DNSSEC Debugger - livedrawmacau.best

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-06 10:58:55 UTC

Analyzing DNSSEC problems for livedrawmacau.best

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1414 octets ;; HEADER SECTION ;; id = 267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to f.root-servers.net for livedrawmacau.best/A
	Received 674 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 674 octets ;; HEADER SECTION ;; id = 1603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) best. 172800 IN NS a.nic.best. best. 172800 IN NS b.nic.best. best. 172800 IN NS c.nic.best. best. 172800 IN NS d.nic.best. best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260719050000 20260706040000 57780 . hRTKmv8DytYiuT1Ij0pOVOsqrUXq3C+Te+I/fXnO4p07MNFX5u8NZxOsT33jI+XCO+nVWm3KbnCC 98Nj+L44CXVPAsPygdXjOrOoCyTOWela4qa7JAhOzh6k3yGmnTauTcxM8gxZtiozHXdLcvrpKdXX d4YHO7ETsYUM1MVl8fZeITnJQJsQThNCxcMKAbESaakERxRjLqjq6t/9OsXuTtJTTgVhbYbH6o6i qDm73XaErSYUdXlok6KIIui+lSynO7SFEiZn6AuAuHb+eFHcP83ksGldY1AhmaRKwtMVozHNh9mO t/8QKBtPaG9d2nB8GbuDVhoZ8B4YEbmNVgW+Mg== ) ;; ADDITIONAL SECTION (9 records) a.nic.best. 172800 IN A 194.169.218.109 a.nic.best. 172800 IN AAAA 2001:67c:13cc::1:109 b.nic.best. 172800 IN A 185.24.64.109 b.nic.best. 172800 IN AAAA 2a04:2b00:13cc::1:109 c.nic.best. 172800 IN A 212.18.248.109 c.nic.best. 172800 IN AAAA 2a04:2b00:13ee::109 d.nic.best. 172800 IN A 212.18.249.109 d.nic.best. 172800 IN AAAA 2a04:2b00:13ff::109 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for best/DNSKEY
	Received 660 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 660 octets ;; HEADER SECTION ;; id = 31759 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) best. 172800 IN NS a.nic.best. best. 172800 IN NS b.nic.best. best. 172800 IN NS c.nic.best. best. 172800 IN NS d.nic.best. best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260719050000 20260706040000 57780 . hRTKmv8DytYiuT1Ij0pOVOsqrUXq3C+Te+I/fXnO4p07MNFX5u8NZxOsT33jI+XCO+nVWm3KbnCC 98Nj+L44CXVPAsPygdXjOrOoCyTOWela4qa7JAhOzh6k3yGmnTauTcxM8gxZtiozHXdLcvrpKdXX d4YHO7ETsYUM1MVl8fZeITnJQJsQThNCxcMKAbESaakERxRjLqjq6t/9OsXuTtJTTgVhbYbH6o6i qDm73XaErSYUdXlok6KIIui+lSynO7SFEiZn6AuAuHb+eFHcP83ksGldY1AhmaRKwtMVozHNh9mO t/8QKBtPaG9d2nB8GbuDVhoZ8B4YEbmNVgW+Mg== ) ;; ADDITIONAL SECTION (9 records) a.nic.best. 172800 IN A 194.169.218.109 a.nic.best. 172800 IN AAAA 2001:67c:13cc::1:109 b.nic.best. 172800 IN A 185.24.64.109 b.nic.best. 172800 IN AAAA 2a04:2b00:13cc::1:109 c.nic.best. 172800 IN A 212.18.248.109 c.nic.best. 172800 IN AAAA 2a04:2b00:13ee::109 d.nic.best. 172800 IN A 212.18.249.109 d.nic.best. 172800 IN AAAA 2a04:2b00:13ff::109 ;; { "EDNS-VERSION": 0 }
	Found child zone best

best

	Checking DS between . and best
	Query to c.root-servers.net for best/DS
	Received 416 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 416 octets ;; HEADER SECTION ;; id = 52440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DS ;; ANSWER SECTION (3 records) best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a ) best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd ) best. 86400 IN RRSIG ( DS 8 1 86400 20260719050000 20260706040000 57780 . hRTKmv8DytYiuT1Ij0pOVOsqrUXq3C+Te+I/fXnO4p07MNFX5u8NZxOsT33jI+XCO+nVWm3KbnCC 98Nj+L44CXVPAsPygdXjOrOoCyTOWela4qa7JAhOzh6k3yGmnTauTcxM8gxZtiozHXdLcvrpKdXX d4YHO7ETsYUM1MVl8fZeITnJQJsQThNCxcMKAbESaakERxRjLqjq6t/9OsXuTtJTTgVhbYbH6o6i qDm73XaErSYUdXlok6KIIui+lSynO7SFEiZn6AuAuHb+eFHcP83ksGldY1AhmaRKwtMVozHNh9mO t/8QKBtPaG9d2nB8GbuDVhoZ8B4YEbmNVgW+Mg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for best in the . zone
	DS=13966/SHA-256 has algorithm RSASHA256
	DS=41279/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`best. 86400 IN RRSIG ( DS 8 1 86400 20260719050000 20260706040000 57780 . hRTKmv8DytYiuT1Ij0pOVOsqrUXq3C+Te+I/fXnO4p07MNFX5u8NZxOsT33jI+XCO+nVWm3KbnCC 98Nj+L44CXVPAsPygdXjOrOoCyTOWela4qa7JAhOzh6k3yGmnTauTcxM8gxZtiozHXdLcvrpKdXX d4YHO7ETsYUM1MVl8fZeITnJQJsQThNCxcMKAbESaakERxRjLqjq6t/9OsXuTtJTTgVhbYbH6o6i qDm73XaErSYUdXlok6KIIui+lSynO7SFEiZn6AuAuHb+eFHcP83ksGldY1AhmaRKwtMVozHNh9mO t/8QKBtPaG9d2nB8GbuDVhoZ8B4YEbmNVgW+Mg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=13966/SHA-256 is now in the chain-of-trust
	DS=41279/SHA-256 is now in the chain-of-trust
	`best. 86400 IN DS ( 13966 8 2 1b34271dc3cac4d1faa279893902bd3330eab9675dab6dba03fd163437e7d12a )`
	`best. 86400 IN DS ( 41279 8 2 d0c266b147e9fa7122215ccca36b23d43407bd2f03b2e3b6e917d350b31aa5fd )`
	Query to d.nic.best for best/DNSKEY
	Received 749 bytes from 212.18.249.109
	;; Response received from [212.18.249.109] 749 octets ;; HEADER SECTION ;; id = 5340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; best. IN DNSKEY ;; ANSWER SECTION (3 records) best. 3600 IN DNSKEY ( 257 3 8 AwEAAdOIlhvqecTk15i7RyibJJf80yGJfHCcqZKriwL8KMfKBuQwBNz/X5Jj4sBFOAbjAiXm+Zfi vfjDNtbVLJM7PO1ecudEguPqDsb4nDTJtkY1xvJieM5CBka/bXG8v8NM8nkO/yqouUE/mGXAUUR9 HY/KHHLwE+eqv3AWW6cFl5luAgHqiAEZ9V+FGFOkrIXdwxU2sjAd/t6Z+oURG+efLClYlerwxjfR m8BjKDFik6GKDxI21b6S8bEpPogVvstkpjDFeRb2rp92pCj5kR7G2Fn5O/JqqnEQNoa6yyLgLIRT /iWmRjX3hoPzYoA9m2QAWSKxEof8tG2fhJ4VHXArpsU= ) ; keytag 13966 best. 3600 IN DNSKEY ( 256 3 8 AwEAAb/79vCZ+bwcZGSp69oacdxcXjGznDHdqtdUbjROueUbLASH/w2BJZ409Q9TFC446M3//G3x 9TAyUb5QYV055NruIDGXl0FeRcsiYk3Zxwk/ruxYF9pqmfpmNIf8BKmY2WshLP227YPxVzJRu08o rh+vKTyrQZHYdYMcJuum+KbN ) ; keytag 56476 best. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260715102713 20260615085713 13966 best. L0PH1l/6veBm5bRTAwe+a/rfGclFjncX4mCfnTEdybVBRwsEj+V//Ygz2dQV5Bz5Rj78/VEBtSRU +4k40JUS7ZLA4YOymTQPB7Z30TERkWIyn+yy/Q/KW8Wb6KTtphjpP+PWpaB7yjf/nv4E2xZCv9hP M04UXRJUteE0h2OXvnKYd2dwMLT3QlRyW0/uuWtDLuK6A5CcqZNnippUEXxknBwcc/uqTjl405kW PenDYitADZvXj16qeG4zM8OeKV8QqJoZMD2MDkNH1vVxE3i9DmsYd5j9cr/RBEzTfQRgbY36Idpb +RrZ4Le6dkfrjoxARm9oXitqrBxdsEqXIxUSKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for best
	`best. 3600 IN DNSKEY ( 257 3 8 AwEAAdOIlhvqecTk15i7RyibJJf80yGJfHCcqZKriwL8KMfKBuQwBNz/X5Jj4sBFOAbjAiXm+Zfi vfjDNtbVLJM7PO1ecudEguPqDsb4nDTJtkY1xvJieM5CBka/bXG8v8NM8nkO/yqouUE/mGXAUUR9 HY/KHHLwE+eqv3AWW6cFl5luAgHqiAEZ9V+FGFOkrIXdwxU2sjAd/t6Z+oURG+efLClYlerwxjfR m8BjKDFik6GKDxI21b6S8bEpPogVvstkpjDFeRb2rp92pCj5kR7G2Fn5O/JqqnEQNoa6yyLgLIRT /iWmRjX3hoPzYoA9m2QAWSKxEof8tG2fhJ4VHXArpsU= ) ; keytag 13966`
	`best. 3600 IN DNSKEY ( 256 3 8 AwEAAb/79vCZ+bwcZGSp69oacdxcXjGznDHdqtdUbjROueUbLASH/w2BJZ409Q9TFC446M3//G3x 9TAyUb5QYV055NruIDGXl0FeRcsiYk3Zxwk/ruxYF9pqmfpmNIf8BKmY2WshLP227YPxVzJRu08o rh+vKTyrQZHYdYMcJuum+KbN ) ; keytag 56476`
	DNSKEY=13966/SEP is now in the chain-of-trust
	DS=13966/SHA-256 verifies DNSKEY=13966/SEP
	DS=41279/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`best. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260715102713 20260615085713 13966 best. L0PH1l/6veBm5bRTAwe+a/rfGclFjncX4mCfnTEdybVBRwsEj+V//Ygz2dQV5Bz5Rj78/VEBtSRU +4k40JUS7ZLA4YOymTQPB7Z30TERkWIyn+yy/Q/KW8Wb6KTtphjpP+PWpaB7yjf/nv4E2xZCv9hP M04UXRJUteE0h2OXvnKYd2dwMLT3QlRyW0/uuWtDLuK6A5CcqZNnippUEXxknBwcc/uqTjl405kW PenDYitADZvXj16qeG4zM8OeKV8QqJoZMD2MDkNH1vVxE3i9DmsYd5j9cr/RBEzTfQRgbY36Idpb +RrZ4Le6dkfrjoxARm9oXitqrBxdsEqXIxUSKg== )`
	RRSIG=13966 and DNSKEY=13966/SEP verifies the DNSKEY RRset
	DNSKEY=56476 is now in the chain-of-trust
	Query to a.nic.best for livedrawmacau.best/A
	Received 590 bytes from 194.169.218.109
	;; Response received from [194.169.218.109] 590 octets ;; HEADER SECTION ;; id = 57193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) livedrawmacau.best. 3600 IN NS kyle.ns.cloudflare.com. livedrawmacau.best. 3600 IN NS janet.ns.cloudflare.com. cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN NSEC3 ( 1 1 0 - 41c7726dfgp48gt99nbenv6c9plbrag8 NS DS RRSIG ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN RRSIG ( NSEC3 8 2 900 20260722113213 20260622100213 56476 best. at8nb1Qfp3J7ubKseV/ZNE8plS1fKyGN4R4/Nh2QU14XT6Hk9ytEAde8Jw2L5zid8VxPBPubmcPp FwmyDhaKb3eunbtuADbCCl3sX3wq2ZQJdt4RR9NZl1IKBoWz4dKdwV0VuXRdTNUgNqwKNj0ixdex kNDCe9KCJekA0jFgzSc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.nic.best for livedrawmacau.best/DNSKEY
	Received 590 bytes from 212.18.249.109
	;; Response received from [212.18.249.109] 590 octets ;; HEADER SECTION ;; id = 37140 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) livedrawmacau.best. 3600 IN NS janet.ns.cloudflare.com. livedrawmacau.best. 3600 IN NS kyle.ns.cloudflare.com. cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN NSEC3 ( 1 1 0 - 41c7726dfgp48gt99nbenv6c9plbrag8 NS DS RRSIG ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN RRSIG ( NSEC3 8 2 900 20260722113213 20260622100213 56476 best. at8nb1Qfp3J7ubKseV/ZNE8plS1fKyGN4R4/Nh2QU14XT6Hk9ytEAde8Jw2L5zid8VxPBPubmcPp FwmyDhaKb3eunbtuADbCCl3sX3wq2ZQJdt4RR9NZl1IKBoWz4dKdwV0VuXRdTNUgNqwKNj0ixdex kNDCe9KCJekA0jFgzSc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone livedrawmacau.best

livedrawmacau.best

	Checking DS between best and livedrawmacau.best
	Query to c.nic.best for livedrawmacau.best/DS
	Received 763 bytes from 212.18.248.109
	;; Response received from [212.18.248.109] 763 octets ;; HEADER SECTION ;; id = 46519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) best. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 1527249677 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN NSEC3 ( 1 1 0 - cn8bt1knr9pekhbrj4ipep2virvga3uo NS SOA RRSIG DNSKEY NSEC3PARAM ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN NSEC3 ( 1 1 0 - 41c7726dfgp48gt99nbenv6c9plbrag8 NS DS RRSIG ) best. 900 IN RRSIG ( SOA 8 1 900 20260805105139 20260706092139 56476 best. cH24kYZMMb2JCoTM8SZUe0ETsLGmKFs95aITG/oXfnR9BvmQjBzyNsvy2WMom2/vMJP5meMnypXI eCYUN8a6W5LGlsZZ9rojo98StnU3LRadBoT5Y4D+7dL+mM64ECOCmUdr5sKWKlGX68vzflLBZrqn 3wbXYDKBVVRDiR8CnyM= ) cml1s4hnsek1fv7u0s6ubpa92ifsfi9b.best. 900 IN RRSIG ( NSEC3 8 2 900 20260803202211 20260704185211 56476 best. WrRByh/Yv+Jlk1S5pF0//2uWTB+tppJ/eQNyQAMJQuVjKjRvuj+CTMLfVz6W6sto02M2JoQ5ku6G naL+XP4eJG7QAhPPKDSxSMvJyQm3e0Ten40a0UslW3nOGYa+7g37o1Iq9Rbfp2auUUYqnG6vlDQB cSdu8JM+/fVAecR8Qus= ) 40kn8hjq7tauanm758cqcfq568gqd4rf.best. 900 IN RRSIG ( NSEC3 8 2 900 20260722113213 20260622100213 56476 best. at8nb1Qfp3J7ubKseV/ZNE8plS1fKyGN4R4/Nh2QU14XT6Hk9ytEAde8Jw2L5zid8VxPBPubmcPp FwmyDhaKb3eunbtuADbCCl3sX3wq2ZQJdt4RR9NZl1IKBoWz4dKdwV0VuXRdTNUgNqwKNj0ixdex kNDCe9KCJekA0jFgzSc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for livedrawmacau.best in the best zone
	Query to kyle.ns.cloudflare.com for livedrawmacau.best/DNSKEY
	Received 110 bytes from 162.159.44.111
	;; Response received from [162.159.44.111] 110 octets ;; HEADER SECTION ;; id = 11915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) livedrawmacau.best. 1800 IN SOA ( janet.ns.cloudflare.com. dns.cloudflare.com. 2407954475 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to kyle.ns.cloudflare.com for livedrawmacau.best/A
	Received 79 bytes from 108.162.195.111
	;; Response received from [108.162.195.111] 79 octets ;; HEADER SECTION ;; id = 11604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN A ;; ANSWER SECTION (2 records) livedrawmacau.best. 300 IN A 172.67.167.217 livedrawmacau.best. 300 IN A 104.21.34.34 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	kyle.ns.cloudflare.com is authoritative for livedrawmacau.best
	Query to janet.ns.cloudflare.com for livedrawmacau.best/SOA
	Received 110 bytes from 173.245.58.169
	;; Response received from [173.245.58.169] 110 octets ;; HEADER SECTION ;; id = 62434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN SOA ;; ANSWER SECTION (1 record) livedrawmacau.best. 1800 IN SOA ( janet.ns.cloudflare.com. dns.cloudflare.com. 2407954475 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to kyle.ns.cloudflare.com for livedrawmacau.best/A
	livedrawmacau.best A RR has value 172.67.167.217
	livedrawmacau.best A RR has value 104.21.34.34
	No RRSIGs found

livedrawmacau.best

	Query to janet.ns.cloudflare.com for livedrawmacau.best/A
	Received 79 bytes from 172.64.32.169
	;; Response received from [172.64.32.169] 79 octets ;; HEADER SECTION ;; id = 24602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; livedrawmacau.best. IN A ;; ANSWER SECTION (2 records) livedrawmacau.best. 300 IN A 172.67.167.217 livedrawmacau.best. 300 IN A 104.21.34.34 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	janet.ns.cloudflare.com is authoritative for livedrawmacau.best
	Query to janet.ns.cloudflare.com for livedrawmacau.best/A
	livedrawmacau.best A RR has value 172.67.167.217
	livedrawmacau.best A RR has value 104.21.34.34
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test livedrawmacau.best at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: