DNSSEC Debugger - upenn.edu

Domain Name:

Time: 2026-01-20 05:46:43 UTC

Analyzing DNSSEC problems for upenn.edu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 64505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to a.root-servers.net for upenn.edu/A
	Received 1168 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1168 octets ;; HEADER SECTION ;; id = 47292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260201170000 20260119160000 21831 . Ki71tUXBhM0PHFNRy9/qMiXP3HjLDh7odZqzJT3RErr16MV7czrJHWIxEa0VrHsW8QymbWktaR3h 9Lnn54XDykAATmiUaAy2t0ko719H2qJ1qczbvLVuTaKo33WlnidNbcV+ALQpeEZvdN9kQXjGADEY ckvqijzFp2HMtJOItnkEj7Sq17ymF1AoGkBjG/kdQ3NHygjskOGYXFFGwC0T0cZ71fhfSBSBvW/O gZsYjqS0XLwFc3dXzF5vQBR2SFkPskRfPQwyHnnoNwlc0WldNgTM8J23bFnCWw46Toevc20gY6KV FcFDwNWbtK1eOdwKlPfTTOEJ/pX6srqelD7HSA== ) ;; ADDITIONAL SECTION (27 records) d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1162 octets ;; HEADER SECTION ;; id = 12940 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260201170000 20260119160000 21831 . Ki71tUXBhM0PHFNRy9/qMiXP3HjLDh7odZqzJT3RErr16MV7czrJHWIxEa0VrHsW8QymbWktaR3h 9Lnn54XDykAATmiUaAy2t0ko719H2qJ1qczbvLVuTaKo33WlnidNbcV+ALQpeEZvdN9kQXjGADEY ckvqijzFp2HMtJOItnkEj7Sq17ymF1AoGkBjG/kdQ3NHygjskOGYXFFGwC0T0cZ71fhfSBSBvW/O gZsYjqS0XLwFc3dXzF5vQBR2SFkPskRfPQwyHnnoNwlc0WldNgTM8J23bFnCWw46Toevc20gY6KV FcFDwNWbtK1eOdwKlPfTTOEJ/pX6srqelD7HSA== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone edu

edu

	Checking DS between . and edu
	Query to g.root-servers.net for edu/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 10321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20260201170000 20260119160000 21831 . Ki71tUXBhM0PHFNRy9/qMiXP3HjLDh7odZqzJT3RErr16MV7czrJHWIxEa0VrHsW8QymbWktaR3h 9Lnn54XDykAATmiUaAy2t0ko719H2qJ1qczbvLVuTaKo33WlnidNbcV+ALQpeEZvdN9kQXjGADEY ckvqijzFp2HMtJOItnkEj7Sq17ymF1AoGkBjG/kdQ3NHygjskOGYXFFGwC0T0cZ71fhfSBSBvW/O gZsYjqS0XLwFc3dXzF5vQBR2SFkPskRfPQwyHnnoNwlc0WldNgTM8J23bFnCWw46Toevc20gY6KV FcFDwNWbtK1eOdwKlPfTTOEJ/pX6srqelD7HSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20260201170000 20260119160000 21831 . Ki71tUXBhM0PHFNRy9/qMiXP3HjLDh7odZqzJT3RErr16MV7czrJHWIxEa0VrHsW8QymbWktaR3h 9Lnn54XDykAATmiUaAy2t0ko719H2qJ1qczbvLVuTaKo33WlnidNbcV+ALQpeEZvdN9kQXjGADEY ckvqijzFp2HMtJOItnkEj7Sq17ymF1AoGkBjG/kdQ3NHygjskOGYXFFGwC0T0cZ71fhfSBSBvW/O gZsYjqS0XLwFc3dXzF5vQBR2SFkPskRfPQwyHnnoNwlc0WldNgTM8J23bFnCWw46Toevc20gY6KV FcFDwNWbtK1eOdwKlPfTTOEJ/pX6srqelD7HSA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to e.edu-servers.net for edu/DNSKEY
	Received 371 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 371 octets ;; HEADER SECTION ;; id = 30022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (4 records) edu. 86400 IN DNSKEY ( 256 3 13 z4lwcWrgRUDpdraaCEucEEmkrer/JTr5FtHXCpe1b+wON9Q2f0ytrulcutPgQOuh8YhsdM+cJa1X 5pDSvxeySA== ) ; keytag 35999 edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663 edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260130161114 20260115160614 35663 edu. Eb6w2HcvPAuw0ikXwb8AJpa+jPFihKopUk6EMEhpp9Vo0mB0SpYopgSpQA8JgXrVKopiM/iQZCdv FIF53fYtUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 256 3 13 z4lwcWrgRUDpdraaCEucEEmkrer/JTr5FtHXCpe1b+wON9Q2f0ytrulcutPgQOuh8YhsdM+cJa1X 5pDSvxeySA== ) ; keytag 35999`
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; keytag 35663`
	`edu. 86400 IN DNSKEY ( 256 3 13 ofExWbhssID57iiPCfo97BkTsCvsSwz1SQaESyZir1MIqxRITdSKbOcUbrVEtScEVsIP6MoJ1+iL 3fMyJirNRA== ) ; keytag 16901`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260130161114 20260115160614 35663 edu. Eb6w2HcvPAuw0ikXwb8AJpa+jPFihKopUk6EMEhpp9Vo0mB0SpYopgSpQA8JgXrVKopiM/iQZCdv FIF53fYtUA== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=35999 is now in the chain-of-trust
	DNSKEY=16901 is now in the chain-of-trust
	Query to e.edu-servers.net for upenn.edu/A
	Received 648 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 648 octets ;; HEADER SECTION ;; id = 47635 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) upenn.edu. 172800 IN NS dns1.udel.edu. upenn.edu. 172800 IN NS dns2.udel.edu. upenn.edu. 172800 IN NS adns4.upenn.edu. upenn.edu. 172800 IN NS adns5.upenn.edu. upenn.edu. 172800 IN NS adns6.upenn.edu. upenn.edu. 172800 IN NS adns1.nnn.upenn.edu. upenn.edu. 172800 IN NS adns2.nnn.upenn.edu. upenn.edu. 172800 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20260125031921 20260118020921 16901 edu. FxcI2IADKvmOoO6qebZSHcUrConHYpGPFOux349da1YxSHv40GlBdsrevKu+nlSdVN/3iBXcerY3 c5YklOKmXw== ) ;; ADDITIONAL SECTION (15 records) dns1.udel.edu. 172800 IN A 128.175.13.16 dns2.udel.edu. 172800 IN A 128.175.13.17 adns4.upenn.edu. 172800 IN A 208.94.148.32 adns4.upenn.edu. 172800 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 172800 IN A 208.80.124.32 adns5.upenn.edu. 172800 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 172800 IN A 208.80.126.32 adns6.upenn.edu. 172800 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 172800 IN A 128.91.2.53 adns1.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 172800 IN A 128.91.254.53 adns2.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 172800 IN A 128.91.251.53 adns3.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1003::ad:3 ;; { "EDNS-VERSION": 0 }
	Query to i.edu-servers.net for upenn.edu/DNSKEY
	Received 648 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 648 octets ;; HEADER SECTION ;; id = 48087 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) upenn.edu. 172800 IN NS dns1.udel.edu. upenn.edu. 172800 IN NS dns2.udel.edu. upenn.edu. 172800 IN NS adns4.upenn.edu. upenn.edu. 172800 IN NS adns5.upenn.edu. upenn.edu. 172800 IN NS adns6.upenn.edu. upenn.edu. 172800 IN NS adns1.nnn.upenn.edu. upenn.edu. 172800 IN NS adns2.nnn.upenn.edu. upenn.edu. 172800 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20260125031921 20260118020921 16901 edu. FxcI2IADKvmOoO6qebZSHcUrConHYpGPFOux349da1YxSHv40GlBdsrevKu+nlSdVN/3iBXcerY3 c5YklOKmXw== ) ;; ADDITIONAL SECTION (15 records) dns1.udel.edu. 172800 IN A 128.175.13.16 dns2.udel.edu. 172800 IN A 128.175.13.17 adns4.upenn.edu. 172800 IN A 208.94.148.32 adns4.upenn.edu. 172800 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 172800 IN A 208.80.124.32 adns5.upenn.edu. 172800 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 172800 IN A 208.80.126.32 adns6.upenn.edu. 172800 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 172800 IN A 128.91.2.53 adns1.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 172800 IN A 128.91.254.53 adns2.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 172800 IN A 128.91.251.53 adns3.nnn.upenn.edu. 172800 IN AAAA 2607:f470:1003::ad:3 ;; { "EDNS-VERSION": 0 }
	Found child zone upenn.edu

upenn.edu

	Checking DS between edu and upenn.edu
	Query to c.edu-servers.net for upenn.edu/DS
	Received 1079 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 1079 octets ;; HEADER SECTION ;; id = 46952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DS ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be ) upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20260125031921 20260118020921 16901 edu. FxcI2IADKvmOoO6qebZSHcUrConHYpGPFOux349da1YxSHv40GlBdsrevKu+nlSdVN/3iBXcerY3 c5YklOKmXw== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20260127031740 20260120020740 16901 edu. SGvtorOZyknx9tswuJ5tWq1RLMtMdgYNoXKz9Hd9cSNI6V//jMbPJkb0W1htO1dSa7uVIlBfnvl4 zjMgtwbD0A== ) ;; ADDITIONAL SECTION (27 records) c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for upenn.edu in the edu zone
	DS=17409/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`upenn.edu. 86400 IN RRSIG ( DS 13 2 86400 20260125031921 20260118020921 16901 edu. FxcI2IADKvmOoO6qebZSHcUrConHYpGPFOux349da1YxSHv40GlBdsrevKu+nlSdVN/3iBXcerY3 c5YklOKmXw== )`
	RRSIG=16901 and DNSKEY=16901 verifies the DS RRset
	DS=17409/SHA-256 is now in the chain-of-trust
	`upenn.edu. 86400 IN DS ( 17409 13 2 de945b7c85d05e161b91854f68b44ff83404f2b44359e28687bdead6c64bd6be )`
	Query to adns4.upenn.edu for upenn.edu/DNSKEY
	Received 383 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 383 octets ;; HEADER SECTION ;; id = 30574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN DNSKEY ;; ANSWER SECTION (4 records) upenn.edu. 3600 IN DNSKEY ( 256 3 13 1YC3eMMDYcRuiCGBQD2Pr74+H4ZWG9NGImM4M63YQ2K6zoceFo83nKYRByucdKU3C48XzG8/FV5j GFEVz2aFfA== ) ; keytag 39112 upenn.edu. 3600 IN DNSKEY ( 256 3 13 QLpiDMMtTmlP/6XFxvc5Gk2x/2qEwqdgEpbZaLbWlRLbSKSMxLWIfMnR8idT4WoWi0B7zVRm8Wxm xVZi9VwrFQ== ) ; keytag 53469 upenn.edu. 3600 IN DNSKEY ( 257 3 13 l9WybMQup0tcaipIc1S3k1KQeuww3qsEicDe7P7jdDmUthiqr+/DtvubFoCAqe7Ad9dsPTqqEXvQ 386wOPmoHw== ) ; keytag 17409 upenn.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260127235348 20251228230034 17409 upenn.edu. qZP5iIjcpjn0NSH7wdn8xcCTb1cKXRLo7wLe3WkURjFjRTjKa4EAzNBjCAw3LMdk0D3A7Ic6mOWN TH3+zUUoCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for upenn.edu
	`upenn.edu. 3600 IN DNSKEY ( 256 3 13 1YC3eMMDYcRuiCGBQD2Pr74+H4ZWG9NGImM4M63YQ2K6zoceFo83nKYRByucdKU3C48XzG8/FV5j GFEVz2aFfA== ) ; keytag 39112`
	`upenn.edu. 3600 IN DNSKEY ( 256 3 13 QLpiDMMtTmlP/6XFxvc5Gk2x/2qEwqdgEpbZaLbWlRLbSKSMxLWIfMnR8idT4WoWi0B7zVRm8Wxm xVZi9VwrFQ== ) ; keytag 53469`
	`upenn.edu. 3600 IN DNSKEY ( 257 3 13 l9WybMQup0tcaipIc1S3k1KQeuww3qsEicDe7P7jdDmUthiqr+/DtvubFoCAqe7Ad9dsPTqqEXvQ 386wOPmoHw== ) ; keytag 17409`
	DNSKEY=17409/SEP is now in the chain-of-trust
	DS=17409/SHA-256 verifies DNSKEY=17409/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`upenn.edu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260127235348 20251228230034 17409 upenn.edu. qZP5iIjcpjn0NSH7wdn8xcCTb1cKXRLo7wLe3WkURjFjRTjKa4EAzNBjCAw3LMdk0D3A7Ic6mOWN TH3+zUUoCg== )`
	RRSIG=17409 and DNSKEY=17409/SEP verifies the DNSKEY RRset
	DNSKEY=39112 is now in the chain-of-trust
	DNSKEY=53469 is now in the chain-of-trust
	Query to adns2.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.254.53
	;; Response received from [128.91.254.53] 159 octets ;; HEADER SECTION ;; id = 63935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to dns2.udel.edu for upenn.edu/SOA
	Received 1164 bytes from 128.175.13.17
	;; Response received from [128.175.13.17] 1164 octets ;; HEADER SECTION ;; id = 16658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	Query to adns4.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 209 octets ;; HEADER SECTION ;; id = 474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns1.nnn.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 209 octets ;; HEADER SECTION ;; id = 21341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns3.nnn.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 209 octets ;; HEADER SECTION ;; id = 62049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns6.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 209 octets ;; HEADER SECTION ;; id = 27159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.udel.edu for upenn.edu/SOA
	Received 1164 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1164 octets ;; HEADER SECTION ;; id = 36277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	Query to adns5.upenn.edu for upenn.edu/SOA
	Received 209 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 209 octets ;; HEADER SECTION ;; id = 49616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN SOA ;; ANSWER SECTION (2 records) upenn.edu. 3600 IN SOA ( ipam1.nnn.upenn.edu. hostmaster.upenn.edu. 2002301064 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 600 ;minimum ) upenn.edu. 3600 IN RRSIG ( SOA 13 2 3600 20260219054536 20260120044536 53469 upenn.edu. nN8elNFEuGD3U1TO2pWgfBqfelVduiZZUg+E0iRaFawr1DnEXButYe7GpLzbUcHHVLUF/501+RC7 WSvQvfbZFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns2.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.254.53
	;; Response received from [128.91.254.53] 159 octets ;; HEADER SECTION ;; id = 19263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns4.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 159 octets ;; HEADER SECTION ;; id = 64040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns4.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns4.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.94.148.32
	;; Response received from [208.94.148.32] 159 octets ;; HEADER SECTION ;; id = 32648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to dns1.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1127 octets ;; HEADER SECTION ;; id = 37233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	dns1.udel.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to dns1.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.16
	;; Response received from [128.175.13.16] 1127 octets ;; HEADER SECTION ;; id = 34894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns3.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 159 octets ;; HEADER SECTION ;; id = 32053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns3.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns3.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.251.53
	;; Response received from [128.91.251.53] 159 octets ;; HEADER SECTION ;; id = 10645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns6.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 159 octets ;; HEADER SECTION ;; id = 28943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns6.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns6.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.126.32
	;; Response received from [208.80.126.32] 159 octets ;; HEADER SECTION ;; id = 39873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns1.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 159 octets ;; HEADER SECTION ;; id = 64700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.nnn.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns1.nnn.upenn.edu for upenn.edu/A
	Received 159 bytes from 128.91.2.53
	;; Response received from [128.91.2.53] 159 octets ;; HEADER SECTION ;; id = 40914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to dns2.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.17
	;; Response received from [128.175.13.17] 1127 octets ;; HEADER SECTION ;; id = 40436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	dns2.udel.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to dns2.udel.edu for upenn.edu/A
	Received 1127 bytes from 128.175.13.17
	;; Response received from [128.175.13.17] 1127 octets ;; HEADER SECTION ;; id = 3768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (9 records) upenn.edu. 86400 IN NS adns1.nnn.upenn.edu. upenn.edu. 86400 IN NS adns2.nnn.upenn.edu. upenn.edu. 86400 IN NS adns3.nnn.upenn.edu. upenn.edu. 86400 IN NS adns4.upenn.edu. upenn.edu. 86400 IN NS adns5.upenn.edu. upenn.edu. 86400 IN NS adns6.upenn.edu. upenn.edu. 86400 IN NS dns1.udel.edu. upenn.edu. 86400 IN NS dns2.udel.edu. upenn.edu. 86400 IN RRSIG ( NS 13 2 86400 20260202032057 20260103030700 53469 upenn.edu. 7m0vF2ju/m6r97pKToNIeJXYP7pDDbFCSs1JX3r5N1EAE3dgFyh3NgLENNakxYNmdMeSOYLlyDYK QvEe0OZDvQ== ) ;; ADDITIONAL SECTION (17 records) adns1.nnn.upenn.edu. 86400 IN A 128.91.2.53 adns2.nnn.upenn.edu. 86400 IN A 128.91.254.53 adns3.nnn.upenn.edu. 86400 IN A 128.91.251.53 adns4.upenn.edu. 86400 IN A 208.94.148.32 adns5.upenn.edu. 86400 IN A 208.80.124.32 adns6.upenn.edu. 86400 IN A 208.80.126.32 adns1.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1001::ad:1 adns2.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1002::ad:2 adns3.nnn.upenn.edu. 86400 IN AAAA 2607:f470:1003::ad:3 adns4.upenn.edu. 86400 IN AAAA 2600:1800:5::1:0 adns5.upenn.edu. 86400 IN AAAA 2600:1801:6::1:0 adns6.upenn.edu. 86400 IN AAAA 2600:1802:7::1:0 adns1.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260204131938 20260105122456 53469 upenn.edu. sfCwMGHSHyXG/YfOMgb7qpZItB9ZPQ4OW7JVk98s3FiTWEqcs4H2c1WiBf0f1wB8hzoXB469gePW g4e89NGVmA== ) adns1.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260218040005 20260119030044 53469 upenn.edu. s/Y4fw6NIPD5GSnIa2JZeFwIrQln6qSw3+OiA/FD8z34IgfEurIbwtGfAV6XWu25VZs9IQMUm5lw CWqxlTYWhA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( A 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. Nf82763SFCMDc+iA9vE2tk6UosRUeAVAwBUmAqTKq7p9m4Jy8yYSRgjmL38OR88jujssh6RkGDrx KgVHVeX9NA== ) adns2.nnn.upenn.edu. 86400 IN RRSIG ( AAAA 13 4 86400 20260202132816 20260103124313 53469 upenn.edu. 4NqEZuPqdNXbbt4vq5WvbRpKg3RWWDNlGqwprehakQSL5tjHiEvJR9GfW+jfzElHq9WdI6BHuwaF kBUQwT0jTg== ) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

upenn.edu

	Query to adns5.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 159 octets ;; HEADER SECTION ;; id = 48127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns5.upenn.edu is authoritative for upenn.edu
	Found RRSIG signed by upenn.edu zone
	Query to adns5.upenn.edu for upenn.edu/A
	Received 159 bytes from 208.80.124.32
	;; Response received from [208.80.124.32] 159 octets ;; HEADER SECTION ;; id = 54966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upenn.edu. IN A ;; ANSWER SECTION (2 records) upenn.edu. 86400 IN A 23.185.0.4 upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upenn.edu A RR has value 23.185.0.4
	Found 1 RRSIGs over A RRset
	`upenn.edu. 86400 IN RRSIG ( A 13 2 86400 20260208131922 20260109131121 53469 upenn.edu. 35jiaqmwq10UmjW3YYnFlZFahmQXRDnQb43l3ERWPjQ0J4z02oe+A4sJNbkUwE/krP8bOGsSGxhd BN4t+NhFbQ== )`
	RRSIG=53469 and DNSKEY=53469 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test upenn.edu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: