DNSSEC Analyzer - freebsd.org

Domain Name:

Time: 2023-12-08 03:47:23 UTC, NTP stratum 16

Analyzing DNSSEC problems for freebsd.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from 170.247.170.2 (864 octets) ;; HEADER SECTION ;; id = 58037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to l.root-servers.net for freebsd.org/A
	Received 777 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (777 octets) ;; HEADER SECTION ;; id = 34913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . Ey57YEFzt1SvFHv93vPHTd8CjptkXIK5Qk9Btqbv2tm/A10xz1BPgs/i5donsvjNlCiYmeMJqSVN ZV9iyhtqMwijscEDM/tpnZlTjszFgRfv7OlWicJ7AaxphJUmffBZgCo+QmTZtb77m8xud+Jg+KnX bdHrP9Zux/MTjNCO7AYSii4q7ig257UpjnmxmG45gGSXqFnu8J8gA1JyhjEbwRdmgGTFTzaUC5aL LU+uHxXsyi2sORaBKVuzlv/UF/ZiteMrZWdYgltVhqXAk2dkLKYWe90R4nWo3gRV0DiiRdzgnDIv Roh8I+J8HT0+O/7sGtpwLTYl9SSB7ideL24qHw== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for org/DNSKEY
	Received 772 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (772 octets) ;; HEADER SECTION ;; id = 21392 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . Ey57YEFzt1SvFHv93vPHTd8CjptkXIK5Qk9Btqbv2tm/A10xz1BPgs/i5donsvjNlCiYmeMJqSVN ZV9iyhtqMwijscEDM/tpnZlTjszFgRfv7OlWicJ7AaxphJUmffBZgCo+QmTZtb77m8xud+Jg+KnX bdHrP9Zux/MTjNCO7AYSii4q7ig257UpjnmxmG45gGSXqFnu8J8gA1JyhjEbwRdmgGTFTzaUC5aL LU+uHxXsyi2sORaBKVuzlv/UF/ZiteMrZWdYgltVhqXAk2dkLKYWe90R4nWo3gRV0DiiRdzgnDIv Roh8I+J8HT0+O/7sGtpwLTYl9SSB7ideL24qHw== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to f.root-servers.net for org/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (367 octets) ;; HEADER SECTION ;; id = 11386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . Ey57YEFzt1SvFHv93vPHTd8CjptkXIK5Qk9Btqbv2tm/A10xz1BPgs/i5donsvjNlCiYmeMJqSVN ZV9iyhtqMwijscEDM/tpnZlTjszFgRfv7OlWicJ7AaxphJUmffBZgCo+QmTZtb77m8xud+Jg+KnX bdHrP9Zux/MTjNCO7AYSii4q7ig257UpjnmxmG45gGSXqFnu8J8gA1JyhjEbwRdmgGTFTzaUC5aL LU+uHxXsyi2sORaBKVuzlv/UF/ZiteMrZWdYgltVhqXAk2dkLKYWe90R4nWo3gRV0DiiRdzgnDIv Roh8I+J8HT0+O/7sGtpwLTYl9SSB7ideL24qHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . Ey57YEFzt1SvFHv93vPHTd8CjptkXIK5Qk9Btqbv2tm/A10xz1BPgs/i5donsvjNlCiYmeMJqSVN ZV9iyhtqMwijscEDM/tpnZlTjszFgRfv7OlWicJ7AaxphJUmffBZgCo+QmTZtb77m8xud+Jg+KnX bdHrP9Zux/MTjNCO7AYSii4q7ig257UpjnmxmG45gGSXqFnu8J8gA1JyhjEbwRdmgGTFTzaUC5aL LU+uHxXsyi2sORaBKVuzlv/UF/ZiteMrZWdYgltVhqXAk2dkLKYWe90R4nWo3gRV0DiiRdzgnDIv Roh8I+J8HT0+O/7sGtpwLTYl9SSB7ideL24qHw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to b0.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.19.54.1
	;; Response received from 199.19.54.1 (895 octets) ;; HEADER SECTION ;; id = 33095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231222153550 20231201143550 26974 org. wQtCCwIQCKhhmPt0dEuyG5I7rA6xZA0ajkBQO7esw7F2adgZdQFTKR5uhp1iRr0Afw/FF+ouadqJ TpKZk0i9FvsIvIgHf0zXV37CleIN2fv9vmQE/Uk4e+sSw7Cpw4SrXVW9qZE75DLokMN5nb4ftqz3 1c4AUNnEMvAIupS6vhDMGE7F9O2K6L95kXSJdSMrh494vfJXASNKojDbd29bAEi6hvcwuV9KlswP Sn+N0VII1DhLR07tr2lA3RHTFo81xg1TcAIIuVJMCXdiqYN+F/r9q+flu/qKbkJTayfTjJag/E+u mCmnvfNyg9bp/Nr9I9Jdr/Jhsq09JbQfKuqqeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa4FGs7OxYymiv/SIJcOjqjEBmUwW9tHJiKdAfQo4lwNrFUxZQGeOT30wDI8i1/GeeQg22VB SqQVZqe4qGUHbnT0XGlLIDKrBRXOARMymLwFPZszDiWf0jNAbFE+vF3OJbxWD2z95LOfC5QpLw7p YBNLcGSJZvjjnAeuq3/taU/j ) ; Key ID = 3093`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAa+oGr6axy8Mt1NFEA5KoU9ZkKtD3U0A8XQwRwjoBtcrq0QP3I/GsZi3QMpKowUmLFkDVtqw bkY4qgzX/RQ7cZZVDO6ZqHorqtp0p50nlsY+Puq1phi5lroAMJfAQjXuh5Fp+sXtBQ/8ztwzJYpz wsIG88d+7vBK8uvAyJPyeMEd ) ; Key ID = 55149`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231222153550 20231201143550 26974 org. wQtCCwIQCKhhmPt0dEuyG5I7rA6xZA0ajkBQO7esw7F2adgZdQFTKR5uhp1iRr0Afw/FF+ouadqJ TpKZk0i9FvsIvIgHf0zXV37CleIN2fv9vmQE/Uk4e+sSw7Cpw4SrXVW9qZE75DLokMN5nb4ftqz3 1c4AUNnEMvAIupS6vhDMGE7F9O2K6L95kXSJdSMrh494vfJXASNKojDbd29bAEi6hvcwuV9KlswP Sn+N0VII1DhLR07tr2lA3RHTFo81xg1TcAIIuVJMCXdiqYN+F/r9q+flu/qKbkJTayfTjJag/E+u mCmnvfNyg9bp/Nr9I9Jdr/Jhsq09JbQfKuqqeQ== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=3093 is now in the chain-of-trust
	DNSKEY=55149 is now in the chain-of-trust
	Query to c0.org.afilias-nst.info for freebsd.org/A
	Received 435 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (435 octets) ;; HEADER SECTION ;; id = 61409 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20231222153550 20231201143550 3093 org. g75NzvJRskZU8JxMs0AzkE/nAh6u2obArLb9cgD0dI4zSEqM0+whxlvuUnHp2Mwc2h3dEPMdWgV9 idXap8mzzzXwYAXqlxQkqB/MtCJy2PwlFNXk0oP0DxHyVjcaKR7ukBdDr02KciuUFAYPtgsEUyN7 gczKOE4eKU83CLtX10c= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b0.org.afilias-nst.org for freebsd.org/DNSKEY
	Received 435 bytes from 199.19.54.1
	;; Response received from 199.19.54.1 (435 octets) ;; HEADER SECTION ;; id = 10460 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) freebsd.org. 3600 IN NS ns3.he.net. freebsd.org. 3600 IN NS ns5.he.net. freebsd.org. 3600 IN NS ns1.freebsd.org. freebsd.org. 3600 IN NS ns2.freebsd.org. freebsd.org. 3600 IN NS ns4.he.net. freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20231222153550 20231201143550 3093 org. g75NzvJRskZU8JxMs0AzkE/nAh6u2obArLb9cgD0dI4zSEqM0+whxlvuUnHp2Mwc2h3dEPMdWgV9 idXap8mzzzXwYAXqlxQkqB/MtCJy2PwlFNXk0oP0DxHyVjcaKR7ukBdDr02KciuUFAYPtgsEUyN7 gczKOE4eKU83CLtX10c= ) ;; ADDITIONAL SECTION (5 records) ns1.freebsd.org. 3600 IN A 163.237.210.11 ns2.freebsd.org. 3600 IN A 163.237.210.233 ns1.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:11 ns2.freebsd.org. 3600 IN AAAA 2001:4978:10ae:aba:ca:daba:0:233 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone freebsd.org

freebsd.org

	Checking DS between org and freebsd.org
	Query to a0.org.afilias-nst.info for freebsd.org/DS
	Received 251 bytes from 199.19.56.1
	;; Response received from 199.19.56.1 (251 octets) ;; HEADER SECTION ;; id = 11003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DS ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 ) freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20231222153550 20231201143550 3093 org. g75NzvJRskZU8JxMs0AzkE/nAh6u2obArLb9cgD0dI4zSEqM0+whxlvuUnHp2Mwc2h3dEPMdWgV9 idXap8mzzzXwYAXqlxQkqB/MtCJy2PwlFNXk0oP0DxHyVjcaKR7ukBdDr02KciuUFAYPtgsEUyN7 gczKOE4eKU83CLtX10c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for freebsd.org in the org zone
	DS=920/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`freebsd.org. 3600 IN RRSIG ( DS 8 2 3600 20231222153550 20231201143550 3093 org. g75NzvJRskZU8JxMs0AzkE/nAh6u2obArLb9cgD0dI4zSEqM0+whxlvuUnHp2Mwc2h3dEPMdWgV9 idXap8mzzzXwYAXqlxQkqB/MtCJy2PwlFNXk0oP0DxHyVjcaKR7ukBdDr02KciuUFAYPtgsEUyN7 gczKOE4eKU83CLtX10c= )`
	RRSIG=3093 and DNSKEY=3093 verifies the DS RRset
	DS=920/SHA-256 is now in the chain-of-trust
	`freebsd.org. 3600 IN DS ( 920 8 2 d3927883cbcba7a9368f5c40c726062b99626603e036edfc4ef94004d73764a5 )`
	Query to ns2.freebsd.org for freebsd.org/DNSKEY
	Received 891 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (891 octets) ;; HEADER SECTION ;; id = 34241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN DNSKEY ;; ANSWER SECTION (3 records) freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcj5yx6WCaFyzrEk7o93oJKhfR3egYx6s0j84RtGvqAK4ZxIzuRoSFgrKP3KW5w5gmwmagXa pORGDrLsIHAFOPn+IwQNC3cxYoGPfuWrT6/sUDoJsVz3TC/dGWjuotoN8xxvTTQ57+yGcFhr/gUC jOGtp7VhCvSK7kw6a25z1QEb0ZkrYmHJbOQ2OyZwu7JPtCBB8YPRPExUfWdmhJmaBj8x+UT9Va3R sZ+gNoHbfro6kKv6m6Xii1NC2GS+IUBrKqHsERg2kjVyH1KXuS9mbD534YDattd0IcVpNbebq9Ms 09Kr801Qn/ha5qMLxiAOMUnkYdI2jsuImfgT6pxM9IU= ) ; Key ID = 54831 freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAeogC6aJzRlO5Vcv9kynDgdrgr2P6ayNZ2/8UW7znheZld3LN68BTjwLckxJsj0H836YIEqD yPdeE4jjPh+OP3kH6WRVwU+Jj9iOGb+XmWJKyJ/tVf8WulJOkE6WxGwdvWrv6pS4xJiNLwkF3RXp myns2ioyE1jbWwJ55UnuvP4a9h7SB2F0vNL0gSuo+SfEn9kmPDyjVMlDJo4wcTc0pZ4e/U33uj8X eMM0pjjfa2Lay0bV6g4zQTsYRmQcCxFkmae5qB5YQdK4mYEBRN1jkBmuHZXduSvL0oI/QvfFfMfK JHw1j+jYViCKjBvU8oVKDenD7I6TDoe+Ls6t8bnDyj0= ) ; Key ID = 920 freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231213114847 20231129132359 920 freebsd.org. P+TMFh9RPp4E2yb/hpgpvD9D8KRs/RT1TAkbUbb/GYwSxDvidjl6vnKT263Dg1RNtXo77nsTjgS7 dC0buf2qQX70MTXuP7PVoCIr26L5/3jgwenFwFLUJo2e+vgUyz/GQwiPe8xBQClhxpMuQ3uVlWfw Mx0lmwp+r9kQudphiE8l2vDD7vThBSr4YHciUCdCqXxGnzx3exn43RVhPBmzk/6qshNYbMV3ViAW eywyhnQME5gMPjQOVshIj6Xlt3o1nBXpwZVjl35/JKA0f2b6U4wbw5KQPnP4XOXn8H3lAfaODSLb mMEWJDTYu34hf73WfOcbm0smyGQKT544/ZWLtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for freebsd.org
	`freebsd.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcj5yx6WCaFyzrEk7o93oJKhfR3egYx6s0j84RtGvqAK4ZxIzuRoSFgrKP3KW5w5gmwmagXa pORGDrLsIHAFOPn+IwQNC3cxYoGPfuWrT6/sUDoJsVz3TC/dGWjuotoN8xxvTTQ57+yGcFhr/gUC jOGtp7VhCvSK7kw6a25z1QEb0ZkrYmHJbOQ2OyZwu7JPtCBB8YPRPExUfWdmhJmaBj8x+UT9Va3R sZ+gNoHbfro6kKv6m6Xii1NC2GS+IUBrKqHsERg2kjVyH1KXuS9mbD534YDattd0IcVpNbebq9Ms 09Kr801Qn/ha5qMLxiAOMUnkYdI2jsuImfgT6pxM9IU= ) ; Key ID = 54831`
	`freebsd.org. 3600 IN DNSKEY ( 257 3 8 AwEAAeogC6aJzRlO5Vcv9kynDgdrgr2P6ayNZ2/8UW7znheZld3LN68BTjwLckxJsj0H836YIEqD yPdeE4jjPh+OP3kH6WRVwU+Jj9iOGb+XmWJKyJ/tVf8WulJOkE6WxGwdvWrv6pS4xJiNLwkF3RXp myns2ioyE1jbWwJ55UnuvP4a9h7SB2F0vNL0gSuo+SfEn9kmPDyjVMlDJo4wcTc0pZ4e/U33uj8X eMM0pjjfa2Lay0bV6g4zQTsYRmQcCxFkmae5qB5YQdK4mYEBRN1jkBmuHZXduSvL0oI/QvfFfMfK JHw1j+jYViCKjBvU8oVKDenD7I6TDoe+Ls6t8bnDyj0= ) ; Key ID = 920`
	DNSKEY=920/SEP is now in the chain-of-trust
	DS=920/SHA-256 verifies DNSKEY=920/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`freebsd.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20231213114847 20231129132359 920 freebsd.org. P+TMFh9RPp4E2yb/hpgpvD9D8KRs/RT1TAkbUbb/GYwSxDvidjl6vnKT263Dg1RNtXo77nsTjgS7 dC0buf2qQX70MTXuP7PVoCIr26L5/3jgwenFwFLUJo2e+vgUyz/GQwiPe8xBQClhxpMuQ3uVlWfw Mx0lmwp+r9kQudphiE8l2vDD7vThBSr4YHciUCdCqXxGnzx3exn43RVhPBmzk/6qshNYbMV3ViAW eywyhnQME5gMPjQOVshIj6Xlt3o1nBXpwZVjl35/JKA0f2b6U4wbw5KQPnP4XOXn8H3lAfaODSLb mMEWJDTYu34hf73WfOcbm0smyGQKT544/ZWLtg== )`
	RRSIG=920 and DNSKEY=920/SEP verifies the DNSKEY RRset
	DNSKEY=54831 is now in the chain-of-trust
	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from 216.218.132.2 (355 octets) ;; HEADER SECTION ;; id = 7804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns2.freebsd.org for freebsd.org/SOA
	Received 390 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (390 octets) ;; HEADER SECTION ;; id = 53591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023120803 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20231222070114 20231208022002 54831 freebsd.org. wN6BB9kDadtx2LzgymiLy1uQk8b8z7Th2KNMxnXCuQCMSSHHHCj8tuppqJ2nWVNpwyIY6oR2b7Q0 AfuTu+ORvQejHjsV5FS5uj2OpREtByo6Cu9A1tYgLPpCMHs5qut1s6qjZr1+L+vQ3wL+aXC12vBe qYIVCk/ehR8opBi00ScJcdz2ZC3odDR2Y98jBkQGTRlbie9Ltl/MFvrtP2PFus7xW9wkU4F6i3Lg UATayzXDG7f3qta0sWwtkwbuzb/giIfZOwssp4j9E9Nn/VYcPIIe+SpBLLayXJOUa0kBsoN1Uqef tr/juJYput0WpdU6toKlybFkntSR/7kjWI91XA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.freebsd.org for freebsd.org/SOA
	Received 390 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (390 octets) ;; HEADER SECTION ;; id = 20327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023120803 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20231222070114 20231208022002 54831 freebsd.org. wN6BB9kDadtx2LzgymiLy1uQk8b8z7Th2KNMxnXCuQCMSSHHHCj8tuppqJ2nWVNpwyIY6oR2b7Q0 AfuTu+ORvQejHjsV5FS5uj2OpREtByo6Cu9A1tYgLPpCMHs5qut1s6qjZr1+L+vQ3wL+aXC12vBe qYIVCk/ehR8opBi00ScJcdz2ZC3odDR2Y98jBkQGTRlbie9Ltl/MFvrtP2PFus7xW9wkU4F6i3Lg UATayzXDG7f3qta0sWwtkwbuzb/giIfZOwssp4j9E9Nn/VYcPIIe+SpBLLayXJOUa0kBsoN1Uqef tr/juJYput0WpdU6toKlybFkntSR/7kjWI91XA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns5.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (390 octets) ;; HEADER SECTION ;; id = 25657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023120803 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20231222070114 20231208022002 54831 freebsd.org. wN6BB9kDadtx2LzgymiLy1uQk8b8z7Th2KNMxnXCuQCMSSHHHCj8tuppqJ2nWVNpwyIY6oR2b7Q0 AfuTu+ORvQejHjsV5FS5uj2OpREtByo6Cu9A1tYgLPpCMHs5qut1s6qjZr1+L+vQ3wL+aXC12vBe qYIVCk/ehR8opBi00ScJcdz2ZC3odDR2Y98jBkQGTRlbie9Ltl/MFvrtP2PFus7xW9wkU4F6i3Lg UATayzXDG7f3qta0sWwtkwbuzb/giIfZOwssp4j9E9Nn/VYcPIIe+SpBLLayXJOUa0kBsoN1Uqef tr/juJYput0WpdU6toKlybFkntSR/7kjWI91XA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.he.net for freebsd.org/SOA
	Received 390 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (390 octets) ;; HEADER SECTION ;; id = 37676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN SOA ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( SOA 8 2 3600 20231222070114 20231208022002 54831 freebsd.org. wN6BB9kDadtx2LzgymiLy1uQk8b8z7Th2KNMxnXCuQCMSSHHHCj8tuppqJ2nWVNpwyIY6oR2b7Q0 AfuTu+ORvQejHjsV5FS5uj2OpREtByo6Cu9A1tYgLPpCMHs5qut1s6qjZr1+L+vQ3wL+aXC12vBe qYIVCk/ehR8opBi00ScJcdz2ZC3odDR2Y98jBkQGTRlbie9Ltl/MFvrtP2PFus7xW9wkU4F6i3Lg UATayzXDG7f3qta0sWwtkwbuzb/giIfZOwssp4j9E9Nn/VYcPIIe+SpBLLayXJOUa0kBsoN1Uqef tr/juJYput0WpdU6toKlybFkntSR/7kjWI91XA== ) freebsd.org. 3600 IN SOA ( ns0.freebsd.org. hostmaster.freebsd.org. 2023120803 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.he.net for freebsd.org/A
	Received 355 bytes from 216.218.132.2
	;; Response received from 216.218.132.2 (355 octets) ;; HEADER SECTION ;; id = 57263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== )`
	RRSIG=54831 and DNSKEY=54831 verifies the A RRset

freebsd.org

	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (355 octets) ;; HEADER SECTION ;; id = 15272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns4.he.net for freebsd.org/A
	Received 355 bytes from 216.66.1.2
	;; Response received from 216.66.1.2 (355 octets) ;; HEADER SECTION ;; id = 65020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) freebsd.org. 3600 IN A 96.47.72.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== )`
	RRSIG=54831 and DNSKEY=54831 verifies the A RRset

freebsd.org

	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (355 octets) ;; HEADER SECTION ;; id = 2676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns1.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.11
	;; Response received from 163.237.210.11 (355 octets) ;; HEADER SECTION ;; id = 26269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== )`
	RRSIG=54831 and DNSKEY=54831 verifies the A RRset

freebsd.org

	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (355 octets) ;; HEADER SECTION ;; id = 12393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns5.he.net is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns5.he.net for freebsd.org/A
	Received 355 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (355 octets) ;; HEADER SECTION ;; id = 38542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== )`
	RRSIG=54831 and DNSKEY=54831 verifies the A RRset

freebsd.org

	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (355 octets) ;; HEADER SECTION ;; id = 21021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.freebsd.org is authoritative for freebsd.org
	Found RRSIG signed by freebsd.org zone
	Query to ns2.freebsd.org for freebsd.org/A
	Received 355 bytes from 163.237.210.233
	;; Response received from 163.237.210.233 (355 octets) ;; HEADER SECTION ;; id = 64786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freebsd.org. IN A ;; ANSWER SECTION (2 records) freebsd.org. 3600 IN A 96.47.72.84 freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	freebsd.org A RR has value 96.47.72.84
	Found 1 RRSIGs over A RRset
	`freebsd.org. 3600 IN RRSIG ( A 8 2 3600 20231215164553 20231201163103 54831 freebsd.org. VCoPLITsYqmdgkqNEYWUMerJXca9j67iqBWYGZSRgrI6nUOhw3ApTotv6s4zxBlxjjpP/0+r4uWI quXxlUW5Sr0zy8eL/94GY4F8sn0wOZLDjHO/qj99yS3dPpWLOiIyRcxv94FudgXJuJvkbqNU1ZLM uBvii7U558WN7vtdx4QTuLLoW08p+6oPDCeDz9VoKBzhNr1blO/BMELO28HCYs6PZZXflhmXOomg PAIx8jEgAOaw7SHP3OOP/T1owikmK8tq2AkImbnMTQXhqyCQtVqSfbk9X/oMME9b17rBxAZfEHbi ULB8QtZcWZbdu7eRuNBWVxx1fqwlw6QHl+NNWQ== )`
	RRSIG=54831 and DNSKEY=54831 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freebsd.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: