DNSSEC Debugger - www.rk.sjdc.co.jp

Domain Name:

Time: 2025-11-01 10:06:41 UTC

Analyzing DNSSEC problems for www.rk.sjdc.co.jp

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 52543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for www.rk.sjdc.co.jp/A
	Received 837 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 837 octets ;; HEADER SECTION ;; id = 8175 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 86400 IN DS ( 35821 8 2 41ad6ec23454a202d05bd75d9c323825c9822b9850cb1793cab2da2814c74140 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . CGe5fYA2NpHXPNkczy+lrNkU0h+hAC3hfCMewS1rJXFOlk4os/5zOVUvLKctOGHksGtQKhEIS7aL odQmpSEHsv7MT08fbAvwLttHhxm6PMK5XudYmnRFnrHc5DXWCfKVtpQfflanOroFNc/HEJtpWuLm gQAWcqCvuwTbyDz04tv5WamMkIpGmCm2vB6uAP0/ZkN9H+c8ic1luUd0Lg7PNdCzUsn6ycdGHXac lMzmy/hctggUryR7j1F1rpQxS+J0N3VGXW4+jD9Bmh5644Wv4tg6Rt1ox0noAU+hlVg1UPVsyRiY x6iP1c97qnFhPRCLDPwb/YOsvQM7S9LLAoBvcw== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN A 202.12.30.131 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN A 156.154.100.5 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN A 210.138.175.244 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN A 192.50.43.53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN A 150.100.6.8 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for jp/DNSKEY
	Received 822 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 822 octets ;; HEADER SECTION ;; id = 14646 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 16 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) jp. 172800 IN NS a.dns.jp. jp. 172800 IN NS b.dns.jp. jp. 172800 IN NS c.dns.jp. jp. 172800 IN NS d.dns.jp. jp. 172800 IN NS e.dns.jp. jp. 172800 IN NS f.dns.jp. jp. 172800 IN NS g.dns.jp. jp. 172800 IN NS h.dns.jp. jp. 86400 IN DS ( 35821 8 2 41ad6ec23454a202d05bd75d9c323825c9822b9850cb1793cab2da2814c74140 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . CGe5fYA2NpHXPNkczy+lrNkU0h+hAC3hfCMewS1rJXFOlk4os/5zOVUvLKctOGHksGtQKhEIS7aL odQmpSEHsv7MT08fbAvwLttHhxm6PMK5XudYmnRFnrHc5DXWCfKVtpQfflanOroFNc/HEJtpWuLm gQAWcqCvuwTbyDz04tv5WamMkIpGmCm2vB6uAP0/ZkN9H+c8ic1luUd0Lg7PNdCzUsn6ycdGHXac lMzmy/hctggUryR7j1F1rpQxS+J0N3VGXW4+jD9Bmh5644Wv4tg6Rt1ox0noAU+hlVg1UPVsyRiY x6iP1c97qnFhPRCLDPwb/YOsvQM7S9LLAoBvcw== ) ;; ADDITIONAL SECTION (16 records) a.dns.jp. 172800 IN A 203.119.1.1 b.dns.jp. 172800 IN A 202.12.30.131 c.dns.jp. 172800 IN A 156.154.100.5 d.dns.jp. 172800 IN A 210.138.175.244 e.dns.jp. 172800 IN A 192.50.43.53 f.dns.jp. 172800 IN A 150.100.6.8 g.dns.jp. 172800 IN A 203.119.40.1 h.dns.jp. 172800 IN A 161.232.72.25 a.dns.jp. 172800 IN AAAA 2001:dc4::1 b.dns.jp. 172800 IN AAAA 2001:dc2::1 c.dns.jp. 172800 IN AAAA 2001:502:ad09::5 d.dns.jp. 172800 IN AAAA 2001:240::53 e.dns.jp. 172800 IN AAAA 2001:200:c000::35 f.dns.jp. 172800 IN AAAA 2001:2f8:0:100::153 h.dns.jp. 172800 IN AAAA 2a01:8840:1bc::25 ;; { "EDNS-VERSION": 0 }
	Found child zone jp

	Checking DS between . and jp
	Query to i.root-servers.net for jp/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 16773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DS ;; ANSWER SECTION (2 records) jp. 86400 IN DS ( 35821 8 2 41ad6ec23454a202d05bd75d9c323825c9822b9850cb1793cab2da2814c74140 ) jp. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . CGe5fYA2NpHXPNkczy+lrNkU0h+hAC3hfCMewS1rJXFOlk4os/5zOVUvLKctOGHksGtQKhEIS7aL odQmpSEHsv7MT08fbAvwLttHhxm6PMK5XudYmnRFnrHc5DXWCfKVtpQfflanOroFNc/HEJtpWuLm gQAWcqCvuwTbyDz04tv5WamMkIpGmCm2vB6uAP0/ZkN9H+c8ic1luUd0Lg7PNdCzUsn6ycdGHXac lMzmy/hctggUryR7j1F1rpQxS+J0N3VGXW4+jD9Bmh5644Wv4tg6Rt1ox0noAU+hlVg1UPVsyRiY x6iP1c97qnFhPRCLDPwb/YOsvQM7S9LLAoBvcw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jp in the . zone
	DS=35821/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jp. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . CGe5fYA2NpHXPNkczy+lrNkU0h+hAC3hfCMewS1rJXFOlk4os/5zOVUvLKctOGHksGtQKhEIS7aL odQmpSEHsv7MT08fbAvwLttHhxm6PMK5XudYmnRFnrHc5DXWCfKVtpQfflanOroFNc/HEJtpWuLm gQAWcqCvuwTbyDz04tv5WamMkIpGmCm2vB6uAP0/ZkN9H+c8ic1luUd0Lg7PNdCzUsn6ycdGHXac lMzmy/hctggUryR7j1F1rpQxS+J0N3VGXW4+jD9Bmh5644Wv4tg6Rt1ox0noAU+hlVg1UPVsyRiY x6iP1c97qnFhPRCLDPwb/YOsvQM7S9LLAoBvcw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=35821/SHA-256 is now in the chain-of-trust
	`jp. 86400 IN DS ( 35821 8 2 41ad6ec23454a202d05bd75d9c323825c9822b9850cb1793cab2da2814c74140 )`
	Query to g.dns.jp for jp/DNSKEY
	Received 745 bytes from 203.119.40.1
	;; Response received from [203.119.40.1] 745 octets ;; HEADER SECTION ;; id = 32230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jp. IN DNSKEY ;; ANSWER SECTION (3 records) jp. 86400 IN DNSKEY ( 256 3 8 AwEAAdud5gwlo9aHyigNmwSnzS0tzZFIKUHVfgvZ57CZyDyTp+uJ52IDMys3fF8qkJwzXkrdisSk /vSP9ZBcC+G9I6QZN8jMkonEizJa3AKMNGScNY7zCEV5JQ0ONDt3Q8EqSruWS2y+vF0Ohwe8JiAm /OIhWRDW5rz80lfO7jLW8mhb ) ; keytag 32565 jp. 86400 IN DNSKEY ( 257 3 8 AwEAAZryT+38EFebIYP+BdGnQ1Qo1grKkPgta7Z6AsMp9Wv0ovVZlQ4QaCgtBMrgd7/p7t9p2Buy UhlPPH6hNxLz5N6tw2o52UMxAB1EKNPBpg8d5d0hXXXKb43MqJUOvIZHhQESSxMlN0tjcmM8NteV CONxdnZcOQcYaKY+7AhzUUzbYL1djHj5NinQOf+ffo1UwNSY0QPxZcQzBPp3reczHY8kdOEXnEop KOaglH0u230VqVJk4omde6f5bXT1DiM32OBcfOhURaXOy3758NZB64/QLBQtpcpXtsFeoeEg7ZPQ xJO9CAlnsfAiNTwKuQvE2K9oozmRgONZlkylGmLtSis= ) ; keytag 35821 jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251204184500 20251004184500 35821 jp. LfEPSptHBH2XK/jAB6iTOgvkOvAEHuo5UGNNJgwqONYgCtbb00k1X7y2MNj0eoQHpR+OJ8R5i98f XZ2rm8u6XzH0wdCp9datbUjgSkm/vVNbqm7yNDG90V2YhgxV61snzeCdSpZ43oRJZfvc6FVUHZ1E aoU8ZmK/FhPJ29DXFoVnhviMz0hPe2wMGL5f8pNpDbLI4uOUQq6UkW5nNHZLsAwJPUjO2BB8Hxv6 GVMnzwBU0oL6UZc8ISkYNbPTmcbXvsGlbL4ytx9JZvM5NVazhsCmC5r3hsTCKmSc6uAxXM9KqRHq zefvtgfu7+4BQSGTOzbdABuiQSWqKjZSHKBIqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for jp
	`jp. 86400 IN DNSKEY ( 256 3 8 AwEAAdud5gwlo9aHyigNmwSnzS0tzZFIKUHVfgvZ57CZyDyTp+uJ52IDMys3fF8qkJwzXkrdisSk /vSP9ZBcC+G9I6QZN8jMkonEizJa3AKMNGScNY7zCEV5JQ0ONDt3Q8EqSruWS2y+vF0Ohwe8JiAm /OIhWRDW5rz80lfO7jLW8mhb ) ; keytag 32565`
	`jp. 86400 IN DNSKEY ( 257 3 8 AwEAAZryT+38EFebIYP+BdGnQ1Qo1grKkPgta7Z6AsMp9Wv0ovVZlQ4QaCgtBMrgd7/p7t9p2Buy UhlPPH6hNxLz5N6tw2o52UMxAB1EKNPBpg8d5d0hXXXKb43MqJUOvIZHhQESSxMlN0tjcmM8NteV CONxdnZcOQcYaKY+7AhzUUzbYL1djHj5NinQOf+ffo1UwNSY0QPxZcQzBPp3reczHY8kdOEXnEop KOaglH0u230VqVJk4omde6f5bXT1DiM32OBcfOhURaXOy3758NZB64/QLBQtpcpXtsFeoeEg7ZPQ xJO9CAlnsfAiNTwKuQvE2K9oozmRgONZlkylGmLtSis= ) ; keytag 35821`
	DNSKEY=35821/SEP is now in the chain-of-trust
	DS=35821/SHA-256 verifies DNSKEY=35821/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jp. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251204184500 20251004184500 35821 jp. LfEPSptHBH2XK/jAB6iTOgvkOvAEHuo5UGNNJgwqONYgCtbb00k1X7y2MNj0eoQHpR+OJ8R5i98f XZ2rm8u6XzH0wdCp9datbUjgSkm/vVNbqm7yNDG90V2YhgxV61snzeCdSpZ43oRJZfvc6FVUHZ1E aoU8ZmK/FhPJ29DXFoVnhviMz0hPe2wMGL5f8pNpDbLI4uOUQq6UkW5nNHZLsAwJPUjO2BB8Hxv6 GVMnzwBU0oL6UZc8ISkYNbPTmcbXvsGlbL4ytx9JZvM5NVazhsCmC5r3hsTCKmSc6uAxXM9KqRHq zefvtgfu7+4BQSGTOzbdABuiQSWqKjZSHKBIqg== )`
	RRSIG=35821 and DNSKEY=35821/SEP verifies the DNSKEY RRset
	DNSKEY=32565 is now in the chain-of-trust
	Query to f.dns.jp for www.rk.sjdc.co.jp/A
	Received 680 bytes from 150.100.6.8
	;; Response received from [150.100.6.8] 680 octets ;; HEADER SECTION ;; id = 64133 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) sjdc.co.jp. 86400 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 86400 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 86400 IN NS ns-579.awsdns-08.net. sjdc.co.jp. 86400 IN NS ns-1788.awsdns-31.co.uk. K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. egHGfQwRcUaHES8O5Sfok/1c2dLwrbKX+UnCvkLEyC1D8veDrD9GpkqXDn8AqoZQ5byYTJlVOv0T wHWeYGfxdR4960dz18bvcQY/jRHyJR9VdTI/B8TeE3YlJo2FrQG4uz7lPBbT9mlg15q0rIzr1ZUD tssbkT3BHXF+qIRo9ho= ) AT4Q0NL595GR5BRLJ9HMOJU8SAHO40QI.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) AT4Q0NL595GR5BRLJ9HMOJU8SAHO40QI.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. NugsYGgExQuyGXuwNJuI1ilyGd2UkBZ8EQU0e44z65tBJA3BT+4fpEcMAL9xsqIlydcvKyCZgsl+ U3Bx2pgkg+bn8qvDQUJ1VCPiRAoAtPif1jDWA+lyk8MIPBxa+68GzFF/vtKiIk8S7nArgFsJn5Av 1SR1/ZL1FOKk4ct9eS4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to h.dns.jp for co.jp/DNSKEY
	Received 484 bytes from 161.232.72.25
	;; Response received from [161.232.72.25] 484 octets ;; HEADER SECTION ;; id = 57408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1761991203 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) jp. 900 IN RRSIG ( SOA 8 1 86400 20251124174503 20251025174503 32565 jp. z64Bu+k2h60CNC6rvRf7JrrjAGklo03er5rH/dkKoIIAxznpp6W6emmnnZO26zhFygNJ9fjsuiyZ BYiwO1RLW7EfQBC0XzkBZDlRbQUTRs+MC1Kt6rRKYsbLbN9jYZrmya55zswCEnq/7x3aN8oKilgC IeEG4fy8GJcso+3CFDM= ) K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) K8D2HBB9BVGEH428NRIO4QRIUB51NDG0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. egHGfQwRcUaHES8O5Sfok/1c2dLwrbKX+UnCvkLEyC1D8veDrD9GpkqXDn8AqoZQ5byYTJlVOv0T wHWeYGfxdR4960dz18bvcQY/jRHyJR9VdTI/B8TeE3YlJo2FrQG4uz7lPBbT9mlg15q0rIzr1ZUD tssbkT3BHXF+qIRo9ho= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.dns.jp for sjdc.co.jp/DNSKEY
	Received 661 bytes from 203.119.1.1
	;; Response received from [203.119.1.1] 661 octets ;; HEADER SECTION ;; id = 30147 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) sjdc.co.jp. 86400 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 86400 IN NS ns-579.awsdns-08.net. sjdc.co.jp. 86400 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 86400 IN NS ns-1788.awsdns-31.co.uk. k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. egHGfQwRcUaHES8O5Sfok/1c2dLwrbKX+UnCvkLEyC1D8veDrD9GpkqXDn8AqoZQ5byYTJlVOv0T wHWeYGfxdR4960dz18bvcQY/jRHyJR9VdTI/B8TeE3YlJo2FrQG4uz7lPBbT9mlg15q0rIzr1ZUD tssbkT3BHXF+qIRo9ho= ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. NugsYGgExQuyGXuwNJuI1ilyGd2UkBZ8EQU0e44z65tBJA3BT+4fpEcMAL9xsqIlydcvKyCZgsl+ U3Bx2pgkg+bn8qvDQUJ1VCPiRAoAtPif1jDWA+lyk8MIPBxa+68GzFF/vtKiIk8S7nArgFsJn5Av 1SR1/ZL1FOKk4ct9eS4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone sjdc.co.jp

sjdc.co.jp

	Checking DS between jp and sjdc.co.jp
	Query to d.dns.jp for sjdc.co.jp/DS
	Received 730 bytes from 210.138.175.244
	;; Response received from [210.138.175.244] 730 octets ;; HEADER SECTION ;; id = 10885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jp. 900 IN SOA ( z.dns.jp. root.dns.jp. 1761991203 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 900 ;minimum ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN NSEC3 ( 1 1 0 - k8dj2s43ibdj8qspiahojjssiaqqkbft TXT RRSIG ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN NSEC3 ( 1 1 0 - at60ujbi2u3f9n0u895pankighp5ku56 NS DS RRSIG ) jp. 900 IN RRSIG ( SOA 8 1 86400 20251124174503 20251025174503 32565 jp. z64Bu+k2h60CNC6rvRf7JrrjAGklo03er5rH/dkKoIIAxznpp6W6emmnnZO26zhFygNJ9fjsuiyZ BYiwO1RLW7EfQBC0XzkBZDlRbQUTRs+MC1Kt6rRKYsbLbN9jYZrmya55zswCEnq/7x3aN8oKilgC IeEG4fy8GJcso+3CFDM= ) k8d2hbb9bvgeh428nrio4qriub51ndg0.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. egHGfQwRcUaHES8O5Sfok/1c2dLwrbKX+UnCvkLEyC1D8veDrD9GpkqXDn8AqoZQ5byYTJlVOv0T wHWeYGfxdR4960dz18bvcQY/jRHyJR9VdTI/B8TeE3YlJo2FrQG4uz7lPBbT9mlg15q0rIzr1ZUD tssbkT3BHXF+qIRo9ho= ) at4q0nl595gr5brlj9hmoju8saho40qi.jp. 900 IN RRSIG ( NSEC3 8 2 900 20251124174503 20251025174503 32565 jp. NugsYGgExQuyGXuwNJuI1ilyGd2UkBZ8EQU0e44z65tBJA3BT+4fpEcMAL9xsqIlydcvKyCZgsl+ U3Bx2pgkg+bn8qvDQUJ1VCPiRAoAtPif1jDWA+lyk8MIPBxa+68GzFF/vtKiIk8S7nArgFsJn5Av 1SR1/ZL1FOKk4ct9eS4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for sjdc.co.jp in the jp zone
	Query to ns-1788.awsdns-31.co.uk for sjdc.co.jp/DNSKEY
	Received 124 bytes from 205.251.198.252
	;; Response received from [205.251.198.252] 124 octets ;; HEADER SECTION ;; id = 20858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sjdc.co.jp. 3600 IN SOA ( ns-1273.awsdns-31.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-1788.awsdns-31.co.uk for www.rk.sjdc.co.jp/A
	Received 219 bytes from 205.251.198.252
	;; Response received from [205.251.198.252] 219 octets ;; HEADER SECTION ;; id = 15886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN A ;; ANSWER SECTION (1 record) www.rk.sjdc.co.jp. 86400 IN CNAME 2lso4gb.x.incapdns.net. ;; AUTHORITY SECTION (4 records) sjdc.co.jp. 3600 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 3600 IN NS ns-1788.awsdns-31.co.uk. sjdc.co.jp. 3600 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 3600 IN NS ns-579.awsdns-08.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1788.awsdns-31.co.uk is authoritative for www.rk.sjdc.co.jp
	Query to ns-1788.awsdns-31.co.uk for rk.sjdc.co.jp/DNSKEY
	Received 127 bytes from 205.251.198.252
	;; Response received from [205.251.198.252] 127 octets ;; HEADER SECTION ;; id = 39060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rk.sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sjdc.co.jp. 3600 IN SOA ( ns-1273.awsdns-31.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1273.awsdns-31.org for www.rk.sjdc.co.jp/DNSKEY
	Received 219 bytes from 205.251.196.249
	;; Response received from [205.251.196.249] 219 octets ;; HEADER SECTION ;; id = 15484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.rk.sjdc.co.jp. IN DNSKEY ;; ANSWER SECTION (1 record) www.rk.sjdc.co.jp. 86400 IN CNAME 2lso4gb.x.incapdns.net. ;; AUTHORITY SECTION (4 records) sjdc.co.jp. 3600 IN NS ns-1273.awsdns-31.org. sjdc.co.jp. 3600 IN NS ns-1788.awsdns-31.co.uk. sjdc.co.jp. 3600 IN NS ns-491.awsdns-61.com. sjdc.co.jp. 3600 IN NS ns-579.awsdns-08.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.rk.sjdc.co.jp is a CNAME to 2lso4gb.x.incapdns.net
	No RRSIGs found

	Query to c.root-servers.net for 2lso4gb.x.incapdns.net/A
	Received 1185 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1185 octets ;; HEADER SECTION ;; id = 54284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . roLW7weegUnDrSjlGKQKmFh5LtqgwOZFfTziILaB0kYYqi/qlMRiF2GSVZMQ1CmGK9VTTzN36Z+O C6CEXiH948jwfrfnaU79gK0KNzCe/8UACxEgCQbbEmoch6JL5Ro4vo+j9GxtyS6JLE0jOJ3uv1OX HyYzWDsLhNtxUQ3pTGbnhcP0Oyiz+7xBGTdu6msT4Ddw6cwNeSqTz+6c2Rkt19TzpxgC4rhRztLw gx4OeDtbLSpytm5ZDmSVYDVT3hQjIqzWCeGXZep7DTwZKUSgsCPwYazW0S1wDWrht5yPcsR6dalF 5fuZjvewzNEd7+S1ZKMHqr7jzgQeDzHxTNuaOg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1160 octets ;; HEADER SECTION ;; id = 3242 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . roLW7weegUnDrSjlGKQKmFh5LtqgwOZFfTziILaB0kYYqi/qlMRiF2GSVZMQ1CmGK9VTTzN36Z+O C6CEXiH948jwfrfnaU79gK0KNzCe/8UACxEgCQbbEmoch6JL5Ro4vo+j9GxtyS6JLE0jOJ3uv1OX HyYzWDsLhNtxUQ3pTGbnhcP0Oyiz+7xBGTdu6msT4Ddw6cwNeSqTz+6c2Rkt19TzpxgC4rhRztLw gx4OeDtbLSpytm5ZDmSVYDVT3hQjIqzWCeGXZep7DTwZKUSgsCPwYazW0S1wDWrht5yPcsR6dalF 5fuZjvewzNEd7+S1ZKMHqr7jzgQeDzHxTNuaOg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 42414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . roLW7weegUnDrSjlGKQKmFh5LtqgwOZFfTziILaB0kYYqi/qlMRiF2GSVZMQ1CmGK9VTTzN36Z+O C6CEXiH948jwfrfnaU79gK0KNzCe/8UACxEgCQbbEmoch6JL5Ro4vo+j9GxtyS6JLE0jOJ3uv1OX HyYzWDsLhNtxUQ3pTGbnhcP0Oyiz+7xBGTdu6msT4Ddw6cwNeSqTz+6c2Rkt19TzpxgC4rhRztLw gx4OeDtbLSpytm5ZDmSVYDVT3hQjIqzWCeGXZep7DTwZKUSgsCPwYazW0S1wDWrht5yPcsR6dalF 5fuZjvewzNEd7+S1ZKMHqr7jzgQeDzHxTNuaOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20251114050000 20251101040000 61809 . roLW7weegUnDrSjlGKQKmFh5LtqgwOZFfTziILaB0kYYqi/qlMRiF2GSVZMQ1CmGK9VTTzN36Z+O C6CEXiH948jwfrfnaU79gK0KNzCe/8UACxEgCQbbEmoch6JL5Ro4vo+j9GxtyS6JLE0jOJ3uv1OX HyYzWDsLhNtxUQ3pTGbnhcP0Oyiz+7xBGTdu6msT4Ddw6cwNeSqTz+6c2Rkt19TzpxgC4rhRztLw gx4OeDtbLSpytm5ZDmSVYDVT3hQjIqzWCeGXZep7DTwZKUSgsCPwYazW0S1wDWrht5yPcsR6dalF 5fuZjvewzNEd7+S1ZKMHqr7jzgQeDzHxTNuaOg== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to h.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 291 octets ;; HEADER SECTION ;; id = 25699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251113141035 20251029140535 37331 net. jk5E/MLcKP8/07vWiQgGVE+V+XX0SPVFj7EbQO/y1PEj0/ZvDdSqJX9qPEZHecJ5hkBTWZwoeFT+ XkW6wwkNsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251113141035 20251029140535 37331 net. jk5E/MLcKP8/07vWiQgGVE+V+XX0SPVFj7EbQO/y1PEj0/ZvDdSqJX9qPEZHecJ5hkBTWZwoeFT+ XkW6wwkNsw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	Query to a.gtld-servers.net for 2lso4gb.x.incapdns.net/A
	Received 1014 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 1014 octets ;; HEADER SECTION ;; id = 27164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 43 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20251108030400 20251101015400 17133 net. +s75jmnLntrv9AaHjQ1UJ2+eo1g2b8bqk4gxZamFx9RC4mINsKRJKYhn17Za0Z7TZZlUFCgE3gup ES3lnA5/5g== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Query to k.gtld-servers.net for incapdns.net/DNSKEY
	Received 1004 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 1004 octets ;; HEADER SECTION ;; id = 38575 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 43 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) incapdns.net. 172800 IN NS ns2.incapdns.net. incapdns.net. 172800 IN NS ns1.incapdns.net. incapdns.net. 172800 IN NS ns4.incapdns.net. incapdns.net. 172800 IN NS ns3.incapdns.net. incapdns.net. 172800 IN NS ns5.incapdns.net. incapdns.net. 172800 IN NS ns6.incapdns.net. incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20251108030400 20251101015400 17133 net. +s75jmnLntrv9AaHjQ1UJ2+eo1g2b8bqk4gxZamFx9RC4mINsKRJKYhn17Za0Z7TZZlUFCgE3gup ES3lnA5/5g== ) ;; ADDITIONAL SECTION (43 records) ns2.incapdns.net. 172800 IN A 198.143.62.11 ns2.incapdns.net. 172800 IN A 198.143.62.2 ns2.incapdns.net. 172800 IN A 198.143.62.200 ns2.incapdns.net. 172800 IN A 198.143.62.3 ns2.incapdns.net. 172800 IN A 198.143.62.5 ns2.incapdns.net. 172800 IN A 198.143.62.7 ns2.incapdns.net. 172800 IN A 198.143.62.9 ns1.incapdns.net. 172800 IN A 198.143.61.11 ns1.incapdns.net. 172800 IN A 198.143.61.2 ns1.incapdns.net. 172800 IN A 198.143.61.200 ns1.incapdns.net. 172800 IN A 198.143.61.3 ns1.incapdns.net. 172800 IN A 198.143.61.5 ns1.incapdns.net. 172800 IN A 198.143.61.7 ns1.incapdns.net. 172800 IN A 198.143.61.9 ns4.incapdns.net. 172800 IN A 198.143.61.101 ns4.incapdns.net. 172800 IN A 198.143.61.103 ns4.incapdns.net. 172800 IN A 198.143.61.105 ns4.incapdns.net. 172800 IN A 198.143.61.107 ns4.incapdns.net. 172800 IN A 198.143.61.109 ns4.incapdns.net. 172800 IN A 198.143.61.129 ns4.incapdns.net. 172800 IN A 198.143.61.250 ns3.incapdns.net. 172800 IN A 198.143.63.11 ns3.incapdns.net. 172800 IN A 198.143.63.2 ns3.incapdns.net. 172800 IN A 198.143.63.200 ns3.incapdns.net. 172800 IN A 198.143.63.3 ns3.incapdns.net. 172800 IN A 198.143.63.5 ns3.incapdns.net. 172800 IN A 198.143.63.7 ns3.incapdns.net. 172800 IN A 198.143.63.9 ns5.incapdns.net. 172800 IN A 198.143.62.101 ns5.incapdns.net. 172800 IN A 198.143.62.103 ns5.incapdns.net. 172800 IN A 198.143.62.105 ns5.incapdns.net. 172800 IN A 198.143.62.107 ns5.incapdns.net. 172800 IN A 198.143.62.109 ns5.incapdns.net. 172800 IN A 198.143.62.129 ns5.incapdns.net. 172800 IN A 198.143.62.250 ns6.incapdns.net. 172800 IN A 198.143.63.101 ns6.incapdns.net. 172800 IN A 198.143.63.103 ns6.incapdns.net. 172800 IN A 198.143.63.105 ns6.incapdns.net. 172800 IN A 198.143.63.107 ns6.incapdns.net. 172800 IN A 198.143.63.109 ns6.incapdns.net. 172800 IN A 198.143.63.129 ns6.incapdns.net. 172800 IN A 198.143.63.250 ;; { "EDNS-VERSION": 0 }
	Found child zone incapdns.net

incapdns.net

	Checking DS between net and incapdns.net
	Query to l.gtld-servers.net for incapdns.net/DS
	Received 1116 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 1116 octets ;; HEADER SECTION ;; id = 27437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DS ;; ANSWER SECTION (3 records) incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 ) incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e ) incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20251108030400 20251101015400 17133 net. +s75jmnLntrv9AaHjQ1UJ2+eo1g2b8bqk4gxZamFx9RC4mINsKRJKYhn17Za0Z7TZZlUFCgE3gup ES3lnA5/5g== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20251105031044 20251029020044 17133 net. 1R4hI3rTiUIEol2zGxcS3RocelcjclfDcK7/x9NNko2XaBgY3gLMDAGync3bHKgcByCy5iB1zP3m G3NsG3HJSQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for incapdns.net in the net zone
	DS=31229/SHA-1 uses a deprecated digest algorithm
	DS=31229/SHA-1 has algorithm RSASHA256
	DS=31229/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`incapdns.net. 86400 IN RRSIG ( DS 13 2 86400 20251108030400 20251101015400 17133 net. +s75jmnLntrv9AaHjQ1UJ2+eo1g2b8bqk4gxZamFx9RC4mINsKRJKYhn17Za0Z7TZZlUFCgE3gup ES3lnA5/5g== )`
	RRSIG=17133 and DNSKEY=17133 verifies the DS RRset
	DS=31229/SHA-1 is now in the chain-of-trust
	`incapdns.net. 86400 IN DS ( 31229 8 1 c100f03bab77713ecf1794a952c546740cded429 )`
	`incapdns.net. 86400 IN DS ( 31229 8 2 1e6b38737e155bb03abbd5876e37bd375c415a354e170e55a905b07bfbccb25e )`
	Query to ns1.incapdns.net for incapdns.net/DNSKEY
	Received 765 bytes from 198.143.61.9
	;; Response received from [198.143.61.9] 765 octets ;; HEADER SECTION ;; id = 5736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN DNSKEY ;; ANSWER SECTION (3 records) incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaoFBWWlPnewRWd0IVaX+Fhar2Zh+KZxbNNkjM/emJz1hVrGZdUf0FO8wK21ICdmCCNjzApA XLudPtCVIpMl8PuFP+NARQsVbjiPQvd06x6s6gZG7KOSWiO6bloeaAy735ZeNOw1Frgo/gh1Wbi6 ZcgxwPLRqEK8nEPIauVjFJ7XH9WwxwmqPpKGZomofOBoglZ5Llfwx2e6u7guvVt/d2b8pYeeSokA 1is2RlRcZjyFT3KQaaTlhGO+Tdr7E+nyYaCWPYh/jwkP2onaZuZSbHkYchhLlqDOeolATLi/ZWB+ 45buowiJj4ECXfX9cnT7OPqi21RU/8wbvcLmMklE2ZU= ) ; keytag 31229 incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZLe605y4ZSd5pdeSgkqtD5O38JZe234nRjFtuyzNCtZpF4gr9FiDXBOxT9j6Z/ZzieGe/E1 jc4PIrHzCnzpiNliLbuubOyxhJV2lamUaJkfimiTrDBZuM1pX9DEsvm2BBpLI/uT5ycibk1PwYJT cFSY6BPUm5hQYEDcGIHa5dqL ) ; keytag 2929 incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251122000000 20240722000000 31229 incapdns.net. c9sSGK6VXm+avqRDjEvcGc5NOytpcgWa5m0WVkwl92kOq3WcOz4XlOPlc2kpt57X1FGMnWQakOMD OODGs9/72+to01eoPWfsZ7O9dj5a4PLAoWDsj3oncU4RJlkdw+rYmOeuhvl50Iq9U7IbD2qXqMP1 ND7UnPwhYmAVR7yf7p+YTIcIUPaPhpx4WrkahchPbNjK7aOxkbUOfgMTog2d9a4v3jQ/hTVeouWg dt6vK5LXVW2bRK2XNGvvDYcVX1hbvmH/mgLjgTbNPkRCohK4ugpJ1Dou+G0DJ7QhndqhwnzHUZiP M8786BUQsR50hYr8kGvHSMTvsNn9sCSayXe+sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for incapdns.net
	`incapdns.net. 3600 IN DNSKEY ( 257 3 8 AwEAAaoFBWWlPnewRWd0IVaX+Fhar2Zh+KZxbNNkjM/emJz1hVrGZdUf0FO8wK21ICdmCCNjzApA XLudPtCVIpMl8PuFP+NARQsVbjiPQvd06x6s6gZG7KOSWiO6bloeaAy735ZeNOw1Frgo/gh1Wbi6 ZcgxwPLRqEK8nEPIauVjFJ7XH9WwxwmqPpKGZomofOBoglZ5Llfwx2e6u7guvVt/d2b8pYeeSokA 1is2RlRcZjyFT3KQaaTlhGO+Tdr7E+nyYaCWPYh/jwkP2onaZuZSbHkYchhLlqDOeolATLi/ZWB+ 45buowiJj4ECXfX9cnT7OPqi21RU/8wbvcLmMklE2ZU= ) ; keytag 31229`
	`incapdns.net. 3600 IN DNSKEY ( 256 3 8 AwEAAZLe605y4ZSd5pdeSgkqtD5O38JZe234nRjFtuyzNCtZpF4gr9FiDXBOxT9j6Z/ZzieGe/E1 jc4PIrHzCnzpiNliLbuubOyxhJV2lamUaJkfimiTrDBZuM1pX9DEsvm2BBpLI/uT5ycibk1PwYJT cFSY6BPUm5hQYEDcGIHa5dqL ) ; keytag 2929`
	DNSKEY=31229/SEP is now in the chain-of-trust
	DS=31229/SHA-1 verifies DNSKEY=31229/SEP
	DS=31229/SHA-256 verifies DNSKEY=31229/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`incapdns.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251122000000 20240722000000 31229 incapdns.net. c9sSGK6VXm+avqRDjEvcGc5NOytpcgWa5m0WVkwl92kOq3WcOz4XlOPlc2kpt57X1FGMnWQakOMD OODGs9/72+to01eoPWfsZ7O9dj5a4PLAoWDsj3oncU4RJlkdw+rYmOeuhvl50Iq9U7IbD2qXqMP1 ND7UnPwhYmAVR7yf7p+YTIcIUPaPhpx4WrkahchPbNjK7aOxkbUOfgMTog2d9a4v3jQ/hTVeouWg dt6vK5LXVW2bRK2XNGvvDYcVX1hbvmH/mgLjgTbNPkRCohK4ugpJ1Dou+G0DJ7QhndqhwnzHUZiP M8786BUQsR50hYr8kGvHSMTvsNn9sCSayXe+sw== )`
	RRSIG=31229 and DNSKEY=31229/SEP verifies the DNSKEY RRset
	DNSKEY=2929 is now in the chain-of-trust
	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.5
	;; Response received from [198.143.62.5] 239 octets ;; HEADER SECTION ;; id = 24368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns1.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.200
	;; Response received from [198.143.61.200] 533 octets ;; HEADER SECTION ;; id = 1703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.62.250
	;; Response received from [198.143.62.250] 541 octets ;; HEADER SECTION ;; id = 46664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns1.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.5
	;; Response received from [198.143.61.5] 277 octets ;; HEADER SECTION ;; id = 56310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.62.105
	;; Response received from [198.143.62.105] 277 octets ;; HEADER SECTION ;; id = 15317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.63.7
	;; Response received from [198.143.63.7] 277 octets ;; HEADER SECTION ;; id = 58462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.61.109
	;; Response received from [198.143.61.109] 277 octets ;; HEADER SECTION ;; id = 7179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for incapdns.net/SOA
	Received 277 bytes from 198.143.63.109
	;; Response received from [198.143.63.109] 277 octets ;; HEADER SECTION ;; id = 52918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; incapdns.net. IN SOA ;; ANSWER SECTION (2 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.200
	;; Response received from [198.143.62.200] 239 octets ;; HEADER SECTION ;; id = 18330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns1.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.5
	;; Response received from [198.143.61.5] 239 octets ;; HEADER SECTION ;; id = 28776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns4.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.61.109
	;; Response received from [198.143.61.109] 533 octets ;; HEADER SECTION ;; id = 54891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.61.250
	;; Response received from [198.143.61.250] 541 octets ;; HEADER SECTION ;; id = 44384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns1.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.9
	;; Response received from [198.143.61.9] 239 octets ;; HEADER SECTION ;; id = 21691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns3.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.11
	;; Response received from [198.143.63.11] 239 octets ;; HEADER SECTION ;; id = 34661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns5.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.129
	;; Response received from [198.143.62.129] 533 octets ;; HEADER SECTION ;; id = 10923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.61.250
	;; Response received from [198.143.61.250] 541 octets ;; HEADER SECTION ;; id = 26427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns3.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.9
	;; Response received from [198.143.63.9] 239 octets ;; HEADER SECTION ;; id = 7296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.101
	;; Response received from [198.143.61.101] 239 octets ;; HEADER SECTION ;; id = 8069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns5.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.62.107
	;; Response received from [198.143.62.107] 533 octets ;; HEADER SECTION ;; id = 11434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.61.109
	;; Response received from [198.143.61.109] 541 octets ;; HEADER SECTION ;; id = 32514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns4.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.61.103
	;; Response received from [198.143.61.103] 239 octets ;; HEADER SECTION ;; id = 45038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns5.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.250
	;; Response received from [198.143.62.250] 239 octets ;; HEADER SECTION ;; id = 23869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns6.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.63.101
	;; Response received from [198.143.63.101] 533 octets ;; HEADER SECTION ;; id = 102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.63.250
	;; Response received from [198.143.63.250] 541 octets ;; HEADER SECTION ;; id = 51916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns5.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.62.103
	;; Response received from [198.143.62.103] 239 octets ;; HEADER SECTION ;; id = 20232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

incapdns.net

	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.250
	;; Response received from [198.143.63.250] 239 octets ;; HEADER SECTION ;; id = 26657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.incapdns.net is authoritative for 2lso4gb.x.incapdns.net
	Query to ns6.incapdns.net for x.incapdns.net/DNSKEY
	Received 533 bytes from 198.143.63.107
	;; Response received from [198.143.63.107] 533 octets ;; HEADER SECTION ;; id = 56065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) incapdns.net. 300 IN SOA ( ns1.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) incapdns.net. 300 IN RRSIG ( SOA 8 2 300 20251122000000 20240722000000 2929 incapdns.net. crYC4w3w0rYjwlTOP2OwsPXC7f597OYESaesab/bMoDnTazI+kYaNNkXsvi9PKYw5Z2btbStRNZ9 lVx8a1H6KJEBTXjJNdkDAdibK+I5E1XdZtrsYRgG4rru6+OfpsQ+6002kLzmjfZd8GxxE8WH2Z9E pD/umz5UfCOAzl6YdYQ= ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 aehvf40773c2bmlij7i6vqgc8rhqai03 TXT RRSIG ) aehpke8tfe3hugnm5gof5ofbhp0vp6nt.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. bSex0AaY3C2JCk6+3tn5Yx/fQW70L0JVy3z6ngryb3EhlgHI5boUYhAmV2aWtxkG1eNn0kVyazXh 2DLJFtp3VAXzSJKhdA/SRtmSHy6y4N3WgMIpvf3ftt7lVZxbqoT5KQFV5diNBzxSLnzWRl4hJRT/ w+YvQjc9DR/CxZZF258= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/DNSKEY
	Received 541 bytes from 198.143.63.103
	;; Response received from [198.143.63.103] 541 octets ;; HEADER SECTION ;; id = 39547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) x.incapdns.net. 300 IN SOA ( ns1.x.incapdns.net. hostmaster.incapsula.com. 5 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 60 ;minimum ) x.incapdns.net. 300 IN RRSIG ( SOA 8 3 300 20251122000000 20240722000000 2929 incapdns.net. BgbuuC9AFkOi67Hd9NQWCNCnrKqs3s0lzUgiRcAgIgnBVQqQKznttvItWlJquSWlKHNXZinvA4of gqmSYEHERvizTOvrVB6Cqrz0GdtAZ5ffT6lgPpPDlMkJTZk8z5pvKfcTB08AoUBMmmsE2ot4YemG piZvia/0u2A05hhqMLI= ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN NSEC3 ( 1 0 14 b14e53 k729v3185kehnha2ae8p2458tu64c0u8 A RRSIG ) k729q532ln2rbtafjs27rno948566fba.incapdns.net. 60 IN RRSIG ( NSEC3 8 3 60 20251122000000 20240722000000 2929 incapdns.net. B15xox6T3o9NTSRlfeS9cjprZjk46RniyILHcRmKgAeP7pjPDi6oe/dJR+dWpeeFSMYw4YETmUwO Ikn9sdtupUzgO0cKnLe6hWvtrBougEqx7n9MYkDjK0I6bzhGihyzYHVU5oyqU4/w6ZGrEaZ/j7F8 aU3PSO/EG7l+CDWH/SQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by incapdns.net zone
	Query to ns6.incapdns.net for 2lso4gb.x.incapdns.net/A
	Received 239 bytes from 198.143.63.107
	;; Response received from [198.143.63.107] 239 octets ;; HEADER SECTION ;; id = 48152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 2lso4gb.x.incapdns.net. IN A ;; ANSWER SECTION (2 records) 2lso4gb.x.incapdns.net. 30 IN A 45.60.77.56 2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	2lso4gb.x.incapdns.net A RR has value 45.60.77.56
	Found 1 RRSIGs over A RRset
	`2lso4gb.x.incapdns.net. 30 IN RRSIG ( A 8 4 30 20251122000000 20240722000000 2929 incapdns.net. bVCDsUB0KN3NyL6aSMFGdf66fFrzjzmhXu3VWW2UUT0eJ8S9cI7PBrA7n0YtyCYLstGz3gHihE8m ibZN0zvYgDjYw+U9x4U7Uf6nn0fNnwdDMo4QhBsLChFHjphOoy0KBel2UtdDm4QFBeF2ouTpBxAn 6vOkilEd/SS62s8/Ass= )`
	RRSIG=2929 and DNSKEY=2929 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.rk.sjdc.co.jp at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: