DNSSEC Analyzer - www.mi-ke.ch

Domain Name:

Time: 2020-11-30 00:48:50 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.mi-ke.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 30520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201211000000 20201120000000 20326 . eD2ohirt98vCTbuBKIH8lmGum8g2zumyXA89A999extXqsWmomgVQhcbl6zvJHLdFvhBmA+ZqhOT iXvdXpOPeyqHLuMiRv8TTawNU305WPnsonSxuD5ThT9q7YXUZc9ty19Aur3AU0KtlNGULI+4Exrg hEkdTNrysqgDWBO6zslPuJlzSwu/qZcPWYVjsWRnCtJ9DyCpgLnjSYIUzA0Xz+FWtj1jM0BKZ9Ey O+W5EaGkL2/u+bWWG07ZKJN0NwvTuq7Ounc+lz0zZDh83r/H4KRNJ4VIoY3qPDkW4ZvGdAFM5o8s ZdTTWKbieqCqWccj8W6sHEdiZ91JCt/G3/FVsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201211000000 20201120000000 20326 . eD2ohirt98vCTbuBKIH8lmGum8g2zumyXA89A999extXqsWmomgVQhcbl6zvJHLdFvhBmA+ZqhOT iXvdXpOPeyqHLuMiRv8TTawNU305WPnsonSxuD5ThT9q7YXUZc9ty19Aur3AU0KtlNGULI+4Exrg hEkdTNrysqgDWBO6zslPuJlzSwu/qZcPWYVjsWRnCtJ9DyCpgLnjSYIUzA0Xz+FWtj1jM0BKZ9Ey O+W5EaGkL2/u+bWWG07ZKJN0NwvTuq7Ounc+lz0zZDh83r/H4KRNJ4VIoY3qPDkW4ZvGdAFM5o8s ZdTTWKbieqCqWccj8W6sHEdiZ91JCt/G3/FVsw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to b.root-servers.net for www.mi-ke.ch/A
	Received 800 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (800 bytes) ;; HEADER SECTION ;; id = 39576 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . oBDAE5rXCGjFvJN21IWxNuMFvBouSvdtTKG3wwEeX+y8+NTy417ixUbmurbm0lCUxW0+RfIf97QW c0z6zFu4gFkt1oBA0fJjJvRiZPqVcGepV1TP09p73lDdKzEF4AG9VUdjM8m0ARq3Xvx2gmByL+NY B4Qj6XcmG9qUsCh2PqR9CerTF1rlVXXqjKazv1j6++/dQo1UDYsmB7EtEekPoiaXGgB3uFILv/wN 41cHtMd0tAg/Ar5cP5Dpn0GLnn/XjixZzHQXF4HWta/kpHv8yo9gLToQvNE9gwP6cFwSgfW/SMIq eZSfdXBNtshDjOC8ZN6Z8otH/jQAINqPrcR0Qg== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 h.nic.ch. 172800 IN A 85.119.5.230 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for ch/DNSKEY
	Received 790 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (790 bytes) ;; HEADER SECTION ;; id = 6033 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . oBDAE5rXCGjFvJN21IWxNuMFvBouSvdtTKG3wwEeX+y8+NTy417ixUbmurbm0lCUxW0+RfIf97QW c0z6zFu4gFkt1oBA0fJjJvRiZPqVcGepV1TP09p73lDdKzEF4AG9VUdjM8m0ARq3Xvx2gmByL+NY B4Qj6XcmG9qUsCh2PqR9CerTF1rlVXXqjKazv1j6++/dQo1UDYsmB7EtEekPoiaXGgB3uFILv/wN 41cHtMd0tAg/Ar5cP5Dpn0GLnn/XjixZzHQXF4HWta/kpHv8yo9gLToQvNE9gwP6cFwSgfW/SMIq eZSfdXBNtshDjOC8ZN6Z8otH/jQAINqPrcR0Qg== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 h.nic.ch. 172800 IN A 85.119.5.230 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to d.root-servers.net for ch/DS
	Received 366 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (366 bytes) ;; HEADER SECTION ;; id = 60037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . oBDAE5rXCGjFvJN21IWxNuMFvBouSvdtTKG3wwEeX+y8+NTy417ixUbmurbm0lCUxW0+RfIf97QW c0z6zFu4gFkt1oBA0fJjJvRiZPqVcGepV1TP09p73lDdKzEF4AG9VUdjM8m0ARq3Xvx2gmByL+NY B4Qj6XcmG9qUsCh2PqR9CerTF1rlVXXqjKazv1j6++/dQo1UDYsmB7EtEekPoiaXGgB3uFILv/wN 41cHtMd0tAg/Ar5cP5Dpn0GLnn/XjixZzHQXF4HWta/kpHv8yo9gLToQvNE9gwP6cFwSgfW/SMIq eZSfdXBNtshDjOC8ZN6Z8otH/jQAINqPrcR0Qg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for ch in the . zone
	DS=1053/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . oBDAE5rXCGjFvJN21IWxNuMFvBouSvdtTKG3wwEeX+y8+NTy417ixUbmurbm0lCUxW0+RfIf97QW c0z6zFu4gFkt1oBA0fJjJvRiZPqVcGepV1TP09p73lDdKzEF4AG9VUdjM8m0ARq3Xvx2gmByL+NY B4Qj6XcmG9qUsCh2PqR9CerTF1rlVXXqjKazv1j6++/dQo1UDYsmB7EtEekPoiaXGgB3uFILv/wN 41cHtMd0tAg/Ar5cP5Dpn0GLnn/XjixZzHQXF4HWta/kpHv8yo9gLToQvNE9gwP6cFwSgfW/SMIq eZSfdXBNtshDjOC8ZN6Z8otH/jQAINqPrcR0Qg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=1053/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 )`
	Query to c.nic.ch for ch/DNSKEY
	Received 547 bytes from 74.116.178.40
	;; Answer received from 74.116.178.40 (547 bytes) ;; HEADER SECTION ;; id = 32173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (6 records) ch. 86400 IN DNSKEY ( 256 3 13 tfoFe4kqUN1zo7Oh04XCKIcIz+7207f//U96XPfgv96nVXrX57CddCtnhiAOnUO3ucEEKo36+RTJ mrVKucDLqw== ) ; Key ID = 32817 ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20201226100909 20201110090909 1053 ch. xMwCNtc0voK3orZ2KV5sV8+csPHjO08Ms00ez7BNSzYKFzQgOUMXezNtWUuitxs6okENDO6rmzOx xORGtkLeRg== ) ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20201226100909 20201110090909 55966 ch. Lbz3m4KDfOgmp55Gb4PprxY9gsz3QGaZWK2/wrG+36IMsfhLwAHtDkNJ8/FQpFwbxbOtGMklIY8I XbkIIAVdMw== ) ch. 86400 IN DNSKEY ( 256 3 13 JF9X9swl8iqJevcneMSerJ04vrwgW+lcHFyLMqPPHEXB+Bkob4toqDwMtJ22CG47lzmjWrA2vOop W/WPFCQgng== ) ; Key ID = 26557 ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 tfoFe4kqUN1zo7Oh04XCKIcIz+7207f//U96XPfgv96nVXrX57CddCtnhiAOnUO3ucEEKo36+RTJ mrVKucDLqw== ) ; Key ID = 32817`
	`ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966`
	`ch. 86400 IN DNSKEY ( 256 3 13 JF9X9swl8iqJevcneMSerJ04vrwgW+lcHFyLMqPPHEXB+Bkob4toqDwMtJ22CG47lzmjWrA2vOop W/WPFCQgng== ) ; Key ID = 26557`
	`ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053`
	DNSKEY=1053/SEP is now in the chain-of-trust
	DS=1053/SHA-256 verifies DNSKEY=1053/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20201226100909 20201110090909 1053 ch. xMwCNtc0voK3orZ2KV5sV8+csPHjO08Ms00ez7BNSzYKFzQgOUMXezNtWUuitxs6okENDO6rmzOx xORGtkLeRg== )`
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20201226100909 20201110090909 55966 ch. Lbz3m4KDfOgmp55Gb4PprxY9gsz3QGaZWK2/wrG+36IMsfhLwAHtDkNJ8/FQpFwbxbOtGMklIY8I XbkIIAVdMw== )`
	RRSIG=1053 and DNSKEY=1053/SEP verifies the DNSKEY RRset
	RRSIG=55966 and DNSKEY=55966/SEP verifies the DNSKEY RRset
	DNSKEY=32817 is now in the chain-of-trust
	DNSKEY=55966/SEP is now in the chain-of-trust
	DNSKEY=26557 is now in the chain-of-trust
	Query to e.nic.ch for www.mi-ke.ch/A
	Received 276 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (276 bytes) ;; HEADER SECTION ;; id = 37088 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 3600 IN NS ente.limmat.ch. mi-ke.ch. 3600 IN NS dns.3eck.net. mi-ke.ch. 3600 IN NS dns2.3eck.net. mi-ke.ch. 3600 IN DS ( 46734 13 2 b409417fc4508409e906f984ed4605ab1c96daea59fb9ebf12f92748ab6df387 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20201228213645 20201128210343 32817 ch. HHYAplDQFrXy3rknrC0cRwNtf5OZQE0TDIEDhIaDZXlpKhSigxxyTbHaHCPY+sQDDGUJUq1njvsS xNl5u05WDw== ) ;; ADDITIONAL SECTION (2 records) ente.limmat.ch. 3600 IN A 62.12.167.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.nic.ch for mi-ke.ch/DNSKEY
	Received 272 bytes from 194.146.106.10
	;; Answer received from 194.146.106.10 (272 bytes) ;; HEADER SECTION ;; id = 61460 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 3600 IN NS dns.3eck.net. mi-ke.ch. 3600 IN NS dns2.3eck.net. mi-ke.ch. 3600 IN NS ente.limmat.ch. mi-ke.ch. 3600 IN DS ( 46734 13 2 b409417fc4508409e906f984ed4605ab1c96daea59fb9ebf12f92748ab6df387 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20201228213645 20201128210343 32817 ch. HHYAplDQFrXy3rknrC0cRwNtf5OZQE0TDIEDhIaDZXlpKhSigxxyTbHaHCPY+sQDDGUJUq1njvsS xNl5u05WDw== ) ;; ADDITIONAL SECTION (2 records) ente.limmat.ch. 3600 IN A 62.12.167.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone mi-ke.ch

mi-ke.ch

	Checking DS between ch and mi-ke.ch
	Query to h.nic.ch for mi-ke.ch/DS
	Received 183 bytes from 85.119.5.230
	;; Answer received from 85.119.5.230 (183 bytes) ;; HEADER SECTION ;; id = 61735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DS ;; ANSWER SECTION (2 records) mi-ke.ch. 3600 IN DS ( 46734 13 2 b409417fc4508409e906f984ed4605ab1c96daea59fb9ebf12f92748ab6df387 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20201228213645 20201128210343 32817 ch. HHYAplDQFrXy3rknrC0cRwNtf5OZQE0TDIEDhIaDZXlpKhSigxxyTbHaHCPY+sQDDGUJUq1njvsS xNl5u05WDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for mi-ke.ch in the ch zone
	DS=46734/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20201228213645 20201128210343 32817 ch. HHYAplDQFrXy3rknrC0cRwNtf5OZQE0TDIEDhIaDZXlpKhSigxxyTbHaHCPY+sQDDGUJUq1njvsS xNl5u05WDw== )`
	RRSIG=32817 and DNSKEY=32817 verifies the DS RRset
	DS=46734/SHA-256 is now in the chain-of-trust
	`mi-ke.ch. 3600 IN DS ( 46734 13 2 b409417fc4508409e906f984ed4605ab1c96daea59fb9ebf12f92748ab6df387 )`
	Query to ente.limmat.ch for mi-ke.ch/DNSKEY
	Received 405 bytes from 62.12.167.100
	;; Answer received from 62.12.167.100 (405 bytes) ;; HEADER SECTION ;; id = 3481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (4 records) mi-ke.ch. 86400 IN DNSKEY ( 256 3 13 Wub8Mm/vmCjy1DYdEg9EEvxhp3n9L7jlSsbii+in6Pn7n2+qEjR6aM9SUHhLdqZMexQEA5WIuD3i cksrnwv7gg== ) ; Key ID = 55734 mi-ke.ch. 86400 IN DNSKEY ( 257 3 13 7fIfzf3fi3zqx+dW0RsDearzLWuXv0+q50bJqw2Vq4mBiXadaq9UPTLHhp9SPGOXByPSe5K5xpZg HKrczJgaBw== ) ; Key ID = 46734 mi-ke.ch. 86400 IN RRSIG ( DNSKEY 13 2 86400 20201215223431 20201115221538 46734 mi-ke.ch. AlP8K9nRXhuYYFOXHnSVsGyRtBKdXQEywM8uGajRKJb5/JF8MmCAK1mExIxRsoAdCFL6MC7sTsIv U6BR+uzjIA== ) mi-ke.ch. 86400 IN RRSIG ( DNSKEY 13 2 86400 20201215223431 20201115221538 55734 mi-ke.ch. LA+4J90Zt5EI704ABN6qzv4ZBIfwNyl/nNc78kQ2gHwstgyFneB5OeNfPHIjiqd14X0Sw49umEPa XrSxjAH8rA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for mi-ke.ch
	`mi-ke.ch. 86400 IN DNSKEY ( 256 3 13 Wub8Mm/vmCjy1DYdEg9EEvxhp3n9L7jlSsbii+in6Pn7n2+qEjR6aM9SUHhLdqZMexQEA5WIuD3i cksrnwv7gg== ) ; Key ID = 55734`
	`mi-ke.ch. 86400 IN DNSKEY ( 257 3 13 7fIfzf3fi3zqx+dW0RsDearzLWuXv0+q50bJqw2Vq4mBiXadaq9UPTLHhp9SPGOXByPSe5K5xpZg HKrczJgaBw== ) ; Key ID = 46734`
	DNSKEY=46734/SEP is now in the chain-of-trust
	DS=46734/SHA-256 verifies DNSKEY=46734/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`mi-ke.ch. 86400 IN RRSIG ( DNSKEY 13 2 86400 20201215223431 20201115221538 46734 mi-ke.ch. AlP8K9nRXhuYYFOXHnSVsGyRtBKdXQEywM8uGajRKJb5/JF8MmCAK1mExIxRsoAdCFL6MC7sTsIv U6BR+uzjIA== )`
	`mi-ke.ch. 86400 IN RRSIG ( DNSKEY 13 2 86400 20201215223431 20201115221538 55734 mi-ke.ch. LA+4J90Zt5EI704ABN6qzv4ZBIfwNyl/nNc78kQ2gHwstgyFneB5OeNfPHIjiqd14X0Sw49umEPa XrSxjAH8rA== )`
	RRSIG=46734 and DNSKEY=46734/SEP verifies the DNSKEY RRset
	RRSIG=55734 and DNSKEY=55734 verifies the DNSKEY RRset
	DNSKEY=55734 is now in the chain-of-trust
	Query to dns.3eck.net for www.mi-ke.ch/A
	Received 834 bytes from 62.12.167.109
	;; Answer received from 62.12.167.109 (834 bytes) ;; HEADER SECTION ;; id = 20645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (2 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20201211153134 20201111143409 55734 mi-ke.ch. 3AUwtUOzsAtlcRk3QYJ74zhpsvLfetZazi1VXnZzn9roSdwGjsQZOk23zo0yPjzp1iM2zGzXVzem yelX2qsYYA== ) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20201215204032 20201115194247 55734 mi-ke.ch. mNK0JeA77eZk0ZwA/l2Q+vQSQF62PRILcBdpGB4LA2dgMapR5m1FxrGTbv20Tctfgrvsp+mxjcD9 n69vz5dP5A== ) ;; ADDITIONAL SECTION (9 records) dns.3eck.net. 86400 IN A 62.12.167.109 dns.3eck.net. 86400 IN AAAA 2001:8a8:4008::109 dns2.3eck.net. 86400 IN A 213.133.110.13 ente.limmat.ch. 86400 IN A 62.12.167.100 dns.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222081646 20201122075130 63 3eck.net. 2TF4esSFP7Nw6JmdaqasQNPnZ32gkStJqMqxhK31q99u6N0k1m6u4V0JtexA45u2kFRovL/wxsxA 89j0owiQKQ== ) dns.3eck.net. 86400 IN RRSIG ( AAAA 13 3 86400 20201222081646 20201122075130 63 3eck.net. kXOfwOwBhAzwE4xW2U48b49W9tpDAZvM9fU2SOKVcgHnUTa8e+fGfEYXGQz0b/P/1dvucAjknPbu QfoQ3q7i5g== ) dns2.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222115907 20201122110522 63 3eck.net. rQcN7cpmtxpUoYHAHZfYbAT2bW+MZmjsGUlgXHfQpRrMPdZBSx3EC8ZYpwCn+LUdjPC1t1rifHXE QSGl5YMS2A== ) ente.limmat.ch. 86400 IN RRSIG ( A 13 3 86400 20201212014352 20201112011737 54160 ente.limmat.ch. Vm6WI2a8SKjipmt2znRMFVqNHsMxAsAqZCd8G4w6EOdJn5QXZPe4kJQBaZKFS4JVsGFvzUJgZLc0 tkh2e628Xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	mi-ke.ch is authoritative for www.mi-ke.ch
	Query to ente.limmat.ch for www.mi-ke.ch/DNSKEY
	Received 397 bytes from 62.12.167.100
	;; Answer received from 62.12.167.100 (397 bytes) ;; HEADER SECTION ;; id = 63980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 3600 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2020040844 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 3600 IN RRSIG ( SOA 13 2 86400 20201226094417 20201126084417 55734 mi-ke.ch. 9DjxpRo8CiGn2pI3KjAJYSa5BCaRKwg3D9P5d3QsApc0olzkozqM0W+JRQ2UdbKSQx7FPqQnEntN cZx0rbqXGA== ) VT68BN22U71F2F65N6U9LP78DNOEBB10.mi-ke.ch. 3600 IN NSEC3 ( 1 0 32 daeeb89df2d1f56f18d6da7826fbf39b 0l9qn5lg4dn0ort48p6m3sl5opb4ue58 A RRSIG ) VT68BN22U71F2F65N6U9LP78DNOEBB10.mi-ke.ch. 3600 IN RRSIG ( NSEC3 13 3 3600 20201217123555 20201117114554 55734 mi-ke.ch. A2Ep9QYldyfDKP+acPf9VeIzyP6IvxIXJXRtUiMPMZSvjBQ6sQL9QlLpLxr7l0qhLnEmnpsbs1UN 0DYpTWstSA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by mi-ke.ch zone
	Query to ente.limmat.ch for mi-ke.ch/SOA
	Received 855 bytes from 62.12.167.100
	;; Answer received from 62.12.167.100 (855 bytes) ;; HEADER SECTION ;; id = 16357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN SOA ;; ANSWER SECTION (2 records) mi-ke.ch. 86400 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2020040844 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 86400 IN RRSIG ( SOA 13 2 86400 20201226094417 20201126084417 55734 mi-ke.ch. 9DjxpRo8CiGn2pI3KjAJYSa5BCaRKwg3D9P5d3QsApc0olzkozqM0W+JRQ2UdbKSQx7FPqQnEntN cZx0rbqXGA== ) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20201215204032 20201115194247 55734 mi-ke.ch. mNK0JeA77eZk0ZwA/l2Q+vQSQF62PRILcBdpGB4LA2dgMapR5m1FxrGTbv20Tctfgrvsp+mxjcD9 n69vz5dP5A== ) ;; ADDITIONAL SECTION (9 records) dns.3eck.net. 86400 IN A 62.12.167.109 dns.3eck.net. 86400 IN AAAA 2001:8a8:4008::109 dns2.3eck.net. 86400 IN A 213.133.110.13 ente.limmat.ch. 86400 IN A 62.12.167.100 dns.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222081646 20201122075130 63 3eck.net. 2TF4esSFP7Nw6JmdaqasQNPnZ32gkStJqMqxhK31q99u6N0k1m6u4V0JtexA45u2kFRovL/wxsxA 89j0owiQKQ== ) dns.3eck.net. 86400 IN RRSIG ( AAAA 13 3 86400 20201222081646 20201122075130 63 3eck.net. kXOfwOwBhAzwE4xW2U48b49W9tpDAZvM9fU2SOKVcgHnUTa8e+fGfEYXGQz0b/P/1dvucAjknPbu QfoQ3q7i5g== ) dns2.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222115907 20201122110522 63 3eck.net. rQcN7cpmtxpUoYHAHZfYbAT2bW+MZmjsGUlgXHfQpRrMPdZBSx3EC8ZYpwCn+LUdjPC1t1rifHXE QSGl5YMS2A== ) ente.limmat.ch. 86400 IN RRSIG ( A 13 3 86400 20201212014352 20201112011737 54160 ente.limmat.ch. Vm6WI2a8SKjipmt2znRMFVqNHsMxAsAqZCd8G4w6EOdJn5QXZPe4kJQBaZKFS4JVsGFvzUJgZLc0 tkh2e628Xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.3eck.net for mi-ke.ch/SOA
	Received 855 bytes from 213.133.110.13
	;; Answer received from 213.133.110.13 (855 bytes) ;; HEADER SECTION ;; id = 15111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN SOA ;; ANSWER SECTION (2 records) mi-ke.ch. 86400 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2020040844 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 86400 IN RRSIG ( SOA 13 2 86400 20201226094417 20201126084417 55734 mi-ke.ch. 9DjxpRo8CiGn2pI3KjAJYSa5BCaRKwg3D9P5d3QsApc0olzkozqM0W+JRQ2UdbKSQx7FPqQnEntN cZx0rbqXGA== ) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20201215204032 20201115194247 55734 mi-ke.ch. mNK0JeA77eZk0ZwA/l2Q+vQSQF62PRILcBdpGB4LA2dgMapR5m1FxrGTbv20Tctfgrvsp+mxjcD9 n69vz5dP5A== ) ;; ADDITIONAL SECTION (9 records) dns.3eck.net. 86400 IN A 62.12.167.109 dns.3eck.net. 86400 IN AAAA 2001:8a8:4008::109 dns2.3eck.net. 86400 IN A 213.133.110.13 ente.limmat.ch. 86400 IN A 62.12.167.100 dns.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222081646 20201122075130 63 3eck.net. 2TF4esSFP7Nw6JmdaqasQNPnZ32gkStJqMqxhK31q99u6N0k1m6u4V0JtexA45u2kFRovL/wxsxA 89j0owiQKQ== ) dns.3eck.net. 86400 IN RRSIG ( AAAA 13 3 86400 20201222081646 20201122075130 63 3eck.net. kXOfwOwBhAzwE4xW2U48b49W9tpDAZvM9fU2SOKVcgHnUTa8e+fGfEYXGQz0b/P/1dvucAjknPbu QfoQ3q7i5g== ) dns2.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222115907 20201122110522 63 3eck.net. rQcN7cpmtxpUoYHAHZfYbAT2bW+MZmjsGUlgXHfQpRrMPdZBSx3EC8ZYpwCn+LUdjPC1t1rifHXE QSGl5YMS2A== ) ente.limmat.ch. 86400 IN RRSIG ( A 13 3 86400 20201212014352 20201112011737 54160 ente.limmat.ch. Vm6WI2a8SKjipmt2znRMFVqNHsMxAsAqZCd8G4w6EOdJn5QXZPe4kJQBaZKFS4JVsGFvzUJgZLc0 tkh2e628Xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.3eck.net for mi-ke.ch/SOA
	Received 855 bytes from 62.12.167.109
	;; Answer received from 62.12.167.109 (855 bytes) ;; HEADER SECTION ;; id = 15450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN SOA ;; ANSWER SECTION (2 records) mi-ke.ch. 86400 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2020040844 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 86400 IN RRSIG ( SOA 13 2 86400 20201226094417 20201126084417 55734 mi-ke.ch. 9DjxpRo8CiGn2pI3KjAJYSa5BCaRKwg3D9P5d3QsApc0olzkozqM0W+JRQ2UdbKSQx7FPqQnEntN cZx0rbqXGA== ) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20201215204032 20201115194247 55734 mi-ke.ch. mNK0JeA77eZk0ZwA/l2Q+vQSQF62PRILcBdpGB4LA2dgMapR5m1FxrGTbv20Tctfgrvsp+mxjcD9 n69vz5dP5A== ) ;; ADDITIONAL SECTION (9 records) dns.3eck.net. 86400 IN A 62.12.167.109 dns.3eck.net. 86400 IN AAAA 2001:8a8:4008::109 dns2.3eck.net. 86400 IN A 213.133.110.13 ente.limmat.ch. 86400 IN A 62.12.167.100 dns.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222081646 20201122075130 63 3eck.net. 2TF4esSFP7Nw6JmdaqasQNPnZ32gkStJqMqxhK31q99u6N0k1m6u4V0JtexA45u2kFRovL/wxsxA 89j0owiQKQ== ) dns.3eck.net. 86400 IN RRSIG ( AAAA 13 3 86400 20201222081646 20201122075130 63 3eck.net. kXOfwOwBhAzwE4xW2U48b49W9tpDAZvM9fU2SOKVcgHnUTa8e+fGfEYXGQz0b/P/1dvucAjknPbu QfoQ3q7i5g== ) dns2.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222115907 20201122110522 63 3eck.net. rQcN7cpmtxpUoYHAHZfYbAT2bW+MZmjsGUlgXHfQpRrMPdZBSx3EC8ZYpwCn+LUdjPC1t1rifHXE QSGl5YMS2A== ) ente.limmat.ch. 86400 IN RRSIG ( A 13 3 86400 20201212014352 20201112011737 54160 ente.limmat.ch. Vm6WI2a8SKjipmt2znRMFVqNHsMxAsAqZCd8G4w6EOdJn5QXZPe4kJQBaZKFS4JVsGFvzUJgZLc0 tkh2e628Xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.3eck.net for www.mi-ke.ch/A
	Received 834 bytes from 62.12.167.109
	;; Answer received from 62.12.167.109 (834 bytes) ;; HEADER SECTION ;; id = 50792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (2 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20201211153134 20201111143409 55734 mi-ke.ch. 3AUwtUOzsAtlcRk3QYJ74zhpsvLfetZazi1VXnZzn9roSdwGjsQZOk23zo0yPjzp1iM2zGzXVzem yelX2qsYYA== ) ;; AUTHORITY SECTION (4 records) mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20201215204032 20201115194247 55734 mi-ke.ch. mNK0JeA77eZk0ZwA/l2Q+vQSQF62PRILcBdpGB4LA2dgMapR5m1FxrGTbv20Tctfgrvsp+mxjcD9 n69vz5dP5A== ) ;; ADDITIONAL SECTION (9 records) dns.3eck.net. 86400 IN A 62.12.167.109 dns.3eck.net. 86400 IN AAAA 2001:8a8:4008::109 dns2.3eck.net. 86400 IN A 213.133.110.13 ente.limmat.ch. 86400 IN A 62.12.167.100 dns.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222081646 20201122075130 63 3eck.net. 2TF4esSFP7Nw6JmdaqasQNPnZ32gkStJqMqxhK31q99u6N0k1m6u4V0JtexA45u2kFRovL/wxsxA 89j0owiQKQ== ) dns.3eck.net. 86400 IN RRSIG ( AAAA 13 3 86400 20201222081646 20201122075130 63 3eck.net. kXOfwOwBhAzwE4xW2U48b49W9tpDAZvM9fU2SOKVcgHnUTa8e+fGfEYXGQz0b/P/1dvucAjknPbu QfoQ3q7i5g== ) dns2.3eck.net. 86400 IN RRSIG ( A 13 3 86400 20201222115907 20201122110522 63 3eck.net. rQcN7cpmtxpUoYHAHZfYbAT2bW+MZmjsGUlgXHfQpRrMPdZBSx3EC8ZYpwCn+LUdjPC1t1rifHXE QSGl5YMS2A== ) ente.limmat.ch. 86400 IN RRSIG ( A 13 3 86400 20201212014352 20201112011737 54160 ente.limmat.ch. Vm6WI2a8SKjipmt2znRMFVqNHsMxAsAqZCd8G4w6EOdJn5QXZPe4kJQBaZKFS4JVsGFvzUJgZLc0 tkh2e628Xg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	www.mi-ke.ch A RR has value 62.12.167.100
	Found 1 RRSIGs over A RRset
	`www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20201211153134 20201111143409 55734 mi-ke.ch. 3AUwtUOzsAtlcRk3QYJ74zhpsvLfetZazi1VXnZzn9roSdwGjsQZOk23zo0yPjzp1iM2zGzXVzem yelX2qsYYA== )`
	RRSIG=55734 and DNSKEY=55734 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.mi-ke.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: