DNSSEC Debugger - wiki.mozilla.org

Domain Name:

Time: 2024-12-08 19:14:53 UTC

Analyzing DNSSEC problems for wiki.mozilla.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 15408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for wiki.mozilla.org/A
	Received 788 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 788 octets ;; HEADER SECTION ;; id = 40782 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.mozilla.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . cxrdUAwU5waFlvSo7rS2sTVwhZ4vi6TmiAYdwg/Y8kBPdFWUk9VVWBcSGN0J2OVwoG18W8DXwlSW ePRQ5TngytUPvkFzFIq3zbCnXIW/hFTEoVDxXGmhwdCyBXojlcg7WE587DgY/hszqXg6uVAk+j/c pqjsxcx+q49KK5WEyuXIjxColFoi+4WFUeJqAqkmG8y+p4+0IA2xX0BmDzV0BWtKLDwczSu6I1be mNxUKX+7Cq5WrZHr4fHwUimRmu2zxec760w2tc9Kzzzro3jPmko7hrg7WBvAYEVT1zuWpf2U+6eA xkCM6VyTBvcVT17ISeZtvY4IIwv8QrX64Dlb6g== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for org/DNSKEY
	Received 772 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 772 octets ;; HEADER SECTION ;; id = 19918 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . cxrdUAwU5waFlvSo7rS2sTVwhZ4vi6TmiAYdwg/Y8kBPdFWUk9VVWBcSGN0J2OVwoG18W8DXwlSW ePRQ5TngytUPvkFzFIq3zbCnXIW/hFTEoVDxXGmhwdCyBXojlcg7WE587DgY/hszqXg6uVAk+j/c pqjsxcx+q49KK5WEyuXIjxColFoi+4WFUeJqAqkmG8y+p4+0IA2xX0BmDzV0BWtKLDwczSu6I1be mNxUKX+7Cq5WrZHr4fHwUimRmu2zxec760w2tc9Kzzzro3jPmko7hrg7WBvAYEVT1zuWpf2U+6eA xkCM6VyTBvcVT17ISeZtvY4IIwv8QrX64Dlb6g== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to c.root-servers.net for org/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 58915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . cxrdUAwU5waFlvSo7rS2sTVwhZ4vi6TmiAYdwg/Y8kBPdFWUk9VVWBcSGN0J2OVwoG18W8DXwlSW ePRQ5TngytUPvkFzFIq3zbCnXIW/hFTEoVDxXGmhwdCyBXojlcg7WE587DgY/hszqXg6uVAk+j/c pqjsxcx+q49KK5WEyuXIjxColFoi+4WFUeJqAqkmG8y+p4+0IA2xX0BmDzV0BWtKLDwczSu6I1be mNxUKX+7Cq5WrZHr4fHwUimRmu2zxec760w2tc9Kzzzro3jPmko7hrg7WBvAYEVT1zuWpf2U+6eA xkCM6VyTBvcVT17ISeZtvY4IIwv8QrX64Dlb6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . cxrdUAwU5waFlvSo7rS2sTVwhZ4vi6TmiAYdwg/Y8kBPdFWUk9VVWBcSGN0J2OVwoG18W8DXwlSW ePRQ5TngytUPvkFzFIq3zbCnXIW/hFTEoVDxXGmhwdCyBXojlcg7WE587DgY/hszqXg6uVAk+j/c pqjsxcx+q49KK5WEyuXIjxColFoi+4WFUeJqAqkmG8y+p4+0IA2xX0BmDzV0BWtKLDwczSu6I1be mNxUKX+7Cq5WrZHr4fHwUimRmu2zxec760w2tc9Kzzzro3jPmko7hrg7WBvAYEVT1zuWpf2U+6eA xkCM6VyTBvcVT17ISeZtvY4IIwv8QrX64Dlb6g== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a2.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 895 octets ;; HEADER SECTION ;; id = 18192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAbLYnI4VW05DKivdc/FPN+6rhjMUx87qb03sxmoYQiO9SLqWuzplcyMRtW0k8rcEWa+WiIEo AFqv+fARmWJmqc4rWlZPe/YXcEy6tb3LnMu9ohb+R9GiJw9B9AMAU6FEEjhoXu/wPwcLKu0ExQkV LjDEilyKX1NmN+Ek7vBK2G+5 ) ; keytag 11529 org. 3600 IN DNSKEY ( 256 3 8 AwEAAdim1OsPrczOdInedsci34awEy8Y2z3wk/vBneTpBcMqZ/RMblR628sT7w1DmLTqtVGxJZse iWV4ZPopdncraq3psjtMZ09Aacdho5aToAlRGkemALvc41I0fxt1oORr4UxHjx0oYWgpVgFfn8Wr olxfJs1HojL4KvHtGbOOLrod ) ; keytag 42393 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241226211036 20241205201036 26974 org. kbSXyq0QAkCXla9NvxQ09PSU6bVl+LGFmA6xyqjxW2pVcqhDpFIfFqv7qryYL0cCpOE/0jv+Jvzl bszRWt//4tCSQFJvMfl0ggmF7n+d6EbK9Q5NAAJYEEBe9DdcqGAO1IApu8/AhcnhZefl1eFijZto KuN6cDT3g3l/2fcIoOEdO0Uv6jbcLiX9Q52uJ5SCWRTBDwUrfzOVmZco6bmxkT9/o8RzC9KIppOj Wtb2UACF43nl//51n+iQpKKcbZBa3onJCLKvHmz5P7Vo5uaYM/G4KEFqIV/GrB8h10xZBe5tC1Bw QuC5cwrnL5ckSTLP207w5UiMxqUx6evHwc1aAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAbLYnI4VW05DKivdc/FPN+6rhjMUx87qb03sxmoYQiO9SLqWuzplcyMRtW0k8rcEWa+WiIEo AFqv+fARmWJmqc4rWlZPe/YXcEy6tb3LnMu9ohb+R9GiJw9B9AMAU6FEEjhoXu/wPwcLKu0ExQkV LjDEilyKX1NmN+Ek7vBK2G+5 ) ; keytag 11529`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdim1OsPrczOdInedsci34awEy8Y2z3wk/vBneTpBcMqZ/RMblR628sT7w1DmLTqtVGxJZse iWV4ZPopdncraq3psjtMZ09Aacdho5aToAlRGkemALvc41I0fxt1oORr4UxHjx0oYWgpVgFfn8Wr olxfJs1HojL4KvHtGbOOLrod ) ; keytag 42393`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241226211036 20241205201036 26974 org. kbSXyq0QAkCXla9NvxQ09PSU6bVl+LGFmA6xyqjxW2pVcqhDpFIfFqv7qryYL0cCpOE/0jv+Jvzl bszRWt//4tCSQFJvMfl0ggmF7n+d6EbK9Q5NAAJYEEBe9DdcqGAO1IApu8/AhcnhZefl1eFijZto KuN6cDT3g3l/2fcIoOEdO0Uv6jbcLiX9Q52uJ5SCWRTBDwUrfzOVmZco6bmxkT9/o8RzC9KIppOj Wtb2UACF43nl//51n+iQpKKcbZBa3onJCLKvHmz5P7Vo5uaYM/G4KEFqIV/GrB8h10xZBe5tC1Bw QuC5cwrnL5ckSTLP207w5UiMxqUx6evHwc1aAA== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=11529 is now in the chain-of-trust
	DNSKEY=42393 is now in the chain-of-trust
	Query to d0.org.afilias-nst.org for wiki.mozilla.org/A
	Received 639 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 639 octets ;; HEADER SECTION ;; id = 62752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.mozilla.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mozilla.org. 3600 IN NS ns7-66.akam.net. mozilla.org. 3600 IN NS ns1-240.akam.net. mozilla.org. 3600 IN NS ns5-65.akam.net. mozilla.org. 3600 IN NS ns4-64.akam.net. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241229191224 20241208181224 11529 org. H7EAfs3HzMFxflT81/h8sLtx9ZwhFTWsaIBAO26WFcFzIHCnSt8D8xINZ2hXfA2PhBeW4YPvk0ND APH9I/gqLabjYjG1ImsArstzdybY1GTkSUtXbKd7I0+RHvZwyjB9gX32pXL/U1HqUldG7ITo3Qu8 XAAoBuhB9Lby5rjYADI= ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a 8vlpuiuf52alqph5hbekt8inhbuthq6d NS DS RRSIG ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241226211036 20241205201036 11529 org. b8EJ8ovO6V34VlZWOG9NU3Z32OdmtT6Xgsj3qQaEAJMpQ+E4gc+3m7Jo9DoKCXqd0FVlif2v5TvY Wrymzq8QOm1tsADeJneBq9lMKmtJeIVeG4eMO+8NoxlQB8WfHYaJYI15ArV2ZvVIkOYz/r6omMNf eEJNRTPtN9FM4eK49KM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2.org.afilias-nst.info for mozilla.org/DNSKEY
	Received 634 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 634 octets ;; HEADER SECTION ;; id = 11702 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozilla.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mozilla.org. 3600 IN NS ns4-64.akam.net. mozilla.org. 3600 IN NS ns5-65.akam.net. mozilla.org. 3600 IN NS ns7-66.akam.net. mozilla.org. 3600 IN NS ns1-240.akam.net. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a 8vlpuiuf52alqph5hbekt8inhbuthq6d NS DS RRSIG ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241229191224 20241208181224 11529 org. H7EAfs3HzMFxflT81/h8sLtx9ZwhFTWsaIBAO26WFcFzIHCnSt8D8xINZ2hXfA2PhBeW4YPvk0ND APH9I/gqLabjYjG1ImsArstzdybY1GTkSUtXbKd7I0+RHvZwyjB9gX32pXL/U1HqUldG7ITo3Qu8 XAAoBuhB9Lby5rjYADI= ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241226211036 20241205201036 11529 org. b8EJ8ovO6V34VlZWOG9NU3Z32OdmtT6Xgsj3qQaEAJMpQ+E4gc+3m7Jo9DoKCXqd0FVlif2v5TvY Wrymzq8QOm1tsADeJneBq9lMKmtJeIVeG4eMO+8NoxlQB8WfHYaJYI15ArV2ZvVIkOYz/r6omMNf eEJNRTPtN9FM4eK49KM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone mozilla.org

mozilla.org

	Checking DS between org and mozilla.org
	Query to b0.org.afilias-nst.org for mozilla.org/DS
	Received 786 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 786 octets ;; HEADER SECTION ;; id = 32085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozilla.org. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241229191224 20241208181224 11529 org. H7EAfs3HzMFxflT81/h8sLtx9ZwhFTWsaIBAO26WFcFzIHCnSt8D8xINZ2hXfA2PhBeW4YPvk0ND APH9I/gqLabjYjG1ImsArstzdybY1GTkSUtXbKd7I0+RHvZwyjB9gX32pXL/U1HqUldG7ITo3Qu8 XAAoBuhB9Lby5rjYADI= ) org. 3600 IN SOA ( a0.org.afilias-nst.info. hostmaster.donuts.email. 1733684798 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) org. 3600 IN RRSIG ( SOA 8 1 3600 20241229191224 20241208181224 11529 org. YBBWJubJ6Cp1mFYt770gJ/26+ozkWlSTuN/BRFIyH5mU21WOCDKxFWPN64+tsh4ziXiIbUwonNiE ccOX1GVvDAJBakm5LX91ackVxHF+yfA8FwvbAKnEKE/Gq4zhCixKG4seq451ayCEjm6jg79v7X0+ PvcbApeoiVm48SpWu2A= ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a 8vlpuiuf52alqph5hbekt8inhbuthq6d NS DS RRSIG ) 8vlo360qgah014avpms0di1hfbruv4og.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241226211036 20241205201036 11529 org. b8EJ8ovO6V34VlZWOG9NU3Z32OdmtT6Xgsj3qQaEAJMpQ+E4gc+3m7Jo9DoKCXqd0FVlif2v5TvY Wrymzq8QOm1tsADeJneBq9lMKmtJeIVeG4eMO+8NoxlQB8WfHYaJYI15ArV2ZvVIkOYz/r6omMNf eEJNRTPtN9FM4eK49KM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mozilla.org in the org zone
	Query to ns4-64.akam.net for mozilla.org/DNSKEY
	Received 121 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 121 octets ;; HEADER SECTION ;; id = 54900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozilla.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mozilla.org. 60 IN SOA ( infoblox1.private.mdc1.mozilla.com. hostmaster.mozilla.com. 2024020518 ;serial 180 ;refresh 180 ;retry 1209600 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4-64.akam.net for wiki.mozilla.org/A
	Received 98 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 98 octets ;; HEADER SECTION ;; id = 13210 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.mozilla.org. IN A ;; ANSWER SECTION (1 record) wiki.mozilla.org. 60 IN CNAME prod.wikimo.prod.webservices.mozgcp.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4-64.akam.net is authoritative for wiki.mozilla.org
	Query to ns5-65.akam.net for wiki.mozilla.org/DNSKEY
	Received 98 bytes from 184.85.248.65
	;; Response received from [184.85.248.65] 98 octets ;; HEADER SECTION ;; id = 16441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.mozilla.org. IN DNSKEY ;; ANSWER SECTION (1 record) wiki.mozilla.org. 60 IN CNAME prod.wikimo.prod.webservices.mozgcp.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	wiki.mozilla.org is a CNAME to prod.wikimo.prod.webservices.mozgcp.net
	No RRSIGs found

	Query to l.root-servers.net for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 1196 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1196 octets ;; HEADER SECTION ;; id = 11100 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . ADsFiaXsl6aRpHdB78iO+UXOcb/DJH4YA7NacyEshZ0moqKklJk7FtBGTs3JjWDV+NQE56iAprsw llafqxLigbLWX9DW6JJdgrtL/QmCnATD+jBO57Kx075OyOB6Q4ualuxTE6nXpPHa5q7PMk2wBjCK ep+sTaGIPrqYa27xrHD2An2Qm4ou0hXlsPjK3UFpg0iaaqVDQ6JEXFl1bfo4GMSS9VI5PqgtfkpO wJTXel1DLd10bb/aq8m1QJkC8xmN1z/AP9bbUTotNVizny9APy+lrlxq56UMJJTriaKvW9EAF4Hw q89rcSTL7aTk4HEkAD789tDgjUGiCR12WIjrCg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1160 octets ;; HEADER SECTION ;; id = 48622 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . ADsFiaXsl6aRpHdB78iO+UXOcb/DJH4YA7NacyEshZ0moqKklJk7FtBGTs3JjWDV+NQE56iAprsw llafqxLigbLWX9DW6JJdgrtL/QmCnATD+jBO57Kx075OyOB6Q4ualuxTE6nXpPHa5q7PMk2wBjCK ep+sTaGIPrqYa27xrHD2An2Qm4ou0hXlsPjK3UFpg0iaaqVDQ6JEXFl1bfo4GMSS9VI5PqgtfkpO wJTXel1DLd10bb/aq8m1QJkC8xmN1z/AP9bbUTotNVizny9APy+lrlxq56UMJJTriaKvW9EAF4Hw q89rcSTL7aTk4HEkAD789tDgjUGiCR12WIjrCg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to c.root-servers.net for net/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 37984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . ADsFiaXsl6aRpHdB78iO+UXOcb/DJH4YA7NacyEshZ0moqKklJk7FtBGTs3JjWDV+NQE56iAprsw llafqxLigbLWX9DW6JJdgrtL/QmCnATD+jBO57Kx075OyOB6Q4ualuxTE6nXpPHa5q7PMk2wBjCK ep+sTaGIPrqYa27xrHD2An2Qm4ou0hXlsPjK3UFpg0iaaqVDQ6JEXFl1bfo4GMSS9VI5PqgtfkpO wJTXel1DLd10bb/aq8m1QJkC8xmN1z/AP9bbUTotNVizny9APy+lrlxq56UMJJTriaKvW9EAF4Hw q89rcSTL7aTk4HEkAD789tDgjUGiCR12WIjrCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . ADsFiaXsl6aRpHdB78iO+UXOcb/DJH4YA7NacyEshZ0moqKklJk7FtBGTs3JjWDV+NQE56iAprsw llafqxLigbLWX9DW6JJdgrtL/QmCnATD+jBO57Kx075OyOB6Q4ualuxTE6nXpPHa5q7PMk2wBjCK ep+sTaGIPrqYa27xrHD2An2Qm4ou0hXlsPjK3UFpg0iaaqVDQ6JEXFl1bfo4GMSS9VI5PqgtfkpO wJTXel1DLd10bb/aq8m1QJkC8xmN1z/AP9bbUTotNVizny9APy+lrlxq56UMJJTriaKvW9EAF4Hw q89rcSTL7aTk4HEkAD789tDgjUGiCR12WIjrCg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to j.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 291 octets ;; HEADER SECTION ;; id = 37402 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 VY9Y6PDr+3Q+22421GwKhVdc4tyN9JOhXUpKngdGE6V2s/Yq+1a0Bg9pzGzaA4N6fFH+aOznZCKT +wsxB4tnug== ) ; keytag 31059 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20241218151035 20241203150535 37331 net. pfgNd2k0elxP6RH7ZWsSifpsVO/EnoIO32zC6mSa2qdQBYqbJpqmk3TpuJROAdfqF0fHLsjs51fN lVn6ziKKEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 VY9Y6PDr+3Q+22421GwKhVdc4tyN9JOhXUpKngdGE6V2s/Yq+1a0Bg9pzGzaA4N6fFH+aOznZCKT +wsxB4tnug== ) ; keytag 31059`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20241218151035 20241203150535 37331 net. pfgNd2k0elxP6RH7ZWsSifpsVO/EnoIO32zC6mSa2qdQBYqbJpqmk3TpuJROAdfqF0fHLsjs51fN lVn6ziKKEg== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=31059 is now in the chain-of-trust
	Query to d.gtld-servers.net for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 546 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 546 octets ;; HEADER SECTION ;; id = 22369 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mozgcp.net. 172800 IN NS ns-cloud-c1.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c2.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c3.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c4.googledomains.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20241214030827 20241207015827 31059 net. Pno3bhuNfzoYb2w9/tyo80HYGa9rdykTeqqv1UygcUY5oKTGYEkO2uWqfKQ/t7lY3Y3atys1YEcq drg19y4svA== ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN NSEC3 ( 1 1 0 - 0ahrkahfmt9oui9dpf7qqemocnqpegfc NS DS RRSIG ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN RRSIG ( NSEC3 13 2 900 20241215025659 20241208014659 31059 net. kfwpQ8ygM+mTvCmsvRWlbtZrQsWoRKWeWbRQ5W9hAld6DUIXE1qY0K1firvP0G4PKXpjzfGi04NA vmLrXvn98Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.gtld-servers.net for mozgcp.net/DNSKEY
	Received 517 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 517 octets ;; HEADER SECTION ;; id = 1279 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) mozgcp.net. 172800 IN NS ns-cloud-c1.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c2.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c3.googledomains.com. mozgcp.net. 172800 IN NS ns-cloud-c4.googledomains.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20241214030827 20241207015827 31059 net. Pno3bhuNfzoYb2w9/tyo80HYGa9rdykTeqqv1UygcUY5oKTGYEkO2uWqfKQ/t7lY3Y3atys1YEcq drg19y4svA== ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN NSEC3 ( 1 1 0 - 0ahrkahfmt9oui9dpf7qqemocnqpegfc NS DS RRSIG ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN RRSIG ( NSEC3 13 2 900 20241215025659 20241208014659 31059 net. kfwpQ8ygM+mTvCmsvRWlbtZrQsWoRKWeWbRQ5W9hAld6DUIXE1qY0K1firvP0G4PKXpjzfGi04NA vmLrXvn98Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone mozgcp.net

mozgcp.net

	Checking DS between net and mozgcp.net
	Query to c.gtld-servers.net for mozgcp.net/DS
	Received 568 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 568 octets ;; HEADER SECTION ;; id = 1420 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozgcp.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20241214030827 20241207015827 31059 net. Pno3bhuNfzoYb2w9/tyo80HYGa9rdykTeqqv1UygcUY5oKTGYEkO2uWqfKQ/t7lY3Y3atys1YEcq drg19y4svA== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1733685272 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20241215191432 20241208180432 31059 net. hNkgfiAyj+D+njnUHXycoDd+WFzeMzan9HL07dszeF51Iy6N5SRiZd88ARuKxlu9sLpNkozffMI5 mKbLTrb7XA== ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN NSEC3 ( 1 1 0 - 0ahrkahfmt9oui9dpf7qqemocnqpegfc NS DS RRSIG ) 0AHM15QO7URCDLJ33F707T0SOI050OHR.net. 900 IN RRSIG ( NSEC3 13 2 900 20241215025659 20241208014659 31059 net. kfwpQ8ygM+mTvCmsvRWlbtZrQsWoRKWeWbRQ5W9hAld6DUIXE1qY0K1firvP0G4PKXpjzfGi04NA vmLrXvn98Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mozgcp.net in the net zone
	Query to ns-cloud-c4.googledomains.com for mozgcp.net/DNSKEY
	Received 132 bytes from 216.239.38.108
	;; Response received from [216.239.38.108] 132 octets ;; HEADER SECTION ;; id = 34497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mozgcp.net. 300 IN SOA ( ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cloud-c1.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 189 bytes from 216.239.32.108
	;; Response received from [216.239.32.108] 189 octets ;; HEADER SECTION ;; id = 44450 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) webservices.mozgcp.net. 300 IN NS ns-cloud-d1.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d2.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d3.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-c4.googledomains.com for webservices.mozgcp.net/DNSKEY
	Received 172 bytes from 216.239.38.108
	;; Response received from [216.239.38.108] 172 octets ;; HEADER SECTION ;; id = 6849 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) webservices.mozgcp.net. 300 IN NS ns-cloud-d2.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d4.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d1.googledomains.com. webservices.mozgcp.net. 300 IN NS ns-cloud-d3.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone webservices.mozgcp.net

webservices.mozgcp.net

	Checking DS between mozgcp.net and webservices.mozgcp.net
	Query to ns-cloud-c4.googledomains.com for webservices.mozgcp.net/DS
	Received 144 bytes from 216.239.38.108
	;; Response received from [216.239.38.108] 144 octets ;; HEADER SECTION ;; id = 7192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; webservices.mozgcp.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mozgcp.net. 300 IN SOA ( ns-cloud-c1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for webservices.mozgcp.net in the mozgcp.net zone
	Query to ns-cloud-d3.googledomains.com for webservices.mozgcp.net/DNSKEY
	Received 144 bytes from 216.239.36.109
	;; Response received from [216.239.36.109] 144 octets ;; HEADER SECTION ;; id = 53042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) webservices.mozgcp.net. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cloud-d4.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 189 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 189 octets ;; HEADER SECTION ;; id = 33303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b3.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b4.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b1.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b2.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-d4.googledomains.com for prod.webservices.mozgcp.net/DNSKEY
	Received 177 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 177 octets ;; HEADER SECTION ;; id = 4406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b3.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b4.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b1.googledomains.com. prod.webservices.mozgcp.net. 300 IN NS ns-cloud-b2.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone prod.webservices.mozgcp.net

prod.webservices.mozgcp.net

	Checking DS between webservices.mozgcp.net and prod.webservices.mozgcp.net
	Query to ns-cloud-d2.googledomains.com for prod.webservices.mozgcp.net/DS
	Received 149 bytes from 216.239.34.109
	;; Response received from [216.239.34.109] 149 octets ;; HEADER SECTION ;; id = 65343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.webservices.mozgcp.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) webservices.mozgcp.net. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for prod.webservices.mozgcp.net in the webservices.mozgcp.net zone
	Query to ns-cloud-b2.googledomains.com for prod.webservices.mozgcp.net/DNSKEY
	Received 149 bytes from 216.239.34.107
	;; Response received from [216.239.34.107] 149 octets ;; HEADER SECTION ;; id = 64546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-b1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cloud-b4.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 189 bytes from 216.239.38.107
	;; Response received from [216.239.38.107] 189 octets ;; HEADER SECTION ;; id = 439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a2.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a4.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a1.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a3.googledomains.com. ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-b3.googledomains.com for wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 184 bytes from 216.239.36.107
	;; Response received from [216.239.36.107] 184 octets ;; HEADER SECTION ;; id = 29442 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a1.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a4.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a3.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 300 IN NS ( ns-cloud-a2.googledomains.com. ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone wikimo.prod.webservices.mozgcp.net

wikimo.prod.webservices.mozgcp.net

	Checking DS between prod.webservices.mozgcp.net and wikimo.prod.webservices.mozgcp.net
	Query to ns-cloud-b2.googledomains.com for wikimo.prod.webservices.mozgcp.net/DS
	Received 156 bytes from 216.239.34.107
	;; Response received from [216.239.34.107] 156 octets ;; HEADER SECTION ;; id = 59162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-b1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for wikimo.prod.webservices.mozgcp.net in the prod.webservices.mozgcp.net zone
	Query to ns-cloud-a2.googledomains.com for wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 156 bytes from 216.239.34.106
	;; Response received from [216.239.34.106] 156 octets ;; HEADER SECTION ;; id = 14084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cloud-a2.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.34.106
	;; Response received from [216.239.34.106] 84 octets ;; HEADER SECTION ;; id = 13978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-a2.googledomains.com is authoritative for prod.wikimo.prod.webservices.mozgcp.net
	Query to ns-cloud-a1.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 161 bytes from 216.239.32.106
	;; Response received from [216.239.32.106] 161 octets ;; HEADER SECTION ;; id = 1089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a1.googledomains.com for wikimo.prod.webservices.mozgcp.net/SOA
	Received 248 bytes from 216.239.32.106
	;; Response received from [216.239.32.106] 248 octets ;; HEADER SECTION ;; id = 59513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN SOA ;; ANSWER SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a2.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a4.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a3.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a1.googledomains.com. ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a4.googledomains.com for wikimo.prod.webservices.mozgcp.net/SOA
	Received 248 bytes from 216.239.38.106
	;; Response received from [216.239.38.106] 248 octets ;; HEADER SECTION ;; id = 57960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN SOA ;; ANSWER SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a4.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a2.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a3.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a1.googledomains.com. ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a3.googledomains.com for wikimo.prod.webservices.mozgcp.net/SOA
	Received 248 bytes from 216.239.36.106
	;; Response received from [216.239.36.106] 248 octets ;; HEADER SECTION ;; id = 4140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wikimo.prod.webservices.mozgcp.net. IN SOA ;; ANSWER SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a2.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a3.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a4.googledomains.com. ) wikimo.prod.webservices.mozgcp.net. 21600 IN NS ( ns-cloud-a1.googledomains.com. ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a2.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.34.106
	;; Response received from [216.239.34.106] 84 octets ;; HEADER SECTION ;; id = 22335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	prod.wikimo.prod.webservices.mozgcp.net A RR has value 34.95.67.112
	No RRSIGs found

wikimo.prod.webservices.mozgcp.net

	Query to ns-cloud-a3.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.36.106
	;; Response received from [216.239.36.106] 84 octets ;; HEADER SECTION ;; id = 57795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-a3.googledomains.com is authoritative for prod.wikimo.prod.webservices.mozgcp.net
	Query to ns-cloud-a3.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 161 bytes from 216.239.36.106
	;; Response received from [216.239.36.106] 161 octets ;; HEADER SECTION ;; id = 32104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a3.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.36.106
	;; Response received from [216.239.36.106] 84 octets ;; HEADER SECTION ;; id = 8062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	prod.wikimo.prod.webservices.mozgcp.net A RR has value 34.95.67.112
	No RRSIGs found

wikimo.prod.webservices.mozgcp.net

	Query to ns-cloud-a1.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.32.106
	;; Response received from [216.239.32.106] 84 octets ;; HEADER SECTION ;; id = 48261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-a1.googledomains.com is authoritative for prod.wikimo.prod.webservices.mozgcp.net
	Query to ns-cloud-a1.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 161 bytes from 216.239.32.106
	;; Response received from [216.239.32.106] 161 octets ;; HEADER SECTION ;; id = 20051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a1.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.32.106
	;; Response received from [216.239.32.106] 84 octets ;; HEADER SECTION ;; id = 36858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	prod.wikimo.prod.webservices.mozgcp.net A RR has value 34.95.67.112
	No RRSIGs found

wikimo.prod.webservices.mozgcp.net

	Query to ns-cloud-a4.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.38.106
	;; Response received from [216.239.38.106] 84 octets ;; HEADER SECTION ;; id = 8442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-a4.googledomains.com is authoritative for prod.wikimo.prod.webservices.mozgcp.net
	Query to ns-cloud-a4.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/DNSKEY
	Received 161 bytes from 216.239.38.106
	;; Response received from [216.239.38.106] 161 octets ;; HEADER SECTION ;; id = 6754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wikimo.prod.webservices.mozgcp.net. 300 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-a4.googledomains.com for prod.wikimo.prod.webservices.mozgcp.net/A
	Received 84 bytes from 216.239.38.106
	;; Response received from [216.239.38.106] 84 octets ;; HEADER SECTION ;; id = 57659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; prod.wikimo.prod.webservices.mozgcp.net. IN A ;; ANSWER SECTION (1 record) prod.wikimo.prod.webservices.mozgcp.net. 600 IN A 34.95.67.112 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	prod.wikimo.prod.webservices.mozgcp.net A RR has value 34.95.67.112
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test wiki.mozilla.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: