DNSSEC Debugger

Domain Name:

Time: 2024-12-08 19:59:57 UTC

Analyzing DNSSEC problems for nic.mw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 17832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to b.root-servers.net for nic.mw/A
	Received 825 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 825 octets ;; HEADER SECTION ;; id = 36263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS rip.psg.com. mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS domwe.sdn.mw. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20241221170000 20241208160000 61050 . WEQFqFiHr7VidHFY62Prf54pbnXpap3zo/cYPN2qNdoiopWItWDiCOBCmyH7Lv4QaOhcWVg23IWj tHqwcwXKEQzfJKW3bWBMah5+l5Mx6wTcSsrTv5YAx/mDd+DlzieEA+wKeKu4qDxDw2OrO1xZdfZV v1PjaLCGpSX5hpNvJcHOBn9lH1EWRJQjCrsFK5rLFNfSxAdbY+0EiUhSrU4AfDr1rrk5A0FSvfFS FzvVi4Z3ZGe+QcWx3P2k/xvGulO55rh6HDN68yRTh6D4cCnxf/57jWhBRyD3g5B1XSvjZvvuoLy9 gagYVLBIdhv3+apdniyX836KOQncFkvvr382OA== ) ;; ADDITIONAL SECTION (15 records) pch1.nic.mw. 172800 IN A 204.61.216.131 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 chambo.sdnp.org.mw. 172800 IN A 41.221.99.135 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::99 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 rip.psg.com. 172800 IN A 147.28.0.39 rip.psg.com. 172800 IN AAAA 2001:418:1::39 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for mw/DNSKEY
	Received 828 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 828 octets ;; HEADER SECTION ;; id = 39945 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS domwe.sdn.mw. mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS rip.psg.com. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20241221170000 20241208160000 61050 . WEQFqFiHr7VidHFY62Prf54pbnXpap3zo/cYPN2qNdoiopWItWDiCOBCmyH7Lv4QaOhcWVg23IWj tHqwcwXKEQzfJKW3bWBMah5+l5Mx6wTcSsrTv5YAx/mDd+DlzieEA+wKeKu4qDxDw2OrO1xZdfZV v1PjaLCGpSX5hpNvJcHOBn9lH1EWRJQjCrsFK5rLFNfSxAdbY+0EiUhSrU4AfDr1rrk5A0FSvfFS FzvVi4Z3ZGe+QcWx3P2k/xvGulO55rh6HDN68yRTh6D4cCnxf/57jWhBRyD3g5B1XSvjZvvuoLy9 gagYVLBIdhv3+apdniyX836KOQncFkvvr382OA== ) ;; ADDITIONAL SECTION (15 records) chambo.sdnp.org.mw. 172800 IN A 41.221.99.135 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 pch1.nic.mw. 172800 IN A 204.61.216.131 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 rip.psg.com. 172800 IN A 147.28.0.39 ns4.apnic.net. 172800 IN A 202.12.31.53 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 rip.psg.com. 172800 IN AAAA 2001:418:1::39 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::99 ;; { "EDNS-VERSION": 0 }
	Found child zone mw

	Checking DS between . and mw
	Query to g.root-servers.net for mw/DS
	Received 703 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 703 octets ;; HEADER SECTION ;; id = 49201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2024120801 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20241221170000 20241208160000 61050 . FYIEOlbzCAYHmj3OECaGogHTOs23j3ma+LyfaPAp2K+kruRJ1TDcmiKS6phPpEZ6+n9jAMYPrX3k PcSs73UqgRw24fdaLexYZJfm9XwZWdQfBqwbHnGeKeCC4ollaafkr/FaqjV0l1oim9im0mP1kCon fC8+a+KIVTiCUP4fvpPX0XYFAu+vkLVntZT+Px/AEOOjKms16uD3KXq2TxNz7iGVzbM6zxm02FHL LN/HXWRQvfXVwB3ss7MpyZ1qRctV6QlJ5M+SjVjkN0ZD7FOJuMszrIlua96XrAGhn6+v2cXgYVL6 5wvnzgmZ8hZAeanHnPH9MKHGPK2Iv1l+bz5gzQ== ) mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20241221170000 20241208160000 61050 . WEQFqFiHr7VidHFY62Prf54pbnXpap3zo/cYPN2qNdoiopWItWDiCOBCmyH7Lv4QaOhcWVg23IWj tHqwcwXKEQzfJKW3bWBMah5+l5Mx6wTcSsrTv5YAx/mDd+DlzieEA+wKeKu4qDxDw2OrO1xZdfZV v1PjaLCGpSX5hpNvJcHOBn9lH1EWRJQjCrsFK5rLFNfSxAdbY+0EiUhSrU4AfDr1rrk5A0FSvfFS FzvVi4Z3ZGe+QcWx3P2k/xvGulO55rh6HDN68yRTh6D4cCnxf/57jWhBRyD3g5B1XSvjZvvuoLy9 gagYVLBIdhv3+apdniyX836KOQncFkvvr382OA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mw in the . zone
	Query to domwe.sdn.mw for mw/DNSKEY
	Received 105 bytes from 41.87.2.154
	;; Response received from [41.87.2.154] 105 octets ;; HEADER SECTION ;; id = 2444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1733681101 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to mw.cctld.authdns.ripe.net for nic.mw/A
	Received 140 bytes from 193.0.9.99
	;; Response received from [193.0.9.99] 140 octets ;; HEADER SECTION ;; id = 7907 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to mw.cctld.authdns.ripe.net for nic.mw/DNSKEY
	Received 138 bytes from 193.0.9.99
	;; Response received from [193.0.9.99] 138 octets ;; HEADER SECTION ;; id = 59998 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nic.mw

nic.mw

	Checking DS between mw and nic.mw
	Query to pch1.nic.mw for nic.mw/DS
	Received 109 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 109 octets ;; HEADER SECTION ;; id = 64894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1733681101 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for nic.mw in the mw zone
	Query to rip.psg.com for nic.mw/DNSKEY
	Received 105 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 105 octets ;; HEADER SECTION ;; id = 60189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831840 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to domwe.sdn.mw for nic.mw/A
	Timeout querying domwe.sdn.mw/41.87.5.162 for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 19349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	domwe.sdn.mw is authoritative for nic.mw
	Query to domwe.nic.mw for nic.mw/SOA
	Received 295 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 295 octets ;; HEADER SECTION ;; id = 42751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831840 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to pch1.nic.mw for nic.mw/SOA
	Received 289 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 289 octets ;; HEADER SECTION ;; id = 10452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831840 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to rip.psg.com for nic.mw/SOA
	Received 105 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 105 octets ;; HEADER SECTION ;; id = 22742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831840 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to chambo.sdnp.org.mw for nic.mw/SOA
	Timeout querying chambo.sdnp.org.mw/196.45.188.5 for nic.mw/SOA
	Received 363 bytes from 41.221.99.135
	;; Response received from [41.221.99.135] 363 octets ;; HEADER SECTION ;; id = 27980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831840 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (10 records) pch1.nic.mw. 18000 IN A 204.61.216.131 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 domwe.nic.mw. 18000 IN A 196.45.190.9 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.sdn.mw. 14400 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 41.87.2.154 domwe.sdn.mw. 14400 IN A 41.87.5.162 chambo.sdnp.org.mw. 14400 IN A 196.45.188.5 chambo.sdnp.org.mw. 14400 IN A 41.221.99.135 ;; { "EDNS-VERSION": 0 }
	Query to domwe.sdn.mw for nic.mw/A
	Received 255 bytes from 41.87.2.154
	;; Response received from [41.87.2.154] 255 octets ;; HEADER SECTION ;; id = 63612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to domwe.nic.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 18008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS rip.psg.com. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	domwe.nic.mw is authoritative for nic.mw
	Query to domwe.nic.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 52183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to pch1.nic.mw for nic.mw/A
	Received 249 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 249 octets ;; HEADER SECTION ;; id = 27281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	pch1.nic.mw is authoritative for nic.mw
	Query to pch1.nic.mw for nic.mw/A
	Received 249 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 249 octets ;; HEADER SECTION ;; id = 20824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to rip.psg.com for nic.mw/A
	Received 51 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 51 octets ;; HEADER SECTION ;; id = 29949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rip.psg.com is authoritative for nic.mw
	Query to rip.psg.com for nic.mw/A
	Received 51 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 51 octets ;; HEADER SECTION ;; id = 61462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to chambo.sdnp.org.mw for nic.mw/A
	Timeout querying chambo.sdnp.org.mw/41.221.99.135 for nic.mw/A
	Received 325 bytes from 196.45.188.5
	;; Response received from [196.45.188.5] 325 octets ;; HEADER SECTION ;; id = 4570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS rip.psg.com. ;; ADDITIONAL SECTION (10 records) pch1.nic.mw. 18000 IN A 204.61.216.131 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 41.87.2.154 domwe.sdn.mw. 14400 IN A 41.87.5.162 chambo.sdnp.org.mw. 14400 IN A 41.221.99.135 chambo.sdnp.org.mw. 14400 IN A 196.45.188.5 ;; { "EDNS-VERSION": 0 }
	chambo.sdnp.org.mw is authoritative for nic.mw
	Query to chambo.sdnp.org.mw for nic.mw/A
	Received 325 bytes from 41.221.99.135
	;; Response received from [41.221.99.135] 325 octets ;; HEADER SECTION ;; id = 54197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. ;; ADDITIONAL SECTION (10 records) pch1.nic.mw. 18000 IN A 204.61.216.131 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 domwe.nic.mw. 18000 IN A 196.45.190.9 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.sdn.mw. 14400 IN A 41.87.5.162 domwe.sdn.mw. 14400 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 41.87.2.154 chambo.sdnp.org.mw. 14400 IN A 196.45.188.5 chambo.sdnp.org.mw. 14400 IN A 41.221.99.135 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.mw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: