DNSSEC Debugger - www.rk.sjdc.co.jp

Domain Name:

Time: 2026-01-01 16:36:17 UTC

Analyzing DNSSEC problems for www.rk.sjdc.co.jp

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1414 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1414 octets ;; HEADER SECTION ;; id = 19125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260122000000 20260101000000 20326 . USkvPpFyQAxqOkImrqqrMdiekwo0VJR5VGDlDxCNsI1dJ79PzX9wXPKprjsMZf77Xbo2SmRTCz+r bNtUtTmiKtDNsRROj9+45I4ExW1w3JKx3SrfHdORnrM0FK14YI+BbOJGkVsSMfJkscC2IWDb0APd vZgkUvYmi1ERmu4UG6CAujAmHe7GbLtEQlzMEdlCrYAgRtJo5RstNivFZ5A9WiBQMlfOAoEf0zr7 FDbHocQa2i983Jc3TzNJcRZwmQRpV1beonuMzQ3BumxE8n0sLX3pd6YFfZeO5J+kY8NVKFrSyEpf i83Yucy2Jd5LJwDo4t2kHHmG03LbkZbeGPkawg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for www.rk.sjdc.co.jp/A
	Received 837 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 837 octets ;; HEADER SECTION ;; id = 10377 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 86400 IN DS ( 33631 8 2 b54097461f9dbc3d9d87e74552c76314b421d178a18d8cb74dd2d97f34fbadbe ) jp. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . IC8rKDCDz83WODn0g2DFo8AN5mpiKA2b9Bl2a2jubeViGt4+kldLiA/3Rh4H6+Sd4HYmCSWILykS qjtzyETj2zrNDyNuvXaXNSom2o0sn1pXebBErd/SuCVqS5I7wxJT39w9TQlqejw0eLfNORSfWtjy YonOboWRF0VDSTuZbDaGmLTW283K9hlfnbEdu9rrrJropf3KTAYG8eZG2ixU1Mcjre/dA1kZz9MU 0ffJgZpFCGMpsDXKWoTKfEYzUsUgV//ovcXK0VvlB6Mi8QrkQ+uuv2jGc5ZZZgShAYULfhRw+qJS r5uDLStNpTP4UF5pafjifVnw2lls1EqvFVvE/g== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 b.dns.jp. 172800 IN A 202.12.30.131 c.dns.jp. 172800 IN A 156.154.100.5 d.dns.jp. 172800 IN A 210.138.175.244 e.dns.jp. 172800 IN A 192.50.43.53 f.dns.jp. 172800 IN A 150.100.6.8 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for jp/DNSKEY
	Received 822 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 822 octets ;; HEADER SECTION ;; id = 45870 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 86400 IN DS ( 33631 8 2 b54097461f9dbc3d9d87e74552c76314b421d178a18d8cb74dd2d97f34fbadbe ) jp. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . IC8rKDCDz83WODn0g2DFo8AN5mpiKA2b9Bl2a2jubeViGt4+kldLiA/3Rh4H6+Sd4HYmCSWILykS qjtzyETj2zrNDyNuvXaXNSom2o0sn1pXebBErd/SuCVqS5I7wxJT39w9TQlqejw0eLfNORSfWtjy YonOboWRF0VDSTuZbDaGmLTW283K9hlfnbEdu9rrrJropf3KTAYG8eZG2ixU1Mcjre/dA1kZz9MU 0ffJgZpFCGMpsDXKWoTKfEYzUsUgV//ovcXK0VvlB6Mi8QrkQ+uuv2jGc5ZZZgShAYULfhRw+qJS r5uDLStNpTP4UF5pafjifVnw2lls1EqvFVvE/g== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 b.dns.jp. 172800 IN A 202.12.30.131 c.dns.jp. 172800 IN A 156.154.100.5 d.dns.jp. 172800 IN A 210.138.175.244 e.dns.jp. 172800 IN A 192.50.43.53 f.dns.jp. 172800 IN A 150.100.6.8 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Found child zone jp

	Checking DS between . and jp
	Query to e.root-servers.net for jp/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 43007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DS ;; ANSWER SECTION (2 records) jp. 86400 IN DS ( 33631 8 2 b54097461f9dbc3d9d87e74552c76314b421d178a18d8cb74dd2d97f34fbadbe ) jp. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . IC8rKDCDz83WODn0g2DFo8AN5mpiKA2b9Bl2a2jubeViGt4+kldLiA/3Rh4H6+Sd4HYmCSWILykS qjtzyETj2zrNDyNuvXaXNSom2o0sn1pXebBErd/SuCVqS5I7wxJT39w9TQlqejw0eLfNORSfWtjy YonOboWRF0VDSTuZbDaGmLTW283K9hlfnbEdu9rrrJropf3KTAYG8eZG2ixU1Mcjre/dA1kZz9MU 0ffJgZpFCGMpsDXKWoTKfEYzUsUgV//ovcXK0VvlB6Mi8QrkQ+uuv2jGc5ZZZgShAYULfhRw+qJS r5uDLStNpTP4UF5pafjifVnw2lls1EqvFVvE/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jp in the . zone
	DS=33631/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jp. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . IC8rKDCDz83WODn0g2DFo8AN5mpiKA2b9Bl2a2jubeViGt4+kldLiA/3Rh4H6+Sd4HYmCSWILykS qjtzyETj2zrNDyNuvXaXNSom2o0sn1pXebBErd/SuCVqS5I7wxJT39w9TQlqejw0eLfNORSfWtjy YonOboWRF0VDSTuZbDaGmLTW283K9hlfnbEdu9rrrJropf3KTAYG8eZG2ixU1Mcjre/dA1kZz9MU 0ffJgZpFCGMpsDXKWoTKfEYzUsUgV//ovcXK0VvlB6Mi8QrkQ+uuv2jGc5ZZZgShAYULfhRw+qJS r5uDLStNpTP4UF5pafjifVnw2lls1EqvFVvE/g== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=33631/SHA-256 is now in the chain-of-trust
	`jp. 86400 IN DS ( 33631 8 2 b54097461f9dbc3d9d87e74552c76314b421d178a18d8cb74dd2d97f34fbadbe )`
	Query to c.dns.jp for jp/DNSKEY
	Received 893 bytes from 156.154.100.5
	;; Response received from [156.154.100.5] 893 octets ;; HEADER SECTION ;; id = 2535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (4 records) jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcEX3lYOnC0OGChpwkd+829dFUJlP/OCiSBQLyVbu7KSuxCH17E9kK1AKj3XB1CxO907QwCy fMZcsTJLC1ck22J8WyOZH/4xoVb5JpZiRt463dPTJxKsnRRcjboG2NjsLKKww/tGCwHI+nTLfqRI mmeRA2NWCBglhh8swCoxHN/n ) ; keytag 37731 jp. 86400 IN DNSKEY ( 257 3 8 AwEAAcuIsYAw2o8hVO+bvsQxrhx8f2wJogMidCdlmDneBwBaeJ2JalE3EryRFow/hP7utARJ1TEG ffWekRoP5fDjSQLanPxWinT2tUOsgoZS09nFa6T67zaYyZMZeYAQI5/spqNgTLM6IlLEkRMruTjX CqRvw+xHNGcuKKgE0Iz6oNV5gd8gL21FhwiYSFRQH7ZYwzuQw7sD3d21ItQEs7c0QKWveWUXeXus aj/HffIUBg1o4euql7QGudjIjZ5bYn+A+c6Z1wBxZHIFcBu7b6odFRI3lPB8aGeyDmpXFrhMf4cL zA2FmvyTQbQC/NOlreNdWeuEl+bZMk8qw+FMI21JCfE= ) ; keytag 33631 jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcT1SUs68AT8sbHVzOZhkYbUA0WaIUIfxyNisNiTNUNzirmlwYckeS6GFN+NEDNHuDKFSihR l5M5CEr7Z6vWAyM0Qtq8ckVykgl5TaoffaXaJ2kO4wamaP4FDVGLFw/oUT0HA810h/+pq4kA0POx 4uYqbkY5UWw72Uk0OkORmkEN ) ; keytag 62703 jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260202184500 20251203184500 33631 jp. g1D1bTVwx8emz9pOY7IuMUrVL4ZjZlm9UnssUhSuj4JM80ZuZxs996Rr7T9Aqf+cc3bnqsWLpUIq zpFincnP6quZNhN5FeF9Zx5APIlKYLiMAdSMs4u7mtAeeTBxS1LhxG/q61rR74b6Yoi6Q03P7951 km48nSoXwcQfenoes93chyJ8q6Am/qblZ5Qsv8NxW5WsRE9RqN9j7MxAmJQig7JiPWF+QdN1VhlQ QIqhb5V1BEFcX5qVUyT9xo3/Im4Z6UX2IkkAzgAem/LXsFhyKpZJFlZF8SFvfjhZQ6kNRn5NsNWA 031tZco/9554KmOdOU7KI80muQt/YoD2NzuD8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for jp
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcEX3lYOnC0OGChpwkd+829dFUJlP/OCiSBQLyVbu7KSuxCH17E9kK1AKj3XB1CxO907QwCy fMZcsTJLC1ck22J8WyOZH/4xoVb5JpZiRt463dPTJxKsnRRcjboG2NjsLKKww/tGCwHI+nTLfqRI mmeRA2NWCBglhh8swCoxHN/n ) ; keytag 37731`
	`jp. 86400 IN DNSKEY ( 257 3 8 AwEAAcuIsYAw2o8hVO+bvsQxrhx8f2wJogMidCdlmDneBwBaeJ2JalE3EryRFow/hP7utARJ1TEG ffWekRoP5fDjSQLanPxWinT2tUOsgoZS09nFa6T67zaYyZMZeYAQI5/spqNgTLM6IlLEkRMruTjX CqRvw+xHNGcuKKgE0Iz6oNV5gd8gL21FhwiYSFRQH7ZYwzuQw7sD3d21ItQEs7c0QKWveWUXeXus aj/HffIUBg1o4euql7QGudjIjZ5bYn+A+c6Z1wBxZHIFcBu7b6odFRI3lPB8aGeyDmpXFrhMf4cL zA2FmvyTQbQC/NOlreNdWeuEl+bZMk8qw+FMI21JCfE= ) ; keytag 33631`
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAcT1SUs68AT8sbHVzOZhkYbUA0WaIUIfxyNisNiTNUNzirmlwYckeS6GFN+NEDNHuDKFSihR l5M5CEr7Z6vWAyM0Qtq8ckVykgl5TaoffaXaJ2kO4wamaP4FDVGLFw/oUT0HA810h/+pq4kA0POx 4uYqbkY5UWw72Uk0OkORmkEN ) ; keytag 62703`
	DNSKEY=33631/SEP is now in the chain-of-trust
	DS=33631/SHA-256 verifies DNSKEY=33631/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260202184500 20251203184500 33631 jp. g1D1bTVwx8emz9pOY7IuMUrVL4ZjZlm9UnssUhSuj4JM80ZuZxs996Rr7T9Aqf+cc3bnqsWLpUIq zpFincnP6quZNhN5FeF9Zx5APIlKYLiMAdSMs4u7mtAeeTBxS1LhxG/q61rR74b6Yoi6Q03P7951 km48nSoXwcQfenoes93chyJ8q6Am/qblZ5Qsv8NxW5WsRE9RqN9j7MxAmJQig7JiPWF+QdN1VhlQ QIqhb5V1BEFcX5qVUyT9xo3/Im4Z6UX2IkkAzgAem/LXsFhyKpZJFlZF8SFvfjhZQ6kNRn5NsNWA 031tZco/9554KmOdOU7KI80muQt/YoD2NzuD8w== )`
	RRSIG=33631 and DNSKEY=33631/SEP verifies the DNSKEY RRset
	DNSKEY=37731 is now in the chain-of-trust
	DNSKEY=62703 is now in the chain-of-trust
	Query to f.dns.jp for www.rk.sjdc.co.jp/A
	Received 680 bytes from 150.100.6.8
	;; Response received from [150.100.6.8] 680 octets ;; HEADER SECTION ;; id = 63199 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) sjdc.co.jp. 86400 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 86400 IN NS ns-1788.awsdns-31.co.uk. sjdc.co.jp. 86400 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 86400 IN NS ns-579.awsdns-08.net. K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. ut6itGOjF9K32og+lGnmMcHVz/kkq2WLSLI7rsVcsNjp5Dt+vXKEywQq+u5SKSGHNHy8D+wo0+t6 iwGl7GuQTKtJkwZna+qd1hyeKrBAySZ/mmVHksAO7LyX1LupqV8MWAOzeopa+3qpMlzAsDaY4u17 dKIDfh1peGQe89M9YuQ= ) AT4Q0NL595GR5BRLJ9HMOJU8SAHO40QI.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) AT4Q0NL595GR5BRLJ9HMOJU8SAHO40QI.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. EhzcFxoaY7R7po35AyE6AcncWfV1qf7t2PLqBHFWfZ8IuAW4p2igxWzfsQ4CR/+/UoH3FaILP6EM msG+ZxK55GtsJUdEqFfuNHzptAFyvRif4/Ysop/hMbCnWrAHUERf2gKBG8KE38WEiw7esN6ys1RO cqAXhXqStqNln1RYEUg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.dns.jp for co.jp/DNSKEY
	Received 484 bytes from 210.138.175.244
	;; Response received from [210.138.175.244] 484 octets ;; HEADER SECTION ;; id = 26875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1767285002 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) jp. 900 IN RRSIG ( SOA 8 1 86400 20260126174503 20251227174503 37731 jp. CcUlTLH1idczwu0YSginApqAf7njhOUs2l0gwcuJzjy0v6qghvQqtkJGhkGUU/vSY/zgbGf0hTyC bqUuwmnViJbws8WQEqD/e42IsL/OBlzfqBVLfAMzKtS9gKoUNM8QYGkHTlSsqJBeKqcB6oy9cPOK mPH2Og+N2CRJoNx10vU= ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. ut6itGOjF9K32og+lGnmMcHVz/kkq2WLSLI7rsVcsNjp5Dt+vXKEywQq+u5SKSGHNHy8D+wo0+t6 iwGl7GuQTKtJkwZna+qd1hyeKrBAySZ/mmVHksAO7LyX1LupqV8MWAOzeopa+3qpMlzAsDaY4u17 dKIDfh1peGQe89M9YuQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.dns.jp for sjdc.co.jp/DNSKEY
	Received 661 bytes from 192.50.43.53
	;; Response received from [192.50.43.53] 661 octets ;; HEADER SECTION ;; id = 35546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) sjdc.co.jp. 86400 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 86400 IN NS ns-579.awsdns-08.net. sjdc.co.jp. 86400 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 86400 IN NS ns-1788.awsdns-31.co.uk. k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. ut6itGOjF9K32og+lGnmMcHVz/kkq2WLSLI7rsVcsNjp5Dt+vXKEywQq+u5SKSGHNHy8D+wo0+t6 iwGl7GuQTKtJkwZna+qd1hyeKrBAySZ/mmVHksAO7LyX1LupqV8MWAOzeopa+3qpMlzAsDaY4u17 dKIDfh1peGQe89M9YuQ= ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. EhzcFxoaY7R7po35AyE6AcncWfV1qf7t2PLqBHFWfZ8IuAW4p2igxWzfsQ4CR/+/UoH3FaILP6EM msG+ZxK55GtsJUdEqFfuNHzptAFyvRif4/Ysop/hMbCnWrAHUERf2gKBG8KE38WEiw7esN6ys1RO cqAXhXqStqNln1RYEUg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone sjdc.co.jp

sjdc.co.jp

	Checking DS between jp and sjdc.co.jp
	Query to d.dns.jp for sjdc.co.jp/DS
	Received 730 bytes from 210.138.175.244
	;; Response received from [210.138.175.244] 730 octets ;; HEADER SECTION ;; id = 8500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1767285002 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) jp. 900 IN RRSIG ( SOA 8 1 86400 20260126174503 20251227174503 37731 jp. CcUlTLH1idczwu0YSginApqAf7njhOUs2l0gwcuJzjy0v6qghvQqtkJGhkGUU/vSY/zgbGf0hTyC bqUuwmnViJbws8WQEqD/e42IsL/OBlzfqBVLfAMzKtS9gKoUNM8QYGkHTlSsqJBeKqcB6oy9cPOK mPH2Og+N2CRJoNx10vU= ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. ut6itGOjF9K32og+lGnmMcHVz/kkq2WLSLI7rsVcsNjp5Dt+vXKEywQq+u5SKSGHNHy8D+wo0+t6 iwGl7GuQTKtJkwZna+qd1hyeKrBAySZ/mmVHksAO7LyX1LupqV8MWAOzeopa+3qpMlzAsDaY4u17 dKIDfh1peGQe89M9YuQ= ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN RRSIG ( NSEC3 8 2 900 20260126174503 20251227174503 37731 jp. EhzcFxoaY7R7po35AyE6AcncWfV1qf7t2PLqBHFWfZ8IuAW4p2igxWzfsQ4CR/+/UoH3FaILP6EM msG+ZxK55GtsJUdEqFfuNHzptAFyvRif4/Ysop/hMbCnWrAHUERf2gKBG8KE38WEiw7esN6ys1RO cqAXhXqStqNln1RYEUg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for sjdc.co.jp in the jp zone
	Query to ns-579.awsdns-08.net for sjdc.co.jp/DNSKEY
	Received 124 bytes from 205.251.194.67
	;; Response received from [205.251.194.67] 124 octets ;; HEADER SECTION ;; id = 52504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sjdc.co.jp. 3600 IN SOA ( ns-1273.awsdns-31.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-579.awsdns-08.net for www.rk.sjdc.co.jp/A
	Received 219 bytes from 205.251.194.67
	;; Response received from [205.251.194.67] 219 octets ;; HEADER SECTION ;; id = 42322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (1 record) www.rk.sjdc.co.jp. 86400 IN CNAME 2lso4gb.x.incapdns.net. ;; AUTHORITY SECTION (4 records) sjdc.co.jp. 3600 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 3600 IN NS ns-1788.awsdns-31.co.uk. sjdc.co.jp. 3600 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 3600 IN NS ns-579.awsdns-08.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-579.awsdns-08.net is authoritative for www.rk.sjdc.co.jp
	Query to ns-1273.awsdns-31.org for rk.sjdc.co.jp/DNSKEY
	Received 127 bytes from 205.251.196.249
	;; Response received from [205.251.196.249] 127 octets ;; HEADER SECTION ;; id = 52491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rk.sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sjdc.co.jp. 3600 IN SOA ( ns-1273.awsdns-31.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1273.awsdns-31.org for www.rk.sjdc.co.jp/DNSKEY
	Received 219 bytes from 205.251.196.249
	;; Response received from [205.251.196.249] 219 octets ;; HEADER SECTION ;; id = 52050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (1 record) www.rk.sjdc.co.jp. 86400 IN CNAME 2lso4gb.x.incapdns.net. ;; AUTHORITY SECTION (4 records) sjdc.co.jp. 3600 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 3600 IN NS ns-1788.awsdns-31.co.uk. sjdc.co.jp. 3600 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 3600 IN NS ns-579.awsdns-08.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.rk.sjdc.co.jp is a CNAME to 2lso4gb.x.incapdns.net
	No RRSIGs found

	Query to k.root-servers.net for 2lso4gb.x.incapdns.net/A
	Received 1179 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1179 octets ;; HEADER SECTION ;; id = 14031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . ouwHjo++YnIDpwyFSfT2AJM2UqD62N9KqETfxGE6RNQkyc0eghk8gfSaKuNguez35YOYoavTs8cE PTFFougPseKoVN8GBTxUpKt+a5ajbh66e13CVqWIVqGPjhktkvdrwJH2QUc8tXV7nLTfij0mhEVb 0A0ovlwLSGvTrufYNK1YjIOOwTPvG6+WqEzhzzEiscphFsrJq2bsLzQl0Fs1P07wDngyWDt7ayLI oO9gUzKQT918HAOCZDc3PCJab7uQZs82N1DpYfaS3llTEvon/wFbLO4/QYqU/R7GKSdFTCl38yBB IgEZiETGp1cvRSvJZFV5UDUnYKCZPXx1QcAg4w== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 27283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . ouwHjo++YnIDpwyFSfT2AJM2UqD62N9KqETfxGE6RNQkyc0eghk8gfSaKuNguez35YOYoavTs8cE PTFFougPseKoVN8GBTxUpKt+a5ajbh66e13CVqWIVqGPjhktkvdrwJH2QUc8tXV7nLTfij0mhEVb 0A0ovlwLSGvTrufYNK1YjIOOwTPvG6+WqEzhzzEiscphFsrJq2bsLzQl0Fs1P07wDngyWDt7ayLI oO9gUzKQT918HAOCZDc3PCJab7uQZs82N1DpYfaS3llTEvon/wFbLO4/QYqU/R7GKSdFTCl38yBB IgEZiETGp1cvRSvJZFV5UDUnYKCZPXx1QcAg4w== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 7397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . ouwHjo++YnIDpwyFSfT2AJM2UqD62N9KqETfxGE6RNQkyc0eghk8gfSaKuNguez35YOYoavTs8cE PTFFougPseKoVN8GBTxUpKt+a5ajbh66e13CVqWIVqGPjhktkvdrwJH2QUc8tXV7nLTfij0mhEVb 0A0ovlwLSGvTrufYNK1YjIOOwTPvG6+WqEzhzzEiscphFsrJq2bsLzQl0Fs1P07wDngyWDt7ayLI oO9gUzKQT918HAOCZDc3PCJab7uQZs82N1DpYfaS3llTEvon/wFbLO4/QYqU/R7GKSdFTCl38yBB IgEZiETGp1cvRSvJZFV5UDUnYKCZPXx1QcAg4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260114050000 20260101040000 21831 . ouwHjo++YnIDpwyFSfT2AJM2UqD62N9KqETfxGE6RNQkyc0eghk8gfSaKuNguez35YOYoavTs8cE PTFFougPseKoVN8GBTxUpKt+a5ajbh66e13CVqWIVqGPjhktkvdrwJH2QUc8tXV7nLTfij0mhEVb 0A0ovlwLSGvTrufYNK1YjIOOwTPvG6+WqEzhzzEiscphFsrJq2bsLzQl0Fs1P07wDngyWDt7ayLI oO9gUzKQT918HAOCZDc3PCJab7uQZs82N1DpYfaS3llTEvon/wFbLO4/QYqU/R7GKSdFTCl38yBB IgEZiETGp1cvRSvJZFV5UDUnYKCZPXx1QcAg4w== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to b.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 291 octets ;; HEADER SECTION ;; id = 56821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260112151035 20251228150535 37331 net. jwRdJGcXcggimT54p4OGx6lp3ZgKvBf7OWpS9Vkis81zrzC2WSbFxcHhHEkBth+D3IxdePXerB/E GJqTdyCuow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260112151035 20251228150535 37331 net. jwRdJGcXcggimT54p4OGx6lp3ZgKvBf7OWpS9Vkis81zrzC2WSbFxcHhHEkBth+D3IxdePXerB/E GJqTdyCuow== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	Query to m.gtld-servers.net for 2lso4gb.x.incapdns.net/A
	Received 1014 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 1014 octets ;; HEADER SECTION ;; id = 28236 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 43 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20260107031919 20251231020919 17133 net. AtGM1HkPU4Gde/U5UgO+Novc/TOEaKEeTvYTKKGqVR39KwQhoj5d0qcupKWSYI5jY2hnvaAlUeOi hLTvIzOdOQ== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Query to i.gtld-servers.net for incapdns.net/DNSKEY
	Received 1004 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 1004 octets ;; HEADER SECTION ;; id = 32308 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 43 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20260107031919 20251231020919 17133 net. AtGM1HkPU4Gde/U5UgO+Novc/TOEaKEeTvYTKKGqVR39KwQhoj5d0qcupKWSYI5jY2hnvaAlUeOi hLTvIzOdOQ== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Found child zone incapdns.net

incapdns.net

	Checking DS between net and incapdns.net
	Query to f.gtld-servers.net for incapdns.net/DS
	Received 1116 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 1116 octets ;; HEADER SECTION ;; id = 61804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DS ;; ANSWER SECTION (3 records) incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20260107031919 20251231020919 17133 net. AtGM1HkPU4Gde/U5UgO+Novc/TOEaKEeTvYTKKGqVR39KwQhoj5d0qcupKWSYI5jY2hnvaAlUeOi hLTvIzOdOQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260108032615 20260101021615 17133 net. j5CEf3FKekp4a/chi+7w27Gh34OnlocrHkkYOwpfiOBQC0uiPNtuMXQpn+yBhBNQ83tcZ/90EYgd 9ZOQ8C6jEA== ) ;; ADDITIONAL SECTION (27 records) k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for incapdns.net in the net zone
	DS=31229/SHA-1 uses a deprecated digest algorithm
	DS=31229/SHA-1 has algorithm RSASHA256
	DS=31229/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20260107031919 20251231020919 17133 net. AtGM1HkPU4Gde/U5UgO+Novc/TOEaKEeTvYTKKGqVR39KwQhoj5d0qcupKWSYI5jY2hnvaAlUeOi hLTvIzOdOQ== )`
	RRSIG=17133 and DNSKEY=17133 verifies the DS RRset
	DS=31229/SHA-1 is now in the chain-of-trust
	`incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 )`
	`incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e )`
	Query to ns4.incapdns.net for incapdns.net/DNSKEY
	Received 765 bytes from 198.143.61.250
	;; Response received from [198.143.61.250] 765 octets ;; HEADER SECTION ;; id = 58120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (3 records) incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaoFBWWlPnewRWd0IVaX+Fhar2Zh+KZxbNNkjM/emJz1hVrGZdUf0FO8wK21ICdmCCNjzApA XLudPtCVIpMl8PuFP+NARQsVbjiPQvd06x6s6gZG7KOSWiO6bloeaAy735ZeNOw1Frgo/gh1Wbi6 ZcgxwPLRqEK8nEPIauVjFJ7XH9WwxwmqPpKGZomofOBoglZ5Llfwx2e6u7guvVt/d2b8pYeeSokA 1is2RlRcZjyFT3KQaaTlhGO+Tdr7E+nyYaCWPYh/jwkP2onaZuZSbHkYchhLlqDOeolATLi/ZWB+ 45buowiJj4ECXfX9cnT7OPqi21RU/8wbvcLmMklE2ZU= ) ; keytag 31229 incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZLe605y4ZSd5pdeSgkqtD5O38JZe234nRjFtuyzNCtZpF4gr9FiDXBOxT9j6Z/ZzieGe/E1 jc4PIrHzCnzpiNliLbuubOyxhJV2lamUaJkfimiTrDBZuM1pX9DEsvm2BBpLI/uT5ycibk1PwYJT cFSY6BPUm5hQYEDcGIHa5dqL ) ; keytag 2929 incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260228000000 20240722000000 31229 incapdns.net. XLHXN7NN+kfJDdgNnhB4K/JFkTIKpW3vKfpUy893Fyh75ka0SIQ/d0s6klRsPBU0YYx85TjTanSB xeAlcAUZCwyPVZTxAevD1xDaaFLS2S51kLNqJUczDxRQsRJCKLmeSNOfPFmqV78/4gKsZUaCIpY0 yENG45mwFJwrcSZHFQeICQRw/ttGVmkiFIcLxvC7QCy3PsBMMhHjGnrDcqXmAJBZqTCx/TqtF17z KBpHfXeD0WTlExdFOCIZJJYQ7H/73FB9d9hAryQC88iJJrM5z+9h4sNblZH4cilK/otOTJFCmzt+ zPlEimD9+b1aGPTx8UBcNbT8GMcaYZkm0Mc7bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for incapdns.net
	`incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaoFBWWlPnewRWd0IVaX+Fhar2Zh+KZxbNNkjM/emJz1hVrGZdUf0FO8wK21ICdmCCNjzApA XLudPtCVIpMl8PuFP+NARQsVbjiPQvd06x6s6gZG7KOSWiO6bloeaAy735ZeNOw1Frgo/gh1Wbi6 ZcgxwPLRqEK8nEPIauVjFJ7XH9WwxwmqPpKGZomofOBoglZ5Llfwx2e6u7guvVt/d2b8pYeeSokA 1is2RlRcZjyFT3KQaaTlhGO+Tdr7E+nyYaCWPYh/jwkP2onaZuZSbHkYchhLlqDOeolATLi/ZWB+ 45buowiJj4ECXfX9cnT7OPqi21RU/8wbvcLmMklE2ZU= ) ; keytag 31229`
	`incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZLe605y4ZSd5pdeSgkqtD5O38JZe234nRjFtuyzNCtZpF4gr9FiDXBOxT9j6Z/ZzieGe/E1 jc4PIrHzCnzpiNliLbuubOyxhJV2lamUaJkfimiTrDBZuM1pX9DEsvm2BBpLI/uT5ycibk1PwYJT cFSY6BPUm5hQYEDcGIHa5dqL ) ; keytag 2929`
	DNSKEY=31229/SEP is now in the chain-of-trust
	DS=31229/SHA-1 verifies DNSKEY=31229/SEP
	DS=31229/SHA-256 verifies DNSKEY=31229/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260228000000 20240722000000 31229 incapdns.net. XLHXN7NN+kfJDdgNnhB4K/JFkTIKpW3vKfpUy893Fyh75ka0SIQ/d0s6klRsPBU0YYx85TjTanSB xeAlcAUZCwyPVZTxAevD1xDaaFLS2S51kLNqJUczDxRQsRJCKLmeSNOfPFmqV78/4gKsZUaCIpY0 yENG45mwFJwrcSZHFQeICQRw/ttGVmkiFIcLxvC7QCy3PsBMMhHjGnrDcqXmAJBZqTCx/TqtF17z KBpHfXeD0WTlExdFOCIZJJYQ7H/73FB9d9hAryQC88iJJrM5z+9h4sNblZH4cilK/otOTJFCmzt+ zPlEimD9+b1aGPTx8UBcNbT8GMcaYZkm0Mc7bQ== )`
	RRSIG=31229 and DNSKEY=31229/SEP verifies the DNSKEY RRset
	DNSKEY=2929 is now in the chain-of-trust
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.129
	;; Response received from [198.143.63.129] 239 octets ;; HEADER SECTION ;; id = 35194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns1.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.200
	;; Response received from [198.143.61.200] 533 octets ;; HEADER SECTION ;; id = 32033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.63.103
	;; Response received from [198.143.63.103] 541 octets ;; HEADER SECTION ;; id = 15568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns4.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.105
	;; Response received from [198.143.61.105] 277 octets ;; HEADER SECTION ;; id = 50461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.62.11
	;; Response received from [198.143.62.11] 277 octets ;; HEADER SECTION ;; id = 48126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.11
	;; Response received from [198.143.61.11] 277 octets ;; HEADER SECTION ;; id = 7141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.62.107
	;; Response received from [198.143.62.107] 277 octets ;; HEADER SECTION ;; id = 28114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.63.11
	;; Response received from [198.143.63.11] 277 octets ;; HEADER SECTION ;; id = 30908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.109
	;; Response received from [198.143.63.109] 239 octets ;; HEADER SECTION ;; id = 32130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns1.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.7
	;; Response received from [198.143.61.7] 239 octets ;; HEADER SECTION ;; id = 16594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns5.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.109
	;; Response received from [198.143.62.109] 533 octets ;; HEADER SECTION ;; id = 46814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.61.2
	;; Response received from [198.143.61.2] 541 octets ;; HEADER SECTION ;; id = 49748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns1.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.7
	;; Response received from [198.143.61.7] 239 octets ;; HEADER SECTION ;; id = 52208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns5.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.105
	;; Response received from [198.143.62.105] 239 octets ;; HEADER SECTION ;; id = 7873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns2.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.11
	;; Response received from [198.143.62.11] 533 octets ;; HEADER SECTION ;; id = 3080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.63.3
	;; Response received from [198.143.63.3] 541 octets ;; HEADER SECTION ;; id = 57115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns5.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.107
	;; Response received from [198.143.62.107] 239 octets ;; HEADER SECTION ;; id = 1161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.105
	;; Response received from [198.143.61.105] 239 octets ;; HEADER SECTION ;; id = 2308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns2.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.11
	;; Response received from [198.143.62.11] 533 octets ;; HEADER SECTION ;; id = 20449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.61.129
	;; Response received from [198.143.61.129] 541 octets ;; HEADER SECTION ;; id = 45853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.103
	;; Response received from [198.143.61.103] 239 octets ;; HEADER SECTION ;; id = 61743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns3.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.7
	;; Response received from [198.143.63.7] 239 octets ;; HEADER SECTION ;; id = 31267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns2.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.200
	;; Response received from [198.143.62.200] 533 octets ;; HEADER SECTION ;; id = 64963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.62.7
	;; Response received from [198.143.62.7] 541 octets ;; HEADER SECTION ;; id = 18963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns3.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.9
	;; Response received from [198.143.63.9] 239 octets ;; HEADER SECTION ;; id = 27421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.2
	;; Response received from [198.143.62.2] 239 octets ;; HEADER SECTION ;; id = 10781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns2.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.200
	;; Response received from [198.143.62.200] 533 octets ;; HEADER SECTION ;; id = 34224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20260228000000 20240722000000 2929 incapdns.net. JZV4j28D2VagWTphfKUBzV03otnFQUbzhhYzzQdl0B4qSEDmNfwqIUpEmhLoWYhIMIaQFieTN6bp VUl2PPtIRcvAjl3Fa71BG9it8Lm9oc72T/9y7C6J/1A3BvP10I0UQiE6z4bQgcKEi3nGjNcJp2j1 0KTDTzP7zXuZoFjvct0= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. EhKDkuhW+WkHcNrNOJI569RGUj6Tx0FsW6lSBy8qm66kXBL77NpkQBY6CJBGu7JSdmhMYMg4GlHf 2RI9AqX2/xBFxVcV03PY4hv6txYrlTFW+vdVpYhlGWEKjuS3NyLuW+WmO5YmntWVY65XK0QFjM1I BeCy2Pdi1iI1aoywBFY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.62.2
	;; Response received from [198.143.62.2] 541 octets ;; HEADER SECTION ;; id = 31854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20260228000000 20240722000000 2929 incapdns.net. Agnu3YghktUgqjHpT0gI9CjSobencgiOm6ZYW1zum9qDk3LaF+roefGfSRZAPIYs2A8VOcQyWJX8 EiU17AwOAl360+PteafVxnsNQRVnM6CNk36tkeSyQzkdIPwUwq4G+en5ZKDGCcOFckcEcM9upGQv dP4yq0E5do68iTFuc/U= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20260228000000 20240722000000 2929 incapdns.net. XiztvZdEf8W2YDTnnrXO1/Zin5jvjPtKE0HACb41rtZvybynjsxdjckRQ8aWIN4rY4Et7dOmash0 XZSgnScO+C17e6wzlgev9VlCi19yHs4u87HVSLz7Hhsl/MakHY6215NefDj5yqJ6GsiPnFkb1p5F MGvozClqp/TcedaSqZQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.200
	;; Response received from [198.143.62.200] 239 octets ;; HEADER SECTION ;; id = 13236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20260228000000 20240722000000 2929 incapdns.net. j4U7a6kPALOI9DA0diawWRDOtktLVchW7fw4i0wcHbZEq9ipl7UwfQJv8K6aCsEXfdM8mBTNzS2r 8DnMy0juLPDyenEG5xl9Q53tPKRn0y2w62pyL0BXAIBTibsjzRehBwESaioxMvgCwLseXpMwVwI6 TK15xqh3ncgyshMr6kk= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.rk.sjdc.co.jp at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: