DNSSEC Analyzer

Domain Name:

Time: 2023-12-08 02:39:26 UTC, NTP stratum 16

Analyzing DNSSEC problems for gov.tr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 49395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to i.root-servers.net for gov.tr/A
	Received 677 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (677 octets) ;; HEADER SECTION ;; id = 53297 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns41.nic.tr. tr. 172800 IN NS ns74.nic.tr. tr. 172800 IN NS ns71.nic.tr. tr. 172800 IN NS ns42.nic.tr. tr. 172800 IN NS ns61.nic.tr. tr. 172800 IN NS ns72.nic.tr. tr. 172800 IN NS ns73.nic.tr. tr. 86400 IN DS ( 48972 13 2 1e67cf0aa2e236a06d1f93491990960efebab089a2badaefbb64e391ae6e95eb ) tr. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . BN7yIhwJAEkvkV/PGzm0854aGw0ZDYqr1qcm3fS3fr2w9+T7u71Dp0Gx0uXUWA+MT/F46t0sEVDE vw8YI6DtSFEEjPRcGuOH5CadTJubzSYhOGQWdhL1wsTQH1U4t5bGzsTDTU8duPTaZ32faPZcueVb nesaN4mlTWqd3yNrlG9C7ZaHfyKyhMX7vgWkq+xCJSbr7UUM4jDmY5uV1gzqglUahOJk9D8OFwdI KWA+LcMupHH0fi6XcDArmbefG07Wf9gJrPMmdbLht8r2eLa75X9F1G7x5/5yUWfrAV/wk/aXM1yv ADQE5qSaJth0IXUXGR2rEx4uDMw1g9mxz899EQ== ) ;; ADDITIONAL SECTION (10 records) ns74.nic.tr. 172800 IN A 31.145.253.160 ns73.nic.tr. 172800 IN A 31.145.253.159 ns72.nic.tr. 172800 IN A 40.68.114.66 ns71.nic.tr. 172800 IN A 185.67.32.53 ns61.nic.tr. 172800 IN A 206.51.254.1 ns42.nic.tr. 172800 IN A 185.7.0.3 ns41.nic.tr. 172800 IN A 185.7.0.2 ns72.nic.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.nic.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for tr/DNSKEY
	Received 673 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (673 octets) ;; HEADER SECTION ;; id = 65040 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns71.nic.tr. tr. 172800 IN NS ns41.nic.tr. tr. 172800 IN NS ns42.nic.tr. tr. 172800 IN NS ns61.nic.tr. tr. 172800 IN NS ns74.nic.tr. tr. 172800 IN NS ns73.nic.tr. tr. 172800 IN NS ns72.nic.tr. tr. 86400 IN DS ( 48972 13 2 1e67cf0aa2e236a06d1f93491990960efebab089a2badaefbb64e391ae6e95eb ) tr. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . BN7yIhwJAEkvkV/PGzm0854aGw0ZDYqr1qcm3fS3fr2w9+T7u71Dp0Gx0uXUWA+MT/F46t0sEVDE vw8YI6DtSFEEjPRcGuOH5CadTJubzSYhOGQWdhL1wsTQH1U4t5bGzsTDTU8duPTaZ32faPZcueVb nesaN4mlTWqd3yNrlG9C7ZaHfyKyhMX7vgWkq+xCJSbr7UUM4jDmY5uV1gzqglUahOJk9D8OFwdI KWA+LcMupHH0fi6XcDArmbefG07Wf9gJrPMmdbLht8r2eLa75X9F1G7x5/5yUWfrAV/wk/aXM1yv ADQE5qSaJth0IXUXGR2rEx4uDMw1g9mxz899EQ== ) ;; ADDITIONAL SECTION (10 records) ns74.nic.tr. 172800 IN A 31.145.253.160 ns73.nic.tr. 172800 IN A 31.145.253.159 ns72.nic.tr. 172800 IN A 40.68.114.66 ns71.nic.tr. 172800 IN A 185.67.32.53 ns61.nic.tr. 172800 IN A 206.51.254.1 ns42.nic.tr. 172800 IN A 185.7.0.3 ns41.nic.tr. 172800 IN A 185.7.0.2 ns72.nic.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.nic.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone tr

	Checking DS between . and tr
	Query to j.root-servers.net for tr/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (366 octets) ;; HEADER SECTION ;; id = 9975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; tr. IN DS ;; ANSWER SECTION (2 records) tr. 86400 IN DS ( 48972 13 2 1e67cf0aa2e236a06d1f93491990960efebab089a2badaefbb64e391ae6e95eb ) tr. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . BN7yIhwJAEkvkV/PGzm0854aGw0ZDYqr1qcm3fS3fr2w9+T7u71Dp0Gx0uXUWA+MT/F46t0sEVDE vw8YI6DtSFEEjPRcGuOH5CadTJubzSYhOGQWdhL1wsTQH1U4t5bGzsTDTU8duPTaZ32faPZcueVb nesaN4mlTWqd3yNrlG9C7ZaHfyKyhMX7vgWkq+xCJSbr7UUM4jDmY5uV1gzqglUahOJk9D8OFwdI KWA+LcMupHH0fi6XcDArmbefG07Wf9gJrPMmdbLht8r2eLa75X9F1G7x5/5yUWfrAV/wk/aXM1yv ADQE5qSaJth0IXUXGR2rEx4uDMw1g9mxz899EQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for tr in the . zone
	DS=48972/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tr. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . BN7yIhwJAEkvkV/PGzm0854aGw0ZDYqr1qcm3fS3fr2w9+T7u71Dp0Gx0uXUWA+MT/F46t0sEVDE vw8YI6DtSFEEjPRcGuOH5CadTJubzSYhOGQWdhL1wsTQH1U4t5bGzsTDTU8duPTaZ32faPZcueVb nesaN4mlTWqd3yNrlG9C7ZaHfyKyhMX7vgWkq+xCJSbr7UUM4jDmY5uV1gzqglUahOJk9D8OFwdI KWA+LcMupHH0fi6XcDArmbefG07Wf9gJrPMmdbLht8r2eLa75X9F1G7x5/5yUWfrAV/wk/aXM1yv ADQE5qSaJth0IXUXGR2rEx4uDMw1g9mxz899EQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=48972/SHA-256 is now in the chain-of-trust
	`tr. 86400 IN DS ( 48972 13 2 1e67cf0aa2e236a06d1f93491990960efebab089a2badaefbb64e391ae6e95eb )`
	Query to ns72.nic.tr for tr/DNSKEY
	Received 289 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (289 octets) ;; HEADER SECTION ;; id = 64892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (3 records) tr. 43200 IN DNSKEY ( 256 3 13 a5XHxD+SFLEws59BvTWnlP5V0uJd2RDiMCQzlof5dUHBZe6cy8YV2VSHIqXlhUf839wVsaQCOY2p ZX7pZex3pQ== ) ; Key ID = 28835 tr. 43200 IN DNSKEY ( 257 3 13 he8r053xBOV9Dp/UoNS6bGQd2FP8STxhhnPa9sp61R8fX71lr5dxiBnSt2FoDWbPGMHKF80pF6pc 6+Tg6yvlxA== ) ; Key ID = 48972 tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20231217201254 20231202211610 48972 tr. phiVghCnrtgypN9h4TMMrKgV3V20B80oTCR3hHskV4Ym4xSupHVNMrFPHigstCAn8XlnT2ajU5XV +TmLGd1Iaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for tr
	`tr. 43200 IN DNSKEY ( 256 3 13 a5XHxD+SFLEws59BvTWnlP5V0uJd2RDiMCQzlof5dUHBZe6cy8YV2VSHIqXlhUf839wVsaQCOY2p ZX7pZex3pQ== ) ; Key ID = 28835`
	`tr. 43200 IN DNSKEY ( 257 3 13 he8r053xBOV9Dp/UoNS6bGQd2FP8STxhhnPa9sp61R8fX71lr5dxiBnSt2FoDWbPGMHKF80pF6pc 6+Tg6yvlxA== ) ; Key ID = 48972`
	DNSKEY=48972/SEP is now in the chain-of-trust
	DS=48972/SHA-256 verifies DNSKEY=48972/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20231217201254 20231202211610 48972 tr. phiVghCnrtgypN9h4TMMrKgV3V20B80oTCR3hHskV4Ym4xSupHVNMrFPHigstCAn8XlnT2ajU5XV +TmLGd1Iaw== )`
	RRSIG=48972 and DNSKEY=48972/SEP verifies the DNSKEY RRset
	DNSKEY=28835 is now in the chain-of-trust
	Query to ns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (383 octets) ;; HEADER SECTION ;; id = 18866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns72.nic.tr is authoritative for gov.tr
	Query to ns74.nic.tr for gov.tr/DNSKEY
	Received 297 bytes from 31.145.253.160
	;; Response received from 31.145.253.160 (297 octets) ;; HEADER SECTION ;; id = 2725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 256 3 13 i5B+ijtZwWsr5livO06OSy9GQzKh4EfqYdxZ/YX6IxJ3GGhmfBjgUeQWIy9CAQkvCZR87S522zqq InegcfU77A== ) ; Key ID = 2173 gov.tr. 43200 IN DNSKEY ( 257 3 13 eCWZeTxE+IfwwTFhhmdv/4FwdiPAs4Jbwby0fDJ+RKDCkQILqDuWai3vScEZTIxyc9OJFgh8Oqhn Ud5Z8E2vgA== ) ; Key ID = 53560 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20231223010827 20231207141413 53560 gov.tr. /ueBQ0yepFugBSppr6opyihU4EtIzuY8snvWuKGFeTg8rDQVJGZCtHCib0Jhtdc94VUrgbrP948d 7FWdFusWkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov.tr
	Attempting to learn nameservers for gov.tr
	Query to ns72.nic.tr for gov.tr/NS
	Received 261 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (261 octets) ;; HEADER SECTION ;; id = 29992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN NS ;; ANSWER SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found gov.tr nameservers: lns41.nic.tr, lns42.nic.tr, lns71.nic.tr, lns72.nic.tr, lns73.nic.tr, lns74.nic.tr

gov.tr

	Checking DS between tr and gov.tr
	Query to ns71.nic.tr for gov.tr/DS
	Received 181 bytes from 185.67.32.53
	;; Response received from 185.67.32.53 (181 octets) ;; HEADER SECTION ;; id = 27807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN DS ;; ANSWER SECTION (2 records) gov.tr. 43200 IN DS ( 53560 13 2 629e03e0cd133f7b113efcbeceb2fbb32127efa6b0e02f72669fb008a41cec1f ) gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20231218150749 20231203081235 28835 tr. AWhLZmrpNNmy+ELWRhD8G/JSYOz2HSgRGfE0P8ipgclntOcUDVB32v4anWIIRg904XYgw/buz2DT 4wgUm9y1fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov.tr in the tr zone
	DS=53560/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20231218150749 20231203081235 28835 tr. AWhLZmrpNNmy+ELWRhD8G/JSYOz2HSgRGfE0P8ipgclntOcUDVB32v4anWIIRg904XYgw/buz2DT 4wgUm9y1fg== )`
	RRSIG=28835 and DNSKEY=28835 verifies the DS RRset
	DS=53560/SHA-256 is now in the chain-of-trust
	`gov.tr. 43200 IN DS ( 53560 13 2 629e03e0cd133f7b113efcbeceb2fbb32127efa6b0e02f72669fb008a41cec1f )`
	Query to lns74.nic.tr for gov.tr/DNSKEY
	Received 297 bytes from 31.145.253.160
	;; Response received from 31.145.253.160 (297 octets) ;; HEADER SECTION ;; id = 56658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 257 3 13 eCWZeTxE+IfwwTFhhmdv/4FwdiPAs4Jbwby0fDJ+RKDCkQILqDuWai3vScEZTIxyc9OJFgh8Oqhn Ud5Z8E2vgA== ) ; Key ID = 53560 gov.tr. 43200 IN DNSKEY ( 256 3 13 i5B+ijtZwWsr5livO06OSy9GQzKh4EfqYdxZ/YX6IxJ3GGhmfBjgUeQWIy9CAQkvCZR87S522zqq InegcfU77A== ) ; Key ID = 2173 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20231223010827 20231207141413 53560 gov.tr. /ueBQ0yepFugBSppr6opyihU4EtIzuY8snvWuKGFeTg8rDQVJGZCtHCib0Jhtdc94VUrgbrP948d 7FWdFusWkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov.tr
	`gov.tr. 43200 IN DNSKEY ( 257 3 13 eCWZeTxE+IfwwTFhhmdv/4FwdiPAs4Jbwby0fDJ+RKDCkQILqDuWai3vScEZTIxyc9OJFgh8Oqhn Ud5Z8E2vgA== ) ; Key ID = 53560`
	`gov.tr. 43200 IN DNSKEY ( 256 3 13 i5B+ijtZwWsr5livO06OSy9GQzKh4EfqYdxZ/YX6IxJ3GGhmfBjgUeQWIy9CAQkvCZR87S522zqq InegcfU77A== ) ; Key ID = 2173`
	DNSKEY=53560/SEP is now in the chain-of-trust
	DS=53560/SHA-256 verifies DNSKEY=53560/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20231223010827 20231207141413 53560 gov.tr. /ueBQ0yepFugBSppr6opyihU4EtIzuY8snvWuKGFeTg8rDQVJGZCtHCib0Jhtdc94VUrgbrP948d 7FWdFusWkQ== )`
	RRSIG=53560 and DNSKEY=53560/SEP verifies the DNSKEY RRset
	DNSKEY=2173 is now in the chain-of-trust
	Query to lns42.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.3
	;; Response received from 185.7.0.3 (383 octets) ;; HEADER SECTION ;; id = 9870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	lns42.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns73.nic.tr for gov.tr/SOA
	Received 415 bytes from 31.145.253.159
	;; Response received from 31.145.253.159 (415 octets) ;; HEADER SECTION ;; id = 9747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to lns74.nic.tr for gov.tr/SOA
	Received 415 bytes from 31.145.253.160
	;; Response received from 31.145.253.160 (415 octets) ;; HEADER SECTION ;; id = 38222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to lns72.nic.tr for gov.tr/SOA
	Received 415 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (415 octets) ;; HEADER SECTION ;; id = 38578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to lns71.nic.tr for gov.tr/SOA
	Received 415 bytes from 185.67.32.53
	;; Response received from 185.67.32.53 (415 octets) ;; HEADER SECTION ;; id = 42053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to lns41.nic.tr for gov.tr/SOA
	Received 415 bytes from 185.7.0.2
	;; Response received from 185.7.0.2 (415 octets) ;; HEADER SECTION ;; id = 38841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS lns41.nic.tr. gov.tr. 43200 IN NS lns42.nic.tr. gov.tr. 43200 IN NS lns71.nic.tr. gov.tr. 43200 IN NS lns72.nic.tr. gov.tr. 43200 IN NS lns73.nic.tr. gov.tr. 43200 IN NS lns74.nic.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20231221165037 20231206101404 2173 gov.tr. iO+6t6CRAJk2DRqVcgrGvTTDbDavvtBtkNu3Ub1rRq8km5M+rsKQ4t8v/9JGG7EtgO6n7tUIeKqh /b8vAIfrbQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to lns42.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.3
	;; Response received from 185.7.0.3 (383 octets) ;; HEADER SECTION ;; id = 44572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

gov.tr

	Query to lns71.nic.tr for gov.tr/A
	Received 383 bytes from 185.67.32.53
	;; Response received from 185.67.32.53 (383 octets) ;; HEADER SECTION ;; id = 34346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	lns71.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns71.nic.tr for gov.tr/A
	Received 383 bytes from 185.67.32.53
	;; Response received from 185.67.32.53 (383 octets) ;; HEADER SECTION ;; id = 9957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

gov.tr

	Query to lns41.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.2
	;; Response received from 185.7.0.2 (383 octets) ;; HEADER SECTION ;; id = 8404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	lns41.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns41.nic.tr for gov.tr/A
	Received 383 bytes from 185.7.0.2
	;; Response received from 185.7.0.2 (383 octets) ;; HEADER SECTION ;; id = 10980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

gov.tr

	Query to lns74.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.160
	;; Response received from 31.145.253.160 (383 octets) ;; HEADER SECTION ;; id = 54830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	lns74.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns74.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.160
	;; Response received from 31.145.253.160 (383 octets) ;; HEADER SECTION ;; id = 39577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

gov.tr

	Query to lns73.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.159
	;; Response received from 31.145.253.159 (383 octets) ;; HEADER SECTION ;; id = 6317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	lns73.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns73.nic.tr for gov.tr/A
	Received 383 bytes from 31.145.253.159
	;; Response received from 31.145.253.159 (383 octets) ;; HEADER SECTION ;; id = 57529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

gov.tr

	Query to lns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (383 octets) ;; HEADER SECTION ;; id = 34543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	lns72.nic.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to lns72.nic.tr for gov.tr/A
	Received 383 bytes from 40.68.114.66
	;; Response received from 40.68.114.66 (383 octets) ;; HEADER SECTION ;; id = 55690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns42.nic.tr. hostmaster.nic.tr. 1701988514 ;serial 21600 ;refresh 3600 ;retry 57600 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN NSEC3 ( 1 0 5 a99634b81af9fd30 43fckdcnjuijrm211a6rhoeojes3tfma NS SOA RRSIG DNSKEY NSEC3PARAM ) 43crmmjpbqutp791m4nkg6mim3dmnd83.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20231218160909 20231203171320 2173 gov.tr. NTgqnfTcUkp8kpiVUDOZ4jwn51+g115y1Fg5IAldFnOYCIYGnYouyqgpMnEPK/qL3+ZW3psjhjQw dvFH2I4zvQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20231222234607 20231207213522 2173 gov.tr. nGHtdaBZ7KHzcqPn9JQesukXXj1o72kUHYSqQmBtDJ+69gxppR0STqOjwaQ6hgoXSRU/GhGs5KIj IDmP6A6ACg== )`
	RRSIG=2173 and DNSKEY=2173 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.tr at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: