DNSSEC Debugger

Domain Name:

Time: 2024-07-27 07:14:47 UTC

Analyzing DNSSEC problems for msu.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 31278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to e.root-servers.net for msu.ru/A
	Received 682 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 682 octets ;; HEADER SECTION ;; id = 5794 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . uw42Ng092Kznp/+ESMPftuuNPwy8UdxzCTEUR9to3uJqHsp3sFDVMa5l6W0URvmk6Z557qWr0GhC McLNwQN9iAke9YIspsKJ/w8thzcJXCVOpgJNHSKtbLwZsOQBm/hNl5HxG2rxWzZEm00JnbOHeE3J ftHUDup6LVIy28s/g7nlHL+jNCElNLFwOWRhzVUfc+8pOOrc/sebyL+ZXWn8aJrDmVrCqnokX3qo 9ZCfOP3vTjByn+M2/GKBFng6ud7E5je3f2ZpKmPyLRRdWGqVHJPPrKjCI2cWeMabnMJREi30gtjG nlsj5NMGF9rEG8cY7+EWcr0268IG8cSpfabqHA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for ru/DNSKEY
	Received 678 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 678 octets ;; HEADER SECTION ;; id = 55384 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . uw42Ng092Kznp/+ESMPftuuNPwy8UdxzCTEUR9to3uJqHsp3sFDVMa5l6W0URvmk6Z557qWr0GhC McLNwQN9iAke9YIspsKJ/w8thzcJXCVOpgJNHSKtbLwZsOQBm/hNl5HxG2rxWzZEm00JnbOHeE3J ftHUDup6LVIy28s/g7nlHL+jNCElNLFwOWRhzVUfc+8pOOrc/sebyL+ZXWn8aJrDmVrCqnokX3qo 9ZCfOP3vTjByn+M2/GKBFng6ud7E5je3f2ZpKmPyLRRdWGqVHJPPrKjCI2cWeMabnMJREi30gtjG nlsj5NMGF9rEG8cY7+EWcr0268IG8cSpfabqHA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to k.root-servers.net for ru/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 39716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . uw42Ng092Kznp/+ESMPftuuNPwy8UdxzCTEUR9to3uJqHsp3sFDVMa5l6W0URvmk6Z557qWr0GhC McLNwQN9iAke9YIspsKJ/w8thzcJXCVOpgJNHSKtbLwZsOQBm/hNl5HxG2rxWzZEm00JnbOHeE3J ftHUDup6LVIy28s/g7nlHL+jNCElNLFwOWRhzVUfc+8pOOrc/sebyL+ZXWn8aJrDmVrCqnokX3qo 9ZCfOP3vTjByn+M2/GKBFng6ud7E5je3f2ZpKmPyLRRdWGqVHJPPrKjCI2cWeMabnMJREi30gtjG nlsj5NMGF9rEG8cY7+EWcr0268IG8cSpfabqHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=43786/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . uw42Ng092Kznp/+ESMPftuuNPwy8UdxzCTEUR9to3uJqHsp3sFDVMa5l6W0URvmk6Z557qWr0GhC McLNwQN9iAke9YIspsKJ/w8thzcJXCVOpgJNHSKtbLwZsOQBm/hNl5HxG2rxWzZEm00JnbOHeE3J ftHUDup6LVIy28s/g7nlHL+jNCElNLFwOWRhzVUfc+8pOOrc/sebyL+ZXWn8aJrDmVrCqnokX3qo 9ZCfOP3vTjByn+M2/GKBFng6ud7E5je3f2ZpKmPyLRRdWGqVHJPPrKjCI2cWeMabnMJREi30gtjG nlsj5NMGF9rEG8cY7+EWcr0268IG8cSpfabqHA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=43786/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 )`
	Query to a.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 745 octets ;; HEADER SECTION ;; id = 60472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786 ru. 345600 IN DNSKEY ( 256 3 8 AwEAAa3FMysE0e09eg+ogcc38rb1w8O6aNgcU/yDkKlVVek4+7V9xHLOmIoCEeqGstSsJ0efMGX1 8eWpQoXAcBs82YN6+ixSDtwSz1IHMjVL1EUmY1HI1r8vUKH2iYx6zY+oYzEvdD2Bd55a2u0VRJ3w 9pm+HqEkogWByBtlJmuveN13 ) ; Key ID = 35739 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240807000000 20240718000000 43786 ru. dn3WlCa9AtUeXtPaNRjmYt9vKQOwac1WBJM9RVN22hHCrwLLZqhTgypTZawhEQOpuqLe7r7ybtmx B8iutQb7cLwHJgUdUf+d97SCPmUMaoQVKSz9GHUTgHbIFQPPTIV+HUzvICP/t4IB7aGsR2Y1HhWQ 6s9yMcjM5CTC0uxutT5DN0vmHei79+GXwdSz+CfTtfQ+ParIfGAQTtqg51Fi1bGlMLFYabYVRV8S QUM+Q3BPG08ziYM2MVeIP/9vudTqIkE0DDBVtwGr8JaAGEox2WjPtv77/iaqlAsxRdVKCxwXmHVf Um94fIjYok2JJwts++7ztbE9K6GV3t6+OhbKBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786`
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAa3FMysE0e09eg+ogcc38rb1w8O6aNgcU/yDkKlVVek4+7V9xHLOmIoCEeqGstSsJ0efMGX1 8eWpQoXAcBs82YN6+ixSDtwSz1IHMjVL1EUmY1HI1r8vUKH2iYx6zY+oYzEvdD2Bd55a2u0VRJ3w 9pm+HqEkogWByBtlJmuveN13 ) ; Key ID = 35739`
	DNSKEY=43786/SEP is now in the chain-of-trust
	DS=43786/SHA-256 verifies DNSKEY=43786/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240807000000 20240718000000 43786 ru. dn3WlCa9AtUeXtPaNRjmYt9vKQOwac1WBJM9RVN22hHCrwLLZqhTgypTZawhEQOpuqLe7r7ybtmx B8iutQb7cLwHJgUdUf+d97SCPmUMaoQVKSz9GHUTgHbIFQPPTIV+HUzvICP/t4IB7aGsR2Y1HhWQ 6s9yMcjM5CTC0uxutT5DN0vmHei79+GXwdSz+CfTtfQ+ParIfGAQTtqg51Fi1bGlMLFYabYVRV8S QUM+Q3BPG08ziYM2MVeIP/9vudTqIkE0DDBVtwGr8JaAGEox2WjPtv77/iaqlAsxRdVKCxwXmHVf Um94fIjYok2JJwts++7ztbE9K6GV3t6+OhbKBA== )`
	RRSIG=43786 and DNSKEY=43786/SEP verifies the DNSKEY RRset
	DNSKEY=35739 is now in the chain-of-trust
	Query to f.dns.ripn.net for msu.ru/A
	Received 611 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 611 octets ;; HEADER SECTION ;; id = 43717 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) MSU.RU. 345600 IN NS ns3.nic.fr. MSU.RU. 345600 IN NS ns.msu.net. MSU.RU. 345600 IN NS ns.msu.RU. J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240811153126 20240705081834 35739 ru. IfD4zcSOn8nyslwRrefRX0t0F50NtcSx9JmL7x02JFecn5NpyqH5Db8ksvNNfUb1IkEB6H75i1B5 lm+i3ngnbbNxX69qpWh79Oe9T2AaT1clYjGdHfyUmw1PIF/jziBGKFSPV9thKiXR5IoGtf/nBV1i 8zI8rJxbD0Vt7t7WnZU= ) 9PSKGQ3B84FPF5VC9AUB7MNHUJ86O85H.ru. 3600 IN NSEC3 ( 1 1 0 - 9pv6qoi7qalhr3rfp782juuv6peeuhdg NS DS RRSIG ) 9PSKGQ3B84FPF5VC9AUB7MNHUJ86O85H.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240812030452 20240705081834 35739 ru. NQtM5SrPnobNBLGeqw1GI3NVifAjZiM+W9rZvF8/S252MTE/V4J+7Tf/Pbdnl1QtkY6zDLggQNpv 7VAsYxZQ+3BBZMY6MVoL0IiatH59G9r13gmDD1M3wN4j8FheoYVgowPRiIk9VMAKB9TN7SDRv/8c WJn82DQin5miCwEunf0= ) ;; ADDITIONAL SECTION (2 records) ns.msu.RU. 345600 IN A 93.180.0.1 ;; { "EDNS-VERSION": 0 }
	Query to e.dns.ripn.net for msu.ru/DNSKEY
	Received 614 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 614 octets ;; HEADER SECTION ;; id = 51595 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) MSU.RU. 345600 IN NS ns.msu.net. MSU.RU. 345600 IN NS ns3.nic.fr. MSU.RU. 345600 IN NS ns.msu.RU. J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240811153126 20240705081834 35739 ru. IfD4zcSOn8nyslwRrefRX0t0F50NtcSx9JmL7x02JFecn5NpyqH5Db8ksvNNfUb1IkEB6H75i1B5 lm+i3ngnbbNxX69qpWh79Oe9T2AaT1clYjGdHfyUmw1PIF/jziBGKFSPV9thKiXR5IoGtf/nBV1i 8zI8rJxbD0Vt7t7WnZU= ) 9PSKGQ3B84FPF5VC9AUB7MNHUJ86O85H.ru. 3600 IN NSEC3 ( 1 1 0 - 9pv6qoi7qalhr3rfp782juuv6peeuhdg NS DS RRSIG ) 9PSKGQ3B84FPF5VC9AUB7MNHUJ86O85H.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240812030452 20240705081834 35739 ru. NQtM5SrPnobNBLGeqw1GI3NVifAjZiM+W9rZvF8/S252MTE/V4J+7Tf/Pbdnl1QtkY6zDLggQNpv 7VAsYxZQ+3BBZMY6MVoL0IiatH59G9r13gmDD1M3wN4j8FheoYVgowPRiIk9VMAKB9TN7SDRv/8c WJn82DQin5miCwEunf0= ) ;; ADDITIONAL SECTION (2 records) ns.MSU.RU. 345600 IN A 93.180.0.1 ;; { "EDNS-VERSION": 0 }
	Found child zone msu.ru

msu.ru

	Checking DS between ru and msu.ru
	Query to f.dns.ripn.net for msu.ru/DS
	Received 741 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 741 octets ;; HEADER SECTION ;; id = 55155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4060993 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20240909220737 20240727041959 35739 ru. PZXSuW4Nmwp7ht+HX3JqIA79wX+vY3du5TCmR8uH8WNlaCFkRFXuOZJ0dohzf8JCvPZ1qPSXCXO5 B308OW9qPoAIP3mKBP09cCRNG+UPHtXdjHxUGR/RlznvDvDCeSQJQow0qI6moGMX+JH2F/BBJ8tm 9+Qrz7J8dei7PnWvaMw= ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240811153126 20240705081834 35739 ru. IfD4zcSOn8nyslwRrefRX0t0F50NtcSx9JmL7x02JFecn5NpyqH5Db8ksvNNfUb1IkEB6H75i1B5 lm+i3ngnbbNxX69qpWh79Oe9T2AaT1clYjGdHfyUmw1PIF/jziBGKFSPV9thKiXR5IoGtf/nBV1i 8zI8rJxbD0Vt7t7WnZU= ) 9pskgq3b84fpf5vc9aub7mnhuj86o85h.ru. 3600 IN NSEC3 ( 1 1 0 - 9pv6qoi7qalhr3rfp782juuv6peeuhdg NS DS RRSIG ) 9pskgq3b84fpf5vc9aub7mnhuj86o85h.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240812030452 20240705081834 35739 ru. NQtM5SrPnobNBLGeqw1GI3NVifAjZiM+W9rZvF8/S252MTE/V4J+7Tf/Pbdnl1QtkY6zDLggQNpv 7VAsYxZQ+3BBZMY6MVoL0IiatH59G9r13gmDD1M3wN4j8FheoYVgowPRiIk9VMAKB9TN7SDRv/8c WJn82DQin5miCwEunf0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for msu.ru in the ru zone
	Query to ns.msu.net for msu.ru/DNSKEY
	Received 78 bytes from 212.16.0.1
	;; Response received from [212.16.0.1] 78 octets ;; HEADER SECTION ;; id = 46671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) msu.ru. 86400 IN SOA ( ns.msu.ru. noc.msu.ru. 2024072400 ;serial 10800 ;refresh 900 ;retry 864000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3.nic.fr for msu.ru/A
	Received 51 bytes from 192.134.0.49
	;; Response received from [192.134.0.49] 51 octets ;; HEADER SECTION ;; id = 37415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1432, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nic.fr is authoritative for msu.ru
	Query to ns.msu.net for msu.ru/SOA
	Received 172 bytes from 212.16.0.1
	;; Response received from [212.16.0.1] 172 octets ;; HEADER SECTION ;; id = 14486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN SOA ;; ANSWER SECTION (1 record) msu.ru. 86400 IN SOA ( ns.msu.ru. noc.msu.ru. 2024072400 ;serial 10800 ;refresh 900 ;retry 864000 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns3.nic.fr. msu.ru. 86400 IN NS ns.msu.ru. msu.ru. 86400 IN NS ns.msu.net. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	Query to ns.msu.RU for msu.ru/SOA
	Received 172 bytes from 93.180.0.1
	;; Response received from [93.180.0.1] 172 octets ;; HEADER SECTION ;; id = 53992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN SOA ;; ANSWER SECTION (1 record) msu.ru. 86400 IN SOA ( ns.msu.ru. noc.msu.ru. 2024072400 ;serial 10800 ;refresh 900 ;retry 864000 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns.msu.net. msu.ru. 86400 IN NS ns.msu.ru. msu.ru. 86400 IN NS ns3.nic.fr. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	Query to ns3.nic.fr for msu.ru/A
	Received 51 bytes from 192.134.0.49
	;; Response received from [192.134.0.49] 51 octets ;; HEADER SECTION ;; id = 64762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1432, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	msu.ru A RR has value 84.201.185.178
	No RRSIGs found

msu.ru

	Query to ns.msu.RU for msu.ru/A
	Received 148 bytes from 93.180.0.1
	;; Response received from [93.180.0.1] 148 octets ;; HEADER SECTION ;; id = 40148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns.msu.net. msu.ru. 86400 IN NS ns3.nic.fr. msu.ru. 86400 IN NS ns.msu.ru. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	ns.msu.RU is authoritative for msu.ru
	Query to ns.msu.RU for msu.ru/A
	Received 148 bytes from 93.180.0.1
	;; Response received from [93.180.0.1] 148 octets ;; HEADER SECTION ;; id = 20657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns3.nic.fr. msu.ru. 86400 IN NS ns.msu.ru. msu.ru. 86400 IN NS ns.msu.net. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	msu.ru A RR has value 84.201.185.178
	No RRSIGs found

msu.ru

	Query to ns.msu.net for msu.ru/A
	Received 148 bytes from 212.16.0.1
	;; Response received from [212.16.0.1] 148 octets ;; HEADER SECTION ;; id = 13002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns.msu.net. msu.ru. 86400 IN NS ns3.nic.fr. msu.ru. 86400 IN NS ns.msu.ru. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	ns.msu.net is authoritative for msu.ru
	Query to ns.msu.net for msu.ru/A
	Received 148 bytes from 212.16.0.1
	;; Response received from [212.16.0.1] 148 octets ;; HEADER SECTION ;; id = 7770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; msu.ru. IN A ;; ANSWER SECTION (1 record) msu.ru. 600 IN A 84.201.185.178 ;; AUTHORITY SECTION (3 records) msu.ru. 86400 IN NS ns.msu.net. msu.ru. 86400 IN NS ns3.nic.fr. msu.ru. 86400 IN NS ns.msu.ru. ;; ADDITIONAL SECTION (3 records) ns.msu.ru. 86400 IN A 93.180.0.1 ns.msu.net. 86400 IN A 212.16.0.1 ;; { "EDNS-VERSION": 0 }
	msu.ru A RR has value 84.201.185.178
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test msu.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: