DNSSEC Debugger - pinup-1.cl

Domain Name:

Time: 2026-03-07 06:35:43 UTC

Analyzing DNSSEC problems for pinup-1.cl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 55555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260323000000 20260302000000 20326 . pUHQsrU8WX55NlnCs+DxK8/4cbs6zcjF9BLL7acYERi7OgyKPysyAko2HvNUbMlUSBDW/d/UKsUZ XmcZcz9UlmlZIDvPUZcXkUKs8aeVszXL6wKTOkFXGpU6u97cUZ8GHW9uPSM8GCfe+p72FV8c2/9E N8K+REH6+ZVuc0oXH+0vhxUEAej+kFbUiproNH2SnO2j+CB9KxPKlZHLO8antQYhoJDWmumbXRXq KfTFiyDRzg5ROcwsWmMiSrDSPm9aFoFTrq9/W2cyKMcrSJCMtFWg520JB9miBzWOxzJdIFBq8jjh /Hjo++sC08kVK+Fp2CK1WFFy/HCBRszu34bVVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260323000000 20260302000000 20326 . pUHQsrU8WX55NlnCs+DxK8/4cbs6zcjF9BLL7acYERi7OgyKPysyAko2HvNUbMlUSBDW/d/UKsUZ XmcZcz9UlmlZIDvPUZcXkUKs8aeVszXL6wKTOkFXGpU6u97cUZ8GHW9uPSM8GCfe+p72FV8c2/9E N8K+REH6+ZVuc0oXH+0vhxUEAej+kFbUiproNH2SnO2j+CB9KxPKlZHLO8antQYhoJDWmumbXRXq KfTFiyDRzg5ROcwsWmMiSrDSPm9aFoFTrq9/W2cyKMcrSJCMtFWg520JB9miBzWOxzJdIFBq8jjh /Hjo++sC08kVK+Fp2CK1WFFy/HCBRszu34bVVA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for pinup-1.cl/A
	Received 853 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 853 octets ;; HEADER SECTION ;; id = 52522 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cl. 172800 IN NS c.nic.cl. cl. 172800 IN NS b.nic.cl. cl. 172800 IN NS a.nic.cl. cl. 172800 IN NS cl1.dnsnode.net. cl. 172800 IN NS cl-ns.anycast.pch.net. cl. 172800 IN NS cl1-tld.d-zone.ca. cl. 172800 IN NS cl2-tld.d-zone.ca. cl. 86400 IN DS ( 21199 8 2 7d756dffab6d3cd9c786ff5c659954c22944faef9433eee26f1d84eb5370b394 ) cl. 86400 IN RRSIG ( DS 8 1 86400 20260320050000 20260307040000 21831 . hYFoaFH2TY/UiF3JDILs7uY2XjaLz2lBRxSV7DNPGWC0qwdSSrAGrDqQ3Zgre19uO5C8thUe1FHV 3nQpmnFfLPhm0Su+mDFmU+iFf7nOPl1ygoIwOVaUTQBk0yhrHASxzkXBqbMMcuCkZm96xO1rfCHh DWabkzvuN3ChlGffaMnkWm8tvOXN698FF6WmRtQZ2emoE/gIgQg4UetZGl4PuzEb7BPsKpkCDvrH qHW4878rtoZVSkoJdDaQON0iGb5TmJv8M7rplY4sXoDzEyJIfyL5stNkF/+rTqdU/lOUT8pK9WoI /erTe0pDk8jSkWZP7pJNGFVJS4+CCwXAEC+5pQ== ) ;; ADDITIONAL SECTION (15 records) cl2-tld.d-zone.ca. 172800 IN A 185.159.198.56 cl1-tld.d-zone.ca. 172800 IN A 185.159.197.56 cl-ns.anycast.pch.net. 172800 IN A 204.61.216.30 cl1.dnsnode.net. 172800 IN A 194.146.106.34 c.nic.cl. 172800 IN A 200.16.112.16 b.nic.cl. 172800 IN A 200.7.4.7 a.nic.cl. 172800 IN A 190.124.27.10 cl2-tld.d-zone.ca. 172800 IN AAAA 2620:10a:80ab::56 cl1-tld.d-zone.ca. 172800 IN AAAA 2620:10a:80aa::56 cl-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6030:ad::1 cl1.dnsnode.net. 172800 IN AAAA 2001:67c:1010:8::53 c.nic.cl. 172800 IN AAAA 2001:1398:275:0:200:16:112:16 b.nic.cl. 172800 IN AAAA 2001:1398:274:0:200:7:4:7 a.nic.cl. 172800 IN AAAA 2001:1398:121:0:190:124:27:10 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for cl/DNSKEY
	Received 840 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 840 octets ;; HEADER SECTION ;; id = 62091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cl. 172800 IN NS cl1-tld.d-zone.ca. cl. 172800 IN NS cl1.dnsnode.net. cl. 172800 IN NS cl2-tld.d-zone.ca. cl. 172800 IN NS b.nic.cl. cl. 172800 IN NS c.nic.cl. cl. 172800 IN NS a.nic.cl. cl. 172800 IN NS cl-ns.anycast.pch.net. cl. 86400 IN DS ( 21199 8 2 7d756dffab6d3cd9c786ff5c659954c22944faef9433eee26f1d84eb5370b394 ) cl. 86400 IN RRSIG ( DS 8 1 86400 20260320050000 20260307040000 21831 . hYFoaFH2TY/UiF3JDILs7uY2XjaLz2lBRxSV7DNPGWC0qwdSSrAGrDqQ3Zgre19uO5C8thUe1FHV 3nQpmnFfLPhm0Su+mDFmU+iFf7nOPl1ygoIwOVaUTQBk0yhrHASxzkXBqbMMcuCkZm96xO1rfCHh DWabkzvuN3ChlGffaMnkWm8tvOXN698FF6WmRtQZ2emoE/gIgQg4UetZGl4PuzEb7BPsKpkCDvrH qHW4878rtoZVSkoJdDaQON0iGb5TmJv8M7rplY4sXoDzEyJIfyL5stNkF/+rTqdU/lOUT8pK9WoI /erTe0pDk8jSkWZP7pJNGFVJS4+CCwXAEC+5pQ== ) ;; ADDITIONAL SECTION (15 records) a.nic.cl. 172800 IN A 190.124.27.10 b.nic.cl. 172800 IN A 200.7.4.7 c.nic.cl. 172800 IN A 200.16.112.16 cl2-tld.d-zone.ca. 172800 IN A 185.159.198.56 cl1-tld.d-zone.ca. 172800 IN A 185.159.197.56 cl-ns.anycast.pch.net. 172800 IN A 204.61.216.30 cl1.dnsnode.net. 172800 IN A 194.146.106.34 a.nic.cl. 172800 IN AAAA 2001:1398:121:0:190:124:27:10 b.nic.cl. 172800 IN AAAA 2001:1398:274:0:200:7:4:7 c.nic.cl. 172800 IN AAAA 2001:1398:275:0:200:16:112:16 cl2-tld.d-zone.ca. 172800 IN AAAA 2620:10a:80ab::56 cl1-tld.d-zone.ca. 172800 IN AAAA 2620:10a:80aa::56 cl-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6030:ad::1 cl1.dnsnode.net. 172800 IN AAAA 2001:67c:1010:8::53 ;; { "EDNS-VERSION": 0 }
	Found child zone cl

	Checking DS between . and cl
	Query to k.root-servers.net for cl/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 51411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cl. IN DS ;; ANSWER SECTION (2 records) cl. 86400 IN DS ( 21199 8 2 7d756dffab6d3cd9c786ff5c659954c22944faef9433eee26f1d84eb5370b394 ) cl. 86400 IN RRSIG ( DS 8 1 86400 20260320050000 20260307040000 21831 . hYFoaFH2TY/UiF3JDILs7uY2XjaLz2lBRxSV7DNPGWC0qwdSSrAGrDqQ3Zgre19uO5C8thUe1FHV 3nQpmnFfLPhm0Su+mDFmU+iFf7nOPl1ygoIwOVaUTQBk0yhrHASxzkXBqbMMcuCkZm96xO1rfCHh DWabkzvuN3ChlGffaMnkWm8tvOXN698FF6WmRtQZ2emoE/gIgQg4UetZGl4PuzEb7BPsKpkCDvrH qHW4878rtoZVSkoJdDaQON0iGb5TmJv8M7rplY4sXoDzEyJIfyL5stNkF/+rTqdU/lOUT8pK9WoI /erTe0pDk8jSkWZP7pJNGFVJS4+CCwXAEC+5pQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cl in the . zone
	DS=21199/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cl. 86400 IN RRSIG ( DS 8 1 86400 20260320050000 20260307040000 21831 . hYFoaFH2TY/UiF3JDILs7uY2XjaLz2lBRxSV7DNPGWC0qwdSSrAGrDqQ3Zgre19uO5C8thUe1FHV 3nQpmnFfLPhm0Su+mDFmU+iFf7nOPl1ygoIwOVaUTQBk0yhrHASxzkXBqbMMcuCkZm96xO1rfCHh DWabkzvuN3ChlGffaMnkWm8tvOXN698FF6WmRtQZ2emoE/gIgQg4UetZGl4PuzEb7BPsKpkCDvrH qHW4878rtoZVSkoJdDaQON0iGb5TmJv8M7rplY4sXoDzEyJIfyL5stNkF/+rTqdU/lOUT8pK9WoI /erTe0pDk8jSkWZP7pJNGFVJS4+CCwXAEC+5pQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=21199/SHA-256 is now in the chain-of-trust
	`cl. 86400 IN DS ( 21199 8 2 7d756dffab6d3cd9c786ff5c659954c22944faef9433eee26f1d84eb5370b394 )`
	Query to a.nic.cl for cl/DNSKEY
	Received 971 bytes from 190.124.27.10
	;; Response received from [190.124.27.10] 971 octets ;; HEADER SECTION ;; id = 8825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cl. IN DNSKEY ;; ANSWER SECTION (4 records) cl. 3600 IN DNSKEY ( 256 3 8 AwEAAe5R6rb9QdTURbnEdw0+qlUVJrkjSrRVoEkEmMQwBCQVktgrsURNB3RtSpG1u75KR1HifJYQ Ga2ncOUqQaNKI0uNw29nMV4yqzjIOHdVYXsmISiiow9AY3WDlNqlKYUuemZBtLK5CSAqlfDzjPVJ SacQ33C1H31bG8gwvq1GKoB0n2ILhlVYeWosusvIP6NghFpAzxJDHGmU5rmxOPyXues= ) ; keytag 57981 cl. 3600 IN DNSKEY ( 257 3 8 AwEAAaeKmWkvOjJ/XHOoOzdbb9xMPHjNuHS9J8Qw0vUo3DLwgZPCe3VMaSoYQ0FUkRi3AvyJNIGb F9jMBfWbCjZY8pQg/yCzsrjJypwdH8Mf6FoOoXna+OfRzg1POo2wi4gQn3f4yD6q5tHW6DdndGro KpPBOVmA4VdYyCQ0dc7Fe12Uqekb1aDzu4Rz0BjwFObIewGaVnjJxc0I6m8iJkMaaWgh5THPHRDU eQHyzTDvlDbwFBh+Xrb9zFUUxR6bx5/9N5ghJeik2293ZCQypKy6MRX8eMYxh3f8WIcntpYVLzzF SSzq4nrwnhjlw94kfEKEpnp8NSvlVyZQgU1csewlF0k= ) ; keytag 21199 cl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260418213211 20260307053115 57981 cl. QA8hHlMwcc7GaF2IbsEJBNXQvgM4UbtPwIa6zYmtFm5sZQfRkYLeiwVeB2T/tiU1HwKw1nKEqJrh 1m8UcPHMgUayE9PyYca4c65rUHASNBBpNAOr7l/kfH6oIcs4zFKYsf8dmlckkV8JJC6Bn2QcTfLp nBhnkzDyKOT21p4zHjnEU9U/rQbYtOMmvDotgzPkPlbpABhpOEq7z26aM9iQdA== ) cl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260605130825 20260121130825 21199 cl. L/inRRa3L0bpuIGN0BG2+bPOGtBkR+2gR0EbmvTbPrpq/QyFJTeWl5hQSRyeaok1pvJFfSHufVzk wHXcIoJdwZ9dPBqD/Kafc5wd0XK2Xy3O0KlgwGmdP/AIzUGnCT836pGSxVs2CYc1Dv4XODSfxj1V LfYAsy9kRtAzhB+HnmsAsm+P+rDhGr3NCJ52Aw0VZm87zNXYMO1tXNXSXh4hhy4gRZ4wwWnODPud QefiNEA6aWORQqgI+LccESC+kCGjQkw0IlmdAKiyFLQ1u3aup7dElcz+3UNiyBznVg21eggVpsuY O2R5b+OTSE0C8MDlDEKOybDIZ4+HxDlRmYtoQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cl
	`cl. 3600 IN DNSKEY ( 256 3 8 AwEAAe5R6rb9QdTURbnEdw0+qlUVJrkjSrRVoEkEmMQwBCQVktgrsURNB3RtSpG1u75KR1HifJYQ Ga2ncOUqQaNKI0uNw29nMV4yqzjIOHdVYXsmISiiow9AY3WDlNqlKYUuemZBtLK5CSAqlfDzjPVJ SacQ33C1H31bG8gwvq1GKoB0n2ILhlVYeWosusvIP6NghFpAzxJDHGmU5rmxOPyXues= ) ; keytag 57981`
	`cl. 3600 IN DNSKEY ( 257 3 8 AwEAAaeKmWkvOjJ/XHOoOzdbb9xMPHjNuHS9J8Qw0vUo3DLwgZPCe3VMaSoYQ0FUkRi3AvyJNIGb F9jMBfWbCjZY8pQg/yCzsrjJypwdH8Mf6FoOoXna+OfRzg1POo2wi4gQn3f4yD6q5tHW6DdndGro KpPBOVmA4VdYyCQ0dc7Fe12Uqekb1aDzu4Rz0BjwFObIewGaVnjJxc0I6m8iJkMaaWgh5THPHRDU eQHyzTDvlDbwFBh+Xrb9zFUUxR6bx5/9N5ghJeik2293ZCQypKy6MRX8eMYxh3f8WIcntpYVLzzF SSzq4nrwnhjlw94kfEKEpnp8NSvlVyZQgU1csewlF0k= ) ; keytag 21199`
	DNSKEY=21199/SEP is now in the chain-of-trust
	DS=21199/SHA-256 verifies DNSKEY=21199/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260418213211 20260307053115 57981 cl. QA8hHlMwcc7GaF2IbsEJBNXQvgM4UbtPwIa6zYmtFm5sZQfRkYLeiwVeB2T/tiU1HwKw1nKEqJrh 1m8UcPHMgUayE9PyYca4c65rUHASNBBpNAOr7l/kfH6oIcs4zFKYsf8dmlckkV8JJC6Bn2QcTfLp nBhnkzDyKOT21p4zHjnEU9U/rQbYtOMmvDotgzPkPlbpABhpOEq7z26aM9iQdA== )`
	`cl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260605130825 20260121130825 21199 cl. L/inRRa3L0bpuIGN0BG2+bPOGtBkR+2gR0EbmvTbPrpq/QyFJTeWl5hQSRyeaok1pvJFfSHufVzk wHXcIoJdwZ9dPBqD/Kafc5wd0XK2Xy3O0KlgwGmdP/AIzUGnCT836pGSxVs2CYc1Dv4XODSfxj1V LfYAsy9kRtAzhB+HnmsAsm+P+rDhGr3NCJ52Aw0VZm87zNXYMO1tXNXSXh4hhy4gRZ4wwWnODPud QefiNEA6aWORQqgI+LccESC+kCGjQkw0IlmdAKiyFLQ1u3aup7dElcz+3UNiyBznVg21eggVpsuY O2R5b+OTSE0C8MDlDEKOybDIZ4+HxDlRmYtoQg== )`
	RRSIG=57981 and DNSKEY=57981 verifies the DNSKEY RRset
	RRSIG=21199 and DNSKEY=21199/SEP verifies the DNSKEY RRset
	DNSKEY=57981 is now in the chain-of-trust
	Query to cl-ns.anycast.pch.net for pinup-1.cl/A
	Received 654 bytes from 204.61.216.30
	;; Response received from [204.61.216.30] 654 octets ;; HEADER SECTION ;; id = 18258 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pinup-1.cl. 3600 IN NS kareem.ns.cloudflare.com. pinup-1.cl. 3600 IN NS romina.ns.cloudflare.com. obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN NSEC3 ( 1 1 0 09324dcf oboq0vkfmosvo3qku7t0mknlv9pvo6em NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260420115342 20260307053115 57981 cl. iFOfcB5K0wo6ZGLoRuioIczoxhf80o14o+3ZWcW+lkDHHrUSLZjGY67E6dVi6aCabUCKE8jfaXpL bKB6Rdos9lJ+gC9kUuXiKOYDSq142iXYTf4M2z24ZZCu+ZHpryfv/mL7iUjHiw8Jvb6fCScyOjoh rGdNc9C5+6+yvYI5dInwo4/2FxnDkFXIe24ug6YJwLrfeF11lqXBCCaLkefbkw== ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN NSEC3 ( 1 1 0 09324dcf nbedb07nss0ir924sp6spsnk7ondklo5 NS DS RRSIG ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260417190417 20260307053115 57981 cl. fQxsQAvuwKv343YFo4SgaJyQJkFtzhsbo6jK9Zg7KR/PmqQ6pVpdrFr++NWWy7lTzuoAzNe4qx/B KkH95w++uDHbsUOczsWcTy7dcQrQA/ufBlIDDpSwfAsxeNyycdap1i6/1LyFyEkJcLJzByfglVpr xWKAnDScYUZqb16R+7BTU5yli1dtHQD6VZxKPFVetIUCNklDZujAsBvRHi+vUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to cl2-tld.d-zone.ca for pinup-1.cl/DNSKEY
	Received 654 bytes from 185.159.198.56
	;; Response received from [185.159.198.56] 654 octets ;; HEADER SECTION ;; id = 59864 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pinup-1.cl. 3600 IN NS kareem.ns.cloudflare.com. pinup-1.cl. 3600 IN NS romina.ns.cloudflare.com. obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN NSEC3 ( 1 1 0 09324dcf oboq0vkfmosvo3qku7t0mknlv9pvo6em NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260420115342 20260307053115 57981 cl. iFOfcB5K0wo6ZGLoRuioIczoxhf80o14o+3ZWcW+lkDHHrUSLZjGY67E6dVi6aCabUCKE8jfaXpL bKB6Rdos9lJ+gC9kUuXiKOYDSq142iXYTf4M2z24ZZCu+ZHpryfv/mL7iUjHiw8Jvb6fCScyOjoh rGdNc9C5+6+yvYI5dInwo4/2FxnDkFXIe24ug6YJwLrfeF11lqXBCCaLkefbkw== ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN NSEC3 ( 1 1 0 09324dcf nbedb07nss0ir924sp6spsnk7ondklo5 NS DS RRSIG ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260417190417 20260307053115 57981 cl. fQxsQAvuwKv343YFo4SgaJyQJkFtzhsbo6jK9Zg7KR/PmqQ6pVpdrFr++NWWy7lTzuoAzNe4qx/B KkH95w++uDHbsUOczsWcTy7dcQrQA/ufBlIDDpSwfAsxeNyycdap1i6/1LyFyEkJcLJzByfglVpr xWKAnDScYUZqb16R+7BTU5yli1dtHQD6VZxKPFVetIUCNklDZujAsBvRHi+vUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone pinup-1.cl

pinup-1.cl

	Checking DS between cl and pinup-1.cl
	Query to cl2-tld.d-zone.ca for pinup-1.cl/DS
	Received 840 bytes from 185.159.198.56
	;; Response received from [185.159.198.56] 840 octets ;; HEADER SECTION ;; id = 45582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN NSEC3 ( 1 1 0 09324dcf oboq0vkfmosvo3qku7t0mknlv9pvo6em NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) obmvt387gikcrfksfmhkefiub7ka2mnm.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260420115342 20260307053115 57981 cl. iFOfcB5K0wo6ZGLoRuioIczoxhf80o14o+3ZWcW+lkDHHrUSLZjGY67E6dVi6aCabUCKE8jfaXpL bKB6Rdos9lJ+gC9kUuXiKOYDSq142iXYTf4M2z24ZZCu+ZHpryfv/mL7iUjHiw8Jvb6fCScyOjoh rGdNc9C5+6+yvYI5dInwo4/2FxnDkFXIe24ug6YJwLrfeF11lqXBCCaLkefbkw== ) cl. 900 IN SOA ( a.nic.cl. dnsadmin.nic.cl. 2026030707 ;serial 1200 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) cl. 900 IN RRSIG ( SOA 8 1 3600 20260419185056 20260307053115 57981 cl. zl0axKbzFBG4t0jteUYV9SncmiaXRbPrcgE3s452Gm9Bmv6xgjrP/+J3DR4s0XZ2Nj0mdGpmwyVd 1DRS2kY/WH+gSzjtdAp7H0NtB0TCb5xxdHPFYQznA8JiX7QsGYRqO10nLZlJEs1ho6d75a+PzTlj avdsiRWlCcf0utvPvofYre/ZgoZXSA8S5ui76adGIo0WXF5U52xd1VU6k3hVmA== ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN NSEC3 ( 1 1 0 09324dcf nbedb07nss0ir924sp6spsnk7ondklo5 NS DS RRSIG ) n7f5lm1o6354n756midl268vglk4gdoh.cl. 900 IN RRSIG ( NSEC3 8 2 900 20260417190417 20260307053115 57981 cl. fQxsQAvuwKv343YFo4SgaJyQJkFtzhsbo6jK9Zg7KR/PmqQ6pVpdrFr++NWWy7lTzuoAzNe4qx/B KkH95w++uDHbsUOczsWcTy7dcQrQA/ufBlIDDpSwfAsxeNyycdap1i6/1LyFyEkJcLJzByfglVpr xWKAnDScYUZqb16R+7BTU5yli1dtHQD6VZxKPFVetIUCNklDZujAsBvRHi+vUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for pinup-1.cl in the cl zone
	Query to romina.ns.cloudflare.com for pinup-1.cl/DNSKEY
	Received 103 bytes from 172.64.34.159
	;; Response received from [172.64.34.159] 103 octets ;; HEADER SECTION ;; id = 40541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) pinup-1.cl. 1800 IN SOA ( kareem.ns.cloudflare.com. dns.cloudflare.com. 2395113757 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to romina.ns.cloudflare.com for pinup-1.cl/A
	Received 71 bytes from 172.64.34.159
	;; Response received from [172.64.34.159] 71 octets ;; HEADER SECTION ;; id = 11366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (2 records) pinup-1.cl. 300 IN A 104.21.21.162 pinup-1.cl. 300 IN A 172.67.199.92 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	romina.ns.cloudflare.com is authoritative for pinup-1.cl
	Query to kareem.ns.cloudflare.com for pinup-1.cl/SOA
	Received 103 bytes from 172.64.35.22
	;; Response received from [172.64.35.22] 103 octets ;; HEADER SECTION ;; id = 38105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN SOA ;; ANSWER SECTION (1 record) pinup-1.cl. 1800 IN SOA ( kareem.ns.cloudflare.com. dns.cloudflare.com. 2395113757 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to romina.ns.cloudflare.com for pinup-1.cl/A
	Received 71 bytes from 172.64.34.159
	;; Response received from [172.64.34.159] 71 octets ;; HEADER SECTION ;; id = 11023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (2 records) pinup-1.cl. 300 IN A 172.67.199.92 pinup-1.cl. 300 IN A 104.21.21.162 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pinup-1.cl A RR has value 172.67.199.92
	pinup-1.cl A RR has value 104.21.21.162
	No RRSIGs found

pinup-1.cl

	Query to kareem.ns.cloudflare.com for pinup-1.cl/A
	Received 71 bytes from 172.64.35.22
	;; Response received from [172.64.35.22] 71 octets ;; HEADER SECTION ;; id = 11073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (2 records) pinup-1.cl. 300 IN A 172.67.199.92 pinup-1.cl. 300 IN A 104.21.21.162 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	kareem.ns.cloudflare.com is authoritative for pinup-1.cl
	Query to kareem.ns.cloudflare.com for pinup-1.cl/A
	Received 71 bytes from 108.162.195.22
	;; Response received from [108.162.195.22] 71 octets ;; HEADER SECTION ;; id = 27716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pinup-1.cl. IN A ;; ANSWER SECTION (2 records) pinup-1.cl. 300 IN A 104.21.21.162 pinup-1.cl. 300 IN A 172.67.199.92 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pinup-1.cl A RR has value 104.21.21.162
	pinup-1.cl A RR has value 172.67.199.92
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pinup-1.cl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: