DNSSEC Debugger - lkpp.go.id

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-21 14:08:42 UTC

Analyzing DNSSEC problems for lkpp.go.id

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 52580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to g.root-servers.net for lkpp.go.id/A
	Received 693 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 693 octets ;; HEADER SECTION ;; id = 37095 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS c.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS d.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . TQmV9mq+Astfjo/SZM5y3X+Wu5hELubDghQtmaJyy52T24I+u0qfBJYdVagsZjUmlTflgZbaqL9+ 3mrzdXuauMNITixNhGrnyArNUhuVVKXjCrAV34BTH5HbMX3aZJCQ9+iAh0zQ8FwrHJNIc+qNrNQg t212330xHzlMuDM4tctkRysMcqTELhcTK/U57qNlAVWuSroWgiAmyGmbZTI7ouVSppeFiX9yU4JZ IO0x9d45nUx0zzPKmTc56vXr5y13q2KV4AClmTPr7OgW27U/uydy05hqkdV4n32eNEb7WlOD1qo3 mpQpkeyc7X5nDqEQx3ZMhQ6W0IZCYyXELyWQAg== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN A 202.12.31.53 e.dns.id. 172800 IN A 103.19.177.177 d.dns.id. 172800 IN A 45.126.57.57 c.dns.id. 172800 IN A 103.19.178.178 b.dns.id. 172800 IN A 103.19.179.179 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 d.dns.id. 172800 IN AAAA 2402:ee80:d::d c.dns.id. 172800 IN AAAA 2402:ee80:c::c b.dns.id. 172800 IN AAAA 2402:ee80:b::b ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for id/DNSKEY
	Received 681 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 681 octets ;; HEADER SECTION ;; id = 64658 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . TQmV9mq+Astfjo/SZM5y3X+Wu5hELubDghQtmaJyy52T24I+u0qfBJYdVagsZjUmlTflgZbaqL9+ 3mrzdXuauMNITixNhGrnyArNUhuVVKXjCrAV34BTH5HbMX3aZJCQ9+iAh0zQ8FwrHJNIc+qNrNQg t212330xHzlMuDM4tctkRysMcqTELhcTK/U57qNlAVWuSroWgiAmyGmbZTI7ouVSppeFiX9yU4JZ IO0x9d45nUx0zzPKmTc56vXr5y13q2KV4AClmTPr7OgW27U/uydy05hqkdV4n32eNEb7WlOD1qo3 mpQpkeyc7X5nDqEQx3ZMhQ6W0IZCYyXELyWQAg== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Found child zone id

	Checking DS between . and id
	Query to e.root-servers.net for id/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 51807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (2 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . TQmV9mq+Astfjo/SZM5y3X+Wu5hELubDghQtmaJyy52T24I+u0qfBJYdVagsZjUmlTflgZbaqL9+ 3mrzdXuauMNITixNhGrnyArNUhuVVKXjCrAV34BTH5HbMX3aZJCQ9+iAh0zQ8FwrHJNIc+qNrNQg t212330xHzlMuDM4tctkRysMcqTELhcTK/U57qNlAVWuSroWgiAmyGmbZTI7ouVSppeFiX9yU4JZ IO0x9d45nUx0zzPKmTc56vXr5y13q2KV4AClmTPr7OgW27U/uydy05hqkdV4n32eNEb7WlOD1qo3 mpQpkeyc7X5nDqEQx3ZMhQ6W0IZCYyXELyWQAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . TQmV9mq+Astfjo/SZM5y3X+Wu5hELubDghQtmaJyy52T24I+u0qfBJYdVagsZjUmlTflgZbaqL9+ 3mrzdXuauMNITixNhGrnyArNUhuVVKXjCrAV34BTH5HbMX3aZJCQ9+iAh0zQ8FwrHJNIc+qNrNQg t212330xHzlMuDM4tctkRysMcqTELhcTK/U57qNlAVWuSroWgiAmyGmbZTI7ouVSppeFiX9yU4JZ IO0x9d45nUx0zzPKmTc56vXr5y13q2KV4AClmTPr7OgW27U/uydy05hqkdV4n32eNEb7WlOD1qo3 mpQpkeyc7X5nDqEQx3ZMhQ6W0IZCYyXELyWQAg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to b.dns.id for id/DNSKEY
	Received 873 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 873 octets ;; HEADER SECTION ;; id = 7876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (3 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260812044026 20260713041443 26887 id. dwHvfFVv4vTInd+3m3KWUUyWk75GgKSaku9n5Ajr5GLQdAvrMMTvGEuohiC9XQMRY2g6RoJINjlu jaW/qgYMrem6mm0SiEUcMGVKOYSFgjaVLTdRRiGxWaXg3dld3NVfQa3Nk9C03EiuB2b9oKDnm8lh jFz6ggRCi4LVBEc9Q+jtSg1INM24pLV2cm9+KOoIDqsIo7J4+7vYCNgXt4NVN1lapDCNyxPuVv7r rBMA6ph8rmShbtWcDxX8bl+jqNEVHnGy2MIdnBkCNasLr2PNM2T1/ytkEr65Jj6MODWY0YppE4Jp 9xU/o7qApd2TFhSc+Dth9WKz2ZHuydugQUXzQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; keytag 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; keytag 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260812044026 20260713041443 26887 id. dwHvfFVv4vTInd+3m3KWUUyWk75GgKSaku9n5Ajr5GLQdAvrMMTvGEuohiC9XQMRY2g6RoJINjlu jaW/qgYMrem6mm0SiEUcMGVKOYSFgjaVLTdRRiGxWaXg3dld3NVfQa3Nk9C03EiuB2b9oKDnm8lh jFz6ggRCi4LVBEc9Q+jtSg1INM24pLV2cm9+KOoIDqsIo7J4+7vYCNgXt4NVN1lapDCNyxPuVv7r rBMA6ph8rmShbtWcDxX8bl+jqNEVHnGy2MIdnBkCNasLr2PNM2T1/ytkEr65Jj6MODWY0YppE4Jp 9xU/o7qApd2TFhSc+Dth9WKz2ZHuydugQUXzQQ== )`
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to e.dns.id for lkpp.go.id/A
	Received 238 bytes from 103.19.177.177
	;; Response received from [103.19.177.177] 238 octets ;; HEADER SECTION ;; id = 44641 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) lkpp.go.id. 3600 IN NS hugh.ns.cloudflare.com. lkpp.go.id. 3600 IN NS emerie.ns.cloudflare.com. lkpp.go.id. 86400 IN NSEC lombok-tengah.go.id. NS RRSIG NSEC lkpp.go.id. 86400 IN RRSIG ( NSEC 13 3 86400 20260812144951 20260713141330 6358 go.id. z6WlZQNNlW8LFwWt/iuM+DQdR7kifEbD8EYssruPaNDCVDkRh6rINEUucwmSVBDC2lbkZnwyPxov sffUr1LZPA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.dns.id for go.id/DNSKEY
	Received 295 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 295 octets ;; HEADER SECTION ;; id = 12243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DNSKEY ;; ANSWER SECTION (3 records) go.id. 86400 IN DNSKEY ( 256 3 13 yRodYKsowKIljuA/kF1TW/eox2wJW+8bnoCMt6cFKdMAUQOYv80ZMTcoSTmUtI6ANOYbDsGzLoUU XRxDlwGdEA== ) ; keytag 6358 go.id. 86400 IN DNSKEY ( 257 3 13 T3w2iw97ZKUCGLQkTWrO6juUU9uaYMoTw7CgHQAI3S81FEx3v6euK7tfaGBD4Meh9FlZvRFxw32d yfiPvjgzbg== ) ; keytag 53081 go.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260729211239 20260629204616 53081 go.id. /9xfGhKAN7OgJ5lVDZAbchG11EW34ZD6t2yLbD51TGwTGEt1r/d6Br5UYVfSqMCDfWAIaIF3R6lg mkDio+GAOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone go.id
	Attempting to learn nameservers for go.id
	Query to d.dns.id for go.id/NS
	Received 219 bytes from 45.126.57.57
	;; Response received from [45.126.57.57] 219 octets ;; HEADER SECTION ;; id = 43049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN NS ;; ANSWER SECTION (6 records) go.id. 86400 IN NS b.dns.id. go.id. 86400 IN NS c.dns.id. go.id. 86400 IN NS d.dns.id. go.id. 86400 IN NS e.dns.id. go.id. 86400 IN NS f.dns.id. go.id. 86400 IN RRSIG ( NS 13 2 86400 20260806205637 20260707202858 6358 go.id. GQ2aJhi1meyEqqZ2PlqGnpyL5vFhqM3wtz2au+TIOdCmen19i6JFDsiWR2FoLOG3nxa3yPXvCkov Vb/oHMcSfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found go.id nameservers: b.dns.id, c.dns.id, d.dns.id, e.dns.id, f.dns.id

go.id

	Checking DS between id and go.id
	Query to b.dns.id for go.id/DS
	Received 372 bytes from 103.19.179.179
	;; Response received from [103.19.179.179] 372 octets ;; HEADER SECTION ;; id = 34004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DS ;; ANSWER SECTION (2 records) go.id. 13300 IN DS ( 53081 13 2 a90380c64104a5a74e4bfee814ed4604e48276b5f06b14d3ff88874d7ced2872 ) go.id. 13300 IN RRSIG ( DS 8 2 13300 20260816101215 20260717092520 22449 id. biiJ/r0bQt+9vaKTFPIzcqV8f63UgMMfdK5EPBLRtZWWA6k0yA5VX2EPKJX6+7QfWbyTvp3zFkb2 a3K7vQFnxsqyOrzfXB41a4+CWzxkZw98OeNQYp0ge346vg2w5QZR0/B/9Swn6GmxaojfUj97bbAA sP7N1tQt/16uFgBg4B40k+3vH1DHknbfFMcyTabi+f307/3FfKmo9zelWKFGzqSE75g+aPQhG82T zr3JdQFUFaEkTmf/ae32IRkUvwOQkqnAHG60lmD+YSkX50nuCWNeQD1pm1CLULonD2qj6vzgONF1 5eFyGz7sN8zEE+WlkAbaFwrsfv1UUdnZxNYEzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for go.id in the id zone
	DS=53081/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`go.id. 13300 IN RRSIG ( DS 8 2 13300 20260816101215 20260717092520 22449 id. biiJ/r0bQt+9vaKTFPIzcqV8f63UgMMfdK5EPBLRtZWWA6k0yA5VX2EPKJX6+7QfWbyTvp3zFkb2 a3K7vQFnxsqyOrzfXB41a4+CWzxkZw98OeNQYp0ge346vg2w5QZR0/B/9Swn6GmxaojfUj97bbAA sP7N1tQt/16uFgBg4B40k+3vH1DHknbfFMcyTabi+f307/3FfKmo9zelWKFGzqSE75g+aPQhG82T zr3JdQFUFaEkTmf/ae32IRkUvwOQkqnAHG60lmD+YSkX50nuCWNeQD1pm1CLULonD2qj6vzgONF1 5eFyGz7sN8zEE+WlkAbaFwrsfv1UUdnZxNYEzg== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=53081/SHA-256 is now in the chain-of-trust
	`go.id. 13300 IN DS ( 53081 13 2 a90380c64104a5a74e4bfee814ed4604e48276b5f06b14d3ff88874d7ced2872 )`
	Query to c.dns.id for go.id/DNSKEY
	Received 295 bytes from 103.19.178.178
	;; Response received from [103.19.178.178] 295 octets ;; HEADER SECTION ;; id = 25328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; go.id. IN DNSKEY ;; ANSWER SECTION (3 records) go.id. 86400 IN DNSKEY ( 256 3 13 yRodYKsowKIljuA/kF1TW/eox2wJW+8bnoCMt6cFKdMAUQOYv80ZMTcoSTmUtI6ANOYbDsGzLoUU XRxDlwGdEA== ) ; keytag 6358 go.id. 86400 IN DNSKEY ( 257 3 13 T3w2iw97ZKUCGLQkTWrO6juUU9uaYMoTw7CgHQAI3S81FEx3v6euK7tfaGBD4Meh9FlZvRFxw32d yfiPvjgzbg== ) ; keytag 53081 go.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260729211239 20260629204616 53081 go.id. /9xfGhKAN7OgJ5lVDZAbchG11EW34ZD6t2yLbD51TGwTGEt1r/d6Br5UYVfSqMCDfWAIaIF3R6lg mkDio+GAOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for go.id
	`go.id. 86400 IN DNSKEY ( 256 3 13 yRodYKsowKIljuA/kF1TW/eox2wJW+8bnoCMt6cFKdMAUQOYv80ZMTcoSTmUtI6ANOYbDsGzLoUU XRxDlwGdEA== ) ; keytag 6358`
	`go.id. 86400 IN DNSKEY ( 257 3 13 T3w2iw97ZKUCGLQkTWrO6juUU9uaYMoTw7CgHQAI3S81FEx3v6euK7tfaGBD4Meh9FlZvRFxw32d yfiPvjgzbg== ) ; keytag 53081`
	DNSKEY=53081/SEP is now in the chain-of-trust
	DS=53081/SHA-256 verifies DNSKEY=53081/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`go.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260729211239 20260629204616 53081 go.id. /9xfGhKAN7OgJ5lVDZAbchG11EW34ZD6t2yLbD51TGwTGEt1r/d6Br5UYVfSqMCDfWAIaIF3R6lg mkDio+GAOQ== )`
	RRSIG=53081 and DNSKEY=53081/SEP verifies the DNSKEY RRset
	DNSKEY=6358 is now in the chain-of-trust
	Query to f.dns.id for lkpp.go.id/A
	Received 238 bytes from 203.119.112.112
	;; Response received from [203.119.112.112] 238 octets ;; HEADER SECTION ;; id = 37396 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) lkpp.go.id. 3600 IN NS hugh.ns.cloudflare.com. lkpp.go.id. 3600 IN NS emerie.ns.cloudflare.com. lkpp.go.id. 86400 IN NSEC lombok-tengah.go.id. NS RRSIG NSEC lkpp.go.id. 86400 IN RRSIG ( NSEC 13 3 86400 20260812144951 20260713141330 6358 go.id. z6WlZQNNlW8LFwWt/iuM+DQdR7kifEbD8EYssruPaNDCVDkRh6rINEUucwmSVBDC2lbkZnwyPxov sffUr1LZPA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.dns.id for lkpp.go.id/DNSKEY
	Received 238 bytes from 203.119.112.112
	;; Response received from [203.119.112.112] 238 octets ;; HEADER SECTION ;; id = 60989 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) lkpp.go.id. 3600 IN NS hugh.ns.cloudflare.com. lkpp.go.id. 3600 IN NS emerie.ns.cloudflare.com. lkpp.go.id. 86400 IN NSEC lombok-tengah.go.id. NS RRSIG NSEC lkpp.go.id. 86400 IN RRSIG ( NSEC 13 3 86400 20260812144951 20260713141330 6358 go.id. z6WlZQNNlW8LFwWt/iuM+DQdR7kifEbD8EYssruPaNDCVDkRh6rINEUucwmSVBDC2lbkZnwyPxov sffUr1LZPA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone lkpp.go.id

lkpp.go.id

	Checking DS between go.id and lkpp.go.id
	Query to e.dns.id for lkpp.go.id/DS
	Received 341 bytes from 103.19.177.177
	;; Response received from [103.19.177.177] 341 octets ;; HEADER SECTION ;; id = 39226 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) go.id. 86400 IN SOA ( b.dns.id. hostmaster.pandi.id. 2025162881 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 172800 ;minimum ) go.id. 86400 IN RRSIG ( SOA 13 2 86400 20260820140559 20260721130559 6358 go.id. mQtYTGHiLsQUGGaeuw0tYagshba+h3ww3HPd3bhdhuuOJwxwW18LcGRJVJJZXkbzZZ7/KCyUdumK w6Jje5/dcg== ) lkpp.go.id. 86400 IN NSEC lombok-tengah.go.id. NS RRSIG NSEC lkpp.go.id. 86400 IN RRSIG ( NSEC 13 3 86400 20260812144951 20260713141330 6358 go.id. z6WlZQNNlW8LFwWt/iuM+DQdR7kifEbD8EYssruPaNDCVDkRh6rINEUucwmSVBDC2lbkZnwyPxov sffUr1LZPA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for lkpp.go.id in the go.id zone
	Query to emerie.ns.cloudflare.com for lkpp.go.id/DNSKEY
	Received 103 bytes from 108.162.194.115
	;; Response received from [108.162.194.115] 103 octets ;; HEADER SECTION ;; id = 54325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) lkpp.go.id. 1800 IN SOA ( emerie.ns.cloudflare.com. dns.cloudflare.com. 2410097596 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to emerie.ns.cloudflare.com for lkpp.go.id/A
	Received 55 bytes from 172.64.34.115
	;; Response received from [172.64.34.115] 55 octets ;; HEADER SECTION ;; id = 45366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN A ;; ANSWER SECTION (1 record) lkpp.go.id. 300 IN A 103.55.160.132 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	emerie.ns.cloudflare.com is authoritative for lkpp.go.id
	Query to hugh.ns.cloudflare.com for lkpp.go.id/SOA
	Received 103 bytes from 172.64.33.117
	;; Response received from [172.64.33.117] 103 octets ;; HEADER SECTION ;; id = 14187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN SOA ;; ANSWER SECTION (1 record) lkpp.go.id. 1800 IN SOA ( emerie.ns.cloudflare.com. dns.cloudflare.com. 2410097596 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to emerie.ns.cloudflare.com for lkpp.go.id/A
	lkpp.go.id A RR has value 103.55.160.132
	No RRSIGs found

lkpp.go.id

	Query to hugh.ns.cloudflare.com for lkpp.go.id/A
	Received 55 bytes from 172.64.33.117
	;; Response received from [172.64.33.117] 55 octets ;; HEADER SECTION ;; id = 4057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lkpp.go.id. IN A ;; ANSWER SECTION (1 record) lkpp.go.id. 300 IN A 103.55.160.132 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hugh.ns.cloudflare.com is authoritative for lkpp.go.id
	Query to hugh.ns.cloudflare.com for lkpp.go.id/A
	lkpp.go.id A RR has value 103.55.160.132
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lkpp.go.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: