DNSSEC Analyzer - www.bag.admin.ch

Domain Name:

Time: 2022-08-16 03:30:55 UTC, NTP stratum 16

Analyzing DNSSEC problems for www.bag.admin.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (865 octets) ;; HEADER SECTION ;; id = 31069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to f.root-servers.net for www.bag.admin.ch/A
	Received 684 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (684 octets) ;; HEADER SECTION ;; id = 32481 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . GMJrTLD0TLNG5F1/gJvd9crJXUxSg3LvGy0Fb1Bwzke9NPUqfRSIwBOCV/Hn4nw4aFxPDh4d0CN5 G7fOv87Hqy5P8+iFbpA3zqCRvueIll1VzBCCMCyjPznpZ/hm/uA0zB6pGw+LFXH5KOwweDeA785e cHp7lWxREYZNjWDMPPxcV/cufalpS20BL9XEpc6u4Ow2eMxshuJ7UQpJtVvDcLXtnd0LAQMORd1o yvhnyIhszpI/QN0M7n8NCBc4nOIIjaKJy64geCaGAcJKMtTh6thsC8vLO1B508sNxYyaewBQSInD ZmMJsETNoym3KAY26qYNjdBTcY0U7QDyZl//+w== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN A 194.0.25.39 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to j.root-servers.net for ch/DNSKEY
	Received 670 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (670 octets) ;; HEADER SECTION ;; id = 25708 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . GMJrTLD0TLNG5F1/gJvd9crJXUxSg3LvGy0Fb1Bwzke9NPUqfRSIwBOCV/Hn4nw4aFxPDh4d0CN5 G7fOv87Hqy5P8+iFbpA3zqCRvueIll1VzBCCMCyjPznpZ/hm/uA0zB6pGw+LFXH5KOwweDeA785e cHp7lWxREYZNjWDMPPxcV/cufalpS20BL9XEpc6u4Ow2eMxshuJ7UQpJtVvDcLXtnd0LAQMORd1o yvhnyIhszpI/QN0M7n8NCBc4nOIIjaKJy64geCaGAcJKMtTh6thsC8vLO1B508sNxYyaewBQSInD ZmMJsETNoym3KAY26qYNjdBTcY0U7QDyZl//+w== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to b.root-servers.net for ch/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 49830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . GMJrTLD0TLNG5F1/gJvd9crJXUxSg3LvGy0Fb1Bwzke9NPUqfRSIwBOCV/Hn4nw4aFxPDh4d0CN5 G7fOv87Hqy5P8+iFbpA3zqCRvueIll1VzBCCMCyjPznpZ/hm/uA0zB6pGw+LFXH5KOwweDeA785e cHp7lWxREYZNjWDMPPxcV/cufalpS20BL9XEpc6u4Ow2eMxshuJ7UQpJtVvDcLXtnd0LAQMORd1o yvhnyIhszpI/QN0M7n8NCBc4nOIIjaKJy64geCaGAcJKMtTh6thsC8vLO1B508sNxYyaewBQSInD ZmMJsETNoym3KAY26qYNjdBTcY0U7QDyZl//+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ch in the . zone
	DS=11648/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . GMJrTLD0TLNG5F1/gJvd9crJXUxSg3LvGy0Fb1Bwzke9NPUqfRSIwBOCV/Hn4nw4aFxPDh4d0CN5 G7fOv87Hqy5P8+iFbpA3zqCRvueIll1VzBCCMCyjPznpZ/hm/uA0zB6pGw+LFXH5KOwweDeA785e cHp7lWxREYZNjWDMPPxcV/cufalpS20BL9XEpc6u4Ow2eMxshuJ7UQpJtVvDcLXtnd0LAQMORd1o yvhnyIhszpI/QN0M7n8NCBc4nOIIjaKJy64geCaGAcJKMtTh6thsC8vLO1B508sNxYyaewBQSInD ZmMJsETNoym3KAY26qYNjdBTcY0U7QDyZl//+w== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=11648/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 )`
	Query to a.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (369 octets) ;; HEADER SECTION ;; id = 27508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 mU5vrITNaIA6bWmGTbdB6voQFtiZS/CcE77mxr+C6lxTkBXnrOhDNnDSfuoJyahrDhSyShKJt1aS Zt3VWrZQwA== ) ; Key ID = 3739 ch. 86400 IN DNSKEY ( 256 3 13 yY5nSb146X+6ZXIFj6MJ94EoQkjpAajbQlhsiaX7vdc1Zyl857EtGxx4YX8EYYISAQZWKBTpo6i6 rb84rLRmug== ) ; Key ID = 7960 ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20220917100909 20220802090909 11648 ch. Xg+lf5zfc/QnnF0qH0i3DHB5EPKIQjs/zY/xhVL/foF/BCCOz3afOZM+Ek1e6AEUwMOj2e86WQtk YJ/AYuOE/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 mU5vrITNaIA6bWmGTbdB6voQFtiZS/CcE77mxr+C6lxTkBXnrOhDNnDSfuoJyahrDhSyShKJt1aS Zt3VWrZQwA== ) ; Key ID = 3739`
	`ch. 86400 IN DNSKEY ( 256 3 13 yY5nSb146X+6ZXIFj6MJ94EoQkjpAajbQlhsiaX7vdc1Zyl857EtGxx4YX8EYYISAQZWKBTpo6i6 rb84rLRmug== ) ; Key ID = 7960`
	`ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648`
	DNSKEY=11648/SEP is now in the chain-of-trust
	DS=11648/SHA-256 verifies DNSKEY=11648/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20220917100909 20220802090909 11648 ch. Xg+lf5zfc/QnnF0qH0i3DHB5EPKIQjs/zY/xhVL/foF/BCCOz3afOZM+Ek1e6AEUwMOj2e86WQtk YJ/AYuOE/w== )`
	RRSIG=11648 and DNSKEY=11648/SEP verifies the DNSKEY RRset
	DNSKEY=3739 is now in the chain-of-trust
	DNSKEY=7960 is now in the chain-of-trust
	Query to d.nic.ch for www.bag.admin.ch/A
	Received 372 bytes from 194.0.25.39
	;; Response received from 194.0.25.39 (372 octets) ;; HEADER SECTION ;; id = 17523 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN DS ( 38494 8 2 5399505006649029f0f97d48ff3a9cb5a415e6db1a4155f3154e5a835689a2fa ) admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20220908140826 20220809140259 7960 ch. dl0GZAub1V9Vz3VoXiNqRciEDeUp9FYugjpsmaJleZsfmzRXLki6+1hzgYr2z4//Fw/X4wNLWotk oVzuT6q+Yg== ) ;; ADDITIONAL SECTION (5 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to a.nic.ch for admin.ch/DNSKEY
	Received 364 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (364 octets) ;; HEADER SECTION ;; id = 12410 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN DS ( 38494 8 2 5399505006649029f0f97d48ff3a9cb5a415e6db1a4155f3154e5a835689a2fa ) admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20220908140826 20220809140259 7960 ch. dl0GZAub1V9Vz3VoXiNqRciEDeUp9FYugjpsmaJleZsfmzRXLki6+1hzgYr2z4//Fw/X4wNLWotk oVzuT6q+Yg== ) ;; ADDITIONAL SECTION (5 records) ins3.admin.ch. 3600 IN A 212.103.72.85 ins2.admin.ch. 3600 IN A 162.23.37.160 ins1.admin.ch. 3600 IN A 162.23.37.16 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone admin.ch

admin.ch

	Checking DS between ch and admin.ch
	Query to f.nic.ch for admin.ch/DS
	Received 231 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (231 octets) ;; HEADER SECTION ;; id = 44777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DS ;; ANSWER SECTION (3 records) admin.ch. 3600 IN DS ( 38494 8 2 5399505006649029f0f97d48ff3a9cb5a415e6db1a4155f3154e5a835689a2fa ) admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20220908140826 20220809140259 7960 ch. dl0GZAub1V9Vz3VoXiNqRciEDeUp9FYugjpsmaJleZsfmzRXLki6+1hzgYr2z4//Fw/X4wNLWotk oVzuT6q+Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for admin.ch in the ch zone
	DS=38494/SHA-256 has algorithm RSASHA256
	DS=64396/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20220908140826 20220809140259 7960 ch. dl0GZAub1V9Vz3VoXiNqRciEDeUp9FYugjpsmaJleZsfmzRXLki6+1hzgYr2z4//Fw/X4wNLWotk oVzuT6q+Yg== )`
	RRSIG=7960 and DNSKEY=7960 verifies the DS RRset
	DS=38494/SHA-256 is now in the chain-of-trust
	DS=64396/SHA-256 is now in the chain-of-trust
	`admin.ch. 3600 IN DS ( 38494 8 2 5399505006649029f0f97d48ff3a9cb5a415e6db1a4155f3154e5a835689a2fa )`
	`admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 )`
	Query to ins1.admin.ch for admin.ch/DNSKEY
	Received 1497 bytes from 162.23.37.16
	;; Response received from 162.23.37.16 (1497 octets) ;; HEADER SECTION ;; id = 1130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (6 records) admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAbUn+b5ZGI5if00vZEkbvI/h3pKO5JS4wNmnrumCOjBqjSYQgS5AC25S/PZ7EEzw4wPf0vnK 3N1GahvACa8AbCd0484LekjiZJybXHdchwVnl2cI9WVj1gsN5aiRFxbmpFxic/kd7tsAiPIgXksM xtum2RfGJAKwOz0mbBYgLskBZExwSurOi2+o751i4ubP6NFVeO1b6kU21mCDI+WqXtPAXdWsaw7z RsY8fUk6UmoV6lbs1YKH5x9MO22zX6SA+/zPRh935KOjZrlZlGcIoFKLB0CGnIdvaKo9fzsSpKS3 BfDO8ZfL2Ec9XwKhbUZpHHIvh7jKH20pizxF1Oe7mUE= ) ; Key ID = 64396 admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAeSysWHuKrbfTL3+Nzp6/3gwyzlhXymK7MglcvAOhOYZe4cHxAmzRkSd4RfGfuSY6nZ5BF2M rkMFNRJzsAeHjrp6A0amHrG03jOAZVD2KfhokoqnbyT9w0pFnQ1iY9Pq0tKOmq0ttDlsRyaKx6Cs T3uW+ednbytX03u0IAY18yS/ ) ; Key ID = 10005 admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAdJb1cF6cHaKYBajUXSQgwCP2L85Y6tgJYCt8TbsXI7cvQYWiIG6tB8QARL8z5GUlim6YkyH Z9lndvefCEoN0ifrBLQ+jK9E6LnqrnNau/e3H7SfISESIhiMKT6FZUGFVmngBUn8lD/syVhaFMgX Ce4dTHflDpAOj9LKSSrE8kzlO9obCGhLftK8oQyNb933cfACSn/l/NhNsnseO2RJjiMD9aj1hxxx lKz2Ahh32LE+PbVEYdD5ex61HKUu3uBU4zw9M425Z6Rxua3HFCQnj8wy2fRB3bV27SC8D1daUrxs Cj6OWjXD5kt9wqguWkcR3ihpZD7nhqSL3UrCg18Bv9U= ) ; Key ID = 38494 admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 10005 admin.ch. 46BbKFvnQS7cnl0l8v/e/njTP+1QTDgB8BeQ1xmGYsUDKNMRdCDMWeHcnaZQd03yDkrKqIDjz0LG 9X4ZqZcYQpj0mR0ShlbxyIafzIIQ3eEg0w8pysoZJ5Cm9TFrvrx7wuaAlgi+fqFtyaUODXXQbPrA rz6jAEgYUE+c938BvXs= ) admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 38494 admin.ch. A+eXTUpRSp7pgpduoOe35s882xI6xZopntBdJKj8VE17u4j1cGNAvysy8iwY6wJR+ErmZcRgyVP9 MvtD/DByeyLY1khXtW8Rbb+MJhGrFeE96eXMPqHqmVk1J7zCSlcjuTRTJ6bU6EFml2juWMSTAFtd Br9HnXeG7LAZftnDBJV1SaysVJw6yCZknjQDHiwT9T+wZu5Mx3b/cJ4naSmb5kU8Q29JKzWUuilV X6FUC2B8aTtG//nXFC3mD5AercnWUUjz8iWAjP6xdQXiFZCAC37putpMyr89ZX6NsdBBlt1ThIAU UMaR6QEZvZGKoeSk75fCd8CCCf64rRPEWgjfWw== ) admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 64396 admin.ch. YSOCQXnpIC1hOMOis9uf5Q8zo71pDkL7w7YcGBwN31WHf76x3PYlxPzS9hqCCwQDJcmvOf4rtJkD TXpfA9uUO5prKqQul2o3sVAlnOO3bgvCIqoylvkDeU5R0ZBXb1Vy0rv0gmA9FOPb+83EMRVWc7tQ lFtu8rBHNUlaVshlI5lWhLBlmOS1y23QJ5rq9SgfYKW6SSMSHsT+JhUA78uABGhtC8M6nK4uQsqN PCGDgYr/smoe479Bxw0722AHTuUXRUbiiE+ztajRGmcBZcRSrxSF3QjcG9XbOorc9JJrUabK/6Sd oXxqkNEELqUd6DYeRxDgvmNNrspAWHz7EOo1+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for admin.ch
	`admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAbUn+b5ZGI5if00vZEkbvI/h3pKO5JS4wNmnrumCOjBqjSYQgS5AC25S/PZ7EEzw4wPf0vnK 3N1GahvACa8AbCd0484LekjiZJybXHdchwVnl2cI9WVj1gsN5aiRFxbmpFxic/kd7tsAiPIgXksM xtum2RfGJAKwOz0mbBYgLskBZExwSurOi2+o751i4ubP6NFVeO1b6kU21mCDI+WqXtPAXdWsaw7z RsY8fUk6UmoV6lbs1YKH5x9MO22zX6SA+/zPRh935KOjZrlZlGcIoFKLB0CGnIdvaKo9fzsSpKS3 BfDO8ZfL2Ec9XwKhbUZpHHIvh7jKH20pizxF1Oe7mUE= ) ; Key ID = 64396`
	`admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAeSysWHuKrbfTL3+Nzp6/3gwyzlhXymK7MglcvAOhOYZe4cHxAmzRkSd4RfGfuSY6nZ5BF2M rkMFNRJzsAeHjrp6A0amHrG03jOAZVD2KfhokoqnbyT9w0pFnQ1iY9Pq0tKOmq0ttDlsRyaKx6Cs T3uW+ednbytX03u0IAY18yS/ ) ; Key ID = 10005`
	`admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAdJb1cF6cHaKYBajUXSQgwCP2L85Y6tgJYCt8TbsXI7cvQYWiIG6tB8QARL8z5GUlim6YkyH Z9lndvefCEoN0ifrBLQ+jK9E6LnqrnNau/e3H7SfISESIhiMKT6FZUGFVmngBUn8lD/syVhaFMgX Ce4dTHflDpAOj9LKSSrE8kzlO9obCGhLftK8oQyNb933cfACSn/l/NhNsnseO2RJjiMD9aj1hxxx lKz2Ahh32LE+PbVEYdD5ex61HKUu3uBU4zw9M425Z6Rxua3HFCQnj8wy2fRB3bV27SC8D1daUrxs Cj6OWjXD5kt9wqguWkcR3ihpZD7nhqSL3UrCg18Bv9U= ) ; Key ID = 38494`
	DNSKEY=64396/SEP is now in the chain-of-trust
	DS=64396/SHA-256 verifies DNSKEY=64396/SEP
	DNSKEY=38494/SEP is now in the chain-of-trust
	DS=38494/SHA-256 verifies DNSKEY=38494/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 10005 admin.ch. 46BbKFvnQS7cnl0l8v/e/njTP+1QTDgB8BeQ1xmGYsUDKNMRdCDMWeHcnaZQd03yDkrKqIDjz0LG 9X4ZqZcYQpj0mR0ShlbxyIafzIIQ3eEg0w8pysoZJ5Cm9TFrvrx7wuaAlgi+fqFtyaUODXXQbPrA rz6jAEgYUE+c938BvXs= )`
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 38494 admin.ch. A+eXTUpRSp7pgpduoOe35s882xI6xZopntBdJKj8VE17u4j1cGNAvysy8iwY6wJR+ErmZcRgyVP9 MvtD/DByeyLY1khXtW8Rbb+MJhGrFeE96eXMPqHqmVk1J7zCSlcjuTRTJ6bU6EFml2juWMSTAFtd Br9HnXeG7LAZftnDBJV1SaysVJw6yCZknjQDHiwT9T+wZu5Mx3b/cJ4naSmb5kU8Q29JKzWUuilV X6FUC2B8aTtG//nXFC3mD5AercnWUUjz8iWAjP6xdQXiFZCAC37putpMyr89ZX6NsdBBlt1ThIAU UMaR6QEZvZGKoeSk75fCd8CCCf64rRPEWgjfWw== )`
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220817154306 20220813150510 64396 admin.ch. YSOCQXnpIC1hOMOis9uf5Q8zo71pDkL7w7YcGBwN31WHf76x3PYlxPzS9hqCCwQDJcmvOf4rtJkD TXpfA9uUO5prKqQul2o3sVAlnOO3bgvCIqoylvkDeU5R0ZBXb1Vy0rv0gmA9FOPb+83EMRVWc7tQ lFtu8rBHNUlaVshlI5lWhLBlmOS1y23QJ5rq9SgfYKW6SSMSHsT+JhUA78uABGhtC8M6nK4uQsqN PCGDgYr/smoe479Bxw0722AHTuUXRUbiiE+ztajRGmcBZcRSrxSF3QjcG9XbOorc9JJrUabK/6Sd oXxqkNEELqUd6DYeRxDgvmNNrspAWHz7EOo1+w== )`
	RRSIG=10005 and DNSKEY=10005 verifies the DNSKEY RRset
	RRSIG=38494 and DNSKEY=38494/SEP verifies the DNSKEY RRset
	RRSIG=64396 and DNSKEY=64396/SEP verifies the DNSKEY RRset
	DNSKEY=10005 is now in the chain-of-trust
	Query to ins1.admin.ch for www.bag.admin.ch/A
	Received 255 bytes from 162.23.37.16
	;; Response received from 162.23.37.16 (255 octets) ;; HEADER SECTION ;; id = 18250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (2 records) www.bag.admin.ch. 3600 IN CNAME d9s8vru4m2rpq.cloudfront.net. www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20220819004525 20220815000903 10005 admin.ch. JFuVLgvRNzeOSPvl1L6EsFlXDlEPbcC8wWtf4HotgM2G1mJVNk60Z7g+8il/wjloYWjg0NOVRT0P cRxYPSHI1pGoyNJmv8lgMHS+FsqKeRmJ19PCiLITm+D6Qpdofz8uXDPohqF1wZZ5dixClz77VrEx tnVhJi2RyiNktScfVqg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ins1.admin.ch is authoritative for www.bag.admin.ch
	Query to ins3.admin.ch for bag.admin.ch/DNSKEY
	Received 515 bytes from 212.103.72.85
	;; Response received from 212.103.72.85 (515 octets) ;; HEADER SECTION ;; id = 37907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bag.admin.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) admin.ch. 600 IN SOA ( ins1.admin.ch. dnsmaster.admin.ch. 11613155 ;serial 10800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) admin.ch. 600 IN RRSIG ( SOA 8 2 3600 20220820032912 20220816022912 10005 admin.ch. tU9rlCNSzAv5+zBHWbZs0uL9SsCXqh0rRLFOdNSUbSqVM1BLpCeD7PgEbtj3mlUNxljRW+GOYxCm wUIitlXO+rOBwahiz2/7ynz3fh8JE4p9EjeJDROF2Yc13ghTeQmjddLOdS8WLDWUpL1OgSywlJst fIZbL+hYPCYyQd5NB7U= ) E1B8O6597IR8VQ03AC8EOP2KTJ62STQB.admin.ch. 600 IN NSEC3 ( 1 0 10 2f6357efed6d6456 e1c18slcprthnggg29m34jcc8oaedm81 A MX TXT RRSIG ) E1B8O6597IR8VQ03AC8EOP2KTJ62STQB.admin.ch. 600 IN RRSIG ( NSEC3 8 3 600 20220818022751 20220815032303 10005 admin.ch. ryE3ttvhy5ctNIlfat4buHchXSkEZWKB56/RW6155S4FB5e6aiPfVcIxkVeCuUFdKQnS1CHCq4z8 o2BALLV8l62AoBiltDzYnswbxPtbKpp7tzroaQGjRXH8YWak4+Rdf/HrBS4ae5vTTkwNGOZd33Pc fDC/F+UQwfFr+Z5uuAc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ins2.admin.ch for www.bag.admin.ch/DNSKEY
	Received 255 bytes from 162.23.37.160
	;; Response received from 162.23.37.160 (255 octets) ;; HEADER SECTION ;; id = 5479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN DNSKEY ;; ANSWER SECTION (2 records) www.bag.admin.ch. 3600 IN CNAME d9s8vru4m2rpq.cloudfront.net. www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20220819004525 20220815000903 10005 admin.ch. JFuVLgvRNzeOSPvl1L6EsFlXDlEPbcC8wWtf4HotgM2G1mJVNk60Z7g+8il/wjloYWjg0NOVRT0P cRxYPSHI1pGoyNJmv8lgMHS+FsqKeRmJ19PCiLITm+D6Qpdofz8uXDPohqF1wZZ5dixClz77VrEx tnVhJi2RyiNktScfVqg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by admin.ch zone
	www.bag.admin.ch is a CNAME to d9s8vru4m2rpq.cloudfront.net
	Found 1 RRSIGs over CNAME RRset
	`www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20220819004525 20220815000903 10005 admin.ch. JFuVLgvRNzeOSPvl1L6EsFlXDlEPbcC8wWtf4HotgM2G1mJVNk60Z7g+8il/wjloYWjg0NOVRT0P cRxYPSHI1pGoyNJmv8lgMHS+FsqKeRmJ19PCiLITm+D6Qpdofz8uXDPohqF1wZZ5dixClz77VrEx tnVhJi2RyiNktScfVqg= )`
	RRSIG=10005 and DNSKEY=10005 verifies the CNAME RRset

	Query to h.root-servers.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 1185 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1185 octets) ;; HEADER SECTION ;; id = 13819 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . AwrU78W3orNdnlxpa0pfiidRYxIgIWPznl4XmLZ5JpL7f72OoZTMqu+nQmOjU0afexaQexkxFjik TUqYitLS2Q+CRNV6PkBU5OBqEk74IjfXq1dUzOJgfQFdD/djs6bHOhHkZiCBhs0W3watIdZRrsE1 1AW92XRjRampJgetSkn6CoSZXQUK+VVjf9IsHxKkzDklNJ1zKqrlLsAZKsPHUYgQkbIjBvXGUXUq icRfX0BPiEV1azQyAbxFbLa/+QsF4qAa1TSUvi19BDVNL+aw3MBgj3m4JdXh8XWg5XFdseSBN4j+ AFKVy23DU3fPx/j7m/FihkrKj38ZXfEaoNv7Ug== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1160 octets) ;; HEADER SECTION ;; id = 35402 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . AwrU78W3orNdnlxpa0pfiidRYxIgIWPznl4XmLZ5JpL7f72OoZTMqu+nQmOjU0afexaQexkxFjik TUqYitLS2Q+CRNV6PkBU5OBqEk74IjfXq1dUzOJgfQFdD/djs6bHOhHkZiCBhs0W3watIdZRrsE1 1AW92XRjRampJgetSkn6CoSZXQUK+VVjf9IsHxKkzDklNJ1zKqrlLsAZKsPHUYgQkbIjBvXGUXUq icRfX0BPiEV1azQyAbxFbLa/+QsF4qAa1TSUvi19BDVNL+aw3MBgj3m4JdXh8XWg5XFdseSBN4j+ AFKVy23DU3fPx/j7m/FihkrKj38ZXfEaoNv7Ug== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to k.root-servers.net for net/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (367 octets) ;; HEADER SECTION ;; id = 30816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . AwrU78W3orNdnlxpa0pfiidRYxIgIWPznl4XmLZ5JpL7f72OoZTMqu+nQmOjU0afexaQexkxFjik TUqYitLS2Q+CRNV6PkBU5OBqEk74IjfXq1dUzOJgfQFdD/djs6bHOhHkZiCBhs0W3watIdZRrsE1 1AW92XRjRampJgetSkn6CoSZXQUK+VVjf9IsHxKkzDklNJ1zKqrlLsAZKsPHUYgQkbIjBvXGUXUq icRfX0BPiEV1azQyAbxFbLa/+QsF4qAa1TSUvi19BDVNL+aw3MBgj3m4JdXh8XWg5XFdseSBN4j+ AFKVy23DU3fPx/j7m/FihkrKj38ZXfEaoNv7Ug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . AwrU78W3orNdnlxpa0pfiidRYxIgIWPznl4XmLZ5JpL7f72OoZTMqu+nQmOjU0afexaQexkxFjik TUqYitLS2Q+CRNV6PkBU5OBqEk74IjfXq1dUzOJgfQFdD/djs6bHOhHkZiCBhs0W3watIdZRrsE1 1AW92XRjRampJgetSkn6CoSZXQUK+VVjf9IsHxKkzDklNJ1zKqrlLsAZKsPHUYgQkbIjBvXGUXUq icRfX0BPiEV1azQyAbxFbLa/+QsF4qAa1TSUvi19BDVNL+aw3MBgj3m4JdXh8XWg5XFdseSBN4j+ AFKVy23DU3fPx/j7m/FihkrKj38ZXfEaoNv7Ug== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (775 octets) ;; HEADER SECTION ;; id = 35674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPuuUVTSKJQoAxi044ExZl7F8F4r9HWKE5hisOw5UQcXEF65G2sVNqf2G3EVz5qJ9kLnpyBys5Y bbSG3tnyaLqJirtPLWLA0zqcgF05AdJtwlzoIdsVG6mhcB0n9mQ2N9Zs3McSSKzIrf0CzRAzEXVp RU3NiRWIf9yDC085RQyHsNODiso7QAGjKMDJQOTs4nHfxuIbCa1AbyFjpdzieF9v ) ; Key ID = 4403 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220827162830 20220812162330 35886 net. EKQIZz2Gkj/uWfCaGZTzKFCSrN4YY+e8LOCJgMDxZv29O1F/W3jCX6vICYBV0QnBgPUnK6PH1Qtb L9AW7kLiQ1I8kQzQpoz9WZp7oG61HOchRrH2fqwBrDofrm+j4rQ0GMCU4sT9ml9OH9oVgyNqwvn3 HrLUIdg/FTee6hbKX92ZlyAv8W0tFLSsBZBc+6nqV4SzrsJndmdtREs+53ILB5x7PCZN2PFHCL+N kdmF0D9u+onDM+FS5lSNRs6kQrj8EU9/C3ecF8DQMJmEGCEruXYVUPeqHhBgZoRQI9z65EiY3QnA pqata9LDAvpnidJ+cu97GGhNI2tS9WhQVedM+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPuuUVTSKJQoAxi044ExZl7F8F4r9HWKE5hisOw5UQcXEF65G2sVNqf2G3EVz5qJ9kLnpyBys5Y bbSG3tnyaLqJirtPLWLA0zqcgF05AdJtwlzoIdsVG6mhcB0n9mQ2N9Zs3McSSKzIrf0CzRAzEXVp RU3NiRWIf9yDC085RQyHsNODiso7QAGjKMDJQOTs4nHfxuIbCa1AbyFjpdzieF9v ) ; Key ID = 4403`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220827162830 20220812162330 35886 net. EKQIZz2Gkj/uWfCaGZTzKFCSrN4YY+e8LOCJgMDxZv29O1F/W3jCX6vICYBV0QnBgPUnK6PH1Qtb L9AW7kLiQ1I8kQzQpoz9WZp7oG61HOchRrH2fqwBrDofrm+j4rQ0GMCU4sT9ml9OH9oVgyNqwvn3 HrLUIdg/FTee6hbKX92ZlyAv8W0tFLSsBZBc+6nqV4SzrsJndmdtREs+53ILB5x7PCZN2PFHCL+N kdmF0D9u+onDM+FS5lSNRs6kQrj8EU9/C3ecF8DQMJmEGCEruXYVUPeqHhBgZoRQI9z65EiY3QnA pqata9LDAvpnidJ+cu97GGhNI2tS9WhQVedM+w== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=4403 is now in the chain-of-trust
	Query to j.gtld-servers.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 759 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (759 octets) ;; HEADER SECTION ;; id = 9985 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220819060819 20220812045819 4403 net. Al4R/PRj7YVoBaDnXIkboKd9F9yMd0dgYF6YY4SqjrYCkvL6ogJ1g8cqJBz0irAU549Is35kBHrf yCvBZeybl/w1ZyIss2poWWDOQuhMPOkgiAjTkrLOw2XW4Ofz3GF7OmrGex4UXIianDl2xC+/L07V 6BTFlqi1pOoVh8tZkWlT715IYvLAzz0d6XbAj1C5uACKk57eTrSejmr5kaA+wg== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220822060504 20220815045504 4403 net. 6ENaKNn7gYYgHL/B2DI3MEga7aWqBH+jj3rpwE4HTf1UtCd1KY7eGT9fTrtS3W+HNRZKczVUpxGn h35YazEFlc7BmZZ9m06UMv77A2mtPRMQhdQZC3KPdM4MdDOAPx+Qv38tbCchjNAMoKuAd8e5oV+b QA2QuDHkYTSKDc/KeGB0xuY3WixidfpSHiiqmq82CUmnUuxV85yzMK0n7IdZxg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gtld-servers.net for cloudfront.net/DNSKEY
	Received 745 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (745 octets) ;; HEADER SECTION ;; id = 24464 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220819060819 20220812045819 4403 net. Al4R/PRj7YVoBaDnXIkboKd9F9yMd0dgYF6YY4SqjrYCkvL6ogJ1g8cqJBz0irAU549Is35kBHrf yCvBZeybl/w1ZyIss2poWWDOQuhMPOkgiAjTkrLOw2XW4Ofz3GF7OmrGex4UXIianDl2xC+/L07V 6BTFlqi1pOoVh8tZkWlT715IYvLAzz0d6XbAj1C5uACKk57eTrSejmr5kaA+wg== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220822060504 20220815045504 4403 net. 6ENaKNn7gYYgHL/B2DI3MEga7aWqBH+jj3rpwE4HTf1UtCd1KY7eGT9fTrtS3W+HNRZKczVUpxGn h35YazEFlc7BmZZ9m06UMv77A2mtPRMQhdQZC3KPdM4MdDOAPx+Qv38tbCchjNAMoKuAd8e5oV+b QA2QuDHkYTSKDc/KeGB0xuY3WixidfpSHiiqmq82CUmnUuxV85yzMK0n7IdZxg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to l.gtld-servers.net for cloudfront.net/DS
	Received 860 bytes from 192.41.162.30
	;; Response received from 192.41.162.30 (860 octets) ;; HEADER SECTION ;; id = 28204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220819060819 20220812045819 4403 net. Al4R/PRj7YVoBaDnXIkboKd9F9yMd0dgYF6YY4SqjrYCkvL6ogJ1g8cqJBz0irAU549Is35kBHrf yCvBZeybl/w1ZyIss2poWWDOQuhMPOkgiAjTkrLOw2XW4Ofz3GF7OmrGex4UXIianDl2xC+/L07V 6BTFlqi1pOoVh8tZkWlT715IYvLAzz0d6XbAj1C5uACKk57eTrSejmr5kaA+wg== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1660620638 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20220823033038 20220816022038 4403 net. Ilpg/kkTzJIBR1v56Z2tp/FrAH2AKrpHrBT5b3eI83UjohIOP0M9nLCNHH1s6BmTMty9JCaUnPcs hbZ6Bm5TfBPUHMx6LuRAF/zKU4tukdHHSNQvIVvwzPGXoXVPEVa9aX0FnJ2Ay8EO5aOOgCNzwZAO rwpVGNvAekhb4awwRh80oAeEKHl2u6bOxk7TFh5iMVx6OQDxOOSUKFK2C9xmOA== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20220822060504 20220815045504 4403 net. 6ENaKNn7gYYgHL/B2DI3MEga7aWqBH+jj3rpwE4HTf1UtCd1KY7eGT9fTrtS3W+HNRZKczVUpxGn h35YazEFlc7BmZZ9m06UMv77A2mtPRMQhdQZC3KPdM4MdDOAPx+Qv38tbCchjNAMoKuAd8e5oV+b QA2QuDHkYTSKDc/KeGB0xuY3WixidfpSHiiqmq82CUmnUuxV85yzMK0n7IdZxg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cloudfront.net in the net zone
	Query to ns-1597.awsdns-07.co.uk for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.198.61
	;; Response received from 205.251.198.61 (110 octets) ;; HEADER SECTION ;; id = 23902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1306.awsdns-35.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 193 bytes from 205.251.197.26
	;; Response received from 205.251.197.26 (193 octets) ;; HEADER SECTION ;; id = 61356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1306.awsdns-35.org for d9s8vru4m2rpq.cloudfront.net/DNSKEY
	Received 193 bytes from 205.251.197.26
	;; Response received from 205.251.197.26 (193 octets) ;; HEADER SECTION ;; id = 52400 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone d9s8vru4m2rpq.cloudfront.net

d9s8vru4m2rpq.cloudfront.net

	Checking DS between cloudfront.net and d9s8vru4m2rpq.cloudfront.net
	Query to ns-1597.awsdns-07.co.uk for d9s8vru4m2rpq.cloudfront.net/DS
	Received 124 bytes from 205.251.198.61
	;; Response received from 205.251.198.61 (124 octets) ;; HEADER SECTION ;; id = 15568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for d9s8vru4m2rpq.cloudfront.net in the cloudfront.net zone
	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/DNSKEY
	Received 144 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (144 octets) ;; HEADER SECTION ;; id = 27921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (257 octets) ;; HEADER SECTION ;; id = 32435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-20.awsdns-02.com is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (254 octets) ;; HEADER SECTION ;; id = 58517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (254 octets) ;; HEADER SECTION ;; id = 869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (254 octets) ;; HEADER SECTION ;; id = 2189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (257 octets) ;; HEADER SECTION ;; id = 40936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.96
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.44
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (257 octets) ;; HEADER SECTION ;; id = 57940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1855.awsdns-39.co.uk is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (257 octets) ;; HEADER SECTION ;; id = 31856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.44
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.96
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (257 octets) ;; HEADER SECTION ;; id = 2833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-924.awsdns-51.net is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (257 octets) ;; HEADER SECTION ;; id = 63592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.44
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.96
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (257 octets) ;; HEADER SECTION ;; id = 20752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1464.awsdns-55.org is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (257 octets) ;; HEADER SECTION ;; id = 10147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.89 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.96 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.44 d9s8vru4m2rpq.cloudfront.net. 60 IN A 52.85.92.113 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.96
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.44
	d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bag.admin.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: