DNSSEC Debugger

Domain Name:

Time: 2024-09-11 04:28:03 UTC

Analyzing DNSSEC problems for isc.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 37213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to h.root-servers.net for isc.org/A
	Received 773 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 773 octets ;; HEADER SECTION ;; id = 32887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . 0uyrZee8OfrlNSbEuBrdnKVTeSbHq69RpvjrDTl7ScGwd728YNIygXfE4SGZ3bPF3mYgdlUA/671 iN/NyYipNVKC/eNKJcfPkIlYQqndlo2fR3ZjXcBH1XUbrz1cHQT55le9wJCHzPGf+6WXAPlwC1xL I2dAI6Rc0CeQzMmJB/0OCHCVeCvKFreFB0wbk5hS/3GjdYRGOm5+N/tB55WMuANr37+9K1I+gMCB zZ+bJpAlPsGtiJZrur6wvH1Lk6R1SzD4kIcYQlREu6AIkhM3Ztt3CHwgFURWUYqorxD+R2jkR2WU VmTiHox6Vy3JHeZIyAk67YWeq0pbPimQ7+Rn/A== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for org/DNSKEY
	Received 769 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 769 octets ;; HEADER SECTION ;; id = 47350 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . 0uyrZee8OfrlNSbEuBrdnKVTeSbHq69RpvjrDTl7ScGwd728YNIygXfE4SGZ3bPF3mYgdlUA/671 iN/NyYipNVKC/eNKJcfPkIlYQqndlo2fR3ZjXcBH1XUbrz1cHQT55le9wJCHzPGf+6WXAPlwC1xL I2dAI6Rc0CeQzMmJB/0OCHCVeCvKFreFB0wbk5hS/3GjdYRGOm5+N/tB55WMuANr37+9K1I+gMCB zZ+bJpAlPsGtiJZrur6wvH1Lk6R1SzD4kIcYQlREu6AIkhM3Ztt3CHwgFURWUYqorxD+R2jkR2WU VmTiHox6Vy3JHeZIyAk67YWeq0pbPimQ7+Rn/A== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to i.root-servers.net for org/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 51109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . 0uyrZee8OfrlNSbEuBrdnKVTeSbHq69RpvjrDTl7ScGwd728YNIygXfE4SGZ3bPF3mYgdlUA/671 iN/NyYipNVKC/eNKJcfPkIlYQqndlo2fR3ZjXcBH1XUbrz1cHQT55le9wJCHzPGf+6WXAPlwC1xL I2dAI6Rc0CeQzMmJB/0OCHCVeCvKFreFB0wbk5hS/3GjdYRGOm5+N/tB55WMuANr37+9K1I+gMCB zZ+bJpAlPsGtiJZrur6wvH1Lk6R1SzD4kIcYQlREu6AIkhM3Ztt3CHwgFURWUYqorxD+R2jkR2WU VmTiHox6Vy3JHeZIyAk67YWeq0pbPimQ7+Rn/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . 0uyrZee8OfrlNSbEuBrdnKVTeSbHq69RpvjrDTl7ScGwd728YNIygXfE4SGZ3bPF3mYgdlUA/671 iN/NyYipNVKC/eNKJcfPkIlYQqndlo2fR3ZjXcBH1XUbrz1cHQT55le9wJCHzPGf+6WXAPlwC1xL I2dAI6Rc0CeQzMmJB/0OCHCVeCvKFreFB0wbk5hS/3GjdYRGOm5+N/tB55WMuANr37+9K1I+gMCB zZ+bJpAlPsGtiJZrur6wvH1Lk6R1SzD4kIcYQlREu6AIkhM3Ztt3CHwgFURWUYqorxD+R2jkR2WU VmTiHox6Vy3JHeZIyAk67YWeq0pbPimQ7+Rn/A== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a2.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 895 octets ;; HEADER SECTION ;; id = 33751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAbPGbWF+ZeC9Z5OjVqy9XWGI2/2kSTtPD2o8tRQ+INGE6PMBCuGE/G54mCdppJKAk/8YPfSt kTGyMWG1r9RDDyk4MMhXrd+ksSacUGM5xEoemeDL7uiAC3QKmmVUrHBqY6e57Y0DA5O/2V6FJA2e TL9jafWgjg3y53ybSb1h+sl1 ) ; Key ID = 15678 org. 3600 IN DNSKEY ( 256 3 8 AwEAAcrrd2ol7mdqRflg/1WNPBzyD2doLKcrfxcbkjPjR3+6u9VqKsLeFfvuueRYRD4DR4gb6aZJ /OTyC9pTr3EFQW2FyXQSZFUSHIQj4hHumjw9Y1YJ7DSJYsP/jgyUL6H4xCq4whLFQnplPL3se/rO aPAoV9zSYdPewHXkBELuMh63 ) ; Key ID = 23064 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240930153356 20240909143356 26974 org. oMtxvTdG0Gjtd84d5MwDwlgYP60jfxh7duPG7Ho878k1SZNyHge9y46bZ1hDI7oImovmOGxJum3A oYTyb2kMt7w0xI0ReoqqsFh53m1T+nApmUOzJCcG1pOQOvsRjGBSd3FXAyvMIidB3casL3r1D+Fo LVu/1vLJwRf1CAvaqDp0f+pDg8jjg65A29pTbErrAcCckjAdHfwu7c3bKK0rvYhKAEqk1inHJdNb RW1nSQFhvgv9yMZRfAJq0lTHR2myGy/cB+0DJzpyImg0W+B941siy8C5NEWUDHNelOVum5qrsCOj xR3AEln6uscyimOTaJtEzVzXDZDBpIuaAD3I1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAbPGbWF+ZeC9Z5OjVqy9XWGI2/2kSTtPD2o8tRQ+INGE6PMBCuGE/G54mCdppJKAk/8YPfSt kTGyMWG1r9RDDyk4MMhXrd+ksSacUGM5xEoemeDL7uiAC3QKmmVUrHBqY6e57Y0DA5O/2V6FJA2e TL9jafWgjg3y53ybSb1h+sl1 ) ; Key ID = 15678`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAcrrd2ol7mdqRflg/1WNPBzyD2doLKcrfxcbkjPjR3+6u9VqKsLeFfvuueRYRD4DR4gb6aZJ /OTyC9pTr3EFQW2FyXQSZFUSHIQj4hHumjw9Y1YJ7DSJYsP/jgyUL6H4xCq4whLFQnplPL3se/rO aPAoV9zSYdPewHXkBELuMh63 ) ; Key ID = 23064`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240930153356 20240909143356 26974 org. oMtxvTdG0Gjtd84d5MwDwlgYP60jfxh7duPG7Ho878k1SZNyHge9y46bZ1hDI7oImovmOGxJum3A oYTyb2kMt7w0xI0ReoqqsFh53m1T+nApmUOzJCcG1pOQOvsRjGBSd3FXAyvMIidB3casL3r1D+Fo LVu/1vLJwRf1CAvaqDp0f+pDg8jjg65A29pTbErrAcCckjAdHfwu7c3bKK0rvYhKAEqk1inHJdNb RW1nSQFhvgv9yMZRfAJq0lTHR2myGy/cB+0DJzpyImg0W+B941siy8C5NEWUDHNelOVum5qrsCOj xR3AEln6uscyimOTaJtEzVzXDZDBpIuaAD3I1Q== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=15678 is now in the chain-of-trust
	DNSKEY=23064 is now in the chain-of-trust
	Query to c0.org.afilias-nst.info for isc.org/A
	Received 499 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 499 octets ;; HEADER SECTION ;; id = 50983 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) isc.org. 3600 IN NS ns1.isc.org. isc.org. 3600 IN NS ns3.isc.org. isc.org. 3600 IN NS nsp.dnsnode.net. isc.org. 3600 IN NS ns.isc.afilias-nst.info. isc.org. 3600 IN NS ns2.isc.org. isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240930153356 20240909143356 23064 org. VGPnfXrsgFr4lJjcApsjjyb8EOW1koCGrsn8OgTKyvrP4UthjZdjJ/n9OVAf8T/mxF0xeVgC8zQL BM3N2D1UxHGIqmRD/3jqwdgFjC2VNnBMIgDIeXbdsSn0kdZYY1TAdDoWhALn8YHoMxYAAozB7RC4 bSLxUWM1F0SCuhsvX4o= ) ;; ADDITIONAL SECTION (7 records) ns1.isc.org. 3600 IN A 149.20.2.26 ns2.isc.org. 3600 IN A 199.6.1.52 ns3.isc.org. 3600 IN A 51.75.79.143 ns1.isc.org. 3600 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 3600 IN AAAA 2001:500:60:d::52 ns3.isc.org. 3600 IN AAAA 2001:41d0:701:1100::2c92 ;; { "EDNS-VERSION": 0 }
	Query to a0.org.afilias-nst.info for isc.org/DNSKEY
	Received 499 bytes from 199.19.56.1
	;; Response received from [199.19.56.1] 499 octets ;; HEADER SECTION ;; id = 42227 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) isc.org. 3600 IN NS ns2.isc.org. isc.org. 3600 IN NS nsp.dnsnode.net. isc.org. 3600 IN NS ns3.isc.org. isc.org. 3600 IN NS ns.isc.afilias-nst.info. isc.org. 3600 IN NS ns1.isc.org. isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240930153356 20240909143356 23064 org. VGPnfXrsgFr4lJjcApsjjyb8EOW1koCGrsn8OgTKyvrP4UthjZdjJ/n9OVAf8T/mxF0xeVgC8zQL BM3N2D1UxHGIqmRD/3jqwdgFjC2VNnBMIgDIeXbdsSn0kdZYY1TAdDoWhALn8YHoMxYAAozB7RC4 bSLxUWM1F0SCuhsvX4o= ) ;; ADDITIONAL SECTION (7 records) ns1.isc.org. 3600 IN A 149.20.2.26 ns2.isc.org. 3600 IN A 199.6.1.52 ns3.isc.org. 3600 IN A 51.75.79.143 ns1.isc.org. 3600 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 3600 IN AAAA 2001:500:60:d::52 ns3.isc.org. 3600 IN AAAA 2001:41d0:701:1100::2c92 ;; { "EDNS-VERSION": 0 }
	Found child zone isc.org

isc.org

	Checking DS between org and isc.org
	Query to a2.org.afilias-nst.info for isc.org/DS
	Received 247 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 247 octets ;; HEADER SECTION ;; id = 58872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DS ;; ANSWER SECTION (2 records) isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 ) isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240930153356 20240909143356 23064 org. VGPnfXrsgFr4lJjcApsjjyb8EOW1koCGrsn8OgTKyvrP4UthjZdjJ/n9OVAf8T/mxF0xeVgC8zQL BM3N2D1UxHGIqmRD/3jqwdgFjC2VNnBMIgDIeXbdsSn0kdZYY1TAdDoWhALn8YHoMxYAAozB7RC4 bSLxUWM1F0SCuhsvX4o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for isc.org in the org zone
	DS=7250/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`isc.org. 3600 IN RRSIG ( DS 8 2 3600 20240930153356 20240909143356 23064 org. VGPnfXrsgFr4lJjcApsjjyb8EOW1koCGrsn8OgTKyvrP4UthjZdjJ/n9OVAf8T/mxF0xeVgC8zQL BM3N2D1UxHGIqmRD/3jqwdgFjC2VNnBMIgDIeXbdsSn0kdZYY1TAdDoWhALn8YHoMxYAAozB7RC4 bSLxUWM1F0SCuhsvX4o= )`
	RRSIG=23064 and DNSKEY=23064 verifies the DS RRset
	DS=7250/SHA-256 is now in the chain-of-trust
	`isc.org. 3600 IN DS ( 7250 13 2 a30b3f78b6dde9a4a9a2ad0c805518b4f49ec62e7d3f4531d33de697cda01cb2 )`
	Query to nsp.dnsnode.net for isc.org/DNSKEY
	Received 299 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 299 octets ;; HEADER SECTION ;; id = 33404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN DNSKEY ;; ANSWER SECTION (3 records) isc.org. 3600 IN DNSKEY ( 257 3 13 zEoOfseNFDM+E8spu7RR2Ar/GzFqAehe4yapWLiv6McIUF6xmI5GcIQ3+uLAizS2cNWHt6EArVj8 ogjtrRXwfw== ) ; Key ID = 7250 isc.org. 3600 IN DNSKEY ( 256 3 13 1CS+VQcRn4lGTK+b3wDjVO0hFDx4DV7s3Q1Fwxuq9ahd255FRny4f4vdZOMMMxpbRH5Zhwoh/706 IV0v9JwjlA== ) ; Key ID = 27566 isc.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240923185633 20240909180228 7250 isc.org. vZpZj3OFw7Rmqj22C/WCIeLlglhA/hD8Pa5n78aaGZoQIC6TlGYz96pouVjiLxm3WAIDtZyMZuxF 0Hs2UhvVHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for isc.org
	`isc.org. 3600 IN DNSKEY ( 257 3 13 zEoOfseNFDM+E8spu7RR2Ar/GzFqAehe4yapWLiv6McIUF6xmI5GcIQ3+uLAizS2cNWHt6EArVj8 ogjtrRXwfw== ) ; Key ID = 7250`
	`isc.org. 3600 IN DNSKEY ( 256 3 13 1CS+VQcRn4lGTK+b3wDjVO0hFDx4DV7s3Q1Fwxuq9ahd255FRny4f4vdZOMMMxpbRH5Zhwoh/706 IV0v9JwjlA== ) ; Key ID = 27566`
	DNSKEY=7250/SEP is now in the chain-of-trust
	DS=7250/SHA-256 verifies DNSKEY=7250/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`isc.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240923185633 20240909180228 7250 isc.org. vZpZj3OFw7Rmqj22C/WCIeLlglhA/hD8Pa5n78aaGZoQIC6TlGYz96pouVjiLxm3WAIDtZyMZuxF 0Hs2UhvVHw== )`
	RRSIG=7250 and DNSKEY=7250/SEP verifies the DNSKEY RRset
	DNSKEY=27566 is now in the chain-of-trust
	Query to ns1.isc.org for isc.org/A
	Received 1176 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 1176 octets ;; HEADER SECTION ;; id = 60879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	ns1.isc.org is authoritative for isc.org
	Found RRSIG signed by isc.org zone
	Query to ns3.isc.org for isc.org/SOA
	Received 1166 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 1166 octets ;; HEADER SECTION ;; id = 7639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN SOA ;; ANSWER SECTION (2 records) isc.org. 7200 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024082895 ;serial 7200 ;refresh 3600 ;retry 24796800 ;expire 3600 ;minimum ) isc.org. 7200 IN RRSIG ( SOA 13 2 7200 20240924153231 20240910143231 27566 isc.org. GwRqiN7avMoUURviQm8P91alp/aXsyFbjCet2JUlms2FtjaIvVDYS21YU1nC11shsloY5+LpS2GM BunEBys9/A== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.isc.org for isc.org/SOA
	Received 1166 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 1166 octets ;; HEADER SECTION ;; id = 52725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN SOA ;; ANSWER SECTION (2 records) isc.org. 7200 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024082895 ;serial 7200 ;refresh 3600 ;retry 24796800 ;expire 3600 ;minimum ) isc.org. 7200 IN RRSIG ( SOA 13 2 7200 20240924153231 20240910143231 27566 isc.org. GwRqiN7avMoUURviQm8P91alp/aXsyFbjCet2JUlms2FtjaIvVDYS21YU1nC11shsloY5+LpS2GM BunEBys9/A== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	Query to nsp.dnsnode.net for isc.org/SOA
	Received 1166 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 1166 octets ;; HEADER SECTION ;; id = 47159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN SOA ;; ANSWER SECTION (2 records) isc.org. 7200 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024082895 ;serial 7200 ;refresh 3600 ;retry 24796800 ;expire 3600 ;minimum ) isc.org. 7200 IN RRSIG ( SOA 13 2 7200 20240924153231 20240910143231 27566 isc.org. GwRqiN7avMoUURviQm8P91alp/aXsyFbjCet2JUlms2FtjaIvVDYS21YU1nC11shsloY5+LpS2GM BunEBys9/A== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns2.isc.org. 7200 IN A 199.6.1.52 ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns3.isc.org. 7200 IN A 51.75.79.143 ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns.isc.afilias-nst.info for isc.org/SOA
	Received 193 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 193 octets ;; HEADER SECTION ;; id = 54681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN SOA ;; ANSWER SECTION (2 records) isc.org. 7200 IN SOA ( ns-int.isc.org. hostmaster.isc.org. 2024082895 ;serial 7200 ;refresh 3600 ;retry 24796800 ;expire 3600 ;minimum ) isc.org. 7200 IN RRSIG ( SOA 13 2 7200 20240924153231 20240910143231 27566 isc.org. GwRqiN7avMoUURviQm8P91alp/aXsyFbjCet2JUlms2FtjaIvVDYS21YU1nC11shsloY5+LpS2GM BunEBys9/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.isc.org for isc.org/A
	Received 1176 bytes from 149.20.2.26
	;; Response received from [149.20.2.26] 1176 octets ;; HEADER SECTION ;; id = 28772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	isc.org A RR has value 151.101.66.217
	isc.org A RR has value 151.101.194.217
	isc.org A RR has value 151.101.2.217
	isc.org A RR has value 151.101.130.217
	Found 1 RRSIGs over A RRset
	`isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== )`
	RRSIG=27566 and DNSKEY=27566 verifies the A RRset

isc.org

	Query to nsp.dnsnode.net for isc.org/A
	Received 1176 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 1176 octets ;; HEADER SECTION ;; id = 8753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns2.isc.org. 7200 IN A 199.6.1.52 ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns3.isc.org. 7200 IN A 51.75.79.143 ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	nsp.dnsnode.net is authoritative for isc.org
	Found RRSIG signed by isc.org zone
	Query to nsp.dnsnode.net for isc.org/A
	Received 1176 bytes from 194.58.198.32
	;; Response received from [194.58.198.32] 1176 octets ;; HEADER SECTION ;; id = 21589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns2.isc.org. 7200 IN A 199.6.1.52 ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns3.isc.org. 7200 IN A 51.75.79.143 ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	isc.org A RR has value 151.101.194.217
	isc.org A RR has value 151.101.2.217
	isc.org A RR has value 151.101.66.217
	isc.org A RR has value 151.101.130.217
	Found 1 RRSIGs over A RRset
	`isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== )`
	RRSIG=27566 and DNSKEY=27566 verifies the A RRset

isc.org

	Query to ns3.isc.org for isc.org/A
	Received 1176 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 1176 octets ;; HEADER SECTION ;; id = 6761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	ns3.isc.org is authoritative for isc.org
	Found RRSIG signed by isc.org zone
	Query to ns3.isc.org for isc.org/A
	Received 1176 bytes from 51.75.79.143
	;; Response received from [51.75.79.143] 1176 octets ;; HEADER SECTION ;; id = 34448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	isc.org A RR has value 151.101.2.217
	isc.org A RR has value 151.101.66.217
	isc.org A RR has value 151.101.130.217
	isc.org A RR has value 151.101.194.217
	Found 1 RRSIGs over A RRset
	`isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== )`
	RRSIG=27566 and DNSKEY=27566 verifies the A RRset

isc.org

	Query to ns.isc.afilias-nst.info for isc.org/A
	Received 203 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 203 octets ;; HEADER SECTION ;; id = 48022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.isc.afilias-nst.info is authoritative for isc.org
	Found RRSIG signed by isc.org zone
	Query to ns.isc.afilias-nst.info for isc.org/A
	Received 203 bytes from 199.254.63.254
	;; Response received from [199.254.63.254] 203 octets ;; HEADER SECTION ;; id = 56340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	isc.org A RR has value 151.101.194.217
	isc.org A RR has value 151.101.2.217
	isc.org A RR has value 151.101.130.217
	isc.org A RR has value 151.101.66.217
	Found 1 RRSIGs over A RRset
	`isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== )`
	RRSIG=27566 and DNSKEY=27566 verifies the A RRset

isc.org

	Query to ns2.isc.org for isc.org/A
	Received 1176 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 1176 octets ;; HEADER SECTION ;; id = 54471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	ns2.isc.org is authoritative for isc.org
	Found RRSIG signed by isc.org zone
	Query to ns2.isc.org for isc.org/A
	Received 1176 bytes from 199.6.1.52
	;; Response received from [199.6.1.52] 1176 octets ;; HEADER SECTION ;; id = 44275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 6 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; isc.org. IN A ;; ANSWER SECTION (5 records) isc.org. 300 IN A 151.101.2.217 isc.org. 300 IN A 151.101.130.217 isc.org. 300 IN A 151.101.66.217 isc.org. 300 IN A 151.101.194.217 isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== ) ;; AUTHORITY SECTION (6 records) isc.org. 7200 IN NS nsp.dnsnode.net. isc.org. 7200 IN NS ns3.isc.org. isc.org. 7200 IN NS ns1.isc.org. isc.org. 7200 IN NS ns2.isc.org. isc.org. 7200 IN NS ns.isc.afilias-nst.info. isc.org. 7200 IN RRSIG ( NS 13 2 7200 20240923094552 20240909091334 27566 isc.org. ZRyRclJLvn0L25nOyj0Z8hbMDkwxudpXxsy3eVS8ZR7GwgHV4nJMLRYeGAfbU7BoNLkktP8BlA1w aN3wJ2aWew== ) ;; ADDITIONAL SECTION (13 records) ns1.isc.org. 7200 IN A 149.20.2.26 ns2.isc.org. 7200 IN A 199.6.1.52 ns3.isc.org. 7200 IN A 51.75.79.143 ns1.isc.org. 7200 IN AAAA 2001:500:6b:2::26 ns2.isc.org. 7200 IN AAAA 2001:500:60:d::52 ns3.isc.org. 7200 IN AAAA 2001:41d0:701:1100::2c92 ns1.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 6E0WGSN0NTiDn3XZs4ti0SATf43ilGohmgwMbDIuwMELsESrJNtFtRBiw3HaLo5AXPikfRZ1es5n keh1eEqx0w== ) ns1.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. IWlhkvI4dXmi7kVKIU/887wPafu7a7e2ijJiofboA6KDYHIhKqAdpeMkuRa32wFBjN+72ISUMWmj vac6nMuYtQ== ) ns2.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. 11OtAzeyC8isDB8FKAmrmOW9SJEcnkn77QhzPIriiPv5NeLiiBsYQ+3uZn8K+0oKmbetCDLnu4Hr mGQWAysrdg== ) ns2.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. LTzTK06J8zkFmvpuzjwmZ+Je/0T3nEP4eXn+8sSvlpNNtLaLLfRNT64xLAJZI1JbJ6giZ/Szl37Y Dl2SbVj5iA== ) ns3.isc.org. 7200 IN RRSIG ( A 13 3 7200 20240923181020 20240909180545 27566 isc.org. XgDA6e43kF5zWe4/gtm7HZqJTUb42g9Qzluf1Ec6XmSnZI90Ar27psQN/BU0alIwVe+ODmW0TB5b 2hgxuy6JpA== ) ns3.isc.org. 7200 IN RRSIG ( AAAA 13 3 7200 20240923181020 20240909180545 27566 isc.org. A/t8nZu187N0U69sJMho2CEPJR4t0yiGLGVs3VrZVLjg+5lJ4MWb6Dr9T2pkQRLy4gehowHV52dy j0kJBf0s3A== ) ;; { "EDNS-VERSION": 0 }
	isc.org A RR has value 151.101.2.217
	isc.org A RR has value 151.101.130.217
	isc.org A RR has value 151.101.66.217
	isc.org A RR has value 151.101.194.217
	Found 1 RRSIGs over A RRset
	`isc.org. 300 IN RRSIG ( A 13 2 300 20240923094552 20240909091334 27566 isc.org. yRJYq44uQouYzbDR2UVYtUZyM2pYstDa3m4WhWsBV1g4gIfw8RJBKkBSeYVLNZSe0u96NoOvynfs uiD1ngi0wg== )`
	RRSIG=27566 and DNSKEY=27566 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test isc.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: