DNSSEC Analyzer - www.bag.admin.ch

Domain Name:

Time: 2022-11-28 17:46:56 UTC, NTP stratum 16

Analyzing DNSSEC problems for www.bag.admin.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 43672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to a.root-servers.net for www.bag.admin.ch/A
	Received 684 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (684 octets) ;; HEADER SECTION ;; id = 2766 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to e.root-servers.net for ch/DNSKEY
	Received 670 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (670 octets) ;; HEADER SECTION ;; id = 28101 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN A 194.0.25.39 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to b.root-servers.net for ch/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 63786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ch in the . zone
	DS=11648/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . O6YLW9CyZpn9EL7EbyFDho8ISDNUxAhdUV0aRFjNRRKeSSFY/x1sSfb/wyrV0UXrossv6q/7SXGq u6ZiiCY52k+x+VeJBkyWrtpywt5JxsCL9tAWQulfl9pL4AWvm9+1tUdq/t+RTctX85Q58fFOL5tC jxAE/FXHx6bqbvV2Eu9eumlxSU3VHR+y8BvZVCfxSZ4FIjBskhcO8R+HQ2I6dUrLdpzxU0Gf2Rtb z3/etKEoLOxU5PPffSKnHY3U3+mjzaAc8pxEb/Yk7DpMkUwBMK10GenG4sr2KS3jdd3jhiAdc2B5 vUfkhiN3xgAYi1FL3dNRn46QWRS5w0Hjlj8ZKQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=11648/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 11648 13 2 761408e4182706f4daed906f81b5b1677fe1752c2b0794ff3f262fa1ef760519 )`
	Query to f.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (369 octets) ;; HEADER SECTION ;; id = 36838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 sm04bixp52VrqHXrIEPp1sYUMmFVsQht5wcRcy6YowRi2VZ3ZuKTgbSq86Hi35ECu5Q3exHBm6V/ e1fId+gPuQ== ) ; Key ID = 56913 ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648 ch. 86400 IN DNSKEY ( 256 3 13 MbgLhfGjTaKk6LnRGr8YZNdfmYS2Fe6BbUMTeQ6tKL5pBGmqI+bYRGo6tYaBRP1d9MJ7YxisPQvN 1j6M+8mihw== ) ; Key ID = 48609 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20221216100909 20221031090909 11648 ch. ZMITjfVh2GRktmdGKs7KwE6FRMcmR+psQy4PTHmvCbt+tIt+koAYOOAkZhFz1GcDFde2tIk8JxQB jvDltDJdmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 sm04bixp52VrqHXrIEPp1sYUMmFVsQht5wcRcy6YowRi2VZ3ZuKTgbSq86Hi35ECu5Q3exHBm6V/ e1fId+gPuQ== ) ; Key ID = 56913`
	`ch. 86400 IN DNSKEY ( 257 3 13 evhcGJrOwwgDGMWb07YZvLA7/sKERs52Fgk/zp24B+nGwp4HEsC7j84DjtDf1q8EWOw4ADd3NAD3 F08tMW6uTA== ) ; Key ID = 11648`
	`ch. 86400 IN DNSKEY ( 256 3 13 MbgLhfGjTaKk6LnRGr8YZNdfmYS2Fe6BbUMTeQ6tKL5pBGmqI+bYRGo6tYaBRP1d9MJ7YxisPQvN 1j6M+8mihw== ) ; Key ID = 48609`
	DNSKEY=11648/SEP is now in the chain-of-trust
	DS=11648/SHA-256 verifies DNSKEY=11648/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20221216100909 20221031090909 11648 ch. ZMITjfVh2GRktmdGKs7KwE6FRMcmR+psQy4PTHmvCbt+tIt+koAYOOAkZhFz1GcDFde2tIk8JxQB jvDltDJdmw== )`
	RRSIG=11648 and DNSKEY=11648/SEP verifies the DNSKEY RRset
	DNSKEY=56913 is now in the chain-of-trust
	DNSKEY=48609 is now in the chain-of-trust
	Query to a.nic.ch for www.bag.admin.ch/A
	Received 332 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (332 octets) ;; HEADER SECTION ;; id = 12124 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20221218173719 20221124123002 48609 ch. Pb1uMqsnPQ/ITBv6he2PYdCb3joLPReVg266Keixofs23hydvaFNqmVoUDQOAnLjK9f3T6ElrSpx ZEpRv69+gQ== ) ;; ADDITIONAL SECTION (5 records) ins3.admin.ch. 3600 IN A 212.103.72.85 ins2.admin.ch. 3600 IN A 162.23.37.160 ins1.admin.ch. 3600 IN A 162.23.37.16 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.nic.ch for admin.ch/DNSKEY
	Received 316 bytes from 194.0.25.39
	;; Response received from 194.0.25.39 (316 octets) ;; HEADER SECTION ;; id = 62033 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) admin.ch. 3600 IN NS ins1.admin.ch. admin.ch. 3600 IN NS ins2.admin.ch. admin.ch. 3600 IN NS ins3.admin.ch. admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20221218173719 20221124123002 48609 ch. Pb1uMqsnPQ/ITBv6he2PYdCb3joLPReVg266Keixofs23hydvaFNqmVoUDQOAnLjK9f3T6ElrSpx ZEpRv69+gQ== ) ;; ADDITIONAL SECTION (5 records) ins1.admin.ch. 3600 IN A 162.23.37.16 ins2.admin.ch. 3600 IN A 162.23.37.160 ins3.admin.ch. 3600 IN A 212.103.72.85 ins3.admin.ch. 3600 IN AAAA 2a00:c38:2:28:0:ffff:d467:4855 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone admin.ch

admin.ch

	Checking DS between ch and admin.ch
	Query to a.nic.ch for admin.ch/DS
	Received 183 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (183 octets) ;; HEADER SECTION ;; id = 3842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DS ;; ANSWER SECTION (2 records) admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 ) admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20221218173719 20221124123002 48609 ch. Pb1uMqsnPQ/ITBv6he2PYdCb3joLPReVg266Keixofs23hydvaFNqmVoUDQOAnLjK9f3T6ElrSpx ZEpRv69+gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for admin.ch in the ch zone
	DS=64396/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`admin.ch. 3600 IN RRSIG ( DS 13 2 3600 20221218173719 20221124123002 48609 ch. Pb1uMqsnPQ/ITBv6he2PYdCb3joLPReVg266Keixofs23hydvaFNqmVoUDQOAnLjK9f3T6ElrSpx ZEpRv69+gQ== )`
	RRSIG=48609 and DNSKEY=48609 verifies the DS RRset
	DS=64396/SHA-256 is now in the chain-of-trust
	`admin.ch. 3600 IN DS ( 64396 8 2 fbbd0a89c95f0d018e9c2a88af0eefb6fac6628d438a91fd357aba04851924f2 )`
	Query to ins1.admin.ch for admin.ch/DNSKEY
	Received 1073 bytes from 162.23.37.16
	;; Response received from 162.23.37.16 (1073 octets) ;; HEADER SECTION ;; id = 12628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; admin.ch. IN DNSKEY ;; ANSWER SECTION (5 records) admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAbUn+b5ZGI5if00vZEkbvI/h3pKO5JS4wNmnrumCOjBqjSYQgS5AC25S/PZ7EEzw4wPf0vnK 3N1GahvACa8AbCd0484LekjiZJybXHdchwVnl2cI9WVj1gsN5aiRFxbmpFxic/kd7tsAiPIgXksM xtum2RfGJAKwOz0mbBYgLskBZExwSurOi2+o751i4ubP6NFVeO1b6kU21mCDI+WqXtPAXdWsaw7z RsY8fUk6UmoV6lbs1YKH5x9MO22zX6SA+/zPRh935KOjZrlZlGcIoFKLB0CGnIdvaKo9fzsSpKS3 BfDO8ZfL2Ec9XwKhbUZpHHIvh7jKH20pizxF1Oe7mUE= ) ; Key ID = 64396 admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAZpeDCbiGlcL8wseEIqvVC9cu2m89VyDqk5zQgHcUssLWA/qXDEdi2gILcTLcP3eNVkBaC1X dkbx2sAw4Eca5W+uhSMg19eiZ2M0eA003RlL/fnJIKPcjNUvQ8kgOFYpfenuaRADs3gViyfAC36O agpQO3Bi8e614ZFhJDCfuhz9 ) ; Key ID = 42369 admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAbFyVtcLyILEBjjYYcVi2Nrp4Na+Dd2Xi6OwesP8pZVKzDiwoTDrCNf1bnR/plCtZBqn4l87 yMpJmc5gnLpKdC95lwVyB5GGmi03eyMnXc8MiMrMlOIXx8moeF7MDEDc388bSM5OKlPeULSDZEI3 gQu6izR1Uq4uxQ1RwfLgwhpD ) ; Key ID = 63759 admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201150418 20221127142620 63759 admin.ch. rH2leL9SaRMwW1NZRlPOXi4od0yXRCAz/lwFYxCedgbL0okqgHs/gsxeRh6QN0ySs5SGwOgAEWFz Kk279Mub7bvVNmg3nhOBsqBnImCdq83EQJBsjYrPDJl69DYVZECH8VIst/Z5ouKVFsbaxCAK4EO/ t8WaajE8jmvHI9xoyno= ) admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201150418 20221127142620 64396 admin.ch. kRJEteTXIP3vMsRPg7Gq2QE3kmlIRsaSXDCvdakUsK6Ie/gn5RMwVB3wS6uGNkJhyuN4RrNi1gun dl5cX4HrcFHPxBjXyIB/44XSkfGYUNn2l0wquVbqYAQyOVMNr+Sd2zrhPw11xCIrcjaJnEqcOCm+ kKnwxhPosIHSwjErwDq269UXJJU5y3nPJKmMImUOiyO1qIbSCdqw+IoBrv5dnlUHEATy/a4PJo3C Q9asRzrzTfKyF6sCJCzuCJfIPkvd9oYLozCMnXkimsesrQ2BYs1fFzy+rsC329OZyFlqq5dXNmW6 njwnCZEA3ZURRDoTwx9AFC2BtpbpSEea9x/yFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for admin.ch
	`admin.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAbUn+b5ZGI5if00vZEkbvI/h3pKO5JS4wNmnrumCOjBqjSYQgS5AC25S/PZ7EEzw4wPf0vnK 3N1GahvACa8AbCd0484LekjiZJybXHdchwVnl2cI9WVj1gsN5aiRFxbmpFxic/kd7tsAiPIgXksM xtum2RfGJAKwOz0mbBYgLskBZExwSurOi2+o751i4ubP6NFVeO1b6kU21mCDI+WqXtPAXdWsaw7z RsY8fUk6UmoV6lbs1YKH5x9MO22zX6SA+/zPRh935KOjZrlZlGcIoFKLB0CGnIdvaKo9fzsSpKS3 BfDO8ZfL2Ec9XwKhbUZpHHIvh7jKH20pizxF1Oe7mUE= ) ; Key ID = 64396`
	`admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAZpeDCbiGlcL8wseEIqvVC9cu2m89VyDqk5zQgHcUssLWA/qXDEdi2gILcTLcP3eNVkBaC1X dkbx2sAw4Eca5W+uhSMg19eiZ2M0eA003RlL/fnJIKPcjNUvQ8kgOFYpfenuaRADs3gViyfAC36O agpQO3Bi8e614ZFhJDCfuhz9 ) ; Key ID = 42369`
	`admin.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAbFyVtcLyILEBjjYYcVi2Nrp4Na+Dd2Xi6OwesP8pZVKzDiwoTDrCNf1bnR/plCtZBqn4l87 yMpJmc5gnLpKdC95lwVyB5GGmi03eyMnXc8MiMrMlOIXx8moeF7MDEDc388bSM5OKlPeULSDZEI3 gQu6izR1Uq4uxQ1RwfLgwhpD ) ; Key ID = 63759`
	DNSKEY=64396/SEP is now in the chain-of-trust
	DS=64396/SHA-256 verifies DNSKEY=64396/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201150418 20221127142620 63759 admin.ch. rH2leL9SaRMwW1NZRlPOXi4od0yXRCAz/lwFYxCedgbL0okqgHs/gsxeRh6QN0ySs5SGwOgAEWFz Kk279Mub7bvVNmg3nhOBsqBnImCdq83EQJBsjYrPDJl69DYVZECH8VIst/Z5ouKVFsbaxCAK4EO/ t8WaajE8jmvHI9xoyno= )`
	`admin.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201150418 20221127142620 64396 admin.ch. kRJEteTXIP3vMsRPg7Gq2QE3kmlIRsaSXDCvdakUsK6Ie/gn5RMwVB3wS6uGNkJhyuN4RrNi1gun dl5cX4HrcFHPxBjXyIB/44XSkfGYUNn2l0wquVbqYAQyOVMNr+Sd2zrhPw11xCIrcjaJnEqcOCm+ kKnwxhPosIHSwjErwDq269UXJJU5y3nPJKmMImUOiyO1qIbSCdqw+IoBrv5dnlUHEATy/a4PJo3C Q9asRzrzTfKyF6sCJCzuCJfIPkvd9oYLozCMnXkimsesrQ2BYs1fFzy+rsC329OZyFlqq5dXNmW6 njwnCZEA3ZURRDoTwx9AFC2BtpbpSEea9x/yFw== )`
	RRSIG=63759 and DNSKEY=63759 verifies the DNSKEY RRset
	RRSIG=64396 and DNSKEY=64396/SEP verifies the DNSKEY RRset
	DNSKEY=42369 is now in the chain-of-trust
	DNSKEY=63759 is now in the chain-of-trust
	Query to ins1.admin.ch for www.bag.admin.ch/A
	Received 255 bytes from 162.23.37.16
	;; Response received from 162.23.37.16 (255 octets) ;; HEADER SECTION ;; id = 35023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN A ;; ANSWER SECTION (2 records) www.bag.admin.ch. 3600 IN CNAME d9s8vru4m2rpq.cloudfront.net. www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20221201074744 20221127072824 63759 admin.ch. eb/+QXslZYgVrOg1R7XdJZjxg1GpkKd4mGHWhASm/wLexRTdL6/JMk1PBHZghGX+rOmHcKEr9Gle +iV5fa77ym0pyiaqLYwRbpgNKPE9GGwi6m0ZVzk+VwytUNy0vZaQ+NlEdnEihVZZTyz7LX/HeeMv YyZ3Yj6QIB7RDFRN1wM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ins1.admin.ch is authoritative for www.bag.admin.ch
	Query to ins3.admin.ch for bag.admin.ch/DNSKEY
	Received 515 bytes from 212.103.72.85
	;; Response received from 212.103.72.85 (515 octets) ;; HEADER SECTION ;; id = 18879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bag.admin.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) admin.ch. 600 IN SOA ( ins1.admin.ch. dnsmaster.admin.ch. 12849443 ;serial 10800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) admin.ch. 600 IN RRSIG ( SOA 8 2 3600 20221202174618 20221128164618 63759 admin.ch. KAEewYZ0xKO1M8T0VZZKr5KfA6LFh2G0LejHXjtpz7ZxNkXrCV1YukW+4dHrfqzNYbVWz6aRDxQo HG5wvRJxVHJB0lu4Kbcm21ENaBgvgPLn1JDtG1UKurgP9TA6jLxmrXKxuhs9OvXlz+i+qSPpR7QC BP12GQLaSL6VvXiUfP0= ) F81GPF79SIU59MVJOUMI6T55JAHPLOJU.admin.ch. 600 IN NSEC3 ( 1 0 10 93503f9c9df806ce f82uc8apegmln3l4s1fp7m5j8ilsth0d A MX TXT RRSIG ) F81GPF79SIU59MVJOUMI6T55JAHPLOJU.admin.ch. 600 IN RRSIG ( NSEC3 8 3 600 20221202135248 20221128161841 63759 admin.ch. mi2rXgFJUnseKXT9Td0bcWwkAJZHcv/JdIO1uaj7h7z+otP9IIgVeRMLiHtflD4DKaLPMRJD0rr3 wPJ/HGcmM4OMSsoa7xLV5LW79144x/vl4x4ZQOLa3hBg1k116QUTflPnGtS6dnbSPypWWmmQY6xn f1ygMIqTE+Pf7DmE85w= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ins1.admin.ch for www.bag.admin.ch/DNSKEY
	Received 255 bytes from 162.23.37.16
	;; Response received from 162.23.37.16 (255 octets) ;; HEADER SECTION ;; id = 55739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.bag.admin.ch. IN DNSKEY ;; ANSWER SECTION (2 records) www.bag.admin.ch. 3600 IN CNAME d9s8vru4m2rpq.cloudfront.net. www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20221201074744 20221127072824 63759 admin.ch. eb/+QXslZYgVrOg1R7XdJZjxg1GpkKd4mGHWhASm/wLexRTdL6/JMk1PBHZghGX+rOmHcKEr9Gle +iV5fa77ym0pyiaqLYwRbpgNKPE9GGwi6m0ZVzk+VwytUNy0vZaQ+NlEdnEihVZZTyz7LX/HeeMv YyZ3Yj6QIB7RDFRN1wM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by admin.ch zone
	www.bag.admin.ch is a CNAME to d9s8vru4m2rpq.cloudfront.net
	Found 1 RRSIGs over CNAME RRset
	`www.bag.admin.ch. 3600 IN RRSIG ( CNAME 8 4 3600 20221201074744 20221127072824 63759 admin.ch. eb/+QXslZYgVrOg1R7XdJZjxg1GpkKd4mGHWhASm/wLexRTdL6/JMk1PBHZghGX+rOmHcKEr9Gle +iV5fa77ym0pyiaqLYwRbpgNKPE9GGwi6m0ZVzk+VwytUNy0vZaQ+NlEdnEihVZZTyz7LX/HeeMv YyZ3Yj6QIB7RDFRN1wM= )`
	RRSIG=63759 and DNSKEY=63759 verifies the CNAME RRset

	Query to k.root-servers.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 1185 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1185 octets) ;; HEADER SECTION ;; id = 47101 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for net/DNSKEY
	Received 1163 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1163 octets) ;; HEADER SECTION ;; id = 22407 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to c.root-servers.net for net/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (367 octets) ;; HEADER SECTION ;; id = 30939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to d.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (775 octets) ;; HEADER SECTION ;; id = 7534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQO0wh8cBZHDse9ep/3UHa7hA+7BCTcAY9A7aZzaqZtbmsOP3FFxo1F92oQOklU3uFxzAUbQxKGH ud1DxAV4u1ZUJgcrfSLbK2mC3tIdw7hWASqPl5KgWFnpO77zoEdbQmI8Jwjx56DiXDVq2fdUV8M8 hEAwza9y0unybkwiv89y2mpfljdnmRkJttBGFnqdgI4Un+UZoop40TOBVAc/nl7r ) ; Key ID = 57635 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205172830 20221120172330 35886 net. XaovTwC0KkKzacsCqG/HIicgPAiB4Mx1Yzo5dMElGRth8Jv08DVEJXRZFd/vgQvwrC+5F83AlV+y KFkff4qiMrTrgYmRpUYiKEZjquDhsCMwQdr+z2zTvNKVBBYHGW3ppzWSe1LPjASwUtQcSyAvjYgS G76VqU0A+xnP63AW7k9RjcVhR+9oimtYuiOLXv1Ar/YYckQE3sX3MvHuobTPuPiTf3U+WPQ72/o3 ipfThyucIs8G3OCwXgr7WZ14SL2pHk8Sgj+klwpHVabV+goPOLKRHG3vIXlWU8Zg4SULhTfHBFEU NAntCgyBz+gOzV4CT88XAx3Chy/WhEYowNAcnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQO0wh8cBZHDse9ep/3UHa7hA+7BCTcAY9A7aZzaqZtbmsOP3FFxo1F92oQOklU3uFxzAUbQxKGH ud1DxAV4u1ZUJgcrfSLbK2mC3tIdw7hWASqPl5KgWFnpO77zoEdbQmI8Jwjx56DiXDVq2fdUV8M8 hEAwza9y0unybkwiv89y2mpfljdnmRkJttBGFnqdgI4Un+UZoop40TOBVAc/nl7r ) ; Key ID = 57635`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205172830 20221120172330 35886 net. XaovTwC0KkKzacsCqG/HIicgPAiB4Mx1Yzo5dMElGRth8Jv08DVEJXRZFd/vgQvwrC+5F83AlV+y KFkff4qiMrTrgYmRpUYiKEZjquDhsCMwQdr+z2zTvNKVBBYHGW3ppzWSe1LPjASwUtQcSyAvjYgS G76VqU0A+xnP63AW7k9RjcVhR+9oimtYuiOLXv1Ar/YYckQE3sX3MvHuobTPuPiTf3U+WPQ72/o3 ipfThyucIs8G3OCwXgr7WZ14SL2pHk8Sgj+klwpHVabV+goPOLKRHG3vIXlWU8Zg4SULhTfHBFEU NAntCgyBz+gOzV4CT88XAx3Chy/WhEYowNAcnA== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=57635 is now in the chain-of-trust
	Query to i.gtld-servers.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 759 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (759 octets) ;; HEADER SECTION ;; id = 6065 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221204072227 20221127061227 57635 net. MwyFf1FN01ZPrWGQv2Zr1fklXiq0go3JMwC8TfTm5NdOt6o62mC3Bt6qabQgj0CsXLszhJi5urpX 2guNGl5vR+KzynCYfS+w2kx/lfwe0z6++6X/PtFm5HduCf70bdrLqnN/S8yl5WxDPXSmS9BU9okr Wkm1hgfAEAcX1qPjuEdYZTFUunLe2OKdreqq6viovDqJi6amD8HH7hTZSUuzDg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gtld-servers.net for cloudfront.net/DNSKEY
	Received 745 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (745 octets) ;; HEADER SECTION ;; id = 58603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221204072227 20221127061227 57635 net. MwyFf1FN01ZPrWGQv2Zr1fklXiq0go3JMwC8TfTm5NdOt6o62mC3Bt6qabQgj0CsXLszhJi5urpX 2guNGl5vR+KzynCYfS+w2kx/lfwe0z6++6X/PtFm5HduCf70bdrLqnN/S8yl5WxDPXSmS9BU9okr Wkm1hgfAEAcX1qPjuEdYZTFUunLe2OKdreqq6viovDqJi6amD8HH7hTZSUuzDg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to c.gtld-servers.net for cloudfront.net/DS
	Received 860 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (860 octets) ;; HEADER SECTION ;; id = 15854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1669657598 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20221205174638 20221128163638 57635 net. MRD+RC/M0qfwgV1AjL1AkwcDDVfEfr5GX7oNnyk5BTTpsc0/ugkfbstgRiAked+5cxVC20Z4F33X bN96JlEv0xTtOkFfdM63VnDyGrB0Qrh7QSGJdybfFTdHE08n0qJhI0I4ojgWzjCJzCoZmXiHs9QS tKOWcTDZIKcEFzhXiBLVkBsSDNI4x2EqTQxGDWcALUy4ckVNhFrP1d93BP/ylg== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadgoj3kk8saql4te1npvm0esegd5pm5 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221204072227 20221127061227 57635 net. MwyFf1FN01ZPrWGQv2Zr1fklXiq0go3JMwC8TfTm5NdOt6o62mC3Bt6qabQgj0CsXLszhJi5urpX 2guNGl5vR+KzynCYfS+w2kx/lfwe0z6++6X/PtFm5HduCf70bdrLqnN/S8yl5WxDPXSmS9BU9okr Wkm1hgfAEAcX1qPjuEdYZTFUunLe2OKdreqq6viovDqJi6amD8HH7hTZSUuzDg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cloudfront.net in the net zone
	Query to ns-1597.awsdns-07.co.uk for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.198.61
	;; Response received from 205.251.198.61 (110 octets) ;; HEADER SECTION ;; id = 37255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1306.awsdns-35.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 193 bytes from 205.251.197.26
	;; Response received from 205.251.197.26 (193 octets) ;; HEADER SECTION ;; id = 10529 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1597.awsdns-07.co.uk for d9s8vru4m2rpq.cloudfront.net/DNSKEY
	Received 193 bytes from 205.251.198.61
	;; Response received from 205.251.198.61 (193 octets) ;; HEADER SECTION ;; id = 41955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 1831 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone d9s8vru4m2rpq.cloudfront.net

d9s8vru4m2rpq.cloudfront.net

	Checking DS between cloudfront.net and d9s8vru4m2rpq.cloudfront.net
	Query to ns-418.awsdns-52.com for d9s8vru4m2rpq.cloudfront.net/DS
	Received 124 bytes from 205.251.193.162
	;; Response received from 205.251.193.162 (124 octets) ;; HEADER SECTION ;; id = 52307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for d9s8vru4m2rpq.cloudfront.net in the cloudfront.net zone
	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/DNSKEY
	Received 144 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (144 octets) ;; HEADER SECTION ;; id = 35363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (257 octets) ;; HEADER SECTION ;; id = 30467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1464.awsdns-55.org is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (254 octets) ;; HEADER SECTION ;; id = 6267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (254 octets) ;; HEADER SECTION ;; id = 55895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/SOA
	Received 254 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (254 octets) ;; HEADER SECTION ;; id = 55295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d9s8vru4m2rpq.cloudfront.net. 60 IN SOA ( ns-1855.awsdns-39.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1464.awsdns-55.org for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.197.184
	;; Response received from 205.251.197.184 (257 octets) ;; HEADER SECTION ;; id = 38026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.14
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.87
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.70
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.102
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (257 octets) ;; HEADER SECTION ;; id = 11070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-20.awsdns-02.com is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-20.awsdns-02.com for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.192.20
	;; Response received from 205.251.192.20 (257 octets) ;; HEADER SECTION ;; id = 51502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.102
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.87
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.70
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.14
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (257 octets) ;; HEADER SECTION ;; id = 65294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1855.awsdns-39.co.uk is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-1855.awsdns-39.co.uk for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.199.63
	;; Response received from 205.251.199.63 (257 octets) ;; HEADER SECTION ;; id = 58412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.70
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.87
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.102
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.14
	No RRSIGs found

d9s8vru4m2rpq.cloudfront.net

	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (257 octets) ;; HEADER SECTION ;; id = 8758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-924.awsdns-51.net is authoritative for d9s8vru4m2rpq.cloudfront.net
	Query to ns-924.awsdns-51.net for d9s8vru4m2rpq.cloudfront.net/A
	Received 257 bytes from 205.251.195.156
	;; Response received from 205.251.195.156 (257 octets) ;; HEADER SECTION ;; id = 57004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d9s8vru4m2rpq.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.102 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.14 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.87 d9s8vru4m2rpq.cloudfront.net. 60 IN A 99.86.229.70 ;; AUTHORITY SECTION (4 records) d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1464.awsdns-55.org. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-1855.awsdns-39.co.uk. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-20.awsdns-02.com. d9s8vru4m2rpq.cloudfront.net. 172800 IN NS ns-924.awsdns-51.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.102
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.14
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.87
	d9s8vru4m2rpq.cloudfront.net A RR has value 99.86.229.70
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bag.admin.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: