DNSSEC Debugger

Domain Name:

Time: 2025-06-13 03:47:10 UTC

Analyzing DNSSEC problems for gov.tr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 14975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250701000000 20250610000000 20326 . OHe0Mpi7CjfdHb6mzoMdtiIK2AeOV8gzZ0SAtAWNRQUAp5LfxOTjnrITKSaiXdqMcbirMKzxvnhY 7LKJj2f+Qbua+1bJ5IWvirUOISxrr/VUnvUDThogSUj2KaO9c674g/SUUmh+k5NHaTOlebsvMl3D urfKqZlY725GKHhXUxqBcbVjnCDNN4JB5lZ38qSp3WReJ8O+RKcg3h3cLVy3Y9eRzJpxk3mnR6mD 79fhqoV760hk0b/FrGlZcA33mLSIsvDBxzgICsQeMEA5I3/fAL3pSCtxeU2f5ThltB8qnb9uldrj ZI+7yYdSTmpYoQ6j8IcGowEcL4zwRG52ezQMaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250701000000 20250610000000 20326 . OHe0Mpi7CjfdHb6mzoMdtiIK2AeOV8gzZ0SAtAWNRQUAp5LfxOTjnrITKSaiXdqMcbirMKzxvnhY 7LKJj2f+Qbua+1bJ5IWvirUOISxrr/VUnvUDThogSUj2KaO9c674g/SUUmh+k5NHaTOlebsvMl3D urfKqZlY725GKHhXUxqBcbVjnCDNN4JB5lZ38qSp3WReJ8O+RKcg3h3cLVy3Y9eRzJpxk3mnR6mD 79fhqoV760hk0b/FrGlZcA33mLSIsvDBxzgICsQeMEA5I3/fAL3pSCtxeU2f5ThltB8qnb9uldrj ZI+7yYdSTmpYoQ6j8IcGowEcL4zwRG52ezQMaQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for gov.tr/A
	Received 676 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 676 octets ;; HEADER SECTION ;; id = 28 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns43.ns.tr. tr. 172800 IN NS ns71.ns.tr. tr. 172800 IN NS ns73.ns.tr. tr. 172800 IN NS ns61.ns.tr. tr. 172800 IN NS ns74.ns.tr. tr. 172800 IN NS ns44.ns.tr. tr. 172800 IN NS ns72.ns.tr. tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20250625170000 20250612160000 53148 . C8Dv5A9GczVw9kjIeYdcV/SbKQjxdFY+zltjrRQGbkWXXjFlYG9kcuxKEbmLv52SAm/GlcWwFCT/ CqKcmSPMXsByLypGQapnld8p+ba/fk6auWc3Mo8/SxH47qIbuRz1dkFi+kV/Yj+r47P+EsxkoOp8 3LN/60t27j5vsmOv1afatVNwBVG2o+0rp+lp0bS5FDQ4GKSkU2ZGL2nwum7Aq2o5vrugLxcmefyQ 4PWrNZ/FO34O42+aArz8a9RuQmIqVxISyXvOXMcs7RWIlRofZP1I7EgMOI4Tm5zcBliVgUADlqNM 6i6DXiu8tPzPIixwjkLL8XN0hnNaR9fkJfvonw== ) ;; ADDITIONAL SECTION (10 records) ns74.ns.tr. 172800 IN A 31.145.253.160 ns73.ns.tr. 172800 IN A 31.145.253.159 ns72.ns.tr. 172800 IN A 40.68.114.66 ns71.ns.tr. 172800 IN A 185.67.32.53 ns61.ns.tr. 172800 IN A 206.51.254.1 ns44.ns.tr. 172800 IN A 185.7.0.5 ns43.ns.tr. 172800 IN A 185.7.0.4 ns72.ns.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.ns.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for tr/DNSKEY
	Received 672 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 672 octets ;; HEADER SECTION ;; id = 58980 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns61.ns.tr. tr. 172800 IN NS ns44.ns.tr. tr. 172800 IN NS ns74.ns.tr. tr. 172800 IN NS ns71.ns.tr. tr. 172800 IN NS ns72.ns.tr. tr. 172800 IN NS ns73.ns.tr. tr. 172800 IN NS ns43.ns.tr. tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20250625170000 20250612160000 53148 . C8Dv5A9GczVw9kjIeYdcV/SbKQjxdFY+zltjrRQGbkWXXjFlYG9kcuxKEbmLv52SAm/GlcWwFCT/ CqKcmSPMXsByLypGQapnld8p+ba/fk6auWc3Mo8/SxH47qIbuRz1dkFi+kV/Yj+r47P+EsxkoOp8 3LN/60t27j5vsmOv1afatVNwBVG2o+0rp+lp0bS5FDQ4GKSkU2ZGL2nwum7Aq2o5vrugLxcmefyQ 4PWrNZ/FO34O42+aArz8a9RuQmIqVxISyXvOXMcs7RWIlRofZP1I7EgMOI4Tm5zcBliVgUADlqNM 6i6DXiu8tPzPIixwjkLL8XN0hnNaR9fkJfvonw== ) ;; ADDITIONAL SECTION (10 records) ns74.ns.tr. 172800 IN A 31.145.253.160 ns73.ns.tr. 172800 IN A 31.145.253.159 ns72.ns.tr. 172800 IN A 40.68.114.66 ns71.ns.tr. 172800 IN A 185.67.32.53 ns61.ns.tr. 172800 IN A 206.51.254.1 ns44.ns.tr. 172800 IN A 185.7.0.5 ns43.ns.tr. 172800 IN A 185.7.0.4 ns72.ns.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.ns.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; { "EDNS-VERSION": 0 }
	Found child zone tr

	Checking DS between . and tr
	Query to c.root-servers.net for tr/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 24155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DS ;; ANSWER SECTION (2 records) tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20250625170000 20250612160000 53148 . C8Dv5A9GczVw9kjIeYdcV/SbKQjxdFY+zltjrRQGbkWXXjFlYG9kcuxKEbmLv52SAm/GlcWwFCT/ CqKcmSPMXsByLypGQapnld8p+ba/fk6auWc3Mo8/SxH47qIbuRz1dkFi+kV/Yj+r47P+EsxkoOp8 3LN/60t27j5vsmOv1afatVNwBVG2o+0rp+lp0bS5FDQ4GKSkU2ZGL2nwum7Aq2o5vrugLxcmefyQ 4PWrNZ/FO34O42+aArz8a9RuQmIqVxISyXvOXMcs7RWIlRofZP1I7EgMOI4Tm5zcBliVgUADlqNM 6i6DXiu8tPzPIixwjkLL8XN0hnNaR9fkJfvonw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tr in the . zone
	DS=23500/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tr. 86400 IN RRSIG ( DS 8 1 86400 20250625170000 20250612160000 53148 . C8Dv5A9GczVw9kjIeYdcV/SbKQjxdFY+zltjrRQGbkWXXjFlYG9kcuxKEbmLv52SAm/GlcWwFCT/ CqKcmSPMXsByLypGQapnld8p+ba/fk6auWc3Mo8/SxH47qIbuRz1dkFi+kV/Yj+r47P+EsxkoOp8 3LN/60t27j5vsmOv1afatVNwBVG2o+0rp+lp0bS5FDQ4GKSkU2ZGL2nwum7Aq2o5vrugLxcmefyQ 4PWrNZ/FO34O42+aArz8a9RuQmIqVxISyXvOXMcs7RWIlRofZP1I7EgMOI4Tm5zcBliVgUADlqNM 6i6DXiu8tPzPIixwjkLL8XN0hnNaR9fkJfvonw== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=23500/SHA-256 is now in the chain-of-trust
	`tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 )`
	Query to ns44.ns.tr for tr/DNSKEY
	Received 289 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 289 octets ;; HEADER SECTION ;; id = 21671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (3 records) tr. 43200 IN DNSKEY ( 257 3 13 cunrX/EOXnu541yHHsUjyZGLbms0Vc844PPwVa2xWvOhwFXY/Fbnt0cDsbf+EPtpfrWDrWd3ArDW JUxo/GIaJA== ) ; keytag 23500 tr. 43200 IN DNSKEY ( 256 3 13 ov2Hg2FhrlIOZit2dA3bXltrZULA+MDxilkkDJaV2mgNwH6WTWiwEo3i+YJWEuXNqrfvMszNDCQr mvTojxd8Uw== ) ; keytag 5481 tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20250621160657 20250606212442 23500 tr. 2hLwcdOIq7AT47l1dnJfcORN1C8A+S32060zrq++J6KdpCFPJM6u1kRDYzwVdcPykBpuTc1a0YVQ EiJw8z7NBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for tr
	`tr. 43200 IN DNSKEY ( 257 3 13 cunrX/EOXnu541yHHsUjyZGLbms0Vc844PPwVa2xWvOhwFXY/Fbnt0cDsbf+EPtpfrWDrWd3ArDW JUxo/GIaJA== ) ; keytag 23500`
	`tr. 43200 IN DNSKEY ( 256 3 13 ov2Hg2FhrlIOZit2dA3bXltrZULA+MDxilkkDJaV2mgNwH6WTWiwEo3i+YJWEuXNqrfvMszNDCQr mvTojxd8Uw== ) ; keytag 5481`
	DNSKEY=23500/SEP is now in the chain-of-trust
	DS=23500/SHA-256 verifies DNSKEY=23500/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20250621160657 20250606212442 23500 tr. 2hLwcdOIq7AT47l1dnJfcORN1C8A+S32060zrq++J6KdpCFPJM6u1kRDYzwVdcPykBpuTc1a0YVQ EiJw8z7NBQ== )`
	RRSIG=23500 and DNSKEY=23500/SEP verifies the DNSKEY RRset
	DNSKEY=5481 is now in the chain-of-trust
	Query to ns73.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 389 octets ;; HEADER SECTION ;; id = 14759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns73.ns.tr is authoritative for gov.tr
	Query to ns61.ns.tr for gov.tr/DNSKEY
	Received 297 bytes from 206.51.254.1
	;; Response received from [206.51.254.1] 297 octets ;; HEADER SECTION ;; id = 6045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 256 3 13 l64QdUKmCmk5ZnoG17ovITLksEvKbP+/CEEuG20t6EIV4X4nLgZktQIBeSd5uaPOBrmsBDFj613i kq8wWhROvQ== ) ; keytag 46650 gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20250623164732 20250608131544 3064 gov.tr. nWpClrXNNuAw2+ztBUYjY4AUpwzG/+fRcwPthIvtrBJG7s5J2nYNk7yMzUE396Wts1SilaS49L6V mLaZ2znUwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone gov.tr
	Attempting to learn nameservers for gov.tr
	Query to ns72.ns.tr for gov.tr/NS
	Received 254 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 254 octets ;; HEADER SECTION ;; id = 8018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN NS ;; ANSWER SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found gov.tr nameservers: ns71.ns.tr, ns72.ns.tr, ns73.ns.tr, ns74.ns.tr, ns43.ns.tr, ns44.ns.tr

gov.tr

	Checking DS between tr and gov.tr
	Query to ns71.ns.tr for gov.tr/DS
	Received 181 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 181 octets ;; HEADER SECTION ;; id = 30945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DS ;; ANSWER SECTION (2 records) gov.tr. 43200 IN DS ( 3064 13 2 ad3d7eb3efb4c2dbefcce7a564badb4bab00adc8f41d0c739d647fb8dca08ff8 ) gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20250621014736 20250606021550 5481 tr. Is6/cC/MoxuPOhv94XlJCfxX5Dmw0HM/3Un9MnAAh3yVQ0pYCNIijeRWdSDRHKN7cxgOtNe8ahOl GDaHH2eiXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.tr in the tr zone
	DS=3064/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20250621014736 20250606021550 5481 tr. Is6/cC/MoxuPOhv94XlJCfxX5Dmw0HM/3Un9MnAAh3yVQ0pYCNIijeRWdSDRHKN7cxgOtNe8ahOl GDaHH2eiXg== )`
	RRSIG=5481 and DNSKEY=5481 verifies the DS RRset
	DS=3064/SHA-256 is now in the chain-of-trust
	`gov.tr. 43200 IN DS ( 3064 13 2 ad3d7eb3efb4c2dbefcce7a564badb4bab00adc8f41d0c739d647fb8dca08ff8 )`
	Query to ns73.ns.tr for gov.tr/DNSKEY
	Received 297 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 297 octets ;; HEADER SECTION ;; id = 59908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 256 3 13 l64QdUKmCmk5ZnoG17ovITLksEvKbP+/CEEuG20t6EIV4X4nLgZktQIBeSd5uaPOBrmsBDFj613i kq8wWhROvQ== ) ; keytag 46650 gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20250623164732 20250608131544 3064 gov.tr. nWpClrXNNuAw2+ztBUYjY4AUpwzG/+fRcwPthIvtrBJG7s5J2nYNk7yMzUE396Wts1SilaS49L6V mLaZ2znUwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov.tr
	`gov.tr. 43200 IN DNSKEY ( 256 3 13 l64QdUKmCmk5ZnoG17ovITLksEvKbP+/CEEuG20t6EIV4X4nLgZktQIBeSd5uaPOBrmsBDFj613i kq8wWhROvQ== ) ; keytag 46650`
	`gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064`
	DNSKEY=3064/SEP is now in the chain-of-trust
	DS=3064/SHA-256 verifies DNSKEY=3064/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20250623164732 20250608131544 3064 gov.tr. nWpClrXNNuAw2+ztBUYjY4AUpwzG/+fRcwPthIvtrBJG7s5J2nYNk7yMzUE396Wts1SilaS49L6V mLaZ2znUwA== )`
	RRSIG=3064 and DNSKEY=3064/SEP verifies the DNSKEY RRset
	DNSKEY=46650 is now in the chain-of-trust
	Query to ns74.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 389 octets ;; HEADER SECTION ;; id = 24638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns74.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns73.ns.tr for gov.tr/SOA
	Received 410 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 410 octets ;; HEADER SECTION ;; id = 54219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns44.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 410 octets ;; HEADER SECTION ;; id = 24162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns43.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 410 octets ;; HEADER SECTION ;; id = 32640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns72.ns.tr for gov.tr/SOA
	Received 410 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 410 octets ;; HEADER SECTION ;; id = 19190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns71.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 410 octets ;; HEADER SECTION ;; id = 37372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20250626041826 20250611051635 46650 gov.tr. toNedqnHjUqyL+8TeOAE7wD1cOUuf8OtXD7bcFhkhKBCRsvXG0ayR6p3Z9VPB4GlabvdPFVlubuk +uAu2Mg52g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns74.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 389 octets ;; HEADER SECTION ;; id = 23315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

gov.tr

	Query to ns43.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 389 octets ;; HEADER SECTION ;; id = 23606 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns43.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns43.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 389 octets ;; HEADER SECTION ;; id = 56246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

gov.tr

	Query to ns73.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 389 octets ;; HEADER SECTION ;; id = 30249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns73.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns73.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 389 octets ;; HEADER SECTION ;; id = 18593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

gov.tr

	Query to ns72.ns.tr for gov.tr/A
	Received 389 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 389 octets ;; HEADER SECTION ;; id = 14524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns72.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns72.ns.tr for gov.tr/A
	Received 389 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 389 octets ;; HEADER SECTION ;; id = 6253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

gov.tr

	Query to ns44.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 389 octets ;; HEADER SECTION ;; id = 49528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns44.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns44.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 389 octets ;; HEADER SECTION ;; id = 62908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

gov.tr

	Query to ns71.ns.tr for gov.tr/A
	Received 389 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 389 octets ;; HEADER SECTION ;; id = 40872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns71.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns71.ns.tr for gov.tr/A
	Received 389 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 389 octets ;; HEADER SECTION ;; id = 9914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1749784613 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN NSEC3 ( 1 0 5 9ca2599530ff39f5 u0mj3fed16cqb9srej817m6e3d6luisi NS SOA RRSIG DNSKEY NSEC3PARAM ) u0lf8d059oh0nhodgegmd71vlbtg52g2.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20250621010529 20250606081440 46650 gov.tr. a09/bD8noDI5A5Hb9UxG2GTgH9A4nX06XH2yKM9Nn83nNfGRwUCIyW2k8Ty+Y2Zthj2PeRiaTYgG EnLDeO2IbQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20250627155215 20250613021653 46650 gov.tr. B5ICT5zxV55szcIEyDs3E8EZGtway4WQXyUvyyiu9ReL4rDGyLEIA5kCwqqi3nx2EkA3Lbc7932J YsiM25A2Lw== )`
	RRSIG=46650 and DNSKEY=46650 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.tr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: