DNSSEC Analyzer - xn--wgbh1c

Domain Name:

Time: 2023-12-08 02:12:29 UTC, NTP stratum 16

Analyzing DNSSEC problems for xn--wgbh1c

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 7736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to a.root-servers.net for xn--wgbh1c/A
	Received 556 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (556 octets) ;; HEADER SECTION ;; id = 18144 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xn--wgbh1c. 172800 IN NS ns3.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns2.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns1.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns4.dotmasr.eg. xn--wgbh1c. 86400 IN DS 65350 13 1 746dd718f1bdae3b4f2578767c4b47a039501641 xn--wgbh1c. 86400 IN DS ( 65350 13 2 5ece34228c4114fc455e07f4bb4b3df8b501d874c4a4070acbb378f41f17a0e5 ) xn--wgbh1c. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . mY1rSEVrWFRtzIEew9d5oTb0SK93nz28LG3A/ahw+ojkKBMHwtqIn9vU8r3AjDWjNcfDJQdF8i0Q zYAFlXh3SeYGgBFXi+c0hrJ1THkdetpmXgCsnKrkurBxNv1u/BnkPlYSxFmkHH8Ok4VA/Y2mKAuh LEtcTRG8wyR6wDtbaAxbUAT0N1L2bjllt8luSTkgYNpm+BPVPR5Wq2DxtbqfCR3Lw01k32WQy7+0 DRPDzd6JXJJ104Fb0OHaLm68F0SY/yDU64NdgrhOrnkrvDPbn3ClodTdOPShK/OAy5m7mVyOGKiW FZXTSdv7xKYDgvqcVp+d2yqW6OFW4GhH1d9FMA== ) ;; ADDITIONAL SECTION (5 records) ns3.dotmasr.eg. 172800 IN A 81.10.38.11 ns2.dotmasr.eg. 172800 IN A 81.21.99.11 ns1.dotmasr.eg. 172800 IN A 81.21.97.155 ns4.dotmasr.eg. 172800 IN A 204.61.216.106 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for xn--wgbh1c/DNSKEY
	Received 556 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (556 octets) ;; HEADER SECTION ;; id = 25436 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xn--wgbh1c. 172800 IN NS ns1.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns2.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns3.dotmasr.eg. xn--wgbh1c. 172800 IN NS ns4.dotmasr.eg. xn--wgbh1c. 86400 IN DS 65350 13 1 746dd718f1bdae3b4f2578767c4b47a039501641 xn--wgbh1c. 86400 IN DS ( 65350 13 2 5ece34228c4114fc455e07f4bb4b3df8b501d874c4a4070acbb378f41f17a0e5 ) xn--wgbh1c. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . mY1rSEVrWFRtzIEew9d5oTb0SK93nz28LG3A/ahw+ojkKBMHwtqIn9vU8r3AjDWjNcfDJQdF8i0Q zYAFlXh3SeYGgBFXi+c0hrJ1THkdetpmXgCsnKrkurBxNv1u/BnkPlYSxFmkHH8Ok4VA/Y2mKAuh LEtcTRG8wyR6wDtbaAxbUAT0N1L2bjllt8luSTkgYNpm+BPVPR5Wq2DxtbqfCR3Lw01k32WQy7+0 DRPDzd6JXJJ104Fb0OHaLm68F0SY/yDU64NdgrhOrnkrvDPbn3ClodTdOPShK/OAy5m7mVyOGKiW FZXTSdv7xKYDgvqcVp+d2yqW6OFW4GhH1d9FMA== ) ;; ADDITIONAL SECTION (5 records) ns1.dotmasr.eg. 172800 IN A 81.21.97.155 ns2.dotmasr.eg. 172800 IN A 81.21.99.11 ns3.dotmasr.eg. 172800 IN A 81.10.38.11 ns4.dotmasr.eg. 172800 IN A 204.61.216.106 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone xn--wgbh1c

xn--wgbh1c

	Checking DS between . and xn--wgbh1c
	Query to h.root-servers.net for xn--wgbh1c/DS
	Received 410 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (410 octets) ;; HEADER SECTION ;; id = 13249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN DS ;; ANSWER SECTION (3 records) xn--wgbh1c. 86400 IN DS 65350 13 1 746dd718f1bdae3b4f2578767c4b47a039501641 xn--wgbh1c. 86400 IN DS ( 65350 13 2 5ece34228c4114fc455e07f4bb4b3df8b501d874c4a4070acbb378f41f17a0e5 ) xn--wgbh1c. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . mY1rSEVrWFRtzIEew9d5oTb0SK93nz28LG3A/ahw+ojkKBMHwtqIn9vU8r3AjDWjNcfDJQdF8i0Q zYAFlXh3SeYGgBFXi+c0hrJ1THkdetpmXgCsnKrkurBxNv1u/BnkPlYSxFmkHH8Ok4VA/Y2mKAuh LEtcTRG8wyR6wDtbaAxbUAT0N1L2bjllt8luSTkgYNpm+BPVPR5Wq2DxtbqfCR3Lw01k32WQy7+0 DRPDzd6JXJJ104Fb0OHaLm68F0SY/yDU64NdgrhOrnkrvDPbn3ClodTdOPShK/OAy5m7mVyOGKiW FZXTSdv7xKYDgvqcVp+d2yqW6OFW4GhH1d9FMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for xn--wgbh1c in the . zone
	DS=65350/SHA-1 has algorithm ECDSAP256SHA256
	DS=65350/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`xn--wgbh1c. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . mY1rSEVrWFRtzIEew9d5oTb0SK93nz28LG3A/ahw+ojkKBMHwtqIn9vU8r3AjDWjNcfDJQdF8i0Q zYAFlXh3SeYGgBFXi+c0hrJ1THkdetpmXgCsnKrkurBxNv1u/BnkPlYSxFmkHH8Ok4VA/Y2mKAuh LEtcTRG8wyR6wDtbaAxbUAT0N1L2bjllt8luSTkgYNpm+BPVPR5Wq2DxtbqfCR3Lw01k32WQy7+0 DRPDzd6JXJJ104Fb0OHaLm68F0SY/yDU64NdgrhOrnkrvDPbn3ClodTdOPShK/OAy5m7mVyOGKiW FZXTSdv7xKYDgvqcVp+d2yqW6OFW4GhH1d9FMA== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=65350/SHA-1 is now in the chain-of-trust
	`xn--wgbh1c. 86400 IN DS 65350 13 1 746dd718f1bdae3b4f2578767c4b47a039501641`
	`xn--wgbh1c. 86400 IN DS ( 65350 13 2 5ece34228c4114fc455e07f4bb4b3df8b501d874c4a4070acbb378f41f17a0e5 )`
	Query to ns1.dotmasr.eg for xn--wgbh1c/DNSKEY
	Received 305 bytes from 81.21.97.155
	;; Response received from 81.21.97.155 (305 octets) ;; HEADER SECTION ;; id = 62503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN DNSKEY ;; ANSWER SECTION (3 records) xn--wgbh1c. 3600 IN DNSKEY ( 256 3 13 6OBcWfse9EP+sNa5lfW23pBvI6XqnpNc/5t47urSN9CMJsQ/wqnrzvJ7A+UHE0DXaYY8kLLgIjOF o6Wu6xFbCA== ) ; Key ID = 20968 xn--wgbh1c. 3600 IN DNSKEY ( 257 3 13 1EQyY/oqHVLIYgbb6oel4k0Z4PIMW5wLBM1vQmw8sPAAHaqVRzt35Y0By1pkKpBU8XMiUNJbi4Kc f2beEF/ZrQ== ) ; Key ID = 65350 xn--wgbh1c. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240107014502 20231208014502 65350 xn--wgbh1c. 4OuTPrjKuufBkm+B5IjTT5WwJw6iS1kvULIUJSrd1NxSCmUn3Z9ygjmVkyR+8XJr3+iFCspreKIJ mkdXNCNq4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for xn--wgbh1c
	`xn--wgbh1c. 3600 IN DNSKEY ( 256 3 13 6OBcWfse9EP+sNa5lfW23pBvI6XqnpNc/5t47urSN9CMJsQ/wqnrzvJ7A+UHE0DXaYY8kLLgIjOF o6Wu6xFbCA== ) ; Key ID = 20968`
	`xn--wgbh1c. 3600 IN DNSKEY ( 257 3 13 1EQyY/oqHVLIYgbb6oel4k0Z4PIMW5wLBM1vQmw8sPAAHaqVRzt35Y0By1pkKpBU8XMiUNJbi4Kc f2beEF/ZrQ== ) ; Key ID = 65350`
	DNSKEY=65350/SEP is now in the chain-of-trust
	DS=65350/SHA-1 verifies DNSKEY=65350/SEP
	DS=65350/SHA-256 verifies DNSKEY=65350/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xn--wgbh1c. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240107014502 20231208014502 65350 xn--wgbh1c. 4OuTPrjKuufBkm+B5IjTT5WwJw6iS1kvULIUJSrd1NxSCmUn3Z9ygjmVkyR+8XJr3+iFCspreKIJ mkdXNCNq4w== )`
	RRSIG=65350 and DNSKEY=65350/SEP verifies the DNSKEY RRset
	DNSKEY=20968 is now in the chain-of-trust
	Query to ns4.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 204.61.216.106
	;; Response received from 204.61.216.106 (395 octets) ;; HEADER SECTION ;; id = 25520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023092526 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20231025094502 20230925094502 20968 xn--wgbh1c. AdNNvfo9jI14LVURf7C1T5etbXsMtogTkS/sHfZIfdnJZMScWpYGNNnuHlGQ4hGqluPmqi0xoaex giplaQLmFg== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20231025094502 20230925094502 20968 xn--wgbh1c. bO80EKrA2tUQGqiL0B40HJOWCjXA4DHGfE3bKh6C+fkIcXXkMpyoowcMQBn0YJPCO2WYqCODiu/S qFg+pfE82w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.dotmasr.eg is authoritative for xn--wgbh1c
	Found RRSIG signed by xn--wgbh1c zone
	Query to ns3.dotmasr.eg for xn--wgbh1c/SOA
	Received 1147 bytes from 81.10.38.11
	;; Response received from 81.10.38.11 (1147 octets) ;; HEADER SECTION ;; id = 3264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN SOA ;; ANSWER SECTION (2 records) xn--wgbh1c. 3600 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 3600 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) ;; AUTHORITY SECTION (5 records) xn--wgbh1c. 3600 IN NS ns2.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns4.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns3.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns1.dotmasr.eg. xn--wgbh1c. 3600 IN RRSIG ( NS 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. C5EtkdJsQGu7fIAmR9jkiT8AoNpwperVTfK6pOO1w/eHopoUK0R3JILif56iDnfV/w47S77GxkjH ZRYhvv1Eag== ) ;; ADDITIONAL SECTION (10 records) ns1.dotmasr.eg. 3600 IN A 81.21.97.155 ns2.dotmasr.eg. 3600 IN A 81.21.99.11 ns3.dotmasr.eg. 3600 IN A 81.10.38.11 ns4.dotmasr.eg. 3600 IN A 204.61.216.106 ns4.dotmasr.eg. 3600 IN AAAA 2001:500:14:6106:ad::1 ns1.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. JkTSgUvCiy4yDSRFzB6yLoqC3xYyQRfBopHFC1fIT9WytBHGcqMkEMV8J1DA7Wmy5RH2eW9uFXe9 xvMBMUVQWvWtz0kVHoJuEz+jH38oZbe3rJqCrQ9OYxzqmvzG7WmmaELhkS9DOMNbF4TizoN/Tpq7 5b7dGwJoRURkxbvU9CQ= ) ns2.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. XHzDYUHoxFVNhetJlKJU2XE7rBoCAfe1PopO4HG97ScQPBfpDstv5gVM/ZbKMVdX4oGwOReHGrzb pypDD1yQ74A5iQw4Wf/f5b42QrbPf8vmPej+Qgb2wziIbkbiX0Yo2H/UNojFIbDzdqZD1KZqOYMW Hi8HCoSVd0eq25/nboI= ) ns3.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. wvg8swEJSurp2phmrAsYFmoJXK2TKb6SQdc4D0FwhAcvqurOpHPEskkYXE3C/FELxMW6DXic6sMA OGebCKlR0vHpQaOu4dLR1nANfK4c9EGU4EBIflU8YfPVo5UjPcgbCoIRIjyE4OXK6PVXR0p9jkta 0y96fY2zQSVRaZg6rkw= ) ns4.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. vKjVGJ0eudt1NpoNKZ33e8fWzpj2+6xA6lU5fDO/bdJi/PRCa4aXKormRVTh26iUpMGOzvU1k5Qa 99HMFdRD7R4rneuKjJ6R/8pRqi+YZf8V/fOhPpZN063aWsi3VqxPUXHRRnDI780Q+E0e+ud3uyqa 39rthn3rI9ZLikC6pVw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.dotmasr.eg for xn--wgbh1c/SOA
	Received 1147 bytes from 81.21.99.11
	;; Response received from 81.21.99.11 (1147 octets) ;; HEADER SECTION ;; id = 4888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN SOA ;; ANSWER SECTION (2 records) xn--wgbh1c. 3600 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 3600 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) ;; AUTHORITY SECTION (5 records) xn--wgbh1c. 3600 IN NS ns3.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns4.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns2.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns1.dotmasr.eg. xn--wgbh1c. 3600 IN RRSIG ( NS 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. C5EtkdJsQGu7fIAmR9jkiT8AoNpwperVTfK6pOO1w/eHopoUK0R3JILif56iDnfV/w47S77GxkjH ZRYhvv1Eag== ) ;; ADDITIONAL SECTION (10 records) ns1.dotmasr.eg. 3600 IN A 81.21.97.155 ns2.dotmasr.eg. 3600 IN A 81.21.99.11 ns3.dotmasr.eg. 3600 IN A 81.10.38.11 ns4.dotmasr.eg. 3600 IN A 204.61.216.106 ns4.dotmasr.eg. 3600 IN AAAA 2001:500:14:6106:ad::1 ns1.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. JkTSgUvCiy4yDSRFzB6yLoqC3xYyQRfBopHFC1fIT9WytBHGcqMkEMV8J1DA7Wmy5RH2eW9uFXe9 xvMBMUVQWvWtz0kVHoJuEz+jH38oZbe3rJqCrQ9OYxzqmvzG7WmmaELhkS9DOMNbF4TizoN/Tpq7 5b7dGwJoRURkxbvU9CQ= ) ns2.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. XHzDYUHoxFVNhetJlKJU2XE7rBoCAfe1PopO4HG97ScQPBfpDstv5gVM/ZbKMVdX4oGwOReHGrzb pypDD1yQ74A5iQw4Wf/f5b42QrbPf8vmPej+Qgb2wziIbkbiX0Yo2H/UNojFIbDzdqZD1KZqOYMW Hi8HCoSVd0eq25/nboI= ) ns3.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. wvg8swEJSurp2phmrAsYFmoJXK2TKb6SQdc4D0FwhAcvqurOpHPEskkYXE3C/FELxMW6DXic6sMA OGebCKlR0vHpQaOu4dLR1nANfK4c9EGU4EBIflU8YfPVo5UjPcgbCoIRIjyE4OXK6PVXR0p9jkta 0y96fY2zQSVRaZg6rkw= ) ns4.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. vKjVGJ0eudt1NpoNKZ33e8fWzpj2+6xA6lU5fDO/bdJi/PRCa4aXKormRVTh26iUpMGOzvU1k5Qa 99HMFdRD7R4rneuKjJ6R/8pRqi+YZf8V/fOhPpZN063aWsi3VqxPUXHRRnDI780Q+E0e+ud3uyqa 39rthn3rI9ZLikC6pVw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.dotmasr.eg for xn--wgbh1c/SOA
	Received 1147 bytes from 81.21.97.155
	;; Response received from 81.21.97.155 (1147 octets) ;; HEADER SECTION ;; id = 4883 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN SOA ;; ANSWER SECTION (2 records) xn--wgbh1c. 3600 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 3600 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) ;; AUTHORITY SECTION (5 records) xn--wgbh1c. 3600 IN NS ns1.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns2.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns4.dotmasr.eg. xn--wgbh1c. 3600 IN NS ns3.dotmasr.eg. xn--wgbh1c. 3600 IN RRSIG ( NS 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. C5EtkdJsQGu7fIAmR9jkiT8AoNpwperVTfK6pOO1w/eHopoUK0R3JILif56iDnfV/w47S77GxkjH ZRYhvv1Eag== ) ;; ADDITIONAL SECTION (10 records) ns1.dotmasr.eg. 3600 IN A 81.21.97.155 ns2.dotmasr.eg. 3600 IN A 81.21.99.11 ns3.dotmasr.eg. 3600 IN A 81.10.38.11 ns4.dotmasr.eg. 3600 IN A 204.61.216.106 ns4.dotmasr.eg. 3600 IN AAAA 2001:500:14:6106:ad::1 ns1.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. JkTSgUvCiy4yDSRFzB6yLoqC3xYyQRfBopHFC1fIT9WytBHGcqMkEMV8J1DA7Wmy5RH2eW9uFXe9 xvMBMUVQWvWtz0kVHoJuEz+jH38oZbe3rJqCrQ9OYxzqmvzG7WmmaELhkS9DOMNbF4TizoN/Tpq7 5b7dGwJoRURkxbvU9CQ= ) ns2.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. XHzDYUHoxFVNhetJlKJU2XE7rBoCAfe1PopO4HG97ScQPBfpDstv5gVM/ZbKMVdX4oGwOReHGrzb pypDD1yQ74A5iQw4Wf/f5b42QrbPf8vmPej+Qgb2wziIbkbiX0Yo2H/UNojFIbDzdqZD1KZqOYMW Hi8HCoSVd0eq25/nboI= ) ns3.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. wvg8swEJSurp2phmrAsYFmoJXK2TKb6SQdc4D0FwhAcvqurOpHPEskkYXE3C/FELxMW6DXic6sMA OGebCKlR0vHpQaOu4dLR1nANfK4c9EGU4EBIflU8YfPVo5UjPcgbCoIRIjyE4OXK6PVXR0p9jkta 0y96fY2zQSVRaZg6rkw= ) ns4.dotmasr.eg. 3600 IN RRSIG ( A 8 3 3600 20200920103530 20200324093530 18933 dotmasr.eg. vKjVGJ0eudt1NpoNKZ33e8fWzpj2+6xA6lU5fDO/bdJi/PRCa4aXKormRVTh26iUpMGOzvU1k5Qa 99HMFdRD7R4rneuKjJ6R/8pRqi+YZf8V/fOhPpZN063aWsi3VqxPUXHRRnDI780Q+E0e+ud3uyqa 39rthn3rI9ZLikC6pVw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 204.61.216.106
	;; Response received from 204.61.216.106 (395 octets) ;; HEADER SECTION ;; id = 55669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023092526 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20231025094502 20230925094502 20968 xn--wgbh1c. AdNNvfo9jI14LVURf7C1T5etbXsMtogTkS/sHfZIfdnJZMScWpYGNNnuHlGQ4hGqluPmqi0xoaex giplaQLmFg== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20231025094502 20230925094502 20968 xn--wgbh1c. bO80EKrA2tUQGqiL0B40HJOWCjXA4DHGfE3bKh6C+fkIcXXkMpyoowcMQBn0YJPCO2WYqCODiu/S qFg+pfE82w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20231025094502 20230925094502 20968 xn--wgbh1c. AdNNvfo9jI14LVURf7C1T5etbXsMtogTkS/sHfZIfdnJZMScWpYGNNnuHlGQ4hGqluPmqi0xoaex giplaQLmFg== )`
	RRSIG=20968 is expired
	None of the 1 RRSIG and 2 DNSKEY records validate the SOA RRset
	The SOA RRset was not signed by any trusted keys

xn--wgbh1c

	Query to ns2.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.21.99.11
	;; Response received from 81.21.99.11 (395 octets) ;; HEADER SECTION ;; id = 37577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.dotmasr.eg is authoritative for xn--wgbh1c
	Found RRSIG signed by xn--wgbh1c zone
	Query to ns2.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.21.99.11
	;; Response received from 81.21.99.11 (395 octets) ;; HEADER SECTION ;; id = 40038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== )`
	RRSIG=20968 and DNSKEY=20968 verifies the SOA RRset

xn--wgbh1c

	Query to ns3.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.10.38.11
	;; Response received from 81.10.38.11 (395 octets) ;; HEADER SECTION ;; id = 52980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.dotmasr.eg is authoritative for xn--wgbh1c
	Found RRSIG signed by xn--wgbh1c zone
	Query to ns3.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.10.38.11
	;; Response received from 81.10.38.11 (395 octets) ;; HEADER SECTION ;; id = 63465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== )`
	RRSIG=20968 and DNSKEY=20968 verifies the SOA RRset

xn--wgbh1c

	Query to ns1.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.21.97.155
	;; Response received from 81.21.97.155 (395 octets) ;; HEADER SECTION ;; id = 60929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.dotmasr.eg is authoritative for xn--wgbh1c
	Found RRSIG signed by xn--wgbh1c zone
	Query to ns1.dotmasr.eg for xn--wgbh1c/A
	Received 395 bytes from 81.21.97.155
	;; Response received from 81.21.97.155 (395 octets) ;; HEADER SECTION ;; id = 4601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xn--wgbh1c. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--wgbh1c. 900 IN SOA ( ns1.dotmasr.eg. admin.dotmasr.eg. 2023120810 ;serial 21600 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN NSEC3 ( 1 0 10 09bbfc2a9a64a9a9 tb23tpflo861lnv6v9qgn3h07204v221 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) T4MMDQN5G5ER9D8GJLEFP33S17FC9VHA.xn--wgbh1c. 900 IN RRSIG ( NSEC3 13 2 900 20240107014502 20231208014502 20968 xn--wgbh1c. 1O7D1v+udYcMA0J5nXk7kptLAUuFCYrnYETJ2NjYBrnAFdKxjh5Ezs7Yas08ZnxJ4QXwd6ILc5Xj IG1ZV4vpgA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--wgbh1c. 900 IN RRSIG ( SOA 13 1 3600 20240107014502 20231208014502 20968 xn--wgbh1c. OquDV5v5kb35NKY0ZbwcHL9754qQDyNmn9CtJd3YoQ5AX9uhdW68PuMow9HvCMhyVrQipsO2TmdJ RPBKKoIh4Q== )`
	RRSIG=20968 and DNSKEY=20968 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test xn--wgbh1c at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: