DNSSEC Debugger

Domain Name:

Time: 2025-12-16 22:22:44 UTC

Analyzing DNSSEC problems for nic.mw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 22784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for nic.mw/A
	Received 826 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 826 octets ;; HEADER SECTION ;; id = 47838 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 172800 IN NS rip.psg.com. mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS domwe.sdn.mw. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (15 records) chambo.sdnp.org.mw. 172800 IN A 102.219.183.67 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 pch1.nic.mw. 172800 IN A 204.61.216.131 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 rip.psg.com. 172800 IN A 147.28.0.39 ns4.apnic.net. 172800 IN A 202.12.31.53 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 rip.psg.com. 172800 IN AAAA 2001:418:1::39 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::99 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for mw/DNSKEY
	Received 821 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 821 octets ;; HEADER SECTION ;; id = 18058 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) mw. 172800 IN NS mw.cctld.authdns.ripe.net. mw. 172800 IN NS ns4.apnic.net. mw. 172800 IN NS rip.psg.com. mw. 172800 IN NS mw-e.ns.nic.cz. mw. 172800 IN NS pch1.nic.mw. mw. 172800 IN NS domwe.sdn.mw. mw. 172800 IN NS chambo.sdnp.org.mw. mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (15 records) pch1.nic.mw. 172800 IN A 204.61.216.131 pch1.nic.mw. 172800 IN AAAA 2001:500:14:6131:ad::1 domwe.sdn.mw. 172800 IN A 41.87.5.162 domwe.sdn.mw. 172800 IN A 196.45.190.9 chambo.sdnp.org.mw. 172800 IN A 102.219.183.67 chambo.sdnp.org.mw. 172800 IN A 196.45.188.5 mw.cctld.authdns.ripe.net. 172800 IN A 193.0.9.99 mw.cctld.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::99 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 rip.psg.com. 172800 IN A 147.28.0.39 rip.psg.com. 172800 IN AAAA 2001:418:1::39 mw-e.ns.nic.cz. 172800 IN A 185.43.134.10 mw-e.ns.nic.cz. 172800 IN AAAA 2001:148f:fffd::10 ;; { "EDNS-VERSION": 0 }
	Found child zone mw

	Checking DS between . and mw
	Query to j.root-servers.net for mw/DS
	Received 703 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 703 octets ;; HEADER SECTION ;; id = 45355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2025121601 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20251229170000 20251216160000 61809 . LaFXrfcxoFB568fw6c96mzLqml5iONQq5Z6vEaSpkzvQOjS4e0jQ3d0RjQd2uwSa926a40i6xht9 BNxbEOylC4ECPlsxZucQFgVdI/DMZlMFf4qYwS+OBo6rs6RV17Bx4SS8S72400Vri1dhNF1o3/6p I5v+FMxkJPYukS3IK2A/IyBdOMJG+bJlMct7nxzc95SxlQ4ENtL0ppLejWNZ2Hr01cO3Prbq0Sjw w20q4p1sFd2AmmUFr6R0GjEDPjehniqsBKMyVopz0KvUNZqYZfyvhqMeE3LzRa5sL/3z1hyaY14O WUFnyD9Es7LWlymide9dKCUKH99IQBu2X3/L/w== ) mw. 86400 IN NSEC mx. NS RRSIG NSEC mw. 86400 IN RRSIG ( NSEC 8 1 86400 20251229170000 20251216160000 61809 . OmJHAkDL6oNI8fq52QOj5e1Pzy+cA+I31GlGasS0Tg9jl71BKvXIkAnEgT5uOKBKABeC3yQO0Mzf SUQd+O1f8Yv2f/btGgQs/ZD1eVkt3UZUvs3NHFQrslmhT17bXJ0jdhUOIRcsg0eq2XoLrBKfe5kH MvnvvIN61BsW5J7BfJaphze6gwT18X2OQZACJxR7pcznavuvnT1jX2bwXmaztuJaTWUM5o//7k6k WIm+fNXmpvPxx6PSGuAQQe9+l9E7YIZ/sAUhRouqchaVlLFG5LzwkGA/W6ATjvOe/Tn51/93CdkV LFiqkv2Q/I+TliWDDy5p0duG3qZ0C+LasgFBZQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mw in the . zone
	Query to rip.psg.com for mw/DNSKEY
	Received 101 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 101 octets ;; HEADER SECTION ;; id = 40388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915501 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to mw.cctld.authdns.ripe.net for nic.mw/A
	Received 138 bytes from 193.0.9.99
	;; Response received from [193.0.9.99] 138 octets ;; HEADER SECTION ;; id = 3366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to mw.cctld.authdns.ripe.net for nic.mw/DNSKEY
	Received 134 bytes from 193.0.9.99
	;; Response received from [193.0.9.99] 134 octets ;; HEADER SECTION ;; id = 39593 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nic.mw

nic.mw

	Checking DS between mw and nic.mw
	Query to domwe.sdn.mw for nic.mw/DS
	Received 109 bytes from 41.87.5.162
	;; Response received from [41.87.5.162] 109 octets ;; HEADER SECTION ;; id = 3798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mw. 1800 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1765915501 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for nic.mw in the mw zone
	Query to chambo.sdnp.org.mw for nic.mw/DNSKEY
	Received 105 bytes from 196.45.188.5
	;; Response received from [196.45.188.5] 105 octets ;; HEADER SECTION ;; id = 50758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831844 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to chambo.sdnp.org.mw for nic.mw/A
	Received 325 bytes from 196.45.188.5
	;; Response received from [196.45.188.5] 325 octets ;; HEADER SECTION ;; id = 16876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. ;; ADDITIONAL SECTION (10 records) pch1.nic.mw. 18000 IN A 204.61.216.131 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 domwe.nic.mw. 18000 IN A 196.45.190.9 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.sdn.mw. 14400 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 41.87.2.154 domwe.sdn.mw. 14400 IN A 41.87.5.162 chambo.sdnp.org.mw. 14400 IN A 102.219.183.67 chambo.sdnp.org.mw. 14400 IN A 196.45.188.5 ;; { "EDNS-VERSION": 0 }
	chambo.sdnp.org.mw is authoritative for nic.mw
	Query to domwe.nic.mw for nic.mw/SOA
	Received 295 bytes from 41.87.5.162
	;; Response received from [41.87.5.162] 295 octets ;; HEADER SECTION ;; id = 731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831844 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to pch1.nic.mw for nic.mw/SOA
	Received 289 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 289 octets ;; HEADER SECTION ;; id = 58309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831844 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to domwe.sdn.mw for nic.mw/SOA
	Received 295 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 295 octets ;; HEADER SECTION ;; id = 14241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831844 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to rip.psg.com for nic.mw/SOA
	Received 105 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 105 octets ;; HEADER SECTION ;; id = 36395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN SOA ;; ANSWER SECTION (1 record) nic.mw. 18000 IN SOA ( chambo.sdnp.org.mw. domains.registrar.mw. 1470831844 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 172800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to chambo.sdnp.org.mw for nic.mw/A
	Received 325 bytes from 102.219.183.67
	;; Response received from [102.219.183.67] 325 octets ;; HEADER SECTION ;; id = 13303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (10 records) pch1.nic.mw. 18000 IN A 204.61.216.131 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 domwe.sdn.mw. 14400 IN A 41.87.2.154 domwe.sdn.mw. 14400 IN A 41.87.5.162 domwe.sdn.mw. 14400 IN A 196.45.190.9 chambo.sdnp.org.mw. 14400 IN A 196.45.188.5 chambo.sdnp.org.mw. 14400 IN A 102.219.183.67 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to domwe.sdn.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 58642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	domwe.sdn.mw is authoritative for nic.mw
	Query to domwe.sdn.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 23116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to domwe.nic.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 51190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	domwe.nic.mw is authoritative for nic.mw
	Query to domwe.nic.mw for nic.mw/A
	Received 255 bytes from 196.45.190.9
	;; Response received from [196.45.190.9] 255 octets ;; HEADER SECTION ;; id = 12779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to rip.psg.com for nic.mw/A
	Received 51 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 51 octets ;; HEADER SECTION ;; id = 41772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rip.psg.com is authoritative for nic.mw
	Query to rip.psg.com for nic.mw/A
	Received 51 bytes from 147.28.0.39
	;; Response received from [147.28.0.39] 51 octets ;; HEADER SECTION ;; id = 5103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

nic.mw

	Query to pch1.nic.mw for nic.mw/A
	Received 249 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 249 octets ;; HEADER SECTION ;; id = 44398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	pch1.nic.mw is authoritative for nic.mw
	Query to pch1.nic.mw for nic.mw/A
	Received 249 bytes from 204.61.216.131
	;; Response received from [204.61.216.131] 249 octets ;; HEADER SECTION ;; id = 47630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nic.mw. IN A ;; ANSWER SECTION (1 record) nic.mw. 18000 IN A 41.87.2.157 ;; AUTHORITY SECTION (5 records) nic.mw. 18000 IN NS domwe.nic.mw. nic.mw. 18000 IN NS chambo.sdnp.org.mw. nic.mw. 18000 IN NS rip.psg.com. nic.mw. 18000 IN NS pch1.nic.mw. nic.mw. 18000 IN NS domwe.sdn.mw. ;; ADDITIONAL SECTION (5 records) pch1.nic.mw. 18000 IN A 204.61.216.131 domwe.nic.mw. 18000 IN A 41.87.5.162 domwe.nic.mw. 18000 IN A 196.45.190.9 pch1.nic.mw. 18000 IN AAAA 2001:500:14:6131:ad::1 ;; { "EDNS-VERSION": 0 }
	nic.mw A RR has value 41.87.2.157
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.mw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: