DNSSEC Analyzer - www.iana.org

Domain Name:

Time: 2022-08-16 04:06:39 UTC, NTP stratum 16

Analyzing DNSSEC problems for www.iana.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (864 octets) ;; HEADER SECTION ;; id = 49067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to e.root-servers.net for www.iana.org/A
	Received 778 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (778 octets) ;; HEADER SECTION ;; id = 49031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for org/DNSKEY
	Received 811 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (811 octets) ;; HEADER SECTION ;; id = 53145 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; ADDITIONAL SECTION (13 records) b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to g.root-servers.net for org/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (367 octets) ;; HEADER SECTION ;; id = 33634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . iwI2ylvLGaSJmmCc2CQNm5Qf0knh4XraHIBDhNv4oN+ZmdnhcFrUtAfyqmiVEHwnaOEC06Z+FNGH PqXGJMel/wwq8YusVIQddNQDulS4sOP9v1fyIP3EYhC1D7knfLD8dGRLyPBrjOLBVfJzWETBAanh HDmMuvQpcICM5TftLb52zwaDGheDMEkZ9tBWjmolsHulz7GPg64lehsSYIlK27KAZVXssZBz8aA3 Yvqo/S1bwBHQKPRym9vEwZeuMXs1rHRbYMkyhiY4r9qbQp3D998KKtNGTVxVP+TD4UuLTEIKEzKm ooTKULYFGvqba0M+jT/pHmAETNOir9V90shP1Q== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to c0.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (895 octets) ;; HEADER SECTION ;; id = 31371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAb9tjHO8nHIiRuf0zHT2Gen/tjGmj2ZWB/ko+5M4jmrGFnu/fMmr5pkTcKe5JVwEEykWcMZW jB4vT0hljN5ua8gW+Xskzk6EH5F2+CzmN6u1DysuFn9FAwBpilKpZ9OKnN5qYDOURAX11O4ib+iq SdwzOMv55WHv4waE3TsGZNAR ) ; Key ID = 29511 org. 3600 IN DNSKEY ( 256 3 8 AwEAAbXoHRx/l552jsEsFicJJYoJVt8ZLb6AELkyLfDY8cVTLFf2hKmuestpp4IUpL8WBWo/t6AS OyRw2pLsGRywE+0ctpdudSgwW8AUEHGYnHlb1xo1XNtBlmdIsPWmA4VwtwnDfELFPKHwbxz8y06X X4Whv3HtA9KwoOpiWZDFPjz9 ) ; Key ID = 56124 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830152424 20220809142424 26974 org. GusLRVspW4mlQWPx/sZu7Jkq/RSKq452ZVak5ZjWmY4TL8hvDX0Vb8zv3pipGdKam+IOGWsR+JD6 hn+HXeJLb3P13OHlhVGImrzoj+/Bx/DJbj6IAXr/FOEa/ffM3FjE/ZW/9IU+GMy3LEftQsnBoq4e TFhFwvGgGorV9JpNeicRui1ooCtQtKG+/loeOX71zybQAcB6UMuIaHX3R00IBUJTWA0eJvHbyGi6 +w1/v1GrAsxYXmJOMZ3qWXvtqoPCy8p3VlEfvvVG1qDetMeM/KTyW+sqKj0hk0ebvN+FectaYoCV PpogP53S/nl6MwNViGRiphM8O2uSkUuqvgPSeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAb9tjHO8nHIiRuf0zHT2Gen/tjGmj2ZWB/ko+5M4jmrGFnu/fMmr5pkTcKe5JVwEEykWcMZW jB4vT0hljN5ua8gW+Xskzk6EH5F2+CzmN6u1DysuFn9FAwBpilKpZ9OKnN5qYDOURAX11O4ib+iq SdwzOMv55WHv4waE3TsGZNAR ) ; Key ID = 29511`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAbXoHRx/l552jsEsFicJJYoJVt8ZLb6AELkyLfDY8cVTLFf2hKmuestpp4IUpL8WBWo/t6AS OyRw2pLsGRywE+0ctpdudSgwW8AUEHGYnHlb1xo1XNtBlmdIsPWmA4VwtwnDfELFPKHwbxz8y06X X4Whv3HtA9KwoOpiWZDFPjz9 ) ; Key ID = 56124`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830152424 20220809142424 26974 org. GusLRVspW4mlQWPx/sZu7Jkq/RSKq452ZVak5ZjWmY4TL8hvDX0Vb8zv3pipGdKam+IOGWsR+JD6 hn+HXeJLb3P13OHlhVGImrzoj+/Bx/DJbj6IAXr/FOEa/ffM3FjE/ZW/9IU+GMy3LEftQsnBoq4e TFhFwvGgGorV9JpNeicRui1ooCtQtKG+/loeOX71zybQAcB6UMuIaHX3R00IBUJTWA0eJvHbyGi6 +w1/v1GrAsxYXmJOMZ3qWXvtqoPCy8p3VlEfvvVG1qDetMeM/KTyW+sqKj0hk0ebvN+FectaYoCV PpogP53S/nl6MwNViGRiphM8O2uSkUuqvgPSeA== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=29511 is now in the chain-of-trust
	DNSKEY=56124 is now in the chain-of-trust
	Query to a0.org.afilias-nst.info for www.iana.org/A
	Received 587 bytes from 199.19.56.1
	;; Response received from 199.19.56.1 (587 octets) ;; HEADER SECTION ;; id = 44209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN DS 39817 8 1 4b2634f69edd8d0741da8629e2064b05e8138e51 iana.org. 3600 IN DS ( 39817 8 2 5fb72ae84c35a35ddf7fa24ea791cd9763c4360979c0cbb6ff2c407af9ae5802 ) iana.org. 3600 IN DS 6730 8 1 15a1ee709e51c0652799d9cd364a37acb8e67285 iana.org. 3600 IN DS ( 6730 8 2 fca03776fa33ab57369aae8b089938f4001e208094362734242a7ebe4ddb5755 ) iana.org. 3600 IN DS 14351 8 1 4c08c05754dda7ccf62b41ac450873d271221cc3 iana.org. 3600 IN DS ( 14351 8 2 e1a0c92c0663202240fc3481f747d00901cd14e268b884a1142d7a475db1a810 ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. MFx3KbJ7cG9aQB+ThjPEOCIj9J9h0/061japrLsmExGiEWKzX4ewzA76TMRBFGdmlJvVhZu51Ad7 tYlhA2+k5AcofwS2fBjCbrrWwY2igc2I1Cx9iqMAJtHtwNxVxSP9fwUrivTp5PcEBSIDp/6JZrTH IFuEjP7h/R7akVLqsws= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c0.org.afilias-nst.info for iana.org/DNSKEY
	Received 583 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (583 octets) ;; HEADER SECTION ;; id = 21738 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN DS 14351 8 1 4c08c05754dda7ccf62b41ac450873d271221cc3 iana.org. 3600 IN DS ( 14351 8 2 e1a0c92c0663202240fc3481f747d00901cd14e268b884a1142d7a475db1a810 ) iana.org. 3600 IN DS 39817 8 1 4b2634f69edd8d0741da8629e2064b05e8138e51 iana.org. 3600 IN DS ( 39817 8 2 5fb72ae84c35a35ddf7fa24ea791cd9763c4360979c0cbb6ff2c407af9ae5802 ) iana.org. 3600 IN DS 6730 8 1 15a1ee709e51c0652799d9cd364a37acb8e67285 iana.org. 3600 IN DS ( 6730 8 2 fca03776fa33ab57369aae8b089938f4001e208094362734242a7ebe4ddb5755 ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. MFx3KbJ7cG9aQB+ThjPEOCIj9J9h0/061japrLsmExGiEWKzX4ewzA76TMRBFGdmlJvVhZu51Ad7 tYlhA2+k5AcofwS2fBjCbrrWwY2igc2I1Cx9iqMAJtHtwNxVxSP9fwUrivTp5PcEBSIDp/6JZrTH IFuEjP7h/R7akVLqsws= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone iana.org

iana.org

	Checking DS between org and iana.org
	Query to a2.org.afilias-nst.info for iana.org/DS
	Received 452 bytes from 199.249.112.1
	;; Response received from 199.249.112.1 (452 octets) ;; HEADER SECTION ;; id = 41970 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; iana.org. IN DS ;; ANSWER SECTION (7 records) iana.org. 3600 IN DS ( 14351 8 2 e1a0c92c0663202240fc3481f747d00901cd14e268b884a1142d7a475db1a810 ) iana.org. 3600 IN DS ( 39817 8 2 5fb72ae84c35a35ddf7fa24ea791cd9763c4360979c0cbb6ff2c407af9ae5802 ) iana.org. 3600 IN DS ( 6730 8 2 fca03776fa33ab57369aae8b089938f4001e208094362734242a7ebe4ddb5755 ) iana.org. 3600 IN DS 6730 8 1 15a1ee709e51c0652799d9cd364a37acb8e67285 iana.org. 3600 IN DS 14351 8 1 4c08c05754dda7ccf62b41ac450873d271221cc3 iana.org. 3600 IN DS 39817 8 1 4b2634f69edd8d0741da8629e2064b05e8138e51 iana.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. MFx3KbJ7cG9aQB+ThjPEOCIj9J9h0/061japrLsmExGiEWKzX4ewzA76TMRBFGdmlJvVhZu51Ad7 tYlhA2+k5AcofwS2fBjCbrrWwY2igc2I1Cx9iqMAJtHtwNxVxSP9fwUrivTp5PcEBSIDp/6JZrTH IFuEjP7h/R7akVLqsws= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 6 DS records for iana.org in the org zone
	DS=14351/SHA-256 has algorithm RSASHA256
	DS=39817/SHA-256 has algorithm RSASHA256
	DS=6730/SHA-256 has algorithm RSASHA256
	DS=6730/SHA-1 has algorithm RSASHA256
	DS=14351/SHA-1 has algorithm RSASHA256
	DS=39817/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`iana.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. MFx3KbJ7cG9aQB+ThjPEOCIj9J9h0/061japrLsmExGiEWKzX4ewzA76TMRBFGdmlJvVhZu51Ad7 tYlhA2+k5AcofwS2fBjCbrrWwY2igc2I1Cx9iqMAJtHtwNxVxSP9fwUrivTp5PcEBSIDp/6JZrTH IFuEjP7h/R7akVLqsws= )`
	RRSIG=29511 and DNSKEY=29511 verifies the DS RRset
	DS=14351/SHA-256 is now in the chain-of-trust
	DS=39817/SHA-256 is now in the chain-of-trust
	DS=6730/SHA-256 is now in the chain-of-trust
	`iana.org. 3600 IN DS ( 14351 8 2 e1a0c92c0663202240fc3481f747d00901cd14e268b884a1142d7a475db1a810 )`
	`iana.org. 3600 IN DS ( 39817 8 2 5fb72ae84c35a35ddf7fa24ea791cd9763c4360979c0cbb6ff2c407af9ae5802 )`
	`iana.org. 3600 IN DS ( 6730 8 2 fca03776fa33ab57369aae8b089938f4001e208094362734242a7ebe4ddb5755 )`
	`iana.org. 3600 IN DS 6730 8 1 15a1ee709e51c0652799d9cd364a37acb8e67285`
	`iana.org. 3600 IN DS 14351 8 1 4c08c05754dda7ccf62b41ac450873d271221cc3`
	`iana.org. 3600 IN DS 39817 8 1 4b2634f69edd8d0741da8629e2064b05e8138e51`
	Query to b.iana-servers.net for iana.org/DNSKEY
	Received 1329 bytes from 199.43.133.53
	;; Response received from 199.43.133.53 (1329 octets) ;; HEADER SECTION ;; id = 14366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (5 records) iana.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbfwlHUNu/E86JttfZu8+IM4FbdZWhogPUi5AXtinfIIZuZRaXrMYgfYPl01lFTybPO5zOqK OeE2dHiujsBfTy+anFOzoLDar/g5P/JszA3KwV2Dz8q+tRO+a4L5ND7mOSd5igUDtU+91Vonyyzd 2CBPjSjEpA7n8GMji3oDl3KX ) ; Key ID = 41706 iana.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa02O9AMbFbTpcDedeuRuUKV82NGBPEJtMbS8TT5+PwONcMSzsljUMToEogvz7DfNmlKEOj4 Z2dm6JY6KEnaod4QyI56ZJfssgwlE2r5+jouwcO7KzBHpVHQYsx9+909k2VAQn8SOQjNVhhYNjVP nLp3R759cXnM1hpn9gNsgehM9HPpjDwWpdem4035o9vuS+Q48frXcUKpxL/mPGFF9oL6VoGRETXr LesTGUmrRyyZBgCiY/XJKLQuEm1t5THrgJWM9WFO/IcaeBVBtkgj8IskOS2aAySGx4jAX5HLHJu6 oOc/L2zjXhXsRgYKN9TMaKnWqez1CeM4Sn/Ay//BFqU= ) ; Key ID = 21911 iana.org. 3600 IN DNSKEY ( 257 3 8 AwEAAb0i1jarxjgmjsOAO7IbXvhwe4yBSGWpUnjj9SLZOguEbOY+6hrsLL5Xa9LKHDjgF/ovovtO j4t9JrKXQZ6c/kJdtaIkGcWzhACoNkum20mn2Ja3Zk1xJgEkMpOED5I3N6IHNCALSNw8rxu3c3xV DpD6Tf10+Bcpr4sjge32lNeVDjVPs7D7yJSQrr0tBui4rtsMkeQ8jNT9Hna7C/5MRAxqjpueX0Z7 kEqv4vevv1Y7xDi7yloRzY/tx8BdYEVRNOQ9pbU2ERuFhUWmwT1DROUBwpK6husdOGbnPyGzCiHt 14An5wYpj6B4Jao9DuNTgTl6xg20oyR46pRM1roTeIk= ) ; Key ID = 39817 iana.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220826015538 20220804171333 21911 iana.org. joZbmbN44Xbh544eTLHRA8DBiYMCx7R1cZuU/kulqb59mXpEVI+/uuI0yoaheqAHqF+tsK6gA1hs 7gNZZGw6MEJR5p0CXlulqs3u8LLtYlpf/MqBBlOMGdiooNXpyZAGl2vpW8dhJPHNHI8gGCVieP5u NX4WzdbIgVRZzyUf1cRddWKo+pk07agkZfXRY20etfIqrVbs5AV0vfo5fLzT4BCD9U10Uw1gO0Mm 9RBJ+X/MSpjN7h+i17yeXYUat99owiP3KVwlmEWpajQiL+JOch14fpxcmxP62A0nh8lFoVeBKxDf 81AJOfh4NauHIsbdscjN70qdtO+cUYg1+9NnGw== ) iana.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220826015538 20220804171333 39817 iana.org. Gzti6TxvGOpOlR+KBUIii3lAwtAcr4zpfscXRAb5gnMcdO68C8RRTwgHuY6/Yg4FS9fcqYxFsfyc P4ZQkDLKDegsekUigz6/CF+/s9QSWIEjbJ/Hgq5qm4Zy3UpFFEomTK48vuSigl6yqW/wneDY144i 1Q16ON3aoE18FlOEih/0hZ0lQ2qBUJb85VaavdV5uDejjCASTl7laUJm7zIn4/IdI/gipDSFwJN4 yknqQayL4JhpVVqAy8ht67EQQzMUuOn5nhy9jE3SskmZZ89DZ/hJt1tuVcQtBTdToWx0pMKLDHJl s4f8EQtnpL5m8xNTX5P6dymTgKe5ei/dC+bmXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for iana.org
	`iana.org. 3600 IN DNSKEY ( 256 3 8 AwEAAbfwlHUNu/E86JttfZu8+IM4FbdZWhogPUi5AXtinfIIZuZRaXrMYgfYPl01lFTybPO5zOqK OeE2dHiujsBfTy+anFOzoLDar/g5P/JszA3KwV2Dz8q+tRO+a4L5ND7mOSd5igUDtU+91Vonyyzd 2CBPjSjEpA7n8GMji3oDl3KX ) ; Key ID = 41706`
	`iana.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa02O9AMbFbTpcDedeuRuUKV82NGBPEJtMbS8TT5+PwONcMSzsljUMToEogvz7DfNmlKEOj4 Z2dm6JY6KEnaod4QyI56ZJfssgwlE2r5+jouwcO7KzBHpVHQYsx9+909k2VAQn8SOQjNVhhYNjVP nLp3R759cXnM1hpn9gNsgehM9HPpjDwWpdem4035o9vuS+Q48frXcUKpxL/mPGFF9oL6VoGRETXr LesTGUmrRyyZBgCiY/XJKLQuEm1t5THrgJWM9WFO/IcaeBVBtkgj8IskOS2aAySGx4jAX5HLHJu6 oOc/L2zjXhXsRgYKN9TMaKnWqez1CeM4Sn/Ay//BFqU= ) ; Key ID = 21911`
	`iana.org. 3600 IN DNSKEY ( 257 3 8 AwEAAb0i1jarxjgmjsOAO7IbXvhwe4yBSGWpUnjj9SLZOguEbOY+6hrsLL5Xa9LKHDjgF/ovovtO j4t9JrKXQZ6c/kJdtaIkGcWzhACoNkum20mn2Ja3Zk1xJgEkMpOED5I3N6IHNCALSNw8rxu3c3xV DpD6Tf10+Bcpr4sjge32lNeVDjVPs7D7yJSQrr0tBui4rtsMkeQ8jNT9Hna7C/5MRAxqjpueX0Z7 kEqv4vevv1Y7xDi7yloRzY/tx8BdYEVRNOQ9pbU2ERuFhUWmwT1DROUBwpK6husdOGbnPyGzCiHt 14An5wYpj6B4Jao9DuNTgTl6xg20oyR46pRM1roTeIk= ) ; Key ID = 39817`
	DNSKEY=39817/SEP is now in the chain-of-trust
	DS=39817/SHA-256 verifies DNSKEY=39817/SEP
	DS=39817/SHA-1 verifies DNSKEY=39817/SEP
	DS=14351/SHA-256 is published, but a corresponding DNSKEY is not
	DS=6730/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`iana.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220826015538 20220804171333 21911 iana.org. joZbmbN44Xbh544eTLHRA8DBiYMCx7R1cZuU/kulqb59mXpEVI+/uuI0yoaheqAHqF+tsK6gA1hs 7gNZZGw6MEJR5p0CXlulqs3u8LLtYlpf/MqBBlOMGdiooNXpyZAGl2vpW8dhJPHNHI8gGCVieP5u NX4WzdbIgVRZzyUf1cRddWKo+pk07agkZfXRY20etfIqrVbs5AV0vfo5fLzT4BCD9U10Uw1gO0Mm 9RBJ+X/MSpjN7h+i17yeXYUat99owiP3KVwlmEWpajQiL+JOch14fpxcmxP62A0nh8lFoVeBKxDf 81AJOfh4NauHIsbdscjN70qdtO+cUYg1+9NnGw== )`
	`iana.org. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220826015538 20220804171333 39817 iana.org. Gzti6TxvGOpOlR+KBUIii3lAwtAcr4zpfscXRAb5gnMcdO68C8RRTwgHuY6/Yg4FS9fcqYxFsfyc P4ZQkDLKDegsekUigz6/CF+/s9QSWIEjbJ/Hgq5qm4Zy3UpFFEomTK48vuSigl6yqW/wneDY144i 1Q16ON3aoE18FlOEih/0hZ0lQ2qBUJb85VaavdV5uDejjCASTl7laUJm7zIn4/IdI/gipDSFwJN4 yknqQayL4JhpVVqAy8ht67EQQzMUuOn5nhy9jE3SskmZZ89DZ/hJt1tuVcQtBTdToWx0pMKLDHJl s4f8EQtnpL5m8xNTX5P6dymTgKe5ei/dC+bmXw== )`
	RRSIG=21911 and DNSKEY=21911/SEP verifies the DNSKEY RRset
	RRSIG=39817 and DNSKEY=39817/SEP verifies the DNSKEY RRset
	DNSKEY=41706 is now in the chain-of-trust
	DNSKEY=21911/SEP is now in the chain-of-trust
	Query to ns.icann.org for www.iana.org/A
	Received 1081 bytes from 199.4.138.53
	;; Response received from 199.4.138.53 (1081 octets) ;; HEADER SECTION ;; id = 38979 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 8 3 3600 20220827041352 20220806031733 41706 iana.org. YW7uzR7PerP2SjOvwzu2Ojcn1artp/Nm+wn+RcbULTxrUXQPub4q7MA0ruTOf7asRcFqG4+JfKJM WOdtnTBxSWqYXEFQW1tmn/wz3ImDMAj5+6W0eb4db0/hG6ECMTUK5MQLi4gzZaFtOAUzVY5kppsJ G30WqYeRH4nsw+vGuhw= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (7 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827053310 20220805214336 46688 icann.org. k7LuCXTTEbI6Y2GFF0YbQl3PpeHswe7XCrGYVvatMIjkDcI3mS1EeOb72WXltLV6amz9fleU5hZE 3YFi7NR0XPeH2tOIoDyc24ENjFhPYoNKB6Hn3hdN23e95R5T+h9ZJHGxvwpO0rKuzdxPxuOpcToA 1aZCWP3WQXfllYx0oFI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.icann.org is authoritative for www.iana.org
	Query to ns.icann.org for www.iana.org/DNSKEY
	Received 1081 bytes from 199.4.138.53
	;; Response received from 199.4.138.53 (1081 octets) ;; HEADER SECTION ;; id = 31707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.iana.org. IN DNSKEY ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 8 3 3600 20220827041352 20220806031733 41706 iana.org. YW7uzR7PerP2SjOvwzu2Ojcn1artp/Nm+wn+RcbULTxrUXQPub4q7MA0ruTOf7asRcFqG4+JfKJM WOdtnTBxSWqYXEFQW1tmn/wz3ImDMAj5+6W0eb4db0/hG6ECMTUK5MQLi4gzZaFtOAUzVY5kppsJ G30WqYeRH4nsw+vGuhw= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (7 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827053310 20220805214336 46688 icann.org. k7LuCXTTEbI6Y2GFF0YbQl3PpeHswe7XCrGYVvatMIjkDcI3mS1EeOb72WXltLV6amz9fleU5hZE 3YFi7NR0XPeH2tOIoDyc24ENjFhPYoNKB6Hn3hdN23e95R5T+h9ZJHGxvwpO0rKuzdxPxuOpcToA 1aZCWP3WQXfllYx0oFI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by iana.org zone
	www.iana.org is a CNAME to ianawww.vip.icann.org
	Found 1 RRSIGs over CNAME RRset
	`www.iana.org. 3600 IN RRSIG ( CNAME 8 3 3600 20220827041352 20220806031733 41706 iana.org. YW7uzR7PerP2SjOvwzu2Ojcn1artp/Nm+wn+RcbULTxrUXQPub4q7MA0ruTOf7asRcFqG4+JfKJM WOdtnTBxSWqYXEFQW1tmn/wz3ImDMAj5+6W0eb4db0/hG6ECMTUK5MQLi4gzZaFtOAUzVY5kppsJ G30WqYeRH4nsw+vGuhw= )`
	RRSIG=41706 and DNSKEY=41706 verifies the CNAME RRset

org

	Query to b0.org.afilias-nst.org for ianawww.vip.icann.org/A
	Received 483 bytes from 199.19.54.1
	;; Response received from 199.19.54.1 (483 octets) ;; HEADER SECTION ;; id = 60767 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b0.org.afilias-nst.org for icann.org/DNSKEY
	Received 471 bytes from 199.19.54.1
	;; Response received from 199.19.54.1 (471 octets) ;; HEADER SECTION ;; id = 35221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone icann.org

icann.org

	Checking DS between org and icann.org
	Query to b0.org.afilias-nst.org for icann.org/DS
	Received 345 bytes from 199.19.54.1
	;; Response received from 199.19.54.1 (345 octets) ;; HEADER SECTION ;; id = 26186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DS ;; ANSWER SECTION (4 records) icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 ) icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 ) icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for icann.org in the org zone
	DS=18060/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=17248/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=23584/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`icann.org. 3600 IN RRSIG ( DS 8 2 3600 20220830152424 20220809142424 29511 org. AfbXaE94sPvwbR6itfkHZmBSba/MQe2ydAKX7DGHuoB0c41jiPppwDSG9WWAxNdwljJ4cG3BkluN ZQ4Uf7X4wUMlh/w7lFrbZ4Y0wRm6+OFKBM0eUpvpFHSpC2fH+AkeiIaIqnF5gF90EGmVQi37k3zS gi1rxct2PdtAjUY+BUY= )`
	RRSIG=29511 and DNSKEY=29511 verifies the DS RRset
	DS=18060/SHA-256 is now in the chain-of-trust
	DS=17248/SHA-256 is now in the chain-of-trust
	DS=23584/SHA-256 is now in the chain-of-trust
	`icann.org. 3600 IN DS ( 18060 7 2 6be021818b9f10ed981a03acbf74f01e31fb15c58680ad0c4baa464bf37a7523 )`
	`icann.org. 3600 IN DS ( 17248 7 2 885cf8a6cf35fd5c619e1d48b59afb23063bba9fec52ff25f99094cba10910a2 )`
	`icann.org. 3600 IN DS ( 23584 7 2 af57a492640102809209aa005b93c32b7acc83734bc785cfa50b51688299cd61 )`
	Query to c.icann-servers.net for icann.org/DNSKEY
	Received 1628 bytes from 199.43.134.53
	;; Response received from 199.43.134.53 (1628 octets) ;; HEADER SECTION ;; id = 31983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (7 records) icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAa/K4hH2CQxpTIB3ooL62krvz2fevKzqqmh8rBA6clL8nWFFp/hU8xhW+GB3W4n/x1MkUnkE BrTun78KtapVGRbnAw9kJ3qDoTa4CsaPLZFLOH0gP1xL3biEN6XOCoep0yaJhscKCDl9miqduddd nXa+iL/b71qEwPHbHkq6mhbF ) ; Key ID = 61853 icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAc2Z6Zud+ajvIhCty5crR6BRw84ENiaem/0jg+WoVub3g2dMk/CsQMpl25JbTsXml+fXg60X JTg//JYgUNZvELk9bMW3qiA3Mr6GrwLfKmrFEEEVOPzasUpmnFGQSPyl0XEg7QF+Fmqw7V7x216z UtFHLgpZT3aCIRiuC8JUQvoSOX7gMyEAQOIii/XbD9xEMpuCGVS7UaNGN1iUJctRlaBFOQzxg1h4 TtYIofMqExuBZrF2Xid1oEcVd3xM1VLCE8Y3tmR1TncxrmiKsLkHA7jgOwQLv05RqZML5zmw/9sS 8iil3oyRgy7X6Nh5KQZyC5cHqcl/58lsN0IrXe2logk= ) ; Key ID = 63048 icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAZ9up62Dl/yiPxW1+x+1B3qsgAeX1B8OBqv0NTbLicGLRbhFNp8gov3ZlBzL05R/VEHxVvNc aGZbvYk8efKD9wa24/lZHwxZtmxLrHl7DCh9NvMwdWjqV3VdKCkMjjJC9R6H5l5pKYKzrWbS6zqr i89+uXPsgdNwIw6HV4bAAMsH ) ; Key ID = 46688 icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAaxEcKY6A65zj+LOPz61QMjhiSFTjuw77gmHUtrAH2IZ53i61DdNjh7h5LhujGjVR7+XsL+D zQJhJQUSrIilaNv2sHlzjjDdXKsD4TxaziLCvbog/5J9DIc1piDOp5Bky5l2YoX25AyQIbm1t4mx iMCkjW6ItXO3FGFdP2W+yQXLzK5b+oC8UmlBViZaR2N8+By1uDtSTT+hPWCUXx7BbK1qUuKrOHYW 5wtklzn9zuPYRaT1IAU6nYQeRVAjyqEnllk7ybhT4Jic4yyUIaEJaHxJHQwW2Uu+YLhstrJgkf6X Z+O2XhtFAXRh09peoIaKpB0ldrj602qaXRWahiRQqq8= ) ; Key ID = 18060 icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAd2HT4Rj2l7qUrMDa+AYY75/HFjUKNowf+GP/7GCICJ+8PRUaoZ8Nn5yTryi4br6GoiJ9MGx 2yV2K3JF2hZ8CcjtjGZYdaM86c/itTRlkTd2Kaai9jwuE8+HtSEdlNsVdHQJCWYhF5UcLSoQERxi B6eYEzhLxuKoiuZTd9OgNj+P ) ; Key ID = 58935 icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 18060 icann.org. l9XgGB1vYc+TlOX3giNo5qsJnx/RulRo/TWF4AWCfnOHiF8B4M+otZGwNSXf19ZbK6FxqVntnISn oSoOtmV2WED0y0YvBLLFLl3fAm3s4q1LMzZGa9K5Qd93O0Z7RvDZdh7Ps2qn0Y1a+F3J4H6E3SDP UbtwjnFCqiqr1FPfy1FKck5QmenfXOSTDhdHuP1HiuWKL18ryRSdT40kcmciOlGEaHhbVHF7YQev BGlARwVjH6nJhjY/MSVJ4W+cQwbKfqzzPVNZP2rXnxWVyyzso1L7Z6HL3E5gIFWbmU9aQ3kaiOGu kjRFgfAFF/AV0JXXtCeW7OAJxZIeAw1sCR1EpQ== ) icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 63048 icann.org. Vii7+hiKOp8NakDbNwbMTrAZtHLbrEcgIdSt8jQzEEQMejg1elxFo3HFP5QoR//TNCe1+EHMLhsm F9t0uK9op7ZcXfqhtNrkfFUw9gy1q1qs1+S7+MeVzUF4Cc5+y6wFSFI6aDikD/itKPAB8TLPlwuF AnPivLqVIoF6ooTqjeOAS14y+EVZCoX54v4a+6F6cjFfijagzzjd8AzYRzEDVjgbIxp5jMjohKNa a4uKSwrWbixVm4/QTBUd9k3cn3BdrCfQV5bzPFPVLTq175VoD3Mo8p167A90+Ku+fjrs1Q1S3B+C hAZYhXypmS5drO9fXvyLiuYdwbaMRtZUjjyoAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 5 DNSKEY records for icann.org
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAa/K4hH2CQxpTIB3ooL62krvz2fevKzqqmh8rBA6clL8nWFFp/hU8xhW+GB3W4n/x1MkUnkE BrTun78KtapVGRbnAw9kJ3qDoTa4CsaPLZFLOH0gP1xL3biEN6XOCoep0yaJhscKCDl9miqduddd nXa+iL/b71qEwPHbHkq6mhbF ) ; Key ID = 61853`
	`icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAc2Z6Zud+ajvIhCty5crR6BRw84ENiaem/0jg+WoVub3g2dMk/CsQMpl25JbTsXml+fXg60X JTg//JYgUNZvELk9bMW3qiA3Mr6GrwLfKmrFEEEVOPzasUpmnFGQSPyl0XEg7QF+Fmqw7V7x216z UtFHLgpZT3aCIRiuC8JUQvoSOX7gMyEAQOIii/XbD9xEMpuCGVS7UaNGN1iUJctRlaBFOQzxg1h4 TtYIofMqExuBZrF2Xid1oEcVd3xM1VLCE8Y3tmR1TncxrmiKsLkHA7jgOwQLv05RqZML5zmw/9sS 8iil3oyRgy7X6Nh5KQZyC5cHqcl/58lsN0IrXe2logk= ) ; Key ID = 63048`
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAZ9up62Dl/yiPxW1+x+1B3qsgAeX1B8OBqv0NTbLicGLRbhFNp8gov3ZlBzL05R/VEHxVvNc aGZbvYk8efKD9wa24/lZHwxZtmxLrHl7DCh9NvMwdWjqV3VdKCkMjjJC9R6H5l5pKYKzrWbS6zqr i89+uXPsgdNwIw6HV4bAAMsH ) ; Key ID = 46688`
	`icann.org. 3600 IN DNSKEY ( 257 3 7 AwEAAaxEcKY6A65zj+LOPz61QMjhiSFTjuw77gmHUtrAH2IZ53i61DdNjh7h5LhujGjVR7+XsL+D zQJhJQUSrIilaNv2sHlzjjDdXKsD4TxaziLCvbog/5J9DIc1piDOp5Bky5l2YoX25AyQIbm1t4mx iMCkjW6ItXO3FGFdP2W+yQXLzK5b+oC8UmlBViZaR2N8+By1uDtSTT+hPWCUXx7BbK1qUuKrOHYW 5wtklzn9zuPYRaT1IAU6nYQeRVAjyqEnllk7ybhT4Jic4yyUIaEJaHxJHQwW2Uu+YLhstrJgkf6X Z+O2XhtFAXRh09peoIaKpB0ldrj602qaXRWahiRQqq8= ) ; Key ID = 18060`
	`icann.org. 3600 IN DNSKEY ( 256 3 7 AwEAAd2HT4Rj2l7qUrMDa+AYY75/HFjUKNowf+GP/7GCICJ+8PRUaoZ8Nn5yTryi4br6GoiJ9MGx 2yV2K3JF2hZ8CcjtjGZYdaM86c/itTRlkTd2Kaai9jwuE8+HtSEdlNsVdHQJCWYhF5UcLSoQERxi B6eYEzhLxuKoiuZTd9OgNj+P ) ; Key ID = 58935`
	DNSKEY=18060/SEP is now in the chain-of-trust
	DS=18060/SHA-256 verifies DNSKEY=18060/SEP
	DS=17248/SHA-256 is published, but a corresponding DNSKEY is not
	DS=23584/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 18060 icann.org. l9XgGB1vYc+TlOX3giNo5qsJnx/RulRo/TWF4AWCfnOHiF8B4M+otZGwNSXf19ZbK6FxqVntnISn oSoOtmV2WED0y0YvBLLFLl3fAm3s4q1LMzZGa9K5Qd93O0Z7RvDZdh7Ps2qn0Y1a+F3J4H6E3SDP UbtwjnFCqiqr1FPfy1FKck5QmenfXOSTDhdHuP1HiuWKL18ryRSdT40kcmciOlGEaHhbVHF7YQev BGlARwVjH6nJhjY/MSVJ4W+cQwbKfqzzPVNZP2rXnxWVyyzso1L7Z6HL3E5gIFWbmU9aQ3kaiOGu kjRFgfAFF/AV0JXXtCeW7OAJxZIeAw1sCR1EpQ== )`
	`icann.org. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220825180547 20220804154231 63048 icann.org. Vii7+hiKOp8NakDbNwbMTrAZtHLbrEcgIdSt8jQzEEQMejg1elxFo3HFP5QoR//TNCe1+EHMLhsm F9t0uK9op7ZcXfqhtNrkfFUw9gy1q1qs1+S7+MeVzUF4Cc5+y6wFSFI6aDikD/itKPAB8TLPlwuF AnPivLqVIoF6ooTqjeOAS14y+EVZCoX54v4a+6F6cjFfijagzzjd8AzYRzEDVjgbIxp5jMjohKNa a4uKSwrWbixVm4/QTBUd9k3cn3BdrCfQV5bzPFPVLTq175VoD3Mo8p167A90+Ku+fjrs1Q1S3B+C hAZYhXypmS5drO9fXvyLiuYdwbaMRtZUjjyoAg== )`
	RRSIG=18060 and DNSKEY=18060/SEP verifies the DNSKEY RRset
	RRSIG=63048 and DNSKEY=63048/SEP verifies the DNSKEY RRset
	DNSKEY=61853 is now in the chain-of-trust
	DNSKEY=63048/SEP is now in the chain-of-trust
	DNSKEY=46688 is now in the chain-of-trust
	DNSKEY=58935 is now in the chain-of-trust
	Query to b.icann-servers.net for ianawww.vip.icann.org/A
	Received 1087 bytes from 199.43.133.53
	;; Response received from 199.43.133.53 (1087 octets) ;; HEADER SECTION ;; id = 31228 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (9 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827053310 20220805214336 46688 icann.org. k7LuCXTTEbI6Y2GFF0YbQl3PpeHswe7XCrGYVvatMIjkDcI3mS1EeOb72WXltLV6amz9fleU5hZE 3YFi7NR0XPeH2tOIoDyc24ENjFhPYoNKB6Hn3hdN23e95R5T+h9ZJHGxvwpO0rKuzdxPxuOpcToA 1aZCWP3WQXfllYx0oFI= ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826224826 20220806034338 46688 icann.org. VhKbdvdqJOQltVA3L4VwwXytA6c3pn4sW/u9Pn1IKrZBZQgKGY9w5Ui4jD40+56+RlliRihql6Jh FYkdpnJciHMVW0vl/DGaY3AyltP5UqKzDDyfFzvHa+CPh5aH2CX2p4CsGFZGXJPjDIxNAi9KoI4O 0vlpRzOLyz8DGbGaPzs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.icann-servers.net for vip.icann.org/DNSKEY
	Received 1135 bytes from 199.43.134.53
	;; Response received from 199.43.134.53 (1135 octets) ;; HEADER SECTION ;; id = 64071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; ADDITIONAL SECTION (11 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220827102031 20220806074338 46688 icann.org. iiQw9CIjJZGxpTHnKuYyz5Xbwfc3R17euRsKd/YJjbDY3FnjfavmGvfXOjWe21Uq+0P+fVDGn6wO hsFvPWjkLD4UcolsyQ6yNBwLZItvKtuU9lmBO2Ed3D7QQmuCRvtURQC/EZqY6HAdGj6ShERSzCWV c/l/85hpvGt7hoIz3xM= ) gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826224826 20220806034338 46688 icann.org. VhKbdvdqJOQltVA3L4VwwXytA6c3pn4sW/u9Pn1IKrZBZQgKGY9w5Ui4jD40+56+RlliRihql6Jh FYkdpnJciHMVW0vl/DGaY3AyltP5UqKzDDyfFzvHa+CPh5aH2CX2p4CsGFZGXJPjDIxNAi9KoI4O 0vlpRzOLyz8DGbGaPzs= ) gtm1.lax.icann.org. 3600 IN RRSIG ( A 7 4 3600 20220826145522 20220805174334 46688 icann.org. LiQKc92WivbfsOX7qSzJkevhn+qxtwHlguSI3i9AQ/ditt2c/IWbbSDIacPGFg5N4hWczKvL/c5Z VV+lp4Z+c/3PKeS2cjpvCgZZpBNAi8vGKlnJkBLRuoZ+wm+7rUaNnSN99wt3zLQWKXZrYRUVoOtk 0Umc5pfCLAVSmUMwmW8= ) gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 7 4 3600 20220826165701 20220805114638 46688 icann.org. GMfD1pXl+STkR+AWx1CTOKUHE+kF3qdSOc3yUWpAz5r/1zePGrW/wN8OLxKjwHJIyjdSVK69AScA 40crlgnmUowFWzeTo7U+8uGEYnYU/nEjmYYdbx3QeHWlt2dDa8jBT0ZDwwJ4AVGIDv2ILhAzpEgl SjqPNINdnlttSxLG2Ks= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone vip.icann.org

vip.icann.org

	Checking DS between icann.org and vip.icann.org
	Query to c.icann-servers.net for vip.icann.org/DS
	Received 259 bytes from 199.43.134.53
	;; Response received from 199.43.134.53 (259 octets) ;; HEADER SECTION ;; id = 25457 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DS ;; ANSWER SECTION (2 records) vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for vip.icann.org in the icann.org zone
	DS=6025/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`vip.icann.org. 3600 IN RRSIG ( DS 7 3 3600 20220827133023 20220806014337 46688 icann.org. iiCJ3505W1Q0L3balKqCk7pyRmhZ8rfTbXqwrYM/bQFtXvSPvRBfPgSfNJuXrHmJHx63JLSoXN6b gCIk1z2eb5qYGjvj0KOJR6dpMv5SaDnlQDpkvRNSI05gjiaAXs4e1Fni0OgL6kMIo+eQl0tWcaOT fN7Yi23AW/D/LIt9ZKU= )`
	RRSIG=46688 and DNSKEY=46688 verifies the DS RRset
	DS=6025/SHA-256 is now in the chain-of-trust
	`vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 )`
	Query to gtm1.mdr.icann.org for vip.icann.org/DNSKEY
	Received 1261 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (1261 octets) ;; HEADER SECTION ;; id = 35995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (6 records) vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; Key ID = 6025 vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcEnl44afQOr13RDfjVNdjNxXntFKpNkw0O1gNRD7c/Ri+FGdmNOXX8ap/dZfPGxQBDX9OZk aCCeuxnS2y8EUPWe4x5u4Wmvmbrow06rhfnG0DyveLOwSWtS0jxqKDIwJBu03lZxvn3GIywnlS5z oCyT/wzHlJr5uvt8jndWAo7z ) ; Key ID = 31713 vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAak80EaT1j7Mr8VjpPG0/UYwCaEPDxMH3JHS/nBzI9EjTvJOanF/D/bS7yvGYtQiz6VT7J72 sIkOvZPubwoRvbhPNLSTMQM9gFw5p/cVzCEdMSf3hE31tdhfJ4xaZCGRUMJQszZ9BafqI7zyu2z8 5l1NPTQv81kse7Xja5A1n69N ) ; Key ID = 41364 vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 6025 vip.icann.org. YJKDEL67GVQgUDoWXoUE+YHZLbi7B6p1KNW0bfu5v/u/qbfq5LyTNLAu4XPAI64+So/BSHkOeFmU G8/f2HbhuEWf/LrprzDXqyvQKEA34S7sagC4O/Rlcm8ZfcRvvZx6GO1SYTTMWzWaazh1riniWZVW Mp7lHV1oh8BD3BoWbRGwqEP3bUOeQGezpZghiH2gt5aRzLp/34m1XdPjS1gwN+hXxN7seACHpiy+ yu6OR4rVINNLFh30mnIjZt7U7dmsKUugkMPPy0KBHoNEdzSYQVBv2OlaCfPq5mYxC/jXX4Gs50SH pIjg7oZdY/B0KKvnk34zx15vyN42CwmC6Uh64w== ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 31713 vip.icann.org. qrXifVE0ycSiQX6VaZ86XhxdzqnHZtdARuwcdSanNUPun14A0t3Y3SGKya3ejn6K8ZB0PbFqCZYM vL9SqJ/7ArDYr5mM9sfS4iAAZJ4qP9gNCI3KkgAgC4ttp2OndtvIVSTwNSYjREtEFd5idytQ9FOa LTKSK7sTOx1EpEjgZ3c= ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 41364 vip.icann.org. WhG+cxWoil9VpMjxAO9UVP46L4uvFE3NKupW1Q80OP0CnV5SoOg+sKFSDiMbTp12awH8qsfAIlVh 2acGEtNUkFn4KGAv0v5ETGZmHcQVVGLCaKtEwDnLNTCKJnTeJJ9oZYiLYfz2Gyr86ju3HY1SPL+l DlH5eErtO75d1hhUZQ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for vip.icann.org
	`vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; Key ID = 6025`
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAcEnl44afQOr13RDfjVNdjNxXntFKpNkw0O1gNRD7c/Ri+FGdmNOXX8ap/dZfPGxQBDX9OZk aCCeuxnS2y8EUPWe4x5u4Wmvmbrow06rhfnG0DyveLOwSWtS0jxqKDIwJBu03lZxvn3GIywnlS5z oCyT/wzHlJr5uvt8jndWAo7z ) ; Key ID = 31713`
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAak80EaT1j7Mr8VjpPG0/UYwCaEPDxMH3JHS/nBzI9EjTvJOanF/D/bS7yvGYtQiz6VT7J72 sIkOvZPubwoRvbhPNLSTMQM9gFw5p/cVzCEdMSf3hE31tdhfJ4xaZCGRUMJQszZ9BafqI7zyu2z8 5l1NPTQv81kse7Xja5A1n69N ) ; Key ID = 41364`
	DNSKEY=6025/SEP is now in the chain-of-trust
	DS=6025/SHA-256 verifies DNSKEY=6025/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 6025 vip.icann.org. YJKDEL67GVQgUDoWXoUE+YHZLbi7B6p1KNW0bfu5v/u/qbfq5LyTNLAu4XPAI64+So/BSHkOeFmU G8/f2HbhuEWf/LrprzDXqyvQKEA34S7sagC4O/Rlcm8ZfcRvvZx6GO1SYTTMWzWaazh1riniWZVW Mp7lHV1oh8BD3BoWbRGwqEP3bUOeQGezpZghiH2gt5aRzLp/34m1XdPjS1gwN+hXxN7seACHpiy+ yu6OR4rVINNLFh30mnIjZt7U7dmsKUugkMPPy0KBHoNEdzSYQVBv2OlaCfPq5mYxC/jXX4Gs50SH pIjg7oZdY/B0KKvnk34zx15vyN42CwmC6Uh64w== )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 31713 vip.icann.org. qrXifVE0ycSiQX6VaZ86XhxdzqnHZtdARuwcdSanNUPun14A0t3Y3SGKya3ejn6K8ZB0PbFqCZYM vL9SqJ/7ArDYr5mM9sfS4iAAZJ4qP9gNCI3KkgAgC4ttp2OndtvIVSTwNSYjREtEFd5idytQ9FOa LTKSK7sTOx1EpEjgZ3c= )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220820032139 20220813022139 41364 vip.icann.org. WhG+cxWoil9VpMjxAO9UVP46L4uvFE3NKupW1Q80OP0CnV5SoOg+sKFSDiMbTp12awH8qsfAIlVh 2acGEtNUkFn4KGAv0v5ETGZmHcQVVGLCaKtEwDnLNTCKJnTeJJ9oZYiLYfz2Gyr86ju3HY1SPL+l DlH5eErtO75d1hhUZQ8= )`
	RRSIG=6025 and DNSKEY=6025/SEP verifies the DNSKEY RRset
	RRSIG=31713 and DNSKEY=31713 verifies the DNSKEY RRset
	RRSIG=41364 and DNSKEY=41364 verifies the DNSKEY RRset
	DNSKEY=31713 is now in the chain-of-trust
	DNSKEY=41364 is now in the chain-of-trust
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (412 octets) ;; HEADER SECTION ;; id = 47456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.dc.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (885 octets) ;; HEADER SECTION ;; id = 40032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045549 20220813035549 31713 vip.icann.org. SGbQamf8asxX2994ErdQOdNGZuBeS91VDYuxLcDTZpbDtswkaXnkbV4bIBO2qXFKI+FVnlLJONaX 95SwgwLiAgYsOoEWYbUAWY8TAe0FBOSz4rQ74GuZ9QkzSKaMU2kpMoAMNr2fBkYcgyP1BwdN9hcA 2pqBAAOz4w0lKONWiCA= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045549 20220813035549 41364 vip.icann.org. as3+XY9VkoQPmLCIVdOYifnebxPJsDzk/aDZuwea634uWK1ezT+15acrhuWD5M7mqHgsJHBVbJcr P799KtFXho+ood1haD+2fsvIG6dFhYUt1WvZC7bkF1y9iU3UsWZsbHux/2ZtCNztaatrwTbyz5qE 6zugscAQw1O5TjrvfPk= ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN NSEC3 ( 1 0 1 f2eb709d5f83a148 mh5e2pvqrn65hvc0ffckvt7qrcjrmk45 MX TXT RRSIG ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033827 20220816023827 31713 vip.icann.org. ho+cZrfzXyR4uDyifgbE7NGVj4gJA7aYs06TCqR43sgVlAqrU02lDirKreQJBhqpg4QinhvuXFlC bSHSR8Sr5acznbQlfNf0n3EMDxOv3i6mItzSChTenC7F+irxSMs4vnwTfObe2tb8S2BoQVHrcnTg AzDcixsejSHQsMEK6C8= ) mh5e2pvqrn65hvc0ffckvt7qrcjrmk44.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033827 20220816023827 41364 vip.icann.org. XiAIQegkQQA2lJpT5J+TSC8W21ND1HpwCliY/hzRzqLV274xSE4IowRYhB4he5SIQOr11hJnSVeC Jpk+9kJDdX9WTIvr6NBNkhRA4ZcoHB9O9WR19ndgAk1OHlXxwaJwXNhNU3ERd5rdVbtbgQULi72k zzILclCYbK/Mi9CvQxc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for vip.icann.org/SOA
	Received 893 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (893 octets) ;; HEADER SECTION ;; id = 62944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (3 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820053029 20220813043029 31713 vip.icann.org. kE5NgB76L8ipPiAGKFvMLRccenAEGFWCsjd/uaavvHGF0fgRHyt2m8qFz2PsXsCE74uaMtwLeI5e Hh7xYfdYt3lkjcmVueYMpD4yO7OVLIBPnthfmdRH5WybMH/LN7K6B3lXuBHn7GV9aCpiRZ1XDoq6 fOmmUXIfEeJ5DRH0niI= ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820053029 20220813043029 41364 vip.icann.org. jI9o/cKQc1aefdyXy9dSSQEmMZkfHjzVBhZ1/jUoXtK8cP3KBvXldi/UeWuREala5ATeUmUKrBUp v+Za5q/2u79nYyXVWnxSvCKpx2aC7l0i+s8pdz+h8TiGJ1vW3qbonF04CaYrOA5hTIRrp4aM2GX8 DcJan3XjSHA0AR53Z8I= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820040419 20220813030419 31713 vip.icann.org. RuwYk4uNTiKZ5Vd/bJaXDXj2DEjDg8ZT5aTve/LXVBW77BaFbR6wWrHqGVWxN3GyL5BihU6dsoEX MX4Anya0MCJ9aXvPNOJDHMioNx6LUjeSQ87jCOwcMabkwO45KH7PwpQYeij1fStp2fWJ7oiq7hMZ Z3qD4oePdnD6KWEbu/k= ) vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820040419 20220813030419 41364 vip.icann.org. apaCTRKkvwOMjfQ451Uf4FvK+s9mB4tszYWpty3P4TM9xC8u+nYg+lG6N7SP7h8tGueAy8jnPs4u oWWpja8tdJ1a+b+VvIJYatKP5l33T7U9fzWcG+Lj4EpHyWy7yQBubehuKbxTFcwex56JmB4ZUveG 7fd6unUOIZp9xoN+MKc= ) ;; ADDITIONAL SECTION (3 records) gtm1.lax.icann.org. 0 IN A 192.0.32.252 gtm1.lax.icann.org. 0 IN AAAA 2620:0:2d0:296::252 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gtm1.mdr.icann.org for vip.icann.org/SOA
	Received 893 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (893 octets) ;; HEADER SECTION ;; id = 7170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (3 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820054244 20220813044244 31713 vip.icann.org. MiZqL+1Zg6lfPQavJlL7GgD3FIHcIxCqiDpc8HVWtwc6bJMahV6kyBNVxf4N7P9CiblbhyhBL+1U Ej9i1GuzSiRXbZH0H4NpAdrPoxmLrRXCEnbzTr+Yp24F2DeFcdZ+75vKBSAHGAUYurZzCwuFnBpw QiUInMZHs3kbjdVZad4= ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20220820054244 20220813044244 41364 vip.icann.org. af4YG9t/jTVXV3Eu7KMzeUp+bTLlJtJQqQpRMRevt89SQvfQVFOdlVndn9dCVrTpbmIC2jKEwNRm 9IORK24EdX4ifCuR8VON+o+vln3y/YTUrTX8s9hsQaiX78Xe38lQOvatHv/lrtmTCRKASaB9MWk6 tDUVzy+BbMOLZG6xnRg= ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820032146 20220813022146 31713 vip.icann.org. AFV42xg+gctGO71GbwY9mIPXDdOnK4/jJSQvDlzNOZoqZcbBr8fNEI8J8wJjIdSLVeXhmkw3c0Ja n2U1s+EAn5ptK/Olxvcc671TRMopKoGY6mzQvMzwNEXN45yU3LXBzTnOkV/l1HiNWa9dd/8OFVhX 1Hqdg3OJnp3FWoH5Ru0= ) vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20220820032146 20220813022146 41364 vip.icann.org. Dz9wAYHP7/UT6DQP5EOHL0NhticeGs0taeOGhZ7fic/0Hif2LMCdCNDfB40jV1ThNCpxhcnP1ovD wcjj10W1EtgK3AxMWAwE5sX0gOUc3ThUn1pjGddnEDgRQXkboQjCgbc7OftdKb3TZi4nX6PkwSV1 l5ietC+kuYBWOc3cbWY= ) ;; ADDITIONAL SECTION (3 records) gtm1.lax.icann.org. 0 IN A 192.0.32.252 gtm1.lax.icann.org. 0 IN AAAA 2620:0:2d0:296::252 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.47.252
	;; Response received from 192.0.47.252 (412 octets) ;; HEADER SECTION ;; id = 17175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 31713 vip.icann.org. FpeYDujiNJa7PPPIxBJDoFMFOHOOD1PTVu0iRnlCypwWBR++j3+zmnUZK11hAVnbxiTfPr+Ee4OE P+LzlCvHJ4lPunTe4Yh6ZfmTfb4OF6FalOyCAUfiF2Bwhz+wYe+sDq2pqctXfIlCK/tcfVB0Lk4f G4fZlnBiPKL04mJQMUk= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820034112 20220813024112 41364 vip.icann.org. A0m0K84Sscufc/Cqsu75+463nejSUFXi7ejss+nAzqHWmyTj7aIrQB89DsmDrd6wKIX9oP07HDXt Z72KpbqYcg8zG6NZOUubI7TF1e3vNfpvPDlEvnNwXsAcaMeHIig4f4vTodaif54h28WkzfyZNcx3 B6X9Mpvn/c1OHjQYLyU= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

vip.icann.org

	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (412 octets) ;; HEADER SECTION ;; id = 33506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.lax.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (885 octets) ;; HEADER SECTION ;; id = 53912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045537 20220813035537 31713 vip.icann.org. a13Xn45XqOIvfQuoQo4v/1ajDUpzokyEyldPJMi5NV3RJJwguGbv0XuHpUrYtTdAPxf4eJfkPzNr BwwFEfFNgu7CqKifkLxeiCko9ZZa71F73ZfUcfN+5fdqmEMin1vHzq5wt+5LvGhETlrhD+69GAIB 7ZJnPBrr35Y7ujrtO4Q= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045537 20220813035537 41364 vip.icann.org. qL2i85ITAEeU/D6w+SwST3mLRy1TnSA9no8r9PuY1dn3JPMGWdhN/AVJiZdT9ZOOYJhHqw6H5ERB wBgIw0919OrKL6kUySaqAk3Tkghrx5l2HxvTW/ILB47D3KAG8QUDH7HLmeVm3pa3bI0gjb3A/ICo nQkCgLro+BeMLFSITcI= ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN NSEC3 ( 1 0 1 da3a5bd90a5a2c2e 69q6c9qv66inbjtoea1vc8d1vmpqh78p MX TXT RRSIG ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033807 20220816023807 31713 vip.icann.org. lpsAAoljWWl6HP77Lj3eRaLsOHuHrt1Lr06Y6OEOer2pRA/0m1DjgjT2URV9mNPtGym4AUI2Pol9 BZqMuR/wxu0r9q/UBedC1nphup0fJ/rF7Wk+ONGxhWnncsBcekpij2EF+lc6/AVKeFmYp6BS9fHi LsMHVI/F9v4iE2QHLGo= ) 69q6c9qv66inbjtoea1vc8d1vmpqh78o.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033807 20220816023807 41364 vip.icann.org. KJq7bhvBhM1JjGN0llB+50Ry9mkNkvQTyY5PFiMqxxNPIv6aJVY5KPn/NaCNYYS+EAY3JjGr+NOw 1HSF+YdxIPnb5cib8jz445RHiJhKSAbVLR9uvwvZuCQt0tp3YCF6GIEK2j09JD2NyXr9IDGnPTee Q5cJtCqii/VDkRQb+Jk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.32.252
	;; Response received from 192.0.32.252 (412 octets) ;; HEADER SECTION ;; id = 25237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 31713 vip.icann.org. qMkmWEXCDsDTUp8IQRaJP2g71Qqmw6eli1CvnumBH8dkPlx/aosWeMpUsLkMZmLm/gW4NDgvjiBc mhNePCGPxccysF6KWVEq0WWTvrIUYVZlQNNmExyxJthAyWuA/k6tiCjcSGRi5wW3Cg/Aj/kLZorr Ov3cEWe0h2lHA6ThFTY= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820040418 20220813030418 41364 vip.icann.org. ptMy4iD6e22O1olLf2LgSoOUC0DAhDmzyOFZjIbD12rac049Fg3nKEMEdygZVMGscY0xwhVTkbWG dvrzxAISseLV2Hay4MYhcZcVXV94Tos63fEuBZb/aZUzt0pqfj+O13XRO2Drqi6wuL+m9WtrpPN6 5XfGyGI7lB5iVx7W7yE= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

vip.icann.org

	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (412 octets) ;; HEADER SECTION ;; id = 33954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gtm1.mdr.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 885 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (885 octets) ;; HEADER SECTION ;; id = 61985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2022080306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045538 20220813035538 31713 vip.icann.org. Xo/tMx5o1wxi16TR60MQyYZzZ0W1NCDM9CmrVgT3q4I/UbyownCmSOKok7rU731JErINmeV8M5tf WP5Y+IpHifxiYPO1i3q1nJx74kbbEb+72+YbiG+zxzSP76iT5XScv3lUXNUs5ywAAZNdZA2lvgok 1WBwKhXODbi71Bg5nMI= ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20220820045538 20220813035538 41364 vip.icann.org. GSIjheZDhFN8wELGpJ4Lfqcf7sPr8O3L0cby/XmdGyrh3QiRWjqeqdMviRd8ozAOLkJGArEhzKoE vlu2xuZd6vDWNmwTOs34XCeYwdDz7XqBROuy7kDlLRgXVKDusQFEqI7j2BeL8vzRw5jeRWVReJ30 TgCtBqLByy+TDXpgBBk= ) l7a4ep1get90ols5vcbjub32d95gl9j5.vip.icann.org. 60 IN NSEC3 ( 1 0 1 ab442879c96c973a l7a4ep1get90ols5vcbjub32d95gl9j6 MX TXT RRSIG ) l7a4ep1get90ols5vcbjub32d95gl9j5.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033826 20220816023826 31713 vip.icann.org. JEK488W+JnHkbvaARK1/kWm/u5aXSfGpGI9vQUkrb24YhIwhOqIQRxi+UY/0DOf6XyXjoq6/fbaR OkVvXyUzugjGNNApziy4PJ/A5AZduMtJluHJOVCw94hjsC3ozYes02c0MMGu1R0XUXerabPOe6I5 7Nei2OQWCKuSONrOlo8= ) l7a4ep1get90ols5vcbjub32d95gl9j5.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20220823033826 20220816023826 41364 vip.icann.org. eSnPoKM0N/Jj/WgSwgV/g4sIF6iwG3CY/k6kVAQ1vuc+9ESGkoKyBC0btU9FmzBE8nUUJG9kCkEU MrJ0N2NYAj8FP4aWh2XGMs7lGnDrnfFgY/7F/DK1F+NYXlPn63sy0Pl7Kad4B28rVWMVc1DxMhsK /QiQeCs4kkwsuZlLcxY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 412 bytes from 192.0.36.252
	;; Response received from 192.0.36.252 (412 octets) ;; HEADER SECTION ;; id = 43136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (3 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= ) ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 2 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 31713 vip.icann.org. AHBWit87Q9aQSj2ezLfhkWqU9Ul+NdrMBzgqlaNvfEva0aDs5RRr0SQ2zmg9QdshnKEseW4mRD85 o10lOqtkhyrBPw7dtixzLnUTu5D5L5KjTYKvoTT/uKHo+MXEArTjX+yRSGu+qaVwmeuC7Xr/7Xo8 uWlO814+aQmN1Wpm3Xg= )`
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20220820032137 20220813022137 41364 vip.icann.org. CgwfnYtoenywVM51Iv9SW7z6JQiKYboHUp1ac2CEkW8uY8xDyOkjc5Dqs0litqtzE5poeWRilpth IkUOqPiCS5YMTvCDbJtP2+j09NgfoPGvTyaG61bXZHClz3zQzlLGsTK1ub9evK8wBDAXKhOZ/ACn X/qXFZ9qz0/QESCMrOA= )`
	RRSIG=31713 and DNSKEY=31713 verifies the A RRset
	RRSIG=41364 and DNSKEY=41364 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.iana.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: