DNSSEC Debugger - upenn.edu

Domain Name:

Time: 2025-07-06 01:26:53 UTC

Analyzing DNSSEC problems for upenn.edu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 39841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	Query to k.root-servers.net for upenn.edu/A
	Received 1168 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1168 octets ;; HEADER SECTION ;; id = 49612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . CxTYxFtpY9iOyr05blCXii5EdWN8edoR1NlM8UL4y8YVHt3C73C/elL1CdDDFt5IV2AWtBAZfbRv lh8mFicka0xksKPTiZm0lvBnSKi25PZTGHtFPf8zibg+asOsshUjXeIVz2V6wkYiohyjh8zwEtLF n3CMO9tA8/2rw6C357wIfe4TYhZWHe4bLeXEStGGgBD+6D4ufTWsGX6zuIOm0ayyQEiO2CriRz3Z M4QPw/CdLdjoKLRyRG72g6xy47GC8HSs9zedqhTKLKimAUskefeXVPMnIWyvmoCheZ4sc8bwInkx R89fg033zc/c6RbYlm5qXwwREmJpZxVUpjJcEg== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1162 octets ;; HEADER SECTION ;; id = 21442 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . CxTYxFtpY9iOyr05blCXii5EdWN8edoR1NlM8UL4y8YVHt3C73C/elL1CdDDFt5IV2AWtBAZfbRv lh8mFicka0xksKPTiZm0lvBnSKi25PZTGHtFPf8zibg+asOsshUjXeIVz2V6wkYiohyjh8zwEtLF n3CMO9tA8/2rw6C357wIfe4TYhZWHe4bLeXEStGGgBD+6D4ufTWsGX6zuIOm0ayyQEiO2CriRz3Z M4QPw/CdLdjoKLRyRG72g6xy47GC8HSs9zedqhTKLKimAUskefeXVPMnIWyvmoCheZ4sc8bwInkx R89fg033zc/c6RbYlm5qXwwREmJpZxVUpjJcEg== ) ;; ADDITIONAL SECTION (27 records) m.edu-servers.net. 172800 IN A 192.55.83.30 l.edu-servers.net. 172800 IN A 192.41.162.30 k.edu-servers.net. 172800 IN A 192.52.178.30 j.edu-servers.net. 172800 IN A 192.48.79.30 i.edu-servers.net. 172800 IN A 192.43.172.30 h.edu-servers.net. 172800 IN A 192.54.112.30 g.edu-servers.net. 172800 IN A 192.42.93.30 f.edu-servers.net. 172800 IN A 192.35.51.30 e.edu-servers.net. 172800 IN A 192.12.94.30 d.edu-servers.net. 172800 IN A 192.31.80.30 c.edu-servers.net. 172800 IN A 192.26.92.30 b.edu-servers.net. 172800 IN A 192.33.14.30 a.edu-servers.net. 172800 IN A 192.5.6.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone edu

edu

	Checking DS between . and edu
	Query to e.root-servers.net for edu/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 367 octets ;; HEADER SECTION ;; id = 1105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . CxTYxFtpY9iOyr05blCXii5EdWN8edoR1NlM8UL4y8YVHt3C73C/elL1CdDDFt5IV2AWtBAZfbRv lh8mFicka0xksKPTiZm0lvBnSKi25PZTGHtFPf8zibg+asOsshUjXeIVz2V6wkYiohyjh8zwEtLF n3CMO9tA8/2rw6C357wIfe4TYhZWHe4bLeXEStGGgBD+6D4ufTWsGX6zuIOm0ayyQEiO2CriRz3Z M4QPw/CdLdjoKLRyRG72g6xy47GC8HSs9zedqhTKLKimAUskefeXVPMnIWyvmoCheZ4sc8bwInkx R89fg033zc/c6RbYlm5qXwwREmJpZxVUpjJcEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20250718170000 20250705160000 46441 . CxTYxFtpY9iOyr05blCXii5EdWN8edoR1NlM8UL4y8YVHt3C73C/elL1CdDDFt5IV2AWtBAZfbRv lh8mFicka0xksKPTiZm0lvBnSKi25PZTGHtFPf8zibg+asOsshUjXeIVz2V6wkYiohyjh8zwEtLF n3CMO9tA8/2rw6C357wIfe4TYhZWHe4bLeXEStGGgBD+6D4ufTWsGX6zuIOm0ayyQEiO2CriRz3Z M4QPw/CdLdjoKLRyRG72g6xy47GC8HSs9zedqhTKLKimAUskefeXVPMnIWyvmoCheZ4sc8bwInkx R89fg033zc/c6RbYlm5qXwwREmJpZxVUpjJcEg== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to c.edu-servers.net for edu/DNSKEY
	Received 291 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 291 octets ;; HEADER SECTION ;; id = 37826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (3 records) edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663 edu. 86400 IN DNSKEY ( 256 3 13 5ImtzG5OqHjNCOhBhQ+IzNMnu0KKRiLUf5wOtBlFSIlmoG0Nv7rhyhCBj2PzyDy3+V0Ncgr5z1GD hOM2W3JcFQ== ) ; keytag 57579 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250714151114 20250629150614 35663 edu. 0LVnsibesovcGuT8UNQJyw3kMfBbyRGsHBViUGZEljK+SxzrCOh70syy6np70GZSkxvQVm05sV2z CL9PfncW+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663`
	`edu. 86400 IN DNSKEY ( 256 3 13 5ImtzG5OqHjNCOhBhQ+IzNMnu0KKRiLUf5wOtBlFSIlmoG0Nv7rhyhCBj2PzyDy3+V0Ncgr5z1GD hOM2W3JcFQ== ) ; keytag 57579`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250714151114 20250629150614 35663 edu. 0LVnsibesovcGuT8UNQJyw3kMfBbyRGsHBViUGZEljK+SxzrCOh70syy6np70GZSkxvQVm05sV2z CL9PfncW+A== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=57579 is now in the chain-of-trust
	Query to j.edu-servers.net for upenn.edu/A
	Received 648 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 648 octets ;; HEADER SECTION ;; id = 20640 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) upenn.edu. 172800 IN NS dns1.udel.edu. upenn.edu. 172800 IN NS dns2.udel.edu. upenn.edu. 172800 IN NS adns4.upenn.edu. upenn.edu. 172800 IN NS adns5.upenn.edu. upenn.edu. 172800 IN NS adns6.upenn.edu. upenn.edu. 172800 IN NS adns1.nnn.upenn.edu. upenn.edu. 172800 IN NS adns2.nnn.upenn.edu. upenn.edu. 172800 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20250709023934 20250702012934 57579 edu. hbdbYii3XFbuKSzjbwidlZuEibNMLfpEmSe/JE8uFJxQJ/dv9X8fkSMnTgPB5YW35UI1VJkP8OH5 LzqKfA0Ngw== ) ;; ADDITIONAL SECTION (15 records) dns1.udel.edu. 172800 IN A 128.175.13.16 dns2.udel.edu. 172800 IN A 128.175.13.17 adns4.upenn.edu. 172800 IN A 208.94.148.32 adns4.upenn.edu. 172800 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 172800 IN A 208.80.124.32 adns5.upenn.edu. 172800 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 172800 IN A 208.80.126.32 adns6.upenn.edu. 172800 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 172800 IN A 128.91.2.53 adns1.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 172800 IN A 128.91.254.53 adns2.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 172800 IN A 128.91.251.53 adns3.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1003::ad:3 ;; { "EDNS-VERSION": 0 }
	Query to j.edu-servers.net for upenn.edu/DNSKEY
	Received 648 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 648 octets ;; HEADER SECTION ;; id = 6646 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) upenn.edu. 172800 IN NS dns1.udel.edu. upenn.edu. 172800 IN NS dns2.udel.edu. upenn.edu. 172800 IN NS adns4.upenn.edu. upenn.edu. 172800 IN NS adns5.upenn.edu. upenn.edu. 172800 IN NS adns6.upenn.edu. upenn.edu. 172800 IN NS adns1.nnn.upenn.edu. upenn.edu. 172800 IN NS adns2.nnn.upenn.edu. upenn.edu. 172800 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20250709023934 20250702012934 57579 edu. hbdbYii3XFbuKSzjbwidlZuEibNMLfpEmSe/JE8uFJxQJ/dv9X8fkSMnTgPB5YW35UI1VJkP8OH5 LzqKfA0Ngw== ) ;; ADDITIONAL SECTION (15 records) dns1.udel.edu. 172800 IN A 128.175.13.16 dns2.udel.edu. 172800 IN A 128.175.13.17 adns4.upenn.edu. 172800 IN A 208.94.148.32 adns4.upenn.edu. 172800 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 172800 IN A 208.80.124.32 adns5.upenn.edu. 172800 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 172800 IN A 208.80.126.32 adns6.upenn.edu. 172800 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 172800 IN A 128.91.2.53 adns1.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 172800 IN A 128.91.254.53 adns2.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 172800 IN A 128.91.251.53 adns3.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1003::ad:3 ;; { "EDNS-VERSION": 0 }
	Found child zone upenn.edu

upenn.edu

	Checking DS between edu and upenn.edu
	Query to b.edu-servers.net for upenn.edu/DS
	Received 1079 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 1079 octets ;; HEADER SECTION ;; id = 5841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DS ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20250709023934 20250702012934 57579 edu. hbdbYii3XFbuKSzjbwidlZuEibNMLfpEmSe/JE8uFJxQJ/dv9X8fkSMnTgPB5YW35UI1VJkP8OH5 LzqKfA0Ngw== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20250711023955 20250704012955 57579 edu. HS7b0ym2jahy5OVXWHU95p/d3zgIuTAX5nplNJoYV96EDLb81kPTRtnPmYX+54nzYEz0fHL8f4ed HG2/Wz0TrA== ) ;; ADDITIONAL SECTION (27 records) i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for upenn.edu in the edu zone
	DS=17409/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20250709023934 20250702012934 57579 edu. hbdbYii3XFbuKSzjbwidlZuEibNMLfpEmSe/JE8uFJxQJ/dv9X8fkSMnTgPB5YW35UI1VJkP8OH5 LzqKfA0Ngw== )`
	RRSIG=57579 and DNSKEY=57579 verifies the DS RRset
	DS=17409/SHA-256 is now in the chain-of-trust
	`upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be )`
	Query to adns6.upenn.edu for upenn.edu/DNSKEY
	Received 383 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 383 octets ;; HEADER SECTION ;; id = 52192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DNSKEY ;; ANSWER SECTION (4 records) upenn.edu. 3600 IN DNSKEY ( 256 3 13 1YC3eMMDYcRuiCGBQD2Pr74+H4ZWG9NGImM4M63YQ2K6zoceFo83nKYRByucdKU3C48XzG8/FV5j GFEVz2aFfA== ) ; keytag 39112 upenn.edu. 3600 IN DNSKEY ( 257 3 13 l9WybMQup0tcaipIc1S3k1KQeuww3qsEicDe7P7jdDmUthiqr+/DtvubFoCAqe7Ad9dsPTqqEXvQ 386wOPmoHw== ) ; keytag 17409 upenn.edu. 3600 IN DNSKEY ( 256 3 13 QLpiDMMtTmlP/6XFxvc5Gk2x/2qEwqdgEpbZaLbWlRLbSKSMxLWIfMnR8idT4WoWi0B7zVRm8Wxm xVZi9VwrFQ== ) ; keytag 53469 upenn.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250804154032 20250705145729 17409 upenn.edu. VGLv96JhUg3BQ2qGMJTxTMQMmOZL6HcJvVDV5hvDeS1of2vIDEiLsEr9VRXqKKjw+O9w7bblwhej lKCG073cwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for upenn.edu
	`upenn.edu. 3600 IN DNSKEY ( 256 3 13 1YC3eMMDYcRuiCGBQD2Pr74+H4ZWG9NGImM4M63YQ2K6zoceFo83nKYRByucdKU3C48XzG8/FV5j GFEVz2aFfA== ) ; keytag 39112`
	`upenn.edu. 3600 IN DNSKEY ( 257 3 13 l9WybMQup0tcaipIc1S3k1KQeuww3qsEicDe7P7jdDmUthiqr+/DtvubFoCAqe7Ad9dsPTqqEXvQ 386wOPmoHw== ) ; keytag 17409`
	`upenn.edu. 3600 IN DNSKEY ( 256 3 13 QLpiDMMtTmlP/6XFxvc5Gk2x/2qEwqdgEpbZaLbWlRLbSKSMxLWIfMnR8idT4WoWi0B7zVRm8Wxm xVZi9VwrFQ== ) ; keytag 53469`
	DNSKEY=17409/SEP is now in the chain-of-trust
	DS=17409/SHA-256 verifies DNSKEY=17409/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`upenn.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250804154032 20250705145729 17409 upenn.edu. VGLv96JhUg3BQ2qGMJTxTMQMmOZL6HcJvVDV5hvDeS1of2vIDEiLsEr9VRXqKKjw+O9w7bblwhej lKCG073cwg== )`
	RRSIG=17409 and DNSKEY=17409/SEP verifies the DNSKEY RRset
	DNSKEY=39112 is now in the chain-of-trust
	DNSKEY=53469 is now in the chain-of-trust
	Query to dns2.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.17
	;; Response received from [128.175.13.17] 1127 octets ;; HEADER SECTION ;; id = 1637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20250713181113 20250613173147 53469 upenn.edu. AmXA8H66bU10blWuPhfGa/eez1hNFFLcDaF4NT2OBaRnJSXeQRDO5ugTVf/fW3o8gFd/7+V0PeBd +9z1aAtyaA== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250721045652 20250621043219 53469 upenn.edu. UtjULUiXVv8uv5rNJlmSRLTDx3JFA6ZbZ1yxzoGIheWk2A1UjS2UihZ2eo61nC7s1rSY9OUqvxuM usKusrIi2A== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250721050733 20250621041209 53469 upenn.edu. 79YVxnV+YhWEoZgI5cGiTHED4/N3xxLUXo7j1MSZWouI7QCVSrUiFjJpaAwIViLLwO65tpzeGNc+ u7IwK+uxLQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. JPqbknJXjPsrVuGL7Ab6xPyzUpdvp+kPP+/9/BBisR0jkti37i4j1py6C7/qltUucfQosciTVsQZ j9+1CC8liQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. /AL5KRFRbSNXgRGIsnh5FbrgCy2dqh753/QgiKekbela8TD4MV+gBn9MoIuxvQu+lMCvjj5c0XF1 vf141hEv7g== ) ;; { "EDNS-VERSION": 0 }
	dns2.udel.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns4.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 209 octets ;; HEADER SECTION ;; id = 65332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns1.nnn.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 209 octets ;; HEADER SECTION ;; id = 52356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns5.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 209 octets ;; HEADER SECTION ;; id = 20093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns6.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 209 octets ;; HEADER SECTION ;; id = 31798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns2.nnn.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 128.91.254.53
	;; Response received from [128.91.254.53] 209 octets ;; HEADER SECTION ;; id = 1212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns3.nnn.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 209 octets ;; HEADER SECTION ;; id = 3928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.udel.edu for upenn.edu/SOA
	Received 1164 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1164 octets ;; HEADER SECTION ;; id = 9372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam2.nnn.upenn.edu. hostmaster.upenn.edu. 2001986752 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20250805012537 20250706002537 53469 upenn.edu. 0VnvsGMd9cVvdnCOJr9uDldsE5SGkCQJ+w8//t108DsUh9rtxB6/AoGGYFRZ4DgnSZPDWyiKo1FV NrTm7ItMyg== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20250713181113 20250613173147 53469 upenn.edu. AmXA8H66bU10blWuPhfGa/eez1hNFFLcDaF4NT2OBaRnJSXeQRDO5ugTVf/fW3o8gFd/7+V0PeBd +9z1aAtyaA== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250721045652 20250621043219 53469 upenn.edu. UtjULUiXVv8uv5rNJlmSRLTDx3JFA6ZbZ1yxzoGIheWk2A1UjS2UihZ2eo61nC7s1rSY9OUqvxuM usKusrIi2A== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250721050733 20250621041209 53469 upenn.edu. 79YVxnV+YhWEoZgI5cGiTHED4/N3xxLUXo7j1MSZWouI7QCVSrUiFjJpaAwIViLLwO65tpzeGNc+ u7IwK+uxLQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. JPqbknJXjPsrVuGL7Ab6xPyzUpdvp+kPP+/9/BBisR0jkti37i4j1py6C7/qltUucfQosciTVsQZ j9+1CC8liQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. /AL5KRFRbSNXgRGIsnh5FbrgCy2dqh753/QgiKekbela8TD4MV+gBn9MoIuxvQu+lMCvjj5c0XF1 vf141hEv7g== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.17
	;; Response received from [128.175.13.17] 1127 octets ;; HEADER SECTION ;; id = 17560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20250713181113 20250613173147 53469 upenn.edu. AmXA8H66bU10blWuPhfGa/eez1hNFFLcDaF4NT2OBaRnJSXeQRDO5ugTVf/fW3o8gFd/7+V0PeBd +9z1aAtyaA== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250721045652 20250621043219 53469 upenn.edu. UtjULUiXVv8uv5rNJlmSRLTDx3JFA6ZbZ1yxzoGIheWk2A1UjS2UihZ2eo61nC7s1rSY9OUqvxuM usKusrIi2A== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250721050733 20250621041209 53469 upenn.edu. 79YVxnV+YhWEoZgI5cGiTHED4/N3xxLUXo7j1MSZWouI7QCVSrUiFjJpaAwIViLLwO65tpzeGNc+ u7IwK+uxLQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. JPqbknJXjPsrVuGL7Ab6xPyzUpdvp+kPP+/9/BBisR0jkti37i4j1py6C7/qltUucfQosciTVsQZ j9+1CC8liQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. /AL5KRFRbSNXgRGIsnh5FbrgCy2dqh753/QgiKekbela8TD4MV+gBn9MoIuxvQu+lMCvjj5c0XF1 vf141hEv7g== ) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns2.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.254.53
	;; Response received from [128.91.254.53] 159 octets ;; HEADER SECTION ;; id = 25615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns2.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.254.53
	;; Response received from [128.91.254.53] 159 octets ;; HEADER SECTION ;; id = 5113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns5.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 159 octets ;; HEADER SECTION ;; id = 981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns5.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns5.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 159 octets ;; HEADER SECTION ;; id = 60161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to dns1.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1127 octets ;; HEADER SECTION ;; id = 45379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20250713181113 20250613173147 53469 upenn.edu. AmXA8H66bU10blWuPhfGa/eez1hNFFLcDaF4NT2OBaRnJSXeQRDO5ugTVf/fW3o8gFd/7+V0PeBd +9z1aAtyaA== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250721045652 20250621043219 53469 upenn.edu. UtjULUiXVv8uv5rNJlmSRLTDx3JFA6ZbZ1yxzoGIheWk2A1UjS2UihZ2eo61nC7s1rSY9OUqvxuM usKusrIi2A== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250721050733 20250621041209 53469 upenn.edu. 79YVxnV+YhWEoZgI5cGiTHED4/N3xxLUXo7j1MSZWouI7QCVSrUiFjJpaAwIViLLwO65tpzeGNc+ u7IwK+uxLQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. JPqbknJXjPsrVuGL7Ab6xPyzUpdvp+kPP+/9/BBisR0jkti37i4j1py6C7/qltUucfQosciTVsQZ j9+1CC8liQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. /AL5KRFRbSNXgRGIsnh5FbrgCy2dqh753/QgiKekbela8TD4MV+gBn9MoIuxvQu+lMCvjj5c0XF1 vf141hEv7g== ) ;; { "EDNS-VERSION": 0 }
	dns1.udel.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to dns1.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1127 octets ;; HEADER SECTION ;; id = 38551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20250713181113 20250613173147 53469 upenn.edu. AmXA8H66bU10blWuPhfGa/eez1hNFFLcDaF4NT2OBaRnJSXeQRDO5ugTVf/fW3o8gFd/7+V0PeBd +9z1aAtyaA== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250721045652 20250621043219 53469 upenn.edu. UtjULUiXVv8uv5rNJlmSRLTDx3JFA6ZbZ1yxzoGIheWk2A1UjS2UihZ2eo61nC7s1rSY9OUqvxuM usKusrIi2A== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250721050733 20250621041209 53469 upenn.edu. 79YVxnV+YhWEoZgI5cGiTHED4/N3xxLUXo7j1MSZWouI7QCVSrUiFjJpaAwIViLLwO65tpzeGNc+ u7IwK+uxLQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. JPqbknJXjPsrVuGL7Ab6xPyzUpdvp+kPP+/9/BBisR0jkti37i4j1py6C7/qltUucfQosciTVsQZ j9+1CC8liQ== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20250726033333 20250626033129 53469 upenn.edu. /AL5KRFRbSNXgRGIsnh5FbrgCy2dqh753/QgiKekbela8TD4MV+gBn9MoIuxvQu+lMCvjj5c0XF1 vf141hEv7g== ) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns1.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 159 octets ;; HEADER SECTION ;; id = 21888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns1.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 159 octets ;; HEADER SECTION ;; id = 62388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns6.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 159 octets ;; HEADER SECTION ;; id = 59008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns6.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns6.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 159 octets ;; HEADER SECTION ;; id = 39140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns3.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 159 octets ;; HEADER SECTION ;; id = 5749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns3.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns3.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 159 octets ;; HEADER SECTION ;; id = 36978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns4.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 159 octets ;; HEADER SECTION ;; id = 55083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns4.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns4.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 159 octets ;; HEADER SECTION ;; id = 49209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20250729053105 20250629050429 53469 upenn.edu. FPj1qpn/KUWSPr0HU3bwSR9SGehf9VBKV73r/DqWpIlsJhUOvR/+bf2u8Te/zT/UTkwTEgNHI5n8 Zr21yE0c2w== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test upenn.edu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: