DNSSEC Debugger - sigfail.verteiltesysteme.net

Domain Name:

Time: 2025-12-15 11:27:32 UTC

Analyzing DNSSEC problems for sigfail.verteiltesysteme.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 5108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for sigfail.verteiltesysteme.net/A
	Received 1185 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1185 octets ;; HEADER SECTION ;; id = 23256 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . SpERQ/kk8BjBY/yDm/I/lq+exv+XCVMcPJfUPGPUu7BZcljorzEd7rj2qDQx2FN4+hE9cU2vT+sn VwXk7QIO1Sd5o9pgV4ADZnii7mtj9VKqy1TBVuq0Fk1WIU7gQt2SWVYW3zsaNE+67DRa3Dqp0YiK dYLZdt4U24PalQn9bezvdDVXX93UG2dv30ne56YcX1mhM2hhGL50CjRjwLiM/8EM5NRGqQQUWSl/ H1Ag4LD/leEL/PDgwcifDorpmC2ZjX8XAJmv1QffTzf1HqLiNFkabu1sCBikLBYi+9XAYC0I1mC5 94wesDzwxUuMEGSxQq8pjx0D7KVRyaKr2Kay/g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1160 octets ;; HEADER SECTION ;; id = 16977 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . SpERQ/kk8BjBY/yDm/I/lq+exv+XCVMcPJfUPGPUu7BZcljorzEd7rj2qDQx2FN4+hE9cU2vT+sn VwXk7QIO1Sd5o9pgV4ADZnii7mtj9VKqy1TBVuq0Fk1WIU7gQt2SWVYW3zsaNE+67DRa3Dqp0YiK dYLZdt4U24PalQn9bezvdDVXX93UG2dv30ne56YcX1mhM2hhGL50CjRjwLiM/8EM5NRGqQQUWSl/ H1Ag4LD/leEL/PDgwcifDorpmC2ZjX8XAJmv1QffTzf1HqLiNFkabu1sCBikLBYi+9XAYC0I1mC5 94wesDzwxUuMEGSxQq8pjx0D7KVRyaKr2Kay/g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to l.root-servers.net for net/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 5602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . SpERQ/kk8BjBY/yDm/I/lq+exv+XCVMcPJfUPGPUu7BZcljorzEd7rj2qDQx2FN4+hE9cU2vT+sn VwXk7QIO1Sd5o9pgV4ADZnii7mtj9VKqy1TBVuq0Fk1WIU7gQt2SWVYW3zsaNE+67DRa3Dqp0YiK dYLZdt4U24PalQn9bezvdDVXX93UG2dv30ne56YcX1mhM2hhGL50CjRjwLiM/8EM5NRGqQQUWSl/ H1Ag4LD/leEL/PDgwcifDorpmC2ZjX8XAJmv1QffTzf1HqLiNFkabu1sCBikLBYi+9XAYC0I1mC5 94wesDzwxUuMEGSxQq8pjx0D7KVRyaKr2Kay/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . SpERQ/kk8BjBY/yDm/I/lq+exv+XCVMcPJfUPGPUu7BZcljorzEd7rj2qDQx2FN4+hE9cU2vT+sn VwXk7QIO1Sd5o9pgV4ADZnii7mtj9VKqy1TBVuq0Fk1WIU7gQt2SWVYW3zsaNE+67DRa3Dqp0YiK dYLZdt4U24PalQn9bezvdDVXX93UG2dv30ne56YcX1mhM2hhGL50CjRjwLiM/8EM5NRGqQQUWSl/ H1Ag4LD/leEL/PDgwcifDorpmC2ZjX8XAJmv1QffTzf1HqLiNFkabu1sCBikLBYi+9XAYC0I1mC5 94wesDzwxUuMEGSxQq8pjx0D7KVRyaKr2Kay/g== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 291 octets ;; HEADER SECTION ;; id = 54612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251223151035 20251208150535 37331 net. ehjbbcDeGgGYo9yEYCeDBoknioZm0+Dx4BznWkjdqONADkj8F6UW1OqWhN1gWHkl7asUNETCtw24 6Nt3mHiz2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251223151035 20251208150535 37331 net. ehjbbcDeGgGYo9yEYCeDBoknioZm0+Dx4BznWkjdqONADkj8F6UW1OqWhN1gWHkl7asUNETCtw24 6Nt3mHiz2w== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	Query to d.gtld-servers.net for sigfail.verteiltesysteme.net/A
	Received 251 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 251 octets ;; HEADER SECTION ;; id = 1343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) verteiltesysteme.net. 172800 IN NS dns1.registrar-servers.com. verteiltesysteme.net. 172800 IN NS dns2.registrar-servers.com. verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20251222032926 20251215021926 17133 net. p+8FHSB1EU6Bu2QcK1r0ADN+GE/iXT844lZDlWWDpp52N7G3xm3e0i2oJzW6+mPErrwJXX5IrW0+ Nw8DKJ001Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.gtld-servers.net for verteiltesysteme.net/DNSKEY
	Received 243 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 243 octets ;; HEADER SECTION ;; id = 30375 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) verteiltesysteme.net. 172800 IN NS dns1.registrar-servers.com. verteiltesysteme.net. 172800 IN NS dns2.registrar-servers.com. verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20251222032926 20251215021926 17133 net. p+8FHSB1EU6Bu2QcK1r0ADN+GE/iXT844lZDlWWDpp52N7G3xm3e0i2oJzW6+mPErrwJXX5IrW0+ Nw8DKJ001Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone verteiltesysteme.net

verteiltesysteme.net

	Checking DS between net and verteiltesysteme.net
	Query to i.gtld-servers.net for verteiltesysteme.net/DS
	Received 1076 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 1076 octets ;; HEADER SECTION ;; id = 51239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DS ;; ANSWER SECTION (2 records) verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20251222032926 20251215021926 17133 net. p+8FHSB1EU6Bu2QcK1r0ADN+GE/iXT844lZDlWWDpp52N7G3xm3e0i2oJzW6+mPErrwJXX5IrW0+ Nw8DKJ001Q== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20251219032626 20251212021626 17133 net. lklPceD7pWwFuX2DunYMFR6whGxUFbf143hCS+WcoXwb/ZmiEdqSgz0qLQB2ttfAtNVrwkJgG7KC 1VljNQS45g== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for verteiltesysteme.net in the net zone
	DS=29912/SHA-1 uses a deprecated digest algorithm
	DS=29912/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20251222032926 20251215021926 17133 net. p+8FHSB1EU6Bu2QcK1r0ADN+GE/iXT844lZDlWWDpp52N7G3xm3e0i2oJzW6+mPErrwJXX5IrW0+ Nw8DKJ001Q== )`
	RRSIG=17133 and DNSKEY=17133 verifies the DS RRset
	DS=29912/SHA-1 is now in the chain-of-trust
	`verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 )`
	Query to dns2.registrar-servers.com for verteiltesysteme.net/DNSKEY
	Received 325 bytes from 156.154.133.200
	;; Response received from [156.154.133.200] 325 octets ;; HEADER SECTION ;; id = 40161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (3 records) verteiltesysteme.net. 3601 IN DNSKEY ( 256 3 13 wsIQPqZ/0mHXLbNw1l/SYENOtqwmeqG6LiDw1VQa1eBjXixt1dSuZ1KdiFMhKL1t02NgCkifRRBx z7yAkHLcdA== ) ; keytag 47187 verteiltesysteme.net. 3601 IN DNSKEY ( 257 3 13 5MHd68dIEp3txhWN7M05DsdvRU5cUHIHsf7C4Zs44DrrAS+oBvPmoXOjAnPqBXUe9Vajt7UnI/y8 4kTEn+/uWQ== ) ; keytag 29912 verteiltesysteme.net. 3601 IN RRSIG ( DNSKEY 13 2 3601 20251225000000 20251204000000 29912 verteiltesysteme.net. uODsIAwp8/mffAZtu8futo08ea77D+MF9BxGJPUenfJqIcabyCLOFefDHQlD/SauRmhh2iTCGhS+ dViGS1XVxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for verteiltesysteme.net
	`verteiltesysteme.net. 3601 IN DNSKEY ( 256 3 13 wsIQPqZ/0mHXLbNw1l/SYENOtqwmeqG6LiDw1VQa1eBjXixt1dSuZ1KdiFMhKL1t02NgCkifRRBx z7yAkHLcdA== ) ; keytag 47187`
	`verteiltesysteme.net. 3601 IN DNSKEY ( 257 3 13 5MHd68dIEp3txhWN7M05DsdvRU5cUHIHsf7C4Zs44DrrAS+oBvPmoXOjAnPqBXUe9Vajt7UnI/y8 4kTEn+/uWQ== ) ; keytag 29912`
	DNSKEY=29912/SEP is now in the chain-of-trust
	DS=29912/SHA-1 verifies DNSKEY=29912/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`verteiltesysteme.net. 3601 IN RRSIG ( DNSKEY 13 2 3601 20251225000000 20251204000000 29912 verteiltesysteme.net. uODsIAwp8/mffAZtu8futo08ea77D+MF9BxGJPUenfJqIcabyCLOFefDHQlD/SauRmhh2iTCGhS+ dViGS1XVxw== )`
	RRSIG=29912 and DNSKEY=29912/SEP verifies the DNSKEY RRset
	DNSKEY=47187 is now in the chain-of-trust
	Query to dns1.registrar-servers.com for sigfail.verteiltesysteme.net/A
	Received 225 bytes from 156.154.132.200
	;; Response received from [156.154.132.200] 225 octets ;; HEADER SECTION ;; id = 44449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (2 records) sigfail.verteiltesysteme.net. 1799 IN CNAME ( sigfail.rsa2048-sha256.ippacket.stream. ) sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20251225000000 20251204000000 47187 verteiltesysteme.net. EZ37rRTjId+X6vdFSv2U38AsvoC+V2Sx3awCgD+AnoVdtrWbUbviWdsDFX4zXJ+qCqmWWYdoJ3+0 i86hi/jqmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.registrar-servers.com is authoritative for sigfail.verteiltesysteme.net
	Query to dns1.registrar-servers.com for sigfail.verteiltesysteme.net/DNSKEY
	Received 225 bytes from 156.154.132.200
	;; Response received from [156.154.132.200] 225 octets ;; HEADER SECTION ;; id = 12414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (2 records) sigfail.verteiltesysteme.net. 1799 IN CNAME ( sigfail.rsa2048-sha256.ippacket.stream. ) sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20251225000000 20251204000000 47187 verteiltesysteme.net. EZ37rRTjId+X6vdFSv2U38AsvoC+V2Sx3awCgD+AnoVdtrWbUbviWdsDFX4zXJ+qCqmWWYdoJ3+0 i86hi/jqmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by verteiltesysteme.net zone
	sigfail.verteiltesysteme.net is a CNAME to sigfail.rsa2048-sha256.ippacket.stream
	Found 1 RRSIGs over CNAME RRset
	`sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20251225000000 20251204000000 47187 verteiltesysteme.net. EZ37rRTjId+X6vdFSv2U38AsvoC+V2Sx3awCgD+AnoVdtrWbUbviWdsDFX4zXJ+qCqmWWYdoJ3+0 i86hi/jqmw== )`
	RRSIG=47187 and DNSKEY=47187 verifies the CNAME RRset

	Query to c.root-servers.net for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 798 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 798 octets ;; HEADER SECTION ;; id = 42974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stream. 172800 IN NS ns3.dns.nic.stream. stream. 172800 IN NS b.nic.stream. stream. 172800 IN NS a.nic.stream. stream. 172800 IN NS c.nic.stream. stream. 172800 IN NS ns1.dns.nic.stream. stream. 172800 IN NS ns2.dns.nic.stream. stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . 6pEdqklkc5b0fquMS/9Ld4jIM7K1h1Lev8wkNTz8/0GiMZHYHAr3Z4mxzIEnNTgeKJdvGhZn7TDP I/eUC5JEE6kQG54gFUbv67RtxfFF0F4Y+R8UWJDQ1Pod3ciVLbwsRROBz3hv065QArzOO4FSZ+gB x41ED4TqFxoEqMCj1IVU2G9jv/Umb5D9VvsZWyC5FBY6z2Kav9deQYf2z7PCAzq2gN3XJwZKwlxv 0bl/W3q8+TAtu/W3FkfOy70pcVeBj1cS8ofgx1Qs0cuSidfeVTsIznRqSlprdFg1dhrcaF479p4E rEDXIfOqFEbDczSuJ+YSkeo4FRmwK2+JoFQ9Rw== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.stream. 172800 IN A 156.154.171.50 ns2.dns.nic.stream. 172800 IN A 156.154.170.50 ns1.dns.nic.stream. 172800 IN A 156.154.169.50 c.nic.stream. 172800 IN A 37.209.196.10 b.nic.stream. 172800 IN A 37.209.194.10 a.nic.stream. 172800 IN A 37.209.192.10 ns3.dns.nic.stream. 172800 IN AAAA 2610:a1:1073::1:32 ns2.dns.nic.stream. 172800 IN AAAA 2610:a1:1072::1:32 ns1.dns.nic.stream. 172800 IN AAAA 2610:a1:1071::1:32 c.nic.stream. 172800 IN AAAA 2001:dcd:3::10 b.nic.stream. 172800 IN AAAA 2001:dcd:2::10 a.nic.stream. 172800 IN AAAA 2001:dcd:1::10 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for stream/DNSKEY
	Received 744 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 744 octets ;; HEADER SECTION ;; id = 11799 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stream. 172800 IN NS a.nic.stream. stream. 172800 IN NS b.nic.stream. stream. 172800 IN NS c.nic.stream. stream. 172800 IN NS ns1.dns.nic.stream. stream. 172800 IN NS ns2.dns.nic.stream. stream. 172800 IN NS ns3.dns.nic.stream. stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . 6pEdqklkc5b0fquMS/9Ld4jIM7K1h1Lev8wkNTz8/0GiMZHYHAr3Z4mxzIEnNTgeKJdvGhZn7TDP I/eUC5JEE6kQG54gFUbv67RtxfFF0F4Y+R8UWJDQ1Pod3ciVLbwsRROBz3hv065QArzOO4FSZ+gB x41ED4TqFxoEqMCj1IVU2G9jv/Umb5D9VvsZWyC5FBY6z2Kav9deQYf2z7PCAzq2gN3XJwZKwlxv 0bl/W3q8+TAtu/W3FkfOy70pcVeBj1cS8ofgx1Qs0cuSidfeVTsIznRqSlprdFg1dhrcaF479p4E rEDXIfOqFEbDczSuJ+YSkeo4FRmwK2+JoFQ9Rw== ) ;; ADDITIONAL SECTION (13 records) a.nic.stream. 172800 IN A 37.209.192.10 a.nic.stream. 172800 IN AAAA 2001:dcd:1::10 b.nic.stream. 172800 IN A 37.209.194.10 b.nic.stream. 172800 IN AAAA 2001:dcd:2::10 c.nic.stream. 172800 IN A 37.209.196.10 c.nic.stream. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.stream. 172800 IN A 156.154.169.50 ns1.dns.nic.stream. 172800 IN AAAA 2610:a1:1071::1:32 ns2.dns.nic.stream. 172800 IN A 156.154.170.50 ns2.dns.nic.stream. 172800 IN AAAA 2610:a1:1072::1:32 ns3.dns.nic.stream. 172800 IN A 156.154.171.50 ns3.dns.nic.stream. 172800 IN AAAA 2610:a1:1073::1:32 ;; { "EDNS-VERSION": 0 }
	Found child zone stream

stream

	Checking DS between . and stream
	Query to m.root-servers.net for stream/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 40801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DS ;; ANSWER SECTION (2 records) stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . 6pEdqklkc5b0fquMS/9Ld4jIM7K1h1Lev8wkNTz8/0GiMZHYHAr3Z4mxzIEnNTgeKJdvGhZn7TDP I/eUC5JEE6kQG54gFUbv67RtxfFF0F4Y+R8UWJDQ1Pod3ciVLbwsRROBz3hv065QArzOO4FSZ+gB x41ED4TqFxoEqMCj1IVU2G9jv/Umb5D9VvsZWyC5FBY6z2Kav9deQYf2z7PCAzq2gN3XJwZKwlxv 0bl/W3q8+TAtu/W3FkfOy70pcVeBj1cS8ofgx1Qs0cuSidfeVTsIznRqSlprdFg1dhrcaF479p4E rEDXIfOqFEbDczSuJ+YSkeo4FRmwK2+JoFQ9Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for stream in the . zone
	DS=31735/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`stream. 86400 IN RRSIG ( DS 8 1 86400 20251228050000 20251215040000 61809 . 6pEdqklkc5b0fquMS/9Ld4jIM7K1h1Lev8wkNTz8/0GiMZHYHAr3Z4mxzIEnNTgeKJdvGhZn7TDP I/eUC5JEE6kQG54gFUbv67RtxfFF0F4Y+R8UWJDQ1Pod3ciVLbwsRROBz3hv065QArzOO4FSZ+gB x41ED4TqFxoEqMCj1IVU2G9jv/Umb5D9VvsZWyC5FBY6z2Kav9deQYf2z7PCAzq2gN3XJwZKwlxv 0bl/W3q8+TAtu/W3FkfOy70pcVeBj1cS8ofgx1Qs0cuSidfeVTsIznRqSlprdFg1dhrcaF479p4E rEDXIfOqFEbDczSuJ+YSkeo4FRmwK2+JoFQ9Rw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=31735/SHA-256 is now in the chain-of-trust
	`stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 )`
	Query to ns3.dns.nic.stream for stream/DNSKEY
	Received 785 bytes from 156.154.171.50
	;; Response received from [156.154.171.50] 785 octets ;; HEADER SECTION ;; id = 9529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DNSKEY ;; ANSWER SECTION (3 records) stream. 7200 IN DNSKEY ( 256 3 8 AwEAAd5gSCm4Pv7RFjviwb6SgxtBmXJ0rFZhPS+3eZU+uN2Os8gsd8ty0alWo0dDxr0xWmX4Iqj1 Shr0cWQxGsuVZ5/WgfNehJo5a5+t/GOfOStgb1FndsmjaTL55iaJv9l+rEn8IL7/iCFKy6acM2y5 rD6FdJ5OeWhHgwgR+3zn2vXkj/ilyRXBbA7VVRo/RvNjPvNsn529hUT9RHAthFt9dXc= ) ; keytag 31686 stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbwsJ4j1GTprOt60ps+A+sRFSe3l87KdxP8BPny4LMLue9vWRGhwyM0OUI10l4qHaHQ3zQbA aVBR7k7ZCQc4o4BF6r/joBZHKwzWrzQGfZKWBb6BGVTU12o1D1uJOnNHV38Nl+FawsjnHu2RUFNi cp9QAKuU4j+llzoLaRDhsJkb84fSw7G0BekLAABAOPeViQBl+7FSRwoX2pe7ob5d6RLCh/qSTUIE PXTL4BNTIwMWHsdt/tH9K98skhIwVAF2RILKYuBdUAQhTHIZGNssisRGf5JwKCeBuyHzPhfmknp4 1Bm1RxJlihmVRPMpLy7Y5fFfU+7hD/zx9pYCnrwPrhE= ) ; keytag 31735 stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20251227004439 20251213002818 31735 stream. Pj0UMBwVFuglaLKJtxLaPDVdleKKk4d6VXdun65vhe6Ka/vMz2N/636cCzms2Y/mPAQ8cXscgLnn rJggVafLgHmttDkPFMJNQx/aPHv8btsAsdQHjuinHNv+rt5V1kBXKPk6yBHjMVcweURJUCiQpKnE NG9PE+wtWRCGZX+Hr6GqgCgoLU5VOFcAqUk8GjKk7uWDUhIOc1uZvyBh87ENFfrZDLZc4gVRsHLT OPWoNubhH3HkrY/uOGFMJjgYzJ4WejD4Yp/24ueaA2exN8J6Xtb3dwI3VgW5OcwxO48f9nlHMPzp 4TtK4pRt9PCzlKzhwdtUHewWT9cSZXi/nbeALQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for stream
	`stream. 7200 IN DNSKEY ( 256 3 8 AwEAAd5gSCm4Pv7RFjviwb6SgxtBmXJ0rFZhPS+3eZU+uN2Os8gsd8ty0alWo0dDxr0xWmX4Iqj1 Shr0cWQxGsuVZ5/WgfNehJo5a5+t/GOfOStgb1FndsmjaTL55iaJv9l+rEn8IL7/iCFKy6acM2y5 rD6FdJ5OeWhHgwgR+3zn2vXkj/ilyRXBbA7VVRo/RvNjPvNsn529hUT9RHAthFt9dXc= ) ; keytag 31686`
	`stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbwsJ4j1GTprOt60ps+A+sRFSe3l87KdxP8BPny4LMLue9vWRGhwyM0OUI10l4qHaHQ3zQbA aVBR7k7ZCQc4o4BF6r/joBZHKwzWrzQGfZKWBb6BGVTU12o1D1uJOnNHV38Nl+FawsjnHu2RUFNi cp9QAKuU4j+llzoLaRDhsJkb84fSw7G0BekLAABAOPeViQBl+7FSRwoX2pe7ob5d6RLCh/qSTUIE PXTL4BNTIwMWHsdt/tH9K98skhIwVAF2RILKYuBdUAQhTHIZGNssisRGf5JwKCeBuyHzPhfmknp4 1Bm1RxJlihmVRPMpLy7Y5fFfU+7hD/zx9pYCnrwPrhE= ) ; keytag 31735`
	DNSKEY=31735/SEP is now in the chain-of-trust
	DS=31735/SHA-256 verifies DNSKEY=31735/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20251227004439 20251213002818 31735 stream. Pj0UMBwVFuglaLKJtxLaPDVdleKKk4d6VXdun65vhe6Ka/vMz2N/636cCzms2Y/mPAQ8cXscgLnn rJggVafLgHmttDkPFMJNQx/aPHv8btsAsdQHjuinHNv+rt5V1kBXKPk6yBHjMVcweURJUCiQpKnE NG9PE+wtWRCGZX+Hr6GqgCgoLU5VOFcAqUk8GjKk7uWDUhIOc1uZvyBh87ENFfrZDLZc4gVRsHLT OPWoNubhH3HkrY/uOGFMJjgYzJ4WejD4Yp/24ueaA2exN8J6Xtb3dwI3VgW5OcwxO48f9nlHMPzp 4TtK4pRt9PCzlKzhwdtUHewWT9cSZXi/nbeALQ== )`
	RRSIG=31735 and DNSKEY=31735/SEP verifies the DNSKEY RRset
	DNSKEY=31686 is now in the chain-of-trust
	Query to a.nic.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 381 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 381 octets ;; HEADER SECTION ;; id = 7763 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ippacket.stream. 3600 IN NS ns1.ippacket.stream. ippacket.stream. 3600 IN NS ns2.ippacket.stream. ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20251225193104 20251211192440 31686 stream. qNX3p0isEgeuF/rD2XFK+DyghH3qfInE3ldIP5nilXyhSFptCx5VOIBNSkjaEo/SU07QNfzoBB+a /hbLtTFfCNZOmfIZ82A4RhzGsoIwoDkANOcpnDA7LCP2n3UH5OntmPztJt+xtoBSh5IDVB0BSqKm MpjY/QpzB5tux6HCKP9cjTNGCgiklG95dHY3VsZptoBXvt5/svV40PLZ03KM6A== ) ;; ADDITIONAL SECTION (3 records) ns1.ippacket.stream. 3600 IN A 195.201.14.36 ns2.ippacket.stream. 3600 IN A 195.181.240.97 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.nic.stream for ippacket.stream/DNSKEY
	Received 358 bytes from 156.154.171.50
	;; Response received from [156.154.171.50] 358 octets ;; HEADER SECTION ;; id = 35642 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ippacket.stream. 3600 IN NS ns1.ippacket.stream. ippacket.stream. 3600 IN NS ns2.ippacket.stream. ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20251225193104 20251211192440 31686 stream. qNX3p0isEgeuF/rD2XFK+DyghH3qfInE3ldIP5nilXyhSFptCx5VOIBNSkjaEo/SU07QNfzoBB+a /hbLtTFfCNZOmfIZ82A4RhzGsoIwoDkANOcpnDA7LCP2n3UH5OntmPztJt+xtoBSh5IDVB0BSqKm MpjY/QpzB5tux6HCKP9cjTNGCgiklG95dHY3VsZptoBXvt5/svV40PLZ03KM6A== ) ;; ADDITIONAL SECTION (3 records) ns1.ippacket.stream. 3600 IN A 195.201.14.36 ns2.ippacket.stream. 3600 IN A 195.181.240.97 ;; { "EDNS-VERSION": 0 }
	Found child zone ippacket.stream

ippacket.stream

	Checking DS between stream and ippacket.stream
	Query to ns2.dns.nic.stream for ippacket.stream/DS
	Received 598 bytes from 156.154.170.50
	;; Response received from [156.154.170.50] 598 octets ;; HEADER SECTION ;; id = 14899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DS ;; ANSWER SECTION (2 records) ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20251225193104 20251211192440 31686 stream. qNX3p0isEgeuF/rD2XFK+DyghH3qfInE3ldIP5nilXyhSFptCx5VOIBNSkjaEo/SU07QNfzoBB+a /hbLtTFfCNZOmfIZ82A4RhzGsoIwoDkANOcpnDA7LCP2n3UH5OntmPztJt+xtoBSh5IDVB0BSqKm MpjY/QpzB5tux6HCKP9cjTNGCgiklG95dHY3VsZptoBXvt5/svV40PLZ03KM6A== ) ;; AUTHORITY SECTION (7 records) stream. 86400 IN NS a.nic.stream. stream. 86400 IN NS b.nic.stream. stream. 86400 IN NS c.nic.stream. stream. 86400 IN NS ns1.dns.nic.stream. stream. 86400 IN NS ns2.dns.nic.stream. stream. 86400 IN NS ns3.dns.nic.stream. stream. 86400 IN RRSIG ( NS 8 1 86400 20251225001715 20251210231936 31686 stream. FXH/2ZXqD+5hW+JJi+6WNuUS9f3LvmdeZq6BfIqY745BWuhvksSg6pC62TFk+r8ipIZ5T0GJOROP BVZKr3/qnjkw2GwM3cu3EoXI2QQleh5QnNk6/eJENuEq41ptwqaN9FQrKQgSTiTfBz0fTkpr/lIB MA9w92h9HDsPK3BsNXiIWhwj2qUuGDq1hpEeqOBeM8ZrDMApjvB3zC7fWZ573g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ippacket.stream in the stream zone
	DS=65045/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20251225193104 20251211192440 31686 stream. qNX3p0isEgeuF/rD2XFK+DyghH3qfInE3ldIP5nilXyhSFptCx5VOIBNSkjaEo/SU07QNfzoBB+a /hbLtTFfCNZOmfIZ82A4RhzGsoIwoDkANOcpnDA7LCP2n3UH5OntmPztJt+xtoBSh5IDVB0BSqKm MpjY/QpzB5tux6HCKP9cjTNGCgiklG95dHY3VsZptoBXvt5/svV40PLZ03KM6A== )`
	RRSIG=31686 and DNSKEY=31686 verifies the DS RRset
	DS=65045/SHA-256 is now in the chain-of-trust
	`ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e )`
	Query to ns2.ippacket.stream for ippacket.stream/DNSKEY
	Timeout querying ns2.ippacket.stream/195.181.240.97 for ippacket.stream/DNSKEY
	All Queries to ns2.ippacket.stream for ippacket.stream/DNSKEY timed out or failed
	Query to ns1.ippacket.stream for ippacket.stream/DNSKEY
	Received 623 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 623 octets ;; HEADER SECTION ;; id = 41997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DNSKEY ;; ANSWER SECTION (2 records) ippacket.stream. 3600 IN DNSKEY ( 257 3 8 AwEAAeWqZHk0Ia6+jrIdosxoyiF+vPidsMTf7epkOcWok4WpxFwNHe/5nlGuBV3UbMzGEaAQDzUD JSkt5OraRUyv8BlMetjsgmd7lgoZ3Q/j099+jR/i9qr2a6UrXrBe0M4RpFUd/ETek0MN4A5Eejfe yHQcUJlinO1OsCBQwJh75+Pw75Q+eu89zGgTfJFBCVXGOb7NbAS2Q9mUoh3FFfFpR5NpJNRgrJIg ln38gbS0WJPoZXFyqSclCasOM2IRFc2P2AuDqXWHKmVIP1wUMX8p+pQoVaqofhYH712lX8H4vKcE KJpoWqVVrqX3Y5r95puuET9VPRy0i2YgeNnkwys1rsk= ) ; keytag 65045 ippacket.stream. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260116194910 20251207191642 65045 ippacket.stream. c/Hs2Ry/P+VpURLuVKUa7U9KM1/beVXY3rgjPyOjdEHhPywUAXDSqFSj0Qn1hc4xd2Q/sA2pbR41 6UT5O42k/JZ5dK7WCSSQMfCEIx7lVtyyY6vkx27fCn9b+lU5IE6r8ysUkCsHhkdfgmWVp2fUejkN DJbX+W8TdanHCooHY4ZsrFpn/CEFARpju90EaemGRe9UHnJzd5MRs+eEVx7sCnDT3mlmhpL1E+kc Dt+cIELXtNoElD3yh7WsPA/njUYs1GJqMb6ZB6emX1/xJGCxPkFm/KLAArMlGyJveKuCXjZXk4FA Pfqaocr/j0KCkDk3WoZgEA0YKoSd4n6DwU+rFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ippacket.stream
	`ippacket.stream. 3600 IN DNSKEY ( 257 3 8 AwEAAeWqZHk0Ia6+jrIdosxoyiF+vPidsMTf7epkOcWok4WpxFwNHe/5nlGuBV3UbMzGEaAQDzUD JSkt5OraRUyv8BlMetjsgmd7lgoZ3Q/j099+jR/i9qr2a6UrXrBe0M4RpFUd/ETek0MN4A5Eejfe yHQcUJlinO1OsCBQwJh75+Pw75Q+eu89zGgTfJFBCVXGOb7NbAS2Q9mUoh3FFfFpR5NpJNRgrJIg ln38gbS0WJPoZXFyqSclCasOM2IRFc2P2AuDqXWHKmVIP1wUMX8p+pQoVaqofhYH712lX8H4vKcE KJpoWqVVrqX3Y5r95puuET9VPRy0i2YgeNnkwys1rsk= ) ; keytag 65045`
	DNSKEY=65045/SEP is now in the chain-of-trust
	DS=65045/SHA-256 verifies DNSKEY=65045/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ippacket.stream. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260116194910 20251207191642 65045 ippacket.stream. c/Hs2Ry/P+VpURLuVKUa7U9KM1/beVXY3rgjPyOjdEHhPywUAXDSqFSj0Qn1hc4xd2Q/sA2pbR41 6UT5O42k/JZ5dK7WCSSQMfCEIx7lVtyyY6vkx27fCn9b+lU5IE6r8ysUkCsHhkdfgmWVp2fUejkN DJbX+W8TdanHCooHY4ZsrFpn/CEFARpju90EaemGRe9UHnJzd5MRs+eEVx7sCnDT3mlmhpL1E+kc Dt+cIELXtNoElD3yh7WsPA/njUYs1GJqMb6ZB6emX1/xJGCxPkFm/KLAArMlGyJveKuCXjZXk4FA Pfqaocr/j0KCkDk3WoZgEA0YKoSd4n6DwU+rFw== )`
	RRSIG=65045 and DNSKEY=65045/SEP verifies the DNSKEY RRset
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 15064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ippacket.stream is authoritative for sigfail.rsa2048-sha256.ippacket.stream
	Query to ns2.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY
	Timeout querying ns2.ippacket.stream/195.181.240.97 for rsa2048-sha256.ippacket.stream/DNSKEY
	All Queries to ns2.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY timed out or failed
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY
	Received 653 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 653 octets ;; HEADER SECTION ;; id = 18506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 60 IN DNSKEY ( 257 3 8 AwEAAbZkTB4JrsdrUE30DjiZpMPvYMZxuOTwXD05GU7JZtUB7UcYeXqnH5U+GneuJ437OGg8VEmm 3SzGI9jv1/RsMOnOofZdljsCtCYPuAbD4BkYhu2XCDrCJbtovibolUJH/r3cAZBBpnmy82mStoxf rsYP9Y4DbqxnJUyM10HnNiuzyofRmoXPFxM41ejA9Ef+4062+cu4kTynzkpWmR8zW8ERnhBdGpuk 7RBywdBGbaPHCjXPnQqzqCrTLx4c1hPCZ+XuvOXA6YNnwr3f9QDXHunnUlqVPB9sz4Y9y6pO4Hr9 xevSdKK7KDP4V2QhBWPeKn76F5QjqMn6ApMcxQNsXgk= ) ; keytag 46436 rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( DNSKEY 8 3 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. Lycn3R7LFcxgAMLfKhXVj65eIFRTOc/bhemJ7XsVUneCqtcKIVdtE5dRrvANmgrg/1xeS0xzTNoa UvB5g5H8S1xf7YA3DJtALEhfdCgRHEOp/4vTjs7RjW8Ss5i0hfauvRJLYmhtqGt7bOx75ePTdNlS F5/fNJlTeakCMg8dGyqY23s08xAzcsYVvlaMtiqBQAAGPjPMRJV4yZnAT9NIBEp7CyIp6GFIB/YE fbsecprqr44ZLMjPtoH0VV6IrUUUOT40AccffjEL8A1roINemj/o9yazO4OTSnMMrvfNOUkFLSTY LzxRUPnC2Fcov4ZgpLJBIi/Y+qR4OXi42UqsuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone rsa2048-sha256.ippacket.stream
	Attempting to learn nameservers for rsa2048-sha256.ippacket.stream
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/NS
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 58858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN NS ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 60 IN NS ns1.ippacket.stream. rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( NS 8 3 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. U6one34NAykr4+kJBE4rLMPsAf8PMuCcLHYiKIdH3aixZRS1VQbqk7yRmqGD0ymDbiW+GyG15G8O 1y9rzOnj1KObq2dhpfizBz0oVlZOZcDZxsI0yjgHO1tVYzgAli2Z7ohgSLlhKIgckMHFVXerYDGN zTdsbbuMZ6HEqggn6Qb+kAvrEgqbEVrwqeWf0NSqzrFH5chSFyOw1VA7QS1wP4OycTbqmijT1CvU Cg0UR03SJDiO+Mdf6gAKceBSlclWk3kMDA6aCPKJFkJIL1CpCSTkd+9fViUoZQRKOiLV4Mjd7oES EdNUwSqo1GSYo6KbEOTFgUenM0BapD8SvNbmLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found rsa2048-sha256.ippacket.stream nameservers: ns1.ippacket.stream

rsa2048-sha256.ippacket.stream

	Checking DS between ippacket.stream and rsa2048-sha256.ippacket.stream
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/DS
	Received 410 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 410 octets ;; HEADER SECTION ;; id = 61573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DS ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 3600 IN DS ( 46436 8 2 0d1fe6641408ca76f58ec02fd2647b7e4f8045ea792924e4df448b8630b3e5ad ) rsa2048-sha256.ippacket.stream. 3600 IN RRSIG ( DS 8 3 3600 20260123182231 20251214175851 65045 ippacket.stream. zejUgUVY4yx7PrcLtrtf6/BQJzgHAr8mTX5TQ95la9QE4QxkDYIn1KfBC9mN5R3Na6+CFJRSVGLv ztxFJDGDjx3GEd/p4T77+UuvCvCfmSn35Li3fSTAjtUinNclv9j+aRIjsQYUdyqRwwbTOBquCG24 Pj/lqbL4eevMEEdDXdoAP9K1AsAjxK2o5xkO2WCA0Xmrp5F7AIDM9yJZ7okW8ZxXzYEXg+BHdXGF 2sEISFA4n6rNmTwkKatpPCSSV2MPu8mgD9uVpFcro2PW6oPeGWuV5xb3m3xpe7B4FZYWgNBeNJcu R4mLOTpGQDCKbCpdkzKYO6qy4aWuVmN7tzWR3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for rsa2048-sha256.ippacket.stream in the ippacket.stream zone
	DS=46436/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`rsa2048-sha256.ippacket.stream. 3600 IN RRSIG ( DS 8 3 3600 20260123182231 20251214175851 65045 ippacket.stream. zejUgUVY4yx7PrcLtrtf6/BQJzgHAr8mTX5TQ95la9QE4QxkDYIn1KfBC9mN5R3Na6+CFJRSVGLv ztxFJDGDjx3GEd/p4T77+UuvCvCfmSn35Li3fSTAjtUinNclv9j+aRIjsQYUdyqRwwbTOBquCG24 Pj/lqbL4eevMEEdDXdoAP9K1AsAjxK2o5xkO2WCA0Xmrp5F7AIDM9yJZ7okW8ZxXzYEXg+BHdXGF 2sEISFA4n6rNmTwkKatpPCSSV2MPu8mgD9uVpFcro2PW6oPeGWuV5xb3m3xpe7B4FZYWgNBeNJcu R4mLOTpGQDCKbCpdkzKYO6qy4aWuVmN7tzWR3Q== )`
	RRSIG=65045 and DNSKEY=65045/SEP verifies the DS RRset
	DS=46436/SHA-256 is now in the chain-of-trust
	`rsa2048-sha256.ippacket.stream. 3600 IN DS ( 46436 8 2 0d1fe6641408ca76f58ec02fd2647b7e4f8045ea792924e4df448b8630b3e5ad )`
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY
	Received 653 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 653 octets ;; HEADER SECTION ;; id = 63868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 60 IN DNSKEY ( 257 3 8 AwEAAbZkTB4JrsdrUE30DjiZpMPvYMZxuOTwXD05GU7JZtUB7UcYeXqnH5U+GneuJ437OGg8VEmm 3SzGI9jv1/RsMOnOofZdljsCtCYPuAbD4BkYhu2XCDrCJbtovibolUJH/r3cAZBBpnmy82mStoxf rsYP9Y4DbqxnJUyM10HnNiuzyofRmoXPFxM41ejA9Ef+4062+cu4kTynzkpWmR8zW8ERnhBdGpuk 7RBywdBGbaPHCjXPnQqzqCrTLx4c1hPCZ+XuvOXA6YNnwr3f9QDXHunnUlqVPB9sz4Y9y6pO4Hr9 xevSdKK7KDP4V2QhBWPeKn76F5QjqMn6ApMcxQNsXgk= ) ; keytag 46436 rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( DNSKEY 8 3 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. Lycn3R7LFcxgAMLfKhXVj65eIFRTOc/bhemJ7XsVUneCqtcKIVdtE5dRrvANmgrg/1xeS0xzTNoa UvB5g5H8S1xf7YA3DJtALEhfdCgRHEOp/4vTjs7RjW8Ss5i0hfauvRJLYmhtqGt7bOx75ePTdNlS F5/fNJlTeakCMg8dGyqY23s08xAzcsYVvlaMtiqBQAAGPjPMRJV4yZnAT9NIBEp7CyIp6GFIB/YE fbsecprqr44ZLMjPtoH0VV6IrUUUOT40AccffjEL8A1roINemj/o9yazO4OTSnMMrvfNOUkFLSTY LzxRUPnC2Fcov4ZgpLJBIi/Y+qR4OXi42UqsuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for rsa2048-sha256.ippacket.stream
	`rsa2048-sha256.ippacket.stream. 60 IN DNSKEY ( 257 3 8 AwEAAbZkTB4JrsdrUE30DjiZpMPvYMZxuOTwXD05GU7JZtUB7UcYeXqnH5U+GneuJ437OGg8VEmm 3SzGI9jv1/RsMOnOofZdljsCtCYPuAbD4BkYhu2XCDrCJbtovibolUJH/r3cAZBBpnmy82mStoxf rsYP9Y4DbqxnJUyM10HnNiuzyofRmoXPFxM41ejA9Ef+4062+cu4kTynzkpWmR8zW8ERnhBdGpuk 7RBywdBGbaPHCjXPnQqzqCrTLx4c1hPCZ+XuvOXA6YNnwr3f9QDXHunnUlqVPB9sz4Y9y6pO4Hr9 xevSdKK7KDP4V2QhBWPeKn76F5QjqMn6ApMcxQNsXgk= ) ; keytag 46436`
	DNSKEY=46436/SEP is now in the chain-of-trust
	DS=46436/SHA-256 verifies DNSKEY=46436/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( DNSKEY 8 3 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. Lycn3R7LFcxgAMLfKhXVj65eIFRTOc/bhemJ7XsVUneCqtcKIVdtE5dRrvANmgrg/1xeS0xzTNoa UvB5g5H8S1xf7YA3DJtALEhfdCgRHEOp/4vTjs7RjW8Ss5i0hfauvRJLYmhtqGt7bOx75ePTdNlS F5/fNJlTeakCMg8dGyqY23s08xAzcsYVvlaMtiqBQAAGPjPMRJV4yZnAT9NIBEp7CyIp6GFIB/YE fbsecprqr44ZLMjPtoH0VV6IrUUUOT40AccffjEL8A1roINemj/o9yazO4OTSnMMrvfNOUkFLSTY LzxRUPnC2Fcov4ZgpLJBIi/Y+qR4OXi42UqsuQ== )`
	RRSIG=46436 and DNSKEY=46436/SEP verifies the DNSKEY RRset
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 26381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ippacket.stream is authoritative for sigfail.rsa2048-sha256.ippacket.stream
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/DNSKEY
	Received 830 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 830 octets ;; HEADER SECTION ;; id = 36294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) rsa2048-sha256.ippacket.stream. 60 IN SOA ( ns1.ippacket.stream. root.swznet.de. 41 ;serial 86400 ;refresh 7200 ;retry 2419200 ;expire 600 ;minimum ) rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( SOA 8 3 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. pvODMTBrHYywnlsX6TzDNP1BwGZgD3HjDwg0q9QOdQop98cN1OxXOeUrertW87XuGldxAXvKeu6Y I1J1aHAiRJQ8VcUy/Yo0Qlh8Jby0X0Nb5XkAIrxlN6HXXUYKeS4/noNeHBMO6ypI6Bty1W8XHqg3 W47XWeyTHCAkORIV6NLsw6hRBkfpez3VLOCwWNzPUXuImLG+/fzGcaNcCxH4ac06UKoAsM6hIBT0 KaMG9cq/NqRVi1yuRJsvLf6c/DblRST4xH4/KsU2EL5xhtfUB7Pp+IKLqR5PqoHIxqZvOaLHKpc8 rXhYC8kWceSS4apdyg+44XA5q3nDIj91V3AdUw== ) sigfail.rsa2048-sha256.ippacket.stream. 60 IN NSEC ( sigok.rsa2048-sha256.ippacket.stream. A AAAA RRSIG NSEC ) sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( NSEC 8 4 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. F+y1oWAQl1JrfQg5mDSRufd3GSJXevBTyhiyr+BZDBe4WDL8sx5pz+5ZDY/PIOmT9xHTdtX1hKeI e3U3+H7/Q9PI3PPTK31jmgBtQ5pCBQHcq0LN4h93dOMzJPImidWdGW7K43/We5PFpXTrMXnMXviO 01g24TKxuq+Jlf/3gi2V8umG/k4tJWrP+0bkRaMwGab+JGR2c8kuoEPLLCPZwEW/rlZmkIdgA3zP +u0U7wnL6DKe00jd9D2wcm5J6WKQGlZnz77QkVcwOADtrqn1b/TTDwwEv8vgO2K35pGj4YQ5qN8b Bnkdmh/WbKOIDlqx21vnb13YRdM0KJ4EsjOZ7w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by rsa2048-sha256.ippacket.stream zone
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 56081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sigfail.rsa2048-sha256.ippacket.stream A RR has value 195.201.14.36
	Found 1 RRSIGs over A RRset
	`sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20260110040002 20251130040002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== )`
	RRSIG=46436 and DNSKEY=46436/SEP does not verify the A RRset (signature verification failed)
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset
	The A RRset was not signed by any trusted keys

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sigfail.verteiltesysteme.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: