DNSSEC Debugger - wiki.votesmart.org

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 03:31:18 UTC

Analyzing DNSSEC problems for wiki.votesmart.org

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 63450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to e.root-servers.net for wiki.votesmart.org/A
	Received 784 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 784 octets ;; HEADER SECTION ;; id = 25100 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260430010000 20260417000000 54393 . oHxSPm8coubseevsjhxgjFsrfPc9KcS1DKB4KAE88p20cFQ6GE5hLkDYH0N2f5SGwtUv1iF0M3sb AD8tXkzPk/t8j5e0kFpTUM0ppwTjYTpT2g0wImgDd++L0OpwvJz3vCCXLJBl65CS/09kJ+VxZrt5 XHW0HrIOKFi5oHYLKAMrO1/vo5L7aWF2U53ojJ7P0N/4oFDBU+O9qRHtYcJWrJYuDVqG1fCV95J0 I5VmfQLbMW9xwD3qBBtrTfDq0iBmTxpBDJOPyHSwfG9ECgmLzGFP4TzmcK2CH9KBwJcjjgQ4Fxi1 aGyTwteeSrp/nOGtQ/HmS1UMcmFBgte4fBJpCQ== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for org/DNSKEY
	Received 772 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 772 octets ;; HEADER SECTION ;; id = 46928 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260430010000 20260417000000 54393 . oHxSPm8coubseevsjhxgjFsrfPc9KcS1DKB4KAE88p20cFQ6GE5hLkDYH0N2f5SGwtUv1iF0M3sb AD8tXkzPk/t8j5e0kFpTUM0ppwTjYTpT2g0wImgDd++L0OpwvJz3vCCXLJBl65CS/09kJ+VxZrt5 XHW0HrIOKFi5oHYLKAMrO1/vo5L7aWF2U53ojJ7P0N/4oFDBU+O9qRHtYcJWrJYuDVqG1fCV95J0 I5VmfQLbMW9xwD3qBBtrTfDq0iBmTxpBDJOPyHSwfG9ECgmLzGFP4TzmcK2CH9KBwJcjjgQ4Fxi1 aGyTwteeSrp/nOGtQ/HmS1UMcmFBgte4fBJpCQ== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to f.root-servers.net for org/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 22483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260430010000 20260417000000 54393 . oHxSPm8coubseevsjhxgjFsrfPc9KcS1DKB4KAE88p20cFQ6GE5hLkDYH0N2f5SGwtUv1iF0M3sb AD8tXkzPk/t8j5e0kFpTUM0ppwTjYTpT2g0wImgDd++L0OpwvJz3vCCXLJBl65CS/09kJ+VxZrt5 XHW0HrIOKFi5oHYLKAMrO1/vo5L7aWF2U53ojJ7P0N/4oFDBU+O9qRHtYcJWrJYuDVqG1fCV95J0 I5VmfQLbMW9xwD3qBBtrTfDq0iBmTxpBDJOPyHSwfG9ECgmLzGFP4TzmcK2CH9KBwJcjjgQ4Fxi1 aGyTwteeSrp/nOGtQ/HmS1UMcmFBgte4fBJpCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20260430010000 20260417000000 54393 . oHxSPm8coubseevsjhxgjFsrfPc9KcS1DKB4KAE88p20cFQ6GE5hLkDYH0N2f5SGwtUv1iF0M3sb AD8tXkzPk/t8j5e0kFpTUM0ppwTjYTpT2g0wImgDd++L0OpwvJz3vCCXLJBl65CS/09kJ+VxZrt5 XHW0HrIOKFi5oHYLKAMrO1/vo5L7aWF2U53ojJ7P0N/4oFDBU+O9qRHtYcJWrJYuDVqG1fCV95J0 I5VmfQLbMW9xwD3qBBtrTfDq0iBmTxpBDJOPyHSwfG9ECgmLzGFP4TzmcK2CH9KBwJcjjgQ4Fxi1 aGyTwteeSrp/nOGtQ/HmS1UMcmFBgte4fBJpCQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to b0.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 895 octets ;; HEADER SECTION ;; id = 33021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAdc3zoey96ZxM7zxOkwht46jj6B78njb2RkWGvyur8oIGx4eAbz+I38N2Sn3xpXepsXhmFOT UiT2A0tSye6yVaC3lzBLdxv0ZtKPOLDgOSdukMZz15AaOTfpoylOTXjOH5wm/3IuG2i3NbxoC0BS Ie9s1qTamCd47kLQ2yv9gDHx ) ; keytag 39684 org. 3600 IN DNSKEY ( 256 3 8 AwEAAdDC/yWsWN6hNe3zy8geeYzTB4JvcvpSWr1H0+DyLcdxnR5a/tCNe1cIsi7U0ns9dt9ZN9ne CGX/r5NOzcGmCfhywmaSqxfRhOur1XLEw2fT31bAadkqTTGkM2cCI7nE1bQIATK/sDSfamKM5IQT HErgotU15ltZmcdtlJF4SIgD ) ; keytag 29805 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260430152853 20260409142853 26974 org. ewcmOIm0rdJ/YX4X63S0Gu6L2L1Yjy2VBSR01FxzzQB8YGpPh6qYQQhU2tQACCW9aW61XHms2Ly7 4shujbq5/Ujj75q1u0PaBB72+4dy23s05xkszRrUiCOrPg/az4YjGRNlnNi/poDUfasG3e636ppO Ca4sRPRb4Rn8r3q19Swsf+OociTG9cuuOzkugNqueOdiNZEOuPRyHQ+FxgGvLzWowNoT13ZyrqTx CQNpPPi4ekonmBL9EafxSnAEzIuGPoGjX7jHcBKbz9YMlaPW2/O9EXGvobo3cpiJU/ioFfR2Bu8q hrTfJ6pv1zKGHi0jEnndXSwjk+m7NVI7ihZTDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdc3zoey96ZxM7zxOkwht46jj6B78njb2RkWGvyur8oIGx4eAbz+I38N2Sn3xpXepsXhmFOT UiT2A0tSye6yVaC3lzBLdxv0ZtKPOLDgOSdukMZz15AaOTfpoylOTXjOH5wm/3IuG2i3NbxoC0BS Ie9s1qTamCd47kLQ2yv9gDHx ) ; keytag 39684`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdDC/yWsWN6hNe3zy8geeYzTB4JvcvpSWr1H0+DyLcdxnR5a/tCNe1cIsi7U0ns9dt9ZN9ne CGX/r5NOzcGmCfhywmaSqxfRhOur1XLEw2fT31bAadkqTTGkM2cCI7nE1bQIATK/sDSfamKM5IQT HErgotU15ltZmcdtlJF4SIgD ) ; keytag 29805`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260430152853 20260409142853 26974 org. ewcmOIm0rdJ/YX4X63S0Gu6L2L1Yjy2VBSR01FxzzQB8YGpPh6qYQQhU2tQACCW9aW61XHms2Ly7 4shujbq5/Ujj75q1u0PaBB72+4dy23s05xkszRrUiCOrPg/az4YjGRNlnNi/poDUfasG3e636ppO Ca4sRPRb4Rn8r3q19Swsf+OociTG9cuuOzkugNqueOdiNZEOuPRyHQ+FxgGvLzWowNoT13ZyrqTx CQNpPPi4ekonmBL9EafxSnAEzIuGPoGjX7jHcBKbz9YMlaPW2/O9EXGvobo3cpiJU/ioFfR2Bu8q hrTfJ6pv1zKGHi0jEnndXSwjk+m7NVI7ihZTDg== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=39684 is now in the chain-of-trust
	DNSKEY=29805 is now in the chain-of-trust
	Query to b0.org.afilias-nst.org for wiki.votesmart.org/A
	Received 609 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 609 octets ;; HEADER SECTION ;; id = 42117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) votesmart.org. 3600 IN NS coraline.ns.cloudflare.com. votesmart.org. 3600 IN NS rustam.ns.cloudflare.com. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260508033053 20260417023053 29805 org. u/JqS2N1KlqxHpyu1kz9tdFzYYi7dbluRk7Mn7/OXf2GLID+pMRt/TO396ECObqe6Zmu8zGv/tfk eov6mS2FISw9v8PoYMPQ0zb0VA4mJWUEAwuDBResoPTXB+1Iv9PTdYsz/2rnSD3Qvy50tUviBjkX 85HwidsleIYpvry1dt8= ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a d6i6qerp49ceqml7m0fnol66aml1b3kh NS DS RRSIG ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260430152853 20260409142853 29805 org. mwI/LV5Tq0Ez3Juk6GlYMs7dTGmfF5y3LgYCAtMO7Wwolnz1VrV99Lx8KRySwYolFrOOzX6zYLxs pAmq0yI+HnsQtkRQ5xekWPBMEh4DldbL6oi798sFEpUlxm8jX0Odh96ShE79z6Bn2ZcimnjMAQXt IkkTPWjHSESSk7yj/D0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b2.org.afilias-nst.org for votesmart.org/DNSKEY
	Received 604 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 604 octets ;; HEADER SECTION ;; id = 18607 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; votesmart.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) votesmart.org. 3600 IN NS rustam.ns.cloudflare.com. votesmart.org. 3600 IN NS coraline.ns.cloudflare.com. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a d6i6qerp49ceqml7m0fnol66aml1b3kh NS DS RRSIG ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260508033053 20260417023053 29805 org. u/JqS2N1KlqxHpyu1kz9tdFzYYi7dbluRk7Mn7/OXf2GLID+pMRt/TO396ECObqe6Zmu8zGv/tfk eov6mS2FISw9v8PoYMPQ0zb0VA4mJWUEAwuDBResoPTXB+1Iv9PTdYsz/2rnSD3Qvy50tUviBjkX 85HwidsleIYpvry1dt8= ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260430152853 20260409142853 29805 org. mwI/LV5Tq0Ez3Juk6GlYMs7dTGmfF5y3LgYCAtMO7Wwolnz1VrV99Lx8KRySwYolFrOOzX6zYLxs pAmq0yI+HnsQtkRQ5xekWPBMEh4DldbL6oi798sFEpUlxm8jX0Odh96ShE79z6Bn2ZcimnjMAQXt IkkTPWjHSESSk7yj/D0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone votesmart.org

votesmart.org

	Checking DS between org and votesmart.org
	Query to d0.org.afilias-nst.org for votesmart.org/DS
	Received 788 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 788 octets ;; HEADER SECTION ;; id = 27209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; votesmart.org. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260508033053 20260417023053 29805 org. u/JqS2N1KlqxHpyu1kz9tdFzYYi7dbluRk7Mn7/OXf2GLID+pMRt/TO396ECObqe6Zmu8zGv/tfk eov6mS2FISw9v8PoYMPQ0zb0VA4mJWUEAwuDBResoPTXB+1Iv9PTdYsz/2rnSD3Qvy50tUviBjkX 85HwidsleIYpvry1dt8= ) org. 3600 IN SOA ( a0.org.afilias-nst.info. hostmaster.donuts.email. 1776396368 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) org. 3600 IN RRSIG ( SOA 8 1 3600 20260508033053 20260417023053 29805 org. cK1j6nqzZ+0cvgwY2WqrmzZn05Q57eE9IRWKDXotHxrfjM0ic/aWxDM0eQUjjSX9sJn+2nPk8WkL S2B/At3gBP/AiI8mWJ4Bcl4Ut2S3IRW59v2+Yc21mQKbXGc/ccMJZItGNLg+iRtGwRWcSC42pfcj /nwgsErx+WmdppVdv80= ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a d6i6qerp49ceqml7m0fnol66aml1b3kh NS DS RRSIG ) d6i47o8jcr17rppmsok8agppgg0388sl.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20260430152853 20260409142853 29805 org. mwI/LV5Tq0Ez3Juk6GlYMs7dTGmfF5y3LgYCAtMO7Wwolnz1VrV99Lx8KRySwYolFrOOzX6zYLxs pAmq0yI+HnsQtkRQ5xekWPBMEh4DldbL6oi798sFEpUlxm8jX0Odh96ShE79z6Bn2ZcimnjMAQXt IkkTPWjHSESSk7yj/D0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for votesmart.org in the org zone
	Query to rustam.ns.cloudflare.com for votesmart.org/DNSKEY
	Received 108 bytes from 172.64.35.148
	;; Response received from [172.64.35.148] 108 octets ;; HEADER SECTION ;; id = 60015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; votesmart.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) votesmart.org. 1800 IN SOA ( coraline.ns.cloudflare.com. dns.cloudflare.com. 2401751755 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to coraline.ns.cloudflare.com for wiki.votesmart.org/A
	Received 79 bytes from 172.64.34.88
	;; Response received from [172.64.34.88] 79 octets ;; HEADER SECTION ;; id = 30422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN A ;; ANSWER SECTION (2 records) wiki.votesmart.org. 300 IN A 172.66.174.134 wiki.votesmart.org. 300 IN A 104.20.32.243 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coraline.ns.cloudflare.com is authoritative for wiki.votesmart.org
	Query to coraline.ns.cloudflare.com for wiki.votesmart.org/DNSKEY
	Received 113 bytes from 162.159.38.88
	;; Response received from [162.159.38.88] 113 octets ;; HEADER SECTION ;; id = 15902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) votesmart.org. 1800 IN SOA ( coraline.ns.cloudflare.com. dns.cloudflare.com. 2401751755 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to rustam.ns.cloudflare.com for votesmart.org/SOA
	Received 108 bytes from 108.162.195.148
	;; Response received from [108.162.195.148] 108 octets ;; HEADER SECTION ;; id = 8058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; votesmart.org. IN SOA ;; ANSWER SECTION (1 record) votesmart.org. 1800 IN SOA ( coraline.ns.cloudflare.com. dns.cloudflare.com. 2401751755 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to coraline.ns.cloudflare.com for wiki.votesmart.org/A
	wiki.votesmart.org A RR has value 172.66.174.134
	wiki.votesmart.org A RR has value 104.20.32.243
	No RRSIGs found

votesmart.org

	Query to rustam.ns.cloudflare.com for wiki.votesmart.org/A
	Received 79 bytes from 108.162.195.148
	;; Response received from [108.162.195.148] 79 octets ;; HEADER SECTION ;; id = 47434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN A ;; ANSWER SECTION (2 records) wiki.votesmart.org. 300 IN A 104.20.32.243 wiki.votesmart.org. 300 IN A 172.66.174.134 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rustam.ns.cloudflare.com is authoritative for wiki.votesmart.org
	Query to rustam.ns.cloudflare.com for wiki.votesmart.org/DNSKEY
	Received 113 bytes from 172.64.35.148
	;; Response received from [172.64.35.148] 113 octets ;; HEADER SECTION ;; id = 42644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wiki.votesmart.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) votesmart.org. 1800 IN SOA ( coraline.ns.cloudflare.com. dns.cloudflare.com. 2401751755 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to rustam.ns.cloudflare.com for wiki.votesmart.org/A
	wiki.votesmart.org A RR has value 104.20.32.243
	wiki.votesmart.org A RR has value 172.66.174.134
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test wiki.votesmart.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: