DNSSEC Debugger - s.z-z.jp

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-14 10:00:06 UTC

Analyzing DNSSEC problems for s.z-z.jp

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 39886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to i.root-servers.net for s.z-z.jp/A
	Received 828 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 828 octets ;; HEADER SECTION ;; id = 40521 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; s.z-z.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 86400 IN DS ( 6961 8 2 0e3440e8ee2675cdc029402fd73c0e3615ad978de3692b9b161ece823ed3580c ) jp. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . KioyJpr8ZE3lqk3Dpw6zBgU1tZJuj+fkzVNgl0x2PInLDmK8k84a13Mw1lXkZC+OTnELTxe6jdwf o7PScXF/UkmOg00cjbERk+xGa2Ij5KypJY2e2JIRmB9eekFsuqKtR4cB2sHwrFUn6JM1WmhbgZxw idAyyQy3fVoHQc9lbHQFuo4vBtb/OpVUTkuKGgzw1F8yXTxgt/j0f+PQ5fbrZU4bv+F3yoMc18+0 H+wQHwHumtu7oxrL6liUHmmA/iEQeIGDmsDkg0AUOiS+dEHT3MhSYlLqvOYEiUjot63d/fCWsBRz NNXxnyCBXgdkMI6D2GDO6eFUuP9ExPA0xQGebA== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 b.dns.jp. 172800 IN A 202.12.30.131 c.dns.jp. 172800 IN A 156.154.100.5 d.dns.jp. 172800 IN A 210.138.175.244 e.dns.jp. 172800 IN A 192.50.43.53 f.dns.jp. 172800 IN A 150.100.6.8 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for jp/DNSKEY
	Received 824 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 824 octets ;; HEADER SECTION ;; id = 65193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 86400 IN DS ( 6961 8 2 0e3440e8ee2675cdc029402fd73c0e3615ad978de3692b9b161ece823ed3580c ) jp. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . KioyJpr8ZE3lqk3Dpw6zBgU1tZJuj+fkzVNgl0x2PInLDmK8k84a13Mw1lXkZC+OTnELTxe6jdwf o7PScXF/UkmOg00cjbERk+xGa2Ij5KypJY2e2JIRmB9eekFsuqKtR4cB2sHwrFUn6JM1WmhbgZxw idAyyQy3fVoHQc9lbHQFuo4vBtb/OpVUTkuKGgzw1F8yXTxgt/j0f+PQ5fbrZU4bv+F3yoMc18+0 H+wQHwHumtu7oxrL6liUHmmA/iEQeIGDmsDkg0AUOiS+dEHT3MhSYlLqvOYEiUjot63d/fCWsBRz NNXxnyCBXgdkMI6D2GDO6eFUuP9ExPA0xQGebA== ) ;; ADDITIONAL SECTION (16 records) h.dns.jp. 172800 IN A 161.232.72.25 g.dns.jp. 172800 IN A 203.119.40.1 f.dns.jp. 172800 IN A 150.100.6.8 e.dns.jp. 172800 IN A 192.50.43.53 d.dns.jp. 172800 IN A 210.138.175.244 c.dns.jp. 172800 IN A 156.154.100.5 b.dns.jp. 172800 IN A 202.12.30.131 a.dns.jp. 172800 IN A 203.119.1.1 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 d.dns.jp. 172800 IN AAAA 2001:240::53 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 b.dns.jp. 172800 IN AAAA 2001:dc2::1 a.dns.jp. 172800 IN AAAA 2001:dc4::1 ;; { "EDNS-VERSION": 0 }
	Found child zone jp

	Checking DS between . and jp
	Query to l.root-servers.net for jp/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 28380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DS ;; ANSWER SECTION (2 records) jp. 86400 IN DS ( 6961 8 2 0e3440e8ee2675cdc029402fd73c0e3615ad978de3692b9b161ece823ed3580c ) jp. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . KioyJpr8ZE3lqk3Dpw6zBgU1tZJuj+fkzVNgl0x2PInLDmK8k84a13Mw1lXkZC+OTnELTxe6jdwf o7PScXF/UkmOg00cjbERk+xGa2Ij5KypJY2e2JIRmB9eekFsuqKtR4cB2sHwrFUn6JM1WmhbgZxw idAyyQy3fVoHQc9lbHQFuo4vBtb/OpVUTkuKGgzw1F8yXTxgt/j0f+PQ5fbrZU4bv+F3yoMc18+0 H+wQHwHumtu7oxrL6liUHmmA/iEQeIGDmsDkg0AUOiS+dEHT3MhSYlLqvOYEiUjot63d/fCWsBRz NNXxnyCBXgdkMI6D2GDO6eFUuP9ExPA0xQGebA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jp in the . zone
	DS=6961/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jp. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . KioyJpr8ZE3lqk3Dpw6zBgU1tZJuj+fkzVNgl0x2PInLDmK8k84a13Mw1lXkZC+OTnELTxe6jdwf o7PScXF/UkmOg00cjbERk+xGa2Ij5KypJY2e2JIRmB9eekFsuqKtR4cB2sHwrFUn6JM1WmhbgZxw idAyyQy3fVoHQc9lbHQFuo4vBtb/OpVUTkuKGgzw1F8yXTxgt/j0f+PQ5fbrZU4bv+F3yoMc18+0 H+wQHwHumtu7oxrL6liUHmmA/iEQeIGDmsDkg0AUOiS+dEHT3MhSYlLqvOYEiUjot63d/fCWsBRz NNXxnyCBXgdkMI6D2GDO6eFUuP9ExPA0xQGebA== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=6961/SHA-256 is now in the chain-of-trust
	`jp. 86400 IN DS ( 6961 8 2 0e3440e8ee2675cdc029402fd73c0e3615ad978de3692b9b161ece823ed3580c )`
	Query to f.dns.jp for jp/DNSKEY
	Received 1311 bytes from 150.100.6.8
	;; Response received from [150.100.6.8] 1311 octets ;; HEADER SECTION ;; id = 20308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (5 records) jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcOk3/LC5YQWPqID3mwm05nhBQjMtiqv7FKpM4/I2f4H9UJlCwF/Dv/Y00G3ej+UFiYawQzz qQ7zOW9VImtG80kY7jkOCCWCj5wzq7ZbgmfyN/BJ0t4oiH1JekN6v/ACAPeYifQbrBQGBzCqzf6l 3eJksqAr1y5Jm+r5boW6YKPR ) ; keytag 47091 jp. 86400 IN DNSKEY ( 257 3 8 AwEAAbtax6347cq+YmTUuTQ0AnLsuxFeAWKbBdlG3PsScOURwuTDt/bgZd5uiuahrqh9vOVewGDJ 240WMETxUbX0QXiPQYw6ecFyAmocXlTPBEXaM+qPwl3amZrxGyiyJxEbtsVN30s657869INtCx6F hPd/6REExn4YhBlOdU1oq4eIvmwFPha3Acvcf9L22+B3NQbHuR2GUt/osssQEUmv0/61g2B17hfu TOnssXyllq0vOg/ZZRpiGe5lwHalGiw2hyHXrV+j+g3bP6ieWKTrMvx7yZhKHCrq6bVOheDfQYZy onNPVLxXMgzwoF0T6CIN3kG3hYUdJxEa26TYiIx+hhc= ) ; keytag 6961 jp. 86400 IN DNSKEY ( 257 3 8 AwEAAcuIsYAw2o8hVO+bvsQxrhx8f2wJogMidCdlmDneBwBaeJ2JalE3EryRFow/hP7utARJ1TEG ffWekRoP5fDjSQLanPxWinT2tUOsgoZS09nFa6T67zaYyZMZeYAQI5/spqNgTLM6IlLEkRMruTjX CqRvw+xHNGcuKKgE0Iz6oNV5gd8gL21FhwiYSFRQH7ZYwzuQw7sD3d21ItQEs7c0QKWveWUXeXus aj/HffIUBg1o4euql7QGudjIjZ5bYn+A+c6Z1wBxZHIFcBu7b6odFRI3lPB8aGeyDmpXFrhMf4cL zA2FmvyTQbQC/NOlreNdWeuEl+bZMk8qw+FMI21JCfE= ) ; keytag 33631 jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20270103184500 20261103184500 6961 jp. rK6P6YSEcQ0JSnQl4eC8ZlU4s4E8eHL13B6g7LohHUZPO/ii0JE6YOhMoKqt6hIvI0MHFMqbR42o 08lt4v73NfG+q5jiUwJ5rz4zh/hH8wda8SWYsbTw1m5NjUji34W4P6YOxydG6CnLrn0mmDlR8LVA Hz95hrqtuZy+GtebWT2FytMxTC80B3G6QnFtSe3OCEnXiuc1LtCO3/1qTBHbf7H9FksBoAL6CkU/ E55iXr85lvDgUQDK8CJf2LqHJBfSEW/5DOqLF8tCyrjNyEPE/QijGCVrRzXRSPprnNRt1/XmrDDh BOwBkoIxLWn2PfxSQdICX43GV1M18jzIfYoOpg== ) jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20270103184500 20261103184500 33631 jp. H6MFTveZXsh+0J4VEV5G84QMjPuhQSzW8Pg+hO6vJ0AkAukW5NaXle57J+LOFL17u3qIiAD5iU5D oIlR2r3f1gmipHH7nzzf/bTaaEM0u9jpgGuj7mAR1ajJfj/xXwNXXfSeiYLhkt4GHEhX74LKbAnG A11ocyNFu29WTx+hp+tKkcmW5PE1zSk62RYJ1L7Nyu2Nr9V2DC8bTwniG4S9j6su9ozwBgIEKdBW 1bpDvXbhqiBCO2q0D5SZVct/V8ersP29dTm7Yy4rAXQ9Y6bGn8EpC5ZhmBtKSMOKt32a7MS5toMI 3krDgalp02LzegbpRzm8IKgfXcBJ1n21P21g5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for jp
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcOk3/LC5YQWPqID3mwm05nhBQjMtiqv7FKpM4/I2f4H9UJlCwF/Dv/Y00G3ej+UFiYawQzz qQ7zOW9VImtG80kY7jkOCCWCj5wzq7ZbgmfyN/BJ0t4oiH1JekN6v/ACAPeYifQbrBQGBzCqzf6l 3eJksqAr1y5Jm+r5boW6YKPR ) ; keytag 47091`
	`jp. 86400 IN DNSKEY ( 257 3 8 AwEAAbtax6347cq+YmTUuTQ0AnLsuxFeAWKbBdlG3PsScOURwuTDt/bgZd5uiuahrqh9vOVewGDJ 240WMETxUbX0QXiPQYw6ecFyAmocXlTPBEXaM+qPwl3amZrxGyiyJxEbtsVN30s657869INtCx6F hPd/6REExn4YhBlOdU1oq4eIvmwFPha3Acvcf9L22+B3NQbHuR2GUt/osssQEUmv0/61g2B17hfu TOnssXyllq0vOg/ZZRpiGe5lwHalGiw2hyHXrV+j+g3bP6ieWKTrMvx7yZhKHCrq6bVOheDfQYZy onNPVLxXMgzwoF0T6CIN3kG3hYUdJxEa26TYiIx+hhc= ) ; keytag 6961`
	`jp. 86400 IN DNSKEY ( 257 3 8 AwEAAcuIsYAw2o8hVO+bvsQxrhx8f2wJogMidCdlmDneBwBaeJ2JalE3EryRFow/hP7utARJ1TEG ffWekRoP5fDjSQLanPxWinT2tUOsgoZS09nFa6T67zaYyZMZeYAQI5/spqNgTLM6IlLEkRMruTjX CqRvw+xHNGcuKKgE0Iz6oNV5gd8gL21FhwiYSFRQH7ZYwzuQw7sD3d21ItQEs7c0QKWveWUXeXus aj/HffIUBg1o4euql7QGudjIjZ5bYn+A+c6Z1wBxZHIFcBu7b6odFRI3lPB8aGeyDmpXFrhMf4cL zA2FmvyTQbQC/NOlreNdWeuEl+bZMk8qw+FMI21JCfE= ) ; keytag 33631`
	DNSKEY=6961/SEP is now in the chain-of-trust
	DS=6961/SHA-256 verifies DNSKEY=6961/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20270103184500 20261103184500 6961 jp. rK6P6YSEcQ0JSnQl4eC8ZlU4s4E8eHL13B6g7LohHUZPO/ii0JE6YOhMoKqt6hIvI0MHFMqbR42o 08lt4v73NfG+q5jiUwJ5rz4zh/hH8wda8SWYsbTw1m5NjUji34W4P6YOxydG6CnLrn0mmDlR8LVA Hz95hrqtuZy+GtebWT2FytMxTC80B3G6QnFtSe3OCEnXiuc1LtCO3/1qTBHbf7H9FksBoAL6CkU/ E55iXr85lvDgUQDK8CJf2LqHJBfSEW/5DOqLF8tCyrjNyEPE/QijGCVrRzXRSPprnNRt1/XmrDDh BOwBkoIxLWn2PfxSQdICX43GV1M18jzIfYoOpg== )`
	`jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20270103184500 20261103184500 33631 jp. H6MFTveZXsh+0J4VEV5G84QMjPuhQSzW8Pg+hO6vJ0AkAukW5NaXle57J+LOFL17u3qIiAD5iU5D oIlR2r3f1gmipHH7nzzf/bTaaEM0u9jpgGuj7mAR1ajJfj/xXwNXXfSeiYLhkt4GHEhX74LKbAnG A11ocyNFu29WTx+hp+tKkcmW5PE1zSk62RYJ1L7Nyu2Nr9V2DC8bTwniG4S9j6su9ozwBgIEKdBW 1bpDvXbhqiBCO2q0D5SZVct/V8ersP29dTm7Yy4rAXQ9Y6bGn8EpC5ZhmBtKSMOKt32a7MS5toMI 3krDgalp02LzegbpRzm8IKgfXcBJ1n21P21g5w== )`
	RRSIG=6961 and DNSKEY=6961/SEP verifies the DNSKEY RRset
	RRSIG=33631 and DNSKEY=33631/SEP verifies the DNSKEY RRset
	DNSKEY=47091 is now in the chain-of-trust
	DNSKEY=33631/SEP is now in the chain-of-trust
	Query to h.dns.jp for s.z-z.jp/A
	Received 582 bytes from 161.232.72.25
	;; Response received from [161.232.72.25] 582 octets ;; HEADER SECTION ;; id = 50621 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; s.z-z.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) z-z.jp. 86400 IN NS rosemary.ns.cloudflare.com. z-z.jp. 86400 IN NS patrick.ns.cloudflare.com. B9CCVLLHT15JM5HET57BQ8MLBAAKPI82.jp. 900 IN NSEC3 ( 1 1 0 - b9gclvhjofb3318piq42majldh459sfm NS SOA RRSIG DNSKEY NSEC3PARAM ) B9CCVLLHT15JM5HET57BQ8MLBAAKPI82.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. TdRLD5mF/f679gy+/OJzG02ToQzcf2GlIIRu1YarrUO6g08Ero49NWRfyVGkBAB4hN/NAth/OtJM ETog0TNTKpAmgE4sCmhpM6AOGpQ/d6wz9o0HAafD5PxfTtnexdB4+pZLtLp0tAS0U6keFTiLTKeG skDak+9D1Wfgfo2pr3o= ) L6VLQP89FR77HNHQ7RI2K6AFP0J02ON9.jp. 900 IN NSEC3 ( 1 1 0 - l70f5jckc65uv3pqk9luu1s1o1emlv3u NS DS RRSIG ) L6VLQP89FR77HNHQ7RI2K6AFP0J02ON9.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. N39NhlpNk6bJLG3faGmKK+0Zgjx+Aq03s4F5Dfb0xT0JvHVlituWWv9E0aNJvOZ560l0aquNfMyE r4KlVn1JvYXIhpb1K6icjhFpfwwy+2vQm981mOCFtOMJ7k77Xmd78PMYPvpUMCzyjKCUCFlqma9p Ry9juMM0XRjo/qTK1ls= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.dns.jp for z-z.jp/DNSKEY
	Received 580 bytes from 203.119.1.1
	;; Response received from [203.119.1.1] 580 octets ;; HEADER SECTION ;; id = 42168 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z-z.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) z-z.jp. 86400 IN NS patrick.ns.cloudflare.com. z-z.jp. 86400 IN NS rosemary.ns.cloudflare.com. b9ccvllht15jm5het57bq8mlbaakpi82.jp. 900 IN NSEC3 ( 1 1 0 - b9gclvhjofb3318piq42majldh459sfm NS SOA RRSIG DNSKEY NSEC3PARAM ) b9ccvllht15jm5het57bq8mlbaakpi82.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. TdRLD5mF/f679gy+/OJzG02ToQzcf2GlIIRu1YarrUO6g08Ero49NWRfyVGkBAB4hN/NAth/OtJM ETog0TNTKpAmgE4sCmhpM6AOGpQ/d6wz9o0HAafD5PxfTtnexdB4+pZLtLp0tAS0U6keFTiLTKeG skDak+9D1Wfgfo2pr3o= ) l6vlqp89fr77hnhq7ri2k6afp0j02on9.jp. 900 IN NSEC3 ( 1 1 0 - l70f5jckc65uv3pqk9luu1s1o1emlv3u NS DS RRSIG ) l6vlqp89fr77hnhq7ri2k6afp0j02on9.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. N39NhlpNk6bJLG3faGmKK+0Zgjx+Aq03s4F5Dfb0xT0JvHVlituWWv9E0aNJvOZ560l0aquNfMyE r4KlVn1JvYXIhpb1K6icjhFpfwwy+2vQm981mOCFtOMJ7k77Xmd78PMYPvpUMCzyjKCUCFlqma9p Ry9juMM0XRjo/qTK1ls= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone z-z.jp

z-z.jp

	Checking DS between jp and z-z.jp
	Query to h.dns.jp for z-z.jp/DS
	Received 727 bytes from 161.232.72.25
	;; Response received from [161.232.72.25] 727 octets ;; HEADER SECTION ;; id = 59811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z-z.jp. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) B9CCVLLHT15JM5HET57BQ8MLBAAKPI82.jp. 900 IN NSEC3 ( 1 1 0 - b9gclvhjofb3318piq42majldh459sfm NS SOA RRSIG DNSKEY NSEC3PARAM ) B9CCVLLHT15JM5HET57BQ8MLBAAKPI82.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. TdRLD5mF/f679gy+/OJzG02ToQzcf2GlIIRu1YarrUO6g08Ero49NWRfyVGkBAB4hN/NAth/OtJM ETog0TNTKpAmgE4sCmhpM6AOGpQ/d6wz9o0HAafD5PxfTtnexdB4+pZLtLp0tAS0U6keFTiLTKeG skDak+9D1Wfgfo2pr3o= ) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1794649502 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) jp. 900 IN RRSIG ( SOA 8 1 86400 20261207174503 20261107174503 47091 jp. Xk5xZ0UYVLzPr+8WoLauWr0Dys1i0i0G7eAsYcH9bvEDalHFLyjD+hFlj5A3Mo9bVmyB+UM80P6Z JIrOEdIhtlKLmbyS0Y1fQr8Q9Tk9v/XD0EupUkdh4/+uX8Zh1DV5j0aFiAOB9ap3B6JanXUG2T0r lqFNLd/8bsiiRH7R5vE= ) L6VLQP89FR77HNHQ7RI2K6AFP0J02ON9.jp. 900 IN NSEC3 ( 1 1 0 - l70f5jckc65uv3pqk9luu1s1o1emlv3u NS DS RRSIG ) L6VLQP89FR77HNHQ7RI2K6AFP0J02ON9.jp. 900 IN RRSIG ( NSEC3 8 2 900 20261207174503 20261107174503 47091 jp. N39NhlpNk6bJLG3faGmKK+0Zgjx+Aq03s4F5Dfb0xT0JvHVlituWWv9E0aNJvOZ560l0aquNfMyE r4KlVn1JvYXIhpb1K6icjhFpfwwy+2vQm981mOCFtOMJ7k77Xmd78PMYPvpUMCzyjKCUCFlqma9p Ry9juMM0XRjo/qTK1ls= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for z-z.jp in the jp zone
	Query to rosemary.ns.cloudflare.com for z-z.jp/DNSKEY
	Received 100 bytes from 172.64.34.77
	;; Response received from [172.64.34.77] 100 octets ;; HEADER SECTION ;; id = 35594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z-z.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) z-z.jp. 1800 IN SOA ( patrick.ns.cloudflare.com. dns.cloudflare.com. 2419223466 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to rosemary.ns.cloudflare.com for s.z-z.jp/A
	Received 80 bytes from 172.64.34.77
	;; Response received from [172.64.34.77] 80 octets ;; HEADER SECTION ;; id = 25045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; s.z-z.jp. IN A ;; ANSWER SECTION (1 record) s.z-z.jp. 300 IN CNAME d2cxkeqqdd7y4w.cloudfront.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rosemary.ns.cloudflare.com is authoritative for s.z-z.jp
	Query to patrick.ns.cloudflare.com for s.z-z.jp/DNSKEY
	Received 102 bytes from 162.159.44.200
	;; Response received from [162.159.44.200] 102 octets ;; HEADER SECTION ;; id = 43420 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; s.z-z.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) z-z.jp. 1800 IN SOA ( patrick.ns.cloudflare.com. dns.cloudflare.com. 2419223466 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	s.z-z.jp is a CNAME to d2cxkeqqdd7y4w.cloudfront.net
	No RRSIGs found

	Query to k.root-servers.net for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 1186 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1186 octets ;; HEADER SECTION ;; id = 12860 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . OxExdwhtff9pZcZHwCPTqjO4eN76+/xBH3ImXIYB0jEVEUa7FKr28qdpJ2RdwYWuH83/6mg5a+LB zVG7Pj229fI0VEgD4i8z1at1A1zjyiTK8sifc28yOcsZ72VvO239l08uQCB4aYvBBbxjxzccXKwW pedWq6kHWt9aE87XDZUQ72E1AWvOPHbBmiSuyQLOuN/7G7sPNpWfJggoycSeirudKOU5pDMZWvl9 jZ9/p/giDQmdV1z99BdxnD4+M18lTVyBEqOpzR4fht43awnPGi6xhAsLjQ+iHGMOdMNE96v1MOn2 bfr6F5RJBzEmzXHQVEl+pdkqJxMC0aICGPPIwA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1160 octets ;; HEADER SECTION ;; id = 37306 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . OxExdwhtff9pZcZHwCPTqjO4eN76+/xBH3ImXIYB0jEVEUa7FKr28qdpJ2RdwYWuH83/6mg5a+LB zVG7Pj229fI0VEgD4i8z1at1A1zjyiTK8sifc28yOcsZ72VvO239l08uQCB4aYvBBbxjxzccXKwW pedWq6kHWt9aE87XDZUQ72E1AWvOPHbBmiSuyQLOuN/7G7sPNpWfJggoycSeirudKOU5pDMZWvl9 jZ9/p/giDQmdV1z99BdxnD4+M18lTVyBEqOpzR4fht43awnPGi6xhAsLjQ+iHGMOdMNE96v1MOn2 bfr6F5RJBzEmzXHQVEl+pdkqJxMC0aICGPPIwA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 7945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . OxExdwhtff9pZcZHwCPTqjO4eN76+/xBH3ImXIYB0jEVEUa7FKr28qdpJ2RdwYWuH83/6mg5a+LB zVG7Pj229fI0VEgD4i8z1at1A1zjyiTK8sifc28yOcsZ72VvO239l08uQCB4aYvBBbxjxzccXKwW pedWq6kHWt9aE87XDZUQ72E1AWvOPHbBmiSuyQLOuN/7G7sPNpWfJggoycSeirudKOU5pDMZWvl9 jZ9/p/giDQmdV1z99BdxnD4+M18lTVyBEqOpzR4fht43awnPGi6xhAsLjQ+iHGMOdMNE96v1MOn2 bfr6F5RJBzEmzXHQVEl+pdkqJxMC0aICGPPIwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20261127050000 20261114040000 8763 . OxExdwhtff9pZcZHwCPTqjO4eN76+/xBH3ImXIYB0jEVEUa7FKr28qdpJ2RdwYWuH83/6mg5a+LB zVG7Pj229fI0VEgD4i8z1at1A1zjyiTK8sifc28yOcsZ72VvO239l08uQCB4aYvBBbxjxzccXKwW pedWq6kHWt9aE87XDZUQ72E1AWvOPHbBmiSuyQLOuN/7G7sPNpWfJggoycSeirudKOU5pDMZWvl9 jZ9/p/giDQmdV1z99BdxnD4+M18lTVyBEqOpzR4fht43awnPGi6xhAsLjQ+iHGMOdMNE96v1MOn2 bfr6F5RJBzEmzXHQVEl+pdkqJxMC0aICGPPIwA== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to h.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 291 octets ;; HEADER SECTION ;; id = 37981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 +SOkIHiC7ihn7zDtBW2OjVOgnvv+y4zrbhkcbrmTKbXuMlFBsDcQ8g7ueXi963q+jdSwuGxVkF6b uS2GzFxbew== ) ; keytag 3840 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261128151035 20261113150535 37331 net. L0pv9TiHBz2YRUyKIX8I1Rnc56YWELdLlFwaf/6jAO8CLyAgFzxRits4hwrNhH2N1uAqy7H+iZJK ZVm2aBXZiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 +SOkIHiC7ihn7zDtBW2OjVOgnvv+y4zrbhkcbrmTKbXuMlFBsDcQ8g7ueXi963q+jdSwuGxVkF6b uS2GzFxbew== ) ; keytag 3840`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261128151035 20261113150535 37331 net. L0pv9TiHBz2YRUyKIX8I1Rnc56YWELdLlFwaf/6jAO8CLyAgFzxRits4hwrNhH2N1uAqy7H+iZJK ZVm2aBXZiw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=3840 is now in the chain-of-trust
	Query to d.gtld-servers.net for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 596 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 596 octets ;; HEADER SECTION ;; id = 21689 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20261118040246 20261111025246 3840 net. LwkC9Lt9lVYnml/aJ9iUH4++kY+TXiO1mulnnJQ1zso1sOnfWJkHVRpJbZJLK3z80nWxa5ex5NfB 1fzuhtgatg== ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN NSEC3 ( 1 1 0 - fadh7kgl8g232b3m9jmhhmagat37ojk3 NS DS RRSIG ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN RRSIG ( NSEC3 13 2 900 20261119040937 20261112025937 3840 net. KvJxgTTgoiyJxab5llOIalMI5WSt5HqRha2ywCSPKAYGSKjtrbV9vP2q4OE1Fae/x7amQAHDpoqb p1p79XEjqg== ) ;; ADDITIONAL SECTION (3 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ns-666.awsdns-19.net. 172800 IN AAAA 2600:9000:5302:9a00::1 ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for cloudfront.net/DNSKEY
	Received 581 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 581 octets ;; HEADER SECTION ;; id = 23742 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20261118040246 20261111025246 3840 net. LwkC9Lt9lVYnml/aJ9iUH4++kY+TXiO1mulnnJQ1zso1sOnfWJkHVRpJbZJLK3z80nWxa5ex5NfB 1fzuhtgatg== ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN NSEC3 ( 1 1 0 - fadh7kgl8g232b3m9jmhhmagat37ojk3 NS DS RRSIG ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN RRSIG ( NSEC3 13 2 900 20261119040937 20261112025937 3840 net. KvJxgTTgoiyJxab5llOIalMI5WSt5HqRha2ywCSPKAYGSKjtrbV9vP2q4OE1Fae/x7amQAHDpoqb p1p79XEjqg== ) ;; ADDITIONAL SECTION (3 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ns-666.awsdns-19.net. 172800 IN AAAA 2600:9000:5302:9a00::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to l.gtld-servers.net for cloudfront.net/DS
	Received 572 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 572 octets ;; HEADER SECTION ;; id = 53534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20261118040246 20261111025246 3840 net. LwkC9Lt9lVYnml/aJ9iUH4++kY+TXiO1mulnnJQ1zso1sOnfWJkHVRpJbZJLK3z80nWxa5ex5NfB 1fzuhtgatg== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1794650391 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20261121095951 20261114084951 3840 net. /6YZLjTGt2VFyc6OmRiuqMgRhexy+3nQYjUwtc46LoupyyiK+zeCaT42/MEs+18avgfQSgx/Rpy5 C1/i7TAAiQ== ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN NSEC3 ( 1 1 0 - fadh7kgl8g232b3m9jmhhmagat37ojk3 NS DS RRSIG ) FADFU252JJL6DOJN36VP2CSQAMCD7R98.net. 900 IN RRSIG ( NSEC3 13 2 900 20261119040937 20261112025937 3840 net. KvJxgTTgoiyJxab5llOIalMI5WSt5HqRha2ywCSPKAYGSKjtrbV9vP2q4OE1Fae/x7amQAHDpoqb p1p79XEjqg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cloudfront.net in the net zone
	Query to ns-666.awsdns-19.net for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.194.154
	;; Response received from [205.251.194.154] 110 octets ;; HEADER SECTION ;; id = 8655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-666.awsdns-19.net for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 195 bytes from 205.251.194.154
	;; Response received from [205.251.194.154] 195 octets ;; HEADER SECTION ;; id = 14981 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1306.awsdns-35.org for d2cxkeqqdd7y4w.cloudfront.net/DNSKEY
	Received 195 bytes from 205.251.197.26
	;; Response received from [205.251.197.26] 195 octets ;; HEADER SECTION ;; id = 24702 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 1831 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone d2cxkeqqdd7y4w.cloudfront.net

d2cxkeqqdd7y4w.cloudfront.net

	Checking DS between cloudfront.net and d2cxkeqqdd7y4w.cloudfront.net
	Query to ns-418.awsdns-52.com for d2cxkeqqdd7y4w.cloudfront.net/DS
	Received 125 bytes from 205.251.193.162
	;; Response received from [205.251.193.162] 125 octets ;; HEADER SECTION ;; id = 39710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for d2cxkeqqdd7y4w.cloudfront.net in the cloudfront.net zone
	Query to ns-1361.awsdns-42.org for d2cxkeqqdd7y4w.cloudfront.net/DNSKEY
	Received 145 bytes from 205.251.197.81
	;; Response received from [205.251.197.81] 145 octets ;; HEADER SECTION ;; id = 60437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) d2cxkeqqdd7y4w.cloudfront.net. 900 IN SOA ( ns-1777.awsdns-30.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1361.awsdns-42.org for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 259 bytes from 205.251.197.81
	;; Response received from [205.251.197.81] 259 octets ;; HEADER SECTION ;; id = 46859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.11 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.31 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.13 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.129 ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1361.awsdns-42.org is authoritative for d2cxkeqqdd7y4w.cloudfront.net
	Query to ns-59.awsdns-07.com for d2cxkeqqdd7y4w.cloudfront.net/SOA
	Received 256 bytes from 205.251.192.59
	;; Response received from [205.251.192.59] 256 octets ;; HEADER SECTION ;; id = 13310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d2cxkeqqdd7y4w.cloudfront.net. 900 IN SOA ( ns-1777.awsdns-30.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1777.awsdns-30.co.uk for d2cxkeqqdd7y4w.cloudfront.net/SOA
	Received 256 bytes from 205.251.198.241
	;; Response received from [205.251.198.241] 256 octets ;; HEADER SECTION ;; id = 15293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d2cxkeqqdd7y4w.cloudfront.net. 900 IN SOA ( ns-1777.awsdns-30.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1011.awsdns-62.net for d2cxkeqqdd7y4w.cloudfront.net/SOA
	Received 256 bytes from 205.251.195.243
	;; Response received from [205.251.195.243] 256 octets ;; HEADER SECTION ;; id = 20108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d2cxkeqqdd7y4w.cloudfront.net. 900 IN SOA ( ns-1777.awsdns-30.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1361.awsdns-42.org for d2cxkeqqdd7y4w.cloudfront.net/A
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.11
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.31
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.13
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.129
	No RRSIGs found

d2cxkeqqdd7y4w.cloudfront.net

	Query to ns-1011.awsdns-62.net for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 259 bytes from 205.251.195.243
	;; Response received from [205.251.195.243] 259 octets ;; HEADER SECTION ;; id = 11603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.129 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.13 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.31 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.11 ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1011.awsdns-62.net is authoritative for d2cxkeqqdd7y4w.cloudfront.net
	Query to ns-1011.awsdns-62.net for d2cxkeqqdd7y4w.cloudfront.net/A
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.129
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.13
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.31
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.11
	No RRSIGs found

d2cxkeqqdd7y4w.cloudfront.net

	Query to ns-59.awsdns-07.com for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 259 bytes from 205.251.192.59
	;; Response received from [205.251.192.59] 259 octets ;; HEADER SECTION ;; id = 55430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.129 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.31 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.13 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.11 ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-59.awsdns-07.com is authoritative for d2cxkeqqdd7y4w.cloudfront.net
	Query to ns-59.awsdns-07.com for d2cxkeqqdd7y4w.cloudfront.net/A
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.129
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.31
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.13
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.11
	No RRSIGs found

d2cxkeqqdd7y4w.cloudfront.net

	Query to ns-1777.awsdns-30.co.uk for d2cxkeqqdd7y4w.cloudfront.net/A
	Received 259 bytes from 205.251.198.241
	;; Response received from [205.251.198.241] 259 octets ;; HEADER SECTION ;; id = 48562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; d2cxkeqqdd7y4w.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.31 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.13 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.129 d2cxkeqqdd7y4w.cloudfront.net. 60 IN A 13.226.238.11 ;; AUTHORITY SECTION (4 records) d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1011.awsdns-62.net. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1361.awsdns-42.org. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-1777.awsdns-30.co.uk. d2cxkeqqdd7y4w.cloudfront.net. 172800 IN NS ns-59.awsdns-07.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1777.awsdns-30.co.uk is authoritative for d2cxkeqqdd7y4w.cloudfront.net
	Query to ns-1777.awsdns-30.co.uk for d2cxkeqqdd7y4w.cloudfront.net/A
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.31
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.13
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.129
	d2cxkeqqdd7y4w.cloudfront.net A RR has value 13.226.238.11
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test s.z-z.jp at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: