DNSSEC Debugger - www.iana.org

Domain Name:

Time: 2025-07-06 23:33:08 UTC

Analyzing DNSSEC problems for www.iana.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 23031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to f.root-servers.net for www.iana.org/A
	Received 778 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 778 octets ;; HEADER SECTION ;; id = 35723 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . or+TqTDbMOm2WtBxjqpLfqmftygYpjVcKOc1XaPGrkfF0MJt35bZ/LQJg2x9ymP/k4MKXbVPf2P9 K+WN3vD75fO1ltaFvDiOxc3+l7ub0Yvt5+e1lt5/0wq2/Egcw21SQp+vH9VZuHR0Mw8c06O61IGb 4Nmdzs46C/v4E0AJJ1eyQ8p1cQI+uqIeDZfqQ6L0poN5/P4Ewc8cPRON1pzYrJdN9B4fx+jC52x0 WwDRH6opykxPjw6WXvAmKwciqvJNcD56brz5RU+SgNxWd8MCycJMedlb6K8su+NHqbV/S1Eh7p/k Jais+1RTazfTSG+jp+KQKUJ4BXB1ZRxq8MvmJw== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for org/DNSKEY
	Received 769 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 769 octets ;; HEADER SECTION ;; id = 47062 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . or+TqTDbMOm2WtBxjqpLfqmftygYpjVcKOc1XaPGrkfF0MJt35bZ/LQJg2x9ymP/k4MKXbVPf2P9 K+WN3vD75fO1ltaFvDiOxc3+l7ub0Yvt5+e1lt5/0wq2/Egcw21SQp+vH9VZuHR0Mw8c06O61IGb 4Nmdzs46C/v4E0AJJ1eyQ8p1cQI+uqIeDZfqQ6L0poN5/P4Ewc8cPRON1pzYrJdN9B4fx+jC52x0 WwDRH6opykxPjw6WXvAmKwciqvJNcD56brz5RU+SgNxWd8MCycJMedlb6K8su+NHqbV/S1Eh7p/k Jais+1RTazfTSG+jp+KQKUJ4BXB1ZRxq8MvmJw== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to j.root-servers.net for org/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 36284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . or+TqTDbMOm2WtBxjqpLfqmftygYpjVcKOc1XaPGrkfF0MJt35bZ/LQJg2x9ymP/k4MKXbVPf2P9 K+WN3vD75fO1ltaFvDiOxc3+l7ub0Yvt5+e1lt5/0wq2/Egcw21SQp+vH9VZuHR0Mw8c06O61IGb 4Nmdzs46C/v4E0AJJ1eyQ8p1cQI+uqIeDZfqQ6L0poN5/P4Ewc8cPRON1pzYrJdN9B4fx+jC52x0 WwDRH6opykxPjw6WXvAmKwciqvJNcD56brz5RU+SgNxWd8MCycJMedlb6K8su+NHqbV/S1Eh7p/k Jais+1RTazfTSG+jp+KQKUJ4BXB1ZRxq8MvmJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . or+TqTDbMOm2WtBxjqpLfqmftygYpjVcKOc1XaPGrkfF0MJt35bZ/LQJg2x9ymP/k4MKXbVPf2P9 K+WN3vD75fO1ltaFvDiOxc3+l7ub0Yvt5+e1lt5/0wq2/Egcw21SQp+vH9VZuHR0Mw8c06O61IGb 4Nmdzs46C/v4E0AJJ1eyQ8p1cQI+uqIeDZfqQ6L0poN5/P4Ewc8cPRON1pzYrJdN9B4fx+jC52x0 WwDRH6opykxPjw6WXvAmKwciqvJNcD56brz5RU+SgNxWd8MCycJMedlb6K8su+NHqbV/S1Eh7p/k Jais+1RTazfTSG+jp+KQKUJ4BXB1ZRxq8MvmJw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to b2.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 895 octets ;; HEADER SECTION ;; id = 53614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAcCFJTbWuqRWY+M2WK23TaX0NQSygiaEd7vBGhqTBqt1Qng3TGJoqVllmJlW+emrE7pGQh2D 7z4Dq4rIdIENaBphTwzZoQxnbyAHXQO6jNziXjPwl9l9mlyOkxtHJCFEnSl59Frcm2AtsrcHdZ7l 5aOJ1bx4n+2vl5CvahHeekJB ) ; keytag 321 org. 3600 IN DNSKEY ( 256 3 8 AwEAAcJqS58QU0zqPUjqxlE0oHVjsVvTaJf4qAGUHc8wfpF2ohhyeMD1sMI1bkdRt4AdAPgZSOdU 9M5c1SJpJpEAhti6yuBAEx/FqijSnspmjfNYiZHKUIClMUuxmXUV4l58tL90gmr9hLczZ8w39x0G NHOX1L2gyjZjV5tEw45pLK8R ) ; keytag 8958 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250722152653 20250701142653 26974 org. i4f98HhBq7e/KMfXqAyqSEgxImO7gYd7Xwde4DHuIkbRFBigcB9ocZ4sCXOhgrEwb0REYqUGV8Ps 5CxVaE2RZCWQdr8asSukh06U8HY/c6oZW7EzZO5gdvZC6Wen/BwKY5RxWRUm4lP/s4ZSVUXD4zJI 6y3P/AZdmwScmrLEVLoUrq4BVH+eU317j5PzlRoFqvdP7jN0kZ4WOR3EGt8mgfWsml6Qv5xkWQqT aifPfjdgNhvTD+ri3rL8AT2O8neddjJLXfEdP6PRJFcyaxuz0OE2C12pMdpuuevfxlr8d04XHlPR 1rLgaiao4EttXcF7/5THvTHuhBPcIsky3IFt1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAcCFJTbWuqRWY+M2WK23TaX0NQSygiaEd7vBGhqTBqt1Qng3TGJoqVllmJlW+emrE7pGQh2D 7z4Dq4rIdIENaBphTwzZoQxnbyAHXQO6jNziXjPwl9l9mlyOkxtHJCFEnSl59Frcm2AtsrcHdZ7l 5aOJ1bx4n+2vl5CvahHeekJB ) ; keytag 321`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAcJqS58QU0zqPUjqxlE0oHVjsVvTaJf4qAGUHc8wfpF2ohhyeMD1sMI1bkdRt4AdAPgZSOdU 9M5c1SJpJpEAhti6yuBAEx/FqijSnspmjfNYiZHKUIClMUuxmXUV4l58tL90gmr9hLczZ8w39x0G NHOX1L2gyjZjV5tEw45pLK8R ) ; keytag 8958`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250722152653 20250701142653 26974 org. i4f98HhBq7e/KMfXqAyqSEgxImO7gYd7Xwde4DHuIkbRFBigcB9ocZ4sCXOhgrEwb0REYqUGV8Ps 5CxVaE2RZCWQdr8asSukh06U8HY/c6oZW7EzZO5gdvZC6Wen/BwKY5RxWRUm4lP/s4ZSVUXD4zJI 6y3P/AZdmwScmrLEVLoUrq4BVH+eU317j5PzlRoFqvdP7jN0kZ4WOR3EGt8mgfWsml6Qv5xkWQqT aifPfjdgNhvTD+ri3rL8AT2O8neddjJLXfEdP6PRJFcyaxuz0OE2C12pMdpuuevfxlr8d04XHlPR 1rLgaiao4EttXcF7/5THvTHuhBPcIsky3IFt1w== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=321 is now in the chain-of-trust
	DNSKEY=8958 is now in the chain-of-trust
	Query to a0.org.afilias-nst.info for www.iana.org/A
	Received 383 bytes from 199.19.56.1
	;; Response received from [199.19.56.1] 383 octets ;; HEADER SECTION ;; id = 38907 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. kmLsyfNX5nhabt/zLjuF1ldLSXmauOYaKWLHpOo9/3oq1+G89l9CfWy1jz+pjrq58hBu+6MwT6rv VZoZ5rs3YPSPQT4lG6yjU/Onmrkueock+YVlVGS3RnopA5JGrREUUvLaRrBpxgBe0xO+uRWJvX+H f+QXiOWgsXCkHUX/5as= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Query to a0.org.afilias-nst.info for iana.org/DNSKEY
	Received 379 bytes from 199.19.56.1
	;; Response received from [199.19.56.1] 379 octets ;; HEADER SECTION ;; id = 35961 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. kmLsyfNX5nhabt/zLjuF1ldLSXmauOYaKWLHpOo9/3oq1+G89l9CfWy1jz+pjrq58hBu+6MwT6rv VZoZ5rs3YPSPQT4lG6yjU/Onmrkueock+YVlVGS3RnopA5JGrREUUvLaRrBpxgBe0xO+uRWJvX+H f+QXiOWgsXCkHUX/5as= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Found child zone iana.org

iana.org

	Checking DS between org and iana.org
	Query to b2.org.afilias-nst.org for iana.org/DS
	Received 248 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 248 octets ;; HEADER SECTION ;; id = 36075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DS ;; ANSWER SECTION (2 records) iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. kmLsyfNX5nhabt/zLjuF1ldLSXmauOYaKWLHpOo9/3oq1+G89l9CfWy1jz+pjrq58hBu+6MwT6rv VZoZ5rs3YPSPQT4lG6yjU/Onmrkueock+YVlVGS3RnopA5JGrREUUvLaRrBpxgBe0xO+uRWJvX+H f+QXiOWgsXCkHUX/5as= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for iana.org in the org zone
	DS=2234/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`iana.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. kmLsyfNX5nhabt/zLjuF1ldLSXmauOYaKWLHpOo9/3oq1+G89l9CfWy1jz+pjrq58hBu+6MwT6rv VZoZ5rs3YPSPQT4lG6yjU/Onmrkueock+YVlVGS3RnopA5JGrREUUvLaRrBpxgBe0xO+uRWJvX+H f+QXiOWgsXCkHUX/5as= )`
	RRSIG=8958 and DNSKEY=8958 verifies the DS RRset
	DS=2234/SHA-256 is now in the chain-of-trust
	`iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c )`
	Query to b.iana-servers.net for iana.org/DNSKEY
	Received 301 bytes from 199.43.133.53
	;; Response received from [199.43.133.53] 301 octets ;; HEADER SECTION ;; id = 64824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (3 records) iana.org. 3600 IN DNSKEY ( 256 3 13 jGsJ/nBhYKCOPgH4xWws69CaRO3TmmyI1/SVIMrX7DJ4+oXOxcfbdg5BqIzymT2nZLVp8SvD0ntB ENkxhdAh7A== ) ; keytag 32205 iana.org. 3600 IN DNSKEY ( 257 3 13 ShmRDG25b0nhrnRcBavHgaSO+vmS+46ZiZ+lQJd3UWXQrl/NWSg+CBBaqSTBD1N9eHthbudy+9Qq EocCRUcHKg== ) ; keytag 2234 iana.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250720122903 20250629203420 2234 iana.org. JEKI6BLEir0dk3YIINOkSZhUsqzKjd/OhTyZDR46w0/NGnMbEZiv3ob9wFvortsWj33066vaw7d4 xDHq3K2fSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for iana.org
	`iana.org. 3600 IN DNSKEY ( 256 3 13 jGsJ/nBhYKCOPgH4xWws69CaRO3TmmyI1/SVIMrX7DJ4+oXOxcfbdg5BqIzymT2nZLVp8SvD0ntB ENkxhdAh7A== ) ; keytag 32205`
	`iana.org. 3600 IN DNSKEY ( 257 3 13 ShmRDG25b0nhrnRcBavHgaSO+vmS+46ZiZ+lQJd3UWXQrl/NWSg+CBBaqSTBD1N9eHthbudy+9Qq EocCRUcHKg== ) ; keytag 2234`
	DNSKEY=2234/SEP is now in the chain-of-trust
	DS=2234/SHA-256 verifies DNSKEY=2234/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`iana.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250720122903 20250629203420 2234 iana.org. JEKI6BLEir0dk3YIINOkSZhUsqzKjd/OhTyZDR46w0/NGnMbEZiv3ob9wFvortsWj33066vaw7d4 xDHq3K2fSg== )`
	RRSIG=2234 and DNSKEY=2234/SEP verifies the DNSKEY RRset
	DNSKEY=32205 is now in the chain-of-trust
	Query to c.iana-servers.net for www.iana.org/A
	Received 1160 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 1160 octets ;; HEADER SECTION ;; id = 42671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20250718100427 20250627050122 32205 iana.org. KZCxRA+aS5IWUBqMgCH43/M2k7d92hXa3wNHcb7oK1L+5qAqJbJLwULDmfEG7zEqO9sJfOt8kVnF NkuVvBvx3Q== ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715152236 20250624050820 5592 icann.org. qWc05siYWCst7EqlC8gxgd2jf+qFR8GVWJWDES2dNqrlOzJEz5NkAsrqx23zMGvLU40HVnJP7fVe volRYN78vg== ) gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714045556 20250622210420 5592 icann.org. IZ+Yb48P8/By6SG7wrOqLxKjOkgeckwrMfeGbaA07aMzETlJ6tFjWobtEppq7sVwr79X2mNZNCta 78JdnI46nQ== ) gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250714012421 20250623090520 5592 icann.org. V55Te7ur7DHEiM2f/+0qBXkacFmfPjP24sr3mpYj4HLgbUt73AaGn7u0gGSqxuZ0V/OfJ43CsMcX kI3OfjTdDw== ) gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714094156 20250623190620 5592 icann.org. I+Hm5PsSgnGh9Fqz5VSdCNp/AZJDXm2SGQDfXuoYLwStfcUO/jwa/pfovSPa0HfoQIuZk5uuMQ8S Q5Rv97aEcg== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715114012 20250624150920 5592 icann.org. ZmBjTMBf39RRfPjKuYRRsaUnvA3zeMiqn9F24n0fh2AWXz1GXJgbUKNQGpZYZMArbQFfo7DSCCVp gooq89Xrag== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250727233725 20250706132157 58002 icann.org. EmolqEMGsWqpJDQoZ2fBk56RbzVOehyUOW1ytcrsH7jDkrbG7R2RiJrxklxDgg6nwf5oUiRnjVLm qvQgkTEr8A== ) ;; { "EDNS-VERSION": 0 }
	c.iana-servers.net is authoritative for www.iana.org
	Query to c.iana-servers.net for www.iana.org/DNSKEY
	Received 1160 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 1160 octets ;; HEADER SECTION ;; id = 5708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN DNSKEY ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20250718100427 20250627050122 32205 iana.org. KZCxRA+aS5IWUBqMgCH43/M2k7d92hXa3wNHcb7oK1L+5qAqJbJLwULDmfEG7zEqO9sJfOt8kVnF NkuVvBvx3Q== ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715152236 20250624050820 5592 icann.org. qWc05siYWCst7EqlC8gxgd2jf+qFR8GVWJWDES2dNqrlOzJEz5NkAsrqx23zMGvLU40HVnJP7fVe volRYN78vg== ) gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714045556 20250622210420 5592 icann.org. IZ+Yb48P8/By6SG7wrOqLxKjOkgeckwrMfeGbaA07aMzETlJ6tFjWobtEppq7sVwr79X2mNZNCta 78JdnI46nQ== ) gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250714012421 20250623090520 5592 icann.org. V55Te7ur7DHEiM2f/+0qBXkacFmfPjP24sr3mpYj4HLgbUt73AaGn7u0gGSqxuZ0V/OfJ43CsMcX kI3OfjTdDw== ) gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714094156 20250623190620 5592 icann.org. I+Hm5PsSgnGh9Fqz5VSdCNp/AZJDXm2SGQDfXuoYLwStfcUO/jwa/pfovSPa0HfoQIuZk5uuMQ8S Q5Rv97aEcg== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715114012 20250624150920 5592 icann.org. ZmBjTMBf39RRfPjKuYRRsaUnvA3zeMiqn9F24n0fh2AWXz1GXJgbUKNQGpZYZMArbQFfo7DSCCVp gooq89Xrag== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250727233725 20250706132157 58002 icann.org. EmolqEMGsWqpJDQoZ2fBk56RbzVOehyUOW1ytcrsH7jDkrbG7R2RiJrxklxDgg6nwf5oUiRnjVLm qvQgkTEr8A== ) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by iana.org zone
	www.iana.org is a CNAME to ianawww.vip.icann.org
	Found 1 RRSIGs over CNAME RRset
	`www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20250718100427 20250627050122 32205 iana.org. KZCxRA+aS5IWUBqMgCH43/M2k7d92hXa3wNHcb7oK1L+5qAqJbJLwULDmfEG7zEqO9sJfOt8kVnF NkuVvBvx3Q== )`
	RRSIG=32205 and DNSKEY=32205 verifies the CNAME RRset

org

	Query to d0.org.afilias-nst.org for ianawww.vip.icann.org/A
	Received 387 bytes from 199.19.57.1
	;; Response received from [199.19.57.1] 387 octets ;; HEADER SECTION ;; id = 39499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. Qw7dKeJio7eevpZ4rRwsmu0w7xaHNYPsS9HKUl7hh+sscSbNpSpLAp1H7i6iWD++riKeZnCpm9q8 yBfg5BhnM0U3HzzuYBE5HlZ0LJk4XthsPLA3c0OSBAS36qUtzgJ127XFHybdWkBBbtlSvsm0EaAc 2XXfk27LM4AgrSX8x+Y= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Query to b0.org.afilias-nst.org for icann.org/DNSKEY
	Received 375 bytes from 199.19.54.1
	;; Response received from [199.19.54.1] 375 octets ;; HEADER SECTION ;; id = 34294 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. Qw7dKeJio7eevpZ4rRwsmu0w7xaHNYPsS9HKUl7hh+sscSbNpSpLAp1H7i6iWD++riKeZnCpm9q8 yBfg5BhnM0U3HzzuYBE5HlZ0LJk4XthsPLA3c0OSBAS36qUtzgJ127XFHybdWkBBbtlSvsm0EaAc 2XXfk27LM4AgrSX8x+Y= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Found child zone icann.org

icann.org

	Checking DS between org and icann.org
	Query to c0.org.afilias-nst.info for icann.org/DS
	Received 249 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 249 octets ;; HEADER SECTION ;; id = 10383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DS ;; ANSWER SECTION (2 records) icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. Qw7dKeJio7eevpZ4rRwsmu0w7xaHNYPsS9HKUl7hh+sscSbNpSpLAp1H7i6iWD++riKeZnCpm9q8 yBfg5BhnM0U3HzzuYBE5HlZ0LJk4XthsPLA3c0OSBAS36qUtzgJ127XFHybdWkBBbtlSvsm0EaAc 2XXfk27LM4AgrSX8x+Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for icann.org in the org zone
	DS=20149/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`icann.org. 3600 IN RRSIG ( DS 8 2 3600 20250722152653 20250701142653 8958 org. Qw7dKeJio7eevpZ4rRwsmu0w7xaHNYPsS9HKUl7hh+sscSbNpSpLAp1H7i6iWD++riKeZnCpm9q8 yBfg5BhnM0U3HzzuYBE5HlZ0LJk4XthsPLA3c0OSBAS36qUtzgJ127XFHybdWkBBbtlSvsm0EaAc 2XXfk27LM4AgrSX8x+Y= )`
	RRSIG=8958 and DNSKEY=8958 verifies the DS RRset
	DS=20149/SHA-256 is now in the chain-of-trust
	`icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e )`
	Query to c.icann-servers.net for icann.org/DNSKEY
	Received 383 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 383 octets ;; HEADER SECTION ;; id = 6894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (4 records) icann.org. 3600 IN DNSKEY ( 257 3 13 d25y9HFMnvNDVXria3ODfdcjUwA6S0MjGnOftautpQ9Aztpc95MKKNo7uUgH6qQDwqvD2ycNYQJS q75K3YuW8A== ) ; keytag 20149 icann.org. 3600 IN DNSKEY ( 256 3 13 gnv6YkhE2XeiA84KmAdO0kygJ5XApDesbrXInWqUK8dfKneGRP8jkxjidAIHEkUJLNTOmlDnB6Jj BSEk0YDs5w== ) ; keytag 58002 icann.org. 3600 IN DNSKEY ( 256 3 13 G/IlMCO+95WFIVLKA+8i0C7CV7xAmzfl9911Lu26uLZaXZ48zPuK7rfm876jKDAOOE8q9iPZBt8C 9fWvH6kugA== ) ; keytag 5592 icann.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250717110849 20250626134209 20149 icann.org. upRd9UWfb7ZTB+QnJPxEwhzP7jAbTwDPOc1C5Mg272QDkBzzXhTDfakQLHv2c89cdgYC83xbtYsV dfs0pZQTbg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for icann.org
	`icann.org. 3600 IN DNSKEY ( 257 3 13 d25y9HFMnvNDVXria3ODfdcjUwA6S0MjGnOftautpQ9Aztpc95MKKNo7uUgH6qQDwqvD2ycNYQJS q75K3YuW8A== ) ; keytag 20149`
	`icann.org. 3600 IN DNSKEY ( 256 3 13 gnv6YkhE2XeiA84KmAdO0kygJ5XApDesbrXInWqUK8dfKneGRP8jkxjidAIHEkUJLNTOmlDnB6Jj BSEk0YDs5w== ) ; keytag 58002`
	`icann.org. 3600 IN DNSKEY ( 256 3 13 G/IlMCO+95WFIVLKA+8i0C7CV7xAmzfl9911Lu26uLZaXZ48zPuK7rfm876jKDAOOE8q9iPZBt8C 9fWvH6kugA== ) ; keytag 5592`
	DNSKEY=20149/SEP is now in the chain-of-trust
	DS=20149/SHA-256 verifies DNSKEY=20149/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`icann.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250717110849 20250626134209 20149 icann.org. upRd9UWfb7ZTB+QnJPxEwhzP7jAbTwDPOc1C5Mg272QDkBzzXhTDfakQLHv2c89cdgYC83xbtYsV dfs0pZQTbg== )`
	RRSIG=20149 and DNSKEY=20149/SEP verifies the DNSKEY RRset
	DNSKEY=58002 is now in the chain-of-trust
	DNSKEY=5592 is now in the chain-of-trust
	Query to b.icann-servers.net for ianawww.vip.icann.org/A
	Received 1033 bytes from 199.43.133.53
	;; Response received from [199.43.133.53] 1033 octets ;; HEADER SECTION ;; id = 31239 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715152236 20250624050820 5592 icann.org. qWc05siYWCst7EqlC8gxgd2jf+qFR8GVWJWDES2dNqrlOzJEz5NkAsrqx23zMGvLU40HVnJP7fVe volRYN78vg== ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250714012421 20250623090520 5592 icann.org. V55Te7ur7DHEiM2f/+0qBXkacFmfPjP24sr3mpYj4HLgbUt73AaGn7u0gGSqxuZ0V/OfJ43CsMcX kI3OfjTdDw== ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715114012 20250624150920 5592 icann.org. ZmBjTMBf39RRfPjKuYRRsaUnvA3zeMiqn9F24n0fh2AWXz1GXJgbUKNQGpZYZMArbQFfo7DSCCVp gooq89Xrag== ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714045556 20250622210420 5592 icann.org. IZ+Yb48P8/By6SG7wrOqLxKjOkgeckwrMfeGbaA07aMzETlJ6tFjWobtEppq7sVwr79X2mNZNCta 78JdnI46nQ== ) gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714094156 20250623190620 5592 icann.org. I+Hm5PsSgnGh9Fqz5VSdCNp/AZJDXm2SGQDfXuoYLwStfcUO/jwa/pfovSPa0HfoQIuZk5uuMQ8S Q5Rv97aEcg== ) gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250727233725 20250706132157 58002 icann.org. EmolqEMGsWqpJDQoZ2fBk56RbzVOehyUOW1ytcrsH7jDkrbG7R2RiJrxklxDgg6nwf5oUiRnjVLm qvQgkTEr8A== ) ;; { "EDNS-VERSION": 0 }
	Query to b.icann-servers.net for vip.icann.org/DNSKEY
	Received 1025 bytes from 199.43.133.53
	;; Response received from [199.43.133.53] 1025 octets ;; HEADER SECTION ;; id = 13016 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715152236 20250624050820 5592 icann.org. qWc05siYWCst7EqlC8gxgd2jf+qFR8GVWJWDES2dNqrlOzJEz5NkAsrqx23zMGvLU40HVnJP7fVe volRYN78vg== ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250714012421 20250623090520 5592 icann.org. V55Te7ur7DHEiM2f/+0qBXkacFmfPjP24sr3mpYj4HLgbUt73AaGn7u0gGSqxuZ0V/OfJ43CsMcX kI3OfjTdDw== ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20250715114012 20250624150920 5592 icann.org. ZmBjTMBf39RRfPjKuYRRsaUnvA3zeMiqn9F24n0fh2AWXz1GXJgbUKNQGpZYZMArbQFfo7DSCCVp gooq89Xrag== ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714045556 20250622210420 5592 icann.org. IZ+Yb48P8/By6SG7wrOqLxKjOkgeckwrMfeGbaA07aMzETlJ6tFjWobtEppq7sVwr79X2mNZNCta 78JdnI46nQ== ) gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250714094156 20250623190620 5592 icann.org. I+Hm5PsSgnGh9Fqz5VSdCNp/AZJDXm2SGQDfXuoYLwStfcUO/jwa/pfovSPa0HfoQIuZk5uuMQ8S Q5Rv97aEcg== ) gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20250727233725 20250706132157 58002 icann.org. EmolqEMGsWqpJDQoZ2fBk56RbzVOehyUOW1ytcrsH7jDkrbG7R2RiJrxklxDgg6nwf5oUiRnjVLm qvQgkTEr8A== ) ;; { "EDNS-VERSION": 0 }
	Found child zone vip.icann.org

vip.icann.org

	Checking DS between icann.org and vip.icann.org
	Query to c.icann-servers.net for vip.icann.org/DS
	Received 195 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 195 octets ;; HEADER SECTION ;; id = 41458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DS ;; ANSWER SECTION (2 records) vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for vip.icann.org in the icann.org zone
	DS=6025/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20250727221613 20250706172157 58002 icann.org. kBaP4NvfM9T1H9bHC3MdWp7u17JhwvM8VAgGGroxpbfkHaa8MCQ4ZZwcgGwl4QTOkx+SKtkmd18O MRateGcpww== )`
	RRSIG=58002 and DNSKEY=58002 verifies the DS RRset
	DS=6025/SHA-256 is now in the chain-of-trust
	`vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 )`
	Query to gtm1.lax.icann.org for vip.icann.org/DNSKEY
	Received 940 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 940 octets ;; HEADER SECTION ;; id = 50720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (4 records) vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; keytag 6025 vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdmKlggNF7VyVkHG6b5sXNpVCEoeCyvYR1S/z++G6ib42EVKFLSpexFLKNdgdSHIOSC+g1cE IESkFhsLHahQC5VHSEIDurj0iLhNrR4Xqo9G2m8OVonpNJzn6blXrv4j1m3rpUyBx4pWci+MSXHX +o+6mhvZHkPx5KcBxMWypjEN ) ; keytag 23376 vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20250712001145 20250704231145 6025 vip.icann.org. Os4NvfJiNfVGO+/aqjNXRM9y8TgN+mSV2HgoViKKlKsrbPJd+q4QK6JKIqt20WaXS1ZP51+bpDBB fTg/2r2dqFHEraJE3e4fiLgxfN8dlXLvcOoYz6/IXN4prIbb0Z3kth68am67lzvbt3DfoUT/gf4l DOWIT633RKX+ywQNDRr38n7HOXJwtNsCna566tsoMCVh1oH7tEp4IDLOGXL2u520wirn/wyv/kPU B8H/mBSrlOBJwPlbub+jh0xIl1+A4i9p0VJutUQ0FRc4N7jbMVgqBjVCFY9T0/l1iD92LELHVAD9 c9ovbkomM9dtXv4u5zh4QTbrusakwCAj7KJ9Tw== ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20250712001145 20250704231145 23376 vip.icann.org. NJmrFax4e+kwt8F+4A+3zL49u2VXkYmGkiIMngFTxVw0niyCmruhKCpWluN2CndZTyoQS9kQ6YLn /6/6CdOq3t3s6Er8WtKEXRfALCvXa/qDBLu6bznsV8oDv1NYstO/65YBsj0JB7NRI36pfTthoH/q UDgemz0BmqBJcqcQltc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for vip.icann.org
	`vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; keytag 6025`
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAdmKlggNF7VyVkHG6b5sXNpVCEoeCyvYR1S/z++G6ib42EVKFLSpexFLKNdgdSHIOSC+g1cE IESkFhsLHahQC5VHSEIDurj0iLhNrR4Xqo9G2m8OVonpNJzn6blXrv4j1m3rpUyBx4pWci+MSXHX +o+6mhvZHkPx5KcBxMWypjEN ) ; keytag 23376`
	DNSKEY=6025/SEP is now in the chain-of-trust
	DS=6025/SHA-256 verifies DNSKEY=6025/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20250712001145 20250704231145 6025 vip.icann.org. Os4NvfJiNfVGO+/aqjNXRM9y8TgN+mSV2HgoViKKlKsrbPJd+q4QK6JKIqt20WaXS1ZP51+bpDBB fTg/2r2dqFHEraJE3e4fiLgxfN8dlXLvcOoYz6/IXN4prIbb0Z3kth68am67lzvbt3DfoUT/gf4l DOWIT633RKX+ywQNDRr38n7HOXJwtNsCna566tsoMCVh1oH7tEp4IDLOGXL2u520wirn/wyv/kPU B8H/mBSrlOBJwPlbub+jh0xIl1+A4i9p0VJutUQ0FRc4N7jbMVgqBjVCFY9T0/l1iD92LELHVAD9 c9ovbkomM9dtXv4u5zh4QTbrusakwCAj7KJ9Tw== )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20250712001145 20250704231145 23376 vip.icann.org. NJmrFax4e+kwt8F+4A+3zL49u2VXkYmGkiIMngFTxVw0niyCmruhKCpWluN2CndZTyoQS9kQ6YLn /6/6CdOq3t3s6Er8WtKEXRfALCvXa/qDBLu6bznsV8oDv1NYstO/65YBsj0JB7NRI36pfTthoH/q UDgemz0BmqBJcqcQltc= )`
	RRSIG=6025 and DNSKEY=6025/SEP verifies the DNSKEY RRset
	RRSIG=23376 and DNSKEY=23376 verifies the DNSKEY RRset
	DNSKEY=23376 is now in the chain-of-trust
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.47.252
	;; Response received from [192.0.47.252] 239 octets ;; HEADER SECTION ;; id = 21000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001151 20250702231151 23376 vip.icann.org. tvmXbV1Fu64LbharKVBdv2KHYqUZBXjiwTPRBpTipm6Za0jjGbNXVYNC2GtR+V+MrfaItCD1j5Wq cIaq0+i/113lUSCc3kb6HMMvyj6yxzvbuFhVlGFXvPcwemMx5fwciJxQbJHqmYjIo7tMgNj86fq9 +uC3QZ2rL++zxl+LScY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.dc.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 540 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 540 octets ;; HEADER SECTION ;; id = 28791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2025053001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20250709123728 20250702113728 23376 vip.icann.org. GXfFo2Ogpj2PUG4zB23JYsgUdUyMoCna9z1oLaKrCnktgPcRxs6eIMQAxFWnqEC9dgDn0ec1FpuG b6HIo8BHWINb2HmZTI/XhfRt2pwQFNZ+DstE4peVUQcUsI9WF7xlAhb+YRzbp8Ny7YtifQtG8zTT Mw9E5obiHM7FjJZD7/0= ) 2ubu9186mav9b544p55mep12mc4abfsi.vip.icann.org. 60 IN NSEC3 ( 1 0 1 5bcf9547ba809dcf 2ubu9186mav9b544p55mep12mc4abfsj A NS SOA MX TXT AAAA RRSIG NSEC3PARAM ) 2ubu9186mav9b544p55mep12mc4abfsi.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20250713233309 20250706223309 23376 vip.icann.org. qef9rJ4LipdNgqLOjV5c2OXgEJvdG95z9Ni9Mz9ysoHbVhxYy+jLxvDsvFgtgWIlkyTayYjjRYUE tKNoQw14ljPiFQsZHNDLtGisYigtMVvablsSIuUKiYAUo4aJyAXbDZ5y9JLX18giycBt2DXcneMu Jx5ftNZKBsWDAYYVA6I= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.mdr.icann.org for vip.icann.org/SOA
	Received 480 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 480 octets ;; HEADER SECTION ;; id = 30584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (2 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2025053001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20250710054011 20250703044011 23376 vip.icann.org. nCSXAkSdxbuoAUZAz6ycQvsCe0N2T1C23bZGVCPToDotaTq8NgG5+/38fjW+JhgZVVBLoWcTFsD4 +AZQne0Ie3kPEfgKvHIygmK4Pes05+vPF8HzFPXH4C3TCPac0UFsDroDlbmluR5Wys1pR2HdDsHm dA7zLIPnx63zuRdHHbc= ) ;; AUTHORITY SECTION (3 records) vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20250709123724 20250702113724 23376 vip.icann.org. H/RdPINICoIbGtPljIIxtzyjMjarbTLvaj3JW29AbzvzMV2gXGxYpwK+A093fvsETGAYzVktmOjM EXzcgTyFOA+xqucdhTdCGTn6uoSZcFtgtHPkYIMMFGLzNufnRAB60lxjBtwzrYPK9asN6tjAeb0t vj4VRMzzmIe0zg6qIEY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gtm1.lax.icann.org for vip.icann.org/SOA
	Received 480 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 480 octets ;; HEADER SECTION ;; id = 32378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (2 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2025053001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20250709133826 20250702123826 23376 vip.icann.org. SPt7czTouiNzfbFuXwvEZIs5vI+8lC3GuUmalVqhgaHVSnDeM96Vf1EBqem7i00yUxH2krCnwVRp s1J0QbKpQmsCOcqWeWRb7r3wm0csu6PvRvlYaIIlip/4Gi5zP5OiXkgs2lhHzRR7ukLBW6IWiSDD A8Lw61kwm+cDBJkaAzA= ) ;; AUTHORITY SECTION (3 records) vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20250709095013 20250702085013 23376 vip.icann.org. AmpE/7z15PWRETfgpO2gkvwnnQ/Eiu5tIt+Zp1d2D81bUCyUDu9flgmRB8xaiTFEQ3Xd1BoGEMZ8 cpqfl7RV1ksb4wl15zx2ZI4CJaWluOpAtjjwJUUNTZisLVy32j0XGWQ5YtUgEWxJHS+q4mRQkaH+ T+RdtTD9oUFctrwnxns= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.47.252
	;; Response received from [192.0.47.252] 239 octets ;; HEADER SECTION ;; id = 17005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001151 20250702231151 23376 vip.icann.org. tvmXbV1Fu64LbharKVBdv2KHYqUZBXjiwTPRBpTipm6Za0jjGbNXVYNC2GtR+V+MrfaItCD1j5Wq cIaq0+i/113lUSCc3kb6HMMvyj6yxzvbuFhVlGFXvPcwemMx5fwciJxQbJHqmYjIo7tMgNj86fq9 +uC3QZ2rL++zxl+LScY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001151 20250702231151 23376 vip.icann.org. tvmXbV1Fu64LbharKVBdv2KHYqUZBXjiwTPRBpTipm6Za0jjGbNXVYNC2GtR+V+MrfaItCD1j5Wq cIaq0+i/113lUSCc3kb6HMMvyj6yxzvbuFhVlGFXvPcwemMx5fwciJxQbJHqmYjIo7tMgNj86fq9 +uC3QZ2rL++zxl+LScY= )`
	RRSIG=23376 and DNSKEY=23376 verifies the A RRset

vip.icann.org

	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 239 octets ;; HEADER SECTION ;; id = 64326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001150 20250702231150 23376 vip.icann.org. p2Nhcoq1+4/csd2zJ+PXNSnQT+9mFv/WHdtNcKVniJhArZ52QfoJp7+bvgl5x43GnIOIJ+fcsYBt LYJcvinV+rxIDS3lj/SwtMFJFXCMj/NCLKIgKz4+I43cNWwtD4mWe0i1tXCB8oIije9VJ/nHhwUw ZOZlGld1mnsxXUvH0m4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.lax.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 540 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 540 octets ;; HEADER SECTION ;; id = 5939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2025053001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20250709095016 20250702085016 23376 vip.icann.org. kFA/rNyDN/ctHA42ebQO3U6KWE6PMElxsFKEEsb9hwf6xZH1ZhJZr9i+jL265dGoprU/9yvkKJyu bANBMyL/KZfYcctRHltt4cjPb+GHnRjonRgTLc7mm3JEflZQu+iqvO1YOAIBnFzyRYeR0c6S2isH DBHqE0TDk7lFrW8Aqbc= ) mh3ni4rcsqg75o58buheph2vpmad28lo.vip.icann.org. 60 IN NSEC3 ( 1 0 1 441a653a83e9af43 mh3ni4rcsqg75o58buheph2vpmad28lp A NS SOA MX TXT AAAA RRSIG NSEC3PARAM ) mh3ni4rcsqg75o58buheph2vpmad28lo.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20250713233309 20250706223309 23376 vip.icann.org. gYqcdIE2gGnUbf+HugCakf9HDQUK6PVaGFLQ0pic9/f6TfSjgb6E8/fQztpIFZx5/Unrqlc3eJCj 9GOWkxSMNA9R+awbN0wiyW/rLj6S1Ne/LfCdM0FaiqnArlZQMvoxF1SM54TPXthndRqcZ7wEuXQO /o2yuzMcY6B4Xlii0fc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 239 octets ;; HEADER SECTION ;; id = 60284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001151 20250702231151 23376 vip.icann.org. tvmXbV1Fu64LbharKVBdv2KHYqUZBXjiwTPRBpTipm6Za0jjGbNXVYNC2GtR+V+MrfaItCD1j5Wq cIaq0+i/113lUSCc3kb6HMMvyj6yxzvbuFhVlGFXvPcwemMx5fwciJxQbJHqmYjIo7tMgNj86fq9 +uC3QZ2rL++zxl+LScY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250710001151 20250702231151 23376 vip.icann.org. tvmXbV1Fu64LbharKVBdv2KHYqUZBXjiwTPRBpTipm6Za0jjGbNXVYNC2GtR+V+MrfaItCD1j5Wq cIaq0+i/113lUSCc3kb6HMMvyj6yxzvbuFhVlGFXvPcwemMx5fwciJxQbJHqmYjIo7tMgNj86fq9 +uC3QZ2rL++zxl+LScY= )`
	RRSIG=23376 and DNSKEY=23376 verifies the A RRset

vip.icann.org

	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 239 octets ;; HEADER SECTION ;; id = 63883 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250709123759 20250702113759 23376 vip.icann.org. 1KEpTm7sRwZoER2sfyS/PV1YC42qaCwbPdlHjE1+COjItNQrs/pGw6bQ3FoR9/sZMaEsg3qgYJaA d/cse1KXX/AoqDe2YTMuVo1OWG9C0BTinJjRA1cCrGyEaGPWiyuwPENctU/led43c0l0r06AccmP csyWFcgd/hwTyFdzGvI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.mdr.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 540 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 540 octets ;; HEADER SECTION ;; id = 34764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2025053001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20250709123740 20250702113740 23376 vip.icann.org. QGWfR9fYp8qas6LinFiFi/5MlREq6rstjDvjXfkCuWYye9cULSth4OTdouET04ndDmG6cUDX4wx/ P4Y4KjfFwj7n1pmT53meAlUESKC60CynauDkCijKqrwSw9GKTtWwN+kx1x/ZUEgNWi6cnKezgiZw nt9JTi5yApDoP5v2apA= ) d7num1bjm4qobej7bbh7d2nou20n2ovh.vip.icann.org. 60 IN NSEC3 ( 1 0 1 179fcf080cfa11c9 d7num1bjm4qobej7bbh7d2nou20n2ovi A NS SOA MX TXT AAAA RRSIG NSEC3PARAM ) d7num1bjm4qobej7bbh7d2nou20n2ovh.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20250713233309 20250706223309 23376 vip.icann.org. p7IoifzyN3kYNaIDpbwX0MVSRTax2rCk2hy/Fs54VTv3G4rzqn0Jy5uSgTauBeEIcrsmlum8NYzJ t8KGo2xvMq7XoCh1HlAQ4ijyYy6bWFgTr7r4rumSYRWjHS3ycQoicY0V48jihKIFSJ0VfNxxHKw5 hW8gFVXOEX6yhMo9lYo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 239 octets ;; HEADER SECTION ;; id = 11687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250709123800 20250702113800 23376 vip.icann.org. k8FhNqXONFgjXIf3y+wyJSpD1p+ERgJKqUidnNiyHc0qF8U8VLj2ps0Fg1F/8UYnZlemcKBjbISG 88ix23KWZHQljD9fbLsULMQDJPjNBuajs8WJY4XncTcqXp0ikPiiMqgQGlXjfSBvy6dwUA2nO43o KjveP+NWM0wdN2CeBLw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20250709123800 20250702113800 23376 vip.icann.org. k8FhNqXONFgjXIf3y+wyJSpD1p+ERgJKqUidnNiyHc0qF8U8VLj2ps0Fg1F/8UYnZlemcKBjbISG 88ix23KWZHQljD9fbLsULMQDJPjNBuajs8WJY4XncTcqXp0ikPiiMqgQGlXjfSBvy6dwUA2nO43o KjveP+NWM0wdN2CeBLw= )`
	RRSIG=23376 and DNSKEY=23376 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.iana.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: