DNSSEC Debugger - www.mi-ke.ch

Domain Name:

Time: 2026-01-16 05:08:59 UTC

Analyzing DNSSEC problems for www.mi-ke.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 37775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for www.mi-ke.ch/A
	Received 680 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 680 octets ;; HEADER SECTION ;; id = 50656 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . gukm48rDbZDANDrBnRQfNhmNQSi1izAdavxJCmTEW/yq0s5ixHs6FrkLKTKzeD2w/wYeMr/bsnWv xghv8zOe6/f+kjrtJVnON9Y9/MW2r1qd7I8OtApEpM9mHpln0eYByUY/o2gz2jXj/iHvv00rs70V 5yTIUHWcgX8e9g6At6g5+sF+kA3fHZZtRNJl8TmExvGyPNSirwoPG9Bew8zvSgecpMZbWEosG1lw A+Ke1GK+67Bg93RUXwsDjwkv23sfpAp/jSpr/afsZ6s53umeTSiKNwvCRVZr7ZB4FyF2DXx71Nz2 p8TnieN0TTVJQ0ObJgw/ZTjmDfrs6ufy7mJ/ww== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ch/DNSKEY
	Received 672 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 672 octets ;; HEADER SECTION ;; id = 37493 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . gukm48rDbZDANDrBnRQfNhmNQSi1izAdavxJCmTEW/yq0s5ixHs6FrkLKTKzeD2w/wYeMr/bsnWv xghv8zOe6/f+kjrtJVnON9Y9/MW2r1qd7I8OtApEpM9mHpln0eYByUY/o2gz2jXj/iHvv00rs70V 5yTIUHWcgX8e9g6At6g5+sF+kA3fHZZtRNJl8TmExvGyPNSirwoPG9Bew8zvSgecpMZbWEosG1lw A+Ke1GK+67Bg93RUXwsDjwkv23sfpAp/jSpr/afsZ6s53umeTSiKNwvCRVZr7ZB4FyF2DXx71Nz2 p8TnieN0TTVJQ0ObJgw/ZTjmDfrs6ufy7mJ/ww== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to j.root-servers.net for ch/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 38245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . gukm48rDbZDANDrBnRQfNhmNQSi1izAdavxJCmTEW/yq0s5ixHs6FrkLKTKzeD2w/wYeMr/bsnWv xghv8zOe6/f+kjrtJVnON9Y9/MW2r1qd7I8OtApEpM9mHpln0eYByUY/o2gz2jXj/iHvv00rs70V 5yTIUHWcgX8e9g6At6g5+sF+kA3fHZZtRNJl8TmExvGyPNSirwoPG9Bew8zvSgecpMZbWEosG1lw A+Ke1GK+67Bg93RUXwsDjwkv23sfpAp/jSpr/afsZ6s53umeTSiKNwvCRVZr7ZB4FyF2DXx71Nz2 p8TnieN0TTVJQ0ObJgw/ZTjmDfrs6ufy7mJ/ww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=58745/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20260128210000 20260115200000 21831 . gukm48rDbZDANDrBnRQfNhmNQSi1izAdavxJCmTEW/yq0s5ixHs6FrkLKTKzeD2w/wYeMr/bsnWv xghv8zOe6/f+kjrtJVnON9Y9/MW2r1qd7I8OtApEpM9mHpln0eYByUY/o2gz2jXj/iHvv00rs70V 5yTIUHWcgX8e9g6At6g5+sF+kA3fHZZtRNJl8TmExvGyPNSirwoPG9Bew8zvSgecpMZbWEosG1lw A+Ke1GK+67Bg93RUXwsDjwkv23sfpAp/jSpr/afsZ6s53umeTSiKNwvCRVZr7ZB4FyF2DXx71Nz2 p8TnieN0TTVJQ0ObJgw/ZTjmDfrs6ufy7mJ/ww== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=58745/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 )`
	Query to e.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 369 octets ;; HEADER SECTION ;; id = 3143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 dn+qB5+CAMs/2VXPgDacE6nNaiHkw0fIJPpaRAtl9W4NmOy2wTbzkjCiOubi3v6GFY4zDu+4fvx/ Vo5BOS6TDw== ) ; keytag 50320 ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745 ch. 86400 IN DNSKEY ( 256 3 13 o00lwU14NERFJz3HobkySSm2RCfMJ1gFxwXq1c4xAvII8KXqhjw43AGbIhU77rGGm/OINb5Nzxo8 VSLIS/ky0w== ) ; keytag 51559 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260228100909 20260113090909 58745 ch. 8NDMu30D8ob3X/2vl0p4uHF/q+YaO3tjZGiZ7HSgvyZnYJPpsF855xWoVhjSnBh/+spqpy8SV45Y 95QEOKYOlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 dn+qB5+CAMs/2VXPgDacE6nNaiHkw0fIJPpaRAtl9W4NmOy2wTbzkjCiOubi3v6GFY4zDu+4fvx/ Vo5BOS6TDw== ) ; keytag 50320`
	`ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745`
	`ch. 86400 IN DNSKEY ( 256 3 13 o00lwU14NERFJz3HobkySSm2RCfMJ1gFxwXq1c4xAvII8KXqhjw43AGbIhU77rGGm/OINb5Nzxo8 VSLIS/ky0w== ) ; keytag 51559`
	DNSKEY=58745/SEP is now in the chain-of-trust
	DS=58745/SHA-256 verifies DNSKEY=58745/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260228100909 20260113090909 58745 ch. 8NDMu30D8ob3X/2vl0p4uHF/q+YaO3tjZGiZ7HSgvyZnYJPpsF855xWoVhjSnBh/+spqpy8SV45Y 95QEOKYOlA== )`
	RRSIG=58745 and DNSKEY=58745/SEP verifies the DNSKEY RRset
	DNSKEY=50320 is now in the chain-of-trust
	DNSKEY=51559 is now in the chain-of-trust
	Query to f.nic.ch for www.mi-ke.ch/A
	Received 276 bytes from 194.146.106.10
	;; Response received from [194.146.106.10] 276 octets ;; HEADER SECTION ;; id = 56251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 3600 IN NS dns2.3eck.net. mi-ke.ch. 3600 IN NS ente.limmat.ch. mi-ke.ch. 3600 IN NS dns.3eck.net. mi-ke.ch. 3600 IN DS ( 50866 15 2 5e18997426d6d636a78679a9600e831406c5d45d9cc546a8239707cad7197d69 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20260203005752 20260107123001 50320 ch. XMpiZvrPBgBnbWDtzawHkEmrSkqWHnnl7hwfEve0nfGx/qpHnpYLP9QaTHhHQe9EtVjItsM9L0sn 4lO1JkQOFA== ) ;; ADDITIONAL SECTION (2 records) ente.limmat.ch. 3600 IN A 62.12.167.100 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.ch for mi-ke.ch/DNSKEY
	Received 270 bytes from 130.59.31.41
	;; Response received from [130.59.31.41] 270 octets ;; HEADER SECTION ;; id = 4458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 3600 IN NS dns.3eck.net. mi-ke.ch. 3600 IN NS dns2.3eck.net. mi-ke.ch. 3600 IN NS ente.limmat.ch. mi-ke.ch. 3600 IN DS ( 50866 15 2 5e18997426d6d636a78679a9600e831406c5d45d9cc546a8239707cad7197d69 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20260203005752 20260107123001 50320 ch. XMpiZvrPBgBnbWDtzawHkEmrSkqWHnnl7hwfEve0nfGx/qpHnpYLP9QaTHhHQe9EtVjItsM9L0sn 4lO1JkQOFA== ) ;; ADDITIONAL SECTION (2 records) ente.limmat.ch. 3600 IN A 62.12.167.100 ;; { "EDNS-VERSION": 0 }
	Found child zone mi-ke.ch

mi-ke.ch

	Checking DS between ch and mi-ke.ch
	Query to e.nic.ch for mi-ke.ch/DS
	Received 183 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 183 octets ;; HEADER SECTION ;; id = 57857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DS ;; ANSWER SECTION (2 records) mi-ke.ch. 3600 IN DS ( 50866 15 2 5e18997426d6d636a78679a9600e831406c5d45d9cc546a8239707cad7197d69 ) mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20260203005752 20260107123001 50320 ch. XMpiZvrPBgBnbWDtzawHkEmrSkqWHnnl7hwfEve0nfGx/qpHnpYLP9QaTHhHQe9EtVjItsM9L0sn 4lO1JkQOFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mi-ke.ch in the ch zone
	DS=50866/SHA-256 has algorithm ED25519
	Found 1 RRSIGs over DS RRset
	`mi-ke.ch. 3600 IN RRSIG ( DS 13 2 3600 20260203005752 20260107123001 50320 ch. XMpiZvrPBgBnbWDtzawHkEmrSkqWHnnl7hwfEve0nfGx/qpHnpYLP9QaTHhHQe9EtVjItsM9L0sn 4lO1JkQOFA== )`
	RRSIG=50320 and DNSKEY=50320 verifies the DS RRset
	DS=50866/SHA-256 is now in the chain-of-trust
	`mi-ke.ch. 3600 IN DS ( 50866 15 2 5e18997426d6d636a78679a9600e831406c5d45d9cc546a8239707cad7197d69 )`
	Query to dns.3eck.net for mi-ke.ch/DNSKEY
	Received 501 bytes from 62.12.167.109
	;; Response received from [62.12.167.109] 501 octets ;; HEADER SECTION ;; id = 48702 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (6 records) mi-ke.ch. 18000 IN DNSKEY ( 257 3 13 7fIfzf3fi3zqx+dW0RsDearzLWuXv0+q50bJqw2Vq4mBiXadaq9UPTLHhp9SPGOXByPSe5K5xpZg HKrczJgaBw== ) ; keytag 46734 mi-ke.ch. 18000 IN DNSKEY ( 256 3 13 Wub8Mm/vmCjy1DYdEg9EEvxhp3n9L7jlSsbii+in6Pn7n2+qEjR6aM9SUHhLdqZMexQEA5WIuD3i cksrnwv7gg== ) ; keytag 55734 mi-ke.ch. 18000 IN DNSKEY ( 256 3 15 /PLqHdF1e+aRhk4aL6sgMmsp5zNbGtdvZV0Z3ifqhAs= ) ; keytag 6163 mi-ke.ch. 18000 IN DNSKEY ( 257 3 15 UmdrCdVqHYnF5zSg1IKM8dliFaoxb+TgyUXW7iRR7F4= ) ; keytag 50866 mi-ke.ch. 18000 IN RRSIG ( DNSKEY 13 2 18000 20260119184844 20260112175908 46734 mi-ke.ch. pvJAc2bomzBHLPBgSJxoopj30xK+k+f/39lRvtS+JGS7OppqjaCQsXDilOKVnNzJWf1/ybH9BgkR UkeiYYUuVA== ) mi-ke.ch. 18000 IN RRSIG ( DNSKEY 15 2 18000 20260119184844 20260112175908 50866 mi-ke.ch. 9K/FWFBmOFhirDeW2TLXnxR7Tcwgsax5khaoiJIRWlcU9Jbz7ksmTn2Ugd65AuK7Uh1GrMzDwqu7 yTWnvDpYBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for mi-ke.ch
	`mi-ke.ch. 18000 IN DNSKEY ( 257 3 13 7fIfzf3fi3zqx+dW0RsDearzLWuXv0+q50bJqw2Vq4mBiXadaq9UPTLHhp9SPGOXByPSe5K5xpZg HKrczJgaBw== ) ; keytag 46734`
	`mi-ke.ch. 18000 IN DNSKEY ( 256 3 13 Wub8Mm/vmCjy1DYdEg9EEvxhp3n9L7jlSsbii+in6Pn7n2+qEjR6aM9SUHhLdqZMexQEA5WIuD3i cksrnwv7gg== ) ; keytag 55734`
	`mi-ke.ch. 18000 IN DNSKEY ( 256 3 15 /PLqHdF1e+aRhk4aL6sgMmsp5zNbGtdvZV0Z3ifqhAs= ) ; keytag 6163`
	`mi-ke.ch. 18000 IN DNSKEY ( 257 3 15 UmdrCdVqHYnF5zSg1IKM8dliFaoxb+TgyUXW7iRR7F4= ) ; keytag 50866`
	DNSKEY=50866/SEP is now in the chain-of-trust
	DS=50866/SHA-256 verifies DNSKEY=50866/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`mi-ke.ch. 18000 IN RRSIG ( DNSKEY 13 2 18000 20260119184844 20260112175908 46734 mi-ke.ch. pvJAc2bomzBHLPBgSJxoopj30xK+k+f/39lRvtS+JGS7OppqjaCQsXDilOKVnNzJWf1/ybH9BgkR UkeiYYUuVA== )`
	`mi-ke.ch. 18000 IN RRSIG ( DNSKEY 15 2 18000 20260119184844 20260112175908 50866 mi-ke.ch. 9K/FWFBmOFhirDeW2TLXnxR7Tcwgsax5khaoiJIRWlcU9Jbz7ksmTn2Ugd65AuK7Uh1GrMzDwqu7 yTWnvDpYBA== )`
	RRSIG=46734 and DNSKEY=46734/SEP verifies the DNSKEY RRset
	RRSIG=50866 and DNSKEY=50866/SEP verifies the DNSKEY RRset
	DNSKEY=46734/SEP is now in the chain-of-trust
	DNSKEY=55734 is now in the chain-of-trust
	DNSKEY=6163 is now in the chain-of-trust
	Query to ente.limmat.ch for www.mi-ke.ch/A
	Received 552 bytes from 62.12.167.100
	;; Response received from [62.12.167.100] 552 octets ;; HEADER SECTION ;; id = 24318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ente.limmat.ch is authoritative for www.mi-ke.ch
	Query to ente.limmat.ch for www.mi-ke.ch/DNSKEY
	Received 591 bytes from 62.12.167.100
	;; Response received from [62.12.167.100] 591 octets ;; HEADER SECTION ;; id = 563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mi-ke.ch. 3600 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2024053385 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 3600 IN RRSIG ( SOA 13 2 86400 20260121212412 20260114202412 55734 mi-ke.ch. rJw0NRJiyfOAD1jg9PYte+Hr+9mijLLBmy8w2NXe4TquY4V+TAipmaK6f44cD/ddt/VZEX8GuHVK hPuEVRFoFg== ) mi-ke.ch. 3600 IN RRSIG ( SOA 15 2 86400 20260121212412 20260114202412 6163 mi-ke.ch. jcWzy8HbFenzQ8WXPTMIn8zWMKWY8LylSmH5PxRJ3a4u9qjnXWCl0W34VVrZSwnkCkG59UH7Es3K QgU3cQ3SBg== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN NSEC3 ( 1 0 0 - j1g18mcr25ihtdqvcirv605bc52jef7p A RRSIG ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 13 3 3600 20260119123322 20260112121943 55734 mi-ke.ch. 6dqDwo2iTSrBTSzc48kptAjKOqsIh5C40KcZDIM8zUvfl2zW0o1IJ+wr/jMV+lUWf8j9TaZRpJm+ ZjOKBluTiA== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 15 3 3600 20260119123322 20260112121943 6163 mi-ke.ch. 4XT2adTNmggxIMWXckUj0cjP6S+AXSXPtcZsxOe9qxxG1htDsfojig3dkW7eBcEi3n3wSSL2K7gL F/wppNp0Cg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by mi-ke.ch zone
	Query to dns.3eck.net for mi-ke.ch/SOA
	Received 573 bytes from 62.12.167.109
	;; Response received from [62.12.167.109] 573 octets ;; HEADER SECTION ;; id = 28266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN SOA ;; ANSWER SECTION (3 records) mi-ke.ch. 86400 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2024053385 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 86400 IN RRSIG ( SOA 13 2 86400 20260121212412 20260114202412 55734 mi-ke.ch. rJw0NRJiyfOAD1jg9PYte+Hr+9mijLLBmy8w2NXe4TquY4V+TAipmaK6f44cD/ddt/VZEX8GuHVK hPuEVRFoFg== ) mi-ke.ch. 86400 IN RRSIG ( SOA 15 2 86400 20260121212412 20260114202412 6163 mi-ke.ch. jcWzy8HbFenzQ8WXPTMIn8zWMKWY8LylSmH5PxRJ3a4u9qjnXWCl0W34VVrZSwnkCkG59UH7Es3K QgU3cQ3SBg== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.3eck.net for mi-ke.ch/SOA
	Received 573 bytes from 45.80.139.19
	;; Response received from [45.80.139.19] 573 octets ;; HEADER SECTION ;; id = 52439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mi-ke.ch. IN SOA ;; ANSWER SECTION (3 records) mi-ke.ch. 86400 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2024053385 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 86400 IN RRSIG ( SOA 13 2 86400 20260121212412 20260114202412 55734 mi-ke.ch. rJw0NRJiyfOAD1jg9PYte+Hr+9mijLLBmy8w2NXe4TquY4V+TAipmaK6f44cD/ddt/VZEX8GuHVK hPuEVRFoFg== ) mi-ke.ch. 86400 IN RRSIG ( SOA 15 2 86400 20260121212412 20260114202412 6163 mi-ke.ch. jcWzy8HbFenzQ8WXPTMIn8zWMKWY8LylSmH5PxRJ3a4u9qjnXWCl0W34VVrZSwnkCkG59UH7Es3K QgU3cQ3SBg== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ente.limmat.ch for www.mi-ke.ch/A
	Received 552 bytes from 62.12.167.100
	;; Response received from [62.12.167.100] 552 octets ;; HEADER SECTION ;; id = 44635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.mi-ke.ch A RR has value 62.12.167.100
	Found 2 RRSIGs over A RRset
	`www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== )`
	`www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== )`
	RRSIG=55734 and DNSKEY=55734 verifies the A RRset
	RRSIG=6163 and DNSKEY=6163 verifies the A RRset

mi-ke.ch

	Query to dns.3eck.net for www.mi-ke.ch/A
	Received 552 bytes from 62.12.167.109
	;; Response received from [62.12.167.109] 552 octets ;; HEADER SECTION ;; id = 20212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.3eck.net is authoritative for www.mi-ke.ch
	Query to dns.3eck.net for www.mi-ke.ch/DNSKEY
	Received 591 bytes from 62.12.167.109
	;; Response received from [62.12.167.109] 591 octets ;; HEADER SECTION ;; id = 5411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mi-ke.ch. 3600 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2024053385 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 3600 IN RRSIG ( SOA 13 2 86400 20260121212412 20260114202412 55734 mi-ke.ch. rJw0NRJiyfOAD1jg9PYte+Hr+9mijLLBmy8w2NXe4TquY4V+TAipmaK6f44cD/ddt/VZEX8GuHVK hPuEVRFoFg== ) mi-ke.ch. 3600 IN RRSIG ( SOA 15 2 86400 20260121212412 20260114202412 6163 mi-ke.ch. jcWzy8HbFenzQ8WXPTMIn8zWMKWY8LylSmH5PxRJ3a4u9qjnXWCl0W34VVrZSwnkCkG59UH7Es3K QgU3cQ3SBg== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN NSEC3 ( 1 0 0 - j1g18mcr25ihtdqvcirv605bc52jef7p A RRSIG ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 13 3 3600 20260119123322 20260112121943 55734 mi-ke.ch. 6dqDwo2iTSrBTSzc48kptAjKOqsIh5C40KcZDIM8zUvfl2zW0o1IJ+wr/jMV+lUWf8j9TaZRpJm+ ZjOKBluTiA== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 15 3 3600 20260119123322 20260112121943 6163 mi-ke.ch. 4XT2adTNmggxIMWXckUj0cjP6S+AXSXPtcZsxOe9qxxG1htDsfojig3dkW7eBcEi3n3wSSL2K7gL F/wppNp0Cg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by mi-ke.ch zone
	Query to dns.3eck.net for www.mi-ke.ch/A
	Received 552 bytes from 62.12.167.109
	;; Response received from [62.12.167.109] 552 octets ;; HEADER SECTION ;; id = 58819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.mi-ke.ch A RR has value 62.12.167.100
	Found 2 RRSIGs over A RRset
	`www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== )`
	`www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== )`
	RRSIG=55734 and DNSKEY=55734 verifies the A RRset
	RRSIG=6163 and DNSKEY=6163 verifies the A RRset

mi-ke.ch

	Query to dns2.3eck.net for www.mi-ke.ch/A
	Received 552 bytes from 45.80.139.19
	;; Response received from [45.80.139.19] 552 octets ;; HEADER SECTION ;; id = 64480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.3eck.net is authoritative for www.mi-ke.ch
	Query to dns2.3eck.net for www.mi-ke.ch/DNSKEY
	Received 591 bytes from 45.80.139.19
	;; Response received from [45.80.139.19] 591 octets ;; HEADER SECTION ;; id = 51628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mi-ke.ch. 3600 IN SOA ( ente.limmat.ch. info.ente.limmat.ch. 2024053385 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) mi-ke.ch. 3600 IN RRSIG ( SOA 13 2 86400 20260121212412 20260114202412 55734 mi-ke.ch. rJw0NRJiyfOAD1jg9PYte+Hr+9mijLLBmy8w2NXe4TquY4V+TAipmaK6f44cD/ddt/VZEX8GuHVK hPuEVRFoFg== ) mi-ke.ch. 3600 IN RRSIG ( SOA 15 2 86400 20260121212412 20260114202412 6163 mi-ke.ch. jcWzy8HbFenzQ8WXPTMIn8zWMKWY8LylSmH5PxRJ3a4u9qjnXWCl0W34VVrZSwnkCkG59UH7Es3K QgU3cQ3SBg== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN NSEC3 ( 1 0 0 - j1g18mcr25ihtdqvcirv605bc52jef7p A RRSIG ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 13 3 3600 20260119123322 20260112121943 55734 mi-ke.ch. 6dqDwo2iTSrBTSzc48kptAjKOqsIh5C40KcZDIM8zUvfl2zW0o1IJ+wr/jMV+lUWf8j9TaZRpJm+ ZjOKBluTiA== ) H2KKTPG3L83BI2RG605BPQE7UIPUEDA0.mi-ke.ch. 3600 IN RRSIG ( NSEC3 15 3 3600 20260119123322 20260112121943 6163 mi-ke.ch. 4XT2adTNmggxIMWXckUj0cjP6S+AXSXPtcZsxOe9qxxG1htDsfojig3dkW7eBcEi3n3wSSL2K7gL F/wppNp0Cg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by mi-ke.ch zone
	Query to dns2.3eck.net for www.mi-ke.ch/A
	Received 552 bytes from 45.80.139.19
	;; Response received from [45.80.139.19] 552 octets ;; HEADER SECTION ;; id = 41069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; www.mi-ke.ch. IN A ;; ANSWER SECTION (3 records) www.mi-ke.ch. 86400 IN A 62.12.167.100 www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== ) www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== ) ;; AUTHORITY SECTION (5 records) mi-ke.ch. 86400 IN NS ente.limmat.ch. mi-ke.ch. 86400 IN NS dns2.3eck.net. mi-ke.ch. 86400 IN NS dns.3eck.net. mi-ke.ch. 86400 IN RRSIG ( NS 13 2 86400 20260119192539 20260112185935 55734 mi-ke.ch. M+o42sXC+NvWiDFiQ0a6HNh2xvVmOCCNE+0XT9QCGhF3nnwnhswiGWAzM8XeWYg1VkjB7QE9LAiO ztZwXnY2XQ== ) mi-ke.ch. 86400 IN RRSIG ( NS 15 2 86400 20260119192539 20260112185935 6163 mi-ke.ch. lLK2ndqJ13sZSr1loHXt1HczJ/i1NexDJ1UHmk7dnxVFVr0Hf0DAaaK9tQnE1N+r+JsSS/itAalP 5Zfh830oAg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.mi-ke.ch A RR has value 62.12.167.100
	Found 2 RRSIGs over A RRset
	`www.mi-ke.ch. 86400 IN RRSIG ( A 13 3 86400 20260121205037 20260114202412 55734 mi-ke.ch. x/UkYJLYUhAfsqWMeKVYFXerh9Z8ZdMjvg/hH70R6jRTIibUuo2ugze6sfUcLzyMrzexihcwdUdi sVatIK/pCA== )`
	`www.mi-ke.ch. 86400 IN RRSIG ( A 15 3 86400 20260121205037 20260114202412 6163 mi-ke.ch. qcufv5vkV38JXmhs8X2xZtMR/kNBg21RIny+/qFKuK498cfHjJSxZTCVDap74d3bF63VQjy7cCzr Z01rinPnAA== )`
	RRSIG=55734 and DNSKEY=55734 verifies the A RRset
	RRSIG=6163 and DNSKEY=6163 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.mi-ke.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: