DNSSEC Debugger - nelnet.net

Domain Name:

Time: 2024-07-27 02:47:01 UTC

Analyzing DNSSEC problems for nelnet.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 57067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to f.root-servers.net for nelnet.net/A
	Received 1167 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1167 octets ;; HEADER SECTION ;; id = 59059 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . kAHgKJ5lIlTG3v8Hkk+4S9KF1QrvldoSJ26FKWw6pIhd4D4mTSMbGttvl5Bs5B9rGjtZNdXWxrGQ lRL4EaZv0YcEa5EhTUNQ3Ga+AMQXyBKZLvswoBKd5Atap634hcVgFvvWBG/swrTWgbdROUH2OCmR 4bRngfMf19c+feZTe2cq8o0dLgMiTrMqHmnwJpP3orO5bxYpevnrKfYRAqS7v8TNOW9apo3F4Kei no+JOlShZ2BGFwkNi5dWDy7y5UAsNGXmRvi9a8fS1vtt+wgSJEu246sHKB/IK3eMOqTORzDPlwVl OKSZi/+wKWA4nxbfcqKNN1AUwCttRENzokkMHQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 34267 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . kAHgKJ5lIlTG3v8Hkk+4S9KF1QrvldoSJ26FKWw6pIhd4D4mTSMbGttvl5Bs5B9rGjtZNdXWxrGQ lRL4EaZv0YcEa5EhTUNQ3Ga+AMQXyBKZLvswoBKd5Atap634hcVgFvvWBG/swrTWgbdROUH2OCmR 4bRngfMf19c+feZTe2cq8o0dLgMiTrMqHmnwJpP3orO5bxYpevnrKfYRAqS7v8TNOW9apo3F4Kei no+JOlShZ2BGFwkNi5dWDy7y5UAsNGXmRvi9a8fS1vtt+wgSJEu246sHKB/IK3eMOqTORzDPlwVl OKSZi/+wKWA4nxbfcqKNN1AUwCttRENzokkMHQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to k.root-servers.net for net/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 8502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . kAHgKJ5lIlTG3v8Hkk+4S9KF1QrvldoSJ26FKWw6pIhd4D4mTSMbGttvl5Bs5B9rGjtZNdXWxrGQ lRL4EaZv0YcEa5EhTUNQ3Ga+AMQXyBKZLvswoBKd5Atap634hcVgFvvWBG/swrTWgbdROUH2OCmR 4bRngfMf19c+feZTe2cq8o0dLgMiTrMqHmnwJpP3orO5bxYpevnrKfYRAqS7v8TNOW9apo3F4Kei no+JOlShZ2BGFwkNi5dWDy7y5UAsNGXmRvi9a8fS1vtt+wgSJEu246sHKB/IK3eMOqTORzDPlwVl OKSZi/+wKWA4nxbfcqKNN1AUwCttRENzokkMHQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . kAHgKJ5lIlTG3v8Hkk+4S9KF1QrvldoSJ26FKWw6pIhd4D4mTSMbGttvl5Bs5B9rGjtZNdXWxrGQ lRL4EaZv0YcEa5EhTUNQ3Ga+AMQXyBKZLvswoBKd5Atap634hcVgFvvWBG/swrTWgbdROUH2OCmR 4bRngfMf19c+feZTe2cq8o0dLgMiTrMqHmnwJpP3orO5bxYpevnrKfYRAqS7v8TNOW9apo3F4Kei no+JOlShZ2BGFwkNi5dWDy7y5UAsNGXmRvi9a8fS1vtt+wgSJEu246sHKB/IK3eMOqTORzDPlwVl OKSZi/+wKWA4nxbfcqKNN1AUwCttRENzokkMHQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 291 octets ;; HEADER SECTION ;; id = 19382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN DNSKEY ( 256 3 13 GUEoqWueUrWorK7wnPbhVlFIz52mbdrzleuCl3s2oPbWNj/Ych940L9vwUPFRnjzK3Q0J894RxfV kT4cgCYskg== ) ; Key ID = 42924 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240810141035 20240726140535 37331 net. WgNhcNkwiJIDXiJ2xKN5YBr/iQfBBHojB0VLrIvB5fdmfYN/E2BQuS069LYnLmO25eeFJzB/WoXB Fcl6uZu4WQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 GUEoqWueUrWorK7wnPbhVlFIz52mbdrzleuCl3s2oPbWNj/Ych940L9vwUPFRnjzK3Q0J894RxfV kT4cgCYskg== ) ; Key ID = 42924`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240810141035 20240726140535 37331 net. WgNhcNkwiJIDXiJ2xKN5YBr/iQfBBHojB0VLrIvB5fdmfYN/E2BQuS069LYnLmO25eeFJzB/WoXB Fcl6uZu4WQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=42924 is now in the chain-of-trust
	Query to h.gtld-servers.net for nelnet.net/A
	Received 293 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 293 octets ;; HEADER SECTION ;; id = 62601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nelnet.net. 172800 IN NS pdns03.domaincontrol.com. nelnet.net. 172800 IN NS pdns04.domaincontrol.com. nelnet.net. 86400 IN DS ( 65095 8 2 59160f3526d773752799bff41fb84bd8e2495dbb772dd9e53003e2427e3026b2 ) nelnet.net. 86400 IN DS ( 19744 8 2 2b353004ef8fa63327a1f470d80bd8f6709cdd8a1c942563e4ab2b7d3a03b065 ) nelnet.net. 86400 IN RRSIG ( DS 13 2 86400 20240803023953 20240727012953 42924 net. zkFnqWXosm/C6RY9lPmPAM7wVTH1wXF+sIdtcitRrE5Bie7gjBJKjEUoacttFMsvfho5432BxY/p V5usTwneJg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to m.gtld-servers.net for nelnet.net/DNSKEY
	Received 293 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 293 octets ;; HEADER SECTION ;; id = 13302 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nelnet.net. 172800 IN NS pdns03.domaincontrol.com. nelnet.net. 172800 IN NS pdns04.domaincontrol.com. nelnet.net. 86400 IN DS ( 65095 8 2 59160f3526d773752799bff41fb84bd8e2495dbb772dd9e53003e2427e3026b2 ) nelnet.net. 86400 IN DS ( 19744 8 2 2b353004ef8fa63327a1f470d80bd8f6709cdd8a1c942563e4ab2b7d3a03b065 ) nelnet.net. 86400 IN RRSIG ( DS 13 2 86400 20240803023953 20240727012953 42924 net. zkFnqWXosm/C6RY9lPmPAM7wVTH1wXF+sIdtcitRrE5Bie7gjBJKjEUoacttFMsvfho5432BxY/p V5usTwneJg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nelnet.net

nelnet.net

	Checking DS between net and nelnet.net
	Query to a.gtld-servers.net for nelnet.net/DS
	Received 1126 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 1126 octets ;; HEADER SECTION ;; id = 18200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN DS ;; ANSWER SECTION (3 records) nelnet.net. 86400 IN DS ( 65095 8 2 59160f3526d773752799bff41fb84bd8e2495dbb772dd9e53003e2427e3026b2 ) nelnet.net. 86400 IN DS ( 19744 8 2 2b353004ef8fa63327a1f470d80bd8f6709cdd8a1c942563e4ab2b7d3a03b065 ) nelnet.net. 86400 IN RRSIG ( DS 13 2 86400 20240803023953 20240727012953 42924 net. zkFnqWXosm/C6RY9lPmPAM7wVTH1wXF+sIdtcitRrE5Bie7gjBJKjEUoacttFMsvfho5432BxY/p V5usTwneJg== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20240802024513 20240726013513 42924 net. ld1heU5aUDaYDYQEdpFp8joJbHzYnCpb3jqB3lOl/2WJmqg3Q4KpoivNq+824E9VeE4rQy4D3wvL 5AndTgKK9Q== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for nelnet.net in the net zone
	DS=65095/SHA-256 has algorithm RSASHA256
	DS=19744/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nelnet.net. 86400 IN RRSIG ( DS 13 2 86400 20240803023953 20240727012953 42924 net. zkFnqWXosm/C6RY9lPmPAM7wVTH1wXF+sIdtcitRrE5Bie7gjBJKjEUoacttFMsvfho5432BxY/p V5usTwneJg== )`
	RRSIG=42924 and DNSKEY=42924 verifies the DS RRset
	DS=65095/SHA-256 is now in the chain-of-trust
	DS=19744/SHA-256 is now in the chain-of-trust
	`nelnet.net. 86400 IN DS ( 65095 8 2 59160f3526d773752799bff41fb84bd8e2495dbb772dd9e53003e2427e3026b2 )`
	`nelnet.net. 86400 IN DS ( 19744 8 2 2b353004ef8fa63327a1f470d80bd8f6709cdd8a1c942563e4ab2b7d3a03b065 )`
	Query to pdns04.domaincontrol.com for nelnet.net/DNSKEY
	Received 2074 bytes from 173.201.79.51
	;; Response received from [173.201.79.51] 2074 octets ;; HEADER SECTION ;; id = 53162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN DNSKEY ;; ANSWER SECTION (6 records) nelnet.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb8baLlgCegpmKJCx8lBXjaGUhzvumdH46vD5F1OW5jfyDiwWdCfhS3pxj81YLq0LljJVU1t yF9vHOyG7xmuT3JSwtVpDJE0aqFltuYT7h1AqRwqfugMbDmxi++KmsALZauQQk8O0DA4hSPxJSyI 5tKDuf/FY3CGdb4CpyiDdnqNOS5Xs/He2oiTpZnqlMoMVKP/qAfLDwZ7p2BcSvbXfpbZPpSgrPoM IymoZOGmL8qJ3iqZqyxFhpxnvOWtZDRX2VcCvlUB8lY+KNM/2EMfGQOxT6WQZfP4veykdNVPbulQ fzXOD1FRS5FKsDSUdEpZtiNbLWtKGAc0Y64P3EnHs/E= ) ; Key ID = 65095 nelnet.net. 3600 IN DNSKEY ( 257 3 8 AwEAAbrqTWQCUAnGpU6iQQPA345MGGhjyreqQ+O/Ry8dEDRKSyk/44UmbxKyXaKy7BOFzhaMwziz 8/v3WnAFTQdywYIY89Q6dO1rRgoj1+mm9kdx7ppF4deUMc2+P6GuY0hh4EZP7lHzV2xwXh368y+w 1ERqFRf2wFAiEvuF4RzeF+0FRMTeJ7Oa+fDXXq5Hsw/KnR525Od1/YNk60GXKLxiMGh3Ppd+jGV4 4VEog33LbCNpVFCWaM8kOpb703iXzwReodw7po15AfoiLP/rd6LQgbdCXTXbeF1kUn5IZ7nOdkrX Nq0k2jsiy8Q+FyfSREntQUejaBLHF42g79mw3LIk4/E= ) ; Key ID = 19744 nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7m6e6faRL0w3bdWV8RCOdQ4ZNaPlkEh7Ys+FbQn7wXA04FnVgipCop9bZYl8qwzHA27pf/ M78rfbuQKM2uAARURd6cKyX7V9cBpt2hpYPokKiTQxcCvXv/Acsgkq3EG0c9cu+jmHYJ72JRMCep CwVm02s2ifkmmVQMrCDySryXT0WgDBTim1jVgL/W7NdkhdBCmzDR7tLWWJoPaj+VYfe+EIAi/rMG o08CaxQ51Q2/Q3c/bEpQvhSlz1Q7zP6Cdylsd6gYsdcXjVswn4qn07xFfSKvJtuIYKyJV5YfkCYS jHZAORrN2seFP/K+7YHGHucqsW9TxKioC63PZWzuUE0= ) ; Key ID = 18123 nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbnBwdQneAuUIWKgdlU3MxKSpY9tUadoxC94VIBa4y5SXH0Vc1j7BYgNWV32/ukVU3spRvu/ nSHYn8GpaWA0Pd3Ow52ddEEfkl1c642ayiHB6MV1gOpEmpZ4We5UUMm4PNuE9vEx4Ar79gh/D2xj dwc9U8S1SwmlEgIlhbEgW0Jv1rAw4DHBz3YQLZpYKxvKpQGpeQQaoxH7Ht2/89JKR0eTatGuNfwX /oSrcccciWS7UxeDsOFwPbm+AgUuyfejiaSIp1TzI93TV3871dtQmaanMNBCsSMT+wgC4wDPlYL3 BE8lWvPLegJMmnTw2+BY6ebv+sckDQoFvw8XM9PRW9E= ) ; Key ID = 15966 nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbVZFcM8IDg6MRbAgXr477+O/k0sX0bDeQD+DuHYltQOEfhX8ndAfES3ZxpRmDkk0p6+92pv ATQgKLLwoqSOtSu/ItbMGJyzBgMCpuxY9WSqRsZFvF+zyJsR1BuE8qbofxBcxhD+9IjEkbU8CqXl QDPiYzuL9UJuCgZ9U7L8eZIqUwBqBIRii7I18MFXYIt4qWWIWU3/MJVyE2+sr3HoJZFObNc4QvYI /wbSc8PwAzu56pSsISz6Q84aI2yAX/5joF7+iJyd8uYIJ2XuE+r/1UAQ64sDpT156TCmvWl13OzK FbwMzDRzj7xHHI17yVI2HObpZNThfpeoA9TG0mZne0s= ) ; Key ID = 9411 nelnet.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240810171729 20240726171729 19744 nelnet.net. DvlhZ6joz/RWFUMXJHjp3crmFnGvqPv1M6W7SH8lAaFKaW1u1ZnLgs7opZfUEUJuI1rGloG4JHQN 5bS6mHLfcU1BmYniC9h3cIv3kotyjkzvEa06vOdy05VAEb0s0f3IFLFXNBdQxw2cIGodpHwXETIH Qj+Ba0rTaLkIYGkjFrvsOvJ1MKyjedJ9WmJeNDgB4JA/T2f5VktxNA0f6Ky0gDzQ6TEtDqJnHzva yIB/OIGQL9TQwmm48nRZCMLU9V0chZienvsm0gCh9T7DPEdV6F1DttgLSRnymi96qgVDUOUVutiz v86g1XusvbyQroFXqdWh06ZIyo4MjJvuhaDawg== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN NS pdns04.domaincontrol.com. nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for nelnet.net
	`nelnet.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb8baLlgCegpmKJCx8lBXjaGUhzvumdH46vD5F1OW5jfyDiwWdCfhS3pxj81YLq0LljJVU1t yF9vHOyG7xmuT3JSwtVpDJE0aqFltuYT7h1AqRwqfugMbDmxi++KmsALZauQQk8O0DA4hSPxJSyI 5tKDuf/FY3CGdb4CpyiDdnqNOS5Xs/He2oiTpZnqlMoMVKP/qAfLDwZ7p2BcSvbXfpbZPpSgrPoM IymoZOGmL8qJ3iqZqyxFhpxnvOWtZDRX2VcCvlUB8lY+KNM/2EMfGQOxT6WQZfP4veykdNVPbulQ fzXOD1FRS5FKsDSUdEpZtiNbLWtKGAc0Y64P3EnHs/E= ) ; Key ID = 65095`
	`nelnet.net. 3600 IN DNSKEY ( 257 3 8 AwEAAbrqTWQCUAnGpU6iQQPA345MGGhjyreqQ+O/Ry8dEDRKSyk/44UmbxKyXaKy7BOFzhaMwziz 8/v3WnAFTQdywYIY89Q6dO1rRgoj1+mm9kdx7ppF4deUMc2+P6GuY0hh4EZP7lHzV2xwXh368y+w 1ERqFRf2wFAiEvuF4RzeF+0FRMTeJ7Oa+fDXXq5Hsw/KnR525Od1/YNk60GXKLxiMGh3Ppd+jGV4 4VEog33LbCNpVFCWaM8kOpb703iXzwReodw7po15AfoiLP/rd6LQgbdCXTXbeF1kUn5IZ7nOdkrX Nq0k2jsiy8Q+FyfSREntQUejaBLHF42g79mw3LIk4/E= ) ; Key ID = 19744`
	`nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7m6e6faRL0w3bdWV8RCOdQ4ZNaPlkEh7Ys+FbQn7wXA04FnVgipCop9bZYl8qwzHA27pf/ M78rfbuQKM2uAARURd6cKyX7V9cBpt2hpYPokKiTQxcCvXv/Acsgkq3EG0c9cu+jmHYJ72JRMCep CwVm02s2ifkmmVQMrCDySryXT0WgDBTim1jVgL/W7NdkhdBCmzDR7tLWWJoPaj+VYfe+EIAi/rMG o08CaxQ51Q2/Q3c/bEpQvhSlz1Q7zP6Cdylsd6gYsdcXjVswn4qn07xFfSKvJtuIYKyJV5YfkCYS jHZAORrN2seFP/K+7YHGHucqsW9TxKioC63PZWzuUE0= ) ; Key ID = 18123`
	`nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbnBwdQneAuUIWKgdlU3MxKSpY9tUadoxC94VIBa4y5SXH0Vc1j7BYgNWV32/ukVU3spRvu/ nSHYn8GpaWA0Pd3Ow52ddEEfkl1c642ayiHB6MV1gOpEmpZ4We5UUMm4PNuE9vEx4Ar79gh/D2xj dwc9U8S1SwmlEgIlhbEgW0Jv1rAw4DHBz3YQLZpYKxvKpQGpeQQaoxH7Ht2/89JKR0eTatGuNfwX /oSrcccciWS7UxeDsOFwPbm+AgUuyfejiaSIp1TzI93TV3871dtQmaanMNBCsSMT+wgC4wDPlYL3 BE8lWvPLegJMmnTw2+BY6ebv+sckDQoFvw8XM9PRW9E= ) ; Key ID = 15966`
	`nelnet.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbVZFcM8IDg6MRbAgXr477+O/k0sX0bDeQD+DuHYltQOEfhX8ndAfES3ZxpRmDkk0p6+92pv ATQgKLLwoqSOtSu/ItbMGJyzBgMCpuxY9WSqRsZFvF+zyJsR1BuE8qbofxBcxhD+9IjEkbU8CqXl QDPiYzuL9UJuCgZ9U7L8eZIqUwBqBIRii7I18MFXYIt4qWWIWU3/MJVyE2+sr3HoJZFObNc4QvYI /wbSc8PwAzu56pSsISz6Q84aI2yAX/5joF7+iJyd8uYIJ2XuE+r/1UAQ64sDpT156TCmvWl13OzK FbwMzDRzj7xHHI17yVI2HObpZNThfpeoA9TG0mZne0s= ) ; Key ID = 9411`
	DNSKEY=65095/SEP is now in the chain-of-trust
	DS=65095/SHA-256 verifies DNSKEY=65095/SEP
	DNSKEY=19744/SEP is now in the chain-of-trust
	DS=19744/SHA-256 verifies DNSKEY=19744/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nelnet.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240810171729 20240726171729 19744 nelnet.net. DvlhZ6joz/RWFUMXJHjp3crmFnGvqPv1M6W7SH8lAaFKaW1u1ZnLgs7opZfUEUJuI1rGloG4JHQN 5bS6mHLfcU1BmYniC9h3cIv3kotyjkzvEa06vOdy05VAEb0s0f3IFLFXNBdQxw2cIGodpHwXETIH Qj+Ba0rTaLkIYGkjFrvsOvJ1MKyjedJ9WmJeNDgB4JA/T2f5VktxNA0f6Ky0gDzQ6TEtDqJnHzva yIB/OIGQL9TQwmm48nRZCMLU9V0chZienvsm0gCh9T7DPEdV6F1DttgLSRnymi96qgVDUOUVutiz v86g1XusvbyQroFXqdWh06ZIyo4MjJvuhaDawg== )`
	RRSIG=19744 and DNSKEY=19744/SEP verifies the DNSKEY RRset
	DNSKEY=18123 is now in the chain-of-trust
	DNSKEY=15966 is now in the chain-of-trust
	DNSKEY=9411 is now in the chain-of-trust
	Query to pdns03.domaincontrol.com for nelnet.net/A
	Received 710 bytes from 97.74.111.51
	;; Response received from [97.74.111.51] 710 octets ;; HEADER SECTION ;; id = 2477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (2 records) nelnet.net. 600 IN A 216.69.100.142 nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN NS pdns04.domaincontrol.com. nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns03.domaincontrol.com is authoritative for nelnet.net
	Found RRSIG signed by nelnet.net zone
	Query to pdns04.domaincontrol.com for nelnet.net/SOA
	Received 740 bytes from 173.201.79.51
	;; Response received from [173.201.79.51] 740 octets ;; HEADER SECTION ;; id = 26626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN SOA ;; ANSWER SECTION (2 records) nelnet.net. 3600 IN SOA ( pdns03.domaincontrol.com. dns.jomax.net. 2024072602 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) nelnet.net. 3600 IN RRSIG ( SOA 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. bPqQ/gxaPf/99LCtBB+ymjbfBORs6yVhYtvjo3N5m0TADbLYZFnQFvHNtHMMM7oj6fhmniM39JdO k1V4AOEee/IbwBpV7cIC21nU7cSBvclmjKED2qFL/2A707fBAPaq18LDsxXY+mZHGU+ryuUeJnPQ PEWll64OJcJ8ZE9igEgdvMfqi2Cw/ojdnL+OhDu66jJy5CtICxYsFkM0iR7BScWsSqfl9tPpZN+c l7qi6/R/C3wiZcRrHVOgQYEClmaWNSw+r+Psq0G+vxau11LZaajru36YEXm+aUCoG/cmND+5oxYg Chh4OJKqxGegI6w5rFN/eem9QgQNsu3S4js64A== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN NS pdns04.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns03.domaincontrol.com for nelnet.net/A
	Received 710 bytes from 97.74.111.51
	;; Response received from [97.74.111.51] 710 octets ;; HEADER SECTION ;; id = 16435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (2 records) nelnet.net. 600 IN A 216.69.100.142 nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN NS pdns04.domaincontrol.com. nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nelnet.net A RR has value 216.69.100.142
	Found 1 RRSIGs over A RRset
	`nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== )`
	RRSIG=15966 and DNSKEY=15966 verifies the A RRset

nelnet.net

	Query to pdns04.domaincontrol.com for nelnet.net/A
	Received 710 bytes from 173.201.79.51
	;; Response received from [173.201.79.51] 710 octets ;; HEADER SECTION ;; id = 9910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (2 records) nelnet.net. 600 IN A 216.69.100.142 nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN NS pdns04.domaincontrol.com. nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns04.domaincontrol.com is authoritative for nelnet.net
	Found RRSIG signed by nelnet.net zone
	Query to pdns04.domaincontrol.com for nelnet.net/A
	Received 710 bytes from 173.201.79.51
	;; Response received from [173.201.79.51] 710 octets ;; HEADER SECTION ;; id = 38740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nelnet.net. IN A ;; ANSWER SECTION (2 records) nelnet.net. 600 IN A 216.69.100.142 nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== ) ;; AUTHORITY SECTION (3 records) nelnet.net. 3600 IN NS pdns04.domaincontrol.com. nelnet.net. 3600 IN NS pdns03.domaincontrol.com. nelnet.net. 3600 IN RRSIG ( NS 8 2 3600 20240810171729 20240726171729 15966 nelnet.net. gjesfbClK9LXSbP+lY1WOBNmqIR8sbqEx6ElLJ2ewtUMsF5oPVC0DFicX+i3KXAh92N7AlFCVScS Ncu16m0nWO2mk1iNH1egW1fOaNAmha3C4YZ8hIS+LgTj8HKAjiGA3qvlvL+znqlLImkcP4SkVB4k +peMaGZpK94wk+Iz/ysc5hQkZkIkK+UECm/RsG6xCM+h9xkxJvEvtmKBMWmECSW53qkF8r2tVr88 jqdeDt40SuMg41xZXZ0vRUVsQkLba+q7FyDkr1ZIgO04cWYw0p86nQw9CBWVPFoHMPpUC/U8zO+E Hu8ixUbs14+gBAmLmcvrRKEyIOpM+SjzAwiKSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nelnet.net A RR has value 216.69.100.142
	Found 1 RRSIGs over A RRset
	`nelnet.net. 600 IN RRSIG ( A 8 2 600 20240810171729 20240726171729 15966 nelnet.net. SnLBcwadXiPe47T0m+K9Sy3RwlaXtdx9VGLMddxColmY3DvzA2Fp4Mipm/VQmHW12PWp8oL6ohmM BY/KJMvzEW3R4Wv4qTX5NA3yKJP+fHgK3YPg8nSBYUMp+N2I/6WeIgy/Fi8u6HbNbQVMR4QVbWQz 8K02napIwWA1QChK7h2s55XoBLtwJ6lU2Ssl+9NPxFtGp1RC8sLL0qjXgAmjpz0iwVNcZC+E8GXM DRCuwP50lUeqbI4PSY4f55Djoa1OdRXNyO3m/UY6y2M1zbp5Jffc6JqjbY4qHaCVhw8yM0ixBWtu BfTX28g9dTcTA5omdZE2TU4Y0L/0yH2gx5+9jw== )`
	RRSIG=15966 and DNSKEY=15966 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nelnet.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: