DNSSEC Debugger - www.cssz.cz

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-05 17:27:38 UTC

Analyzing DNSSEC problems for www.cssz.cz

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 32184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to k.root-servers.net for www.cssz.cz/A
	Received 622 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 622 octets ;; HEADER SECTION ;; id = 2680 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . a2VX1Ft7lqjkUKL9Zy7hhoPro8ZhEfA6e/EFIMbKrnw2sjVFT30kbcyrF/oWBHT0lAbpVbdq0+TW EQY9QbIWhlgiCEEKJtzIZQ1W08z83Kp0z6S9p3MqblfCs9IcTfz0+d3d4GZh+ZPKiJQKeB3qEDWa g+NJQzEJ5zNoAN9vPB1+RLLsDBG0K6B3EVl2PVuc/ycmoOtqORuYGYPwXPye9rbB7HTawelgaSg0 W5OhlWgSSGzjHWezBHtwJyt0/b8LOvj/92frrt5LvuzJhPveMAmLYsNvqtIaTwFbR1CjJikglsKK 8Vh3/RoJF1lcxPsJF+oASBRvVNTVqZb8TwSJzg== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 613 octets ;; HEADER SECTION ;; id = 8668 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . a2VX1Ft7lqjkUKL9Zy7hhoPro8ZhEfA6e/EFIMbKrnw2sjVFT30kbcyrF/oWBHT0lAbpVbdq0+TW EQY9QbIWhlgiCEEKJtzIZQ1W08z83Kp0z6S9p3MqblfCs9IcTfz0+d3d4GZh+ZPKiJQKeB3qEDWa g+NJQzEJ5zNoAN9vPB1+RLLsDBG0K6B3EVl2PVuc/ycmoOtqORuYGYPwXPye9rbB7HTawelgaSg0 W5OhlWgSSGzjHWezBHtwJyt0/b8LOvj/92frrt5LvuzJhPveMAmLYsNvqtIaTwFbR1CjJikglsKK 8Vh3/RoJF1lcxPsJF+oASBRvVNTVqZb8TwSJzg== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cz

	Checking DS between . and cz
	Query to c.root-servers.net for cz/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 50764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . a2VX1Ft7lqjkUKL9Zy7hhoPro8ZhEfA6e/EFIMbKrnw2sjVFT30kbcyrF/oWBHT0lAbpVbdq0+TW EQY9QbIWhlgiCEEKJtzIZQ1W08z83Kp0z6S9p3MqblfCs9IcTfz0+d3d4GZh+ZPKiJQKeB3qEDWa g+NJQzEJ5zNoAN9vPB1+RLLsDBG0K6B3EVl2PVuc/ycmoOtqORuYGYPwXPye9rbB7HTawelgaSg0 W5OhlWgSSGzjHWezBHtwJyt0/b8LOvj/92frrt5LvuzJhPveMAmLYsNvqtIaTwFbR1CjJikglsKK 8Vh3/RoJF1lcxPsJF+oASBRvVNTVqZb8TwSJzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . a2VX1Ft7lqjkUKL9Zy7hhoPro8ZhEfA6e/EFIMbKrnw2sjVFT30kbcyrF/oWBHT0lAbpVbdq0+TW EQY9QbIWhlgiCEEKJtzIZQ1W08z83Kp0z6S9p3MqblfCs9IcTfz0+d3d4GZh+ZPKiJQKeB3qEDWa g+NJQzEJ5zNoAN9vPB1+RLLsDBG0K6B3EVl2PVuc/ycmoOtqORuYGYPwXPye9rbB7HTawelgaSg0 W5OhlWgSSGzjHWezBHtwJyt0/b8LOvj/92frrt5LvuzJhPveMAmLYsNvqtIaTwFbR1CjJikglsKK 8Vh3/RoJF1lcxPsJF+oASBRvVNTVqZb8TwSJzg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to b.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.13.1
	;; Response received from [194.0.13.1] 289 octets ;; HEADER SECTION ;; id = 52126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 256 3 13 MU4HRTdetkGZ4r6c3WQprXG5RVX35T90xOSvj6nL7/RMnAAhYVREf5967kwwt3VnJR5vnye0FbbP D4oma83mTw== ) ; keytag 10850 cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260915122134 20260901105134 20237 cz. IFqNT+ERO1/n6Sg92n2Qiq5wW7yJyxTMzHCzU6/k3h9AJqmxBBX6hp6y/BnYAIh8ioZukJELAA/k F/O135Glkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 256 3 13 MU4HRTdetkGZ4r6c3WQprXG5RVX35T90xOSvj6nL7/RMnAAhYVREf5967kwwt3VnJR5vnye0FbbP D4oma83mTw== ) ; keytag 10850`
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260915122134 20260901105134 20237 cz. IFqNT+ERO1/n6Sg92n2Qiq5wW7yJyxTMzHCzU6/k3h9AJqmxBBX6hp6y/BnYAIh8ioZukJELAA/k F/O135Glkg== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=10850 is now in the chain-of-trust
	Query to d.ns.nic.cz for www.cssz.cz/A
	Received 409 bytes from 193.29.206.1
	;; Response received from [193.29.206.1] 409 octets ;; HEADER SECTION ;; id = 15719 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cssz.cz. 3600 IN NS dns2.cssz.cz. cssz.cz. 3600 IN NS dns.cssz.cz. cssz.cz. 3600 IN NS sdns.zarea.net. cssz.cz. 3600 IN NS dns4.cssz.cz. cssz.cz. 3600 IN NS dns3.cssz.cz. cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20260908102134 20260825085134 10850 cz. P/rzlNmdVOJOwYnbiEMGgHz+dnaTLesQ+dWtw5wOnwo2LhuTjXdyMpG5JXfqf0ZTfR8KzO/hhnwL THfoPGnhuw== ) ;; ADDITIONAL SECTION (7 records) dns.cssz.cz. 3600 IN A 91.195.106.10 dns2.cssz.cz. 3600 IN A 91.195.107.10 dns3.cssz.cz. 3600 IN A 91.195.106.151 dns4.cssz.cz. 3600 IN A 91.195.107.151 dns.cssz.cz. 3600 IN AAAA 2001:af0:fff4:11::100 dns2.cssz.cz. 3600 IN AAAA 2001:af0:fff6:11::100 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.nic.cz for cssz.cz/DNSKEY
	Received 405 bytes from 194.0.12.1
	;; Response received from [194.0.12.1] 405 octets ;; HEADER SECTION ;; id = 36277 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cssz.cz. 3600 IN NS dns.cssz.cz. cssz.cz. 3600 IN NS dns2.cssz.cz. cssz.cz. 3600 IN NS dns3.cssz.cz. cssz.cz. 3600 IN NS dns4.cssz.cz. cssz.cz. 3600 IN NS sdns.zarea.net. cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20260908102134 20260825085134 10850 cz. P/rzlNmdVOJOwYnbiEMGgHz+dnaTLesQ+dWtw5wOnwo2LhuTjXdyMpG5JXfqf0ZTfR8KzO/hhnwL THfoPGnhuw== ) ;; ADDITIONAL SECTION (7 records) dns.cssz.cz. 3600 IN A 91.195.106.10 dns.cssz.cz. 3600 IN AAAA 2001:af0:fff4:11::100 dns2.cssz.cz. 3600 IN A 91.195.107.10 dns2.cssz.cz. 3600 IN AAAA 2001:af0:fff6:11::100 dns3.cssz.cz. 3600 IN A 91.195.106.151 dns4.cssz.cz. 3600 IN A 91.195.107.151 ;; { "EDNS-VERSION": 0 }
	Found child zone cssz.cz

cssz.cz

	Checking DS between cz and cssz.cz
	Query to c.ns.nic.cz for cssz.cz/DS
	Received 182 bytes from 194.0.14.1
	;; Response received from [194.0.14.1] 182 octets ;; HEADER SECTION ;; id = 5382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DS ;; ANSWER SECTION (2 records) cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e ) cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20260908102134 20260825085134 10850 cz. P/rzlNmdVOJOwYnbiEMGgHz+dnaTLesQ+dWtw5wOnwo2LhuTjXdyMpG5JXfqf0ZTfR8KzO/hhnwL THfoPGnhuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cssz.cz in the cz zone
	DS=57145/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cssz.cz. 3600 IN RRSIG ( DS 13 2 3600 20260908102134 20260825085134 10850 cz. P/rzlNmdVOJOwYnbiEMGgHz+dnaTLesQ+dWtw5wOnwo2LhuTjXdyMpG5JXfqf0ZTfR8KzO/hhnwL THfoPGnhuw== )`
	RRSIG=10850 and DNSKEY=10850 verifies the DS RRset
	DS=57145/SHA-256 is now in the chain-of-trust
	`cssz.cz. 3600 IN DS ( 57145 13 2 6d0824f780d24c4c469f141aca51f387ff6b1fd9ec89f6995cd211240663fd5e )`
	Query to dns.cssz.cz for cssz.cz/DNSKEY
	Received 402 bytes from 91.195.106.10
	;; Response received from [91.195.106.10] 402 octets ;; HEADER SECTION ;; id = 9163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cssz.cz. IN DNSKEY ;; ANSWER SECTION (4 records) cssz.cz. 3600 IN DNSKEY ( 257 3 13 JdrlLR9NTW8q7pxrkcifbixAqHDjnb00OAQs3e3p2Z5HQHWJn8xhONiSg+By/NxLqIy2Mbr5m9jC VhmvlZo4LQ== ) ; keytag 57145 cssz.cz. 3600 IN DNSKEY ( 256 3 13 O5giIHlSVhztQs5MiicVMGsMLkF4QnD/d2hMR8s+y85nwjN0gS3rNDdALTTQuc53upaXiDh0bWW1 gAmgl8kptQ== ) ; keytag 60735 cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261010220102 20260831220102 57145 cssz.cz. 2qcK6ikEGvmnf2XV8WjdUvYCX1wNlmBIsWMEsPNiHXj0CaTn6TdauFPxUv/gllTHxPnoyZjF8tFG NoftMKaYOA== ) cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261010220102 20260831220102 60735 cssz.cz. utscDKr0ZgUmcEKwNJHVKhcJgx7Dk63lpUbdzX2hYbry/y5dWluYRZAsNzxIbYe4GFX7rVviLOhw BthpI+NWiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cssz.cz
	`cssz.cz. 3600 IN DNSKEY ( 257 3 13 JdrlLR9NTW8q7pxrkcifbixAqHDjnb00OAQs3e3p2Z5HQHWJn8xhONiSg+By/NxLqIy2Mbr5m9jC VhmvlZo4LQ== ) ; keytag 57145`
	`cssz.cz. 3600 IN DNSKEY ( 256 3 13 O5giIHlSVhztQs5MiicVMGsMLkF4QnD/d2hMR8s+y85nwjN0gS3rNDdALTTQuc53upaXiDh0bWW1 gAmgl8kptQ== ) ; keytag 60735`
	DNSKEY=57145/SEP is now in the chain-of-trust
	DS=57145/SHA-256 verifies DNSKEY=57145/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261010220102 20260831220102 57145 cssz.cz. 2qcK6ikEGvmnf2XV8WjdUvYCX1wNlmBIsWMEsPNiHXj0CaTn6TdauFPxUv/gllTHxPnoyZjF8tFG NoftMKaYOA== )`
	`cssz.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261010220102 20260831220102 60735 cssz.cz. utscDKr0ZgUmcEKwNJHVKhcJgx7Dk63lpUbdzX2hYbry/y5dWluYRZAsNzxIbYe4GFX7rVviLOhw BthpI+NWiQ== )`
	RRSIG=57145 and DNSKEY=57145/SEP verifies the DNSKEY RRset
	RRSIG=60735 and DNSKEY=60735 verifies the DNSKEY RRset
	DNSKEY=60735 is now in the chain-of-trust
	Query to sdns.zarea.net for www.cssz.cz/A
	Received 196 bytes from 217.198.113.53
	;; Response received from [217.198.113.53] 196 octets ;; HEADER SECTION ;; id = 6293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN A ;; ANSWER SECTION (2 records) www.cssz.cz. 300 IN CNAME ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20261010220102 20260831220102 60735 cssz.cz. zjVuiBI46OotIXfqSuyglLd8yhP9fxbG5Lpg8w1IeOkBgrYtpG1/4LVTn8eUIN+bzDOHPKA0AfDc jTWPLmaUwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sdns.zarea.net is authoritative for www.cssz.cz
	Query to dns4.cssz.cz for www.cssz.cz/DNSKEY
	Received 196 bytes from 91.195.107.151
	;; Response received from [91.195.107.151] 196 octets ;; HEADER SECTION ;; id = 59265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cssz.cz. IN DNSKEY ;; ANSWER SECTION (2 records) www.cssz.cz. 300 IN CNAME ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20261010220102 20260831220102 60735 cssz.cz. zjVuiBI46OotIXfqSuyglLd8yhP9fxbG5Lpg8w1IeOkBgrYtpG1/4LVTn8eUIN+bzDOHPKA0AfDc jTWPLmaUwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by cssz.cz zone
	www.cssz.cz is a CNAME to ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net
	Found 1 RRSIGs over CNAME RRset
	`www.cssz.cz. 300 IN RRSIG ( CNAME 13 3 300 20261010220102 20260831220102 60735 cssz.cz. zjVuiBI46OotIXfqSuyglLd8yhP9fxbG5Lpg8w1IeOkBgrYtpG1/4LVTn8eUIN+bzDOHPKA0AfDc jTWPLmaUwA== )`
	RRSIG=60735 and DNSKEY=60735 verifies the CNAME RRset

	Query to k.root-servers.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 1196 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1196 octets ;; HEADER SECTION ;; id = 51755 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . g8nkQSD71ydz6QxvFW3ZWkhJh1pQUv3EYn4hlQKpfJjn0gGxUnTDGw5gZ0kkOCFaYkZpq36Ut8e0 f4Ch116YezXdYPxirfrwbUSA2a3GwN30sxf4bznNZlz7cUuBAN7Uf1LDMjr9xnmYNKkgHw1rznkq 7u7oA+3jaly1CUE5BZHKLS44b7cjZ1KyJyroVwMB0zhLOZqr+GZRjT2RSKakMpJpBi7amQtoDRNJ 3Ldy/V45OJSv2O5ffNt84ZgrRU8Nxgiu2unwShAv9xur4hz6DEeAAbRBkCWL23Z6lSSp4Ik5Jb+H KsCWglZ+IDlP3KRE5keSUv9GmFqGYxpKwFy8EA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for net/DNSKEY
	Received 1160 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1160 octets ;; HEADER SECTION ;; id = 60850 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . g8nkQSD71ydz6QxvFW3ZWkhJh1pQUv3EYn4hlQKpfJjn0gGxUnTDGw5gZ0kkOCFaYkZpq36Ut8e0 f4Ch116YezXdYPxirfrwbUSA2a3GwN30sxf4bznNZlz7cUuBAN7Uf1LDMjr9xnmYNKkgHw1rznkq 7u7oA+3jaly1CUE5BZHKLS44b7cjZ1KyJyroVwMB0zhLOZqr+GZRjT2RSKakMpJpBi7amQtoDRNJ 3Ldy/V45OJSv2O5ffNt84ZgrRU8Nxgiu2unwShAv9xur4hz6DEeAAbRBkCWL23Z6lSSp4Ik5Jb+H KsCWglZ+IDlP3KRE5keSUv9GmFqGYxpKwFy8EA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to i.root-servers.net for net/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 32226 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . g8nkQSD71ydz6QxvFW3ZWkhJh1pQUv3EYn4hlQKpfJjn0gGxUnTDGw5gZ0kkOCFaYkZpq36Ut8e0 f4Ch116YezXdYPxirfrwbUSA2a3GwN30sxf4bznNZlz7cUuBAN7Uf1LDMjr9xnmYNKkgHw1rznkq 7u7oA+3jaly1CUE5BZHKLS44b7cjZ1KyJyroVwMB0zhLOZqr+GZRjT2RSKakMpJpBi7amQtoDRNJ 3Ldy/V45OJSv2O5ffNt84ZgrRU8Nxgiu2unwShAv9xur4hz6DEeAAbRBkCWL23Z6lSSp4Ik5Jb+H KsCWglZ+IDlP3KRE5keSUv9GmFqGYxpKwFy8EA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . g8nkQSD71ydz6QxvFW3ZWkhJh1pQUv3EYn4hlQKpfJjn0gGxUnTDGw5gZ0kkOCFaYkZpq36Ut8e0 f4Ch116YezXdYPxirfrwbUSA2a3GwN30sxf4bznNZlz7cUuBAN7Uf1LDMjr9xnmYNKkgHw1rznkq 7u7oA+3jaly1CUE5BZHKLS44b7cjZ1KyJyroVwMB0zhLOZqr+GZRjT2RSKakMpJpBi7amQtoDRNJ 3Ldy/V45OJSv2O5ffNt84ZgrRU8Nxgiu2unwShAv9xur4hz6DEeAAbRBkCWL23Z6lSSp4Ik5Jb+H KsCWglZ+IDlP3KRE5keSUv9GmFqGYxpKwFy8EA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 43391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260919141035 20260904140535 37331 net. HqZXU2QeMOG/3kw3yiPH1XtywZKFGBtAHvRCxwB3k0XOrKHjK4tEwJ/wpGpyoi+rM09E3ZjhyXVT Con9GW7yaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260919141035 20260904140535 37331 net. HqZXU2QeMOG/3kw3yiPH1XtywZKFGBtAHvRCxwB3k0XOrKHjK4tEwJ/wpGpyoi+rM09E3ZjhyXVT Con9GW7yaQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=7272 is now in the chain-of-trust
	Query to k.gtld-servers.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 603 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 603 octets ;; HEADER SECTION ;; id = 27300 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azurefd.net. 172800 IN NS ns1-37.azure-dns.com. azurefd.net. 172800 IN NS ns2-37.azure-dns.net. azurefd.net. 172800 IN NS ns4-37.azure-dns.info. azurefd.net. 172800 IN NS ns3-37.azure-dns.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN RRSIG ( NSEC3 13 2 900 20260910034633 20260903023633 7272 net. o46Dv8n8bNn0XNZMbTR5AMdUjZvRta3+425NGwuM2lI8kJdZTNxFtN3MOuSQfYcNXF4Oj0P26fZq oXP0YXVnYA== ) ;; ADDITIONAL SECTION (3 records) ns2-37.azure-dns.net. 172800 IN A 150.171.16.37 ns2-37.azure-dns.net. 172800 IN AAAA 2620:1ec:8ec:10::25 ;; { "EDNS-VERSION": 0 }
	Query to k.gtld-servers.net for azurefd.net/DNSKEY
	Received 575 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 575 octets ;; HEADER SECTION ;; id = 26273 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azurefd.net. 172800 IN NS ns1-37.azure-dns.com. azurefd.net. 172800 IN NS ns2-37.azure-dns.net. azurefd.net. 172800 IN NS ns4-37.azure-dns.info. azurefd.net. 172800 IN NS ns3-37.azure-dns.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN RRSIG ( NSEC3 13 2 900 20260910034633 20260903023633 7272 net. o46Dv8n8bNn0XNZMbTR5AMdUjZvRta3+425NGwuM2lI8kJdZTNxFtN3MOuSQfYcNXF4Oj0P26fZq oXP0YXVnYA== ) ;; ADDITIONAL SECTION (3 records) ns2-37.azure-dns.net. 172800 IN A 150.171.16.37 ns2-37.azure-dns.net. 172800 IN AAAA 2620:1ec:8ec:10::25 ;; { "EDNS-VERSION": 0 }
	Found child zone azurefd.net

azurefd.net

	Checking DS between net and azurefd.net
	Query to c.gtld-servers.net for azurefd.net/DS
	Received 569 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 569 octets ;; HEADER SECTION ;; id = 30207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1788629233 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260912172713 20260905161713 7272 net. MvsyWd/WqAjy9QcV9c5wBPbNSeb1pDxbrD6o/QJWcgdckB3nOP/LPVbQBqDZg0O/T0miphWG8f9Z IbtQ4VRaQA== ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN NSEC3 ( 1 1 0 - v7otevi5ij4i6ckrrrk22813a610tf0b NS DS RRSIG ) V7OR19JSUMVU4M1LU6F8EA19FDBNOIGD.net. 900 IN RRSIG ( NSEC3 13 2 900 20260910034633 20260903023633 7272 net. o46Dv8n8bNn0XNZMbTR5AMdUjZvRta3+425NGwuM2lI8kJdZTNxFtN3MOuSQfYcNXF4Oj0P26fZq oXP0YXVnYA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for azurefd.net in the net zone
	Query to ns1-37.azure-dns.com for azurefd.net/DNSKEY
	Received 126 bytes from 150.171.10.37
	;; Response received from [150.171.10.37] 126 octets ;; HEADER SECTION ;; id = 2308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azurefd.net. 300 IN SOA ( ns1-37.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4-37.azure-dns.info for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 205 bytes from 13.107.206.37
	;; Response received from [13.107.206.37] 205 octets ;; HEADER SECTION ;; id = 17282 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) z01.azurefd.net. 172800 IN NS ns1-35.azure-dns.com. z01.azurefd.net. 172800 IN NS ns2-35.azure-dns.net. z01.azurefd.net. 172800 IN NS ns3-35.azure-dns.org. z01.azurefd.net. 172800 IN NS ns4-35.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-37.azure-dns.com for z01.azurefd.net/DNSKEY
	Received 178 bytes from 150.171.10.37
	;; Response received from [150.171.10.37] 178 octets ;; HEADER SECTION ;; id = 19221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) z01.azurefd.net. 172800 IN NS ns1-35.azure-dns.com. z01.azurefd.net. 172800 IN NS ns2-35.azure-dns.net. z01.azurefd.net. 172800 IN NS ns3-35.azure-dns.org. z01.azurefd.net. 172800 IN NS ns4-35.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone z01.azurefd.net

z01.azurefd.net

	Checking DS between azurefd.net and z01.azurefd.net
	Query to ns4-37.azure-dns.info for z01.azurefd.net/DS
	Received 130 bytes from 13.107.206.37
	;; Response received from [13.107.206.37] 130 octets ;; HEADER SECTION ;; id = 29088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azurefd.net. 300 IN SOA ( ns1-37.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for z01.azurefd.net in the azurefd.net zone
	Query to ns3-35.azure-dns.org for z01.azurefd.net/DNSKEY
	Received 130 bytes from 13.107.222.35
	;; Response received from [13.107.222.35] 130 octets ;; HEADER SECTION ;; id = 35483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) z01.azurefd.net. 300 IN SOA ( ns1-35.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4-35.azure-dns.info for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/A
	Received 100 bytes from 13.107.206.35
	;; Response received from [13.107.206.35] 100 octets ;; HEADER SECTION ;; id = 5585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN A ;; ANSWER SECTION (1 record) ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. 60 IN CNAME mr-z01.tm-azurefd.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4-35.azure-dns.info is authoritative for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net
	Query to ns2-35.azure-dns.net for ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net/DNSKEY
	Received 100 bytes from 150.171.16.35
	;; Response received from [150.171.16.35] 100 octets ;; HEADER SECTION ;; id = 58476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. IN DNSKEY ;; ANSWER SECTION (1 record) ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net. 60 IN CNAME mr-z01.tm-azurefd.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ep-ikr-cndmeub5ewbxb2bv.z01.azurefd.net is a CNAME to mr-z01.tm-azurefd.net
	No RRSIGs found

net

	Query to g.gtld-servers.net for mr-z01.tm-azurefd.net/A
	Received 486 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 486 octets ;; HEADER SECTION ;; id = 51197 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tm-azurefd.net. 172800 IN NS tm1.edgedns-tm.info. tm-azurefd.net. 172800 IN NS tm1.dns-tm.com. tm-azurefd.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN NSEC3 ( 1 1 0 - p8kn7apkfbeak8lcv2bfgrdd4as0v01r NS DS RRSIG ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN RRSIG ( NSEC3 13 2 900 20260909034128 20260902023128 7272 net. 0oKFgIc4pd1OYjE1yMvK+5enG5wV8xHJP+gUJGs+RoRp2wsYSs9Vf3onpWeCuxyep69L2aJwU6LX Zo/jB/cerg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.gtld-servers.net for tm-azurefd.net/DNSKEY
	Received 479 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 479 octets ;; HEADER SECTION ;; id = 64085 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tm-azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tm-azurefd.net. 172800 IN NS tm1.edgedns-tm.info. tm-azurefd.net. 172800 IN NS tm1.dns-tm.com. tm-azurefd.net. 172800 IN NS tm2.dns-tm.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN NSEC3 ( 1 1 0 - p8kn7apkfbeak8lcv2bfgrdd4as0v01r NS DS RRSIG ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN RRSIG ( NSEC3 13 2 900 20260909034128 20260902023128 7272 net. 0oKFgIc4pd1OYjE1yMvK+5enG5wV8xHJP+gUJGs+RoRp2wsYSs9Vf3onpWeCuxyep69L2aJwU6LX Zo/jB/cerg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tm-azurefd.net

tm-azurefd.net

	Checking DS between net and tm-azurefd.net
	Query to e.gtld-servers.net for tm-azurefd.net/DS
	Received 572 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 572 octets ;; HEADER SECTION ;; id = 56341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tm-azurefd.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 900 IN RRSIG ( NSEC3 13 2 900 20260911034456 20260904023456 7272 net. UDQPlS6I2tVwfCB+o0b1QpEGpXBjrAN5MlxBnaJKqBmV+q3NWEi8xfDok8meD1LoFkgg8yrpVMGF KZ3nsOUZ5g== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1788629233 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20260912172713 20260905161713 7272 net. MvsyWd/WqAjy9QcV9c5wBPbNSeb1pDxbrD6o/QJWcgdckB3nOP/LPVbQBqDZg0O/T0miphWG8f9Z IbtQ4VRaQA== ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN NSEC3 ( 1 1 0 - p8kn7apkfbeak8lcv2bfgrdd4as0v01r NS DS RRSIG ) P8KI8MEF68SVLQD3GJCNUQ8NH3B57BEQ.net. 900 IN RRSIG ( NSEC3 13 2 900 20260909034128 20260902023128 7272 net. 0oKFgIc4pd1OYjE1yMvK+5enG5wV8xHJP+gUJGs+RoRp2wsYSs9Vf3onpWeCuxyep69L2aJwU6LX Zo/jB/cerg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for tm-azurefd.net in the net zone
	Query to tm1.dns-tm.com for tm-azurefd.net/DNSKEY
	Received 110 bytes from 150.171.10.240
	;; Response received from [150.171.10.240] 110 octets ;; HEADER SECTION ;; id = 50817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tm-azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tm-azurefd.net. 60 IN SOA ( tm1.dns-tm.com. msnhst.microsoft.com. 2019633082 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to tm2.dns-tm.com for mr-z01.tm-azurefd.net/A
	Received 66 bytes from 150.171.16.240
	;; Response received from [150.171.16.240] 66 octets ;; HEADER SECTION ;; id = 32480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN A ;; ANSWER SECTION (1 record) mr-z01.tm-azurefd.net. 10 IN A 150.171.109.73 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tm2.dns-tm.com is authoritative for mr-z01.tm-azurefd.net
	Query to tm2.dns-tm.com for mr-z01.tm-azurefd.net/DNSKEY
	Received 117 bytes from 150.171.16.240
	;; Response received from [150.171.16.240] 117 octets ;; HEADER SECTION ;; id = 27723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tm-azurefd.net. 60 IN SOA ( tm1.dns-tm.com. msnhst.microsoft.com. 2019633082 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to tm1.dns-tm.com for tm-azurefd.net/SOA
	Received 110 bytes from 150.171.10.240
	;; Response received from [150.171.10.240] 110 octets ;; HEADER SECTION ;; id = 15912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tm-azurefd.net. IN SOA ;; ANSWER SECTION (1 record) tm-azurefd.net. 60 IN SOA ( tm1.dns-tm.com. msnhst.microsoft.com. 2019633082 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to tm1.edgedns-tm.info for tm-azurefd.net/SOA
	Received 110 bytes from 13.107.222.240
	;; Response received from [13.107.222.240] 110 octets ;; HEADER SECTION ;; id = 48861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tm-azurefd.net. IN SOA ;; ANSWER SECTION (1 record) tm-azurefd.net. 60 IN SOA ( tm1.dns-tm.com. msnhst.microsoft.com. 2019633082 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to tm2.dns-tm.com for mr-z01.tm-azurefd.net/A
	mr-z01.tm-azurefd.net A RR has value 150.171.109.73
	No RRSIGs found

tm-azurefd.net

	Query to tm1.dns-tm.com for mr-z01.tm-azurefd.net/A
	Received 66 bytes from 150.171.10.240
	;; Response received from [150.171.10.240] 66 octets ;; HEADER SECTION ;; id = 52300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN A ;; ANSWER SECTION (1 record) mr-z01.tm-azurefd.net. 10 IN A 150.171.109.65 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tm1.dns-tm.com is authoritative for mr-z01.tm-azurefd.net
	Query to tm1.edgedns-tm.info for mr-z01.tm-azurefd.net/DNSKEY
	Received 117 bytes from 13.107.222.240
	;; Response received from [13.107.222.240] 117 octets ;; HEADER SECTION ;; id = 15430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tm-azurefd.net. 60 IN SOA ( tm1.dns-tm.com. msnhst.microsoft.com. 2019633082 ;serial 1800 ;refresh 900 ;retry 2419200 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to tm1.dns-tm.com for mr-z01.tm-azurefd.net/A
	mr-z01.tm-azurefd.net A RR has value 150.171.109.65
	No RRSIGs found

tm-azurefd.net

	Query to tm1.edgedns-tm.info for mr-z01.tm-azurefd.net/A
	Received 66 bytes from 13.107.222.240
	;; Response received from [13.107.222.240] 66 octets ;; HEADER SECTION ;; id = 48501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mr-z01.tm-azurefd.net. IN A ;; ANSWER SECTION (1 record) mr-z01.tm-azurefd.net. 10 IN A 150.171.109.73 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tm1.edgedns-tm.info is authoritative for mr-z01.tm-azurefd.net
	Query to tm1.edgedns-tm.info for mr-z01.tm-azurefd.net/DNSKEY
	Query to tm1.edgedns-tm.info for mr-z01.tm-azurefd.net/A
	mr-z01.tm-azurefd.net A RR has value 150.171.109.73
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.cssz.cz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: