DNSSEC Debugger - novo.media

Domain Name:

Time: 2026-03-13 13:30:04 UTC

Analyzing DNSSEC problems for novo.media

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 28752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for novo.media/A
	Received 761 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 761 octets ;; HEADER SECTION ;; id = 33568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) media. 172800 IN NS v0n3.nic.media. media. 172800 IN NS v0n0.nic.media. media. 172800 IN NS v0n1.nic.media. media. 172800 IN NS v0n2.nic.media. media. 172800 IN NS v2n1.nic.media. media. 172800 IN NS v2n0.nic.media. media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . SNz7zLgNg1UvyUlu4wW79pzT2cHb/lZqqMul56lSIvYmtYG4icUNon6B2Cpdk/un39Gky6cA4+DV pn1YdE4aJAeuroaOY+1m0ixCXcggu632zPD2/WLC+LlgHetu7ek0ttQe9eeChUkObgFzNtMbpCby 2JHPfbvmheRlx1bEHkqoLJo7jWE3eQSe6BwLVuqW2nB/GFgKUpHmtZIB1695H7RCwqamq1PperUc hKnphiUFfRuSmdEGKtGlQUWwGzNufpcxHStiId+3xgMDcgmqZDx4BNfOQprak3uI4gKubbqoujkR hyyRh7N89enfNUFNgF+Gdl2ZcdBmmMyfEl6pwQ== ) ;; ADDITIONAL SECTION (13 records) v2n1.nic.media. 172800 IN A 161.232.11.3 v2n0.nic.media. 172800 IN A 65.22.23.3 v0n3.nic.media. 172800 IN A 161.232.10.3 v0n2.nic.media. 172800 IN A 65.22.22.3 v0n1.nic.media. 172800 IN A 65.22.21.3 v0n0.nic.media. 172800 IN A 65.22.20.3 v2n1.nic.media. 172800 IN AAAA 2a01:8840:f5::3 v2n0.nic.media. 172800 IN AAAA 2a01:8840:19::3 v0n3.nic.media. 172800 IN AAAA 2a01:8840:f4::3 v0n2.nic.media. 172800 IN AAAA 2a01:8840:18::3 v0n1.nic.media. 172800 IN AAAA 2a01:8840:17::3 v0n0.nic.media. 172800 IN AAAA 2a01:8840:16::3 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for media/DNSKEY
	Received 751 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 751 octets ;; HEADER SECTION ;; id = 31416 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) media. 172800 IN NS v0n0.nic.media. media. 172800 IN NS v0n1.nic.media. media. 172800 IN NS v0n2.nic.media. media. 172800 IN NS v0n3.nic.media. media. 172800 IN NS v2n0.nic.media. media. 172800 IN NS v2n1.nic.media. media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . SNz7zLgNg1UvyUlu4wW79pzT2cHb/lZqqMul56lSIvYmtYG4icUNon6B2Cpdk/un39Gky6cA4+DV pn1YdE4aJAeuroaOY+1m0ixCXcggu632zPD2/WLC+LlgHetu7ek0ttQe9eeChUkObgFzNtMbpCby 2JHPfbvmheRlx1bEHkqoLJo7jWE3eQSe6BwLVuqW2nB/GFgKUpHmtZIB1695H7RCwqamq1PperUc hKnphiUFfRuSmdEGKtGlQUWwGzNufpcxHStiId+3xgMDcgmqZDx4BNfOQprak3uI4gKubbqoujkR hyyRh7N89enfNUFNgF+Gdl2ZcdBmmMyfEl6pwQ== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.media. 172800 IN A 65.22.20.3 v0n0.nic.media. 172800 IN AAAA 2a01:8840:16::3 v0n1.nic.media. 172800 IN A 65.22.21.3 v0n1.nic.media. 172800 IN AAAA 2a01:8840:17::3 v0n2.nic.media. 172800 IN A 65.22.22.3 v0n2.nic.media. 172800 IN AAAA 2a01:8840:18::3 v0n3.nic.media. 172800 IN A 161.232.10.3 v0n3.nic.media. 172800 IN AAAA 2a01:8840:f4::3 v2n0.nic.media. 172800 IN A 65.22.23.3 v2n0.nic.media. 172800 IN AAAA 2a01:8840:19::3 v2n1.nic.media. 172800 IN A 161.232.11.3 v2n1.nic.media. 172800 IN AAAA 2a01:8840:f5::3 ;; { "EDNS-VERSION": 0 }
	Found child zone media

media

	Checking DS between . and media
	Query to h.root-servers.net for media/DS
	Received 369 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 369 octets ;; HEADER SECTION ;; id = 43700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DS ;; ANSWER SECTION (2 records) media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 ) media. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . SNz7zLgNg1UvyUlu4wW79pzT2cHb/lZqqMul56lSIvYmtYG4icUNon6B2Cpdk/un39Gky6cA4+DV pn1YdE4aJAeuroaOY+1m0ixCXcggu632zPD2/WLC+LlgHetu7ek0ttQe9eeChUkObgFzNtMbpCby 2JHPfbvmheRlx1bEHkqoLJo7jWE3eQSe6BwLVuqW2nB/GFgKUpHmtZIB1695H7RCwqamq1PperUc hKnphiUFfRuSmdEGKtGlQUWwGzNufpcxHStiId+3xgMDcgmqZDx4BNfOQprak3uI4gKubbqoujkR hyyRh7N89enfNUFNgF+Gdl2ZcdBmmMyfEl6pwQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for media in the . zone
	DS=54649/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`media. 86400 IN RRSIG ( DS 8 1 86400 20260326050000 20260313040000 21831 . SNz7zLgNg1UvyUlu4wW79pzT2cHb/lZqqMul56lSIvYmtYG4icUNon6B2Cpdk/un39Gky6cA4+DV pn1YdE4aJAeuroaOY+1m0ixCXcggu632zPD2/WLC+LlgHetu7ek0ttQe9eeChUkObgFzNtMbpCby 2JHPfbvmheRlx1bEHkqoLJo7jWE3eQSe6BwLVuqW2nB/GFgKUpHmtZIB1695H7RCwqamq1PperUc hKnphiUFfRuSmdEGKtGlQUWwGzNufpcxHStiId+3xgMDcgmqZDx4BNfOQprak3uI4gKubbqoujkR hyyRh7N89enfNUFNgF+Gdl2ZcdBmmMyfEl6pwQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=54649/SHA-256 is now in the chain-of-trust
	`media. 86400 IN DS ( 54649 8 2 d73ad588629eaac32749998639d85e8b383069cd7b85e4a5edd131156eb15b97 )`
	Query to v0n2.nic.media for media/DNSKEY
	Received 899 bytes from 65.22.22.3
	;; Response received from [65.22.22.3] 899 octets ;; HEADER SECTION ;; id = 49030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; media. IN DNSKEY ;; ANSWER SECTION (4 records) media. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7K0oK3yH0qZHIXO/IXTX2hu2FQ4E7ac+OKeBMfL7PS/zUgdvTXbjcyu/Ulp24fs3H31GhZ zxekPrcQZ+ugzG2QKb7KfzJE1Uq9UrJDL5xTwr/0jZ7debJNf5Soyy5n4nEiVaPU2nQ4uwpeUFa3 /xgv2U7n/0ZcD0kcBCH+Q4H/ ) ; keytag 8541 media. 3600 IN DNSKEY ( 256 3 8 AwEAAaMIM+w/Tve9uvlv2DCarWzRoc0fmCnZ10ws5fqFSmNwtNAUi0lRIaNz+IqJCpqSCabwXzbJ iKE+zyj1jZjT1oTn5ehkY1yld3JVG4NIiyzgSJbRU1dAdbzFuHFdT2xrbeZWYDhxYTpuMYs+kuue cZYLea+4R+seVZj8ZrZkngrB ) ; keytag 50028 media. 3600 IN DNSKEY ( 257 3 8 AwEAAbjsdPQYDKV3qpXRCGI5BUfuXnkAsgjxeou91n88J4aqrsXw4reAAGOJoScdghzkuh5kaiQK +eHY/88y+9ZscVclat5Lwp0i1klFw+SyAoITzgz5lUgaAVJpb1Wt2xB3H/n/Hyudn9xmLzGE8Xj5 7KTTRcpOlg4tJNPVFWzOYUMWc0Q3ETJAOsFcDZDR7XJkYQrN7dIIN5CBMphtz6YxEWcHEEyNVHqT lc2hTKi+aNQh/dnQzal+yMN5rDBp2qka/p6zPULgOzuhEeu56MG4LoBKC0ZM5owuL3xd+8wCIFau 1HCTZaglSuORPsXYkBE0sKvtZoyu5+hNf8mvyfnJn3M= ) ; keytag 54649 media. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260331184345 20260310174345 54649 media. sSVm7IfUg1feAqxAEMmc3fEMbxb+2DfftV61VntFFVInT24LYl+/PNnJvi2DAVZs6y7eXA+Ee7xX LVEUAPJkTdPzL0BUXnFpawjQJll3b48O0UBS/FkOpzK44bgO7fOB4Uxtke4jdiv4XmJ9zUi1IrOU aRmJo/4GzEY5zQosRg+dylq/eRHhnPjWaDzaV9IN8JxwFhrW0+s7BUPiFH/8uMjJE7ftfxtyh8gS TYQWr3hjx/M0P7YyBqyvDYmnslQlPIEELUzdx1x0o54gU4ySztfAWx8TSbVV9FwvROMXxOoAwQxR /AfvQAjDlWF7Og6AIovk8Z2hgTRNw4DfDSerrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for media
	`media. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7K0oK3yH0qZHIXO/IXTX2hu2FQ4E7ac+OKeBMfL7PS/zUgdvTXbjcyu/Ulp24fs3H31GhZ zxekPrcQZ+ugzG2QKb7KfzJE1Uq9UrJDL5xTwr/0jZ7debJNf5Soyy5n4nEiVaPU2nQ4uwpeUFa3 /xgv2U7n/0ZcD0kcBCH+Q4H/ ) ; keytag 8541`
	`media. 3600 IN DNSKEY ( 256 3 8 AwEAAaMIM+w/Tve9uvlv2DCarWzRoc0fmCnZ10ws5fqFSmNwtNAUi0lRIaNz+IqJCpqSCabwXzbJ iKE+zyj1jZjT1oTn5ehkY1yld3JVG4NIiyzgSJbRU1dAdbzFuHFdT2xrbeZWYDhxYTpuMYs+kuue cZYLea+4R+seVZj8ZrZkngrB ) ; keytag 50028`
	`media. 3600 IN DNSKEY ( 257 3 8 AwEAAbjsdPQYDKV3qpXRCGI5BUfuXnkAsgjxeou91n88J4aqrsXw4reAAGOJoScdghzkuh5kaiQK +eHY/88y+9ZscVclat5Lwp0i1klFw+SyAoITzgz5lUgaAVJpb1Wt2xB3H/n/Hyudn9xmLzGE8Xj5 7KTTRcpOlg4tJNPVFWzOYUMWc0Q3ETJAOsFcDZDR7XJkYQrN7dIIN5CBMphtz6YxEWcHEEyNVHqT lc2hTKi+aNQh/dnQzal+yMN5rDBp2qka/p6zPULgOzuhEeu56MG4LoBKC0ZM5owuL3xd+8wCIFau 1HCTZaglSuORPsXYkBE0sKvtZoyu5+hNf8mvyfnJn3M= ) ; keytag 54649`
	DNSKEY=54649/SEP is now in the chain-of-trust
	DS=54649/SHA-256 verifies DNSKEY=54649/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`media. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260331184345 20260310174345 54649 media. sSVm7IfUg1feAqxAEMmc3fEMbxb+2DfftV61VntFFVInT24LYl+/PNnJvi2DAVZs6y7eXA+Ee7xX LVEUAPJkTdPzL0BUXnFpawjQJll3b48O0UBS/FkOpzK44bgO7fOB4Uxtke4jdiv4XmJ9zUi1IrOU aRmJo/4GzEY5zQosRg+dylq/eRHhnPjWaDzaV9IN8JxwFhrW0+s7BUPiFH/8uMjJE7ftfxtyh8gS TYQWr3hjx/M0P7YyBqyvDYmnslQlPIEELUzdx1x0o54gU4ySztfAWx8TSbVV9FwvROMXxOoAwQxR /AfvQAjDlWF7Og6AIovk8Z2hgTRNw4DfDSerrQ== )`
	RRSIG=54649 and DNSKEY=54649/SEP verifies the DNSKEY RRset
	DNSKEY=8541 is now in the chain-of-trust
	DNSKEY=50028 is now in the chain-of-trust
	Query to v2n1.nic.media for novo.media/A
	Received 304 bytes from 161.232.11.3
	;; Response received from [161.232.11.3] 304 octets ;; HEADER SECTION ;; id = 37192 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) novo.media. 3600 IN NS ns41.infomaniak.com. novo.media. 3600 IN NS ns42.infomaniak.com. novo.media. 3600 IN DS ( 19938 13 2 fcbe8bf7e492c4110152d8bc1912ceea25545e41c70a32e2a4a605b9a38b89f8 ) novo.media. 3600 IN RRSIG ( DS 8 2 3600 20260331184345 20260310174345 50028 media. Y+JPAYiAIgxGbfu/S0oHHCNNpkWSdP/2lZIP5Ztq2Vo595MhewvnM9z2gndGB704dwyfyzviNopS 4EI97xjKzrNxgyU8TdBZP8xioPsDxc1gME6xvX8dog0LxVzzpYGbAfUBWZOe6fLkcE9RZn07a/cc 9bjuuZM6JTBOt7Hu8c4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n3.nic.media for novo.media/DNSKEY
	Received 304 bytes from 161.232.10.3
	;; Response received from [161.232.10.3] 304 octets ;; HEADER SECTION ;; id = 28103 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) novo.media. 3600 IN NS ns41.infomaniak.com. novo.media. 3600 IN NS ns42.infomaniak.com. novo.media. 3600 IN DS ( 19938 13 2 fcbe8bf7e492c4110152d8bc1912ceea25545e41c70a32e2a4a605b9a38b89f8 ) novo.media. 3600 IN RRSIG ( DS 8 2 3600 20260331184345 20260310174345 50028 media. Y+JPAYiAIgxGbfu/S0oHHCNNpkWSdP/2lZIP5Ztq2Vo595MhewvnM9z2gndGB704dwyfyzviNopS 4EI97xjKzrNxgyU8TdBZP8xioPsDxc1gME6xvX8dog0LxVzzpYGbAfUBWZOe6fLkcE9RZn07a/cc 9bjuuZM6JTBOt7Hu8c4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone novo.media

novo.media

	Checking DS between media and novo.media
	Query to v0n3.nic.media for novo.media/DS
	Received 252 bytes from 161.232.10.3
	;; Response received from [161.232.10.3] 252 octets ;; HEADER SECTION ;; id = 25218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN DS ;; ANSWER SECTION (2 records) novo.media. 3600 IN DS ( 19938 13 2 fcbe8bf7e492c4110152d8bc1912ceea25545e41c70a32e2a4a605b9a38b89f8 ) novo.media. 3600 IN RRSIG ( DS 8 2 3600 20260331184345 20260310174345 50028 media. Y+JPAYiAIgxGbfu/S0oHHCNNpkWSdP/2lZIP5Ztq2Vo595MhewvnM9z2gndGB704dwyfyzviNopS 4EI97xjKzrNxgyU8TdBZP8xioPsDxc1gME6xvX8dog0LxVzzpYGbAfUBWZOe6fLkcE9RZn07a/cc 9bjuuZM6JTBOt7Hu8c4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for novo.media in the media zone
	DS=19938/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`novo.media. 3600 IN RRSIG ( DS 8 2 3600 20260331184345 20260310174345 50028 media. Y+JPAYiAIgxGbfu/S0oHHCNNpkWSdP/2lZIP5Ztq2Vo595MhewvnM9z2gndGB704dwyfyzviNopS 4EI97xjKzrNxgyU8TdBZP8xioPsDxc1gME6xvX8dog0LxVzzpYGbAfUBWZOe6fLkcE9RZn07a/cc 9bjuuZM6JTBOt7Hu8c4= )`
	RRSIG=50028 and DNSKEY=50028 verifies the DS RRset
	DS=19938/SHA-256 is now in the chain-of-trust
	`novo.media. 3600 IN DS ( 19938 13 2 fcbe8bf7e492c4110152d8bc1912ceea25545e41c70a32e2a4a605b9a38b89f8 )`
	Query to ns42.infomaniak.com for novo.media/DNSKEY
	Received 411 bytes from 83.166.143.75
	;; Response received from [83.166.143.75] 411 octets ;; HEADER SECTION ;; id = 40452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN DNSKEY ;; ANSWER SECTION (4 records) novo.media. 3600 IN DNSKEY ( 257 3 13 y/FNYmD/AkLIl0Sv+YWKE6Ng7fmIXskBaFRBIixWfoqJYaFzJpsistqMRVpKCesgpXFZ6dEgp792 tf2wLaIh1A== ) ; keytag 19938 novo.media. 3600 IN DNSKEY ( 256 3 13 HBEPUD/nScq4uQ9KPfW9qMf81KRT6ABxJRjdGSfBp3FM9p5VsxuhmV7rU+tuodde96xqopM9i/NG x2m31IGlhA== ) ; keytag 9215 novo.media. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260329203459 20260308200906 9215 novo.media. 5t6ksrdX8XjPk8Oo5pqOtNL4qEzy+G+/lx6W071PClM8Hcvdtdhm+DaAXGB17vePfipwI6UODz8q qRDDjM7Y6g== ) novo.media. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260329203459 20260308200906 19938 novo.media. QKlH+afDnwBFpE3OlZuQipECP8uZPAmr04OyGnkq7i0iKU5IntlsriRbxJ0ALZikhJXdTwX0Dwuu Kg78vtwkmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for novo.media
	`novo.media. 3600 IN DNSKEY ( 257 3 13 y/FNYmD/AkLIl0Sv+YWKE6Ng7fmIXskBaFRBIixWfoqJYaFzJpsistqMRVpKCesgpXFZ6dEgp792 tf2wLaIh1A== ) ; keytag 19938`
	`novo.media. 3600 IN DNSKEY ( 256 3 13 HBEPUD/nScq4uQ9KPfW9qMf81KRT6ABxJRjdGSfBp3FM9p5VsxuhmV7rU+tuodde96xqopM9i/NG x2m31IGlhA== ) ; keytag 9215`
	DNSKEY=19938/SEP is now in the chain-of-trust
	DS=19938/SHA-256 verifies DNSKEY=19938/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`novo.media. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260329203459 20260308200906 9215 novo.media. 5t6ksrdX8XjPk8Oo5pqOtNL4qEzy+G+/lx6W071PClM8Hcvdtdhm+DaAXGB17vePfipwI6UODz8q qRDDjM7Y6g== )`
	`novo.media. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260329203459 20260308200906 19938 novo.media. QKlH+afDnwBFpE3OlZuQipECP8uZPAmr04OyGnkq7i0iKU5IntlsriRbxJ0ALZikhJXdTwX0Dwuu Kg78vtwkmA== )`
	RRSIG=9215 and DNSKEY=9215 verifies the DNSKEY RRset
	RRSIG=19938 and DNSKEY=19938/SEP verifies the DNSKEY RRset
	DNSKEY=9215 is now in the chain-of-trust
	Query to ns41.infomaniak.com for novo.media/A
	Received 319 bytes from 83.166.143.74
	;; Response received from [83.166.143.74] 319 octets ;; HEADER SECTION ;; id = 65073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (2 records) novo.media. 7200 IN A 65.21.45.172 novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== ) ;; AUTHORITY SECTION (3 records) novo.media. 7200 IN NS ns42.infomaniak.com. novo.media. 7200 IN NS ns41.infomaniak.com. novo.media. 7200 IN RRSIG ( NS 13 2 7200 20260331014319 20260310005554 9215 novo.media. Nls12U1n8JEDJJ4bohlJaDm/cWDr2nPNV+doqaCztfyLK9etvnN1vfgrUFpJVP9j4bHw0SSKUx/d A4G0uA/kAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns41.infomaniak.com is authoritative for novo.media
	Found RRSIG signed by novo.media zone
	Query to ns42.infomaniak.com for novo.media/SOA
	Received 363 bytes from 83.166.143.75
	;; Response received from [83.166.143.75] 363 octets ;; HEADER SECTION ;; id = 13259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN SOA ;; ANSWER SECTION (2 records) novo.media. 7200 IN SOA ( ns41.infomaniak.com. hostmaster.infomaniak.ch. 2026030815 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 300 ;minimum ) novo.media. 7200 IN RRSIG ( SOA 13 2 7200 20260402192030 20260312182030 9215 novo.media. iEOgKkhWmJOBTZ5u90N+PXMwbrmLYs1iP6x22Dlva9/H8I9O5WrkFBW/pZmCOTC9jg2K5oOYhTvS mASi83TTVw== ) ;; AUTHORITY SECTION (3 records) novo.media. 7200 IN NS ns41.infomaniak.com. novo.media. 7200 IN NS ns42.infomaniak.com. novo.media. 7200 IN RRSIG ( NS 13 2 7200 20260331014319 20260310005554 9215 novo.media. Nls12U1n8JEDJJ4bohlJaDm/cWDr2nPNV+doqaCztfyLK9etvnN1vfgrUFpJVP9j4bHw0SSKUx/d A4G0uA/kAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns41.infomaniak.com for novo.media/A
	Received 319 bytes from 83.166.143.74
	;; Response received from [83.166.143.74] 319 octets ;; HEADER SECTION ;; id = 39149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (2 records) novo.media. 7200 IN A 65.21.45.172 novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== ) ;; AUTHORITY SECTION (3 records) novo.media. 7200 IN NS ns42.infomaniak.com. novo.media. 7200 IN NS ns41.infomaniak.com. novo.media. 7200 IN RRSIG ( NS 13 2 7200 20260331014319 20260310005554 9215 novo.media. Nls12U1n8JEDJJ4bohlJaDm/cWDr2nPNV+doqaCztfyLK9etvnN1vfgrUFpJVP9j4bHw0SSKUx/d A4G0uA/kAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	novo.media A RR has value 65.21.45.172
	Found 1 RRSIGs over A RRset
	`novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== )`
	RRSIG=9215 and DNSKEY=9215 verifies the A RRset

novo.media

	Query to ns42.infomaniak.com for novo.media/A
	Received 319 bytes from 83.166.143.75
	;; Response received from [83.166.143.75] 319 octets ;; HEADER SECTION ;; id = 42718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (2 records) novo.media. 7200 IN A 65.21.45.172 novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== ) ;; AUTHORITY SECTION (3 records) novo.media. 7200 IN NS ns41.infomaniak.com. novo.media. 7200 IN NS ns42.infomaniak.com. novo.media. 7200 IN RRSIG ( NS 13 2 7200 20260331014319 20260310005554 9215 novo.media. Nls12U1n8JEDJJ4bohlJaDm/cWDr2nPNV+doqaCztfyLK9etvnN1vfgrUFpJVP9j4bHw0SSKUx/d A4G0uA/kAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns42.infomaniak.com is authoritative for novo.media
	Found RRSIG signed by novo.media zone
	Query to ns42.infomaniak.com for novo.media/A
	Received 319 bytes from 83.166.143.75
	;; Response received from [83.166.143.75] 319 octets ;; HEADER SECTION ;; id = 21579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novo.media. IN A ;; ANSWER SECTION (2 records) novo.media. 7200 IN A 65.21.45.172 novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== ) ;; AUTHORITY SECTION (3 records) novo.media. 7200 IN NS ns41.infomaniak.com. novo.media. 7200 IN NS ns42.infomaniak.com. novo.media. 7200 IN RRSIG ( NS 13 2 7200 20260331014319 20260310005554 9215 novo.media. Nls12U1n8JEDJJ4bohlJaDm/cWDr2nPNV+doqaCztfyLK9etvnN1vfgrUFpJVP9j4bHw0SSKUx/d A4G0uA/kAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	novo.media A RR has value 65.21.45.172
	Found 1 RRSIGs over A RRset
	`novo.media. 7200 IN RRSIG ( A 13 2 7200 20260331043149 20260310042329 9215 novo.media. KqPreBKlH1/t/mTZ+D9EQI8SfNo1WKHySPm/ekXFUU5UWs7bPvOAiEKpQOnf/tjrca9RguDK2UoC 9FbdRd7UHg== )`
	RRSIG=9215 and DNSKEY=9215 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test novo.media at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: