DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-21 14:07:04 UTC

Analyzing DNSSEC problems for m3r.one

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 29859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to m.root-servers.net for m3r.one/A
	Received 738 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 738 octets ;; HEADER SECTION ;; id = 48522 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) one. 172800 IN NS c.nic.one. one. 172800 IN NS z.nic.one. one. 172800 IN NS y.nic.one. one. 172800 IN NS b.nic.one. one. 172800 IN NS a.nic.one. one. 172800 IN NS x.nic.one. one. 86400 IN DS ( 64939 8 2 32961f5f8cbfc0a1714eb5589e9cb54e83e1340380b5d76ead661d58ea55de9d ) one. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . iptlzIozJyEDR6H5S7xWPK5XnFCPQsC5KTmzHgUjppaeL14LCNe5Vc9xLL60OyFo5Bua5jQkBimz lcbxckjwwycTGa4pL274IH5VFsay0Y4iWgEB4/SM3xoQgsJ4iqRguK9Q2QObnS2kaml5zgwkgCal Wc7huBqsUBGNq8kuSX0+uIxAMODyw4IdEOcKYZhYku3mJu7QT8kq0RwXHJOOv56f8DkJz5qlwT8H 6/LnZ2jBvUVabE3JfcQVC4mCG12jZxXQG0NTmMPeAuxNBHDTW9pxt7dwLxNz1GRFA0vjhEVOq8N/ lEDYjwwWn5VmW5j759J8wxDqKOD3z7PT/3yZEg== ) ;; ADDITIONAL SECTION (13 records) z.nic.one. 172800 IN A 156.154.174.82 y.nic.one. 172800 IN A 156.154.173.82 x.nic.one. 172800 IN A 156.154.172.82 c.nic.one. 172800 IN A 37.209.196.9 b.nic.one. 172800 IN A 37.209.194.9 a.nic.one. 172800 IN A 37.209.192.9 z.nic.one. 172800 IN AAAA 2610:a1:1076::1:82 y.nic.one. 172800 IN AAAA 2610:a1:1075::1:82 x.nic.one. 172800 IN AAAA 2610:a1:1074::1:82 c.nic.one. 172800 IN AAAA 2001:dcd:3::9 b.nic.one. 172800 IN AAAA 2001:dcd:2::9 a.nic.one. 172800 IN AAAA 2001:dcd:1::9 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for one/DNSKEY
	Received 731 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 731 octets ;; HEADER SECTION ;; id = 4487 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; one. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) one. 172800 IN NS a.nic.one. one. 172800 IN NS b.nic.one. one. 172800 IN NS c.nic.one. one. 172800 IN NS x.nic.one. one. 172800 IN NS y.nic.one. one. 172800 IN NS z.nic.one. one. 86400 IN DS ( 64939 8 2 32961f5f8cbfc0a1714eb5589e9cb54e83e1340380b5d76ead661d58ea55de9d ) one. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . iptlzIozJyEDR6H5S7xWPK5XnFCPQsC5KTmzHgUjppaeL14LCNe5Vc9xLL60OyFo5Bua5jQkBimz lcbxckjwwycTGa4pL274IH5VFsay0Y4iWgEB4/SM3xoQgsJ4iqRguK9Q2QObnS2kaml5zgwkgCal Wc7huBqsUBGNq8kuSX0+uIxAMODyw4IdEOcKYZhYku3mJu7QT8kq0RwXHJOOv56f8DkJz5qlwT8H 6/LnZ2jBvUVabE3JfcQVC4mCG12jZxXQG0NTmMPeAuxNBHDTW9pxt7dwLxNz1GRFA0vjhEVOq8N/ lEDYjwwWn5VmW5j759J8wxDqKOD3z7PT/3yZEg== ) ;; ADDITIONAL SECTION (13 records) a.nic.one. 172800 IN A 37.209.192.9 a.nic.one. 172800 IN AAAA 2001:dcd:1::9 b.nic.one. 172800 IN A 37.209.194.9 b.nic.one. 172800 IN AAAA 2001:dcd:2::9 c.nic.one. 172800 IN A 37.209.196.9 c.nic.one. 172800 IN AAAA 2001:dcd:3::9 x.nic.one. 172800 IN A 156.154.172.82 x.nic.one. 172800 IN AAAA 2610:a1:1074::1:82 y.nic.one. 172800 IN A 156.154.173.82 y.nic.one. 172800 IN AAAA 2610:a1:1075::1:82 z.nic.one. 172800 IN A 156.154.174.82 z.nic.one. 172800 IN AAAA 2610:a1:1076::1:82 ;; { "EDNS-VERSION": 0 }
	Found child zone one

one

	Checking DS between . and one
	Query to h.root-servers.net for one/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 18559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; one. IN DS ;; ANSWER SECTION (2 records) one. 86400 IN DS ( 64939 8 2 32961f5f8cbfc0a1714eb5589e9cb54e83e1340380b5d76ead661d58ea55de9d ) one. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . iptlzIozJyEDR6H5S7xWPK5XnFCPQsC5KTmzHgUjppaeL14LCNe5Vc9xLL60OyFo5Bua5jQkBimz lcbxckjwwycTGa4pL274IH5VFsay0Y4iWgEB4/SM3xoQgsJ4iqRguK9Q2QObnS2kaml5zgwkgCal Wc7huBqsUBGNq8kuSX0+uIxAMODyw4IdEOcKYZhYku3mJu7QT8kq0RwXHJOOv56f8DkJz5qlwT8H 6/LnZ2jBvUVabE3JfcQVC4mCG12jZxXQG0NTmMPeAuxNBHDTW9pxt7dwLxNz1GRFA0vjhEVOq8N/ lEDYjwwWn5VmW5j759J8wxDqKOD3z7PT/3yZEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for one in the . zone
	DS=64939/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`one. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . iptlzIozJyEDR6H5S7xWPK5XnFCPQsC5KTmzHgUjppaeL14LCNe5Vc9xLL60OyFo5Bua5jQkBimz lcbxckjwwycTGa4pL274IH5VFsay0Y4iWgEB4/SM3xoQgsJ4iqRguK9Q2QObnS2kaml5zgwkgCal Wc7huBqsUBGNq8kuSX0+uIxAMODyw4IdEOcKYZhYku3mJu7QT8kq0RwXHJOOv56f8DkJz5qlwT8H 6/LnZ2jBvUVabE3JfcQVC4mCG12jZxXQG0NTmMPeAuxNBHDTW9pxt7dwLxNz1GRFA0vjhEVOq8N/ lEDYjwwWn5VmW5j759J8wxDqKOD3z7PT/3yZEg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=64939/SHA-256 is now in the chain-of-trust
	`one. 86400 IN DS ( 64939 8 2 32961f5f8cbfc0a1714eb5589e9cb54e83e1340380b5d76ead661d58ea55de9d )`
	Query to a.nic.one for one/DNSKEY
	Received 779 bytes from 37.209.192.9
	;; Response received from [37.209.192.9] 779 octets ;; HEADER SECTION ;; id = 46997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; one. IN DNSKEY ;; ANSWER SECTION (3 records) one. 3600 IN DNSKEY ( 257 3 8 AwEAAdLFyzbRH9eKdPuVjJi1iKmZj+Zg7nndQzh/2ghgIyBph/CtSCvggfgiHOFiFPZlpIrCKKL2 DqhNFOuqUiFXHh1TjezrjX7y91S9bJnMzFehhWNlMysMxESv7JnCqAklj9wgyP17SRhWksDHJzTJ bQ0cQ1gck/OhDlAXtrjBbUxTOUfKg2xYiFd3n4lme2K86c3oQxnX5zUAMGiRklaQr0ubYvxGRasD vI3MB8BD0XJs4b8AmbZCRIKQQCahw6Yl5/d+tJBREMOhMzmJm7M5Ki7CwmJ29+H5r70Wbm5sIzuY l5FCxUWNGppVwttGeqh7hl5pQszrAWshCFikWIbf1bs= ) ; keytag 64939 one. 3600 IN DNSKEY ( 256 3 8 AwEAAdTAjRN6dMywlHpHsv7LASNUqu0wd+FAfSLvPbinRnAWd7bGJeyI9Qy5yLPAncDz8Z+DEkS9 oq/1AD9eakpDIMkyHWsR7BcdrJeCH+E/Oyw53urwXNPtVQYcfljvl1eIQ/kz42Vn2Dwft0NX/MJn sZeHRj1ZeGgAZ+xWoc/Rcqad5p4bO563GVFY9m8tqIJwAp0aHJVuvi9fVRaB0alb+bs= ) ; keytag 4353 one. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260801170416 20260718160431 64939 one. 0kjemFriuvUwSj+D3FzAe1EYutl9CzENbJYJlLwUIiyT7S9BJqDnIM7hNTMWVqu1RYEO3VMg5Fsj Co+T5IwTe+pBMnwwQjIAabv6kb3bu7K3UGY8AUgufqR4PAcnBkYkhDJ/YR73/u63HEtmoCId7mvH 6DZiQIRqn7KPloGs1AFKYk1a6B9eIoSOfuD9yaifVGz/rzbUOPYsZpKMhjYXyFYIKlNIh/T727VE pyOf9zo4W99IyjAkirWRp0//pnBvthM/orWiJYWRtnk5JpSRB52Y3DBnPPymGjrP92Fn3M+TC25K g7FNLYhzlYUfqvaYU3u0048gy9c65zi/R2N9dw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for one
	`one. 3600 IN DNSKEY ( 257 3 8 AwEAAdLFyzbRH9eKdPuVjJi1iKmZj+Zg7nndQzh/2ghgIyBph/CtSCvggfgiHOFiFPZlpIrCKKL2 DqhNFOuqUiFXHh1TjezrjX7y91S9bJnMzFehhWNlMysMxESv7JnCqAklj9wgyP17SRhWksDHJzTJ bQ0cQ1gck/OhDlAXtrjBbUxTOUfKg2xYiFd3n4lme2K86c3oQxnX5zUAMGiRklaQr0ubYvxGRasD vI3MB8BD0XJs4b8AmbZCRIKQQCahw6Yl5/d+tJBREMOhMzmJm7M5Ki7CwmJ29+H5r70Wbm5sIzuY l5FCxUWNGppVwttGeqh7hl5pQszrAWshCFikWIbf1bs= ) ; keytag 64939`
	`one. 3600 IN DNSKEY ( 256 3 8 AwEAAdTAjRN6dMywlHpHsv7LASNUqu0wd+FAfSLvPbinRnAWd7bGJeyI9Qy5yLPAncDz8Z+DEkS9 oq/1AD9eakpDIMkyHWsR7BcdrJeCH+E/Oyw53urwXNPtVQYcfljvl1eIQ/kz42Vn2Dwft0NX/MJn sZeHRj1ZeGgAZ+xWoc/Rcqad5p4bO563GVFY9m8tqIJwAp0aHJVuvi9fVRaB0alb+bs= ) ; keytag 4353`
	DNSKEY=64939/SEP is now in the chain-of-trust
	DS=64939/SHA-256 verifies DNSKEY=64939/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`one. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260801170416 20260718160431 64939 one. 0kjemFriuvUwSj+D3FzAe1EYutl9CzENbJYJlLwUIiyT7S9BJqDnIM7hNTMWVqu1RYEO3VMg5Fsj Co+T5IwTe+pBMnwwQjIAabv6kb3bu7K3UGY8AUgufqR4PAcnBkYkhDJ/YR73/u63HEtmoCId7mvH 6DZiQIRqn7KPloGs1AFKYk1a6B9eIoSOfuD9yaifVGz/rzbUOPYsZpKMhjYXyFYIKlNIh/T727VE pyOf9zo4W99IyjAkirWRp0//pnBvthM/orWiJYWRtnk5JpSRB52Y3DBnPPymGjrP92Fn3M+TC25K g7FNLYhzlYUfqvaYU3u0048gy9c65zi/R2N9dw== )`
	RRSIG=64939 and DNSKEY=64939/SEP verifies the DNSKEY RRset
	DNSKEY=4353 is now in the chain-of-trust
	Query to x.nic.one for m3r.one/A
	Received 384 bytes from 156.154.172.82
	;; Response received from [156.154.172.82] 384 octets ;; HEADER SECTION ;; id = 60392 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) m3r.one. 3600 IN NS maceio.ns.porkbun.com. m3r.one. 3600 IN NS curitiba.ns.porkbun.com. m3r.one. 3600 IN NS salvador.ns.porkbun.com. m3r.one. 3600 IN NS fortaleza.ns.porkbun.com. m3r.one. 3600 IN DS ( 2371 13 2 ae0db647f204995e89ef6db504c0185782d9338debc68e1821dbf9dea00a75b5 ) m3r.one. 3600 IN RRSIG ( DS 8 2 3600 20260729211256 20260715211213 4353 one. ifFfaFrw9+m1RJ7GsQjU7oGPZwJHrZPl+zeq3nIAMwYq0rfG0dboX937E/F495LtgLeA4wOChNjl +FY9qucZpfmjLQSzIAEtnPQV/DCVQH+eyIJ0f2mRC0rnbZ/QBJQxsZaAo6Cp/KkJ70pYFckFKM6k RLBUIUyFqvN6VeCR1GOklBsEAVlG4YHdFvCAbIkno2LDL6po18VvwumX/qrz7w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to x.nic.one for m3r.one/DNSKEY
	Received 384 bytes from 156.154.172.82
	;; Response received from [156.154.172.82] 384 octets ;; HEADER SECTION ;; id = 38345 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) m3r.one. 3600 IN NS maceio.ns.porkbun.com. m3r.one. 3600 IN NS curitiba.ns.porkbun.com. m3r.one. 3600 IN NS salvador.ns.porkbun.com. m3r.one. 3600 IN NS fortaleza.ns.porkbun.com. m3r.one. 3600 IN DS ( 2371 13 2 ae0db647f204995e89ef6db504c0185782d9338debc68e1821dbf9dea00a75b5 ) m3r.one. 3600 IN RRSIG ( DS 8 2 3600 20260729211256 20260715211213 4353 one. ifFfaFrw9+m1RJ7GsQjU7oGPZwJHrZPl+zeq3nIAMwYq0rfG0dboX937E/F495LtgLeA4wOChNjl +FY9qucZpfmjLQSzIAEtnPQV/DCVQH+eyIJ0f2mRC0rnbZ/QBJQxsZaAo6Cp/KkJ70pYFckFKM6k RLBUIUyFqvN6VeCR1GOklBsEAVlG4YHdFvCAbIkno2LDL6po18VvwumX/qrz7w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone m3r.one

m3r.one

	Checking DS between one and m3r.one
	Query to c.nic.one for m3r.one/DS
	Received 279 bytes from 37.209.196.9
	;; Response received from [37.209.196.9] 279 octets ;; HEADER SECTION ;; id = 43618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN DS ;; ANSWER SECTION (2 records) m3r.one. 3600 IN DS ( 2371 13 2 ae0db647f204995e89ef6db504c0185782d9338debc68e1821dbf9dea00a75b5 ) m3r.one. 3600 IN RRSIG ( DS 8 2 3600 20260729211256 20260715211213 4353 one. ifFfaFrw9+m1RJ7GsQjU7oGPZwJHrZPl+zeq3nIAMwYq0rfG0dboX937E/F495LtgLeA4wOChNjl +FY9qucZpfmjLQSzIAEtnPQV/DCVQH+eyIJ0f2mRC0rnbZ/QBJQxsZaAo6Cp/KkJ70pYFckFKM6k RLBUIUyFqvN6VeCR1GOklBsEAVlG4YHdFvCAbIkno2LDL6po18VvwumX/qrz7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for m3r.one in the one zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`m3r.one. 3600 IN RRSIG ( DS 8 2 3600 20260729211256 20260715211213 4353 one. ifFfaFrw9+m1RJ7GsQjU7oGPZwJHrZPl+zeq3nIAMwYq0rfG0dboX937E/F495LtgLeA4wOChNjl +FY9qucZpfmjLQSzIAEtnPQV/DCVQH+eyIJ0f2mRC0rnbZ/QBJQxsZaAo6Cp/KkJ70pYFckFKM6k RLBUIUyFqvN6VeCR1GOklBsEAVlG4YHdFvCAbIkno2LDL6po18VvwumX/qrz7w== )`
	RRSIG=4353 and DNSKEY=4353 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`m3r.one. 3600 IN DS ( 2371 13 2 ae0db647f204995e89ef6db504c0185782d9338debc68e1821dbf9dea00a75b5 )`
	Query to fortaleza.ns.porkbun.com for m3r.one/DNSKEY
	Received 299 bytes from 162.159.8.140
	;; Response received from [162.159.8.140] 299 octets ;; HEADER SECTION ;; id = 22518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN DNSKEY ;; ANSWER SECTION (3 records) m3r.one. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 m3r.one. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 m3r.one. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260904214916 20260705214916 2371 m3r.one. k2hdyECIRM6xQl9l01wuZWaeBr2wTCZmn9kLXBrgUPO2Dbua8c2d/il4vceRYfPVqIifiI5+F92U 6D5PzAKKMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for m3r.one
	`m3r.one. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`m3r.one. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`m3r.one. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260904214916 20260705214916 2371 m3r.one. k2hdyECIRM6xQl9l01wuZWaeBr2wTCZmn9kLXBrgUPO2Dbua8c2d/il4vceRYfPVqIifiI5+F92U 6D5PzAKKMQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to maceio.ns.porkbun.com for m3r.one/A
	Received 155 bytes from 162.159.11.180
	;; Response received from [162.159.11.180] 155 octets ;; HEADER SECTION ;; id = 12387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (2 records) m3r.one. 600 IN A 23.94.123.251 m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. Wg92/Q7BlV7n7m2IjaZnts7MSSKz9MIRhjjinZnwIviCqdZ13eBPWqsFJ3TbCy3YfEWBE19Wlttw SILHxeibBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	maceio.ns.porkbun.com is authoritative for m3r.one
	Found RRSIG signed by m3r.one zone
	Query to curitiba.ns.porkbun.com for m3r.one/SOA
	Received 213 bytes from 173.245.58.37
	;; Response received from [173.245.58.37] 213 octets ;; HEADER SECTION ;; id = 60989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN SOA ;; ANSWER SECTION (2 records) m3r.one. 1800 IN SOA ( curitiba.ns.porkbun.com. dns.cloudflare.com. 2408860261 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) m3r.one. 1800 IN RRSIG ( SOA 13 2 1800 20260722150705 20260720130705 34505 m3r.one. 3ErJa8SyMlXVWZO2U677rZihdF1NLPnGCjJWpSV6PXqYQW73D6SGb7OOJ5q4FdS7Xkz8mMzMVaRS Gq7ofuAgXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to salvador.ns.porkbun.com for m3r.one/SOA
	Received 213 bytes from 162.159.10.150
	;; Response received from [162.159.10.150] 213 octets ;; HEADER SECTION ;; id = 15401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN SOA ;; ANSWER SECTION (2 records) m3r.one. 1800 IN SOA ( curitiba.ns.porkbun.com. dns.cloudflare.com. 2408860261 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) m3r.one. 1800 IN RRSIG ( SOA 13 2 1800 20260722150705 20260720130705 34505 m3r.one. dPeHciNeZX2ry1Fxcu9ou93C6GYr0cQIOsEtM17LldUEFf73fet8ryJBnwEX3+HA+g3boNfvllsY tC7b4HU3gw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to fortaleza.ns.porkbun.com for m3r.one/SOA
	Received 213 bytes from 162.159.8.140
	;; Response received from [162.159.8.140] 213 octets ;; HEADER SECTION ;; id = 30916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN SOA ;; ANSWER SECTION (2 records) m3r.one. 1800 IN SOA ( curitiba.ns.porkbun.com. dns.cloudflare.com. 2408860261 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) m3r.one. 1800 IN RRSIG ( SOA 13 2 1800 20260722150705 20260720130705 34505 m3r.one. 7LSax7j95HFCEHDDSDwLByaagkEcwoUaHX4A/aaYJvQWW0YqYtPYbkNKCIbTJwb3ANxPg5BNr0UF wdXw30cOZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to maceio.ns.porkbun.com for m3r.one/A
	m3r.one A RR has value 23.94.123.251
	Found 1 RRSIGs over A RRset
	`m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. Wg92/Q7BlV7n7m2IjaZnts7MSSKz9MIRhjjinZnwIviCqdZ13eBPWqsFJ3TbCy3YfEWBE19Wlttw SILHxeibBQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

m3r.one

	Query to curitiba.ns.porkbun.com for m3r.one/A
	Received 155 bytes from 173.245.58.37
	;; Response received from [173.245.58.37] 155 octets ;; HEADER SECTION ;; id = 3516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (2 records) m3r.one. 600 IN A 23.94.123.251 m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. 3oD/zqHUtNGdukDHTqqRjc/TZNTLDp/QJlBZgsIqiJfJFfQFdlUa1xJdpLmm0BVTs/h/9KBD03go EEbQZxSVyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	curitiba.ns.porkbun.com is authoritative for m3r.one
	Found RRSIG signed by m3r.one zone
	Query to curitiba.ns.porkbun.com for m3r.one/A
	m3r.one A RR has value 23.94.123.251
	Found 1 RRSIGs over A RRset
	`m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. 3oD/zqHUtNGdukDHTqqRjc/TZNTLDp/QJlBZgsIqiJfJFfQFdlUa1xJdpLmm0BVTs/h/9KBD03go EEbQZxSVyA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

m3r.one

	Query to fortaleza.ns.porkbun.com for m3r.one/A
	Received 155 bytes from 162.159.8.140
	;; Response received from [162.159.8.140] 155 octets ;; HEADER SECTION ;; id = 21223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (2 records) m3r.one. 600 IN A 23.94.123.251 m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. AxKWt4nhBRJ1ZuCqfW7uIKOOanvwZ0W25bnsL9/4XDK+UgQO+BnD5TWbNcz06CawOwEMJ3flwy0q uGSrvxO2pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fortaleza.ns.porkbun.com is authoritative for m3r.one
	Found RRSIG signed by m3r.one zone
	Query to fortaleza.ns.porkbun.com for m3r.one/A
	m3r.one A RR has value 23.94.123.251
	Found 1 RRSIGs over A RRset
	`m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. AxKWt4nhBRJ1ZuCqfW7uIKOOanvwZ0W25bnsL9/4XDK+UgQO+BnD5TWbNcz06CawOwEMJ3flwy0q uGSrvxO2pg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

m3r.one

	Query to salvador.ns.porkbun.com for m3r.one/A
	Received 155 bytes from 162.159.10.150
	;; Response received from [162.159.10.150] 155 octets ;; HEADER SECTION ;; id = 50467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; m3r.one. IN A ;; ANSWER SECTION (2 records) m3r.one. 600 IN A 23.94.123.251 m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. bk06puWXTbBl4Kp64wLkogCHep98oVYqWG1ZRBpghLCa+xgVUVOOer13Igm8+lE1V4w1H90i8hwj FGr+rnxg/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	salvador.ns.porkbun.com is authoritative for m3r.one
	Found RRSIG signed by m3r.one zone
	Query to salvador.ns.porkbun.com for m3r.one/A
	m3r.one A RR has value 23.94.123.251
	Found 1 RRSIGs over A RRset
	`m3r.one. 600 IN RRSIG ( A 13 2 600 20260722150705 20260720130705 34505 m3r.one. bk06puWXTbBl4Kp64wLkogCHep98oVYqWG1ZRBpghLCa+xgVUVOOer13Igm8+lE1V4w1H90i8hwj FGr+rnxg/Q== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test m3r.one at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: