DNSSEC Debugger - stanford.edu

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 08:57:27 UTC

Analyzing DNSSEC problems for stanford.edu

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 9504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to j.root-servers.net for stanford.edu/A
	Received 1171 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1171 octets ;; HEADER SECTION ;; id = 33887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Ss3lVmXxPh7NBzHX1ZzqK2V+CEY0Pya3AzQRVXXpBPuH3PKIQUjIEiKhpm/pzp/u2LwaD+kKdjQF +4AhDaqXoIoVTAUhdHgzeaCSyoo4W8mKm6Jaggd5H6BWZP6IfESENUVUiYidQO7puPbQgSJxrtb/ NgJsGAu83ARfNLhngF9GQ8RjOF6O+Aj7M0hWz7UWRiC3VCQLD7g3wx2nX7OULI7KFEXs3hIPteLY YGEAiahfTRcFnn9rbR6TCgUvctEhu8xprghDKdIw/SXwj5Tg8XMkbRyuoaO1TC2xFXerb5L2MzXy IvhLCPT3/iG7B4jLIXAQI5HQaXOXg9OSK3sKMA== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1162 octets ;; HEADER SECTION ;; id = 43067 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Ss3lVmXxPh7NBzHX1ZzqK2V+CEY0Pya3AzQRVXXpBPuH3PKIQUjIEiKhpm/pzp/u2LwaD+kKdjQF +4AhDaqXoIoVTAUhdHgzeaCSyoo4W8mKm6Jaggd5H6BWZP6IfESENUVUiYidQO7puPbQgSJxrtb/ NgJsGAu83ARfNLhngF9GQ8RjOF6O+Aj7M0hWz7UWRiC3VCQLD7g3wx2nX7OULI7KFEXs3hIPteLY YGEAiahfTRcFnn9rbR6TCgUvctEhu8xprghDKdIw/SXwj5Tg8XMkbRyuoaO1TC2xFXerb5L2MzXy IvhLCPT3/iG7B4jLIXAQI5HQaXOXg9OSK3sKMA== ) ;; ADDITIONAL SECTION (27 records) d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Found child zone edu

edu

	Checking DS between . and edu
	Query to g.root-servers.net for edu/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 8931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Ss3lVmXxPh7NBzHX1ZzqK2V+CEY0Pya3AzQRVXXpBPuH3PKIQUjIEiKhpm/pzp/u2LwaD+kKdjQF +4AhDaqXoIoVTAUhdHgzeaCSyoo4W8mKm6Jaggd5H6BWZP6IfESENUVUiYidQO7puPbQgSJxrtb/ NgJsGAu83ARfNLhngF9GQ8RjOF6O+Aj7M0hWz7UWRiC3VCQLD7g3wx2nX7OULI7KFEXs3hIPteLY YGEAiahfTRcFnn9rbR6TCgUvctEhu8xprghDKdIw/SXwj5Tg8XMkbRyuoaO1TC2xFXerb5L2MzXy IvhLCPT3/iG7B4jLIXAQI5HQaXOXg9OSK3sKMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . Ss3lVmXxPh7NBzHX1ZzqK2V+CEY0Pya3AzQRVXXpBPuH3PKIQUjIEiKhpm/pzp/u2LwaD+kKdjQF +4AhDaqXoIoVTAUhdHgzeaCSyoo4W8mKm6Jaggd5H6BWZP6IfESENUVUiYidQO7puPbQgSJxrtb/ NgJsGAu83ARfNLhngF9GQ8RjOF6O+Aj7M0hWz7UWRiC3VCQLD7g3wx2nX7OULI7KFEXs3hIPteLY YGEAiahfTRcFnn9rbR6TCgUvctEhu8xprghDKdIw/SXwj5Tg8XMkbRyuoaO1TC2xFXerb5L2MzXy IvhLCPT3/iG7B4jLIXAQI5HQaXOXg9OSK3sKMA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to j.edu-servers.net for edu/DNSKEY
	Received 371 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 371 octets ;; HEADER SECTION ;; id = 24094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (4 records) edu. 86400 IN DNSKEY ( 256 3 13 WVHVp4Eprbq3+EmJ+XzSYbMy23PB3kzdKKmDpC7cME7yP44I5k/Fa64TOEpDHsJlZLDw28EQ8ypo /F3UAwLN0A== ) ; keytag 37239 edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663 edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260430151114 20260415150614 35663 edu. hn6MW+rv+0wuMgSimUHY1nynldQUyx1MWb5lle/P0E8VweNKywu1Ca1254ERIeJ83vrK2agQGy0J 6QNxHZw8iA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 256 3 13 WVHVp4Eprbq3+EmJ+XzSYbMy23PB3kzdKKmDpC7cME7yP44I5k/Fa64TOEpDHsJlZLDw28EQ8ypo /F3UAwLN0A== ) ; keytag 37239`
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663`
	`edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260430151114 20260415150614 35663 edu. hn6MW+rv+0wuMgSimUHY1nynldQUyx1MWb5lle/P0E8VweNKywu1Ca1254ERIeJ83vrK2agQGy0J 6QNxHZw8iA== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=37239 is now in the chain-of-trust
	DNSKEY=16901 is now in the chain-of-trust
	Query to c.edu-servers.net for stanford.edu/A
	Received 455 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 455 octets ;; HEADER SECTION ;; id = 32951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stanford.edu. 172800 IN NS avallone.stanford.edu. stanford.edu. 172800 IN NS atalante.stanford.edu. stanford.edu. 172800 IN NS argus.stanford.edu. stanford.edu. 172800 IN NS ns5.dnsmadeeasy.com. stanford.edu. 172800 IN NS ns6.dnsmadeeasy.com. stanford.edu. 172800 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN DS ( 37413 13 2 745f63509ecbb90a14428675c9d0c46c890f147a31ad813aca7d858e9fdb7fd4 ) stanford.edu. 86400 IN RRSIG ( DS 13 2 86400 20260423031227 20260416020227 37239 edu. wb34kr2kTmxBBXnjMLVVwvj8Aa1xAuc9uDSIDU3Tq2xGedsWKHcO8jKqCXBWrIzb+GCzAgj/8SET CrSjucfBwA== ) ;; ADDITIONAL SECTION (7 records) avallone.stanford.edu. 172800 IN A 171.64.7.88 avallone.stanford.edu. 172800 IN AAAA 2607:f6d0:0:9116::ab40:758 atalante.stanford.edu. 172800 IN A 171.64.7.61 atalante.stanford.edu. 172800 IN AAAA 2607:f6d0:0:d32::ab40:73d argus.stanford.edu. 172800 IN A 171.64.7.115 argus.stanford.edu. 172800 IN AAAA 2607:f6d0:0:9113::ab40:773 ;; { "EDNS-VERSION": 0 }
	Query to g.edu-servers.net for stanford.edu/DNSKEY
	Received 455 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 455 octets ;; HEADER SECTION ;; id = 12775 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stanford.edu. 172800 IN NS avallone.stanford.edu. stanford.edu. 172800 IN NS atalante.stanford.edu. stanford.edu. 172800 IN NS argus.stanford.edu. stanford.edu. 172800 IN NS ns5.dnsmadeeasy.com. stanford.edu. 172800 IN NS ns6.dnsmadeeasy.com. stanford.edu. 172800 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN DS ( 37413 13 2 745f63509ecbb90a14428675c9d0c46c890f147a31ad813aca7d858e9fdb7fd4 ) stanford.edu. 86400 IN RRSIG ( DS 13 2 86400 20260423031227 20260416020227 37239 edu. wb34kr2kTmxBBXnjMLVVwvj8Aa1xAuc9uDSIDU3Tq2xGedsWKHcO8jKqCXBWrIzb+GCzAgj/8SET CrSjucfBwA== ) ;; ADDITIONAL SECTION (7 records) avallone.stanford.edu. 172800 IN A 171.64.7.88 avallone.stanford.edu. 172800 IN AAAA 2607:f6d0:0:9116::ab40:758 atalante.stanford.edu. 172800 IN A 171.64.7.61 atalante.stanford.edu. 172800 IN AAAA 2607:f6d0:0:d32::ab40:73d argus.stanford.edu. 172800 IN A 171.64.7.115 argus.stanford.edu. 172800 IN AAAA 2607:f6d0:0:9113::ab40:773 ;; { "EDNS-VERSION": 0 }
	Found child zone stanford.edu

stanford.edu

	Checking DS between edu and stanford.edu
	Query to d.edu-servers.net for stanford.edu/DS
	Received 1082 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1082 octets ;; HEADER SECTION ;; id = 21219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN DS ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN DS ( 37413 13 2 745f63509ecbb90a14428675c9d0c46c890f147a31ad813aca7d858e9fdb7fd4 ) stanford.edu. 86400 IN RRSIG ( DS 13 2 86400 20260423031227 20260416020227 37239 edu. wb34kr2kTmxBBXnjMLVVwvj8Aa1xAuc9uDSIDU3Tq2xGedsWKHcO8jKqCXBWrIzb+GCzAgj/8SET CrSjucfBwA== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20260421031547 20260414020547 16901 edu. 51e34iXu+pDMa47GBRhaXLCNTGk3a18Wqjlt8ThqicFNNbXPZ18zNovWw3xUwSPk6kqpw8MPKQvb B2bJ4YFrqg== ) ;; ADDITIONAL SECTION (27 records) d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for stanford.edu in the edu zone
	DS=37413/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`stanford.edu. 86400 IN RRSIG ( DS 13 2 86400 20260423031227 20260416020227 37239 edu. wb34kr2kTmxBBXnjMLVVwvj8Aa1xAuc9uDSIDU3Tq2xGedsWKHcO8jKqCXBWrIzb+GCzAgj/8SET CrSjucfBwA== )`
	RRSIG=37239 and DNSKEY=37239 verifies the DS RRset
	DS=37413/SHA-256 is now in the chain-of-trust
	`stanford.edu. 86400 IN DS ( 37413 13 2 745f63509ecbb90a14428675c9d0c46c890f147a31ad813aca7d858e9fdb7fd4 )`
	Query to ns6.dnsmadeeasy.com for stanford.edu/DNSKEY
	Received 309 bytes from 208.80.124.13
	;; Response received from [208.80.124.13] 309 octets ;; HEADER SECTION ;; id = 36737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN DNSKEY ;; ANSWER SECTION (3 records) stanford.edu. 3600 IN DNSKEY ( 257 3 13 oxFaoSNGHGuOIE56vbzW5hGzoUT3ZvvXTXqUpQ6Z6Gqu5HjOl47JTzhAM0xLIC0dr/zYfxLhPgG6 Ft536jOXnQ== ) ; keytag 37413 stanford.edu. 3600 IN DNSKEY ( 256 3 13 zbFhtBHr3RAjPweOm6IjYPYHTeAZOCyT2xE3udSVbMnleWtzl2KfnqPcjYVnCYXj++FnIcVF9dCq tJ4Vz38Hgw== ) ; keytag 52801 stanford.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260424105855 20260410095855 37413 stanford.edu. pDImdtZSp6uTRR/EQe+jyLNvVBsJmmNIW1EzSgpQU8YZTFf2BwtKsm8BxmpyArctYrEPvH3z+v2b rENZsiKriQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for stanford.edu
	`stanford.edu. 3600 IN DNSKEY ( 257 3 13 oxFaoSNGHGuOIE56vbzW5hGzoUT3ZvvXTXqUpQ6Z6Gqu5HjOl47JTzhAM0xLIC0dr/zYfxLhPgG6 Ft536jOXnQ== ) ; keytag 37413`
	`stanford.edu. 3600 IN DNSKEY ( 256 3 13 zbFhtBHr3RAjPweOm6IjYPYHTeAZOCyT2xE3udSVbMnleWtzl2KfnqPcjYVnCYXj++FnIcVF9dCq tJ4Vz38Hgw== ) ; keytag 52801`
	DNSKEY=37413/SEP is now in the chain-of-trust
	DS=37413/SHA-256 verifies DNSKEY=37413/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`stanford.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260424105855 20260410095855 37413 stanford.edu. pDImdtZSp6uTRR/EQe+jyLNvVBsJmmNIW1EzSgpQU8YZTFf2BwtKsm8BxmpyArctYrEPvH3z+v2b rENZsiKriQ== )`
	RRSIG=37413 and DNSKEY=37413/SEP verifies the DNSKEY RRset
	DNSKEY=52801 is now in the chain-of-trust
	Query to avallone.stanford.edu for stanford.edu/A
	Received 1095 bytes from 171.64.7.88
	;; Response received from [171.64.7.88] 1095 octets ;; HEADER SECTION ;; id = 4144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (7 records) stanford.edu. 86400 IN NS avallone.stanford.edu. stanford.edu. 86400 IN NS atalante.stanford.edu. stanford.edu. 86400 IN NS ns5.dnsmadeeasy.com. stanford.edu. 86400 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN NS argus.stanford.edu. stanford.edu. 86400 IN NS ns6.dnsmadeeasy.com. stanford.edu. 86400 IN RRSIG ( NS 13 2 86400 20260427134204 20260413131730 52801 stanford.edu. xKKhikBBa0QX1noBkU75bUAlG0QaOK4auyCdJaqxWdfNtuhungw7YLzCjUFDWTFyXugWGREEjcgt GLIBf9ZD9w== ) ;; ADDITIONAL SECTION (12 records) Argus.stanford.edu. 1800 IN A 171.64.7.115 Atalante.stanford.edu. 1800 IN A 171.64.7.61 avallone.stanford.edu. 1800 IN A 171.64.7.88 Argus.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9113::ab40:773 Atalante.stanford.edu. 1800 IN AAAA 2607:f6d0:0:d32::ab40:73d avallone.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9116::ab40:758 Argus.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. CMWp15d+hA/OAn3vE4PThPlGZNGkXgTUosOPGjC8n8I2FRVftiP0OTLQ6s6zOulYqjJ2w6u3OHFx m58E75O3Bg== ) Argus.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. zvBhEvAoQfMQRB7Iof6BRbDZVc+/PYeUCTDR/Qcr92rHwhoBz2kRcZHjms37O3/JiMDyby/+CrXL XhnTogrQZQ== ) Atalante.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. RP2NbQyjicgx//72eYYFEw9N7LnVkq/Mur77PfQ6Bt77f46+MlVQQi1dlCnkXb1w+L0C88Rkosqy 2iUcXRne0A== ) Atalante.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. Nrqk1xxfDjZ79CSbBk4/NZuok96c5rQ+8RIReKqqmhAoElSDHOnSl8s7GruzWrP/WdoH7vgo/EUb 8xAQCll5Og== ) avallone.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260425211715 20260411211618 52801 stanford.edu. smG2TUn7/n8KF+RQnILzBBvC9oK48Mx2dZx0vzt+NlhVeGZOKhmHtnXnNwdrJRuR7B4yJP+kKV4B gVelwhRUEg== ) ;; { "EDNS-VERSION": 0 }
	avallone.stanford.edu is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to ns6.dnsmadeeasy.com for stanford.edu/SOA
	Received 202 bytes from 208.80.124.13
	;; Response received from [208.80.124.13] 202 octets ;; HEADER SECTION ;; id = 3329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN SOA ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN SOA ( argus.stanford.edu. hostmaster.stanford.edu. 2026067820 ;serial 1200 ;refresh 600 ;retry 1296000 ;expire 1800 ;minimum ) stanford.edu. 86400 IN RRSIG ( SOA 13 2 86400 20260501085610 20260417075610 52801 stanford.edu. t3iWCY2ICVkzPgd8lpJZFKP+7ai9gQX4AcvBe7IlRjxyPbyzWF61pO0GxxM8+wqkfEeKH6flrSZZ vWG6ORckhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to atalante.stanford.edu for stanford.edu/SOA
	Received 1126 bytes from 171.64.7.61
	;; Response received from [171.64.7.61] 1126 octets ;; HEADER SECTION ;; id = 54057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN SOA ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN SOA ( argus.stanford.edu. hostmaster.stanford.edu. 2026067820 ;serial 1200 ;refresh 600 ;retry 1296000 ;expire 1800 ;minimum ) stanford.edu. 86400 IN RRSIG ( SOA 13 2 86400 20260501085610 20260417075610 52801 stanford.edu. t3iWCY2ICVkzPgd8lpJZFKP+7ai9gQX4AcvBe7IlRjxyPbyzWF61pO0GxxM8+wqkfEeKH6flrSZZ vWG6ORckhQ== ) ;; AUTHORITY SECTION (7 records) stanford.edu. 86400 IN NS ns6.dnsmadeeasy.com. stanford.edu. 86400 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN NS argus.stanford.edu. stanford.edu. 86400 IN NS atalante.stanford.edu. stanford.edu. 86400 IN NS avallone.stanford.edu. stanford.edu. 86400 IN NS ns5.dnsmadeeasy.com. stanford.edu. 86400 IN RRSIG ( NS 13 2 86400 20260427134204 20260413131730 52801 stanford.edu. xKKhikBBa0QX1noBkU75bUAlG0QaOK4auyCdJaqxWdfNtuhungw7YLzCjUFDWTFyXugWGREEjcgt GLIBf9ZD9w== ) ;; ADDITIONAL SECTION (12 records) Argus.stanford.edu. 1800 IN A 171.64.7.115 Atalante.stanford.edu. 1800 IN A 171.64.7.61 avallone.stanford.edu. 1800 IN A 171.64.7.88 Argus.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9113::ab40:773 Atalante.stanford.edu. 1800 IN AAAA 2607:f6d0:0:d32::ab40:73d avallone.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9116::ab40:758 Argus.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. CMWp15d+hA/OAn3vE4PThPlGZNGkXgTUosOPGjC8n8I2FRVftiP0OTLQ6s6zOulYqjJ2w6u3OHFx m58E75O3Bg== ) Argus.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. zvBhEvAoQfMQRB7Iof6BRbDZVc+/PYeUCTDR/Qcr92rHwhoBz2kRcZHjms37O3/JiMDyby/+CrXL XhnTogrQZQ== ) Atalante.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. RP2NbQyjicgx//72eYYFEw9N7LnVkq/Mur77PfQ6Bt77f46+MlVQQi1dlCnkXb1w+L0C88Rkosqy 2iUcXRne0A== ) Atalante.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. Nrqk1xxfDjZ79CSbBk4/NZuok96c5rQ+8RIReKqqmhAoElSDHOnSl8s7GruzWrP/WdoH7vgo/EUb 8xAQCll5Og== ) avallone.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260425211715 20260411211618 52801 stanford.edu. smG2TUn7/n8KF+RQnILzBBvC9oK48Mx2dZx0vzt+NlhVeGZOKhmHtnXnNwdrJRuR7B4yJP+kKV4B gVelwhRUEg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns5.dnsmadeeasy.com for stanford.edu/SOA
	Received 202 bytes from 208.94.148.13
	;; Response received from [208.94.148.13] 202 octets ;; HEADER SECTION ;; id = 32419 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN SOA ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN SOA ( argus.stanford.edu. hostmaster.stanford.edu. 2026067820 ;serial 1200 ;refresh 600 ;retry 1296000 ;expire 1800 ;minimum ) stanford.edu. 86400 IN RRSIG ( SOA 13 2 86400 20260501085610 20260417075610 52801 stanford.edu. t3iWCY2ICVkzPgd8lpJZFKP+7ai9gQX4AcvBe7IlRjxyPbyzWF61pO0GxxM8+wqkfEeKH6flrSZZ vWG6ORckhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to argus.stanford.edu for stanford.edu/SOA
	Received 1126 bytes from 171.64.7.115
	;; Response received from [171.64.7.115] 1126 octets ;; HEADER SECTION ;; id = 42899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN SOA ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN SOA ( argus.stanford.edu. hostmaster.stanford.edu. 2026067820 ;serial 1200 ;refresh 600 ;retry 1296000 ;expire 1800 ;minimum ) stanford.edu. 86400 IN RRSIG ( SOA 13 2 86400 20260501085610 20260417075610 52801 stanford.edu. t3iWCY2ICVkzPgd8lpJZFKP+7ai9gQX4AcvBe7IlRjxyPbyzWF61pO0GxxM8+wqkfEeKH6flrSZZ vWG6ORckhQ== ) ;; AUTHORITY SECTION (7 records) stanford.edu. 86400 IN NS argus.stanford.edu. stanford.edu. 86400 IN NS atalante.stanford.edu. stanford.edu. 86400 IN NS avallone.stanford.edu. stanford.edu. 86400 IN NS ns5.dnsmadeeasy.com. stanford.edu. 86400 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN NS ns6.dnsmadeeasy.com. stanford.edu. 86400 IN RRSIG ( NS 13 2 86400 20260427134204 20260413131730 52801 stanford.edu. xKKhikBBa0QX1noBkU75bUAlG0QaOK4auyCdJaqxWdfNtuhungw7YLzCjUFDWTFyXugWGREEjcgt GLIBf9ZD9w== ) ;; ADDITIONAL SECTION (12 records) Argus.stanford.edu. 1800 IN A 171.64.7.115 Atalante.stanford.edu. 1800 IN A 171.64.7.61 avallone.stanford.edu. 1800 IN A 171.64.7.88 Argus.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9113::ab40:773 Atalante.stanford.edu. 1800 IN AAAA 2607:f6d0:0:d32::ab40:73d avallone.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9116::ab40:758 Argus.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. CMWp15d+hA/OAn3vE4PThPlGZNGkXgTUosOPGjC8n8I2FRVftiP0OTLQ6s6zOulYqjJ2w6u3OHFx m58E75O3Bg== ) Argus.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. zvBhEvAoQfMQRB7Iof6BRbDZVc+/PYeUCTDR/Qcr92rHwhoBz2kRcZHjms37O3/JiMDyby/+CrXL XhnTogrQZQ== ) Atalante.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. RP2NbQyjicgx//72eYYFEw9N7LnVkq/Mur77PfQ6Bt77f46+MlVQQi1dlCnkXb1w+L0C88Rkosqy 2iUcXRne0A== ) Atalante.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. Nrqk1xxfDjZ79CSbBk4/NZuok96c5rQ+8RIReKqqmhAoElSDHOnSl8s7GruzWrP/WdoH7vgo/EUb 8xAQCll5Og== ) avallone.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260425211715 20260411211618 52801 stanford.edu. smG2TUn7/n8KF+RQnILzBBvC9oK48Mx2dZx0vzt+NlhVeGZOKhmHtnXnNwdrJRuR7B4yJP+kKV4B gVelwhRUEg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns7.dnsmadeeasy.com for stanford.edu/SOA
	Received 202 bytes from 208.80.126.13
	;; Response received from [208.80.126.13] 202 octets ;; HEADER SECTION ;; id = 35824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN SOA ;; ANSWER SECTION (2 records) stanford.edu. 86400 IN SOA ( argus.stanford.edu. hostmaster.stanford.edu. 2026067820 ;serial 1200 ;refresh 600 ;retry 1296000 ;expire 1800 ;minimum ) stanford.edu. 86400 IN RRSIG ( SOA 13 2 86400 20260501085610 20260417075610 52801 stanford.edu. t3iWCY2ICVkzPgd8lpJZFKP+7ai9gQX4AcvBe7IlRjxyPbyzWF61pO0GxxM8+wqkfEeKH6flrSZZ vWG6ORckhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to avallone.stanford.edu for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

stanford.edu

	Query to ns6.dnsmadeeasy.com for stanford.edu/A
	Received 165 bytes from 208.80.124.13
	;; Response received from [208.80.124.13] 165 octets ;; HEADER SECTION ;; id = 58790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.dnsmadeeasy.com is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to ns6.dnsmadeeasy.com for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

stanford.edu

	Query to atalante.stanford.edu for stanford.edu/A
	Received 1095 bytes from 171.64.7.61
	;; Response received from [171.64.7.61] 1095 octets ;; HEADER SECTION ;; id = 41761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (7 records) stanford.edu. 86400 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN NS argus.stanford.edu. stanford.edu. 86400 IN NS ns5.dnsmadeeasy.com. stanford.edu. 86400 IN NS avallone.stanford.edu. stanford.edu. 86400 IN NS atalante.stanford.edu. stanford.edu. 86400 IN NS ns6.dnsmadeeasy.com. stanford.edu. 86400 IN RRSIG ( NS 13 2 86400 20260427134204 20260413131730 52801 stanford.edu. xKKhikBBa0QX1noBkU75bUAlG0QaOK4auyCdJaqxWdfNtuhungw7YLzCjUFDWTFyXugWGREEjcgt GLIBf9ZD9w== ) ;; ADDITIONAL SECTION (12 records) Argus.stanford.edu. 1800 IN A 171.64.7.115 Atalante.stanford.edu. 1800 IN A 171.64.7.61 avallone.stanford.edu. 1800 IN A 171.64.7.88 Argus.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9113::ab40:773 Atalante.stanford.edu. 1800 IN AAAA 2607:f6d0:0:d32::ab40:73d avallone.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9116::ab40:758 Argus.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. CMWp15d+hA/OAn3vE4PThPlGZNGkXgTUosOPGjC8n8I2FRVftiP0OTLQ6s6zOulYqjJ2w6u3OHFx m58E75O3Bg== ) Argus.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. zvBhEvAoQfMQRB7Iof6BRbDZVc+/PYeUCTDR/Qcr92rHwhoBz2kRcZHjms37O3/JiMDyby/+CrXL XhnTogrQZQ== ) Atalante.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. RP2NbQyjicgx//72eYYFEw9N7LnVkq/Mur77PfQ6Bt77f46+MlVQQi1dlCnkXb1w+L0C88Rkosqy 2iUcXRne0A== ) Atalante.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. Nrqk1xxfDjZ79CSbBk4/NZuok96c5rQ+8RIReKqqmhAoElSDHOnSl8s7GruzWrP/WdoH7vgo/EUb 8xAQCll5Og== ) avallone.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260425211715 20260411211618 52801 stanford.edu. smG2TUn7/n8KF+RQnILzBBvC9oK48Mx2dZx0vzt+NlhVeGZOKhmHtnXnNwdrJRuR7B4yJP+kKV4B gVelwhRUEg== ) ;; { "EDNS-VERSION": 0 }
	atalante.stanford.edu is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to atalante.stanford.edu for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

stanford.edu

	Query to ns7.dnsmadeeasy.com for stanford.edu/A
	Received 165 bytes from 208.80.126.13
	;; Response received from [208.80.126.13] 165 octets ;; HEADER SECTION ;; id = 41664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns7.dnsmadeeasy.com is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to ns7.dnsmadeeasy.com for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

stanford.edu

	Query to argus.stanford.edu for stanford.edu/A
	Received 1095 bytes from 171.64.7.115
	;; Response received from [171.64.7.115] 1095 octets ;; HEADER SECTION ;; id = 45036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (7 records) stanford.edu. 86400 IN NS ns6.dnsmadeeasy.com. stanford.edu. 86400 IN NS argus.stanford.edu. stanford.edu. 86400 IN NS avallone.stanford.edu. stanford.edu. 86400 IN NS atalante.stanford.edu. stanford.edu. 86400 IN NS ns7.dnsmadeeasy.com. stanford.edu. 86400 IN NS ns5.dnsmadeeasy.com. stanford.edu. 86400 IN RRSIG ( NS 13 2 86400 20260427134204 20260413131730 52801 stanford.edu. xKKhikBBa0QX1noBkU75bUAlG0QaOK4auyCdJaqxWdfNtuhungw7YLzCjUFDWTFyXugWGREEjcgt GLIBf9ZD9w== ) ;; ADDITIONAL SECTION (12 records) Argus.stanford.edu. 1800 IN A 171.64.7.115 Atalante.stanford.edu. 1800 IN A 171.64.7.61 avallone.stanford.edu. 1800 IN A 171.64.7.88 Argus.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9113::ab40:773 Atalante.stanford.edu. 1800 IN AAAA 2607:f6d0:0:d32::ab40:73d avallone.stanford.edu. 1800 IN AAAA 2607:f6d0:0:9116::ab40:758 Argus.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. CMWp15d+hA/OAn3vE4PThPlGZNGkXgTUosOPGjC8n8I2FRVftiP0OTLQ6s6zOulYqjJ2w6u3OHFx m58E75O3Bg== ) Argus.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260430053434 20260416050929 52801 stanford.edu. zvBhEvAoQfMQRB7Iof6BRbDZVc+/PYeUCTDR/Qcr92rHwhoBz2kRcZHjms37O3/JiMDyby/+CrXL XhnTogrQZQ== ) Atalante.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. RP2NbQyjicgx//72eYYFEw9N7LnVkq/Mur77PfQ6Bt77f46+MlVQQi1dlCnkXb1w+L0C88Rkosqy 2iUcXRne0A== ) Atalante.stanford.edu. 1800 IN RRSIG ( AAAA 13 3 1800 20260428063501 20260414062648 52801 stanford.edu. Nrqk1xxfDjZ79CSbBk4/NZuok96c5rQ+8RIReKqqmhAoElSDHOnSl8s7GruzWrP/WdoH7vgo/EUb 8xAQCll5Og== ) avallone.stanford.edu. 1800 IN RRSIG ( A 13 3 1800 20260425211715 20260411211618 52801 stanford.edu. smG2TUn7/n8KF+RQnILzBBvC9oK48Mx2dZx0vzt+NlhVeGZOKhmHtnXnNwdrJRuR7B4yJP+kKV4B gVelwhRUEg== ) ;; { "EDNS-VERSION": 0 }
	argus.stanford.edu is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to argus.stanford.edu for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

stanford.edu

	Query to ns5.dnsmadeeasy.com for stanford.edu/A
	Received 165 bytes from 208.94.148.13
	;; Response received from [208.94.148.13] 165 octets ;; HEADER SECTION ;; id = 4801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stanford.edu. IN A ;; ANSWER SECTION (2 records) stanford.edu. 1800 IN A 171.67.215.200 stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.dnsmadeeasy.com is authoritative for stanford.edu
	Found RRSIG signed by stanford.edu zone
	Query to ns5.dnsmadeeasy.com for stanford.edu/A
	stanford.edu A RR has value 171.67.215.200
	Found 1 RRSIGs over A RRset
	`stanford.edu. 1800 IN RRSIG ( A 13 2 1800 20260427134204 20260413131730 52801 stanford.edu. fhdTKtln+gOhQuq4kb1EpcgfgXEXpO+MXyZLTNZV1paOTWN9/lHkrM+NrTG3rJKpjVLf9qbaKGeg A5KM5y+GMA== )`
	RRSIG=52801 and DNSKEY=52801 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test stanford.edu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: