DNSSEC Debugger - uni-muenchen.de

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-16 18:56:50 UTC

Analyzing DNSSEC problems for uni-muenchen.de

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 33123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for uni-muenchen.de/A
	Received 749 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 749 octets ;; HEADER SECTION ;; id = 32363 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . O81lJUtLX4tlooc6KNMa30In8yoIQL4Jr4Yy6K8H8K97ODf2ZD/pml/u5FxNpulC0tmqmyF84JOH IgwpfyherdkQ9p++QIFbL01WB9hOx8y4kiZPY/sIDuo0/b78stiIdysN4IbXjJroBeF4Ci5GJj/2 u/ERAb/mooXLmxEVOn3C/0iHRQeqf8i4hd5ceT7iCXd6CG1TDhS49EIvBrQ1rgJ93Lmz+qJ+wm8i acDWBhft3NC04eyNgzon2p65nz0kM3jiHNZEcPEm4fR+g4xbznwTNuM+o/j7G+ARNXnFvKGewv8N rp1eAQ/yvQqSHrHIumL2nohkQqc5rQDn+sFhyA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for de/DNSKEY
	Received 736 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 736 octets ;; HEADER SECTION ;; id = 32680 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS n.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . O81lJUtLX4tlooc6KNMa30In8yoIQL4Jr4Yy6K8H8K97ODf2ZD/pml/u5FxNpulC0tmqmyF84JOH IgwpfyherdkQ9p++QIFbL01WB9hOx8y4kiZPY/sIDuo0/b78stiIdysN4IbXjJroBeF4Ci5GJj/2 u/ERAb/mooXLmxEVOn3C/0iHRQeqf8i4hd5ceT7iCXd6CG1TDhS49EIvBrQ1rgJ93Lmz+qJ+wm8i acDWBhft3NC04eyNgzon2p65nz0kM3jiHNZEcPEm4fR+g4xbznwTNuM+o/j7G+ARNXnFvKGewv8N rp1eAQ/yvQqSHrHIumL2nohkQqc5rQDn+sFhyA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to f.root-servers.net for de/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 35690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . O81lJUtLX4tlooc6KNMa30In8yoIQL4Jr4Yy6K8H8K97ODf2ZD/pml/u5FxNpulC0tmqmyF84JOH IgwpfyherdkQ9p++QIFbL01WB9hOx8y4kiZPY/sIDuo0/b78stiIdysN4IbXjJroBeF4Ci5GJj/2 u/ERAb/mooXLmxEVOn3C/0iHRQeqf8i4hd5ceT7iCXd6CG1TDhS49EIvBrQ1rgJ93Lmz+qJ+wm8i acDWBhft3NC04eyNgzon2p65nz0kM3jiHNZEcPEm4fR+g4xbznwTNuM+o/j7G+ARNXnFvKGewv8N rp1eAQ/yvQqSHrHIumL2nohkQqc5rQDn+sFhyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . O81lJUtLX4tlooc6KNMa30In8yoIQL4Jr4Yy6K8H8K97ODf2ZD/pml/u5FxNpulC0tmqmyF84JOH IgwpfyherdkQ9p++QIFbL01WB9hOx8y4kiZPY/sIDuo0/b78stiIdysN4IbXjJroBeF4Ci5GJj/2 u/ERAb/mooXLmxEVOn3C/0iHRQeqf8i4hd5ceT7iCXd6CG1TDhS49EIvBrQ1rgJ93Lmz+qJ+wm8i acDWBhft3NC04eyNgzon2p65nz0kM3jiHNZEcPEm4fR+g4xbznwTNuM+o/j7G+ARNXnFvKGewv8N rp1eAQ/yvQqSHrHIumL2nohkQqc5rQDn+sFhyA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to f.nic.de for de/DNSKEY
	Received 745 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 745 octets ;; HEADER SECTION ;; id = 40922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911 de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260928071641 20260914054641 26755 de. Li+Q/FotT/gB9Ou7zrT5mJkV2PSzRGuATFRKbxSPO0ubCEYDCJXfyTlr/e9my9oN9u8FVAst/MfD 5Pmer5n1W8uQ3SICT2O/1e1Ti50XaNAEz7nTiK2Ddme7zej9JNG41Zjk7MMBXJGd/eMgrFHgD5lT YrONEeheQoMSKJVSH9uy5uGd1VpdJKKe4kyW+KCY8zWzpdIjYPeAN0WlRL9AXl3iy4um+N21i7kn s7t8v8KVLfSCpZcauzs+L+y0/t2JBhzfvwVrZWbnkomQTkiJ7+iW1KsLJsrUNGOdQbuzV2SJ5A9f 0KdBu8x189ZRQRdUyO6LPN0j7Io8aPexqGZRhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911`
	`de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260928071641 20260914054641 26755 de. Li+Q/FotT/gB9Ou7zrT5mJkV2PSzRGuATFRKbxSPO0ubCEYDCJXfyTlr/e9my9oN9u8FVAst/MfD 5Pmer5n1W8uQ3SICT2O/1e1Ti50XaNAEz7nTiK2Ddme7zej9JNG41Zjk7MMBXJGd/eMgrFHgD5lT YrONEeheQoMSKJVSH9uy5uGd1VpdJKKe4kyW+KCY8zWzpdIjYPeAN0WlRL9AXl3iy4um+N21i7kn s7t8v8KVLfSCpZcauzs+L+y0/t2JBhzfvwVrZWbnkomQTkiJ7+iW1KsLJsrUNGOdQbuzV2SJ5A9f 0KdBu8x189ZRQRdUyO6LPN0j7Io8aPexqGZRhg== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=32911 is now in the chain-of-trust
	Query to l.de.net for uni-muenchen.de/A
	Received 375 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 375 octets ;; HEADER SECTION ;; id = 17499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. KCtIZS5Hnc7MiauqHRrSAZnxpwc5uGXmxKAj8BpBsNpDOmA1VSfQbMPaADzFbGsDKuQlTW5xGA/1 xAv8zuehpMc1zqkxw2F69ziVBF21D2zzYBJO7jmisLIYIG9w/mL4K/pJ4gwbJw5+crLm052uuiYC RcRYoEkyEV9QPURWt8Y= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.de for uni-muenchen.de/DNSKEY
	Received 375 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 375 octets ;; HEADER SECTION ;; id = 32326 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. KCtIZS5Hnc7MiauqHRrSAZnxpwc5uGXmxKAj8BpBsNpDOmA1VSfQbMPaADzFbGsDKuQlTW5xGA/1 xAv8zuehpMc1zqkxw2F69ziVBF21D2zzYBJO7jmisLIYIG9w/mL4K/pJ4gwbJw5+crLm052uuiYC RcRYoEkyEV9QPURWt8Y= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; { "EDNS-VERSION": 0 }
	Found child zone uni-muenchen.de

uni-muenchen.de

	Checking DS between de and uni-muenchen.de
	Query to l.de.net for uni-muenchen.de/DS
	Received 254 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 254 octets ;; HEADER SECTION ;; id = 18003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DS ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. KCtIZS5Hnc7MiauqHRrSAZnxpwc5uGXmxKAj8BpBsNpDOmA1VSfQbMPaADzFbGsDKuQlTW5xGA/1 xAv8zuehpMc1zqkxw2F69ziVBF21D2zzYBJO7jmisLIYIG9w/mL4K/pJ4gwbJw5+crLm052uuiYC RcRYoEkyEV9QPURWt8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uni-muenchen.de in the de zone
	DS=27721/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. KCtIZS5Hnc7MiauqHRrSAZnxpwc5uGXmxKAj8BpBsNpDOmA1VSfQbMPaADzFbGsDKuQlTW5xGA/1 xAv8zuehpMc1zqkxw2F69ziVBF21D2zzYBJO7jmisLIYIG9w/mL4K/pJ4gwbJw5+crLm052uuiYC RcRYoEkyEV9QPURWt8Y= )`
	RRSIG=32911 and DNSKEY=32911 verifies the DS RRset
	DS=27721/SHA-256 is now in the chain-of-trust
	`uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 )`
	Query to dns1.lrz.de for uni-muenchen.de/DNSKEY
	Received 899 bytes from 129.187.19.183
	;; Response received from [129.187.19.183] 899 octets ;; HEADER SECTION ;; id = 10781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (3 records) uni-muenchen.de. 3600 IN DNSKEY ( 256 3 8 AwEAAeEcEiq7VdS35MybfCeeGo54fVN54qhFaz+FIuWMVGEXOeb2hmKHLyWJXFTSkAxLBAOSYuWG QFB33RuSLANkjdrJsnWwyJ+NHy5keUXC829mOO4V6TqVkfUO40U+CrxZrnD+DRBHXdAeRixZW9kT kiwj5Nzp7qxmrDCtfUb3PMNyho6uoe9hR3Lf5+Pbl/mPbvhzbYwr3b/tByiT3EkP0wtIdGtlZ/YN 8XzY2OAt4xlnC8IoI8TvitG05cN4YZ5nyKZFbVtpehTdCTqOEw1BKd0pszU2mWLzYfVbzkmXr5YF M5KAg2nPXzxSUIxvRQMa8VzkHKUcdDtGFOz5/Al2a2s= ) ; keytag 9876 uni-muenchen.de. 3600 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; keytag 27721 uni-muenchen.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261208160508 20260915150508 27721 uni-muenchen.de. EQLo1xRSYMEvqN5jTJLM74m5Y+9Z5ObN7G2i+sopRgOirFX0F1mlLQIbck41OSiwOjhEku79RBKO xq7PR9aW3zWeLhi+IBSiflOVbGuzzuIB3aWHgRmGuu7dnyMZZ2sVPAYqSqVL/dLfAJVAxVD8sraZ DjaMEOYkunNBW1p9+vNJ+Z1y8rERtL4x8mEN1A9kgK+R15RwYnujvJOz+KC8GLpONpFCDM+JiYbF BR+TMc6kEaT8JmXSDO7VZbIS054P0KiGVq1L9Y6AiNiIu6f+nKwxNKTxOtoq5IKjblcJViX4kwb+ c27HnmST2DSiWcsXrjlb5oRX91gvfMD6YOPBfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uni-muenchen.de
	`uni-muenchen.de. 3600 IN DNSKEY ( 256 3 8 AwEAAeEcEiq7VdS35MybfCeeGo54fVN54qhFaz+FIuWMVGEXOeb2hmKHLyWJXFTSkAxLBAOSYuWG QFB33RuSLANkjdrJsnWwyJ+NHy5keUXC829mOO4V6TqVkfUO40U+CrxZrnD+DRBHXdAeRixZW9kT kiwj5Nzp7qxmrDCtfUb3PMNyho6uoe9hR3Lf5+Pbl/mPbvhzbYwr3b/tByiT3EkP0wtIdGtlZ/YN 8XzY2OAt4xlnC8IoI8TvitG05cN4YZ5nyKZFbVtpehTdCTqOEw1BKd0pszU2mWLzYfVbzkmXr5YF M5KAg2nPXzxSUIxvRQMa8VzkHKUcdDtGFOz5/Al2a2s= ) ; keytag 9876`
	`uni-muenchen.de. 3600 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; keytag 27721`
	DNSKEY=27721/SEP is now in the chain-of-trust
	DS=27721/SHA-256 verifies DNSKEY=27721/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uni-muenchen.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261208160508 20260915150508 27721 uni-muenchen.de. EQLo1xRSYMEvqN5jTJLM74m5Y+9Z5ObN7G2i+sopRgOirFX0F1mlLQIbck41OSiwOjhEku79RBKO xq7PR9aW3zWeLhi+IBSiflOVbGuzzuIB3aWHgRmGuu7dnyMZZ2sVPAYqSqVL/dLfAJVAxVD8sraZ DjaMEOYkunNBW1p9+vNJ+Z1y8rERtL4x8mEN1A9kgK+R15RwYnujvJOz+KC8GLpONpFCDM+JiYbF BR+TMc6kEaT8JmXSDO7VZbIS054P0KiGVq1L9Y6AiNiIu6f+nKwxNKTxOtoq5IKjblcJViX4kwb+ c27HnmST2DSiWcsXrjlb5oRX91gvfMD6YOPBfg== )`
	RRSIG=27721 and DNSKEY=27721/SEP verifies the DNSKEY RRset
	DNSKEY=9876 is now in the chain-of-trust
	Query to dns1.lrz.de for uni-muenchen.de/A
	Received 813 bytes from 129.187.19.183
	;; Response received from [129.187.19.183] 813 octets ;; HEADER SECTION ;; id = 18403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2026080839 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY CDS CDNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.lrz.de is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns3.lrz.eu for uni-muenchen.de/SOA
	Received 776 bytes from 78.128.211.180
	;; Response received from [78.128.211.180] 776 octets ;; HEADER SECTION ;; id = 33859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2026080839 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. J2MHNjn41lpdMYN6tzQCtnwVYNRjppfjUlI2G1yQK1X4ZfMRlDvfKmYdHJf8Ejmt2otn799D5vfv b2Fuc6TVwafDaw+mUd+Nl5TepgWfyeHkZGXP3SLk89RkX+JmVMSt6gPKLDD2QpsbEr1VyvnP/AWj pwR70PaTQedlsPdwIEndkuZAO8rHHP6HbKmDWw9BFVabxIQrHhd21q94Mg1ogrDm1pTj+JHdEZcz fRQdXXcSi2QSd1/IJH9YM5o99tHQoBZkphtcXDdG70BsL43f1NOzfvQsqcF6rTMVHLeRfcPaneLY JaXVWeG/8u8qFPjL/XzdIvXmhqhl6UDwNIcaaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.lrz.bayern for uni-muenchen.de/SOA
	Received 774 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 774 octets ;; HEADER SECTION ;; id = 5398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2026080839 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. J2MHNjn41lpdMYN6tzQCtnwVYNRjppfjUlI2G1yQK1X4ZfMRlDvfKmYdHJf8Ejmt2otn799D5vfv b2Fuc6TVwafDaw+mUd+Nl5TepgWfyeHkZGXP3SLk89RkX+JmVMSt6gPKLDD2QpsbEr1VyvnP/AWj pwR70PaTQedlsPdwIEndkuZAO8rHHP6HbKmDWw9BFVabxIQrHhd21q94Mg1ogrDm1pTj+JHdEZcz fRQdXXcSi2QSd1/IJH9YM5o99tHQoBZkphtcXDdG70BsL43f1NOzfvQsqcF6rTMVHLeRfcPaneLY JaXVWeG/8u8qFPjL/XzdIvXmhqhl6UDwNIcaaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.lrz.de for uni-muenchen.de/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== )`
	RRSIG=9876 and DNSKEY=9876 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== )`
	RRSIG=9876 and DNSKEY=9876 verifies the SOA RRset

uni-muenchen.de

	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Received 813 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 813 octets ;; HEADER SECTION ;; id = 61781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2026080839 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY CDS CDNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.lrz.bayern is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== )`
	RRSIG=9876 and DNSKEY=9876 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== )`
	RRSIG=9876 and DNSKEY=9876 verifies the SOA RRset

uni-muenchen.de

	Query to dns3.lrz.eu for uni-muenchen.de/A
	Received 815 bytes from 78.128.211.180
	;; Response received from [78.128.211.180] 815 octets ;; HEADER SECTION ;; id = 5136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2026080839 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY CDS CDNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.lrz.eu is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns3.lrz.eu for uni-muenchen.de/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20261207032815 20260914120509 9876 uni-muenchen.de. X406qBUy2Gtw3JRUYe23VT+1XlStkGjm9P3KfMfQwNfWlbW4ZRqqofLHcREQ1o5x58JY4+UuGDQi R7zK9W8xQoYWBgEYeWu6WwU0CcxhN3aPbr8L0kMiR3FzHlXE4yRax0EqU3EM/iaAa5T3QBV81IWN QvX1arawfflASYo8oyYGoIuQtMVVOmqZsDHlhvOnEMcfhayVXjzUML19XUDA4n/SlVc01AiwZe40 +AfCHRvi54+kXNphdYwgmBMBzeRvp5KoZ44r+fRLULJzSS6T/8j7CX1ILeTXnNI1IwtbctOkAXxu H5bcXS1ME7Luou8+RYBT3NQsVpqItoCRzTRRJA== )`
	RRSIG=9876 and DNSKEY=9876 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20261208160508 20260915150508 9876 uni-muenchen.de. CIVbXwEbjNXo9pxarPTUjdxohGl8xt1VcnVNcPuBxUNIBjx2ybf/rCNQBbqhJKWodJF6DyTx9fxy PWCj0Oy0lJDIbR1jSd5lExDfmE186md5FVzgeMqJSgRYFfc0QRGaxDjoUodlf4wkGeWYqe0syRvu hWyEJW8QhIxU67DVjKPq8a10pcIKhMDb6nE2VyCRPDvI4I/sXh2lvXu0QSG10zaD73NoBi+Yhdeg jgKaLJ0o/soTuAJZY3YhqEZt1y+4tAureZgAm7gnJWMdNJEVNQJDlnJo9QMgLBoERY+V1sEcsKO6 mJR6g/TtxrnmP73yDreylT02umBVliWK7p3Cyw== )`
	RRSIG=9876 and DNSKEY=9876 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uni-muenchen.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: