DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-30 18:23:50 UTC

Analyzing DNSSEC problems for 43.sk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 12807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	DNSKEY=8763 is now in the chain-of-trust
	Query to b.root-servers.net for 43.sk/A
	Received 661 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 661 octets ;; HEADER SECTION ;; id = 8560 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN DS ( 56329 13 2 d76d7cc87d568b76634db673c73ba19e3c87c337efaeeebdce59636d4c73a985 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20261013170000 20260930160000 57780 . Av+lz0tytF2QVOASp/sjJIrXDMrLFntIk+D/YCqq8BChiMh+clqcmxLrRSfzlHcKesWsbgO1DLLg f/8miGSI/3AQEg308Yi7DU6I7kU/25/0Rc7vdp4ZhiLOF4+g8J5oL2POqhs6kPAVdkQKpSL9muwT zkgwCaa2cHbeo4PDWKj/pXV1v9KFwhW9qhcZqrM/xWmcK4aaXeW2xKdNQce7lhrGT3rm2Ox6Cctm n3ZVoeYfXph4yHl4WIMUNgcX8nMczFoDiwO1ONn0BhLuMGMe8fqBM0nCWWiw+eiIjKINpd0BRf35 x8vlzfSFMw8QgxS+uU+DouPugCh06tmnieEZcQ== ) ;; ADDITIONAL SECTION (9 records) e.tld.sk. 172800 IN A 194.169.218.16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN A 185.24.64.16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN A 212.18.248.16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN A 212.18.249.16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for sk/DNSKEY
	Received 660 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 660 octets ;; HEADER SECTION ;; id = 59149 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) sk. 172800 IN NS h.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 86400 IN DS ( 56329 13 2 d76d7cc87d568b76634db673c73ba19e3c87c337efaeeebdce59636d4c73a985 ) sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20261013170000 20260930160000 57780 . Av+lz0tytF2QVOASp/sjJIrXDMrLFntIk+D/YCqq8BChiMh+clqcmxLrRSfzlHcKesWsbgO1DLLg f/8miGSI/3AQEg308Yi7DU6I7kU/25/0Rc7vdp4ZhiLOF4+g8J5oL2POqhs6kPAVdkQKpSL9muwT zkgwCaa2cHbeo4PDWKj/pXV1v9KFwhW9qhcZqrM/xWmcK4aaXeW2xKdNQce7lhrGT3rm2Ox6Cctm n3ZVoeYfXph4yHl4WIMUNgcX8nMczFoDiwO1ONn0BhLuMGMe8fqBM0nCWWiw+eiIjKINpd0BRf35 x8vlzfSFMw8QgxS+uU+DouPugCh06tmnieEZcQ== ) ;; ADDITIONAL SECTION (9 records) h.tld.sk. 172800 IN A 212.18.249.16 g.tld.sk. 172800 IN A 212.18.248.16 f.tld.sk. 172800 IN A 185.24.64.16 e.tld.sk. 172800 IN A 194.169.218.16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 ;; { "EDNS-VERSION": 0 }
	Found child zone sk

	Checking DS between . and sk
	Query to k.root-servers.net for sk/DS
	Received 414 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 414 octets ;; HEADER SECTION ;; id = 52903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DS ;; ANSWER SECTION (3 records) sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN DS ( 56329 13 2 d76d7cc87d568b76634db673c73ba19e3c87c337efaeeebdce59636d4c73a985 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20261013170000 20260930160000 57780 . Av+lz0tytF2QVOASp/sjJIrXDMrLFntIk+D/YCqq8BChiMh+clqcmxLrRSfzlHcKesWsbgO1DLLg f/8miGSI/3AQEg308Yi7DU6I7kU/25/0Rc7vdp4ZhiLOF4+g8J5oL2POqhs6kPAVdkQKpSL9muwT zkgwCaa2cHbeo4PDWKj/pXV1v9KFwhW9qhcZqrM/xWmcK4aaXeW2xKdNQce7lhrGT3rm2Ox6Cctm n3ZVoeYfXph4yHl4WIMUNgcX8nMczFoDiwO1ONn0BhLuMGMe8fqBM0nCWWiw+eiIjKINpd0BRf35 x8vlzfSFMw8QgxS+uU+DouPugCh06tmnieEZcQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for sk in the . zone
	DS=2324/SHA-256 has algorithm ECDSAP256SHA256
	DS=56329/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sk. 86400 IN RRSIG ( DS 8 1 86400 20261013170000 20260930160000 57780 . Av+lz0tytF2QVOASp/sjJIrXDMrLFntIk+D/YCqq8BChiMh+clqcmxLrRSfzlHcKesWsbgO1DLLg f/8miGSI/3AQEg308Yi7DU6I7kU/25/0Rc7vdp4ZhiLOF4+g8J5oL2POqhs6kPAVdkQKpSL9muwT zkgwCaa2cHbeo4PDWKj/pXV1v9KFwhW9qhcZqrM/xWmcK4aaXeW2xKdNQce7lhrGT3rm2Ox6Cctm n3ZVoeYfXph4yHl4WIMUNgcX8nMczFoDiwO1ONn0BhLuMGMe8fqBM0nCWWiw+eiIjKINpd0BRf35 x8vlzfSFMw8QgxS+uU+DouPugCh06tmnieEZcQ== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2324/SHA-256 is now in the chain-of-trust
	DS=56329/SHA-256 is now in the chain-of-trust
	`sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 )`
	`sk. 86400 IN DS ( 56329 13 2 d76d7cc87d568b76634db673c73ba19e3c87c337efaeeebdce59636d4c73a985 )`
	Query to f.tld.sk for sk/DNSKEY
	Received 449 bytes from 185.24.64.16
	;; Response received from [185.24.64.16] 449 octets ;; HEADER SECTION ;; id = 27634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (5 records) sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; keytag 2324 sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; keytag 34492 sk. 3600 IN DNSKEY ( 256 3 13 VnDMjn6T4ibjJz98+3vuGdjYWx122jKoHRfy3OAug2so2i7Vte30CCpCW3zii7Tvd6rkVEYaKrY+ msZbKCL4bA== ) ; keytag 63036 sk. 3600 IN DNSKEY ( 257 3 13 b/1755gWH1NPzZWbznXTXxw2/q5bKFe/fj7sMTTmkNcA+j/TtkPy0nRyjaSYv6KiCnfygG+UTuAZ axM4lGILpA== ) ; keytag 56329 sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261015004515 20260914231515 56329 sk. RnBk5SXtorNSrtcyKyCypK5dj/0DMSscbC6yBixXaaFud662cfeaAdp1K9xyU7FlCfZek+iLFcVr NYKfHnV8xg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for sk
	`sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; keytag 2324`
	`sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; keytag 34492`
	`sk. 3600 IN DNSKEY ( 256 3 13 VnDMjn6T4ibjJz98+3vuGdjYWx122jKoHRfy3OAug2so2i7Vte30CCpCW3zii7Tvd6rkVEYaKrY+ msZbKCL4bA== ) ; keytag 63036`
	`sk. 3600 IN DNSKEY ( 257 3 13 b/1755gWH1NPzZWbznXTXxw2/q5bKFe/fj7sMTTmkNcA+j/TtkPy0nRyjaSYv6KiCnfygG+UTuAZ axM4lGILpA== ) ; keytag 56329`
	DNSKEY=2324/SEP is now in the chain-of-trust
	DS=2324/SHA-256 verifies DNSKEY=2324/SEP
	DNSKEY=56329/SEP is now in the chain-of-trust
	DS=56329/SHA-256 verifies DNSKEY=56329/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261015004515 20260914231515 56329 sk. RnBk5SXtorNSrtcyKyCypK5dj/0DMSscbC6yBixXaaFud662cfeaAdp1K9xyU7FlCfZek+iLFcVr NYKfHnV8xg== )`
	RRSIG=56329 and DNSKEY=56329/SEP verifies the DNSKEY RRset
	DNSKEY=34492 is now in the chain-of-trust
	DNSKEY=63036 is now in the chain-of-trust
	Query to g.tld.sk for 43.sk/A
	Received 399 bytes from 212.18.248.16
	;; Response received from [212.18.248.16] 399 octets ;; HEADER SECTION ;; id = 32979 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) 43.sk. 3600 IN NS ns.gransy.com. 43.sk. 3600 IN NS ns2.gransy.com. 43.sk. 3600 IN NS ns3.gransy.com. 43.sk. 3600 IN NS ns4.gransy.com. 43.sk. 3600 IN NS ns5.gransy.com. 43.sk. 3600 IN DS 52247 7 1 6d125442209f0996a87eb6a5cc64d8d4e30e84c3 43.sk. 3600 IN DS ( 52247 7 2 754f9acd13c6194c114bdd21ea6be4262a1c20239c6dcf5f00fd2d11d64544df ) 43.sk. 3600 IN DS 56890 7 1 06f661488c3f7126770fb9ff6515d7fe8824b321 43.sk. 3600 IN DS ( 56890 7 2 086653f149168b3f699d6a166e97618de146e4fa2b4f9328d56e95eb9a459cfb ) 43.sk. 3600 IN RRSIG ( DS 13 2 3600 20261015105208 20260915092208 63036 sk. Ss/w5cUg72NyzbA9G0m3ITp1qqGR2LT9UZdDfOpYmgIjwPDzOiS5V8uO0ofJ6C5PSYTcb8CKvQmg dqg+Ch8z/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.tld.sk for 43.sk/DNSKEY
	Received 399 bytes from 194.169.218.16
	;; Response received from [194.169.218.16] 399 octets ;; HEADER SECTION ;; id = 22209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) 43.sk. 3600 IN NS ns.gransy.com. 43.sk. 3600 IN NS ns2.gransy.com. 43.sk. 3600 IN NS ns3.gransy.com. 43.sk. 3600 IN NS ns4.gransy.com. 43.sk. 3600 IN NS ns5.gransy.com. 43.sk. 3600 IN DS 52247 7 1 6d125442209f0996a87eb6a5cc64d8d4e30e84c3 43.sk. 3600 IN DS ( 52247 7 2 754f9acd13c6194c114bdd21ea6be4262a1c20239c6dcf5f00fd2d11d64544df ) 43.sk. 3600 IN DS 56890 7 1 06f661488c3f7126770fb9ff6515d7fe8824b321 43.sk. 3600 IN DS ( 56890 7 2 086653f149168b3f699d6a166e97618de146e4fa2b4f9328d56e95eb9a459cfb ) 43.sk. 3600 IN RRSIG ( DS 13 2 3600 20261015105208 20260915092208 63036 sk. Ss/w5cUg72NyzbA9G0m3ITp1qqGR2LT9UZdDfOpYmgIjwPDzOiS5V8uO0ofJ6C5PSYTcb8CKvQmg dqg+Ch8z/g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 43.sk

43.sk

	Checking DS between sk and 43.sk
	Query to g.tld.sk for 43.sk/DS
	Received 300 bytes from 212.18.248.16
	;; Response received from [212.18.248.16] 300 octets ;; HEADER SECTION ;; id = 48225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN DS ;; ANSWER SECTION (5 records) 43.sk. 3600 IN DS 52247 7 1 6d125442209f0996a87eb6a5cc64d8d4e30e84c3 43.sk. 3600 IN DS ( 52247 7 2 754f9acd13c6194c114bdd21ea6be4262a1c20239c6dcf5f00fd2d11d64544df ) 43.sk. 3600 IN DS 56890 7 1 06f661488c3f7126770fb9ff6515d7fe8824b321 43.sk. 3600 IN DS ( 56890 7 2 086653f149168b3f699d6a166e97618de146e4fa2b4f9328d56e95eb9a459cfb ) 43.sk. 3600 IN RRSIG ( DS 13 2 3600 20261015105208 20260915092208 63036 sk. Ss/w5cUg72NyzbA9G0m3ITp1qqGR2LT9UZdDfOpYmgIjwPDzOiS5V8uO0ofJ6C5PSYTcb8CKvQmg dqg+Ch8z/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for 43.sk in the sk zone
	DS=52247/SHA-1 uses a deprecated digest algorithm
	DS=56890/SHA-1 uses a deprecated digest algorithm
	DS=52247/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=52247/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=56890/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=56890/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`43.sk. 3600 IN RRSIG ( DS 13 2 3600 20261015105208 20260915092208 63036 sk. Ss/w5cUg72NyzbA9G0m3ITp1qqGR2LT9UZdDfOpYmgIjwPDzOiS5V8uO0ofJ6C5PSYTcb8CKvQmg dqg+Ch8z/g== )`
	RRSIG=63036 and DNSKEY=63036 verifies the DS RRset
	DS=52247/SHA-1 is now in the chain-of-trust
	DS=56890/SHA-1 is now in the chain-of-trust
	`43.sk. 3600 IN DS 52247 7 1 6d125442209f0996a87eb6a5cc64d8d4e30e84c3`
	`43.sk. 3600 IN DS ( 52247 7 2 754f9acd13c6194c114bdd21ea6be4262a1c20239c6dcf5f00fd2d11d64544df )`
	`43.sk. 3600 IN DS 56890 7 1 06f661488c3f7126770fb9ff6515d7fe8824b321`
	`43.sk. 3600 IN DS ( 56890 7 2 086653f149168b3f699d6a166e97618de146e4fa2b4f9328d56e95eb9a459cfb )`
	Query to ns5.gransy.com for 43.sk/DNSKEY
	Received 2200 bytes from 31.192.227.223
	;; Response received from [31.192.227.223] 2200 octets ;; HEADER SECTION ;; id = 34234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN DNSKEY ;; ANSWER SECTION (4 records) 43.sk. 1800 IN DNSKEY ( 257 3 7 BQEAAAABw0H2Xb7JjIuMMVRD3oqWpoXsriUK4sCT2B0TAc9b6v7K+gEIfhtrQ+LImQ/yY4VLZ1z8 8RDe48LvV2kA3fjB+4tFJTsgmgxCAg29skRNorVLnb6ztSqZO3FuTYgH3yywEw3W4rTkPfthNhia MEVXVrFDDU4dGhiJmvIa9mkaPOkIKeRV4gJqs2YSEIhCKeMxkNNGLn1CIXAiFjVbVDcYFv0n1bBY 2iDUllDIRZapMfoSwJMnHI6VXz3CGjxIfcFcr+BUfVFhobqyV848n4HJcHKMgErtC8xFmRD++Pq/ isLbNs48zDSZQY5jJvD30anwzZnzhWJJ2ZlirUm6pIazB3a6A7V3c381TsRAyY8suy5pkEriSVs4 wSfHkiiwd3Z1sHCTHgefwyRrArFycXR4bvz9sSFOCjbZfJ4S2RFchQa2D+IJsea+kXa+LGOi2enM d6Jaq5+WB6dUkgWz+9a0/xqCC2ShywyWeazuoLaaejL8NUDfsGj4TEHfkXX+/BodFl6SicWsQEZu NU44/+pyyFqgDKsHu9t8mDtz/IGRZ/Duj9GKTQ4j953Czkic0thvFwqqd6Xm+C48K1qIB1vWqV4A inXDVf/qjbkPxGP01P+riUs5E0zTEoJOtyTtm/xoV5lTwe2PvhysrtGmcTdyqZXDZ6DQnUgkO7BU jlprbnk= ) ; keytag 52247 43.sk. 1800 IN DNSKEY ( 256 3 7 BQEAAAAB9QdSKCeptWzBV1tlAFU+AaiSGgU7XaUY6YHgtUQ1ggPvJAplv3N9Xt8vB+z7/FThK4gx zQ3xZ+Y0xZ0sEnQVdl05XTfrrOGjwr6x3PwxwepWONVZ6FXDb+LhEFx95kYOIjhLnyr5UvOHu9vF OEu1mMENo9gdg00DMBX+tXNBxiHIXzsFUE90QmXBro2GH4EHqTX+4ZVuNCOFhzAnp3h+O7SQTR8n pmdRrmWJvC42uT6ODGEFOnstZ+vJDQnc3ZLvzJvuaXK9pUGJmIQ75MEs9xcngf7JXRmW/FqsTph0 ZcAXUoad8+Tu43Z0+V1Znf7WtCfODqqjKsKklt7CdY7R6NzEV9b5F//rvG88wZeg+PKXNVbQFFSz yguEsFrvjrTThdKjyDPfbMRl/vMeoB/dfnB1VP5Ds1zMpqqYqiPPVLBmCjuRC2EalK3tPh3y9U2x E+A2vytXETew+T+nX9ZG62rS7YnKwsMYrSzUPDTXYgCVwsDM/2Ecl5XEpemOnTvMmQGh7LUuYs/k K2hImPew5ntAQC6jnGr37xC3xtBfkFQN4sV5iSOvZWs5mjP2iEhGEFl5fRqU0Zvck0vOCHBBU0oR j8k4VUpUKSFe2W4iKolj2VS9Jr7S5WIFGFMHUfhyC1j5FVAqSyLBnEKOWper3O+dMQrtWTRl5L1H 7v96O/E= ) ; keytag 56890 43.sk. 1800 IN RRSIG ( DNSKEY 7 2 1800 20270705180531 20260705180531 52247 43.sk. sKeV4r4xUI2iI2PSkmr4CW2h2Hi4Oa3O06fygxvTZeCuS4EhAW8dJ9+epT8JPqfFS+g922YiACQW Ecl3hNge8XeygG78v6oRhzgZRKYlrPBqijLT/+yWOVGPSMjTCos14DrNw3GwfuR8GDji7L7YXJGj PMuscoNlSG64ON9jVlu2OxI3aLtEtFR8CFAhojDE3yJY4RMQknK/Uo5m7rmZdJ1BhsG6vsY4U+mG p2bcmcALNzQCsU5Rs/5acanMdmsx6MNeRXD75+9B8LuzoxXuHRgdmT6msrZ165bXMbc9c5zcvB7M 2SJBo6vLW7+hgPoCvuH7btO+zzdxodWMEAScmJul3psNB31tkejemZ00uE+c/TVLCOgqBOYzQluJ 9Z0pv8rLgqYTMafC3In3FA0EOVpF6wjK+KDgMxVTC9RjcNYhBT6ziX3Mtwju/3N3aGie0wBxxdjb 1wGdJvECA9haEMEeBZhOqge66kMur9cViSpehXji2dg4EX7wJaDxKOGEfizPPgK95p2e69QV4lid rUNpkT2MS41CI9ImGNJSw9BbZUkMRDS/+H3CEgG4jq7ySOiVLN9rng5t/G5S2g5d6tul7EwnxyXz ODOGXl1XqzXvy2kp6BT6NRkJzw1faAnpufAuJEbpVmPWkJtbPbdXcXS7kuM7hNqHCF2S3QI3wkA= ) 43.sk. 1800 IN RRSIG ( DNSKEY 7 2 1800 20270705180531 20260705180531 56890 43.sk. Q+if/NWopDb7WNkdWhATqcqRNGmxQk4O2W0JCOUAR5zCHR9Ng6ZNy8JL6LoY3rI+6H8x4x2RS2yu Q+iyMZqD/TSPL3rcaEC7q5mds9GGr7DHOxt0rMWvLX+x54vT6qASftN27MYmpBobtiSSSdbnq8Gx u4ewfoQgKIyNHgxdFENSq8BPGX8cmUB9s0YDRYPQ+L1lSyUdIoJrQ2Ipa6DgPtJ0uIUq12JhRuxG s6Kym1/bBLU8U1WTnGyUUkT7WQq2scxZKfAOVKdlWp1zV8kUg4unPxDE/1yvaxkqNosK6pptcoGV +njuULlT9f7V77ZtgAgx2w+xKOP/3fE+N+6TnfY78sGR9GqfVVC3muJ0CgLD+OBMJ3wLLafgZo/w TQHhcctFhicUC/SfS5Q4OuVNzA5mUHVxMEfrdzKwdpRlXpFzwJJbq84DvGxOgTJm7+Gcw2O8RlQG Yt4r/W53gb8G4cxjWt4M4Sr5yPx73nF0q+cTuHYj85xmCpwKVpiR1ukFfIqwGUufQZIjfj5H6p9x jg4rzQd+LFVMs9jPP2jiUsGuxh4YiVNZ9sOoWJDMTWbaNzgROvuCuhJgmiIEgWOr8xcnAJjrUP9x FeT0pg7pE5MpRxhQjueyR9JanFvqKNPMRDQQARx8kLBqubagirbSAiX/aFVSpQOkSgIWQ4KlYBg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for 43.sk
	43.sk. 1800 IN DNSKEY ( 257 3 7 BQEAAAABw0H2Xb7JjIuMMVRD3oqWpoXsriUK4sCT2B0TAc9b6v7K+gEIfhtrQ+LImQ/yY4VLZ1z8 8RDe48LvV2kA3fjB+4tFJTsgmgxCAg29skRNorVLnb6ztSqZO3FuTYgH3yywEw3W4rTkPfthNhia MEVXVrFDDU4dGhiJmvIa9mkaPOkIKeRV4gJqs2YSEIhCKeMxkNNGLn1CIXAiFjVbVDcYFv0n1bBY 2iDUllDIRZapMfoSwJMnHI6VXz3CGjxIfcFcr+BUfVFhobqyV848n4HJcHKMgErtC8xFmRD++Pq/ isLbNs48zDSZQY5jJvD30anwzZnzhWJJ2ZlirUm6pIazB3a6A7V3c381TsRAyY8suy5pkEriSVs4 wSfHkiiwd3Z1sHCTHgefwyRrArFycXR4bvz9sSFOCjbZfJ4S2RFchQa2D+IJsea+kXa+LGOi2enM d6Jaq5+WB6dUkgWz+9a0/xqCC2ShywyWeazuoLaaejL8NUDfsGj4TEHfkXX+/BodFl6SicWsQEZu NU44/+pyyFqgDKsHu9t8mDtz/IGRZ/Duj9GKTQ4j953Czkic0thvFwqqd6Xm+C48K1qIB1vWqV4A inXDVf/qjbkPxGP01P+riUs5E0zTEoJOtyTtm/xoV5lTwe2PvhysrtGmcTdyqZXDZ6DQnUgkO7BU jlprbnk= ) ; keytag 52247
	43.sk. 1800 IN DNSKEY ( 256 3 7 BQEAAAAB9QdSKCeptWzBV1tlAFU+AaiSGgU7XaUY6YHgtUQ1ggPvJAplv3N9Xt8vB+z7/FThK4gx zQ3xZ+Y0xZ0sEnQVdl05XTfrrOGjwr6x3PwxwepWONVZ6FXDb+LhEFx95kYOIjhLnyr5UvOHu9vF OEu1mMENo9gdg00DMBX+tXNBxiHIXzsFUE90QmXBro2GH4EHqTX+4ZVuNCOFhzAnp3h+O7SQTR8n pmdRrmWJvC42uT6ODGEFOnstZ+vJDQnc3ZLvzJvuaXK9pUGJmIQ75MEs9xcngf7JXRmW/FqsTph0 ZcAXUoad8+Tu43Z0+V1Znf7WtCfODqqjKsKklt7CdY7R6NzEV9b5F//rvG88wZeg+PKXNVbQFFSz yguEsFrvjrTThdKjyDPfbMRl/vMeoB/dfnB1VP5Ds1zMpqqYqiPPVLBmCjuRC2EalK3tPh3y9U2x E+A2vytXETew+T+nX9ZG62rS7YnKwsMYrSzUPDTXYgCVwsDM/2Ecl5XEpemOnTvMmQGh7LUuYs/k K2hImPew5ntAQC6jnGr37xC3xtBfkFQN4sV5iSOvZWs5mjP2iEhGEFl5fRqU0Zvck0vOCHBBU0oR j8k4VUpUKSFe2W4iKolj2VS9Jr7S5WIFGFMHUfhyC1j5FVAqSyLBnEKOWper3O+dMQrtWTRl5L1H 7v96O/E= ) ; keytag 56890
	DNSKEY=52247/SEP is now in the chain-of-trust
	DS=52247/SHA-1 verifies DNSKEY=52247/SEP
	DS=52247/SHA-256 verifies DNSKEY=52247/SEP
	DNSKEY=56890 is now in the chain-of-trust
	DS=56890/SHA-1 verifies DNSKEY=56890
	DS=56890/SHA-256 verifies DNSKEY=56890
	Found 2 RRSIGs over DNSKEY RRset
	43.sk. 1800 IN RRSIG ( DNSKEY 7 2 1800 20270705180531 20260705180531 52247 43.sk. sKeV4r4xUI2iI2PSkmr4CW2h2Hi4Oa3O06fygxvTZeCuS4EhAW8dJ9+epT8JPqfFS+g922YiACQW Ecl3hNge8XeygG78v6oRhzgZRKYlrPBqijLT/+yWOVGPSMjTCos14DrNw3GwfuR8GDji7L7YXJGj PMuscoNlSG64ON9jVlu2OxI3aLtEtFR8CFAhojDE3yJY4RMQknK/Uo5m7rmZdJ1BhsG6vsY4U+mG p2bcmcALNzQCsU5Rs/5acanMdmsx6MNeRXD75+9B8LuzoxXuHRgdmT6msrZ165bXMbc9c5zcvB7M 2SJBo6vLW7+hgPoCvuH7btO+zzdxodWMEAScmJul3psNB31tkejemZ00uE+c/TVLCOgqBOYzQluJ 9Z0pv8rLgqYTMafC3In3FA0EOVpF6wjK+KDgMxVTC9RjcNYhBT6ziX3Mtwju/3N3aGie0wBxxdjb 1wGdJvECA9haEMEeBZhOqge66kMur9cViSpehXji2dg4EX7wJaDxKOGEfizPPgK95p2e69QV4lid rUNpkT2MS41CI9ImGNJSw9BbZUkMRDS/+H3CEgG4jq7ySOiVLN9rng5t/G5S2g5d6tul7EwnxyXz ODOGXl1XqzXvy2kp6BT6NRkJzw1faAnpufAuJEbpVmPWkJtbPbdXcXS7kuM7hNqHCF2S3QI3wkA= )
	43.sk. 1800 IN RRSIG ( DNSKEY 7 2 1800 20270705180531 20260705180531 56890 43.sk. Q+if/NWopDb7WNkdWhATqcqRNGmxQk4O2W0JCOUAR5zCHR9Ng6ZNy8JL6LoY3rI+6H8x4x2RS2yu Q+iyMZqD/TSPL3rcaEC7q5mds9GGr7DHOxt0rMWvLX+x54vT6qASftN27MYmpBobtiSSSdbnq8Gx u4ewfoQgKIyNHgxdFENSq8BPGX8cmUB9s0YDRYPQ+L1lSyUdIoJrQ2Ipa6DgPtJ0uIUq12JhRuxG s6Kym1/bBLU8U1WTnGyUUkT7WQq2scxZKfAOVKdlWp1zV8kUg4unPxDE/1yvaxkqNosK6pptcoGV +njuULlT9f7V77ZtgAgx2w+xKOP/3fE+N+6TnfY78sGR9GqfVVC3muJ0CgLD+OBMJ3wLLafgZo/w TQHhcctFhicUC/SfS5Q4OuVNzA5mUHVxMEfrdzKwdpRlXpFzwJJbq84DvGxOgTJm7+Gcw2O8RlQG Yt4r/W53gb8G4cxjWt4M4Sr5yPx73nF0q+cTuHYj85xmCpwKVpiR1ukFfIqwGUufQZIjfj5H6p9x jg4rzQd+LFVMs9jPP2jiUsGuxh4YiVNZ9sOoWJDMTWbaNzgROvuCuhJgmiIEgWOr8xcnAJjrUP9x FeT0pg7pE5MpRxhQjueyR9JanFvqKNPMRDQQARx8kLBqubagirbSAiX/aFVSpQOkSgIWQ4KlYBg= )
	RRSIG=52247 and DNSKEY=52247/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=56890 and DNSKEY=56890 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to ns2.gransy.com for 43.sk/A
	Received 599 bytes from 95.179.192.121
	;; Response received from [95.179.192.121] 599 octets ;; HEADER SECTION ;; id = 49040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (2 records) 43.sk. 900 IN A 185.64.219.22 43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.gransy.com is authoritative for 43.sk
	Found RRSIG signed by 43.sk zone
	Query to ns.gransy.com for 43.sk/SOA
	Received 637 bytes from 45.76.90.43
	;; Response received from [45.76.90.43] 637 octets ;; HEADER SECTION ;; id = 9973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN SOA ;; ANSWER SECTION (2 records) 43.sk. 1800 IN SOA ( ns.gransy.com. root.gransy.com. 2783274729 ;serial 86400 ;refresh 900 ;retry 1209600 ;expire 1800 ;minimum ) 43.sk. 1800 IN RRSIG ( SOA 7 2 1800 20270705180531 20260705180531 56890 43.sk. rRqm1aUDJEUCVHa47pgiF1k3ByHV8sOSiuC7RPb62OQGyqay1r7R0Ou0UuYkhrBX1gw/gJ8SDX13 eURxGPYtqcVzWXPQIq9FlsUYf03tkZkr1gxq/jyFRXWEca3nQX49yRLJTqbkcfjXHwZOo3fgIulL xpvSRHLPqmxRSV62gYgKMMTOfgUGPayzvuTNPYBiFtgBwbCFnuJxVc+ObV/rF6+JWnvhPo6UXB9s SBFAQrvIFkVXFVpuFh3Tz3dCrBiLByRHRvJfV3Io0nI2aCzmkfyZJ8AdcZ/WkuWlnHeZPKrb2/JA L1Ddak98DTW4FUVgCi7vGswdW4/cpbT3Nirfx7DgcMfuMLxAMjKjnG7x5Mp1M/2todd6kx+2W2M9 g1a/8jM2pyiPjdwwiVh/x3mtWXfnOK2QRjmEAphR4hRUOziXl5LaHMPnB40JIy0BqcCHzPIZ9fAy t3NptT4CgcPhxKY6pXrv/V/PQ3dxkFA1LLRvwqKofiVGkeZY4ASJ7EDa4gYgWSDfSt5BQTjd3A6f jkFKDvl7OrAkFa3NkwfXWDLpUy6SK3qzuPzcVOtrj2UKGONz+dHUiNrtsgSMrIa0y6uU9zUrgkqU lG15TjuVeCR9hoPJzNMmuQcwwZY3UlOTN3PNO3ejEm4q/0hh7jXdomMr0QrIjPYTnEI3bkBqbc0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.gransy.com for 43.sk/SOA
	Received 637 bytes from 77.78.126.35
	;; Response received from [77.78.126.35] 637 octets ;; HEADER SECTION ;; id = 9886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN SOA ;; ANSWER SECTION (2 records) 43.sk. 1800 IN SOA ( ns.gransy.com. root.gransy.com. 2783274729 ;serial 86400 ;refresh 900 ;retry 1209600 ;expire 1800 ;minimum ) 43.sk. 1800 IN RRSIG ( SOA 7 2 1800 20270705180531 20260705180531 56890 43.sk. rRqm1aUDJEUCVHa47pgiF1k3ByHV8sOSiuC7RPb62OQGyqay1r7R0Ou0UuYkhrBX1gw/gJ8SDX13 eURxGPYtqcVzWXPQIq9FlsUYf03tkZkr1gxq/jyFRXWEca3nQX49yRLJTqbkcfjXHwZOo3fgIulL xpvSRHLPqmxRSV62gYgKMMTOfgUGPayzvuTNPYBiFtgBwbCFnuJxVc+ObV/rF6+JWnvhPo6UXB9s SBFAQrvIFkVXFVpuFh3Tz3dCrBiLByRHRvJfV3Io0nI2aCzmkfyZJ8AdcZ/WkuWlnHeZPKrb2/JA L1Ddak98DTW4FUVgCi7vGswdW4/cpbT3Nirfx7DgcMfuMLxAMjKjnG7x5Mp1M/2todd6kx+2W2M9 g1a/8jM2pyiPjdwwiVh/x3mtWXfnOK2QRjmEAphR4hRUOziXl5LaHMPnB40JIy0BqcCHzPIZ9fAy t3NptT4CgcPhxKY6pXrv/V/PQ3dxkFA1LLRvwqKofiVGkeZY4ASJ7EDa4gYgWSDfSt5BQTjd3A6f jkFKDvl7OrAkFa3NkwfXWDLpUy6SK3qzuPzcVOtrj2UKGONz+dHUiNrtsgSMrIa0y6uU9zUrgkqU lG15TjuVeCR9hoPJzNMmuQcwwZY3UlOTN3PNO3ejEm4q/0hh7jXdomMr0QrIjPYTnEI3bkBqbc0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.gransy.com for 43.sk/SOA
	Received 637 bytes from 66.42.94.136
	;; Response received from [66.42.94.136] 637 octets ;; HEADER SECTION ;; id = 57248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN SOA ;; ANSWER SECTION (2 records) 43.sk. 1800 IN SOA ( ns.gransy.com. root.gransy.com. 2783274729 ;serial 86400 ;refresh 900 ;retry 1209600 ;expire 1800 ;minimum ) 43.sk. 1800 IN RRSIG ( SOA 7 2 1800 20270705180531 20260705180531 56890 43.sk. rRqm1aUDJEUCVHa47pgiF1k3ByHV8sOSiuC7RPb62OQGyqay1r7R0Ou0UuYkhrBX1gw/gJ8SDX13 eURxGPYtqcVzWXPQIq9FlsUYf03tkZkr1gxq/jyFRXWEca3nQX49yRLJTqbkcfjXHwZOo3fgIulL xpvSRHLPqmxRSV62gYgKMMTOfgUGPayzvuTNPYBiFtgBwbCFnuJxVc+ObV/rF6+JWnvhPo6UXB9s SBFAQrvIFkVXFVpuFh3Tz3dCrBiLByRHRvJfV3Io0nI2aCzmkfyZJ8AdcZ/WkuWlnHeZPKrb2/JA L1Ddak98DTW4FUVgCi7vGswdW4/cpbT3Nirfx7DgcMfuMLxAMjKjnG7x5Mp1M/2todd6kx+2W2M9 g1a/8jM2pyiPjdwwiVh/x3mtWXfnOK2QRjmEAphR4hRUOziXl5LaHMPnB40JIy0BqcCHzPIZ9fAy t3NptT4CgcPhxKY6pXrv/V/PQ3dxkFA1LLRvwqKofiVGkeZY4ASJ7EDa4gYgWSDfSt5BQTjd3A6f jkFKDvl7OrAkFa3NkwfXWDLpUy6SK3qzuPzcVOtrj2UKGONz+dHUiNrtsgSMrIa0y6uU9zUrgkqU lG15TjuVeCR9hoPJzNMmuQcwwZY3UlOTN3PNO3ejEm4q/0hh7jXdomMr0QrIjPYTnEI3bkBqbc0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns5.gransy.com for 43.sk/SOA
	Received 637 bytes from 31.192.227.223
	;; Response received from [31.192.227.223] 637 octets ;; HEADER SECTION ;; id = 24541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN SOA ;; ANSWER SECTION (2 records) 43.sk. 1800 IN SOA ( ns.gransy.com. root.gransy.com. 2783274729 ;serial 86400 ;refresh 900 ;retry 1209600 ;expire 1800 ;minimum ) 43.sk. 1800 IN RRSIG ( SOA 7 2 1800 20270705180531 20260705180531 56890 43.sk. rRqm1aUDJEUCVHa47pgiF1k3ByHV8sOSiuC7RPb62OQGyqay1r7R0Ou0UuYkhrBX1gw/gJ8SDX13 eURxGPYtqcVzWXPQIq9FlsUYf03tkZkr1gxq/jyFRXWEca3nQX49yRLJTqbkcfjXHwZOo3fgIulL xpvSRHLPqmxRSV62gYgKMMTOfgUGPayzvuTNPYBiFtgBwbCFnuJxVc+ObV/rF6+JWnvhPo6UXB9s SBFAQrvIFkVXFVpuFh3Tz3dCrBiLByRHRvJfV3Io0nI2aCzmkfyZJ8AdcZ/WkuWlnHeZPKrb2/JA L1Ddak98DTW4FUVgCi7vGswdW4/cpbT3Nirfx7DgcMfuMLxAMjKjnG7x5Mp1M/2todd6kx+2W2M9 g1a/8jM2pyiPjdwwiVh/x3mtWXfnOK2QRjmEAphR4hRUOziXl5LaHMPnB40JIy0BqcCHzPIZ9fAy t3NptT4CgcPhxKY6pXrv/V/PQ3dxkFA1LLRvwqKofiVGkeZY4ASJ7EDa4gYgWSDfSt5BQTjd3A6f jkFKDvl7OrAkFa3NkwfXWDLpUy6SK3qzuPzcVOtrj2UKGONz+dHUiNrtsgSMrIa0y6uU9zUrgkqU lG15TjuVeCR9hoPJzNMmuQcwwZY3UlOTN3PNO3ejEm4q/0hh7jXdomMr0QrIjPYTnEI3bkBqbc0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.gransy.com for 43.sk/A
	43.sk A RR has value 185.64.219.22
	Found 1 RRSIGs over A RRset
	43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= )
	RRSIG=56890 and DNSKEY=56890 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

43.sk

	Query to ns.gransy.com for 43.sk/A
	Received 599 bytes from 95.179.136.180
	;; Response received from [95.179.136.180] 599 octets ;; HEADER SECTION ;; id = 44728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (2 records) 43.sk. 900 IN A 185.64.219.22 43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.gransy.com is authoritative for 43.sk
	Found RRSIG signed by 43.sk zone
	Query to ns.gransy.com for 43.sk/A
	43.sk A RR has value 185.64.219.22
	Found 1 RRSIGs over A RRset
	43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= )
	RRSIG=56890 and DNSKEY=56890 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

43.sk

	Query to ns4.gransy.com for 43.sk/A
	Received 599 bytes from 66.42.94.136
	;; Response received from [66.42.94.136] 599 octets ;; HEADER SECTION ;; id = 27308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (2 records) 43.sk. 900 IN A 185.64.219.22 43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.gransy.com is authoritative for 43.sk
	Found RRSIG signed by 43.sk zone
	Query to ns4.gransy.com for 43.sk/A
	43.sk A RR has value 185.64.219.22
	Found 1 RRSIGs over A RRset
	43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= )
	RRSIG=56890 and DNSKEY=56890 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

43.sk

	Query to ns5.gransy.com for 43.sk/A
	Received 599 bytes from 31.192.227.223
	;; Response received from [31.192.227.223] 599 octets ;; HEADER SECTION ;; id = 8682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (2 records) 43.sk. 900 IN A 185.64.219.22 43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.gransy.com is authoritative for 43.sk
	Found RRSIG signed by 43.sk zone
	Query to ns5.gransy.com for 43.sk/A
	43.sk A RR has value 185.64.219.22
	Found 1 RRSIGs over A RRset
	43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= )
	RRSIG=56890 and DNSKEY=56890 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

43.sk

	Query to ns3.gransy.com for 43.sk/A
	Received 599 bytes from 46.21.100.103
	;; Response received from [46.21.100.103] 599 octets ;; HEADER SECTION ;; id = 9604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 43.sk. IN A ;; ANSWER SECTION (2 records) 43.sk. 900 IN A 185.64.219.22 43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.gransy.com is authoritative for 43.sk
	Found RRSIG signed by 43.sk zone
	Query to ns3.gransy.com for 43.sk/A
	43.sk A RR has value 185.64.219.22
	Found 1 RRSIGs over A RRset
	43.sk. 900 IN RRSIG ( A 7 2 900 20270705180531 20260705180531 56890 43.sk. J2QL7c8WaECVqZbAmhRV71eGdn8oJ8pgNYwzyHRvE/KSdjj+7wgmUpzdcYCK+GM5AEVSekEIfC3a Tj0sBzaj8MUYK27AmuJ9KH1XIh3g0NV8LwjhAc2KH/UMfW0WhqxMqLySr/IMAr8IEHDn7ikwq401 EohKVccRouoyWxFaoNsqvDochqDabsmk3Cuxyfg4tIF4BHMsSfNjYRgVCzCSknhuhImr8pHjO8Xs sqOo2J61alfKDVqbZEj03JnUP4RP49Akt2CktQ2XnpWVLhST+NYmunOckYdnQG/BscFyI9HBy3JV xOoPfFGhZ04aZw1vNeVlu96SEPbbYMylFbXvz2V+8TJ/BJClNDLDbSjDWRvFpu5QPQj4j75QK5+n O6d+zfBNZaEgtZOAb4xh03b2jHvd9zL4n1wD64rZ7Ug+n28aNEwK5Q0TUt2ptld7SI04/0ohuWNB PpJooP+C9cwPgHK/0vbvuZR4mW88t/Thj8n1YuyfPuFoPakJumD/JEjebz09uvx+TItR0R/uehGx yUjeD86RxKrR+VlY8teRSrOTmjw0yC9t+XSLC0RUhBAJS5v9iWv6DQiH/pDMXiSgoOycIHipLlEm cXpqZnn0diKMgZi83khn1eRnUZGX2LUzt9UQfQwlfkNa1Jp3bdb8KFHwSQdScdL/iRYywG3cdA8= )
	RRSIG=56890 and DNSKEY=56890 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 43.sk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: