DNSSEC Analyzer - ianawww.vip.icann.org

Domain Name:

Time: 2022-08-16 03:39:16 UTC, NTP stratum 16

Analyzing DNSSEC problems for ianawww.vip.icann.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to h.root-servers.net for ianawww.vip.icann.org/A
	Received 787 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (787 octets) ;; HEADER SECTION ;; id = 15241 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for org/DNSKEY
	Received 772 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (772 octets) ;; HEADER SECTION ;; id = 32579 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to j.root-servers.net for org/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (367 octets) ;; HEADER SECTION ;; id = 3276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to d0.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.19.57.1
	;; Response received from 199.19.57.1 (895 octets) ;; HEADER SECTION ;; id = 44578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAbXoHRx/l552jsEsFicJJYoJVt8ZLb6AELkyLfDY8cVTLFf2hKmuestpp4IUpL8WBWo/t6AS OyRw2pLsGRywE+0ctpdudSgwW8AUEHGYnHlb1xo1XNtBlmdIsPWmA4VwtwnDfELFPKHwbxz8y06X X4Whv3HtA9KwoOpiWZDFPjz9 ) ; Key ID = 56124 org. 3600 IN DNSKEY ( 256 3 8 AwEAAb9tjHO8nHIiRuf0zHT2Gen/tjGmj2ZWB/ko+5M4jmrGFnu/fMmr5pkTcKe5JVwEEykWcMZW jB4vT0hljN5ua8gW+Xskzk6EH5F2+CzmN6u1DysuFn9FAwBpilKpZ9OKnN5qYDOURAX11O4ib+iq SdwzOMv55WHv4waE3TsGZNAR ) ; Key ID = 29511 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830152424 20220809142424 26974 org. GusLRVspW4mlQWPx/sZu7Jkq/RSKq452ZVak5ZjWmY4TL8hvDX0Vb8zv3pipGdKam+IOGWsR+JD6 hn+HXeJLb3P13OHlhVGImrzoj+/Bx/DJbj6IAXr/FOEa/ffM3FjE/ZW/9IU+GMy3LEftQsnBoq4e TFhFwvGgGorV9JpNeicRui1ooCtQtKG+/loeOX71zybQAcB6UMuIaHX3R00IBUJTWA0eJvHbyGi6 +w1/v1GrAsxYXmJOMZ3qWXvtqoPCy8p3VlEfvvVG1qDetMeM/KTyW+sqKj0hk0ebvN+FectaYoCV PpogP53S/nl6MwNViGRiphM8O2uSkUuqvgPSeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAbXoHRx/l552jsEsFicJJYoJVt8ZLb6AELkyLfDY8cVTLFf2hKmuestpp4IUpL8WBWo/t6AS OyRw2pLsGRywE+0ctpdudSgwW8AUEHGYnHlb1xo1XNtBlmdIsPWmA4VwtwnDfELFPKHwbxz8y06X X4Whv3HtA9KwoOpiWZDFPjz9 ) ; Key ID = 56124`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAb9tjHO8nHIiRuf0zHT2Gen/tjGmj2ZWB/ko+5M4jmrGFnu/fMmr5pkTcKe5JVwEEykWcMZW jB4vT0hljN5ua8gW+Xskzk6EH5F2+CzmN6u1DysuFn9FAwBpilKpZ9OKnN5qYDOURAX11O4ib+iq SdwzOMv55WHv4waE3TsGZNAR ) ; Key ID = 29511`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830152424 20220809142424 26974 org. GusLRVspW4mlQWPx/sZu7Jkq/RSKq452ZVak5ZjWmY4TL8hvDX0Vb8zv3pipGdKam+IOGWsR+JD6 hn+HXeJLb3P13OHlhVGImrzoj+/Bx/DJbj6IAXr/FOEa/ffM3FjE/ZW/9IU+GMy3LEftQsnBoq4e TFhFwvGgGorV9JpNeicRui1ooCtQtKG+/loeOX71zybQAcB6UMuIaHX3R00IBUJTWA0eJvHbyGi6 +w1/v1GrAsxYXmJOMZ3qWXvtqoPCy8p3VlEfvvVG1qDetMeM/KTyW+sqKj0hk0ebvN+FectaYoCV PpogP53S/nl6MwNViGRiphM8O2uSkUuqvgPSeA== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=56124 is now in the chain-of-trust
	DNSKEY=29511 is now in the chain-of-trust
	Query to d0.org.afilias-nst.org for ianawww.vip.icann.org/A
	Received 483 bytes from 199.19.57.1
	;; Response received from 199.19.57.1 (483 octets) ;; HEADER SECTION ;; id = 47282 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b2.org.afilias-nst.org for icann.org/DNSKEY
	Received 471 bytes from 199.249.120.1
	;; Response received from 199.249.120.1 (471 octets) ;; HEADER SECTION ;; id = 44735 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone icann.org

icann.org

	Checking DS between org and icann.org
	Query to c0.org.afilias-nst.info for icann.org/DS
	Received 345 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (345 octets) ;; HEADER SECTION ;; id = 60199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DS ;; ANSWER SECTION (4 records) icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for icann.org in the org zone
	DS=23584/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18060/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=17248/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= )`
	RRSIG=29511 and DNSKEY=29511 verifies the DS RRset
	DS=23584/SHA-256 is now in the chain-of-trust
	DS=18060/SHA-256 is now in the chain-of-trust
	DS=17248/SHA-256 is now in the chain-of-trust
	`icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 )`
	`icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 )`
	`icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 )`
	Query to ns.icann.org for icann.org/DNSKEY
	Received 1628 bytes from 199.4.138.53
	;; Response received from 199.4.138.53 (1628 octets) ;; HEADER SECTION ;; id = 16657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (7 records) icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAZ9up62Dl/yiPxW1+x+1B3qsgAeX1B8OBqv0NTbLicGLRbhFNp8gov3ZlBzL05R/VEHxVvNc aGZbvYk8efKD9wa24/lZHwxZtmxLrHl7DCh9NvMwdWjqV3VdKCkMjjJC9R6H5l5pKYKzrWbS6zqr i89+uXPsgdNwIw6HV4bAAMsH ) ; Key ID = 46688 icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAa/K4hH2CQxpTIB3ooL62krvz2fevKzqqmh8rBA6clL8nWFFp/hU8xhW+GB3W4n/x1MkUnkE BrTun78KtapVGRbnAw9kJ3qDoTa4CsaPLZFLOH0gP1xL3biEN6XOCoep0yaJhscKCDl9miqduddd nXa+iL/b71qEwPHbHkq6mhbF ) ; Key ID = 61853 icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAd2HT4Rj2l7qUrMDa+AYY75/HFjUKNowf+GP/7GCICJ+8PRUaoZ8Nn5yTryi4br6GoiJ9MGx 2yV2K3JF2hZ8CcjtjGZYdaM86c/itTRlkTd2Kaai9jwuE8+HtSEdlNsVdHQJCWYhF5UcLSoQERxi B6eYEzhLxuKoiuZTd9OgNj+P ) ; Key ID = 58935 icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAaxEcKY6A65zj+LOPz61QMjhiSFTjuw77gmHUtrAH2IZ53i61DdNjh7h5LhujGjVR7+XsL+D zQJhJQUSrIilaNv2sHlzjjDdXKsD4TxaziLCvbog/5J9DIc1piDOp5Bky5l2YoX25AyQIbm1t4mx iMCkjW6ItXO3FGFdP2W+yQXLzK5b+oC8UmlBViZaR2N8+By1uDtSTT+hPWCUXx7BbK1qUuKrOHYW 5wtklzn9zuPYRaT1IAU6nYQeRVAjyqEnllk7ybhT4Jic4yyUIaEJaHxJHQwW2Uu+YLhstrJgkf6X Z+O2XhtFAXRh09peoIaKpB0ldrj602qaXRWahiRQqq8= ) ; Key ID = 18060 icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAc2Z6Zud+ajvIhCty5crR6BRw84ENiaem/0jg+WoVub3g2dMk/CsQMpl25JbTsXml+fXg60X JTg//JYgUNZvELk9bMW3qiA3Mr6GrwLfKmrFEEEVOPzasUpmnFGQSPyl0XEg7QF+Fmqw7V7x216z UtFHLgpZT3aCIRiuC8JUQvoSOX7gMyEAQOIii/XbD9xEMpuCGVS7UaNGN1iUJctRlaBFOQzxg1h4 TtYIofMqExuBZrF2Xid1oEcVd3xM1VLCE8Y3tmR1TncxrmiKsLkHA7jgOwQLv05RqZML5zmw/9sS 8iil3oyRgy7X6Nh5KQZyC5cHqcl/58lsN0IrXe2logk= ) ; Key ID = 63048 icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 18060 icann.org. l9XgGB1vYc+TlOX3giNo5qsJnx/RulRo/TWF4AWCfnOHiF8B4M+otZGwNSXf19ZbK6FxqVntnISn oSoOtmV2WED0y0YvBLLFLl3fAm3s4q1LMzZGa9K5Qd93O0Z7RvDZdh7Ps2qn0Y1a+F3J4H6E3SDP UbtwjnFCqiqr1FPfy1FKck5QmenfXOSTDhdHuP1HiuWKL18ryRSdT40kcmciOlGEaHhbVHF7YQev BGlARwVjH6nJhjY/MSVJ4W+cQwbKfqzzPVNZP2rXnxWVyyzso1L7Z6HL3E5gIFWbmU9aQ3kaiOGu kjRFgfAFF/AV0JXXtCeW7OAJxZIeAw1sCR1EpQ== ) icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 63048 icann.org. Vii7+hiKOp8NakDbNwbMTrAZtHLbrEcgIdSt8jQzEEQMejg1elxFo3HFP5QoR//TNCe1+EHMLhsm F9t0uK9op7ZcXfqhtNrkfFUw9gy1q1qs1+S7+MeVzUF4Cc5+y6wFSFI6aDikD/itKPAB8TLPlwuF AnPivLqVIoF6ooTqjeOAS14y+EVZCoX54v4a+6F6cjFfijagzzjd8AzYRzEDVjgbIxp5jMjohKNa a4uKSwrWbixVm4/QTBUd9k3cn3BdrCfQV5bzPFPVLTq175VoD3Mo8p167A90+Ku+fjrs1Q1S3B+C hAZYhXypmS5drO9fXvyLiuYdwbaMRtZUjjyoAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for icann.org
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAZ9up62Dl/yiPxW1+x+1B3qsgAeX1B8OBqv0NTbLicGLRbhFNp8gov3ZlBzL05R/VEHxVvNc aGZbvYk8efKD9wa24/lZHwxZtmxLrHl7DCh9NvMwdWjqV3VdKCkMjjJC9R6H5l5pKYKzrWbS6zqr i89+uXPsgdNwIw6HV4bAAMsH ) ; Key ID = 46688`
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAa/K4hH2CQxpTIB3ooL62krvz2fevKzqqmh8rBA6clL8nWFFp/hU8xhW+GB3W4n/x1MkUnkE BrTun78KtapVGRbnAw9kJ3qDoTa4CsaPLZFLOH0gP1xL3biEN6XOCoep0yaJhscKCDl9miqduddd nXa+iL/b71qEwPHbHkq6mhbF ) ; Key ID = 61853`
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAd2HT4Rj2l7qUrMDa+AYY75/HFjUKNowf+GP/7GCICJ+8PRUaoZ8Nn5yTryi4br6GoiJ9MGx 2yV2K3JF2hZ8CcjtjGZYdaM86c/itTRlkTd2Kaai9jwuE8+HtSEdlNsVdHQJCWYhF5UcLSoQERxi B6eYEzhLxuKoiuZTd9OgNj+P ) ; Key ID = 58935`
	`icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAaxEcKY6A65zj+LOPz61QMjhiSFTjuw77gmHUtrAH2IZ53i61DdNjh7h5LhujGjVR7+XsL+D zQJhJQUSrIilaNv2sHlzjjDdXKsD4TxaziLCvbog/5J9DIc1piDOp5Bky5l2YoX25AyQIbm1t4mx iMCkjW6ItXO3FGFdP2W+yQXLzK5b+oC8UmlBViZaR2N8+By1uDtSTT+hPWCUXx7BbK1qUuKrOHYW 5wtklzn9zuPYRaT1IAU6nYQeRVAjyqEnllk7ybhT4Jic4yyUIaEJaHxJHQwW2Uu+YLhstrJgkf6X Z+O2XhtFAXRh09peoIaKpB0ldrj602qaXRWahiRQqq8= ) ; Key ID = 18060`
	`icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAc2Z6Zud+ajvIhCty5crR6BRw84ENiaem/0jg+WoVub3g2dMk/CsQMpl25JbTsXml+fXg60X JTg//JYgUNZvELk9bMW3qiA3Mr6GrwLfKmrFEEEVOPzasUpmnFGQSPyl0XEg7QF+Fmqw7V7x216z UtFHLgpZT3aCIRiuC8JUQvoSOX7gMyEAQOIii/XbD9xEMpuCGVS7UaNGN1iUJctRlaBFOQzxg1h4 TtYIofMqExuBZrF2Xid1oEcVd3xM1VLCE8Y3tmR1TncxrmiKsLkHA7jgOwQLv05RqZML5zmw/9sS 8iil3oyRgy7X6Nh5KQZyC5cHqcl/58lsN0IrXe2logk= ) ; Key ID = 63048`
	DNSKEY=18060/SEP is now in the chain-of-trust
	DS=18060/SHA-256 verifies DNSKEY=18060/SEP
	DS=23584/SHA-256 is published, but a corresponding DNSKEY is not
	DS=17248/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 18060 icann.org. l9XgGB1vYc+TlOX3giNo5qsJnx/RulRo/TWF4AWCfnOHiF8B4M+otZGwNSXf19ZbK6FxqVntnISn oSoOtmV2WED0y0YvBLLFLl3fAm3s4q1LMzZGa9K5Qd93O0Z7RvDZdh7Ps2qn0Y1a+F3J4H6E3SDP UbtwjnFCqiqr1FPfy1FKck5QmenfXOSTDhdHuP1HiuWKL18ryRSdT40kcmciOlGEaHhbVHF7YQev BGlARwVjH6nJhjY/MSVJ4W+cQwbKfqzzPVNZP2rXnxWVyyzso1L7Z6HL3E5gIFWbmU9aQ3kaiOGu kjRFgfAFF/AV0JXXtCeW7OAJxZIeAw1sCR1EpQ== )`
	`icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 63048 icann.org. Vii7+hiKOp8NakDbNwbMTrAZtHLbrEcgIdSt8jQzEEQMejg1elxFo3HFP5QoR//TNCe1+EHMLhsm F9t0uK9op7ZcXfqhtNrkfFUw9gy1q1qs1+S7+MeVzUF4Cc5+y6wFSFI6aDikD/itKPAB8TLPlwuF AnPivLqVIoF6ooTqjeOAS14y+EVZCoX54v4a+6F6cjFfijagzzjd8AzYRzEDVjgbIxp5jMjohKNa a4uKSwrWbixVm4/QTBUd9k3cn3BdrCfQV5bzPFPVLTq175VoD3Mo8p167A90+Ku+fjrs1Q1S3B+C hAZYhXypmS5drO9fXvyLiuYdwbaMRtZUjjyoAg== )`
	RRSIG=18060 and DNSKEY=18060/SEP verifies the DNSKEY RRset
	RRSIG=63048 and DNSKEY=63048/SEP verifies the DNSKEY RRset
	DNSKEY=46688 is now in the chain-of-trust
	DNSKEY=61853 is now in the chain-of-trust
	DNSKEY=58935 is now in the chain-of-trust
	DNSKEY=63048/SEP is now in the chain-of-trust
	Query to ns.icann.org for ianawww.vip.icann.org/A
	Received 1087 bytes from 199.4.138.53
	;; Response received from 199.4.138.53 (1087 octets) ;; HEADER SECTION ;; id = 25193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (9 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827053310 20220805214336 46688 icann.org. k7LuCXTTEbI6Y2GFF0YbQl3PpeHswe7XCrGYVvatMIjkDcI3mS1EeOb72WXltLV6amz9fleU5hZE 3YFi7NR0XPeH2tOIoDyc24ENjFhPYoNKB6Hn3hdN23e95R5T+h9ZJHGxvwpO0rKuzdxPxuOpcToA 1aZCWP3WQXfllYx0oFI= ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826224826 20220806034338 46688 icann.org. VhKbdvdqJOQltVA3L4VwwXytA6c3pn4sW/u9Pn1IKrZBZQgKGY9w5Ui4jD40+56+RlliRihql6Jh FYkdpnJciHMVW0vl/DGaY3AyltP5UqKzDDyfFzvHa+CPh5aH2CX2p4CsGFZGXJPjDIxNAi9KoI4O 0vlpRzOLyz8DGbGaPzs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.icann-servers.net for vip.icann.org/DNSKEY
	Received 1135 bytes from 199.43.135.53
	;; Response received from 199.43.135.53 (1135 octets) ;; HEADER SECTION ;; id = 5619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (11 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826224826 20220806034338 46688 icann.org. VhKbdvdqJOQltVA3L4VwwXytA6c3pn4sW/u9Pn1IKrZBZQgKGY9w5Ui4jD40+56+RlliRihql6Jh FYkdpnJciHMVW0vl/DGaY3AyltP5UqKzDDyfFzvHa+CPh5aH2CX2p4CsGFZGXJPjDIxNAi9KoI4O 0vlpRzOLyz8DGbGaPzs= ) gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826165701 20220805114638 46688 icann.org. GMfD1pXl+STkR+AWx1CTOKUHE+kF3qdSOc3yUWpAz5r/1zePGrW/wN8OLxKjwHJIyjdSVK69AScA 40crlgnmUowFWzeTo7U+8uGEYnYU/nEjmYYdbx3QeHWlt2dDa8jBT0ZDwwJ4AVGIDv2ILhAzpEgl SjqPNINdnlttSxLG2Ks= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone vip.icann.org

vip.icann.org

	Checking DS between icann.org and vip.icann.org
	Query to a.icann-servers.net for vip.icann.org/DS
	Received 259 bytes from 199.43.135.53
	;; Response received from 199.43.135.53 (259 octets) ;; HEADER SECTION ;; id = 36115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DS ;; ANSWER SECTION (2 records) vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for vip.icann.org in the icann.org zone
	DS=6025/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= )`
	RRSIG=46688 and DNSKEY=46688 verifies the DS RRset
	DS=6025/SHA-256 is now in the chain-of-trust
	`vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 )`
	Query to gtm1.dc.icann.org for vip.icann.org/DNSKEY
	Received 1261 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (1261 octets) ;; HEADER SECTION ;; id = 64296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (6 records) vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcEnl44afQOr13RDfjVNdjNxXntFKpNkw0O1gNRD7c/Ri+FGdmNOXX8ap/dZfPGxQBDX9OZk aCCeuxnS2y8EUPWe4x5u4Wmvmbrow06rhfnG0DyveLOwSWtS0jxqKDIwJBu03lZxvn3GIywnlS5z oCyT/wzHlJr5uvt8jndWAo7z ) ; Key ID = 31713 vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAak80EaT1j7Mr8VjpPG0/UYwCaEPDxMH3JHS/nBzI9EjTvJOanF/D/bS7yvGYtQiz6VT7J72 sIkOvZPubwoRvbhPNLSTMQM9gFw5p/cVzCEdMSf3hE31tdhfJ4xaZCGRUMJQszZ9BafqI7zyu2z8 5l1NPTQv81kse7Xja5A1n69N ) ; Key ID = 41364 vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; Key ID = 6025 vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 31713 vip.icann.org. fY2g5yiX4aIePF+MhhJEo0lm94UjQ1w5z18esZyDtaSzIUCsgEYrwWXEGHWHyS9aDeTkwQUpDjy8 /wsdHnoX3YLwrY8uWlr7o/CDF3duWNVvdDuBNOUapnFnIldOu9Zcgx73pp+ZifazE18MSrRl4Gyp JaIm+dCR3bksDmioyJY= ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 41364 vip.icann.org. oJ8WGDb2FCzdjUu1q3D9nUcnpdsBdbOvpdkIgT6mK319W+oh1oHNKV1lFnTQt0KxW2NRw920Url5 2ES1YhtIJlqTv9yR5oKFR+Mum2VK6OOGNUCggFdlM/+EACa5g9yF0IxeajNxFKjXq2WDiThH6O49 /Efq4Hjlw3/QouvhuKY= ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 6025 vip.icann.org. fGkBqmRXTzesOCMxfDuxW3yqtqDeBlrEDsOmCyF9Jf9NmNpuN+FBZ5Gfw3o84DL5bti+NwFk5Yef C8W+zrpB61M8UQQSLPwlkLnP/tgAJKyciGk8AMhXfUL55Ks6IIsaku4uct4Sh22rJv+kPMjBUAvP EMvnPUAPXmjVskAQmQgpqSp3bxXzn3crhcbE+n+lLKIkX3tdnkgVm3AsNE/kk/PTKwn4VFShauBV /52u/O6ez8ZevTpeFm0FJOM2C6S+QqGNzr5VXJpmZUCy0qpeKc/17dEApprb69J3ao50dpxhUILD D9/6KRJWrazv3qyXImQrSnjmgnxwoqThobnogA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for vip.icann.org
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcEnl44afQOr13RDfjVNdjNxXntFKpNkw0O1gNRD7c/Ri+FGdmNOXX8ap/dZfPGxQBDX9OZk aCCeuxnS2y8EUPWe4x5u4Wmvmbrow06rhfnG0DyveLOwSWtS0jxqKDIwJBu03lZxvn3GIywnlS5z oCyT/wzHlJr5uvt8jndWAo7z ) ; Key ID = 31713`
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAak80EaT1j7Mr8VjpPG0/UYwCaEPDxMH3JHS/nBzI9EjTvJOanF/D/bS7yvGYtQiz6VT7J72 sIkOvZPubwoRvbhPNLSTMQM9gFw5p/cVzCEdMSf3hE31tdhfJ4xaZCGRUMJQszZ9BafqI7zyu2z8 5l1NPTQv81kse7Xja5A1n69N ) ; Key ID = 41364`
	`vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; Key ID = 6025`
	DNSKEY=6025/SEP is now in the chain-of-trust
	DS=6025/SHA-256 verifies DNSKEY=6025/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 31713 vip.icann.org. fY2g5yiX4aIePF+MhhJEo0lm94UjQ1w5z18esZyDtaSzIUCsgEYrwWXEGHWHyS9aDeTkwQUpDjy8 /wsdHnoX3YLwrY8uWlr7o/CDF3duWNVvdDuBNOUapnFnIldOu9Zcgx73pp+ZifazE18MSrRl4Gyp JaIm+dCR3bksDmioyJY= )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 41364 vip.icann.org. oJ8WGDb2FCzdjUu1q3D9nUcnpdsBdbOvpdkIgT6mK319W+oh1oHNKV1lFnTQt0KxW2NRw920Url5 2ES1YhtIJlqTv9yR5oKFR+Mum2VK6OOGNUCggFdlM/+EACa5g9yF0IxeajNxFKjXq2WDiThH6O49 /Efq4Hjlw3/QouvhuKY= )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820034112 20220813024112 6025 vip.icann.org. fGkBqmRXTzesOCMxfDuxW3yqtqDeBlrEDsOmCyF9Jf9NmNpuN+FBZ5Gfw3o84DL5bti+NwFk5Yef C8W+zrpB61M8UQQSLPwlkLnP/tgAJKyciGk8AMhXfUL55Ks6IIsaku4uct4Sh22rJv+kPMjBUAvP EMvnPUAPXmjVskAQmQgpqSp3bxXzn3crhcbE+n+lLKIkX3tdnkgVm3AsNE/kk/PTKwn4VFShauBV /52u/O6ez8ZevTpeFm0FJOM2C6S+QqGNzr5VXJpmZUCy0qpeKc/17dEApprb69J3ao50dpxhUILD D9/6KRJWrazv3qyXImQrSnjmgnxwoqThobnogA== )`
	RRSIG=31713 and DNSKEY=31713 verifies the DNSKEY RRset
	RRSIG=41364 and DNSKEY=41364 verifies the DNSKEY RRset
	RRSIG=6025 and DNSKEY=6025/SEP verifies the DNSKEY RRset
	DNSKEY=31713 is now in the chain-of-trust
	DNSKEY=41364 is now in the chain-of-trust
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (412 octets) ;; HEADER SECTION ;; id = 7584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.dc.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (885 octets) ;; HEADER SECTION ;; id = 50953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045549 20220813035549 31713 vip.icann.org. SGbQamf8asxX2994ErdQOdNGZuBeS91VDYuxLcDTZpbDtswkaXnkbV4bIBO2qXFKI+FVnlLJONaX 95SwgwLiAgYsOoEWYbUAWY8TAe0FBOSz4rQ74GuZ9QkzSKaMU2kpMoAMNr2fBkYcgyP1BwdN9hcA 2pqBAAOz4w0lKONWiCA= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045549 20220813035549 41364 vip.icann.org. as3+XY9VkoQPmLCIVdOYifnebxPJsDzk/aDZuwea634uWK1ezT+15acrhuWD5M7mqHgsJHBVbJcr P799KtFXho+ood1haD+2fsvIG6dFhYUt1WvZC7bkF1y9iU3UsWZsbHux/2ZtCNztaatrwTbyz5qE 6zugscAQw1O5TjrvfPk= ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN NSEC3 ( 1 0 1 f2eb709d5f83a148 mh5e2pvqrn65hvc0ffckvt7qrcjrmk45 MX TXT RRSIG ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033827 20220816023827 31713 vip.icann.org. ho+cZrfzXyR4uDyifgbE7NGVj4gJA7aYs06TCqR43sgVlAqrU02lDirKreQJBhqpg4QinhvuXFlC bSHSR8Sr5acznbQlfNf0n3EMDxOv3i6mItzSChTenC7F+irxSMs4vnwTfObe2tb8S2BoQVHrcnTg AzDcixsejSHQsMEK6C8= ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033827 20220816023827 41364 vip.icann.org. XiAIQegkQQA2lJpT5J+TSC8W21ND1HpwCliY/hzRzqLV274xSE4IowRYhB4he5SIQOr11hJnSVeC Jpk+9kJDdX9WTIvr6NBNkhRA4ZcoHB9O9WR19ndgAk1OHlXxwaJwXNhNU3ERd5rdVbtbgQULi72k zzILclCYbK/Mi9CvQxc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for vip.icann.org/SOA
	Received 893 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (893 octets) ;; HEADER SECTION ;; id = 15423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (3 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820052653 20220813042653 31713 vip.icann.org. CtPKZEX/ozXj1xyWwc9+ieJgRfenPdTiHgBO+iBGPhYi6rHsodOPnTmm2x9eYLZJ5zNSxKzEiAzz q7D9aqjjdCdFqq8qE0yx/pVokc/Q3BrGJ0PumheW4iXLIEXIdqODlCJb2GpjNYCvbyPLUEQhVt8h DN0UZmWeUaMDW5sqwIU= ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820052653 20220813042653 41364 vip.icann.org. OYflh1kNgNPDC4Kw68Ai83g6triFnmpXy+WfnKVt/H9/0gnciEFkWTupfo98QgRfWz1gXeaiS1je 9FC7lkt7ZbxQQ1ho9v3PFHEP3Yf+bdgKLiQb2q/SyyICHy3SqEXoQqWN9bb2M8FGYUG88vs41yVn Me0UQodDrIE2czViqQ4= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820040429 20220813030429 31713 vip.icann.org. T7BmE2aBGu89n2Mj4KKzP1FP+R2W0jlkVpXb2Snujm3U5NVWSl9QXvIdAHTZT2ZkvsxY9Wg8s3SJ hvMrwY16U8hrSk/kKWdSwP2xA6f86Cf1i2/yJFtMlq7R+DK+rNUaMx4roDwpda1nuKLrfE4tecY8 kuCwr8f/5GLBqQQ3M+A= ) vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820040429 20220813030429 41364 vip.icann.org. I+eQuZf/J3XxAIHN67VGrc9BXoA2rUEdTf0EkG2Ol8q3k5on5BpIEiWvab9j6ZrCB0f1XCNlnPYI GUjewLJASiqiqDL8PKpfyJ48cckA0bSHKbhm/kZFN08eMD+bw6jPQjkeBbMSvPCm5IkOrXdWX1r1 A1ycEOdlRioZWWoFIYY= ) ;; ADDITIONAL SECTION (3 records) gtm1.lax.icann.org. 0 IN A 192.0.32.252 gtm1.lax.icann.org. 0 IN AAAA 2620:0:2d0:296::252 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gtm1.mdr.icann.org for vip.icann.org/SOA
	Received 893 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (893 octets) ;; HEADER SECTION ;; id = 61740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (3 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820051208 20220813041208 31713 vip.icann.org. dWTl3uHe0hNO+ONLrHrH/ajja/WEeP+OnZKUB9vH1FkOnqDwCpp2Z0Jdz3p7C9r66MSyEnY2SY0Y L5HWjtsK+g1/HQCbtysw2se2xRArIRfe/g5m+9LHVfSpWhw6CwjZn0BI7VK/WiCI7vJtwVz9Q5Cp BGbO8qq84bFa0+1NJwg= ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820051208 20220813041208 41364 vip.icann.org. O+Iob8k90sLDTB7JlnMxgaEE8H6bXE/qB+Y0n7kXBSNoKG4OzPycw22dIjoiQQUFxNmyOyg8+JwP ZuJVxyHCs+WTituhWHFlr24/mL5AcfesHjG9jWwEgWeMabXkwIT9L0xXwGFu23RRU+9rdxm/wsh8 5FWLMHvNQxaA5PvZRdo= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820032153 20220813022153 31713 vip.icann.org. qesKb9j3yULr7cbBz1EFQeQaJ0XVj03dDRgmD0y2YohAw+ZmffI5r7ZVMeb/cF3veVw59/BIjm7u XMkT/eYckKI8l+013HSuLdDj7AaO8wUR2SXJPLkJrpa1WpAlPIDDLfmmz1aRIHcRZR/UTsCZAayH aljpSNMGqs+WqenhxsM= ) vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820032153 20220813022153 41364 vip.icann.org. WDJGdVZa0vlMjGkpIMnUlZsNRI0k3dea8kN37m2mtFmov8ksC9j8DVKy28Q3E7tNuiXkvUvlScev aMVyMQmKUshUU8qiMdzQ5gcvQ4588BrWxfnYk9smdiqWeaqZbXHXjFUwJ0StnIGW2PSH37P0fwBk 6WnmLMi6ga+H1yVPmDM= ) ;; ADDITIONAL SECTION (3 records) gtm1.lax.icann.org. 0 IN A 192.0.32.252 gtm1.lax.icann.org. 0 IN AAAA 2620:0:2d0:296::252 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (412 octets) ;; HEADER SECTION ;; id = 15141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

vip.icann.org

	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (412 octets) ;; HEADER SECTION ;; id = 53798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.lax.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (885 octets) ;; HEADER SECTION ;; id = 54851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045548 20220813035548 31713 vip.icann.org. m8Jx6dZx8zPUh9D2FbUt8VpBzL1RyirYd/pmTwft1LJ5bwMVtPjWZFS+LfHHuFsM1ou+SDXQXfsx qjuVHrrqsVzt+7zM4sD07mpJC2HBzfGmM8R/zQ7GzA88rmaUgis7g1hmQeRwBgYE+aqIjYfxVzRO /5dpY+e+TpQIDcrOAc0= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045548 20220813035548 41364 vip.icann.org. Bs4L46rOS82ZhO9pWYEoBYRFb3Ymvlp72VaRFkBDblYUSd07kCzWiNHAHm5ognMuA0H5YBkcQHGV SldokbC85j3l24yPO9e1o335BHSLT43E6BIbVqQW6HSsSsP/NvjLmgX+rfAwQspI08IWrugX0+5A 2bhTuTSeGJGa9tH9qto= ) 3mf5p7fr1bi38d2kf9iqv2hpdu61pseu.vip.icann.org. 60 IN NSEC3 ( 1 0 1 4b43356c88cc90ec 3mf5p7fr1bi38d2kf9iqv2hpdu61psev MX TXT RRSIG ) 3mf5p7fr1bi38d2kf9iqv2hpdu61pseu.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033828 20220816023828 31713 vip.icann.org. C5N/3DVrVckCSUJndQPngTw06NVTRdqloRjXyvv5eD96XmR4IXW9J0FjyZn/Q4Nwmjo8F0GfVsRN zmNsabq/0OUVjMsr77cNxsOCE/L1jLJtKQX7b9UamOhAXKCSfhTfCBTIp8+1fl622LU5FGecxU2R EHSk0gGxqNZlfhGYtzQ= ) 3mf5p7fr1bi38d2kf9iqv2hpdu61pseu.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033828 20220816023828 41364 vip.icann.org. acmVbhak3qnBjCzmxKeXZx4FiT7JqRLBc5Ahc/f/YkAKSX1Pb/Vcd0sXG0ZbwzeMzfQ5oFlTjigM AYFpEkYRFyJRSaJiTBruvCQKyibtxNmwMj/ZW7IozXCCl4s2bUYkcecwRahK6pafg9kAAeUCduYa TVur1YmeX2ZR7qhvWuE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (412 octets) ;; HEADER SECTION ;; id = 62288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

vip.icann.org

	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (412 octets) ;; HEADER SECTION ;; id = 63309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.mdr.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (885 octets) ;; HEADER SECTION ;; id = 50183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045537 20220813035537 31713 vip.icann.org. a13Xn45XqOIvfQuoQo4v/1ajDUpzokyEyldPJMi5NV3RJJwguGbv0XuHpUrYtTdAPxf4eJfkPzNr BwwFEfFNgu7CqKifkLxeiCko9ZZa71F73ZfUcfN+5fdqmEMin1vHzq5wt+5LvGhETlrhD+69GAIB 7ZJnPBrr35Y7ujrtO4Q= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045537 20220813035537 41364 vip.icann.org. qL2i85ITAEeU/D6w+SwST3mLRy1TnSA9no8r9PuY1dn3JPMGWdhN/AVJiZdT9ZOOYJhHqw6H5ERB wBgIw0919OrKL6kUySaqAk3Tkghrx5l2HxvTW/ILB47D3KAG8QUDH7HLmeVm3pa3bI0gjb3A/ICo nQkCgLro+BeMLFSITcI= ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN NSEC3 ( 1 0 1 da3a5bd90a5a2c2e 69q6c9qv66inbjtoea1vc8d1vmpqh78p MX TXT RRSIG ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033807 20220816023807 31713 vip.icann.org. lpsAAoljWWl6HP77Lj3eRaLsOHuHrt1Lr06Y6OEOer2pRA/0m1DjgjT2URV9mNPtGym4AUI2Pol9 BZqMuR/wxu0r9q/UBedC1nphup0fJ/rF7Wk+ONGxhWnncsBcekpij2EF+lc6/AVKeFmYp6BS9fHi LsMHVI/F9v4iE2QHLGo= ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033807 20220816023807 41364 vip.icann.org. KJq7bhvBhM1JjGN0llB+50Ry9mkNkvQTyY5PFiMqxxNPIv6aJVY5KPn/NaCNYYS+EAY3JjGr+NOw 1HSF+YdxIPnb5cib8jz445RHiJhKSAbVLR9uvwvZuCQt0tp3YCF6GIEK2j09JD2NyXr9IDGnPTee Q5cJtCqii/VDkRQb+Jk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (412 octets) ;; HEADER SECTION ;; id = 55709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ianawww.vip.icann.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: