DNSSEC Debugger - maxone.plus

Domain Name:

Time: 2026-03-18 12:49:51 UTC

Analyzing DNSSEC problems for maxone.plus

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 45115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for maxone.plus/A
	Received 757 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 757 octets ;; HEADER SECTION ;; id = 58695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) plus. 172800 IN NS v0n0.nic.plus. plus. 172800 IN NS v0n1.nic.plus. plus. 172800 IN NS v0n2.nic.plus. plus. 172800 IN NS v0n3.nic.plus. plus. 172800 IN NS v2n0.nic.plus. plus. 172800 IN NS v2n1.nic.plus. plus. 86400 IN DS ( 5074 8 2 eae08e76fc529973567f9ede81dcad8090f91800ab271b798006ae563a538b2f ) plus. 86400 IN RRSIG ( DS 8 1 86400 20260331050000 20260318040000 21831 . Ha0a2WbdOw58gXVOmUVdfhbPgSP5Q0zWvpEIaNb7P1fh3YagglB1biRQ8T6aRd5Zp6lJZWbAuHDP FxzWMtr1PXu/wQPnXKzZL8+kFu43UEm+vJ/t9onP2Tkcz6oF3ZhcUMG9rzQ6P9zBg9zYCiXIpMxa hJU7O6f3JSrHN3ZAFca74sveBJpPj4/S1L4whiP69QHtUcTOD+Lct9U2k+b9j+X5QLKBJ3DrHtZX 0LUKesULKBtUq3GrYpnTu4iS2YwmeK7RiFGTuOVHl8iRzNEG9HUCK4vHDFo6f4qjIFvdAgjI3CHQ R0b/ZXjF29byfmKzJR7tLeNSF0HrcJX7hFZ4Pw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.plus. 172800 IN A 65.22.32.39 v0n0.nic.plus. 172800 IN AAAA 2a01:8840:22::39 v0n1.nic.plus. 172800 IN A 65.22.33.39 v0n1.nic.plus. 172800 IN AAAA 2a01:8840:23::39 v0n2.nic.plus. 172800 IN A 65.22.34.39 v0n2.nic.plus. 172800 IN AAAA 2a01:8840:24::39 v0n3.nic.plus. 172800 IN A 161.232.16.39 v0n3.nic.plus. 172800 IN AAAA 2a01:8840:fa::39 v2n0.nic.plus. 172800 IN A 65.22.35.39 v2n0.nic.plus. 172800 IN AAAA 2a01:8840:25::39 v2n1.nic.plus. 172800 IN A 161.232.17.39 v2n1.nic.plus. 172800 IN AAAA 2a01:8840:fb::39 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for plus/DNSKEY
	Received 750 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 750 octets ;; HEADER SECTION ;; id = 46592 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; plus. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) plus. 172800 IN NS v0n0.nic.plus. plus. 172800 IN NS v2n1.nic.plus. plus. 172800 IN NS v0n2.nic.plus. plus. 172800 IN NS v0n3.nic.plus. plus. 172800 IN NS v2n0.nic.plus. plus. 172800 IN NS v0n1.nic.plus. plus. 86400 IN DS ( 5074 8 2 eae08e76fc529973567f9ede81dcad8090f91800ab271b798006ae563a538b2f ) plus. 86400 IN RRSIG ( DS 8 1 86400 20260331050000 20260318040000 21831 . Ha0a2WbdOw58gXVOmUVdfhbPgSP5Q0zWvpEIaNb7P1fh3YagglB1biRQ8T6aRd5Zp6lJZWbAuHDP FxzWMtr1PXu/wQPnXKzZL8+kFu43UEm+vJ/t9onP2Tkcz6oF3ZhcUMG9rzQ6P9zBg9zYCiXIpMxa hJU7O6f3JSrHN3ZAFca74sveBJpPj4/S1L4whiP69QHtUcTOD+Lct9U2k+b9j+X5QLKBJ3DrHtZX 0LUKesULKBtUq3GrYpnTu4iS2YwmeK7RiFGTuOVHl8iRzNEG9HUCK4vHDFo6f4qjIFvdAgjI3CHQ R0b/ZXjF29byfmKzJR7tLeNSF0HrcJX7hFZ4Pw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.plus. 172800 IN A 65.22.32.39 v0n1.nic.plus. 172800 IN A 65.22.33.39 v0n2.nic.plus. 172800 IN A 65.22.34.39 v0n3.nic.plus. 172800 IN A 161.232.16.39 v2n0.nic.plus. 172800 IN A 65.22.35.39 v2n1.nic.plus. 172800 IN A 161.232.17.39 v0n0.nic.plus. 172800 IN AAAA 2a01:8840:22::39 v0n1.nic.plus. 172800 IN AAAA 2a01:8840:23::39 v0n2.nic.plus. 172800 IN AAAA 2a01:8840:24::39 v0n3.nic.plus. 172800 IN AAAA 2a01:8840:fa::39 v2n0.nic.plus. 172800 IN AAAA 2a01:8840:25::39 v2n1.nic.plus. 172800 IN AAAA 2a01:8840:fb::39 ;; { "EDNS-VERSION": 0 }
	Found child zone plus

plus

	Checking DS between . and plus
	Query to j.root-servers.net for plus/DS
	Received 368 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 368 octets ;; HEADER SECTION ;; id = 19159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; plus. IN DS ;; ANSWER SECTION (2 records) plus. 86400 IN DS ( 5074 8 2 eae08e76fc529973567f9ede81dcad8090f91800ab271b798006ae563a538b2f ) plus. 86400 IN RRSIG ( DS 8 1 86400 20260331050000 20260318040000 21831 . Ha0a2WbdOw58gXVOmUVdfhbPgSP5Q0zWvpEIaNb7P1fh3YagglB1biRQ8T6aRd5Zp6lJZWbAuHDP FxzWMtr1PXu/wQPnXKzZL8+kFu43UEm+vJ/t9onP2Tkcz6oF3ZhcUMG9rzQ6P9zBg9zYCiXIpMxa hJU7O6f3JSrHN3ZAFca74sveBJpPj4/S1L4whiP69QHtUcTOD+Lct9U2k+b9j+X5QLKBJ3DrHtZX 0LUKesULKBtUq3GrYpnTu4iS2YwmeK7RiFGTuOVHl8iRzNEG9HUCK4vHDFo6f4qjIFvdAgjI3CHQ R0b/ZXjF29byfmKzJR7tLeNSF0HrcJX7hFZ4Pw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for plus in the . zone
	DS=5074/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`plus. 86400 IN RRSIG ( DS 8 1 86400 20260331050000 20260318040000 21831 . Ha0a2WbdOw58gXVOmUVdfhbPgSP5Q0zWvpEIaNb7P1fh3YagglB1biRQ8T6aRd5Zp6lJZWbAuHDP FxzWMtr1PXu/wQPnXKzZL8+kFu43UEm+vJ/t9onP2Tkcz6oF3ZhcUMG9rzQ6P9zBg9zYCiXIpMxa hJU7O6f3JSrHN3ZAFca74sveBJpPj4/S1L4whiP69QHtUcTOD+Lct9U2k+b9j+X5QLKBJ3DrHtZX 0LUKesULKBtUq3GrYpnTu4iS2YwmeK7RiFGTuOVHl8iRzNEG9HUCK4vHDFo6f4qjIFvdAgjI3CHQ R0b/ZXjF29byfmKzJR7tLeNSF0HrcJX7hFZ4Pw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=5074/SHA-256 is now in the chain-of-trust
	`plus. 86400 IN DS ( 5074 8 2 eae08e76fc529973567f9ede81dcad8090f91800ab271b798006ae563a538b2f )`
	Query to v0n2.nic.plus for plus/DNSKEY
	Received 897 bytes from 65.22.34.39
	;; Response received from [65.22.34.39] 897 octets ;; HEADER SECTION ;; id = 45183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; plus. IN DNSKEY ;; ANSWER SECTION (4 records) plus. 3600 IN DNSKEY ( 256 3 8 AwEAAcgacwvNHjbRF//D9tY2qUwQH7ob4KzuGArNv7v/8Z0jRfMRptqMnuFhU2A/RgcEXNDlMvzr MuNJJGz84JfIssce8zekbHNsCDCYXL7MTC47g1FZx4J36+cBxg8SYrzQHVBnOg24XyDx9aTXXcb4 uQ2HkjtPYxVowmI4p80D3X9l ) ; keytag 53343 plus. 3600 IN DNSKEY ( 256 3 8 AwEAAdWOeCOdhPoZmnvq7lclCXko1aWxgnrjaU9W18V2IP4Hfm3wLOWEBNUhXxTlqCJaAccjbbO4 DpPAQ3BNRxqDSaANrAdIh57SvRSQKt9Mz6C8FDKWV8D0L8kh3canfTW1T+ED+oRty1e1SRBo7JKt fmsSX0nbg3Px7MwL2IP/aS2x ) ; keytag 756 plus. 3600 IN DNSKEY ( 257 3 8 AwEAAd25fEvlyBuGWXS1wa8GG+CqDvmFojKgwSHRPvKp2a1kNV+WTYKtXhzfAZo3xIyNDxx5Ysjx r4VRs6njjw9cRSYi75CdwHz8ll064Rnvd3VY4TbcxKPP1ujlv1QGYC2VInkSX8hlNLka7A7Xg5F5 wNt1y6XACysHFijiQ831bBUd18AjMvFO6Q/ZgwFmwgZ9NnRtPDuFZmqkOht6COgQnP3qW6verG9m 2OlgnDHZdA9HiH14pokXeT5TZB0dIj1iodqgZAKMEmxXKC73s24YqD1x8JpdRlb4SFg3iRvQXcjI d7W7tFRXdG7S99kgtNwFnevTKlISzk8L0DZ+IyD8Wwk= ) ; keytag 5074 plus. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260407155558 20260317145558 5074 plus. zbCn74iDFZeZ4HruRAKc9VNfLCGoNLwofH6Br3YpoOImqatXny46RUmtuJYG0RImOumn61yAfknP 8RRBu7lxGc9Dfl2AC4H3KqqGaxS0K9UykqpSe2JkPsusQwGvcXczbbnF6Lyg+VihSd5ChkygseQY P6vJMfcii8PWFFgn83qqlMfV9lRZA13eFulg30pY8+5H8vWgvJwaUzdsdhxx/y1lC+6Gi99WGMMn SBehYr9UlpYqLsfYPg5tk/bWVWXVXJACoNliF3WNIheL89xuzTDPixk5fo4Gz8sMxybqVi77Kk+4 LdSYNo1YWVT4K3VvArXypbDD80+uvzgQCEBHrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for plus
	`plus. 3600 IN DNSKEY ( 256 3 8 AwEAAcgacwvNHjbRF//D9tY2qUwQH7ob4KzuGArNv7v/8Z0jRfMRptqMnuFhU2A/RgcEXNDlMvzr MuNJJGz84JfIssce8zekbHNsCDCYXL7MTC47g1FZx4J36+cBxg8SYrzQHVBnOg24XyDx9aTXXcb4 uQ2HkjtPYxVowmI4p80D3X9l ) ; keytag 53343`
	`plus. 3600 IN DNSKEY ( 256 3 8 AwEAAdWOeCOdhPoZmnvq7lclCXko1aWxgnrjaU9W18V2IP4Hfm3wLOWEBNUhXxTlqCJaAccjbbO4 DpPAQ3BNRxqDSaANrAdIh57SvRSQKt9Mz6C8FDKWV8D0L8kh3canfTW1T+ED+oRty1e1SRBo7JKt fmsSX0nbg3Px7MwL2IP/aS2x ) ; keytag 756`
	`plus. 3600 IN DNSKEY ( 257 3 8 AwEAAd25fEvlyBuGWXS1wa8GG+CqDvmFojKgwSHRPvKp2a1kNV+WTYKtXhzfAZo3xIyNDxx5Ysjx r4VRs6njjw9cRSYi75CdwHz8ll064Rnvd3VY4TbcxKPP1ujlv1QGYC2VInkSX8hlNLka7A7Xg5F5 wNt1y6XACysHFijiQ831bBUd18AjMvFO6Q/ZgwFmwgZ9NnRtPDuFZmqkOht6COgQnP3qW6verG9m 2OlgnDHZdA9HiH14pokXeT5TZB0dIj1iodqgZAKMEmxXKC73s24YqD1x8JpdRlb4SFg3iRvQXcjI d7W7tFRXdG7S99kgtNwFnevTKlISzk8L0DZ+IyD8Wwk= ) ; keytag 5074`
	DNSKEY=5074/SEP is now in the chain-of-trust
	DS=5074/SHA-256 verifies DNSKEY=5074/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`plus. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260407155558 20260317145558 5074 plus. zbCn74iDFZeZ4HruRAKc9VNfLCGoNLwofH6Br3YpoOImqatXny46RUmtuJYG0RImOumn61yAfknP 8RRBu7lxGc9Dfl2AC4H3KqqGaxS0K9UykqpSe2JkPsusQwGvcXczbbnF6Lyg+VihSd5ChkygseQY P6vJMfcii8PWFFgn83qqlMfV9lRZA13eFulg30pY8+5H8vWgvJwaUzdsdhxx/y1lC+6Gi99WGMMn SBehYr9UlpYqLsfYPg5tk/bWVWXVXJACoNliF3WNIheL89xuzTDPixk5fo4Gz8sMxybqVi77Kk+4 LdSYNo1YWVT4K3VvArXypbDD80+uvzgQCEBHrQ== )`
	RRSIG=5074 and DNSKEY=5074/SEP verifies the DNSKEY RRset
	DNSKEY=53343 is now in the chain-of-trust
	DNSKEY=756 is now in the chain-of-trust
	Query to v0n1.nic.plus for maxone.plus/A
	Received 586 bytes from 65.22.33.39
	;; Response received from [65.22.33.39] 586 octets ;; HEADER SECTION ;; id = 16517 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) maxone.plus. 3600 IN NS ernest.ns.cloudflare.com. maxone.plus. 3600 IN NS olga.ns.cloudflare.com. c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN NSEC3 ( 1 1 0 73 c9belh3m5hsm340qfgrlm6gjdjk2vjp3 NS SOA RRSIG DNSKEY NSEC3PARAM ) c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260408124001 20260318114001 756 plus. Jpxe/B/7Vpg+8v7cWgld/RY6YYGRmVVX1tLmUa0uvestK0W3WLRAW5VSrSmo5bD6b3nvIudnevAr O8ZNqa4bobpD3KKeuTZe21/8iojYHGAURiKvYtBiU4Mch06/G+jZiP1iHJIaiOTkSp495BHmntNL y5xVIhTMo2ewV8fnbAA= ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN NSEC3 ( 1 1 0 73 g6bkatf7ugo1sa60a613hnd63mr78ot6 NS DS RRSIG ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260407155558 20260317145558 756 plus. XYn2/gJtG1w6oNvg/CpC9WfdgYJ3idpRpcQcPZpWfMW603TeltOw8i/k/a2QFpxauEhJ0PxzEa2s LxIARnKPqlQcQWkG7ke5Mc3n9Nh1SoP2aE3uZEIjsEceZwq9ryn96YRuoLtiwwj1Qo4C5/GegYyK WgN+QWfhjqMvN50Uyuw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n2.nic.plus for maxone.plus/DNSKEY
	Received 586 bytes from 65.22.34.39
	;; Response received from [65.22.34.39] 586 octets ;; HEADER SECTION ;; id = 59952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) maxone.plus. 3600 IN NS olga.ns.cloudflare.com. maxone.plus. 3600 IN NS ernest.ns.cloudflare.com. c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN NSEC3 ( 1 1 0 73 c9belh3m5hsm340qfgrlm6gjdjk2vjp3 NS SOA RRSIG DNSKEY NSEC3PARAM ) c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260408124001 20260318114001 756 plus. Jpxe/B/7Vpg+8v7cWgld/RY6YYGRmVVX1tLmUa0uvestK0W3WLRAW5VSrSmo5bD6b3nvIudnevAr O8ZNqa4bobpD3KKeuTZe21/8iojYHGAURiKvYtBiU4Mch06/G+jZiP1iHJIaiOTkSp495BHmntNL y5xVIhTMo2ewV8fnbAA= ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN NSEC3 ( 1 1 0 73 g6bkatf7ugo1sa60a613hnd63mr78ot6 NS DS RRSIG ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260407155558 20260317145558 756 plus. XYn2/gJtG1w6oNvg/CpC9WfdgYJ3idpRpcQcPZpWfMW603TeltOw8i/k/a2QFpxauEhJ0PxzEa2s LxIARnKPqlQcQWkG7ke5Mc3n9Nh1SoP2aE3uZEIjsEceZwq9ryn96YRuoLtiwwj1Qo4C5/GegYyK WgN+QWfhjqMvN50Uyuw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone maxone.plus

maxone.plus

	Checking DS between plus and maxone.plus
	Query to v0n2.nic.plus for maxone.plus/DS
	Received 761 bytes from 65.22.34.39
	;; Response received from [65.22.34.39] 761 octets ;; HEADER SECTION ;; id = 8091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN NSEC3 ( 1 1 0 73 c9belh3m5hsm340qfgrlm6gjdjk2vjp3 NS SOA RRSIG DNSKEY NSEC3PARAM ) c9a6p5ama2c7qba1546bfdqsp45ggmum.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260408124001 20260318114001 756 plus. Jpxe/B/7Vpg+8v7cWgld/RY6YYGRmVVX1tLmUa0uvestK0W3WLRAW5VSrSmo5bD6b3nvIudnevAr O8ZNqa4bobpD3KKeuTZe21/8iojYHGAURiKvYtBiU4Mch06/G+jZiP1iHJIaiOTkSp495BHmntNL y5xVIhTMo2ewV8fnbAA= ) plus. 3600 IN SOA ( v0n0.nic.plus. hostmaster.donuts.email. 1773837426 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) plus. 3600 IN RRSIG ( SOA 8 1 3600 20260408124001 20260318114001 756 plus. h9FU4BEhbI/5tdULu313pFWLQLtyWuKpCF9JVjvDiZxzAv5ZSrIc8TGqnBPsekzyv1VtAk4vmBUw Nq/RyNY2wrZrJJpFX6aJXpwNi0K+rUwHxL/1peadzsH1TH2VNtQ6H3Y51FVKkyyzob7Y5tl6akEF S592IdhIcWerZ/YuSNE= ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN NSEC3 ( 1 1 0 73 g6bkatf7ugo1sa60a613hnd63mr78ot6 NS DS RRSIG ) g5mekl9crqqto1oaf8a4kie5ipgr0ul6.plus. 3600 IN RRSIG ( NSEC3 8 2 3600 20260407155558 20260317145558 756 plus. XYn2/gJtG1w6oNvg/CpC9WfdgYJ3idpRpcQcPZpWfMW603TeltOw8i/k/a2QFpxauEhJ0PxzEa2s LxIARnKPqlQcQWkG7ke5Mc3n9Nh1SoP2aE3uZEIjsEceZwq9ryn96YRuoLtiwwj1Qo4C5/GegYyK WgN+QWfhjqMvN50Uyuw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for maxone.plus in the plus zone
	Query to olga.ns.cloudflare.com for maxone.plus/DNSKEY
	Received 104 bytes from 108.162.192.137
	;; Response received from [108.162.192.137] 104 octets ;; HEADER SECTION ;; id = 24795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) maxone.plus. 1800 IN SOA ( ernest.ns.cloudflare.com. dns.cloudflare.com. 2398121052 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ernest.ns.cloudflare.com for maxone.plus/A
	Received 72 bytes from 173.245.59.164
	;; Response received from [173.245.59.164] 72 octets ;; HEADER SECTION ;; id = 25750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (2 records) maxone.plus. 300 IN A 172.67.155.25 maxone.plus. 300 IN A 104.21.42.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ernest.ns.cloudflare.com is authoritative for maxone.plus
	Query to olga.ns.cloudflare.com for maxone.plus/SOA
	Received 104 bytes from 108.162.192.137
	;; Response received from [108.162.192.137] 104 octets ;; HEADER SECTION ;; id = 7253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN SOA ;; ANSWER SECTION (1 record) maxone.plus. 1800 IN SOA ( ernest.ns.cloudflare.com. dns.cloudflare.com. 2398121052 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ernest.ns.cloudflare.com for maxone.plus/A
	Received 72 bytes from 172.64.33.164
	;; Response received from [172.64.33.164] 72 octets ;; HEADER SECTION ;; id = 45204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (2 records) maxone.plus. 300 IN A 104.21.42.15 maxone.plus. 300 IN A 172.67.155.25 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	maxone.plus A RR has value 104.21.42.15
	maxone.plus A RR has value 172.67.155.25
	No RRSIGs found

maxone.plus

	Query to olga.ns.cloudflare.com for maxone.plus/A
	Received 72 bytes from 173.245.58.137
	;; Response received from [173.245.58.137] 72 octets ;; HEADER SECTION ;; id = 18164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (2 records) maxone.plus. 300 IN A 104.21.42.15 maxone.plus. 300 IN A 172.67.155.25 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	olga.ns.cloudflare.com is authoritative for maxone.plus
	Query to olga.ns.cloudflare.com for maxone.plus/A
	Received 72 bytes from 173.245.58.137
	;; Response received from [173.245.58.137] 72 octets ;; HEADER SECTION ;; id = 14637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maxone.plus. IN A ;; ANSWER SECTION (2 records) maxone.plus. 300 IN A 104.21.42.15 maxone.plus. 300 IN A 172.67.155.25 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	maxone.plus A RR has value 104.21.42.15
	maxone.plus A RR has value 172.67.155.25
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test maxone.plus at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: