DNSSEC Debugger - uni-muenchen.de

Domain Name:

Time: 2024-07-27 02:42:34 UTC

Analyzing DNSSEC problems for uni-muenchen.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 30690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to g.root-servers.net for uni-muenchen.de/A
	Received 751 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 751 octets ;; HEADER SECTION ;; id = 38643 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS z.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . qoUHX6czaV7YrVqpae1ZMs0lI1CYdoYC47tCV7oEJmZn5EkoiJljyskqu7l8EH7f4BxhopNGCDLF uUvp/UK+HbMsm4hilDNkdzQzeTKjqMk4TgpAXzmLaZpGSgcbpkk6J/hKe5s4b/J77HQFMgJE9YzW RuPZ1uZTjN3SSKlAI9vucMXamcEOWmES4PB/6Sp9jwtUusdcZKBaILPCf9KxaDrkuEowZ0gaLo3M nMRUp3yWJL13eg1MTHXW+j9MjFGRum+HRYyAbmMnwD7up9DDn5qhDbBlMdKFeBjH6yNZv2l6y7On 2xFbX20eK/VAS3FWbr10Uo9qCZXAi8y2BSpyjA== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for de/DNSKEY
	Received 738 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 738 octets ;; HEADER SECTION ;; id = 49367 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS z.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . qoUHX6czaV7YrVqpae1ZMs0lI1CYdoYC47tCV7oEJmZn5EkoiJljyskqu7l8EH7f4BxhopNGCDLF uUvp/UK+HbMsm4hilDNkdzQzeTKjqMk4TgpAXzmLaZpGSgcbpkk6J/hKe5s4b/J77HQFMgJE9YzW RuPZ1uZTjN3SSKlAI9vucMXamcEOWmES4PB/6Sp9jwtUusdcZKBaILPCf9KxaDrkuEowZ0gaLo3M nMRUp3yWJL13eg1MTHXW+j9MjFGRum+HRYyAbmMnwD7up9DDn5qhDbBlMdKFeBjH6yNZv2l6y7On 2xFbX20eK/VAS3FWbr10Uo9qCZXAi8y2BSpyjA== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to b.root-servers.net for de/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 45359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . qoUHX6czaV7YrVqpae1ZMs0lI1CYdoYC47tCV7oEJmZn5EkoiJljyskqu7l8EH7f4BxhopNGCDLF uUvp/UK+HbMsm4hilDNkdzQzeTKjqMk4TgpAXzmLaZpGSgcbpkk6J/hKe5s4b/J77HQFMgJE9YzW RuPZ1uZTjN3SSKlAI9vucMXamcEOWmES4PB/6Sp9jwtUusdcZKBaILPCf9KxaDrkuEowZ0gaLo3M nMRUp3yWJL13eg1MTHXW+j9MjFGRum+HRYyAbmMnwD7up9DDn5qhDbBlMdKFeBjH6yNZv2l6y7On 2xFbX20eK/VAS3FWbr10Uo9qCZXAi8y2BSpyjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . qoUHX6czaV7YrVqpae1ZMs0lI1CYdoYC47tCV7oEJmZn5EkoiJljyskqu7l8EH7f4BxhopNGCDLF uUvp/UK+HbMsm4hilDNkdzQzeTKjqMk4TgpAXzmLaZpGSgcbpkk6J/hKe5s4b/J77HQFMgJE9YzW RuPZ1uZTjN3SSKlAI9vucMXamcEOWmES4PB/6Sp9jwtUusdcZKBaILPCf9KxaDrkuEowZ0gaLo3M nMRUp3yWJL13eg1MTHXW+j9MjFGRum+HRYyAbmMnwD7up9DDn5qhDbBlMdKFeBjH6yNZv2l6y7On 2xFbX20eK/VAS3FWbr10Uo9qCZXAi8y2BSpyjA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to s.de.net for de/DNSKEY
	Received 745 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 745 octets ;; HEADER SECTION ;; id = 3627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAc68TJVwM8f4/FQFm8vEOjCCLX3mrwYJSjq8AsNKOzHwJquJqUfCQ4ar1AllT6vq20SxSIhE gCK/aVtPe5xjtSIQV7FVuSvseQ+2Q1P0FYzJ3C/T/+xuv/D+rXlkSDRRQaDWu5K2rJ1Wc0CntqVW zW6lAdt63GZ98uPL0maOiXfJ ) ; Key ID = 32136 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240804235228 20240721222228 26755 de. Rse5VXKOnlTFwCgScUcJg4CGb/qr8pJl/vr+EDaFqIUqwNlVbOF8Gsa70mkdpMh0Q4C9O9EmBMsR WH9wjA78MYj75mNOrf0d111gqwZjZlPej51GoVRxVDKlzHNFc/PyWA+MhfQNMq1+rmZUdgGQpMik tCpCQn5m1lm5SOFInfVZnP5jRWCuTC5rXhbtSKUaw8/N5toLF21c4yrJRTe9FY5DjN/eMw9pUQCp XS7WlSUdNjcqMGoG1VSbDTcSQgXC77H+eP5DLROIfuEbgiQl5PDN/EfkDxPy6OVZa37h4HXsTQlD wlOYEmagIzWbWmiwrJvPm6O2Y1RphCr2fvyigQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAc68TJVwM8f4/FQFm8vEOjCCLX3mrwYJSjq8AsNKOzHwJquJqUfCQ4ar1AllT6vq20SxSIhE gCK/aVtPe5xjtSIQV7FVuSvseQ+2Q1P0FYzJ3C/T/+xuv/D+rXlkSDRRQaDWu5K2rJ1Wc0CntqVW zW6lAdt63GZ98uPL0maOiXfJ ) ; Key ID = 32136`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240804235228 20240721222228 26755 de. Rse5VXKOnlTFwCgScUcJg4CGb/qr8pJl/vr+EDaFqIUqwNlVbOF8Gsa70mkdpMh0Q4C9O9EmBMsR WH9wjA78MYj75mNOrf0d111gqwZjZlPej51GoVRxVDKlzHNFc/PyWA+MhfQNMq1+rmZUdgGQpMik tCpCQn5m1lm5SOFInfVZnP5jRWCuTC5rXhbtSKUaw8/N5toLF21c4yrJRTe9FY5DjN/eMw9pUQCp XS7WlSUdNjcqMGoG1VSbDTcSQgXC77H+eP5DLROIfuEbgiQl5PDN/EfkDxPy6OVZa37h4HXsTQlD wlOYEmagIzWbWmiwrJvPm6O2Y1RphCr2fvyigQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=32136 is now in the chain-of-trust
	Query to a.nic.de for uni-muenchen.de/A
	Received 377 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 377 octets ;; HEADER SECTION ;; id = 49514 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20240806070529 20240723053529 32136 de. JPdCJ0ovA09v9i0qql+Qiv61veQemZeon5byV9dMKZ8O8o0UFjbURYGTCyfxkGnDJV1mRvfvJRc5 OTZeeyEr3vrmHoc9ol33FPIpiRvBiARwomrc2kz2ZSrXhmawaFbprxXcf8pBCOm5/XTsbYrx2i0x PRgnxZa1O/L8IxNMWJo= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; { "EDNS-VERSION": 0 }
	Query to z.nic.de for uni-muenchen.de/DNSKEY
	Received 377 bytes from 194.246.96.1
	;; Response received from [194.246.96.1] 377 octets ;; HEADER SECTION ;; id = 30719 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20240806070529 20240723053529 32136 de. JPdCJ0ovA09v9i0qql+Qiv61veQemZeon5byV9dMKZ8O8o0UFjbURYGTCyfxkGnDJV1mRvfvJRc5 OTZeeyEr3vrmHoc9ol33FPIpiRvBiARwomrc2kz2ZSrXhmawaFbprxXcf8pBCOm5/XTsbYrx2i0x PRgnxZa1O/L8IxNMWJo= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; { "EDNS-VERSION": 0 }
	Found child zone uni-muenchen.de

uni-muenchen.de

	Checking DS between de and uni-muenchen.de
	Query to n.de.net for uni-muenchen.de/DS
	Received 254 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 254 octets ;; HEADER SECTION ;; id = 49136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DS ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20240806070529 20240723053529 32136 de. JPdCJ0ovA09v9i0qql+Qiv61veQemZeon5byV9dMKZ8O8o0UFjbURYGTCyfxkGnDJV1mRvfvJRc5 OTZeeyEr3vrmHoc9ol33FPIpiRvBiARwomrc2kz2ZSrXhmawaFbprxXcf8pBCOm5/XTsbYrx2i0x PRgnxZa1O/L8IxNMWJo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uni-muenchen.de in the de zone
	DS=27721/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20240806070529 20240723053529 32136 de. JPdCJ0ovA09v9i0qql+Qiv61veQemZeon5byV9dMKZ8O8o0UFjbURYGTCyfxkGnDJV1mRvfvJRc5 OTZeeyEr3vrmHoc9ol33FPIpiRvBiARwomrc2kz2ZSrXhmawaFbprxXcf8pBCOm5/XTsbYrx2i0x PRgnxZa1O/L8IxNMWJo= )`
	RRSIG=32136 and DNSKEY=32136 verifies the DS RRset
	DS=27721/SHA-256 is now in the chain-of-trust
	`uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 )`
	Query to dns2.lrz.bayern for uni-muenchen.de/DNSKEY
	Received 1202 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 1202 octets ;; HEADER SECTION ;; id = 56105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (4 records) uni-muenchen.de. 86400 IN DNSKEY ( 256 3 8 AwEAAe7pC+QCnmZtkYMppSex7mUF3AzuhniPX2zNODE1Cn4cbJbPugAwvE3WQE9QFRnRMKkVZaq/ 8WPHJclHF5XAhUbLu6/Vo2PjJCOqmxijCNNkZxdl+FAizSeVGf2u5cMx3yGg7GDjLG9FHy+uSByf owVLeG6z8i5nYMv5mQDDvLeBudDkOklFuaGZh6rZITM/70hfLEZpwDzwXxP8MM8WvS32BOnUHL3s E1YqOAjVNQQFrYMKLnKzt3oxRgwjXb98Voxt6A350PgX5mSQ4uQc4KgAm+reuY9Hblp/Uv5xDbX+ o6U9Rzw4j72oxz2NE/BUyhueBZh/KEeSqSsEdoxnF/M= ) ; Key ID = 21928 uni-muenchen.de. 86400 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; Key ID = 27721 uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241009163801 20240717153802 21928 uni-muenchen.de. sd/PYcXkBsBFzbivVaiJ0O3ksrsvy8iRxCC8vY1W9JzyML+bWzhAVxMPa73w1LwQMaHt72pse74s NcyvGrlEqPmrr9m2+r8TlSCJZxB2uXxR4RBWcarEAudhjC0WHkySmQmnPL97F5OUFJ23hWj1oGIz 8uk5EYwqwbo6Vn7PCuSqrubJJ0yAMqYVyCTvV4UDCPY5rDJLEpR4kk83ciTSRyjIISsvyNcZqhk/ IAeijM0Kwdyuml2rnIvjPQWpnOVOBLO1kBdnTbWOZvcJfSNDEgN3HT7q6DPwrRRZvbSLlrGi5Y4H cvQpqmBbyyJiPryCQTGylca9MKZwcd/HALDmlg== ) uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241009163801 20240717153802 27721 uni-muenchen.de. CXhy6qJf3DaETKZXCmj3FN5X5LYeYLpT1rFa864reF0/1u5BxBhcEzQ1hQQ4a5moCFGHJRI5oh5r YX97JEpiepgI+CdgxeHtH12afymM9o/60EapSIwQGAtZ0ntI7UXy8EhVn6c8HDMBdE1/IEsoxPuS CTjY4fCCBNYvbSxqJSYLv9yB62uPgRDKKe7WE6umW6T8W3AjH97PrDq8SzAuH9jaXwNkBOsWuxrx DNwPlXEHpjvwwilhqHcii5qyXkA4xWzeJaDQosVLk5JfkQ3l9bgRQ+zzs/4RO6umYrCGse9jcdUt rkCH0wNFp82lJcM2DfjQc6ekHr5O7ZinCgFJVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uni-muenchen.de
	`uni-muenchen.de. 86400 IN DNSKEY ( 256 3 8 AwEAAe7pC+QCnmZtkYMppSex7mUF3AzuhniPX2zNODE1Cn4cbJbPugAwvE3WQE9QFRnRMKkVZaq/ 8WPHJclHF5XAhUbLu6/Vo2PjJCOqmxijCNNkZxdl+FAizSeVGf2u5cMx3yGg7GDjLG9FHy+uSByf owVLeG6z8i5nYMv5mQDDvLeBudDkOklFuaGZh6rZITM/70hfLEZpwDzwXxP8MM8WvS32BOnUHL3s E1YqOAjVNQQFrYMKLnKzt3oxRgwjXb98Voxt6A350PgX5mSQ4uQc4KgAm+reuY9Hblp/Uv5xDbX+ o6U9Rzw4j72oxz2NE/BUyhueBZh/KEeSqSsEdoxnF/M= ) ; Key ID = 21928`
	`uni-muenchen.de. 86400 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; Key ID = 27721`
	DNSKEY=27721/SEP is now in the chain-of-trust
	DS=27721/SHA-256 verifies DNSKEY=27721/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241009163801 20240717153802 21928 uni-muenchen.de. sd/PYcXkBsBFzbivVaiJ0O3ksrsvy8iRxCC8vY1W9JzyML+bWzhAVxMPa73w1LwQMaHt72pse74s NcyvGrlEqPmrr9m2+r8TlSCJZxB2uXxR4RBWcarEAudhjC0WHkySmQmnPL97F5OUFJ23hWj1oGIz 8uk5EYwqwbo6Vn7PCuSqrubJJ0yAMqYVyCTvV4UDCPY5rDJLEpR4kk83ciTSRyjIISsvyNcZqhk/ IAeijM0Kwdyuml2rnIvjPQWpnOVOBLO1kBdnTbWOZvcJfSNDEgN3HT7q6DPwrRRZvbSLlrGi5Y4H cvQpqmBbyyJiPryCQTGylca9MKZwcd/HALDmlg== )`
	`uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241009163801 20240717153802 27721 uni-muenchen.de. CXhy6qJf3DaETKZXCmj3FN5X5LYeYLpT1rFa864reF0/1u5BxBhcEzQ1hQQ4a5moCFGHJRI5oh5r YX97JEpiepgI+CdgxeHtH12afymM9o/60EapSIwQGAtZ0ntI7UXy8EhVn6c8HDMBdE1/IEsoxPuS CTjY4fCCBNYvbSxqJSYLv9yB62uPgRDKKe7WE6umW6T8W3AjH97PrDq8SzAuH9jaXwNkBOsWuxrx DNwPlXEHpjvwwilhqHcii5qyXkA4xWzeJaDQosVLk5JfkQ3l9bgRQ+zzs/4RO6umYrCGse9jcdUt rkCH0wNFp82lJcM2DfjQc6ekHr5O7ZinCgFJVA== )`
	RRSIG=21928 and DNSKEY=21928 verifies the DNSKEY RRset
	RRSIG=27721 and DNSKEY=27721/SEP verifies the DNSKEY RRset
	DNSKEY=21928 is now in the chain-of-trust
	Query to dns3.lrz.eu for uni-muenchen.de/A
	Received 814 bytes from 78.128.211.180
	;; Response received from [78.128.211.180] 814 octets ;; HEADER SECTION ;; id = 57229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.lrz.eu is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns1.lrz.de for uni-muenchen.de/SOA
	Received 776 bytes from 129.187.19.183
	;; Response received from [129.187.19.183] 776 octets ;; HEADER SECTION ;; id = 5980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. dtt2m4wXmgiXBZclMmtQWwE9dw3JX6jQnfGB/t6C4VmM2PqWA8zBySjM1lgPPJFrHN4mTAMGQJSL e9UQFBy2s+WODIOAlxQfpe8lGspavuSdn2tu1cWt7XuH7Wq0wvVPUCWed8INNiS1gK8XbSjv0u3e HZUoZs4Ni25zEZL0X//5Xj2Q5vblL1lEEmfmzGYihzJsx9rBHaI2X21j/5HgyyPPgdcAKbGmL3X4 CAlWjIm2qp/xdCkcaDl1+OqziumHxyxWcacDuG2a680QIC5ts0cm9BFM9Moaf1Bia7jB2ALrHbC6 o/MJF1RlEpqHpcdk7AVFemFqXGTKzp9L/lIKoA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.lrz.bayern for uni-muenchen.de/SOA
	Received 776 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 776 octets ;; HEADER SECTION ;; id = 64643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. dtt2m4wXmgiXBZclMmtQWwE9dw3JX6jQnfGB/t6C4VmM2PqWA8zBySjM1lgPPJFrHN4mTAMGQJSL e9UQFBy2s+WODIOAlxQfpe8lGspavuSdn2tu1cWt7XuH7Wq0wvVPUCWed8INNiS1gK8XbSjv0u3e HZUoZs4Ni25zEZL0X//5Xj2Q5vblL1lEEmfmzGYihzJsx9rBHaI2X21j/5HgyyPPgdcAKbGmL3X4 CAlWjIm2qp/xdCkcaDl1+OqziumHxyxWcacDuG2a680QIC5ts0cm9BFM9Moaf1Bia7jB2ALrHbC6 o/MJF1RlEpqHpcdk7AVFemFqXGTKzp9L/lIKoA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.lrz.eu for uni-muenchen.de/A
	Received 814 bytes from 78.128.211.180
	;; Response received from [78.128.211.180] 814 octets ;; HEADER SECTION ;; id = 36403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== )`
	RRSIG=21928 and DNSKEY=21928 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== )`
	RRSIG=21928 and DNSKEY=21928 verifies the SOA RRset

uni-muenchen.de

	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Received 814 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 814 octets ;; HEADER SECTION ;; id = 17181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.lrz.bayern is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Received 814 bytes from 141.40.9.211
	;; Response received from [141.40.9.211] 814 octets ;; HEADER SECTION ;; id = 8832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== )`
	RRSIG=21928 and DNSKEY=21928 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== )`
	RRSIG=21928 and DNSKEY=21928 verifies the SOA RRset

uni-muenchen.de

	Query to dns1.lrz.de for uni-muenchen.de/A
	Received 814 bytes from 129.187.19.183
	;; Response received from [129.187.19.183] 814 octets ;; HEADER SECTION ;; id = 62614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.lrz.de is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns1.lrz.de for uni-muenchen.de/A
	Received 814 bytes from 129.187.19.183
	;; Response received from [129.187.19.183] 814 octets ;; HEADER SECTION ;; id = 63447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2024072318 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20241006053148 20240717153803 21928 uni-muenchen.de. HEoWBGkZdFmRJ7D/o5l9PJyXfCTvzipPBc5+kgUsvR5HHyrT6GMNCVMysmq9kY7hc4JD0Ue9yQiM XUX6SDwWxNaMKr4kHPUnqbehFYASCIjjmDOLhCGCgKh3muaWwLlvT+mvflPiEwUVhEWJaKMeDIc8 DyopO9bBmijmhH+TDTDebNoQ/w1+1kP3M1VlT/kvIvvt8lAIVNMxa3CySvy2sSJ1ChwUS9kOiVmO 5lrFiNEr4ACpXDSd2WixyuESWd14tt2pMCqdhHgs7JkL3LX8JlGtP4eJYH8n+qe+ZtJg2FJ4I8SC Xax8vpQnDrkoHMVOEnWMy0nfEbQ3VanrMsZWOA== )`
	RRSIG=21928 and DNSKEY=21928 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20241018150348 20240726140348 21928 uni-muenchen.de. MD9U1Gg7sur038Vt7+BgbkqL9yByCCMfsG+nua25GiuPlvCAkIY/7MDL7zXf+7Vs1yv3evaRxxWK zO46CI6KbeAz0W/oQrmDEMVLrI9i/ceysRYGky/i8THlB6LBn55XIAY1/yiuM8INE0EG0P/q4zD8 rwNU8NRSm2WEQks8p63soSDUnVSrsIsWorSbB0dNl/tKpoXUKmilsYgIDy6rr9KTJFunMRPbmnUO 4gnHv3j5yhWAMy3/B5rYos3MxVcAltn0KnDaghI6vQjMm0t6rfqpvJCpiMr9EFSqcSo7dRksJ2/W pzYqI51wnRJOsYAByVu685cVomgLwub79dBU/w== )`
	RRSIG=21928 and DNSKEY=21928 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uni-muenchen.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: