DNSSEC Debugger - polytechnique.edu

Domain Name:

Time: 2026-03-20 19:28:14 UTC

Analyzing DNSSEC problems for polytechnique.edu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 43017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for polytechnique.edu/A
	Received 1176 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1176 octets ;; HEADER SECTION ;; id = 7631 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260402170000 20260320160000 21831 . MCP5sx+L1nM6mNIKCH2mbKkLRqGSnorBJZFH5/AlND40IfCFzeZoOWXiEzlb8Edmd8DbChAKIOPn IzVzwCMEEFDlbtrke+mV2ywGuqZn0of1HeQgvfQQjH+CPe0T9EsGqVSLgs9aV+dr3+am/B2S0+sG S/3MwzwQ51ntqjODhOnhq4vn2X75r9VUw26EtAgLPhMwedAbL+FooyhfSJChww71oX3ijsgEWZf3 ieUFHtBP2l7tNw/PucqE99goQxQa/mgCtzF2INphMyMdN86jldt32U/LYGEmsZ7a/TTUoIONlkJh pL1G+d9AVu7fXaup9JziPqWcj7vtYu1K5ZUqlA== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 b.edu-servers.net. 172800 IN A 192.33.14.30 c.edu-servers.net. 172800 IN A 192.26.92.30 d.edu-servers.net. 172800 IN A 192.31.80.30 e.edu-servers.net. 172800 IN A 192.12.94.30 f.edu-servers.net. 172800 IN A 192.35.51.30 g.edu-servers.net. 172800 IN A 192.42.93.30 h.edu-servers.net. 172800 IN A 192.54.112.30 i.edu-servers.net. 172800 IN A 192.43.172.30 j.edu-servers.net. 172800 IN A 192.48.79.30 k.edu-servers.net. 172800 IN A 192.52.178.30 l.edu-servers.net. 172800 IN A 192.41.162.30 m.edu-servers.net. 172800 IN A 192.55.83.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1162 octets ;; HEADER SECTION ;; id = 13867 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260402170000 20260320160000 21831 . MCP5sx+L1nM6mNIKCH2mbKkLRqGSnorBJZFH5/AlND40IfCFzeZoOWXiEzlb8Edmd8DbChAKIOPn IzVzwCMEEFDlbtrke+mV2ywGuqZn0of1HeQgvfQQjH+CPe0T9EsGqVSLgs9aV+dr3+am/B2S0+sG S/3MwzwQ51ntqjODhOnhq4vn2X75r9VUw26EtAgLPhMwedAbL+FooyhfSJChww71oX3ijsgEWZf3 ieUFHtBP2l7tNw/PucqE99goQxQa/mgCtzF2INphMyMdN86jldt32U/LYGEmsZ7a/TTUoIONlkJh pL1G+d9AVu7fXaup9JziPqWcj7vtYu1K5ZUqlA== ) ;; ADDITIONAL SECTION (27 records) d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Found child zone edu

edu

	Checking DS between . and edu
	Query to a.root-servers.net for edu/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 33781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260402170000 20260320160000 21831 . MCP5sx+L1nM6mNIKCH2mbKkLRqGSnorBJZFH5/AlND40IfCFzeZoOWXiEzlb8Edmd8DbChAKIOPn IzVzwCMEEFDlbtrke+mV2ywGuqZn0of1HeQgvfQQjH+CPe0T9EsGqVSLgs9aV+dr3+am/B2S0+sG S/3MwzwQ51ntqjODhOnhq4vn2X75r9VUw26EtAgLPhMwedAbL+FooyhfSJChww71oX3ijsgEWZf3 ieUFHtBP2l7tNw/PucqE99goQxQa/mgCtzF2INphMyMdN86jldt32U/LYGEmsZ7a/TTUoIONlkJh pL1G+d9AVu7fXaup9JziPqWcj7vtYu1K5ZUqlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20260402170000 20260320160000 21831 . MCP5sx+L1nM6mNIKCH2mbKkLRqGSnorBJZFH5/AlND40IfCFzeZoOWXiEzlb8Edmd8DbChAKIOPn IzVzwCMEEFDlbtrke+mV2ywGuqZn0of1HeQgvfQQjH+CPe0T9EsGqVSLgs9aV+dr3+am/B2S0+sG S/3MwzwQ51ntqjODhOnhq4vn2X75r9VUw26EtAgLPhMwedAbL+FooyhfSJChww71oX3ijsgEWZf3 ieUFHtBP2l7tNw/PucqE99goQxQa/mgCtzF2INphMyMdN86jldt32U/LYGEmsZ7a/TTUoIONlkJh pL1G+d9AVu7fXaup9JziPqWcj7vtYu1K5ZUqlA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to d.edu-servers.net for edu/DNSKEY
	Received 291 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 291 octets ;; HEADER SECTION ;; id = 54151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (3 records) edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663 edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260331151114 20260316150614 35663 edu. qP251lMkjA8YUSpH54GL+Rq2W52R1NCbF/q47lDJPFjfRUMqVr4WjPLQVLJn838LZulOk5OIZMYw jI9OxX5W6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663`
	`edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260331151114 20260316150614 35663 edu. qP251lMkjA8YUSpH54GL+Rq2W52R1NCbF/q47lDJPFjfRUMqVr4WjPLQVLJn838LZulOk5OIZMYw jI9OxX5W6w== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=16901 is now in the chain-of-trust
	Query to f.edu-servers.net for polytechnique.edu/A
	Received 372 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 372 octets ;; HEADER SECTION ;; id = 26469 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) polytechnique.edu. 172800 IN NS milou.polytechnique.fr. polytechnique.edu. 172800 IN NS rackham.polytechnique.fr. polytechnique.edu. 172800 IN NS picaros.polytechnique.fr. polytechnique.edu. 172800 IN NS nsb.perf1.com. polytechnique.edu. 172800 IN NS nsa.perf1.fr. polytechnique.edu. 86400 IN DS ( 2448 13 2 3ce0a557e24d8b5671126ea760a272c19dbaf2c3ce863bf8b1a223594622b510 ) polytechnique.edu. 86400 IN DS ( 27495 13 2 f72a748d743c04d93dd7f679148cc9dda8baaae735d4eec7efe248701e02708d ) polytechnique.edu. 86400 IN RRSIG ( DS 13 2 86400 20260326031023 20260319020023 16901 edu. +7tTxzMlE16wazVINbXbQnDfBeIroFpkiADby4kl7tZgCaZTb3BGt8dCwO6OvB5ubpLaUxVZkrh6 bCjiizQi7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to k.edu-servers.net for polytechnique.edu/DNSKEY
	Received 372 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 372 octets ;; HEADER SECTION ;; id = 12724 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) polytechnique.edu. 172800 IN NS milou.polytechnique.fr. polytechnique.edu. 172800 IN NS rackham.polytechnique.fr. polytechnique.edu. 172800 IN NS picaros.polytechnique.fr. polytechnique.edu. 172800 IN NS nsb.perf1.com. polytechnique.edu. 172800 IN NS nsa.perf1.fr. polytechnique.edu. 86400 IN DS ( 2448 13 2 3ce0a557e24d8b5671126ea760a272c19dbaf2c3ce863bf8b1a223594622b510 ) polytechnique.edu. 86400 IN DS ( 27495 13 2 f72a748d743c04d93dd7f679148cc9dda8baaae735d4eec7efe248701e02708d ) polytechnique.edu. 86400 IN RRSIG ( DS 13 2 86400 20260326031023 20260319020023 16901 edu. +7tTxzMlE16wazVINbXbQnDfBeIroFpkiADby4kl7tZgCaZTb3BGt8dCwO6OvB5ubpLaUxVZkrh6 bCjiizQi7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone polytechnique.edu

polytechnique.edu

	Checking DS between edu and polytechnique.edu
	Query to h.edu-servers.net for polytechnique.edu/DS
	Received 1135 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 1135 octets ;; HEADER SECTION ;; id = 33938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN DS ;; ANSWER SECTION (3 records) polytechnique.edu. 86400 IN DS ( 2448 13 2 3ce0a557e24d8b5671126ea760a272c19dbaf2c3ce863bf8b1a223594622b510 ) polytechnique.edu. 86400 IN DS ( 27495 13 2 f72a748d743c04d93dd7f679148cc9dda8baaae735d4eec7efe248701e02708d ) polytechnique.edu. 86400 IN RRSIG ( DS 13 2 86400 20260326031023 20260319020023 16901 edu. +7tTxzMlE16wazVINbXbQnDfBeIroFpkiADby4kl7tZgCaZTb3BGt8dCwO6OvB5ubpLaUxVZkrh6 bCjiizQi7A== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20260324031120 20260317020120 16901 edu. ZM+PznK6O7tU1Fo30K7f3zEAb5Wx/4jRYGuruIn6tZtSiV36nJ+sYEIlIq0cee5rjFZWZMGhQrvp gOWWEs5t+g== ) ;; ADDITIONAL SECTION (27 records) c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for polytechnique.edu in the edu zone
	DS=2448/SHA-256 has algorithm ECDSAP256SHA256
	DS=27495/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`polytechnique.edu. 86400 IN RRSIG ( DS 13 2 86400 20260326031023 20260319020023 16901 edu. +7tTxzMlE16wazVINbXbQnDfBeIroFpkiADby4kl7tZgCaZTb3BGt8dCwO6OvB5ubpLaUxVZkrh6 bCjiizQi7A== )`
	RRSIG=16901 and DNSKEY=16901 verifies the DS RRset
	DS=2448/SHA-256 is now in the chain-of-trust
	DS=27495/SHA-256 is now in the chain-of-trust
	`polytechnique.edu. 86400 IN DS ( 2448 13 2 3ce0a557e24d8b5671126ea760a272c19dbaf2c3ce863bf8b1a223594622b510 )`
	`polytechnique.edu. 86400 IN DS ( 27495 13 2 f72a748d743c04d93dd7f679148cc9dda8baaae735d4eec7efe248701e02708d )`
	Query to picaros.polytechnique.fr for polytechnique.edu/DNSKEY
	Received 512 bytes from 129.104.7.41
	;; Response received from [129.104.7.41] 512 octets ;; HEADER SECTION ;; id = 59284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN DNSKEY ;; ANSWER SECTION (5 records) polytechnique.edu. 3600 IN DNSKEY ( 257 3 13 /hpD/TloEDDwGYH9YfSrmxA9Ea7ieBjb2vvbr8T29wI14O3GiYQvdHQnWWLD6CuhWdMBhTKcAVyM BoQYcI/Akg== ) ; keytag 2448 polytechnique.edu. 3600 IN DNSKEY ( 256 3 13 PXzJumaXR5unVBy/p0ZMuWZH6e2TFWoK8aIW+YQnS9ll/eV/zsln1V3ZMLUVT1bZ6d26pmxvdlO2 CbEzZvFCFQ== ) ; keytag 43995 polytechnique.edu. 3600 IN DNSKEY ( 257 3 13 1h8Ct06C3V8exoT73yBLWaH2vSLu7111TQKyFo8y1PvYRhC69M+/8ZikO/ndkpJXADZjbn9KCj1P Gqe0RmJ49g== ) ; keytag 27495 polytechnique.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260403155717 20260320145717 2448 polytechnique.edu. UTY2dFZ6/rrbC0jFY5mVRkRV4v0SI88pbdFeKgYdy6EKjfYZ/LFMtcFhNuSPuYkWQaalw7AZbGuE enSC7vFwMQ== ) polytechnique.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260403155717 20260320145717 27495 polytechnique.edu. JccVwIYCkHlAjFtlSvz3Rw38AnBKHA8Zw7ZeLlPsIMrOQKCuXXWGhD7n5vyhbO6yYQMBY5mSHWsQ +jSJXEtljw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for polytechnique.edu
	`polytechnique.edu. 3600 IN DNSKEY ( 257 3 13 /hpD/TloEDDwGYH9YfSrmxA9Ea7ieBjb2vvbr8T29wI14O3GiYQvdHQnWWLD6CuhWdMBhTKcAVyM BoQYcI/Akg== ) ; keytag 2448`
	`polytechnique.edu. 3600 IN DNSKEY ( 256 3 13 PXzJumaXR5unVBy/p0ZMuWZH6e2TFWoK8aIW+YQnS9ll/eV/zsln1V3ZMLUVT1bZ6d26pmxvdlO2 CbEzZvFCFQ== ) ; keytag 43995`
	`polytechnique.edu. 3600 IN DNSKEY ( 257 3 13 1h8Ct06C3V8exoT73yBLWaH2vSLu7111TQKyFo8y1PvYRhC69M+/8ZikO/ndkpJXADZjbn9KCj1P Gqe0RmJ49g== ) ; keytag 27495`
	DNSKEY=2448/SEP is now in the chain-of-trust
	DS=2448/SHA-256 verifies DNSKEY=2448/SEP
	DNSKEY=27495/SEP is now in the chain-of-trust
	DS=27495/SHA-256 verifies DNSKEY=27495/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`polytechnique.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260403155717 20260320145717 2448 polytechnique.edu. UTY2dFZ6/rrbC0jFY5mVRkRV4v0SI88pbdFeKgYdy6EKjfYZ/LFMtcFhNuSPuYkWQaalw7AZbGuE enSC7vFwMQ== )`
	`polytechnique.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260403155717 20260320145717 27495 polytechnique.edu. JccVwIYCkHlAjFtlSvz3Rw38AnBKHA8Zw7ZeLlPsIMrOQKCuXXWGhD7n5vyhbO6yYQMBY5mSHWsQ +jSJXEtljw== )`
	RRSIG=2448 and DNSKEY=2448/SEP verifies the DNSKEY RRset
	RRSIG=27495 and DNSKEY=27495/SEP verifies the DNSKEY RRset
	DNSKEY=43995 is now in the chain-of-trust
	Query to picaros.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.7.41
	;; Response received from [129.104.7.41] 427 octets ;; HEADER SECTION ;; id = 51928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	picaros.polytechnique.fr is authoritative for polytechnique.edu
	Found RRSIG signed by polytechnique.edu zone
	Query to rackham.polytechnique.fr for polytechnique.edu/SOA
	Received 458 bytes from 129.104.32.41
	;; Response received from [129.104.32.41] 458 octets ;; HEADER SECTION ;; id = 11503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN SOA ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN SOA ( milou.polytechnique.fr. hostmaster.polytechnique.fr. 2025122340 ;serial 86400 ;refresh 21600 ;retry 1209600 ;expire 3600 ;minimum ) polytechnique.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260403155717 20260320145717 43995 polytechnique.edu. pvztU5PSGN2UFVUNOgJmnpnRlvQeoSSpXShIc2LjBsuYFy3vBJEq5A7Dpo5S4ZK2o03Yq75P2SJ/ ent8JL+gFw== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsb.perf1.com for polytechnique.edu/SOA
	Received 228 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 228 octets ;; HEADER SECTION ;; id = 16582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN SOA ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260403155717 20260320145717 43995 polytechnique.edu. pvztU5PSGN2UFVUNOgJmnpnRlvQeoSSpXShIc2LjBsuYFy3vBJEq5A7Dpo5S4ZK2o03Yq75P2SJ/ ent8JL+gFw== ) polytechnique.edu. 3600 IN SOA ( milou.polytechnique.fr. hostmaster.polytechnique.fr. 2025122340 ;serial 86400 ;refresh 21600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsa.perf1.fr for polytechnique.edu/SOA
	Received 228 bytes from 81.92.94.100
	;; Response received from [81.92.94.100] 228 octets ;; HEADER SECTION ;; id = 1578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN SOA ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260403155717 20260320145717 43995 polytechnique.edu. pvztU5PSGN2UFVUNOgJmnpnRlvQeoSSpXShIc2LjBsuYFy3vBJEq5A7Dpo5S4ZK2o03Yq75P2SJ/ ent8JL+gFw== ) polytechnique.edu. 3600 IN SOA ( milou.polytechnique.fr. hostmaster.polytechnique.fr. 2025122340 ;serial 86400 ;refresh 21600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to milou.polytechnique.fr for polytechnique.edu/SOA
	Received 458 bytes from 129.104.30.41
	;; Response received from [129.104.30.41] 458 octets ;; HEADER SECTION ;; id = 32049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN SOA ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN SOA ( milou.polytechnique.fr. hostmaster.polytechnique.fr. 2025122340 ;serial 86400 ;refresh 21600 ;retry 1209600 ;expire 3600 ;minimum ) polytechnique.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260403155717 20260320145717 43995 polytechnique.edu. pvztU5PSGN2UFVUNOgJmnpnRlvQeoSSpXShIc2LjBsuYFy3vBJEq5A7Dpo5S4ZK2o03Yq75P2SJ/ ent8JL+gFw== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to picaros.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.7.41
	;; Response received from [129.104.7.41] 427 octets ;; HEADER SECTION ;; id = 63745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	polytechnique.edu A RR has value 129.104.30.29
	Found 1 RRSIGs over A RRset
	`polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== )`
	RRSIG=43995 and DNSKEY=43995 verifies the A RRset

polytechnique.edu

	Query to rackham.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.32.41
	;; Response received from [129.104.32.41] 427 octets ;; HEADER SECTION ;; id = 56696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rackham.polytechnique.fr is authoritative for polytechnique.edu
	Found RRSIG signed by polytechnique.edu zone
	Query to rackham.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.32.41
	;; Response received from [129.104.32.41] 427 octets ;; HEADER SECTION ;; id = 22540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	polytechnique.edu A RR has value 129.104.30.29
	Found 1 RRSIGs over A RRset
	`polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== )`
	RRSIG=43995 and DNSKEY=43995 verifies the A RRset

polytechnique.edu

	Query to milou.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.30.41
	;; Response received from [129.104.30.41] 427 octets ;; HEADER SECTION ;; id = 26217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	milou.polytechnique.fr is authoritative for polytechnique.edu
	Found RRSIG signed by polytechnique.edu zone
	Query to milou.polytechnique.fr for polytechnique.edu/A
	Received 427 bytes from 129.104.30.41
	;; Response received from [129.104.30.41] 427 octets ;; HEADER SECTION ;; id = 37406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (6 records) polytechnique.edu. 3600 IN NS rackham.polytechnique.fr. polytechnique.edu. 3600 IN NS milou.polytechnique.fr. polytechnique.edu. 3600 IN NS nsa.perf1.fr. polytechnique.edu. 3600 IN NS nsb.perf1.com. polytechnique.edu. 3600 IN NS picaros.polytechnique.fr. polytechnique.edu. 3600 IN RRSIG ( NS 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. fIFw+ud0snkyarg5Ah8f3VYdCiV23AhjOAatYlBQRXSTmr1A4fvE8SO101kZkz2MRhoFMdV/FYSb yQsogmPKkQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	polytechnique.edu A RR has value 129.104.30.29
	Found 1 RRSIGs over A RRset
	`polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== )`
	RRSIG=43995 and DNSKEY=43995 verifies the A RRset

polytechnique.edu

	Query to nsa.perf1.fr for polytechnique.edu/A
	Received 175 bytes from 81.92.94.100
	;; Response received from [81.92.94.100] 175 octets ;; HEADER SECTION ;; id = 13266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsa.perf1.fr is authoritative for polytechnique.edu
	Found RRSIG signed by polytechnique.edu zone
	Query to nsa.perf1.fr for polytechnique.edu/A
	Received 175 bytes from 81.92.94.100
	;; Response received from [81.92.94.100] 175 octets ;; HEADER SECTION ;; id = 28643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	polytechnique.edu A RR has value 129.104.30.29
	Found 1 RRSIGs over A RRset
	`polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== )`
	RRSIG=43995 and DNSKEY=43995 verifies the A RRset

polytechnique.edu

	Query to nsb.perf1.com for polytechnique.edu/A
	Received 175 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 175 octets ;; HEADER SECTION ;; id = 14848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsb.perf1.com is authoritative for polytechnique.edu
	Found RRSIG signed by polytechnique.edu zone
	Query to nsb.perf1.com for polytechnique.edu/A
	Received 175 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 175 octets ;; HEADER SECTION ;; id = 20631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; polytechnique.edu. IN A ;; ANSWER SECTION (2 records) polytechnique.edu. 3600 IN A 129.104.30.29 polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	polytechnique.edu A RR has value 129.104.30.29
	Found 1 RRSIGs over A RRset
	`polytechnique.edu. 3600 IN RRSIG ( A 13 2 3600 20260325204804 20260311201558 43995 polytechnique.edu. bsh5N3b2LKI5oaAxRCx0lhm/SyPkyFQX5knFD6Tv4ds77v3dbpQrEfxSJUMZ9bUH/ZIpbw3bMvOn /Fz4wVlkDA== )`
	RRSIG=43995 and DNSKEY=43995 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test polytechnique.edu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: