DNSSEC Analyzer - www.cssz.cz

Domain Name:

Time: 2023-10-02 21:08:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.cssz.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (1139 octets) ;; HEADER SECTION ;; id = 45663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to e.root-servers.net for www.cssz.cz/A
	Received 622 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (622 octets) ;; HEADER SECTION ;; id = 41817 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . IR3dS1i6yB0kgoqTyYNjh2v3XSoyYh9A2L/fpW21zqgMs3oGhui4YTas69+W/d9dUCGWYeo839a7 o8CvXIlQ9qxQNLapxuX2BIhi1CW8FXibMh07xA4K1k8XGmZrmpPSfLFwKqdZ/T6EOdtfXmPT5HvN 8Xw3ankKmoJyweB0BQQ8SXkpihU5YLX+9EPqqZ8TKRAeg5mIffG99OCQ3F2mkhU7vRUBPWrsax8E DmUG6Lgni3NNsMB2PV77V/RNB6IsFQehBGVpTC2cPETkTMMcxQYRtK8MgfjQTuZYv/UhbOtJwwyx ZsNmry0DAGck3iRTCgnQ1xI7h1IoQXDy6hccvg== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for cz/DNSKEY
	Received 615 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (615 octets) ;; HEADER SECTION ;; id = 54832 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . IR3dS1i6yB0kgoqTyYNjh2v3XSoyYh9A2L/fpW21zqgMs3oGhui4YTas69+W/d9dUCGWYeo839a7 o8CvXIlQ9qxQNLapxuX2BIhi1CW8FXibMh07xA4K1k8XGmZrmpPSfLFwKqdZ/T6EOdtfXmPT5HvN 8Xw3ankKmoJyweB0BQQ8SXkpihU5YLX+9EPqqZ8TKRAeg5mIffG99OCQ3F2mkhU7vRUBPWrsax8E DmUG6Lgni3NNsMB2PV77V/RNB6IsFQehBGVpTC2cPETkTMMcxQYRtK8MgfjQTuZYv/UhbOtJwwyx ZsNmry0DAGck3iRTCgnQ1xI7h1IoQXDy6hccvg== ) ;; ADDITIONAL SECTION (9 records) d.ns.nic.cz. 172800 IN A 193.29.206.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 a.ns.nic.cz. 172800 IN A 194.0.12.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to k.root-servers.net for cz/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (366 octets) ;; HEADER SECTION ;; id = 47968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . IR3dS1i6yB0kgoqTyYNjh2v3XSoyYh9A2L/fpW21zqgMs3oGhui4YTas69+W/d9dUCGWYeo839a7 o8CvXIlQ9qxQNLapxuX2BIhi1CW8FXibMh07xA4K1k8XGmZrmpPSfLFwKqdZ/T6EOdtfXmPT5HvN 8Xw3ankKmoJyweB0BQQ8SXkpihU5YLX+9EPqqZ8TKRAeg5mIffG99OCQ3F2mkhU7vRUBPWrsax8E DmUG6Lgni3NNsMB2PV77V/RNB6IsFQehBGVpTC2cPETkTMMcxQYRtK8MgfjQTuZYv/UhbOtJwwyx ZsNmry0DAGck3iRTCgnQ1xI7h1IoQXDy6hccvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . IR3dS1i6yB0kgoqTyYNjh2v3XSoyYh9A2L/fpW21zqgMs3oGhui4YTas69+W/d9dUCGWYeo839a7 o8CvXIlQ9qxQNLapxuX2BIhi1CW8FXibMh07xA4K1k8XGmZrmpPSfLFwKqdZ/T6EOdtfXmPT5HvN 8Xw3ankKmoJyweB0BQQ8SXkpihU5YLX+9EPqqZ8TKRAeg5mIffG99OCQ3F2mkhU7vRUBPWrsax8E DmUG6Lgni3NNsMB2PV77V/RNB6IsFQehBGVpTC2cPETkTMMcxQYRtK8MgfjQTuZYv/UhbOtJwwyx ZsNmry0DAGck3iRTCgnQ1xI7h1IoQXDy6hccvg== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to a.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.12.1
	;; Response received from 194.0.12.1 (289 octets) ;; HEADER SECTION ;; id = 7137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 256 3 13 gxKFhbIgCG/ulakClvJ0X00nHzu7VTVuP8R8JpozoSBXjHpV/tHc8heHLE0Xq5qqvvLFyR81ZQMF rGwFGvdXfg== ) ; Key ID = 20337 cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231012122134 20230928105134 20237 cz. LYDZgva6lWnDCTyoHRkdjQwo0azyWQRKV9LawjvF5bEgMMghJgwmKjl7pvLNdCEuAP9luj5Iw9lU xh8NJqJk9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 256 3 13 gxKFhbIgCG/ulakClvJ0X00nHzu7VTVuP8R8JpozoSBXjHpV/tHc8heHLE0Xq5qqvvLFyR81ZQMF rGwFGvdXfg== ) ; Key ID = 20337`
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231012122134 20230928105134 20237 cz. LYDZgva6lWnDCTyoHRkdjQwo0azyWQRKV9LawjvF5bEgMMghJgwmKjl7pvLNdCEuAP9luj5Iw9lU xh8NJqJk9Q== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=20337 is now in the chain-of-trust
	Query to c.ns.nic.cz for www.cssz.cz/A
	Received 409 bytes from 194.0.14.1
	;; Response received from 194.0.14.1 (409 octets) ;; HEADER SECTION ;; id = 1461 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cssz.cz. 3600 IN NS dns2.cssz.cz. cssz.cz. 3600 IN NS dns.cssz.cz. cssz.cz. 3600 IN NS dns4.cssz.cz. cssz.cz. 3600 IN NS dns3.cssz.cz. cssz.cz. 3600 IN NS sdns.zarea.net. cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20231005084902 20230921071902 20337 cz. RSg9U2fcUYTGyJdGkolBYCy1mXFKGeBzopyf6fN2c1/IwI6ZaaYMGnlKLuV2wlS/dIYGwYOv+Oro 0vB9lClx4w== ) ;; ADDITIONAL SECTION (7 records) dns4.cssz.cz. 3600 IN A 91.195.107.151 dns3.cssz.cz. 3600 IN A 91.195.106.151 dns2.cssz.cz. 3600 IN A 91.195.107.10 dns.cssz.cz. 3600 IN A 91.195.106.10 dns2.cssz.cz. 3600 IN AAAA 2001:af0:fff6:11::100 dns.cssz.cz. 3600 IN AAAA 2001:af0:fff4:11::100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for cssz.cz/DNSKEY
	Received 405 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (405 octets) ;; HEADER SECTION ;; id = 9809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cssz.cz. 3600 IN NS dns4.cssz.cz. cssz.cz. 3600 IN NS dns.cssz.cz. cssz.cz. 3600 IN NS dns2.cssz.cz. cssz.cz. 3600 IN NS dns3.cssz.cz. cssz.cz. 3600 IN NS sdns.zarea.net. cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20231005084902 20230921071902 20337 cz. RSg9U2fcUYTGyJdGkolBYCy1mXFKGeBzopyf6fN2c1/IwI6ZaaYMGnlKLuV2wlS/dIYGwYOv+Oro 0vB9lClx4w== ) ;; ADDITIONAL SECTION (7 records) dns4.cssz.cz. 3600 IN A 91.195.107.151 dns3.cssz.cz. 3600 IN A 91.195.106.151 dns2.cssz.cz. 3600 IN A 91.195.107.10 dns.cssz.cz. 3600 IN A 91.195.106.10 dns2.cssz.cz. 3600 IN AAAA 2001:af0:fff6:11::100 dns.cssz.cz. 3600 IN AAAA 2001:af0:fff4:11::100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cssz.cz

cssz.cz

	Checking DS between cz and cssz.cz
	Query to d.ns.nic.cz for cssz.cz/DS
	Received 182 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (182 octets) ;; HEADER SECTION ;; id = 8704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DS ;; ANSWER SECTION (2 records) cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20231005084902 20230921071902 20337 cz. RSg9U2fcUYTGyJdGkolBYCy1mXFKGeBzopyf6fN2c1/IwI6ZaaYMGnlKLuV2wlS/dIYGwYOv+Oro 0vB9lClx4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cssz.cz in the cz zone
	DS=57145/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20231005084902 20230921071902 20337 cz. RSg9U2fcUYTGyJdGkolBYCy1mXFKGeBzopyf6fN2c1/IwI6ZaaYMGnlKLuV2wlS/dIYGwYOv+Oro 0vB9lClx4w== )`
	RRSIG=20337 and DNSKEY=20337 verifies the DS RRset
	DS=57145/SHA-256 is now in the chain-of-trust
	`cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e )`
	Query to sdns.zarea.net for cssz.cz/DNSKEY
	Received 402 bytes from 217.198.113.53
	;; Response received from 217.198.113.53 (402 octets) ;; HEADER SECTION ;; id = 54142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DNSKEY ;; ANSWER SECTION (4 records) cssz.cz. 3600 IN DNSKEY ( 256 3 13 O5giIHlSVhztQs5MiicVMGsMLkF4QnD/d2hMR8s+y85nwjN0gS3rNDdALTTQuc53upaXiDh0bWW1 gAmgl8kptQ== ) ; Key ID = 60735 cssz.cz. 3600 IN DNSKEY ( 257 3 13 JdrlLR9NTW8q7pxrkcifbixAqHDjnb00OAQs3e3p2Z5HQHWJn8xhONiSg+By/NxLqIy2Mbr5m9jC VhmvlZo4LQ== ) ; Key ID = 57145 cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231109220102 20230930220102 57145 cssz.cz. 1MSyoi47OB43z2CUuH+BqqRAExcbtsDD3UZTpz0XkqcQRyb4i7bc23Sz6a2GSBXu5EzBOpimPsF3 O5olW1z1eQ== ) cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231109220102 20230930220102 60735 cssz.cz. joNrexJ26ZXzemlWHRQQxYrU1TGArBcFtYjDWp6HZ7DUJgmZUYdZh4JpFqUaSTAoy9oqcEZ3Tb5B eSC/8yJxSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cssz.cz
	`cssz.cz. 3600 IN DNSKEY ( 256 3 13 O5giIHlSVhztQs5MiicVMGsMLkF4QnD/d2hMR8s+y85nwjN0gS3rNDdALTTQuc53upaXiDh0bWW1 gAmgl8kptQ== ) ; Key ID = 60735`
	`cssz.cz. 3600 IN DNSKEY ( 257 3 13 JdrlLR9NTW8q7pxrkcifbixAqHDjnb00OAQs3e3p2Z5HQHWJn8xhONiSg+By/NxLqIy2Mbr5m9jC VhmvlZo4LQ== ) ; Key ID = 57145`
	DNSKEY=57145/SEP is now in the chain-of-trust
	DS=57145/SHA-256 verifies DNSKEY=57145/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231109220102 20230930220102 57145 cssz.cz. 1MSyoi47OB43z2CUuH+BqqRAExcbtsDD3UZTpz0XkqcQRyb4i7bc23Sz6a2GSBXu5EzBOpimPsF3 O5olW1z1eQ== )`
	`cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231109220102 20230930220102 60735 cssz.cz. joNrexJ26ZXzemlWHRQQxYrU1TGArBcFtYjDWp6HZ7DUJgmZUYdZh4JpFqUaSTAoy9oqcEZ3Tb5B eSC/8yJxSw== )`
	RRSIG=57145 and DNSKEY=57145/SEP verifies the DNSKEY RRset
	RRSIG=60735 and DNSKEY=60735 verifies the DNSKEY RRset
	DNSKEY=60735 is now in the chain-of-trust
	Query to dns.cssz.cz for www.cssz.cz/A
	Received 196 bytes from 91.195.106.10
	;; Response received from 91.195.106.10 (196 octets) ;; HEADER SECTION ;; id = 12254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (2 records) www.cssz.cz. 300 IN CNAME ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20231109220102 20230930220102 60735 cssz.cz. jdH5xFLH/KPo4R4e75MxDSmtIeEIdB7tqmEKL7tm7buGSQoaRb5Vk4MiuArL7vjZoHYN4mVFC3UK PkD4DErcNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dns.cssz.cz is authoritative for www.cssz.cz
	Query to dns3.cssz.cz for www.cssz.cz/DNSKEY
	Received 196 bytes from 91.195.106.151
	;; Response received from 91.195.106.151 (196 octets) ;; HEADER SECTION ;; id = 46846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN DNSKEY ;; ANSWER SECTION (2 records) www.cssz.cz. 300 IN CNAME ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20231109220102 20230930220102 60735 cssz.cz. jdH5xFLH/KPo4R4e75MxDSmtIeEIdB7tqmEKL7tm7buGSQoaRb5Vk4MiuArL7vjZoHYN4mVFC3UK PkD4DErcNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cssz.cz zone
	www.cssz.cz is a CNAME to ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net
	Found 1 RRSIGs over CNAME RRset
	`www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20231109220102 20230930220102 60735 cssz.cz. jdH5xFLH/KPo4R4e75MxDSmtIeEIdB7tqmEKL7tm7buGSQoaRb5Vk4MiuArL7vjZoHYN4mVFC3UK PkD4DErcNw== )`
	RRSIG=60735 and DNSKEY=60735 verifies the CNAME RRset

	Query to f.root-servers.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 1196 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (1196 octets) ;; HEADER SECTION ;; id = 29106 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . 1PMpUws/LAQPBOezsM4EKRQ4lMjs2JyUs6E4TJPbZH+VdGz+EhT0Pk+NCcYIf92cMGrND3LvRNXM 4tUWOYFeHL8OHUQCph1qJqGWcOwfitzLA6A/VvSnSZq8FFrktaoY6/sRSuCP7s8R9Ry6Lk1bU+wb ZoYoqjc2P2Qy/YQcmLpYkeNfFaIlpQYVHNAZFwLuu9loex2Z+2gVwOJzwtKInUc6JfeKf+twVITa NKVVNlKgY3jDU5dAQVHjEVeQ9FP5auluPDIP4Z+lqVRcuKO9xtp5qdGVfthwa57e25Lq0ts/1Q5T XLAl5t76bbZKowYocnufgYjzE918DzrYpSILbg== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to m.root-servers.net for net/DNSKEY
	Received 1163 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1163 octets) ;; HEADER SECTION ;; id = 1767 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . 1PMpUws/LAQPBOezsM4EKRQ4lMjs2JyUs6E4TJPbZH+VdGz+EhT0Pk+NCcYIf92cMGrND3LvRNXM 4tUWOYFeHL8OHUQCph1qJqGWcOwfitzLA6A/VvSnSZq8FFrktaoY6/sRSuCP7s8R9Ry6Lk1bU+wb ZoYoqjc2P2Qy/YQcmLpYkeNfFaIlpQYVHNAZFwLuu9loex2Z+2gVwOJzwtKInUc6JfeKf+twVITa NKVVNlKgY3jDU5dAQVHjEVeQ9FP5auluPDIP4Z+lqVRcuKO9xtp5qdGVfthwa57e25Lq0ts/1Q5T XLAl5t76bbZKowYocnufgYjzE918DzrYpSILbg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to h.root-servers.net for net/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (367 octets) ;; HEADER SECTION ;; id = 4349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . 1PMpUws/LAQPBOezsM4EKRQ4lMjs2JyUs6E4TJPbZH+VdGz+EhT0Pk+NCcYIf92cMGrND3LvRNXM 4tUWOYFeHL8OHUQCph1qJqGWcOwfitzLA6A/VvSnSZq8FFrktaoY6/sRSuCP7s8R9Ry6Lk1bU+wb ZoYoqjc2P2Qy/YQcmLpYkeNfFaIlpQYVHNAZFwLuu9loex2Z+2gVwOJzwtKInUc6JfeKf+twVITa NKVVNlKgY3jDU5dAQVHjEVeQ9FP5auluPDIP4Z+lqVRcuKO9xtp5qdGVfthwa57e25Lq0ts/1Q5T XLAl5t76bbZKowYocnufgYjzE918DzrYpSILbg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . 1PMpUws/LAQPBOezsM4EKRQ4lMjs2JyUs6E4TJPbZH+VdGz+EhT0Pk+NCcYIf92cMGrND3LvRNXM 4tUWOYFeHL8OHUQCph1qJqGWcOwfitzLA6A/VvSnSZq8FFrktaoY6/sRSuCP7s8R9Ry6Lk1bU+wb ZoYoqjc2P2Qy/YQcmLpYkeNfFaIlpQYVHNAZFwLuu9loex2Z+2gVwOJzwtKInUc6JfeKf+twVITa NKVVNlKgY3jDU5dAQVHjEVeQ9FP5auluPDIP4Z+lqVRcuKO9xtp5qdGVfthwa57e25Lq0ts/1Q5T XLAl5t76bbZKowYocnufgYjzE918DzrYpSILbg== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to l.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.41.162.30
	;; Response received from 192.41.162.30 (775 octets) ;; HEADER SECTION ;; id = 21881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231011162830 20230926162330 35886 net. kZEdhJ3e8pA0rkp1puQfmPFZpIwelEpEE4fSXWDstm2QyKLxHrg+mTJbfaXmJWMrrl5BKhWcJfDt ybhjsJ3cvVCtKfa8zL1AJx2Fugh30zzCcmHpslASzL5c8KRyy2dNgfG3YFnaXS4+CXHkJ0QMj1MH 4RaJnsv8m7xBxtfeh4kcq65+cdpBlmT7BbiJ5X2lV/Nfyy8OxBmfhtqr1fyA40rPTuyA2SNroXS+ N+dsOAgY1CIXdFjQdaL33KbmSsSOFugelH5V7dcSr70WsvjApO/ZXcSy9myeJ+q4O6R+Y1D6Tj6s g7b96csAYnWYJX8MzZTCijrjxuhzNRCduqF6bw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231011162830 20230926162330 35886 net. kZEdhJ3e8pA0rkp1puQfmPFZpIwelEpEE4fSXWDstm2QyKLxHrg+mTJbfaXmJWMrrl5BKhWcJfDt ybhjsJ3cvVCtKfa8zL1AJx2Fugh30zzCcmHpslASzL5c8KRyy2dNgfG3YFnaXS4+CXHkJ0QMj1MH 4RaJnsv8m7xBxtfeh4kcq65+cdpBlmT7BbiJ5X2lV/Nfyy8OxBmfhtqr1fyA40rPTuyA2SNroXS+ N+dsOAgY1CIXdFjQdaL33KbmSsSOFugelH5V7dcSr70WsvjApO/ZXcSy9myeJ+q4O6R+Y1D6Tj6s g7b96csAYnWYJX8MzZTCijrjxuhzNRCduqF6bw== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=39455 is now in the chain-of-trust
	Query to j.gtld-servers.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 795 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (795 octets) ;; HEADER SECTION ;; id = 58877 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azurefd.net. 172800 IN NS ns1-37.azure-dns.com. azurefd.net. 172800 IN NS ns2-37.azure-dns.net. azurefd.net. 172800 IN NS ns4-37.azure-dns.info. azurefd.net. 172800 IN NS ns3-37.azure-dns.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065935 20230929054935 39455 net. d78fpVn9PxKYWJeibT7fk6ET+stL2HjRGavAAoh7RXLCxmbczl3UQbG8+cnZnxe7ZwKKa5vtQ9Ry cMG5MNHPlBFqHzY9PzARyfNdUjeO1badivgJ3NyvlUFdyywYxYsXaWqEHI7w5GnamhYpDgYsE7MZ HM63IUNY42WUeBKL0vqg5MFJlq7dlTuG2DHKOgp7camtjOYiKyAXgQ8M2CYsYQ== ) ;; ADDITIONAL SECTION (3 records) ns2-37.azure-dns.net. 172800 IN A 150.171.16.37 ns2-37.azure-dns.net. 172800 IN AAAA 2620:1ec:8ec:10::25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.gtld-servers.net for azurefd.net/DNSKEY
	Received 767 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (767 octets) ;; HEADER SECTION ;; id = 37681 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azurefd.net. 172800 IN NS ns1-37.azure-dns.com. azurefd.net. 172800 IN NS ns2-37.azure-dns.net. azurefd.net. 172800 IN NS ns4-37.azure-dns.info. azurefd.net. 172800 IN NS ns3-37.azure-dns.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065935 20230929054935 39455 net. d78fpVn9PxKYWJeibT7fk6ET+stL2HjRGavAAoh7RXLCxmbczl3UQbG8+cnZnxe7ZwKKa5vtQ9Ry cMG5MNHPlBFqHzY9PzARyfNdUjeO1badivgJ3NyvlUFdyywYxYsXaWqEHI7w5GnamhYpDgYsE7MZ HM63IUNY42WUeBKL0vqg5MFJlq7dlTuG2DHKOgp7camtjOYiKyAXgQ8M2CYsYQ== ) ;; ADDITIONAL SECTION (3 records) ns2-37.azure-dns.net. 172800 IN A 150.171.16.37 ns2-37.azure-dns.net. 172800 IN AAAA 2620:1ec:8ec:10::25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone azurefd.net

azurefd.net

	Checking DS between net and azurefd.net
	Query to l.gtld-servers.net for azurefd.net/DS
	Received 857 bytes from 192.41.162.30
	;; Response received from 192.41.162.30 (857 octets) ;; HEADER SECTION ;; id = 56508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1696280872 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20231009210752 20231002195752 39455 net. CYqs82+i+JEhcR6xboQpB39w+0bfMq1OV8H/r5F//S/NgnziIUvjqtDIYaJ1GDAf9abLi/pmW0++ NjLm14SHsqNNm22Fqefn2HFch6DTfXZTbU0L1IOckOAKeZg89KFwLbB33yIYcLeI/OQYEeXkbPTy goIJdW4FKe8ihV7irGNX5HJUxiTDWKvfBqpC3MyUlisbY21MtkqffrG7AGjbFQ== ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OP7IA6K63VK6UT7L4KH8DN174JH5TF.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065935 20230929054935 39455 net. d78fpVn9PxKYWJeibT7fk6ET+stL2HjRGavAAoh7RXLCxmbczl3UQbG8+cnZnxe7ZwKKa5vtQ9Ry cMG5MNHPlBFqHzY9PzARyfNdUjeO1badivgJ3NyvlUFdyywYxYsXaWqEHI7w5GnamhYpDgYsE7MZ HM63IUNY42WUeBKL0vqg5MFJlq7dlTuG2DHKOgp7camtjOYiKyAXgQ8M2CYsYQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for azurefd.net in the net zone
	Query to ns1-37.azure-dns.com for azurefd.net/DNSKEY
	Received 126 bytes from 150.171.10.37
	;; Response received from 150.171.10.37 (126 octets) ;; HEADER SECTION ;; id = 5110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azurefd.net. 300 IN SOA ( ns1-37.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns2-37.azure-dns.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 202 bytes from 150.171.16.37
	;; Response received from 150.171.16.37 (202 octets) ;; HEADER SECTION ;; id = 57391 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) z01.azurefd.net. 172800 IN NS ns1-35.azure-dns.com. z01.azurefd.net. 172800 IN NS ns2-35.azure-dns.net. z01.azurefd.net. 172800 IN NS ns3-35.azure-dns.org. z01.azurefd.net. 172800 IN NS ns4-35.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2-37.azure-dns.net for z01.azurefd.net/DNSKEY
	Received 178 bytes from 150.171.16.37
	;; Response received from 150.171.16.37 (178 octets) ;; HEADER SECTION ;; id = 40155 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) z01.azurefd.net. 172800 IN NS ns1-35.azure-dns.com. z01.azurefd.net. 172800 IN NS ns2-35.azure-dns.net. z01.azurefd.net. 172800 IN NS ns3-35.azure-dns.org. z01.azurefd.net. 172800 IN NS ns4-35.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone z01.azurefd.net

z01.azurefd.net

	Checking DS between azurefd.net and z01.azurefd.net
	Query to ns1-37.azure-dns.com for z01.azurefd.net/DS
	Received 130 bytes from 150.171.10.37
	;; Response received from 150.171.10.37 (130 octets) ;; HEADER SECTION ;; id = 52074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azurefd.net. 300 IN SOA ( ns1-37.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for z01.azurefd.net in the azurefd.net zone
	Query to ns2-35.azure-dns.net for z01.azurefd.net/DNSKEY
	Received 130 bytes from 150.171.16.35
	;; Response received from 150.171.16.35 (130 octets) ;; HEADER SECTION ;; id = 28944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) z01.azurefd.net. 300 IN SOA ( ns1-35.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns2-35.azure-dns.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 115 bytes from 150.171.16.35
	;; Response received from 150.171.16.35 (115 octets) ;; HEADER SECTION ;; id = 32903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (1 record) ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. 30 IN CNAME ( star-azurefd-prod.trafficmanager.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2-35.azure-dns.net is authoritative for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net
	Query to ns1-35.azure-dns.com for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/DNSKEY
	Received 115 bytes from 150.171.10.35
	;; Response received from 150.171.10.35 (115 octets) ;; HEADER SECTION ;; id = 53712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (1 record) ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. 30 IN CNAME ( star-azurefd-prod.trafficmanager.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net is a CNAME to star-azurefd-prod.trafficmanager.net
	No RRSIGs found

net

	Query to f.gtld-servers.net for star-azurefd-prod.trafficmanager.net/A
	Received 711 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (711 octets) ;; HEADER SECTION ;; id = 20553 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; star-azurefd-prod.trafficmanager.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trafficmanager.net. 172800 IN NS tm1.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm2.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm1.dns-tm.com. trafficmanager.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN NSEC3 ( 1 1 0 - cs47vghcp89oounkk818bpd09ed0cfmj NS DS RRSIG ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070120 20231002055120 39455 net. SPxSoSt0VTSvBM3AtWJzEGQiwaMS9j4lGm6WTzynVMia0K5hBebZU9646HDM82Jw6DaCnALw3dR0 ez0Hhci5vkBXP0K3Re6tSW/zMtfFWgCluuwBswg3m+4j4FpBHlb0QxsDTn4Gz4MdD5uwtStpSs2+ PivUY1OQ7dP7MH3d57jd+hMeE346ntyp2uKYqBycZonEZOcxEYxuNcIGAEodQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.gtld-servers.net for trafficmanager.net/DNSKEY
	Received 693 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (693 octets) ;; HEADER SECTION ;; id = 53603 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; trafficmanager.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trafficmanager.net. 172800 IN NS tm1.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm2.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm1.dns-tm.com. trafficmanager.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN NSEC3 ( 1 1 0 - cs47vghcp89oounkk818bpd09ed0cfmj NS DS RRSIG ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070120 20231002055120 39455 net. SPxSoSt0VTSvBM3AtWJzEGQiwaMS9j4lGm6WTzynVMia0K5hBebZU9646HDM82Jw6DaCnALw3dR0 ez0Hhci5vkBXP0K3Re6tSW/zMtfFWgCluuwBswg3m+4j4FpBHlb0QxsDTn4Gz4MdD5uwtStpSs2+ PivUY1OQ7dP7MH3d57jd+hMeE346ntyp2uKYqBycZonEZOcxEYxuNcIGAEodQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone trafficmanager.net

trafficmanager.net

	Checking DS between net and trafficmanager.net
	Query to j.gtld-servers.net for trafficmanager.net/DS
	Received 864 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (864 octets) ;; HEADER SECTION ;; id = 24792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; trafficmanager.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1696280857 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20231009210737 20231002195737 39455 net. hJCoxKaNU9nhRTpFFjPmbovXtW94EJW2rgp90qHBhiNRKBhzfhUZw/dD11q0KEmQpdIJusnGCU4U Zh/lIBtRvZwKtcCcHcNJ+fHmmu8hN5O+N+eDKLj6gOCdnhFYlmkRUHt4YQybSFmIlIZzE0JAHXO5 PpVzL5nQKyeMVyF/Xb98sT6pI5UF/RfTKCoPQ8+LB9G5sn0PK3zSexAmp5URYA== ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN NSEC3 ( 1 1 0 - cs47vghcp89oounkk818bpd09ed0cfmj NS DS RRSIG ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070120 20231002055120 39455 net. SPxSoSt0VTSvBM3AtWJzEGQiwaMS9j4lGm6WTzynVMia0K5hBebZU9646HDM82Jw6DaCnALw3dR0 ez0Hhci5vkBXP0K3Re6tSW/zMtfFWgCluuwBswg3m+4j4FpBHlb0QxsDTn4Gz4MdD5uwtStpSs2+ PivUY1OQ7dP7MH3d57jd+hMeE346ntyp2uKYqBycZonEZOcxEYxuNcIGAEodQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for trafficmanager.net in the net zone
	Query to tm1.edgedns-tm.info for trafficmanager.net/DNSKEY
	Received 108 bytes from 13.107.222.240
	;; Response received from 13.107.222.240 (108 octets) ;; HEADER SECTION ;; id = 24600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; trafficmanager.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) trafficmanager.net. 30 IN SOA ( tm1.dns-tm.com. hostmaster.trafficmanager.net. 2003080800 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 30 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to tm1.edgedns-tm.info for star-azurefd-prod.trafficmanager.net/A
	Received 110 bytes from 13.107.222.240
	;; Response received from 13.107.222.240 (110 octets) ;; HEADER SECTION ;; id = 2149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; star-azurefd-prod.trafficmanager.net. IN A ;; ANSWER SECTION (1 record) star-azurefd-prod.trafficmanager.net. 60 IN CNAME ( dual.part-0012.t-0009.t-msedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	tm1.edgedns-tm.info is authoritative for star-azurefd-prod.trafficmanager.net
	Query to tm2.dns-tm.com for star-azurefd-prod.trafficmanager.net/DNSKEY
	Received 110 bytes from 150.171.16.240
	;; Response received from 150.171.16.240 (110 octets) ;; HEADER SECTION ;; id = 39040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; star-azurefd-prod.trafficmanager.net. IN DNSKEY ;; ANSWER SECTION (1 record) star-azurefd-prod.trafficmanager.net. 60 IN CNAME ( dual.part-0012.t-0009.t-msedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	star-azurefd-prod.trafficmanager.net is a CNAME to dual.part-0012.t-0009.t-msedge.net
	No RRSIGs found

net

	Query to d.gtld-servers.net for dual.part-0012.t-0009.t-msedge.net/A
	Received 680 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (680 octets) ;; HEADER SECTION ;; id = 6965 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.t-msedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) t-msedge.net. 172800 IN NS ns1.t-msedge.net. t-msedge.net. 172800 IN NS ns2.t-msedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN NSEC3 ( 1 1 0 - jbd4h1n08ne237u139mq579782iuvhpk NS DS RRSIG ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065921 20230929054921 39455 net. hlGjP5CyBTmPnrQMmslDK19AcwwFQz26zKmbdk8HMw8AACXfTGeFh60ya5h7HyvZHZf/wDZqHvHf akINsHJ676sSPL/I0TdpA9DgyTtmgA+XV8+Pc/AJ0l9zqkQR/UWO/754W8XacpNgXfQyaNah1z0r Fxlo9LRuUc500Xq4uelRKmtvR2MOxMnKyG4e6BSmHqnHuDRYizd1cuSRy3kZVA== ) ;; ADDITIONAL SECTION (3 records) ns1.t-msedge.net. 172800 IN A 13.107.246.1 ns2.t-msedge.net. 172800 IN A 13.107.246.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.gtld-servers.net for t-msedge.net/DNSKEY
	Received 658 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (658 octets) ;; HEADER SECTION ;; id = 7679 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) t-msedge.net. 172800 IN NS ns1.t-msedge.net. t-msedge.net. 172800 IN NS ns2.t-msedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN NSEC3 ( 1 1 0 - jbd4h1n08ne237u139mq579782iuvhpk NS DS RRSIG ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065921 20230929054921 39455 net. hlGjP5CyBTmPnrQMmslDK19AcwwFQz26zKmbdk8HMw8AACXfTGeFh60ya5h7HyvZHZf/wDZqHvHf akINsHJ676sSPL/I0TdpA9DgyTtmgA+XV8+Pc/AJ0l9zqkQR/UWO/754W8XacpNgXfQyaNah1z0r Fxlo9LRuUc500Xq4uelRKmtvR2MOxMnKyG4e6BSmHqnHuDRYizd1cuSRy3kZVA== ) ;; ADDITIONAL SECTION (3 records) ns1.t-msedge.net. 172800 IN A 13.107.246.1 ns2.t-msedge.net. 172800 IN A 13.107.246.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone t-msedge.net

t-msedge.net

	Checking DS between net and t-msedge.net
	Query to b.gtld-servers.net for t-msedge.net/DS
	Received 858 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (858 octets) ;; HEADER SECTION ;; id = 46963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; t-msedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1696280872 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20231009210752 20231002195752 39455 net. CYqs82+i+JEhcR6xboQpB39w+0bfMq1OV8H/r5F//S/NgnziIUvjqtDIYaJ1GDAf9abLi/pmW0++ NjLm14SHsqNNm22Fqefn2HFch6DTfXZTbU0L1IOckOAKeZg89KFwLbB33yIYcLeI/OQYEeXkbPTy goIJdW4FKe8ihV7irGNX5HJUxiTDWKvfBqpC3MyUlisbY21MtkqffrG7AGjbFQ== ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN NSEC3 ( 1 1 0 - jbd4h1n08ne237u139mq579782iuvhpk NS DS RRSIG ) JBD2V7T992QEJVBJRPI296AQ96E37R3N.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231006065921 20230929054921 39455 net. hlGjP5CyBTmPnrQMmslDK19AcwwFQz26zKmbdk8HMw8AACXfTGeFh60ya5h7HyvZHZf/wDZqHvHf akINsHJ676sSPL/I0TdpA9DgyTtmgA+XV8+Pc/AJ0l9zqkQR/UWO/754W8XacpNgXfQyaNah1z0r Fxlo9LRuUc500Xq4uelRKmtvR2MOxMnKyG4e6BSmHqnHuDRYizd1cuSRy3kZVA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for t-msedge.net in the net zone
	Query to ns2.t-msedge.net for t-msedge.net/DNSKEY
	Received 101 bytes from 13.107.246.2
	;; Response received from 13.107.246.2 (101 octets) ;; HEADER SECTION ;; id = 49563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) t-msedge.net. 60 IN SOA ( ns1.t-msedge.net. msnhst.microsoft.com. 2017103101 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	No DNSKEY records found
	Query to ns1.t-msedge.net for dual.part-0012.t-0009.t-msedge.net/A
	Received 128 bytes from 13.107.246.1
	;; Response received from 13.107.246.1 (128 octets) ;; HEADER SECTION ;; id = 9652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.t-msedge.net. IN A ;; ANSWER SECTION (1 record) dual.part-0012.t-0009.t-msedge.net. 240 IN CNAME ( global-entry-afdthirdparty-fallback.trafficmanager.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	ns1.t-msedge.net is authoritative for dual.part-0012.t-0009.t-msedge.net
	Query to ns1.t-msedge.net for t-0009.t-msedge.net/DNSKEY
	Received 108 bytes from 13.107.246.1
	;; Response received from 13.107.246.1 (108 octets) ;; HEADER SECTION ;; id = 28025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; t-0009.t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) t-msedge.net. 60 IN SOA ( ns1.t-msedge.net. msnhst.microsoft.com. 2017103101 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.t-msedge.net for part-0012.t-0009.t-msedge.net/DNSKEY
	Received 118 bytes from 13.107.246.2
	;; Response received from 13.107.246.2 (118 octets) ;; HEADER SECTION ;; id = 62506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) t-msedge.net. 60 IN SOA ( ns1.t-msedge.net. msnhst.microsoft.com. 2017103101 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.t-msedge.net for dual.part-0012.t-0009.t-msedge.net/DNSKEY
	Received 123 bytes from 13.107.246.2
	;; Response received from 13.107.246.2 (123 octets) ;; HEADER SECTION ;; id = 55365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) t-msedge.net. 60 IN SOA ( ns1.t-msedge.net. msnhst.microsoft.com. 2017103101 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	dual.part-0012.t-0009.t-msedge.net is a CNAME to global-entry-afdthirdparty-fallback.trafficmanager.net
	No RRSIGs found

net

	Query to b.gtld-servers.net for global-entry-afdthirdparty-fallback.trafficmanager.net/A
	Received 729 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (729 octets) ;; HEADER SECTION ;; id = 6831 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; global-entry-afdthirdparty-fallback.trafficmanager.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trafficmanager.net. 172800 IN NS tm1.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm2.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm1.dns-tm.com. trafficmanager.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN NSEC3 ( 1 1 0 - cs47vghcp89oounkk818bpd09ed0cfmj NS DS RRSIG ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070120 20231002055120 39455 net. SPxSoSt0VTSvBM3AtWJzEGQiwaMS9j4lGm6WTzynVMia0K5hBebZU9646HDM82Jw6DaCnALw3dR0 ez0Hhci5vkBXP0K3Re6tSW/zMtfFWgCluuwBswg3m+4j4FpBHlb0QxsDTn4Gz4MdD5uwtStpSs2+ PivUY1OQ7dP7MH3d57jd+hMeE346ntyp2uKYqBycZonEZOcxEYxuNcIGAEodQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.gtld-servers.net for trafficmanager.net/DNSKEY
	Received 693 bytes from 192.54.112.30
	;; Response received from 192.54.112.30 (693 octets) ;; HEADER SECTION ;; id = 6694 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; trafficmanager.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) trafficmanager.net. 172800 IN NS tm1.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm2.edgedns-tm.info. trafficmanager.net. 172800 IN NS tm1.dns-tm.com. trafficmanager.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN NSEC3 ( 1 1 0 - cs47vghcp89oounkk818bpd09ed0cfmj NS DS RRSIG ) CS42OOH5F7FGOEG6PC3EBJAJFVGO0KTM.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070120 20231002055120 39455 net. SPxSoSt0VTSvBM3AtWJzEGQiwaMS9j4lGm6WTzynVMia0K5hBebZU9646HDM82Jw6DaCnALw3dR0 ez0Hhci5vkBXP0K3Re6tSW/zMtfFWgCluuwBswg3m+4j4FpBHlb0QxsDTn4Gz4MdD5uwtStpSs2+ PivUY1OQ7dP7MH3d57jd+hMeE346ntyp2uKYqBycZonEZOcxEYxuNcIGAEodQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone trafficmanager.net

trafficmanager.net

	Query to tm1.edgedns-tm.info for global-entry-afdthirdparty-fallback.trafficmanager.net/A
	Received 131 bytes from 13.107.222.240
	;; Response received from 13.107.222.240 (131 octets) ;; HEADER SECTION ;; id = 3120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; global-entry-afdthirdparty-fallback.trafficmanager.net. IN A ;; ANSWER SECTION (1 record) global-entry-afdthirdparty-fallback.trafficmanager.net. 60 IN CNAME ( dual.part-0012.t-0009.fb-t-msedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	tm1.edgedns-tm.info is authoritative for global-entry-afdthirdparty-fallback.trafficmanager.net
	Query to tm1.dns-tm.com for global-entry-afdthirdparty-fallback.trafficmanager.net/DNSKEY
	Received 131 bytes from 150.171.10.240
	;; Response received from 150.171.10.240 (131 octets) ;; HEADER SECTION ;; id = 59716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; global-entry-afdthirdparty-fallback.trafficmanager.net. IN DNSKEY ;; ANSWER SECTION (1 record) global-entry-afdthirdparty-fallback.trafficmanager.net. 60 IN CNAME ( dual.part-0012.t-0009.fb-t-msedge.net. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	global-entry-afdthirdparty-fallback.trafficmanager.net is a CNAME to dual.part-0012.t-0009.fb-t-msedge.net
	No RRSIGs found

net

	Query to b.gtld-servers.net for dual.part-0012.t-0009.fb-t-msedge.net/A
	Received 683 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (683 octets) ;; HEADER SECTION ;; id = 2076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fb-t-msedge.net. 172800 IN NS ns1.fb-t-msedge.net. fb-t-msedge.net. 172800 IN NS ns2.fb-t-msedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN NSEC3 ( 1 1 0 - veurhqdui3vh3qn3dmj0rkucoffi0k8v NS DS RRSIG ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231007070153 20230930055153 39455 net. ZM4lkUXMWISyICtd5Nh1heuJw3Etj1DfD/hGk87UT8wxfTDzTed1lWdX+gYRg6OyG0dBqM3F6JWR NDKIMnyFrwOU4W4fYz2HxYBN0PhgfjQXwR3QAIHcUAOxaERuvzitkupE3ufVDycj0qZg7DKeKzxn +CKGhbXuX2D5+SVhisKWrrWBnS3+xfMNt3clyMIKzFCOqZc8lYv2xFS9YJ22KQ== ) ;; ADDITIONAL SECTION (3 records) ns1.fb-t-msedge.net. 172800 IN A 13.107.253.1 ns2.fb-t-msedge.net. 172800 IN A 13.107.253.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.gtld-servers.net for fb-t-msedge.net/DNSKEY
	Received 661 bytes from 192.52.178.30
	;; Response received from 192.52.178.30 (661 octets) ;; HEADER SECTION ;; id = 19714 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fb-t-msedge.net. 172800 IN NS ns1.fb-t-msedge.net. fb-t-msedge.net. 172800 IN NS ns2.fb-t-msedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN NSEC3 ( 1 1 0 - veurhqdui3vh3qn3dmj0rkucoffi0k8v NS DS RRSIG ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231007070153 20230930055153 39455 net. ZM4lkUXMWISyICtd5Nh1heuJw3Etj1DfD/hGk87UT8wxfTDzTed1lWdX+gYRg6OyG0dBqM3F6JWR NDKIMnyFrwOU4W4fYz2HxYBN0PhgfjQXwR3QAIHcUAOxaERuvzitkupE3ufVDycj0qZg7DKeKzxn +CKGhbXuX2D5+SVhisKWrrWBnS3+xfMNt3clyMIKzFCOqZc8lYv2xFS9YJ22KQ== ) ;; ADDITIONAL SECTION (3 records) ns1.fb-t-msedge.net. 172800 IN A 13.107.253.1 ns2.fb-t-msedge.net. 172800 IN A 13.107.253.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fb-t-msedge.net

fb-t-msedge.net

	Checking DS between net and fb-t-msedge.net
	Query to j.gtld-servers.net for fb-t-msedge.net/DS
	Received 861 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (861 octets) ;; HEADER SECTION ;; id = 52455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fb-t-msedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231009070536 20231002055536 39455 net. a8xEbp95TtFnjCi747c7HjZrZb6A6rJVu0nxSfettIWqCY2vn8E7cmiOYzlSWSQui/xUZ38zH23M /rEsSxuglATBCoDNLBz75+qqgX+mhZLA1WvRBwRNF0gq66OAxcfYCGq0WXIysOnMenKxjFI6aGlP RA35V0DCDxM1qkq9AvNZ1A9N61fbK0WFa19q393FoOEl19XBTCvJKMrMJledFQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1696280857 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20231009210737 20231002195737 39455 net. hJCoxKaNU9nhRTpFFjPmbovXtW94EJW2rgp90qHBhiNRKBhzfhUZw/dD11q0KEmQpdIJusnGCU4U Zh/lIBtRvZwKtcCcHcNJ+fHmmu8hN5O+N+eDKLj6gOCdnhFYlmkRUHt4YQybSFmIlIZzE0JAHXO5 PpVzL5nQKyeMVyF/Xb98sT6pI5UF/RfTKCoPQ8+LB9G5sn0PK3zSexAmp5URYA== ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN NSEC3 ( 1 1 0 - veurhqdui3vh3qn3dmj0rkucoffi0k8v NS DS RRSIG ) VEUQMEQ5N3B2HAU82NTG43O6T1FL3AOL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231007070153 20230930055153 39455 net. ZM4lkUXMWISyICtd5Nh1heuJw3Etj1DfD/hGk87UT8wxfTDzTed1lWdX+gYRg6OyG0dBqM3F6JWR NDKIMnyFrwOU4W4fYz2HxYBN0PhgfjQXwR3QAIHcUAOxaERuvzitkupE3ufVDycj0qZg7DKeKzxn +CKGhbXuX2D5+SVhisKWrrWBnS3+xfMNt3clyMIKzFCOqZc8lYv2xFS9YJ22KQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for fb-t-msedge.net in the net zone
	Query to ns1.fb-t-msedge.net for fb-t-msedge.net/DNSKEY
	Received 104 bytes from 13.107.253.1
	;; Response received from 13.107.253.1 (104 octets) ;; HEADER SECTION ;; id = 14752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	No DNSKEY records found
	Query to ns1.fb-t-msedge.net for dual.part-0012.t-0009.fb-t-msedge.net/A
	Received 112 bytes from 13.107.253.1
	;; Response received from 13.107.253.1 (112 octets) ;; HEADER SECTION ;; id = 56075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (3 records) dual.part-0012.t-0009.fb-t-msedge.net. 60 IN CNAME ( part-0012.t-0009.fb-t-msedge.net. ) part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.253.40 part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.226.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	ns1.fb-t-msedge.net is authoritative for dual.part-0012.t-0009.fb-t-msedge.net
	Query to ns2.fb-t-msedge.net for t-0009.fb-t-msedge.net/DNSKEY
	Received 111 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (111 octets) ;; HEADER SECTION ;; id = 31405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/DNSKEY
	Received 121 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (121 octets) ;; HEADER SECTION ;; id = 43108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for dual.part-0012.t-0009.fb-t-msedge.net/DNSKEY
	Received 126 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (126 octets) ;; HEADER SECTION ;; id = 24057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; dual.part-0012.t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	dual.part-0012.t-0009.fb-t-msedge.net is a CNAME to part-0012.t-0009.fb-t-msedge.net
	No RRSIGs found
	Query to ns1.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/A
	Received 93 bytes from 13.107.253.1
	;; Response received from 13.107.253.1 (93 octets) ;; HEADER SECTION ;; id = 61089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (2 records) part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.253.40 part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.226.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	ns1.fb-t-msedge.net is authoritative for part-0012.t-0009.fb-t-msedge.net
	Query to ns2.fb-t-msedge.net for t-0009.fb-t-msedge.net/DNSKEY
	Received 111 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (111 octets) ;; HEADER SECTION ;; id = 16533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/DNSKEY
	Received 121 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (121 octets) ;; HEADER SECTION ;; id = 18798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for fb-t-msedge.net/SOA
	Received 120 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (120 octets) ;; HEADER SECTION ;; id = 3739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; fb-t-msedge.net. IN SOA ;; ANSWER SECTION (1 record) fb-t-msedge.net. 86400 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (2 records) ns1.fb-t-msedge.net. 60 IN A 13.107.253.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns1.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/A
	Received 93 bytes from 13.107.253.1
	;; Response received from 13.107.253.1 (93 octets) ;; HEADER SECTION ;; id = 60562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (2 records) part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.253.40 part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.226.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	part-0012.t-0009.fb-t-msedge.net A RR has value 13.107.253.40
	part-0012.t-0009.fb-t-msedge.net A RR has value 13.107.226.40
	No RRSIGs found

fb-t-msedge.net

	Query to ns2.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/A
	Received 93 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (93 octets) ;; HEADER SECTION ;; id = 59808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (2 records) part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.253.40 part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.226.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	ns2.fb-t-msedge.net is authoritative for part-0012.t-0009.fb-t-msedge.net
	Query to ns2.fb-t-msedge.net for t-0009.fb-t-msedge.net/DNSKEY
	Received 111 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (111 octets) ;; HEADER SECTION ;; id = 7876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/DNSKEY
	Received 121 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (121 octets) ;; HEADER SECTION ;; id = 51726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fb-t-msedge.net. 60 IN SOA ( ns1.fb-t-msedge.net. msnhst.microsoft.com. 2018031501 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	Query to ns2.fb-t-msedge.net for part-0012.t-0009.fb-t-msedge.net/A
	Received 93 bytes from 13.107.253.2
	;; Response received from 13.107.253.2 (93 octets) ;; HEADER SECTION ;; id = 8179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option: ;; QUESTION SECTION (1 record) ;; part-0012.t-0009.fb-t-msedge.net. IN A ;; ANSWER SECTION (2 records) part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.253.40 part-0012.t-0009.fb-t-msedge.net. 60 IN A 13.107.226.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1224 ;; option:
	part-0012.t-0009.fb-t-msedge.net A RR has value 13.107.253.40
	part-0012.t-0009.fb-t-msedge.net A RR has value 13.107.226.40
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.cssz.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: