DNSSEC Debugger

Domain Name:

Time: 2025-12-16 21:20:33 UTC

Analyzing DNSSEC problems for gov.tr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 37443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for gov.tr/A
	Received 676 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 676 octets ;; HEADER SECTION ;; id = 691 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns43.ns.tr. tr. 172800 IN NS ns72.ns.tr. tr. 172800 IN NS ns73.ns.tr. tr. 172800 IN NS ns44.ns.tr. tr. 172800 IN NS ns71.ns.tr. tr. 172800 IN NS ns74.ns.tr. tr. 172800 IN NS ns61.ns.tr. tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . koZ019Vk9B04cI82guRFzPPxj4fTp55vD0rE3C3psZue/8u72ybpMxvEK9mwykjeIw9efvFguoxS IlZNv0ZzwxOb6FWv54Ii94dXonU3eQSPFtQuKWN2kMEnUvDMvVauFQ9cDjikvLH3o7yGcHSemMgc hs80z1fUnt00qY49pqGzJQWhOM1ECVkBZ83Hthi5EqkQDpi2F/QWN8g+1CCmviZZRaLCBp2aK4Ym 28XA3yBuRvL8gEYpPT6swEZZoRO2128+w/pBoZQLEnFxk6ARYGox7U39Is7nczapCIwUQdx/CVmN UH/9Mo+Ol6+k/KDUwWBzep1Lz+FRGJhQw92X6Q== ) ;; ADDITIONAL SECTION (10 records) ns74.ns.tr. 172800 IN A 31.145.253.160 ns73.ns.tr. 172800 IN A 31.145.253.159 ns72.ns.tr. 172800 IN A 40.68.114.66 ns71.ns.tr. 172800 IN A 185.67.32.53 ns61.ns.tr. 172800 IN A 206.51.254.1 ns44.ns.tr. 172800 IN A 185.7.0.5 ns43.ns.tr. 172800 IN A 185.7.0.4 ns72.ns.tr. 172800 IN AAAA 2603:1020:201:10::111 ns61.ns.tr. 172800 IN AAAA 2620:171:804:ad2::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for tr/DNSKEY
	Received 670 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 670 octets ;; HEADER SECTION ;; id = 40313 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) tr. 172800 IN NS ns43.ns.tr. tr. 172800 IN NS ns44.ns.tr. tr. 172800 IN NS ns61.ns.tr. tr. 172800 IN NS ns71.ns.tr. tr. 172800 IN NS ns72.ns.tr. tr. 172800 IN NS ns73.ns.tr. tr. 172800 IN NS ns74.ns.tr. tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . koZ019Vk9B04cI82guRFzPPxj4fTp55vD0rE3C3psZue/8u72ybpMxvEK9mwykjeIw9efvFguoxS IlZNv0ZzwxOb6FWv54Ii94dXonU3eQSPFtQuKWN2kMEnUvDMvVauFQ9cDjikvLH3o7yGcHSemMgc hs80z1fUnt00qY49pqGzJQWhOM1ECVkBZ83Hthi5EqkQDpi2F/QWN8g+1CCmviZZRaLCBp2aK4Ym 28XA3yBuRvL8gEYpPT6swEZZoRO2128+w/pBoZQLEnFxk6ARYGox7U39Is7nczapCIwUQdx/CVmN UH/9Mo+Ol6+k/KDUwWBzep1Lz+FRGJhQw92X6Q== ) ;; ADDITIONAL SECTION (10 records) ns43.ns.tr. 172800 IN A 185.7.0.4 ns44.ns.tr. 172800 IN A 185.7.0.5 ns61.ns.tr. 172800 IN A 206.51.254.1 ns71.ns.tr. 172800 IN A 185.67.32.53 ns72.ns.tr. 172800 IN A 40.68.114.66 ns73.ns.tr. 172800 IN A 31.145.253.159 ns74.ns.tr. 172800 IN A 31.145.253.160 ns61.ns.tr. 172800 IN AAAA 2620:171:804:ad2::1 ns72.ns.tr. 172800 IN AAAA 2603:1020:201:10::111 ;; { "EDNS-VERSION": 0 }
	Found child zone tr

	Checking DS between . and tr
	Query to k.root-servers.net for tr/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 26408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DS ;; ANSWER SECTION (2 records) tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 ) tr. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . koZ019Vk9B04cI82guRFzPPxj4fTp55vD0rE3C3psZue/8u72ybpMxvEK9mwykjeIw9efvFguoxS IlZNv0ZzwxOb6FWv54Ii94dXonU3eQSPFtQuKWN2kMEnUvDMvVauFQ9cDjikvLH3o7yGcHSemMgc hs80z1fUnt00qY49pqGzJQWhOM1ECVkBZ83Hthi5EqkQDpi2F/QWN8g+1CCmviZZRaLCBp2aK4Ym 28XA3yBuRvL8gEYpPT6swEZZoRO2128+w/pBoZQLEnFxk6ARYGox7U39Is7nczapCIwUQdx/CVmN UH/9Mo+Ol6+k/KDUwWBzep1Lz+FRGJhQw92X6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tr in the . zone
	DS=23500/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tr. 86400 IN RRSIG ( DS 8 1 86400 20251229170000 20251216160000 61809 . koZ019Vk9B04cI82guRFzPPxj4fTp55vD0rE3C3psZue/8u72ybpMxvEK9mwykjeIw9efvFguoxS IlZNv0ZzwxOb6FWv54Ii94dXonU3eQSPFtQuKWN2kMEnUvDMvVauFQ9cDjikvLH3o7yGcHSemMgc hs80z1fUnt00qY49pqGzJQWhOM1ECVkBZ83Hthi5EqkQDpi2F/QWN8g+1CCmviZZRaLCBp2aK4Ym 28XA3yBuRvL8gEYpPT6swEZZoRO2128+w/pBoZQLEnFxk6ARYGox7U39Is7nczapCIwUQdx/CVmN UH/9Mo+Ol6+k/KDUwWBzep1Lz+FRGJhQw92X6Q== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=23500/SHA-256 is now in the chain-of-trust
	`tr. 86400 IN DS ( 23500 13 2 2405380f78933579783f2b91521d613b63ae2ce20f4e9e886b469e2b15e2e813 )`
	Query to ns73.ns.tr for tr/DNSKEY
	Received 369 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 369 octets ;; HEADER SECTION ;; id = 51888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tr. IN DNSKEY ;; ANSWER SECTION (4 records) tr. 43200 IN DNSKEY ( 257 3 13 cunrX/EOXnu541yHHsUjyZGLbms0Vc844PPwVa2xWvOhwFXY/Fbnt0cDsbf+EPtpfrWDrWd3ArDW JUxo/GIaJA== ) ; keytag 23500 tr. 43200 IN DNSKEY ( 256 3 13 PqI2GH7lyh5qp/Pq0rGwKKcTMwNPJ/zr7fXbW5aeU2VECEiyt2VqCjlxpOiawFwVSWfkpl/Ofwhy 7grTlTRgcg== ) ; keytag 32864 tr. 43200 IN DNSKEY ( 256 3 13 J0G7OdvMc+XrKBpmHT5CEcHTUwvAmrbpuR4WsAilbjuzXvSE1DKDYuki+be5WFkSMpvI37Cehg+U 4zLXWWNkog== ) ; keytag 6868 tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20251229152327 20251214070021 23500 tr. 8rmhIJBgkz4hF299stZjdNHbaq4VLWeze+EZWAauJSQsb+goIemKFvp9V1Wr6uIhMCruXQ0Vl2Su MJquEtP1PQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tr
	`tr. 43200 IN DNSKEY ( 257 3 13 cunrX/EOXnu541yHHsUjyZGLbms0Vc844PPwVa2xWvOhwFXY/Fbnt0cDsbf+EPtpfrWDrWd3ArDW JUxo/GIaJA== ) ; keytag 23500`
	`tr. 43200 IN DNSKEY ( 256 3 13 PqI2GH7lyh5qp/Pq0rGwKKcTMwNPJ/zr7fXbW5aeU2VECEiyt2VqCjlxpOiawFwVSWfkpl/Ofwhy 7grTlTRgcg== ) ; keytag 32864`
	`tr. 43200 IN DNSKEY ( 256 3 13 J0G7OdvMc+XrKBpmHT5CEcHTUwvAmrbpuR4WsAilbjuzXvSE1DKDYuki+be5WFkSMpvI37Cehg+U 4zLXWWNkog== ) ; keytag 6868`
	DNSKEY=23500/SEP is now in the chain-of-trust
	DS=23500/SHA-256 verifies DNSKEY=23500/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tr. 43200 IN RRSIG ( DNSKEY 13 1 43200 20251229152327 20251214070021 23500 tr. 8rmhIJBgkz4hF299stZjdNHbaq4VLWeze+EZWAauJSQsb+goIemKFvp9V1Wr6uIhMCruXQ0Vl2Su MJquEtP1PQ== )`
	RRSIG=23500 and DNSKEY=23500/SEP verifies the DNSKEY RRset
	DNSKEY=32864 is now in the chain-of-trust
	DNSKEY=6868 is now in the chain-of-trust
	Query to ns74.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 389 octets ;; HEADER SECTION ;; id = 41580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns74.ns.tr is authoritative for gov.tr
	Query to ns74.ns.tr for gov.tr/DNSKEY
	Received 297 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 297 octets ;; HEADER SECTION ;; id = 49808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064 gov.tr. 43200 IN DNSKEY ( 256 3 13 fAjvNYumzAEJ+Dq7lZlCOMa4LX0muKp/O6zf06UjXW6Fg3PPH2pqDUIFmGdkTdi5412w4HMNlXMw BwlWJzvfCA== ) ; keytag 15768 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20251227101848 20251211211928 3064 gov.tr. siGDUgP9mM6of+b78NWDsXFXtXs9p0+cCxd8oKfmFrEusG6gdPbRCwjmVBGkTlVvpukCYlbzE4lD Y3Y8NmR37w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone gov.tr
	Attempting to learn nameservers for gov.tr
	Query to ns44.ns.tr for gov.tr/NS
	Received 254 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 254 octets ;; HEADER SECTION ;; id = 8395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN NS ;; ANSWER SECTION (7 records) gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found gov.tr nameservers: ns44.ns.tr, ns71.ns.tr, ns72.ns.tr, ns73.ns.tr, ns74.ns.tr, ns43.ns.tr

gov.tr

	Checking DS between tr and gov.tr
	Query to ns71.ns.tr for gov.tr/DS
	Received 181 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 181 octets ;; HEADER SECTION ;; id = 4873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DS ;; ANSWER SECTION (2 records) gov.tr. 43200 IN DS ( 3064 13 2 ad3d7eb3efb4c2dbefcce7a564badb4bab00adc8f41d0c739d647fb8dca08ff8 ) gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20251224024232 20251209070407 32864 tr. xtNyRqr8Nt3BboR2cmJiEOBrEtoxGCGyEwwLtzEiynyT794HI7ssjMIllgbFNZAtd1rd0oh8aATc /2mjkkkbtw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.tr in the tr zone
	DS=3064/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.tr. 43200 IN RRSIG ( DS 13 2 43200 20251224024232 20251209070407 32864 tr. xtNyRqr8Nt3BboR2cmJiEOBrEtoxGCGyEwwLtzEiynyT794HI7ssjMIllgbFNZAtd1rd0oh8aATc /2mjkkkbtw== )`
	RRSIG=32864 and DNSKEY=32864 verifies the DS RRset
	DS=3064/SHA-256 is now in the chain-of-trust
	`gov.tr. 43200 IN DS ( 3064 13 2 ad3d7eb3efb4c2dbefcce7a564badb4bab00adc8f41d0c739d647fb8dca08ff8 )`
	Query to ns71.ns.tr for gov.tr/DNSKEY
	Received 297 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 297 octets ;; HEADER SECTION ;; id = 16434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN DNSKEY ;; ANSWER SECTION (3 records) gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064 gov.tr. 43200 IN DNSKEY ( 256 3 13 fAjvNYumzAEJ+Dq7lZlCOMa4LX0muKp/O6zf06UjXW6Fg3PPH2pqDUIFmGdkTdi5412w4HMNlXMw BwlWJzvfCA== ) ; keytag 15768 gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20251227101848 20251211211928 3064 gov.tr. siGDUgP9mM6of+b78NWDsXFXtXs9p0+cCxd8oKfmFrEusG6gdPbRCwjmVBGkTlVvpukCYlbzE4lD Y3Y8NmR37w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov.tr
	`gov.tr. 43200 IN DNSKEY ( 257 3 13 sCaql96CE7pnPzmMtAuGbpCvQdiXCMPDsP1Kte2u8UZB7yH5lVoCwIFZ6yiKya9P/4z/tkl7qiWN C/NCcB5Ruw== ) ; keytag 3064`
	`gov.tr. 43200 IN DNSKEY ( 256 3 13 fAjvNYumzAEJ+Dq7lZlCOMa4LX0muKp/O6zf06UjXW6Fg3PPH2pqDUIFmGdkTdi5412w4HMNlXMw BwlWJzvfCA== ) ; keytag 15768`
	DNSKEY=3064/SEP is now in the chain-of-trust
	DS=3064/SHA-256 verifies DNSKEY=3064/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.tr. 43200 IN RRSIG ( DNSKEY 13 2 43200 20251227101848 20251211211928 3064 gov.tr. siGDUgP9mM6of+b78NWDsXFXtXs9p0+cCxd8oKfmFrEusG6gdPbRCwjmVBGkTlVvpukCYlbzE4lD Y3Y8NmR37w== )`
	RRSIG=3064 and DNSKEY=3064/SEP verifies the DNSKEY RRset
	DNSKEY=15768 is now in the chain-of-trust
	Query to ns74.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 389 octets ;; HEADER SECTION ;; id = 36474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns74.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns71.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 410 octets ;; HEADER SECTION ;; id = 64973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns72.ns.tr for gov.tr/SOA
	Received 410 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 410 octets ;; HEADER SECTION ;; id = 27423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns44.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 410 octets ;; HEADER SECTION ;; id = 8033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns43.ns.tr for gov.tr/SOA
	Received 410 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 410 octets ;; HEADER SECTION ;; id = 40710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns73.ns.tr for gov.tr/SOA
	Received 410 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 410 octets ;; HEADER SECTION ;; id = 31105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN SOA ;; ANSWER SECTION (2 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) ;; AUTHORITY SECTION (7 records) gov.tr. 43200 IN NS ns71.ns.tr. gov.tr. 43200 IN NS ns72.ns.tr. gov.tr. 43200 IN NS ns73.ns.tr. gov.tr. 43200 IN NS ns74.ns.tr. gov.tr. 43200 IN NS ns43.ns.tr. gov.tr. 43200 IN NS ns44.ns.tr. gov.tr. 43200 IN RRSIG ( NS 13 2 43200 20251227220314 20251213021807 15768 gov.tr. 7JH6jTQl0deFezFMz2mk4+hVuHn/gdy92kvHrPgBlmZgmj50Pwl+kjvo/6EveWJA0+hTAo1Z2RfH wG8QfDWRzA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns74.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.160
	;; Response received from [31.145.253.160] 389 octets ;; HEADER SECTION ;; id = 19216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

gov.tr

	Query to ns43.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 389 octets ;; HEADER SECTION ;; id = 60436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns43.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns43.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.4
	;; Response received from [185.7.0.4] 389 octets ;; HEADER SECTION ;; id = 61793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

gov.tr

	Query to ns44.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 389 octets ;; HEADER SECTION ;; id = 16598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns44.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns44.ns.tr for gov.tr/A
	Received 389 bytes from 185.7.0.5
	;; Response received from [185.7.0.5] 389 octets ;; HEADER SECTION ;; id = 64945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

gov.tr

	Query to ns71.ns.tr for gov.tr/A
	Received 389 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 389 octets ;; HEADER SECTION ;; id = 4899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns71.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns71.ns.tr for gov.tr/A
	Received 389 bytes from 185.67.32.53
	;; Response received from [185.67.32.53] 389 octets ;; HEADER SECTION ;; id = 44370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

gov.tr

	Query to ns72.ns.tr for gov.tr/A
	Received 389 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 389 octets ;; HEADER SECTION ;; id = 23546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns72.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns72.ns.tr for gov.tr/A
	Received 389 bytes from 40.68.114.66
	;; Response received from [40.68.114.66] 389 octets ;; HEADER SECTION ;; id = 14885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

gov.tr

	Query to ns73.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 389 octets ;; HEADER SECTION ;; id = 1256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns73.ns.tr is authoritative for gov.tr
	Found RRSIG signed by gov.tr zone
	Query to ns73.ns.tr for gov.tr/A
	Received 389 bytes from 31.145.253.159
	;; Response received from [31.145.253.159] 389 octets ;; HEADER SECTION ;; id = 52361 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov.tr. 3600 IN SOA ( ns73.ns.tr. hostmaster.trabis.gov.tr. 1765908846 ;serial 7200 ;refresh 900 ;retry 86400 ;expire 3600 ;minimum ) gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN NSEC3 ( 1 0 5 27a683bad0762ca7 uviua4lor1jm44hmv1d6v4ij5mnl1lnl NS SOA RRSIG DNSKEY NSEC3PARAM ) uvip5b49hhal7lf3u78a2214m2knkv08.gov.tr. 3600 IN RRSIG ( NSEC3 13 3 3600 20251228025607 20251212212823 15768 gov.tr. bN2JPT5mQ4g2kFgXpNg/x+DFPdhFjLPY7AjAt029L0YK5NCH5wbebYx+mDxiUw5d4n4g1DASK7bL ckGZIEf/3g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`gov.tr. 3600 IN RRSIG ( SOA 13 2 3600 20251231180343 20251216171420 15768 gov.tr. U01Oss6AW1fHpJK/zujnXV0+Yv++ju7b9wRN2DtwuhHmnXcGJYWk3PoO6NNLMzE6B6zVDyw4xD+M 2u9RvqXIoA== )`
	RRSIG=15768 and DNSKEY=15768 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.tr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: