION ;; id = 52010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== )`
	RRSIG=62676 and DNSKEY=62676 verifies the A RRset

freebsd.org

	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (355 octets) ;; HEADER SECTION ;; id = 64249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (355 octets) ;; HEADER SECTION ;; id = 19153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== )`
	RRSIG=62676 and DNSKEY=62676 verifies the A RRset

freebsd.org

	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (355 octets) ;; HEADER SECTION ;; id = 36439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (355 octets) ;; HEADER SECTION ;; id = 52300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== )`
	RRSIG=62676 and DNSKEY=62676 verifies the A RRset

freebsd.org

	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (355 octets) ;; HEADER SECTION ;; id = 47413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns5.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (355 octets) ;; HEADER SECTION ;; id = 46600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20230621203200 20230607162304 62676 freebsd.org. W0xp2E+Ia/qE6raIi8JfP5wmiaYcEzc784NeJ0Em0dKQq5qyn1pL6RyZfos5gWkewbU+YUxFlYxl H3oEbfVvbIZItu1gdz/Nw6VIdnEYILuq79E1zV668h14zdKZ62Za+6V3cJ38U3TRUoLl7vJ8e9Xp nzhmq024EGUvXlpPoPS4w/71R4ZKcNF89Q2tPnTL2ACnFcKjiRICpxT23MPw/+La8xzMFSXBhGuG ju9bOOx+dru+3XDwLpthmqXUC7U2lO1DRLFLdw3g3hUKJ5cJSO752mfGiHDMsdPt2YgYCau4/8w8 ozkfNn/8SUnSGYndTttW025rFiqIPbSOzEUSyQ== )`
	RRSIG=62676 and DNSKEY=62676 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freebsd.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: