DNSSEC Debugger - pikashowsapks.pro

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-10-24 21:13:11 UTC

Analyzing DNSSEC problems for pikashowsapks.pro

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1139 octets ;; HEADER SECTION ;; id = 56559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261111000000 20261021000000 38696 . VHYFWQzxvfICyEMAwDCqNJCoASexi9RUJqXLc8rsaEpX4x2J2YkgxJzMHN1HsXXmnLC7eqbdERKW I5wm/KzoFhDzY4F4TZB91tzN3gTDdDlIWvJi2GeUxfWj5MK/FalRoE9QX8EMjkVJPjqbxoeJ7yog 7Yy+3z5vo4e+OeqcPHniyc90+cxo6fE6nLeFIQxicSrEBLkPMX7jA2ipXynVxJepQT/Qkzos7HL0 N1xeHR3z3nfeH2JyFKz9moc6fSb4x0gDf9cbnFNJ5vbIttuxCEMcC4oWa/HNHPYeYHKKaLJ040Qm aQGBJG59X77u0+FznsPxHLOdUjTQ9Ab4UvTYIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261111000000 20261021000000 38696 . VHYFWQzxvfICyEMAwDCqNJCoASexi9RUJqXLc8rsaEpX4x2J2YkgxJzMHN1HsXXmnLC7eqbdERKW I5wm/KzoFhDzY4F4TZB91tzN3gTDdDlIWvJi2GeUxfWj5MK/FalRoE9QX8EMjkVJPjqbxoeJ7yog 7Yy+3z5vo4e+OeqcPHniyc90+cxo6fE6nLeFIQxicSrEBLkPMX7jA2ipXynVxJepQT/Qkzos7HL0 N1xeHR3z3nfeH2JyFKz9moc6fSb4x0gDf9cbnFNJ5vbIttuxCEMcC4oWa/HNHPYeYHKKaLJ040Qm aQGBJG59X77u0+FznsPxHLOdUjTQ9Ab4UvTYIA== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to h.root-servers.net for pikashowsapks.pro/A
	Received 786 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 786 octets ;; HEADER SECTION ;; id = 30366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pro. 172800 IN NS a0.pro.afilias-nst.info. pro. 172800 IN NS a2.pro.afilias-nst.info. pro. 172800 IN NS b0.pro.afilias-nst.org. pro. 172800 IN NS b2.pro.afilias-nst.org. pro. 172800 IN NS c0.pro.afilias-nst.info. pro. 172800 IN NS d0.pro.afilias-nst.org. pro. 86400 IN DS ( 33289 8 2 ff9e7ac3ca72d6794cca7f81e7dcb13fc66a59cda64485d5991194f1d566ef7e ) pro. 86400 IN RRSIG ( DS 8 1 86400 20261106170000 20261024160000 8763 . j5d8p8l4ZyAK0ZqqnEL4fwGVt6VVFlYdGyHxZm1+CvacXyXRPmUz2q9U29+2seGEX+JTfNhzku6i BiwVws3z1BoPm2dYGeCk7VUMj5P/9xgQ5//Bgqs1tSgDhsKL+f2FcQ3j0UEeemtCKDslzmCBHvEW hUKl0bSOz+qzKlhMKoleiKVg4PjJt4hUC54R3BEMnIz5uTd/9RTjVIjPajjtNUs/jr+OvoUa9WZh 4Nz81CUhXnIUa7IDFX+qHFF8GKtBwacDOYBEJ1z1gvR4wz2Wh9+AITNrrFnj8wvaD2PlPe5TP4kC Ql/DZ8TRXJ59+dbgArZs1FQTu5pEpkib9W/E8w== ) ;; ADDITIONAL SECTION (13 records) a0.pro.afilias-nst.info. 172800 IN A 199.182.0.1 a2.pro.afilias-nst.info. 172800 IN A 199.182.32.1 b0.pro.afilias-nst.org. 172800 IN A 199.182.1.1 b2.pro.afilias-nst.org. 172800 IN A 199.182.40.1 c0.pro.afilias-nst.info. 172800 IN A 199.182.16.1 d0.pro.afilias-nst.org. 172800 IN A 199.182.17.1 a0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:c0::1 a2.pro.afilias-nst.info. 172800 IN AAAA 2001:500:e0::1 b0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:c1::1 b2.pro.afilias-nst.org. 172800 IN AAAA 2001:500:e1::1 c0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:d0::1 d0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:d1::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for pro/DNSKEY
	Received 811 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 811 octets ;; HEADER SECTION ;; id = 47076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pro. 172800 IN NS a0.pro.afilias-nst.info. pro. 172800 IN NS a2.pro.afilias-nst.info. pro. 172800 IN NS b0.pro.afilias-nst.org. pro. 172800 IN NS b2.pro.afilias-nst.org. pro. 172800 IN NS c0.pro.afilias-nst.info. pro. 172800 IN NS d0.pro.afilias-nst.org. pro. 86400 IN DS ( 33289 8 2 ff9e7ac3ca72d6794cca7f81e7dcb13fc66a59cda64485d5991194f1d566ef7e ) pro. 86400 IN RRSIG ( DS 8 1 86400 20261106170000 20261024160000 8763 . j5d8p8l4ZyAK0ZqqnEL4fwGVt6VVFlYdGyHxZm1+CvacXyXRPmUz2q9U29+2seGEX+JTfNhzku6i BiwVws3z1BoPm2dYGeCk7VUMj5P/9xgQ5//Bgqs1tSgDhsKL+f2FcQ3j0UEeemtCKDslzmCBHvEW hUKl0bSOz+qzKlhMKoleiKVg4PjJt4hUC54R3BEMnIz5uTd/9RTjVIjPajjtNUs/jr+OvoUa9WZh 4Nz81CUhXnIUa7IDFX+qHFF8GKtBwacDOYBEJ1z1gvR4wz2Wh9+AITNrrFnj8wvaD2PlPe5TP4kC Ql/DZ8TRXJ59+dbgArZs1FQTu5pEpkib9W/E8w== ) ;; ADDITIONAL SECTION (13 records) a0.pro.afilias-nst.info. 172800 IN A 199.182.0.1 a0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:c0::1 a2.pro.afilias-nst.info. 172800 IN A 199.182.32.1 a2.pro.afilias-nst.info. 172800 IN AAAA 2001:500:e0::1 b0.pro.afilias-nst.org. 172800 IN A 199.182.1.1 b0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:c1::1 b2.pro.afilias-nst.org. 172800 IN A 199.182.40.1 b2.pro.afilias-nst.org. 172800 IN AAAA 2001:500:e1::1 c0.pro.afilias-nst.info. 172800 IN A 199.182.16.1 c0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:d0::1 d0.pro.afilias-nst.org. 172800 IN A 199.182.17.1 d0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:d1::1 ;; { "EDNS-VERSION": 0 }
	Found child zone pro

pro

	Checking DS between . and pro
	Query to g.root-servers.net for pro/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 23173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DS ;; ANSWER SECTION (2 records) pro. 86400 IN DS ( 33289 8 2 ff9e7ac3ca72d6794cca7f81e7dcb13fc66a59cda64485d5991194f1d566ef7e ) pro. 86400 IN RRSIG ( DS 8 1 86400 20261106170000 20261024160000 8763 . j5d8p8l4ZyAK0ZqqnEL4fwGVt6VVFlYdGyHxZm1+CvacXyXRPmUz2q9U29+2seGEX+JTfNhzku6i BiwVws3z1BoPm2dYGeCk7VUMj5P/9xgQ5//Bgqs1tSgDhsKL+f2FcQ3j0UEeemtCKDslzmCBHvEW hUKl0bSOz+qzKlhMKoleiKVg4PjJt4hUC54R3BEMnIz5uTd/9RTjVIjPajjtNUs/jr+OvoUa9WZh 4Nz81CUhXnIUa7IDFX+qHFF8GKtBwacDOYBEJ1z1gvR4wz2Wh9+AITNrrFnj8wvaD2PlPe5TP4kC Ql/DZ8TRXJ59+dbgArZs1FQTu5pEpkib9W/E8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pro in the . zone
	DS=33289/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pro. 86400 IN RRSIG ( DS 8 1 86400 20261106170000 20261024160000 8763 . j5d8p8l4ZyAK0ZqqnEL4fwGVt6VVFlYdGyHxZm1+CvacXyXRPmUz2q9U29+2seGEX+JTfNhzku6i BiwVws3z1BoPm2dYGeCk7VUMj5P/9xgQ5//Bgqs1tSgDhsKL+f2FcQ3j0UEeemtCKDslzmCBHvEW hUKl0bSOz+qzKlhMKoleiKVg4PjJt4hUC54R3BEMnIz5uTd/9RTjVIjPajjtNUs/jr+OvoUa9WZh 4Nz81CUhXnIUa7IDFX+qHFF8GKtBwacDOYBEJ1z1gvR4wz2Wh9+AITNrrFnj8wvaD2PlPe5TP4kC Ql/DZ8TRXJ59+dbgArZs1FQTu5pEpkib9W/E8w== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=33289/SHA-256 is now in the chain-of-trust
	`pro. 86400 IN DS ( 33289 8 2 ff9e7ac3ca72d6794cca7f81e7dcb13fc66a59cda64485d5991194f1d566ef7e )`
	Query to b2.pro.afilias-nst.org for pro/DNSKEY
	Received 1171 bytes from 199.182.40.1
	;; Response received from [199.182.40.1] 1171 octets ;; HEADER SECTION ;; id = 61607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DNSKEY ;; ANSWER SECTION (5 records) pro. 3600 IN DNSKEY ( 257 3 8 AwEAAb2os9GYUftDTAAkuXay8knZ26r9DY5E7ijma/BhK1BGVhrFhOh00hoHy+8oQbRk17uNgpJl bvKKM1xDC0+sFZUS0D4vpp9plJFg01/6ptCo4pCK7fZucVbI18UEKoXpGRb/7EVn9eIZUomZhWXA b1HMkFJPpYrigAWe6UrTfTT4v6kjPPwg53951vQQFCcecKPrUpBbNDTSBnOPjUpK5/wTwO0hD1gM h2mvBFa9WgiXGe/fbsahAxsRf/0YxkKI3bSQsyZ9PkUzWSzwa2qeBgLxeljPNitxziIR6uvawgpY s9s50Enz8nD22n35k0FHEKtAZW47qv6VDlmANUejfJc= ) ; keytag 42154 pro. 3600 IN DNSKEY ( 256 3 8 AwEAAaOE1FPO4IRk84/UiG8FUSk70Bs6rs6T4ZaIjiHH6/q6JuOHIGMqAQSCvjg0QwY+urU5EdCX H/wVnO+Dl6o4pTcQUekhPULFfgZIdiokq3ead9sGMjUzBcxfH2LMWoU3yIOu+d0WkbQ3/AK5HZh4 +4Z2vO8H0tPG/EoSphUtDezh ) ; keytag 45546 pro. 3600 IN DNSKEY ( 256 3 8 AwEAAefegZK5GHq+ulFwFo06jNju7HSw4bG2CSsne4y6XtNHvwtYYGN49VLzkVFT34XFlgU80meh 5EwQE+7SsNHqOs1Wn1usTdbnFKjJfyebyBGevypwbP0myCbT2Vd7kfRjt9Lc5nQC17dekGTVYlYv mnAUrLfMdGq6BSd1rAWoaTtT ) ; keytag 31278 pro. 3600 IN DNSKEY ( 257 3 8 AwEAAfFcIrisA2HVaJbiFoY2eGBYtLraZVL6X1LliCsTxhlDgFXR+tYSYBa+Lv0BJVtLQu+7QyMJ uJnssYpdmfyb3hVxIZ6u73P/gFDMce/XFNribt6dRSu6h71GvMDzYPytxKBPiQ/LYvATnQXvTsMV 44ZOtLdKEoJ+D7I7hGYG9pqjQLhoORzLa9vgl2OFSf2L8TRcePXFeLtzYHpWRxYkyTp+LJJxYKzM Rakhyza4xg19P+BE+dpBjMxOFSXQ1p0jtDfWcxkapPd2pb7nJiIa4bsfEX1cntdYqCAB2ggvMzhJ dY8RQk3RA9Pt0cBos33uhl1CGeqevD9i/eCsuPlrCCc= ) ; keytag 33289 pro. 3600 IN RRSIG ( DNSKEY 8 1 3600 20261112170133 20261022153133 33289 pro. 5FNMukt/0hta6MUr+PaZYnMovpMDgqUAaSVK7TU9Bs5VUw2rjnHEGexmACroFCsf63fVdsAeojXx zu/e0qHAcuh03rQx5ZWG/i4yNnyiFSz7YqfkX5/Y+VrVaqhA+6VutPogRYJMBYjS0S1lzWUVhI0i VuePXdzOPOV9UEskqCf+0OgD8MWomZITOPbjzoIJdkZI5GxWITwlomcNxS5gFSKWO6QwM/Y8iXDb hEXB6kW31vgrsZ7rInywEmmjWR5dM0C6UKJ7TyWs2Vx5/tfyu9scPWZ5jWsLVPRBfEWpJV3VZQkU AzxmLb0QnoU/XcfHo1O92lrFJKzgF0TNjpMCQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for pro
	`pro. 3600 IN DNSKEY ( 257 3 8 AwEAAb2os9GYUftDTAAkuXay8knZ26r9DY5E7ijma/BhK1BGVhrFhOh00hoHy+8oQbRk17uNgpJl bvKKM1xDC0+sFZUS0D4vpp9plJFg01/6ptCo4pCK7fZucVbI18UEKoXpGRb/7EVn9eIZUomZhWXA b1HMkFJPpYrigAWe6UrTfTT4v6kjPPwg53951vQQFCcecKPrUpBbNDTSBnOPjUpK5/wTwO0hD1gM h2mvBFa9WgiXGe/fbsahAxsRf/0YxkKI3bSQsyZ9PkUzWSzwa2qeBgLxeljPNitxziIR6uvawgpY s9s50Enz8nD22n35k0FHEKtAZW47qv6VDlmANUejfJc= ) ; keytag 42154`
	`pro. 3600 IN DNSKEY ( 256 3 8 AwEAAaOE1FPO4IRk84/UiG8FUSk70Bs6rs6T4ZaIjiHH6/q6JuOHIGMqAQSCvjg0QwY+urU5EdCX H/wVnO+Dl6o4pTcQUekhPULFfgZIdiokq3ead9sGMjUzBcxfH2LMWoU3yIOu+d0WkbQ3/AK5HZh4 +4Z2vO8H0tPG/EoSphUtDezh ) ; keytag 45546`
	`pro. 3600 IN DNSKEY ( 256 3 8 AwEAAefegZK5GHq+ulFwFo06jNju7HSw4bG2CSsne4y6XtNHvwtYYGN49VLzkVFT34XFlgU80meh 5EwQE+7SsNHqOs1Wn1usTdbnFKjJfyebyBGevypwbP0myCbT2Vd7kfRjt9Lc5nQC17dekGTVYlYv mnAUrLfMdGq6BSd1rAWoaTtT ) ; keytag 31278`
	`pro. 3600 IN DNSKEY ( 257 3 8 AwEAAfFcIrisA2HVaJbiFoY2eGBYtLraZVL6X1LliCsTxhlDgFXR+tYSYBa+Lv0BJVtLQu+7QyMJ uJnssYpdmfyb3hVxIZ6u73P/gFDMce/XFNribt6dRSu6h71GvMDzYPytxKBPiQ/LYvATnQXvTsMV 44ZOtLdKEoJ+D7I7hGYG9pqjQLhoORzLa9vgl2OFSf2L8TRcePXFeLtzYHpWRxYkyTp+LJJxYKzM Rakhyza4xg19P+BE+dpBjMxOFSXQ1p0jtDfWcxkapPd2pb7nJiIa4bsfEX1cntdYqCAB2ggvMzhJ dY8RQk3RA9Pt0cBos33uhl1CGeqevD9i/eCsuPlrCCc= ) ; keytag 33289`
	DNSKEY=33289/SEP is now in the chain-of-trust
	DS=33289/SHA-256 verifies DNSKEY=33289/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pro. 3600 IN RRSIG ( DNSKEY 8 1 3600 20261112170133 20261022153133 33289 pro. 5FNMukt/0hta6MUr+PaZYnMovpMDgqUAaSVK7TU9Bs5VUw2rjnHEGexmACroFCsf63fVdsAeojXx zu/e0qHAcuh03rQx5ZWG/i4yNnyiFSz7YqfkX5/Y+VrVaqhA+6VutPogRYJMBYjS0S1lzWUVhI0i VuePXdzOPOV9UEskqCf+0OgD8MWomZITOPbjzoIJdkZI5GxWITwlomcNxS5gFSKWO6QwM/Y8iXDb hEXB6kW31vgrsZ7rInywEmmjWR5dM0C6UKJ7TyWs2Vx5/tfyu9scPWZ5jWsLVPRBfEWpJV3VZQkU AzxmLb0QnoU/XcfHo1O92lrFJKzgF0TNjpMCQg== )`
	RRSIG=33289 and DNSKEY=33289/SEP verifies the DNSKEY RRset
	DNSKEY=42154/SEP is now in the chain-of-trust
	DNSKEY=45546 is now in the chain-of-trust
	DNSKEY=31278 is now in the chain-of-trust
	Query to b0.pro.afilias-nst.org for pikashowsapks.pro/A
	Received 587 bytes from 199.182.1.1
	;; Response received from [199.182.1.1] 587 octets ;; HEADER SECTION ;; id = 10163 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pikashowsapks.pro. 3600 IN NS demi.ns.cloudflare.com. pikashowsapks.pro. 3600 IN NS renan.ns.cloudflare.com. k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN NSEC3 ( 1 1 0 - k175v0381lcrmceag1d3i0fadts2lfs5 NS SOA RRSIG DNSKEY NSEC3PARAM ) k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. SpFbzhI9Gxg3SQY5bhyOscaS+lZRTR06ZkRusIrSj+d0usk/ErG1Om0mZ9oV3RMR9ToLaX2Otp0G +7oqYYrt/QMAPr1nkhuvkLLpXMl+26/M0R8UdWlYQ9et8NmuzVvaXAClcnJk4e7NcqaFoIN4T6yJ k58xVFzqAfmCzL90BKk= ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN NSEC3 ( 1 1 0 - 29i6rcvcsb2qp5hviqompc6ngvn7v8e2 NS DS RRSIG ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. JjA5vqqytBCCTBgwtiTj3o/g2BD5tCgl9GZeV0H91W8h4DBSKKPqsT3dOrNESVksETDXgwn2U0Lx bbqVBKgNHw7kCCwKoy1UiNPuBt3RXRrae/za5rYKJk/Cyn26XR+jQIcou9DO9VAcU+ZRb+BYSK/Q +gsHwRQ2FYBV7sAcoZs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c0.pro.afilias-nst.info for pikashowsapks.pro/DNSKEY
	Received 587 bytes from 199.182.16.1
	;; Response received from [199.182.16.1] 587 octets ;; HEADER SECTION ;; id = 57991 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pikashowsapks.pro. 3600 IN NS demi.ns.cloudflare.com. pikashowsapks.pro. 3600 IN NS renan.ns.cloudflare.com. k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN NSEC3 ( 1 1 0 - k175v0381lcrmceag1d3i0fadts2lfs5 NS SOA RRSIG DNSKEY NSEC3PARAM ) k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. SpFbzhI9Gxg3SQY5bhyOscaS+lZRTR06ZkRusIrSj+d0usk/ErG1Om0mZ9oV3RMR9ToLaX2Otp0G +7oqYYrt/QMAPr1nkhuvkLLpXMl+26/M0R8UdWlYQ9et8NmuzVvaXAClcnJk4e7NcqaFoIN4T6yJ k58xVFzqAfmCzL90BKk= ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN NSEC3 ( 1 1 0 - 29i6rcvcsb2qp5hviqompc6ngvn7v8e2 NS DS RRSIG ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. JjA5vqqytBCCTBgwtiTj3o/g2BD5tCgl9GZeV0H91W8h4DBSKKPqsT3dOrNESVksETDXgwn2U0Lx bbqVBKgNHw7kCCwKoy1UiNPuBt3RXRrae/za5rYKJk/Cyn26XR+jQIcou9DO9VAcU+ZRb+BYSK/Q +gsHwRQ2FYBV7sAcoZs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone pikashowsapks.pro

pikashowsapks.pro

	Checking DS between pro and pikashowsapks.pro
	Query to b0.pro.afilias-nst.org for pikashowsapks.pro/DS
	Received 776 bytes from 199.182.1.1
	;; Response received from [199.182.1.1] 776 octets ;; HEADER SECTION ;; id = 5548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN NSEC3 ( 1 1 0 - k175v0381lcrmceag1d3i0fadts2lfs5 NS SOA RRSIG DNSKEY NSEC3PARAM ) k173vtttsjdrahpccvt5nqj6nvlrqkr6.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. SpFbzhI9Gxg3SQY5bhyOscaS+lZRTR06ZkRusIrSj+d0usk/ErG1Om0mZ9oV3RMR9ToLaX2Otp0G +7oqYYrt/QMAPr1nkhuvkLLpXMl+26/M0R8UdWlYQ9et8NmuzVvaXAClcnJk4e7NcqaFoIN4T6yJ k58xVFzqAfmCzL90BKk= ) pro. 3600 IN SOA ( a0.pro.afilias-nst.info. hostmaster.donuts.email. 1792875745 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) pro. 3600 IN RRSIG ( SOA 8 1 3600 20261114210239 20261024193239 45546 pro. Pl4VjQeLeZ3knI7pMAx6Dt4JKVGEmFvr6aDsaYOUJAuwLB5bfTclWujD0DoIwCPDz5AkErq0nMXt uyEMiY4NiPTKdrMLv9YXwc7zfOFtiMcpPM3qsdxO+Z4JDDUJNBoZBrEf4QzyDG3vkddAlNr9UEuY 2mCeulRrlwZiteX+SS4= ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN NSEC3 ( 1 1 0 - 29i6rcvcsb2qp5hviqompc6ngvn7v8e2 NS DS RRSIG ) 29htsf477s6p07geqnrj84tk6o4h4bal.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20261112170133 20261022153133 45546 pro. JjA5vqqytBCCTBgwtiTj3o/g2BD5tCgl9GZeV0H91W8h4DBSKKPqsT3dOrNESVksETDXgwn2U0Lx bbqVBKgNHw7kCCwKoy1UiNPuBt3RXRrae/za5rYKJk/Cyn26XR+jQIcou9DO9VAcU+ZRb+BYSK/Q +gsHwRQ2FYBV7sAcoZs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for pikashowsapks.pro in the pro zone
	Query to demi.ns.cloudflare.com for pikashowsapks.pro/DNSKEY
	Received 108 bytes from 108.162.192.95
	;; Response received from [108.162.192.95] 108 octets ;; HEADER SECTION ;; id = 49688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) pikashowsapks.pro. 1800 IN SOA ( demi.ns.cloudflare.com. dns.cloudflare.com. 2418169903 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to demi.ns.cloudflare.com for pikashowsapks.pro/A
	Received 78 bytes from 172.64.32.95
	;; Response received from [172.64.32.95] 78 octets ;; HEADER SECTION ;; id = 10096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN A ;; ANSWER SECTION (2 records) pikashowsapks.pro. 300 IN A 104.21.71.191 pikashowsapks.pro. 300 IN A 172.67.148.22 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	demi.ns.cloudflare.com is authoritative for pikashowsapks.pro
	Query to renan.ns.cloudflare.com for pikashowsapks.pro/SOA
	Received 108 bytes from 108.162.195.62
	;; Response received from [108.162.195.62] 108 octets ;; HEADER SECTION ;; id = 44626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN SOA ;; ANSWER SECTION (1 record) pikashowsapks.pro. 1800 IN SOA ( demi.ns.cloudflare.com. dns.cloudflare.com. 2418169903 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to demi.ns.cloudflare.com for pikashowsapks.pro/A
	pikashowsapks.pro A RR has value 104.21.71.191
	pikashowsapks.pro A RR has value 172.67.148.22
	No RRSIGs found

pikashowsapks.pro

	Query to renan.ns.cloudflare.com for pikashowsapks.pro/A
	Received 78 bytes from 162.159.44.62
	;; Response received from [162.159.44.62] 78 octets ;; HEADER SECTION ;; id = 12359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pikashowsapks.pro. IN A ;; ANSWER SECTION (2 records) pikashowsapks.pro. 300 IN A 104.21.71.191 pikashowsapks.pro. 300 IN A 172.67.148.22 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	renan.ns.cloudflare.com is authoritative for pikashowsapks.pro
	Query to renan.ns.cloudflare.com for pikashowsapks.pro/A
	pikashowsapks.pro A RR has value 104.21.71.191
	pikashowsapks.pro A RR has value 172.67.148.22
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pikashowsapks.pro at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: