DNSSEC Debugger

Domain Name:

Time: 2025-08-30 13:16:15 UTC

Analyzing DNSSEC problems for 89.vc

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1417 octets ;; HEADER SECTION ;; id = 56311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250920000000 20250830000000 20326 . HFh19AJ3Cl/pJR5753g7bQVFy1nsrX0ly1znWtWDxH+AnsvhaOv8V97g4Oyo9rkvMvuM84CMlWQK 6Of80RtX2UizsnSa5Tt5n91mXSs3oXlAGv2khTSVKFnyKISpy5Um4Uf7hnt80UYwBKA4XprSeKpB qbY0BdY2cz3IIvaosX2er8AOCHF9VYxtOjMVxsL/NHm1NykP5c6fGygIlJUcXsMTBev6YCYDVM/D QP/o2bgJpEDqnN2OThTL7+xsfzlnq3d297G8E1iVlrH21gF20yIxJrrIWrsrVcswpdBhXWFHpdr7 hBpbfqHBWAsaaz3PdgfRLhnSlxqvh0f9qxxCuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250920000000 20250830000000 20326 . HFh19AJ3Cl/pJR5753g7bQVFy1nsrX0ly1znWtWDxH+AnsvhaOv8V97g4Oyo9rkvMvuM84CMlWQK 6Of80RtX2UizsnSa5Tt5n91mXSs3oXlAGv2khTSVKFnyKISpy5Um4Uf7hnt80UYwBKA4XprSeKpB qbY0BdY2cz3IIvaosX2er8AOCHF9VYxtOjMVxsL/NHm1NykP5c6fGygIlJUcXsMTBev6YCYDVM/D QP/o2bgJpEDqnN2OThTL7+xsfzlnq3d297G8E1iVlrH21gF20yIxJrrIWrsrVcswpdBhXWFHpdr7 hBpbfqHBWAsaaz3PdgfRLhnSlxqvh0f9qxxCuw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to e.root-servers.net for 89.vc/A
	Received 778 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 778 octets ;; HEADER SECTION ;; id = 23957 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) vc. 172800 IN NS a0.cctld.afilias-nst.info. vc. 172800 IN NS a2.cctld.afilias-nst.info. vc. 172800 IN NS b0.cctld.afilias-nst.org. vc. 172800 IN NS b2.cctld.afilias-nst.org. vc. 172800 IN NS c0.cctld.afilias-nst.info. vc. 172800 IN NS d0.cctld.afilias-nst.org. vc. 86400 IN DS ( 54391 8 2 8e38107261b61499f2e57a72e762ef501798a0462cb69e6afcc9c4a2539e6bff ) vc. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . qLGu64LecR9+m9pVy/IGjs+AYwb3bA5HuxMsv7/AwCULQ8kmsQ68hH2mXORcs7Xc0FylOQHSM1Jl bMa40faBRi+EKU5qzs3SjoeT0Pq/bzNpCz91vLx0EtKijfsm6n+8cEy9f84JyLwbU9uFlW4hlY/d ghO5WmCpULR5aBb0S+1MFsLgdSwnDhmVdGRMH5/Ne4hX9SW5L9JNlVqwI17i+cPoQoSJ4Bhwgh6J 47lVb01W6oJqWe9mVxQKW88/zi8AyS2lvKQ2rZ9Hm7zLOlC8J0c05qPEeNeWD+9cgyb5xxCeoicn WOjt+Lf1LibieHl9X8kgmvaORgEIMDTiLY+Eyw== ) ;; ADDITIONAL SECTION (13 records) a0.cctld.afilias-nst.info. 172800 IN A 199.254.59.1 a0.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:25::1 a2.cctld.afilias-nst.info. 172800 IN A 199.249.116.1 a2.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:44::1 b0.cctld.afilias-nst.org. 172800 IN A 199.254.60.1 b0.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:26::1 b2.cctld.afilias-nst.org. 172800 IN A 199.249.124.1 b2.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:4c::1 c0.cctld.afilias-nst.info. 172800 IN A 199.254.61.1 c0.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:27::1 d0.cctld.afilias-nst.org. 172800 IN A 199.254.62.1 d0.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:28::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for vc/DNSKEY
	Received 818 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 818 octets ;; HEADER SECTION ;; id = 18837 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) vc. 172800 IN NS a0.cctld.afilias-nst.info. vc. 172800 IN NS a2.cctld.afilias-nst.info. vc. 172800 IN NS b0.cctld.afilias-nst.org. vc. 172800 IN NS b2.cctld.afilias-nst.org. vc. 172800 IN NS c0.cctld.afilias-nst.info. vc. 172800 IN NS d0.cctld.afilias-nst.org. vc. 86400 IN DS ( 54391 8 2 8e38107261b61499f2e57a72e762ef501798a0462cb69e6afcc9c4a2539e6bff ) vc. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . qLGu64LecR9+m9pVy/IGjs+AYwb3bA5HuxMsv7/AwCULQ8kmsQ68hH2mXORcs7Xc0FylOQHSM1Jl bMa40faBRi+EKU5qzs3SjoeT0Pq/bzNpCz91vLx0EtKijfsm6n+8cEy9f84JyLwbU9uFlW4hlY/d ghO5WmCpULR5aBb0S+1MFsLgdSwnDhmVdGRMH5/Ne4hX9SW5L9JNlVqwI17i+cPoQoSJ4Bhwgh6J 47lVb01W6oJqWe9mVxQKW88/zi8AyS2lvKQ2rZ9Hm7zLOlC8J0c05qPEeNeWD+9cgyb5xxCeoicn WOjt+Lf1LibieHl9X8kgmvaORgEIMDTiLY+Eyw== ) ;; ADDITIONAL SECTION (13 records) a0.cctld.afilias-nst.info. 172800 IN A 199.254.59.1 a0.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:25::1 a2.cctld.afilias-nst.info. 172800 IN A 199.249.116.1 a2.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:44::1 b0.cctld.afilias-nst.org. 172800 IN A 199.254.60.1 b0.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:26::1 b2.cctld.afilias-nst.org. 172800 IN A 199.249.124.1 b2.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:4c::1 c0.cctld.afilias-nst.info. 172800 IN A 199.254.61.1 c0.cctld.afilias-nst.info. 172800 IN AAAA 2001:500:27::1 d0.cctld.afilias-nst.org. 172800 IN A 199.254.62.1 d0.cctld.afilias-nst.org. 172800 IN AAAA 2001:500:28::1 ;; { "EDNS-VERSION": 0 }
	Found child zone vc

	Checking DS between . and vc
	Query to h.root-servers.net for vc/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 63585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vc. IN DS ;; ANSWER SECTION (2 records) vc. 86400 IN DS ( 54391 8 2 8e38107261b61499f2e57a72e762ef501798a0462cb69e6afcc9c4a2539e6bff ) vc. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . qLGu64LecR9+m9pVy/IGjs+AYwb3bA5HuxMsv7/AwCULQ8kmsQ68hH2mXORcs7Xc0FylOQHSM1Jl bMa40faBRi+EKU5qzs3SjoeT0Pq/bzNpCz91vLx0EtKijfsm6n+8cEy9f84JyLwbU9uFlW4hlY/d ghO5WmCpULR5aBb0S+1MFsLgdSwnDhmVdGRMH5/Ne4hX9SW5L9JNlVqwI17i+cPoQoSJ4Bhwgh6J 47lVb01W6oJqWe9mVxQKW88/zi8AyS2lvKQ2rZ9Hm7zLOlC8J0c05qPEeNeWD+9cgyb5xxCeoicn WOjt+Lf1LibieHl9X8kgmvaORgEIMDTiLY+Eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for vc in the . zone
	DS=54391/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`vc. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . qLGu64LecR9+m9pVy/IGjs+AYwb3bA5HuxMsv7/AwCULQ8kmsQ68hH2mXORcs7Xc0FylOQHSM1Jl bMa40faBRi+EKU5qzs3SjoeT0Pq/bzNpCz91vLx0EtKijfsm6n+8cEy9f84JyLwbU9uFlW4hlY/d ghO5WmCpULR5aBb0S+1MFsLgdSwnDhmVdGRMH5/Ne4hX9SW5L9JNlVqwI17i+cPoQoSJ4Bhwgh6J 47lVb01W6oJqWe9mVxQKW88/zi8AyS2lvKQ2rZ9Hm7zLOlC8J0c05qPEeNeWD+9cgyb5xxCeoicn WOjt+Lf1LibieHl9X8kgmvaORgEIMDTiLY+Eyw== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=54391/SHA-256 is now in the chain-of-trust
	`vc. 86400 IN DS ( 54391 8 2 8e38107261b61499f2e57a72e762ef501798a0462cb69e6afcc9c4a2539e6bff )`
	Query to b0.cctld.afilias-nst.org for vc/DNSKEY
	Received 893 bytes from 199.254.60.1
	;; Response received from [199.254.60.1] 893 octets ;; HEADER SECTION ;; id = 33181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vc. IN DNSKEY ;; ANSWER SECTION (4 records) vc. 3600 IN DNSKEY ( 257 3 8 AwEAAZd9pe1CqcjoRBDZHL9Fexa+cndzV3VKdOtvBBY8m6GNnu0B5t28G8Bgk9818qJ6HtHyaQCk YhCjLSjeg1PUPFbj1nx3uOkcuXCOmh8KxmplUXJt58e0zBtxB33OETpJIKP6IOXelBaOYNozu8WW yZ6IecursZzgw37+xx+NegSKTvZFvzVX4wSWy6cS+27+K6lNaTYN5UA++vpk2ZR2t7uSQO0isKW1 JUX5DFHZ9SxJ5sKv20QFYODsy9OLLBFIs5mbsk7UJus8rDT/WMWGTHArRUX92GbnkHxh/USrElKj IiEzeLoUZt0M+5WMWdsbrZF9xySyGjmHRRRBlO4fbX0= ) ; keytag 54391 vc. 3600 IN DNSKEY ( 256 3 8 AwEAAZOLJU1sQTP/OsIi8okTyjC0hKzSgUS/Q9EpAx8kQ4dJUTo4nadE1STw1NcMaOKt0AdWpHdJ tNzdQ2yHNSXU57+Dd2m/iIIYtj74niiCWl9/0GE3lDtVadtPr7P7HgzgQI6vHn8d32Zkxe8UwiJb 3RUQ/jEVrkT55XBx4mtuFXMN ) ; keytag 59544 vc. 3600 IN DNSKEY ( 256 3 8 AwEAAdiNVtJssoLDjEHuiyP082J0l02x31TMHSBMo2E8GddZ23J2hJIJTGMjIb5RtAc9xqY+j1hw lL+12DHVV/hE/orhXOhla7jjASMGWclvVDQIhM3JhCr0po0Fa8MCSk+wLeJi1FYuE/WD1btnRkU1 PM1WgtpFFat0+ZWBj2ssr6l9 ) ; keytag 30213 vc. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250915152121 20250825142121 54391 vc. K9p3vFnL+Osq7CgzbuyX4JjmqRNbGaLu9LSaxObT8TTnT40Lnv8+SsrpuFjr7qIge6lnHE8ete7G mGJVIb3xkr49c1t0kLXrx5QKu+uJTk4PdZ6+I9c+GfR2STYB/0hZbEhnuM4//A4mcxTunaf1sKyO sTzi9p/y9NsNwm/r7P1/DFvnHzskC2POhQH8bZr4BsFt4RDAnAgqoykoxhAw+wswyn8qvrU4gTGf V425+/OiPx4ypYpVGTbyPkEtgPq64lUOhXweeVsE9AEZKMt89UYLl3vYy2Tfc9E9tdDVOahmiOYe R2DeD5zBxFSqC6r0zArVavtzF4sYj/x4hCoZ5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for vc
	`vc. 3600 IN DNSKEY ( 257 3 8 AwEAAZd9pe1CqcjoRBDZHL9Fexa+cndzV3VKdOtvBBY8m6GNnu0B5t28G8Bgk9818qJ6HtHyaQCk YhCjLSjeg1PUPFbj1nx3uOkcuXCOmh8KxmplUXJt58e0zBtxB33OETpJIKP6IOXelBaOYNozu8WW yZ6IecursZzgw37+xx+NegSKTvZFvzVX4wSWy6cS+27+K6lNaTYN5UA++vpk2ZR2t7uSQO0isKW1 JUX5DFHZ9SxJ5sKv20QFYODsy9OLLBFIs5mbsk7UJus8rDT/WMWGTHArRUX92GbnkHxh/USrElKj IiEzeLoUZt0M+5WMWdsbrZF9xySyGjmHRRRBlO4fbX0= ) ; keytag 54391`
	`vc. 3600 IN DNSKEY ( 256 3 8 AwEAAZOLJU1sQTP/OsIi8okTyjC0hKzSgUS/Q9EpAx8kQ4dJUTo4nadE1STw1NcMaOKt0AdWpHdJ tNzdQ2yHNSXU57+Dd2m/iIIYtj74niiCWl9/0GE3lDtVadtPr7P7HgzgQI6vHn8d32Zkxe8UwiJb 3RUQ/jEVrkT55XBx4mtuFXMN ) ; keytag 59544`
	`vc. 3600 IN DNSKEY ( 256 3 8 AwEAAdiNVtJssoLDjEHuiyP082J0l02x31TMHSBMo2E8GddZ23J2hJIJTGMjIb5RtAc9xqY+j1hw lL+12DHVV/hE/orhXOhla7jjASMGWclvVDQIhM3JhCr0po0Fa8MCSk+wLeJi1FYuE/WD1btnRkU1 PM1WgtpFFat0+ZWBj2ssr6l9 ) ; keytag 30213`
	DNSKEY=54391/SEP is now in the chain-of-trust
	DS=54391/SHA-256 verifies DNSKEY=54391/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`vc. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250915152121 20250825142121 54391 vc. K9p3vFnL+Osq7CgzbuyX4JjmqRNbGaLu9LSaxObT8TTnT40Lnv8+SsrpuFjr7qIge6lnHE8ete7G mGJVIb3xkr49c1t0kLXrx5QKu+uJTk4PdZ6+I9c+GfR2STYB/0hZbEhnuM4//A4mcxTunaf1sKyO sTzi9p/y9NsNwm/r7P1/DFvnHzskC2POhQH8bZr4BsFt4RDAnAgqoykoxhAw+wswyn8qvrU4gTGf V425+/OiPx4ypYpVGTbyPkEtgPq64lUOhXweeVsE9AEZKMt89UYLl3vYy2Tfc9E9tdDVOahmiOYe R2DeD5zBxFSqC6r0zArVavtzF4sYj/x4hCoZ5Q== )`
	RRSIG=54391 and DNSKEY=54391/SEP verifies the DNSKEY RRset
	DNSKEY=59544 is now in the chain-of-trust
	DNSKEY=30213 is now in the chain-of-trust
	Query to d0.cctld.afilias-nst.org for 89.vc/A
	Received 575 bytes from 199.254.62.1
	;; Response received from [199.254.62.1] 575 octets ;; HEADER SECTION ;; id = 17181 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 89.vc. 3600 IN NS alan.ns.cloudflare.com. 89.vc. 3600 IN NS naomi.ns.cloudflare.com. 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN NSEC3 ( 1 1 0 73 6kkppcsj1im9oio8bp291bgf0iqjfi95 NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250920130553 20250830120553 30213 vc. FaXNFhuqAfPdefPSOKww3xvM557pt3e1E999yMkM39u2M90aZ7qyftxOp94ojac9Vg0DCXzPDy89 oZ01gkkftHV9Q6AbJLnQzbgqDXx5c4FRn91qsR6cbXuUWVvLkbBKHmxqRteLNVjoUOqDGOSvhd23 mjH6G85l9z53WLqQjzI= ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN NSEC3 ( 1 1 0 73 ns63oocjj59vk9psnrv3oe56q5s0flin NS DS RRSIG ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250915152121 20250825142121 30213 vc. I0cBDq7sQIHL8UcQJqHrX+mLKvIEeHufblDjZuL2p+/xSmj2i0KelRfrhNXOaqrEqqBHoRMNjt0B BCXUDwORFC12FaHtcFqW0QSM9OMflBYBIMOGaYX3u8yOHdE9xwwOhtuNQyARcyVLIuJuw0kCLxKh VQXN8xSKhAHl2CKWaK8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a0.cctld.afilias-nst.info for 89.vc/DNSKEY
	Received 575 bytes from 199.254.59.1
	;; Response received from [199.254.59.1] 575 octets ;; HEADER SECTION ;; id = 30107 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 89.vc. 3600 IN NS naomi.ns.cloudflare.com. 89.vc. 3600 IN NS alan.ns.cloudflare.com. 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN NSEC3 ( 1 1 0 73 6kkppcsj1im9oio8bp291bgf0iqjfi95 NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250920130553 20250830120553 30213 vc. FaXNFhuqAfPdefPSOKww3xvM557pt3e1E999yMkM39u2M90aZ7qyftxOp94ojac9Vg0DCXzPDy89 oZ01gkkftHV9Q6AbJLnQzbgqDXx5c4FRn91qsR6cbXuUWVvLkbBKHmxqRteLNVjoUOqDGOSvhd23 mjH6G85l9z53WLqQjzI= ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN NSEC3 ( 1 1 0 73 ns63oocjj59vk9psnrv3oe56q5s0flin NS DS RRSIG ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250915152121 20250825142121 30213 vc. I0cBDq7sQIHL8UcQJqHrX+mLKvIEeHufblDjZuL2p+/xSmj2i0KelRfrhNXOaqrEqqBHoRMNjt0B BCXUDwORFC12FaHtcFqW0QSM9OMflBYBIMOGaYX3u8yOHdE9xwwOhtuNQyARcyVLIuJuw0kCLxKh VQXN8xSKhAHl2CKWaK8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 89.vc

89.vc

	Checking DS between vc and 89.vc
	Query to b0.cctld.afilias-nst.org for 89.vc/DS
	Received 765 bytes from 199.254.60.1
	;; Response received from [199.254.60.1] 765 octets ;; HEADER SECTION ;; id = 14992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN NSEC3 ( 1 1 0 73 6kkppcsj1im9oio8bp291bgf0iqjfi95 NS SOA RRSIG DNSKEY NSEC3PARAM ) 6kgm1hnr8si2a6svd56idcrciekh8vpi.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250920130553 20250830120553 30213 vc. FaXNFhuqAfPdefPSOKww3xvM557pt3e1E999yMkM39u2M90aZ7qyftxOp94ojac9Vg0DCXzPDy89 oZ01gkkftHV9Q6AbJLnQzbgqDXx5c4FRn91qsR6cbXuUWVvLkbBKHmxqRteLNVjoUOqDGOSvhd23 mjH6G85l9z53WLqQjzI= ) vc. 3600 IN SOA ( a0.cctld.afilias-nst.info. hostmaster.donuts.email. 1756558972 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) vc. 3600 IN RRSIG ( SOA 8 1 3600 20250920130553 20250830120553 30213 vc. kTlW5Src0SmZ9Ye49nBfJWtAH9qIrw4rRvOuAhRXKedS6Icp/5hnAJpQqtgKPecDdZcAozO344zs QZUeWsGnKDtSCt2BmcHjCf8PnHkY8d5qQt6iBun728qXSsyaM4iXRfCejIda6NQjOSNLMC98dKc+ fW5SPCunA5Tnq/n/2N4= ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN NSEC3 ( 1 1 0 73 ns63oocjj59vk9psnrv3oe56q5s0flin NS DS RRSIG ) nqmra41r3rn0cg74is227gt1ra1qru5b.vc. 3600 IN RRSIG ( NSEC3 8 2 3600 20250915152121 20250825142121 30213 vc. I0cBDq7sQIHL8UcQJqHrX+mLKvIEeHufblDjZuL2p+/xSmj2i0KelRfrhNXOaqrEqqBHoRMNjt0B BCXUDwORFC12FaHtcFqW0QSM9OMflBYBIMOGaYX3u8yOHdE9xwwOhtuNQyARcyVLIuJuw0kCLxKh VQXN8xSKhAHl2CKWaK8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for 89.vc in the vc zone
	Query to alan.ns.cloudflare.com for 89.vc/DNSKEY
	Received 96 bytes from 108.162.193.57
	;; Response received from [108.162.193.57] 96 octets ;; HEADER SECTION ;; id = 46005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) 89.vc. 1800 IN SOA ( alan.ns.cloudflare.com. dns.cloudflare.com. 2380238701 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to naomi.ns.cloudflare.com for 89.vc/A
	Received 66 bytes from 172.64.32.208
	;; Response received from [172.64.32.208] 66 octets ;; HEADER SECTION ;; id = 40733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (2 records) 89.vc. 300 IN A 104.21.91.233 89.vc. 300 IN A 172.67.181.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	naomi.ns.cloudflare.com is authoritative for 89.vc
	Query to alan.ns.cloudflare.com for 89.vc/SOA
	Received 96 bytes from 108.162.193.57
	;; Response received from [108.162.193.57] 96 octets ;; HEADER SECTION ;; id = 19591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN SOA ;; ANSWER SECTION (1 record) 89.vc. 1800 IN SOA ( alan.ns.cloudflare.com. dns.cloudflare.com. 2380238701 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to naomi.ns.cloudflare.com for 89.vc/A
	Received 66 bytes from 172.64.32.208
	;; Response received from [172.64.32.208] 66 octets ;; HEADER SECTION ;; id = 34330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (2 records) 89.vc. 300 IN A 172.67.181.159 89.vc. 300 IN A 104.21.91.233 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	89.vc A RR has value 172.67.181.159
	89.vc A RR has value 104.21.91.233
	No RRSIGs found

89.vc

	Query to alan.ns.cloudflare.com for 89.vc/A
	Received 66 bytes from 172.64.33.57
	;; Response received from [172.64.33.57] 66 octets ;; HEADER SECTION ;; id = 64913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (2 records) 89.vc. 300 IN A 104.21.91.233 89.vc. 300 IN A 172.67.181.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	alan.ns.cloudflare.com is authoritative for 89.vc
	Query to alan.ns.cloudflare.com for 89.vc/A
	Received 66 bytes from 108.162.193.57
	;; Response received from [108.162.193.57] 66 octets ;; HEADER SECTION ;; id = 33910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 89.vc. IN A ;; ANSWER SECTION (2 records) 89.vc. 300 IN A 104.21.91.233 89.vc. 300 IN A 172.67.181.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	89.vc A RR has value 104.21.91.233
	89.vc A RR has value 172.67.181.159
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 89.vc at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: