DNSSEC Debugger - bstpoc.serviceconnect.defence.gov.au

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-10 14:56:17 UTC

Analyzing DNSSEC problems for bstpoc.serviceconnect.defence.gov.au

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1414 octets ;; HEADER SECTION ;; id = 26627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for bstpoc.serviceconnect.defence.gov.au/A
	Received 700 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 700 octets ;; HEADER SECTION ;; id = 45199 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bstpoc.serviceconnect.defence.gov.au. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) au. 172800 IN NS q.au. au. 172800 IN NS s.au. au. 172800 IN NS t.au. au. 172800 IN NS a.au. au. 172800 IN NS r.au. au. 86400 IN DS ( 32902 8 2 e80a9f8eca018ade79925da724a0cb0dbcf03c9a7049d20c9fb74b716ab7d329 ) au. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . So8oBhaQUXbwAqSH6KXbdcjC2h7uWgSO8QZj4R5nyDMYiPwJ8T+FsvarHcc/xclsWLU99CWsQbDb Sgi0sByOla6qKYM4XDcHBYJHk9tk5W72SixHCZpENqWVX7ZQeZVFefa3qWbcxxUap/fv6GV2Q2Qc XryYoQGEKFdjMJC8ohY3/sZ/69ZSgeRTxt9S+pZ9xw1W+uH31sDMq7XQAS7heOoMQoeKbhLHGTL2 yWuwPjKXk/vXTYIyOta93deP2Q/TjRcmmJzxzqQFDTCRiT+WJCWqel2Vah6ypHXGz3d430XgDN1X sNVLJG1WNO/EVh856rEdub1JDeXA6pTgYsO/Gg== ) ;; ADDITIONAL SECTION (11 records) a.au. 172800 IN A 58.65.254.1 q.au. 172800 IN A 65.22.196.1 r.au. 172800 IN A 65.22.197.1 s.au. 172800 IN A 65.22.198.1 t.au. 172800 IN A 65.22.199.1 a.au. 172800 IN AAAA 2407:6e00:254::1 q.au. 172800 IN AAAA 2a01:8840:be::1 r.au. 172800 IN AAAA 2a01:8840:bf::1 s.au. 172800 IN AAAA 2a01:8840:c0::1 t.au. 172800 IN AAAA 2a01:8840:c1::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for au/DNSKEY
	Received 666 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 666 octets ;; HEADER SECTION ;; id = 59753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; au. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) au. 172800 IN NS a.au. au. 172800 IN NS q.au. au. 172800 IN NS r.au. au. 172800 IN NS s.au. au. 172800 IN NS t.au. au. 86400 IN DS ( 32902 8 2 e80a9f8eca018ade79925da724a0cb0dbcf03c9a7049d20c9fb74b716ab7d329 ) au. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . So8oBhaQUXbwAqSH6KXbdcjC2h7uWgSO8QZj4R5nyDMYiPwJ8T+FsvarHcc/xclsWLU99CWsQbDb Sgi0sByOla6qKYM4XDcHBYJHk9tk5W72SixHCZpENqWVX7ZQeZVFefa3qWbcxxUap/fv6GV2Q2Qc XryYoQGEKFdjMJC8ohY3/sZ/69ZSgeRTxt9S+pZ9xw1W+uH31sDMq7XQAS7heOoMQoeKbhLHGTL2 yWuwPjKXk/vXTYIyOta93deP2Q/TjRcmmJzxzqQFDTCRiT+WJCWqel2Vah6ypHXGz3d430XgDN1X sNVLJG1WNO/EVh856rEdub1JDeXA6pTgYsO/Gg== ) ;; ADDITIONAL SECTION (11 records) a.au. 172800 IN A 58.65.254.1 q.au. 172800 IN A 65.22.196.1 r.au. 172800 IN A 65.22.197.1 s.au. 172800 IN A 65.22.198.1 t.au. 172800 IN A 65.22.199.1 a.au. 172800 IN AAAA 2407:6e00:254::1 q.au. 172800 IN AAAA 2a01:8840:be::1 r.au. 172800 IN AAAA 2a01:8840:bf::1 s.au. 172800 IN AAAA 2a01:8840:c0::1 t.au. 172800 IN AAAA 2a01:8840:c1::1 ;; { "EDNS-VERSION": 0 }
	Found child zone au

	Checking DS between . and au
	Query to j.root-servers.net for au/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 60873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; au. IN DS ;; ANSWER SECTION (2 records) au. 86400 IN DS ( 32902 8 2 e80a9f8eca018ade79925da724a0cb0dbcf03c9a7049d20c9fb74b716ab7d329 ) au. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . So8oBhaQUXbwAqSH6KXbdcjC2h7uWgSO8QZj4R5nyDMYiPwJ8T+FsvarHcc/xclsWLU99CWsQbDb Sgi0sByOla6qKYM4XDcHBYJHk9tk5W72SixHCZpENqWVX7ZQeZVFefa3qWbcxxUap/fv6GV2Q2Qc XryYoQGEKFdjMJC8ohY3/sZ/69ZSgeRTxt9S+pZ9xw1W+uH31sDMq7XQAS7heOoMQoeKbhLHGTL2 yWuwPjKXk/vXTYIyOta93deP2Q/TjRcmmJzxzqQFDTCRiT+WJCWqel2Vah6ypHXGz3d430XgDN1X sNVLJG1WNO/EVh856rEdub1JDeXA6pTgYsO/Gg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for au in the . zone
	DS=32902/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`au. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . So8oBhaQUXbwAqSH6KXbdcjC2h7uWgSO8QZj4R5nyDMYiPwJ8T+FsvarHcc/xclsWLU99CWsQbDb Sgi0sByOla6qKYM4XDcHBYJHk9tk5W72SixHCZpENqWVX7ZQeZVFefa3qWbcxxUap/fv6GV2Q2Qc XryYoQGEKFdjMJC8ohY3/sZ/69ZSgeRTxt9S+pZ9xw1W+uH31sDMq7XQAS7heOoMQoeKbhLHGTL2 yWuwPjKXk/vXTYIyOta93deP2Q/TjRcmmJzxzqQFDTCRiT+WJCWqel2Vah6ypHXGz3d430XgDN1X sNVLJG1WNO/EVh856rEdub1JDeXA6pTgYsO/Gg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=32902/SHA-256 is now in the chain-of-trust
	`au. 86400 IN DS ( 32902 8 2 e80a9f8eca018ade79925da724a0cb0dbcf03c9a7049d20c9fb74b716ab7d329 )`
	Query to s.au for au/DNSKEY
	Received 1439 bytes from 65.22.198.1
	;; Response received from [65.22.198.1] 1439 octets ;; HEADER SECTION ;; id = 39718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; au. IN DNSKEY ;; ANSWER SECTION (5 records) au. 43200 IN DNSKEY ( 257 3 8 AwEAAbN9ANmVl02dhS66z5UwcjTox2v96j7qRPCnH/I3x+tDk3iPgqF8fR74uvydg6b32xWNtIOt GfwWWTZ+6iwiuGTXapk2YC8ksWyOmXsSw0QNHx9KMMJxiECpWfTLm3zSqdzk/ga5jkX3+4S/R25T eqMBP4CjIOIi3poWrlPVwe6xFi/ixfM0cueBEKRVmUuxyIBcyYrx3HxAAq0F7ahxINrtJmFSTNjt qF/e8geyaPDlgHZGnLEPZD+dOumnmZbfkHu+/VYpsaMekKdMIThYBPbjokcPr/eYV4/il0CLtjpY Yx1G4Jq/68JZ4BxzDQCTCD4JCAhdDln+Csy+1R32WA8= ) ; keytag 32902 au. 43200 IN DNSKEY ( 257 3 8 AwEAAdAQxB3BZX9qZeWHchaE4/nR4El5f4ZKigVucQvIdRLCewnCT9+GFvHM0Mmc64eij3mV6aWu Hz/inI0y62a4TDGwPVgxmFnrbsWfeN/ZLw5ePCwvIkiryIhDFmYVwu2nAhSwGzB/En9Ohftmd2V9 e5Q7trpPVdaMi8fvx1RtYfzb/PKZ9rgp1DG1uPQlktMpoGpjVXl+h6gi7V80qnNhwDoyNv08UOAB f1oPLVflaUbfYRT4Ho55ZvBuvMlx8RxtaLDHIQhij6MVn3Dne6vEMKKQLeV77CbN4fBZCfQWWGEM EF8PA6SRPRwfzWBxxwnoVXceEXvYcQI/HNRVNnc794k= ) ; keytag 26642 au. 43200 IN DNSKEY ( 256 3 8 AwEAAa2R5SOJ+lcR2p3zDs+zZPOZ3DOt4Z+3QIKG5mH1ZZS1ulgjkuT3b/STHIeooWD3K3ay4Po0 MVVAZ5d2ysccbYkEnNZoM7Wh9sckjvJ3r7H7YOXThB2eqLYgCWzVEkORsMZvKvGrqeFVd6GygWcv EcuybidBCcqAwBK0Cvy6s9DH5vGGh3hQeqr2NuuPF5dYxQdspfYnGPuTrYp5WjdzWYJqsoLOFQtq bXmHmzv8bWmu+mjkEQep3Z4D97jW9VAmgeXiQ3Prpc9NG8aTFW3hrRzxO5EHaSxV6+rJayQK8GeX YamNPXogtmrT7+Og0yMpY/wfroI5RtRcw/7NCuLCA0c= ) ; keytag 46426 au. 43200 IN RRSIG ( DNSKEY 8 1 43200 20260812000000 20260630223000 26642 au. aAygoggE+5VYQq0wzIDxzd+C8jcSGw7w/WMkmrKYTlHivF+zed4M4izqKlXVeAGq+6C6f2/grSMW HxsfwSHk3redrcaLRH5uWZdxII4x1Me1M5lDAOYn1bbkew8X62X7yHRphLa8Cg/R7PlzVEBuE+4g psDb3VaHAGPltTRdNxISUp0uJMhQoIIX0EosCjFE9flnreF/X69CszPZbnhSu+tu/pPLpc8KlFb2 mKUiBJJn+7Dq5nW8XjusA6wLJDMK4bOJaDbZhFymiJ6HyLDgAAOdGjQywgWDkBAibwIgUdlXxWK8 Dh19JcCCeVLTQKJ6vObMa2jdeCFOhZRqL4vJTw== ) au. 43200 IN RRSIG ( DNSKEY 8 1 43200 20260812000000 20260630223000 32902 au. bZrEznWMyUWLS0KocE7koIPaj+gXSH6MSA98sSS+TjKEw1VzFZ9YLhEueUls/iYERgKWlcsvbC8n 6gybzx0ctwsx+sS28j333oqvhvdGEmWhldas3xJmJ/T7LBLlyIgNnLL/T5k8t7lE9seK6j3AOhrb grFKivYnpVeKuFIT1TkXJzVthggkzdUBu7FcNyfOD2hsc/wX+mtb2+X3GTUKBVJnsHDEY1cH2VCr Wl9j8tXOywe5FwVnjmxNKfZNIYAi3LAL0pkYwdbqCJsMLUA/wgWO7ygVVDuWoxNaAN4wrRkz2XX1 UNixNox+V0M462KK0TNq8dROi780GBVVgu4k2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for au
	`au. 43200 IN DNSKEY ( 257 3 8 AwEAAbN9ANmVl02dhS66z5UwcjTox2v96j7qRPCnH/I3x+tDk3iPgqF8fR74uvydg6b32xWNtIOt GfwWWTZ+6iwiuGTXapk2YC8ksWyOmXsSw0QNHx9KMMJxiECpWfTLm3zSqdzk/ga5jkX3+4S/R25T eqMBP4CjIOIi3poWrlPVwe6xFi/ixfM0cueBEKRVmUuxyIBcyYrx3HxAAq0F7ahxINrtJmFSTNjt qF/e8geyaPDlgHZGnLEPZD+dOumnmZbfkHu+/VYpsaMekKdMIThYBPbjokcPr/eYV4/il0CLtjpY Yx1G4Jq/68JZ4BxzDQCTCD4JCAhdDln+Csy+1R32WA8= ) ; keytag 32902`
	`au. 43200 IN DNSKEY ( 257 3 8 AwEAAdAQxB3BZX9qZeWHchaE4/nR4El5f4ZKigVucQvIdRLCewnCT9+GFvHM0Mmc64eij3mV6aWu Hz/inI0y62a4TDGwPVgxmFnrbsWfeN/ZLw5ePCwvIkiryIhDFmYVwu2nAhSwGzB/En9Ohftmd2V9 e5Q7trpPVdaMi8fvx1RtYfzb/PKZ9rgp1DG1uPQlktMpoGpjVXl+h6gi7V80qnNhwDoyNv08UOAB f1oPLVflaUbfYRT4Ho55ZvBuvMlx8RxtaLDHIQhij6MVn3Dne6vEMKKQLeV77CbN4fBZCfQWWGEM EF8PA6SRPRwfzWBxxwnoVXceEXvYcQI/HNRVNnc794k= ) ; keytag 26642`
	`au. 43200 IN DNSKEY ( 256 3 8 AwEAAa2R5SOJ+lcR2p3zDs+zZPOZ3DOt4Z+3QIKG5mH1ZZS1ulgjkuT3b/STHIeooWD3K3ay4Po0 MVVAZ5d2ysccbYkEnNZoM7Wh9sckjvJ3r7H7YOXThB2eqLYgCWzVEkORsMZvKvGrqeFVd6GygWcv EcuybidBCcqAwBK0Cvy6s9DH5vGGh3hQeqr2NuuPF5dYxQdspfYnGPuTrYp5WjdzWYJqsoLOFQtq bXmHmzv8bWmu+mjkEQep3Z4D97jW9VAmgeXiQ3Prpc9NG8aTFW3hrRzxO5EHaSxV6+rJayQK8GeX YamNPXogtmrT7+Og0yMpY/wfroI5RtRcw/7NCuLCA0c= ) ; keytag 46426`
	DNSKEY=32902/SEP is now in the chain-of-trust
	DS=32902/SHA-256 verifies DNSKEY=32902/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`au. 43200 IN RRSIG ( DNSKEY 8 1 43200 20260812000000 20260630223000 26642 au. aAygoggE+5VYQq0wzIDxzd+C8jcSGw7w/WMkmrKYTlHivF+zed4M4izqKlXVeAGq+6C6f2/grSMW HxsfwSHk3redrcaLRH5uWZdxII4x1Me1M5lDAOYn1bbkew8X62X7yHRphLa8Cg/R7PlzVEBuE+4g psDb3VaHAGPltTRdNxISUp0uJMhQoIIX0EosCjFE9flnreF/X69CszPZbnhSu+tu/pPLpc8KlFb2 mKUiBJJn+7Dq5nW8XjusA6wLJDMK4bOJaDbZhFymiJ6HyLDgAAOdGjQywgWDkBAibwIgUdlXxWK8 Dh19JcCCeVLTQKJ6vObMa2jdeCFOhZRqL4vJTw== )`
	`au. 43200 IN RRSIG ( DNSKEY 8 1 43200 20260812000000 20260630223000 32902 au. bZrEznWMyUWLS0KocE7koIPaj+gXSH6MSA98sSS+TjKEw1VzFZ9YLhEueUls/iYERgKWlcsvbC8n 6gybzx0ctwsx+sS28j333oqvhvdGEmWhldas3xJmJ/T7LBLlyIgNnLL/T5k8t7lE9seK6j3AOhrb grFKivYnpVeKuFIT1TkXJzVthggkzdUBu7FcNyfOD2hsc/wX+mtb2+X3GTUKBVJnsHDEY1cH2VCr Wl9j8tXOywe5FwVnjmxNKfZNIYAi3LAL0pkYwdbqCJsMLUA/wgWO7ygVVDuWoxNaAN4wrRkz2XX1 UNixNox+V0M462KK0TNq8dROi780GBVVgu4k2Q== )`
	RRSIG=26642 and DNSKEY=26642/SEP verifies the DNSKEY RRset
	RRSIG=32902 and DNSKEY=32902/SEP verifies the DNSKEY RRset
	DNSKEY=26642/SEP is now in the chain-of-trust
	DNSKEY=46426 is now in the chain-of-trust
	Query to s.au for bstpoc.serviceconnect.defence.gov.au/A
	Received 641 bytes from 65.22.198.1
	;; Response received from [65.22.198.1] 641 octets ;; HEADER SECTION ;; id = 57004 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bstpoc.serviceconnect.defence.gov.au. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) defence.gov.au. 3600 IN NS actns01.defence.gov.au. defence.gov.au. 3600 IN NS nactns01.defence.gov.au. t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab tf5alsfv3ga8u9nsnkbrpf0gtddqfhjq NS SOA RRSIG DNSKEY NSEC3PARAM ) t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260731145356 20260710135356 61833 gov.au. D/GL8uBGEejY10s8zpMW+u2/l3aijC4G5VWqP6xe+MkKVJxp3FIYgojCFgoNhmsC5krcughKDyvP 2/kDP6ttMEFRMa/AnaO0sYBX+lFB4gBp3al4ir9T/e3C/7k3ztkIlOKbJLBiO911/mZsMmPrCumG 1p0g/QhS8rrn+keztQ4= ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab d7de3ol02dp4pt1o44a1hssugjlrlg98 A AAAA RRSIG ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260730151621 20260709141621 61833 gov.au. NaMktv6Pp7A6/lq3SMZkNiXZaBeuzSDyHN1Lvg0m/RYOBTu451hdgiZEGwMwfS2+0Tvc9ULMqdMg jmHEmKgXNIVyCFjJC9PAFRUIVQcHOLipz1+7c7psU3U4I8ARCeOQX8TXA4edmGkX9WfZ3jqB4rJG /YvPRZKlzvvuGOa3z0Q= ) ;; ADDITIONAL SECTION (3 records) actns01.defence.gov.au. 3600 IN A 203.6.66.1 nactns01.defence.gov.au. 3600 IN A 203.6.74.1 ;; { "EDNS-VERSION": 0 }
	Query to s.au for gov.au/DNSKEY
	Received 901 bytes from 65.22.198.1
	;; Response received from [65.22.198.1] 901 octets ;; HEADER SECTION ;; id = 23025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.au. IN DNSKEY ;; ANSWER SECTION (4 records) gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAZgXrg4FBI1LHFIjYkJi4g7t2jYXTlttS0E/SITAZQQF/Lowy8mlnmMFprQIpIEuoLqw/aLW 2jurxPdBYIpj/GbVWfJMlrTueaXCAikR034tp+SwXec4wkOy7RL/DpGf4bUg0JEFEDnBNvsaj5xU 3LcmHMYJL8XLfCmaGQOA0dDv ) ; keytag 61833 gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAdthHcINRrbTPLMgrcOf+D9fE3HTetKRH1xKkP5pzBnbAPWZ52+AHx2AMWcVIkgUK7Q4MI14 RGTdM1mSRre8ySUl+Jf3LE9NUSEhPGmJf6dDDIQAhqKbQCL/14BPEdfpRjIokQtVaNHj6i1OUios RHZfz1vh81bI5ZPSQ4WMsz8H ) ; keytag 22653 gov.au. 3600 IN DNSKEY ( 257 3 8 AwEAAXp5XL850TmV6pDGZWNAnw8nEiD4Yn/L/vbW2hhOZfZ5mjfFJb5TebcBsZ8kyf/mgqMmwlmK RWeQYNrCqEzWAHl2ZC3UlSPxjBDcHwBrFEI0cDCYaaUF3fQ6VVSvpFXkTKeKN001EDpdAUVhEQ8S 2VveXAX3gccX9SjagPTbQUriidiqaF4t9wuI9K9iZbBE1Dh4E/UlmSUJEBtm+MX2bLa/OYFQGBwP ZBTI6uIEI8tOusO73XyVqENfMRgsZb09UmL4I9NcKHIGg4IcJqBYY/DGo4ZDOZhU83Ll2MG1nnS5 a7IAUZ1qiz34WGIdmuJ4idirnjXcMT/PGK5QkYAL0NU= ) ; keytag 2222 gov.au. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260730151621 20260709141621 2222 gov.au. BAzzzuRaeUqJhWzexOBJG8kAX6QLPq7Qz1OOQ7qoq1x3NAnP++CziYkvGvPdEUunBk6AaDqqlsfE ufC8CL+0oLPHZxGwls3uCgXsIwjgEenMWqa8TI8slKSeP66dUdmNAKzrCoOh5HPRyQHlWsEuwW/9 UNwek+/USddYzRDlEvgto/vprmG5i0w0HxgBBpSw1CqT5fcz8Cl2gf+ikWYwUJWJ0pbRlAu/dswR +a9kdigaYXM+pvVXDerzX/M7UFmBQ63uHiIB5Z05DSZ3MWtw6GwO9pVIaC3Vupe040ytX6k5tI1+ 2dtO1SLVbxhl0g2ThgZNjX6jOb/ZhfetT5w1oQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone gov.au
	Attempting to learn nameservers for gov.au
	Query to s.au for gov.au/NS
	Received 281 bytes from 65.22.198.1
	;; Response received from [65.22.198.1] 281 octets ;; HEADER SECTION ;; id = 53508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.au. IN NS ;; ANSWER SECTION (6 records) gov.au. 3600 IN NS a.au. gov.au. 3600 IN NS t.au. gov.au. 3600 IN NS q.au. gov.au. 3600 IN NS r.au. gov.au. 3600 IN NS s.au. gov.au. 3600 IN RRSIG ( NS 8 2 3600 20260730151621 20260709141621 61833 gov.au. E7KrZx2CYPSvQKVeL8212dv6Gn7ubDKQQjtL9hmuqzzpgc/uQRjOzG6Mquxg4AXRkhBe96eVwAtE SCHBz4auFS/zvtiLbE8E1ovIC1cedICl6bS6XruEIzpXIObyLds7DUwZ4NLfDmpZHIYhTKp1EcxE L/SKOE+fNbhqT67nVZA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found gov.au nameservers: a.au, t.au, q.au, r.au, s.au

gov.au

	Checking DS between au and gov.au
	Query to a.au for gov.au/DS
	Received 373 bytes from 58.65.254.1
	;; Response received from [58.65.254.1] 373 octets ;; HEADER SECTION ;; id = 17930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.au. IN DS ;; ANSWER SECTION (2 records) gov.au. 3600 IN DS ( 2222 8 2 7e21f4c18fa31d6630dd27dcc1754cfdf9addc2c56fb8a85704d87d968053f66 ) gov.au. 3600 IN RRSIG ( DS 8 2 3600 20260820151922 20260709134922 46426 au. X/vsYJAtm+wcuPkII/mEZVtglEMospl4zq7qT4RsJnJE/AYiCKpNdtD4tFcG7HPzIRdnLLwh2L15 forfczbUJjH1nkNgaPyr3+qVBh7pXABcwzL+SDCaA/NirJzoqFJmQ+bhhhFcX9M2SIfDkcxOQMmS LnqKCP3ELd+9XrJGt0b2P9kcymbhP8T6DK15xNUDL4jyAreGbwlhmdjOvRoznERjl3o08lVpEcfF EH/ipEftRQ3isLxOg7ocs0XJNHalvMttZr5ocTxerrnzbcqupZGDSFk0yoOWgMOvdvkxsrvsT770 ETMLT+zjYVs8Q8PLIBFPK5Ws893FuLSdCnqFlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.au in the au zone
	DS=2222/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov.au. 3600 IN RRSIG ( DS 8 2 3600 20260820151922 20260709134922 46426 au. X/vsYJAtm+wcuPkII/mEZVtglEMospl4zq7qT4RsJnJE/AYiCKpNdtD4tFcG7HPzIRdnLLwh2L15 forfczbUJjH1nkNgaPyr3+qVBh7pXABcwzL+SDCaA/NirJzoqFJmQ+bhhhFcX9M2SIfDkcxOQMmS LnqKCP3ELd+9XrJGt0b2P9kcymbhP8T6DK15xNUDL4jyAreGbwlhmdjOvRoznERjl3o08lVpEcfF EH/ipEftRQ3isLxOg7ocs0XJNHalvMttZr5ocTxerrnzbcqupZGDSFk0yoOWgMOvdvkxsrvsT770 ETMLT+zjYVs8Q8PLIBFPK5Ws893FuLSdCnqFlQ== )`
	RRSIG=46426 and DNSKEY=46426 verifies the DS RRset
	DS=2222/SHA-256 is now in the chain-of-trust
	`gov.au. 3600 IN DS ( 2222 8 2 7e21f4c18fa31d6630dd27dcc1754cfdf9addc2c56fb8a85704d87d968053f66 )`
	Query to a.au for gov.au/DNSKEY
	Received 901 bytes from 58.65.254.1
	;; Response received from [58.65.254.1] 901 octets ;; HEADER SECTION ;; id = 42233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.au. IN DNSKEY ;; ANSWER SECTION (4 records) gov.au. 3600 IN DNSKEY ( 257 3 8 AwEAAXp5XL850TmV6pDGZWNAnw8nEiD4Yn/L/vbW2hhOZfZ5mjfFJb5TebcBsZ8kyf/mgqMmwlmK RWeQYNrCqEzWAHl2ZC3UlSPxjBDcHwBrFEI0cDCYaaUF3fQ6VVSvpFXkTKeKN001EDpdAUVhEQ8S 2VveXAX3gccX9SjagPTbQUriidiqaF4t9wuI9K9iZbBE1Dh4E/UlmSUJEBtm+MX2bLa/OYFQGBwP ZBTI6uIEI8tOusO73XyVqENfMRgsZb09UmL4I9NcKHIGg4IcJqBYY/DGo4ZDOZhU83Ll2MG1nnS5 a7IAUZ1qiz34WGIdmuJ4idirnjXcMT/PGK5QkYAL0NU= ) ; keytag 2222 gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAZgXrg4FBI1LHFIjYkJi4g7t2jYXTlttS0E/SITAZQQF/Lowy8mlnmMFprQIpIEuoLqw/aLW 2jurxPdBYIpj/GbVWfJMlrTueaXCAikR034tp+SwXec4wkOy7RL/DpGf4bUg0JEFEDnBNvsaj5xU 3LcmHMYJL8XLfCmaGQOA0dDv ) ; keytag 61833 gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAdthHcINRrbTPLMgrcOf+D9fE3HTetKRH1xKkP5pzBnbAPWZ52+AHx2AMWcVIkgUK7Q4MI14 RGTdM1mSRre8ySUl+Jf3LE9NUSEhPGmJf6dDDIQAhqKbQCL/14BPEdfpRjIokQtVaNHj6i1OUios RHZfz1vh81bI5ZPSQ4WMsz8H ) ; keytag 22653 gov.au. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260730151621 20260709141621 2222 gov.au. BAzzzuRaeUqJhWzexOBJG8kAX6QLPq7Qz1OOQ7qoq1x3NAnP++CziYkvGvPdEUunBk6AaDqqlsfE ufC8CL+0oLPHZxGwls3uCgXsIwjgEenMWqa8TI8slKSeP66dUdmNAKzrCoOh5HPRyQHlWsEuwW/9 UNwek+/USddYzRDlEvgto/vprmG5i0w0HxgBBpSw1CqT5fcz8Cl2gf+ikWYwUJWJ0pbRlAu/dswR +a9kdigaYXM+pvVXDerzX/M7UFmBQ63uHiIB5Z05DSZ3MWtw6GwO9pVIaC3Vupe040ytX6k5tI1+ 2dtO1SLVbxhl0g2ThgZNjX6jOb/ZhfetT5w1oQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for gov.au
	`gov.au. 3600 IN DNSKEY ( 257 3 8 AwEAAXp5XL850TmV6pDGZWNAnw8nEiD4Yn/L/vbW2hhOZfZ5mjfFJb5TebcBsZ8kyf/mgqMmwlmK RWeQYNrCqEzWAHl2ZC3UlSPxjBDcHwBrFEI0cDCYaaUF3fQ6VVSvpFXkTKeKN001EDpdAUVhEQ8S 2VveXAX3gccX9SjagPTbQUriidiqaF4t9wuI9K9iZbBE1Dh4E/UlmSUJEBtm+MX2bLa/OYFQGBwP ZBTI6uIEI8tOusO73XyVqENfMRgsZb09UmL4I9NcKHIGg4IcJqBYY/DGo4ZDOZhU83Ll2MG1nnS5 a7IAUZ1qiz34WGIdmuJ4idirnjXcMT/PGK5QkYAL0NU= ) ; keytag 2222`
	`gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAZgXrg4FBI1LHFIjYkJi4g7t2jYXTlttS0E/SITAZQQF/Lowy8mlnmMFprQIpIEuoLqw/aLW 2jurxPdBYIpj/GbVWfJMlrTueaXCAikR034tp+SwXec4wkOy7RL/DpGf4bUg0JEFEDnBNvsaj5xU 3LcmHMYJL8XLfCmaGQOA0dDv ) ; keytag 61833`
	`gov.au. 3600 IN DNSKEY ( 256 3 8 AwEAAdthHcINRrbTPLMgrcOf+D9fE3HTetKRH1xKkP5pzBnbAPWZ52+AHx2AMWcVIkgUK7Q4MI14 RGTdM1mSRre8ySUl+Jf3LE9NUSEhPGmJf6dDDIQAhqKbQCL/14BPEdfpRjIokQtVaNHj6i1OUios RHZfz1vh81bI5ZPSQ4WMsz8H ) ; keytag 22653`
	DNSKEY=2222/SEP is now in the chain-of-trust
	DS=2222/SHA-256 verifies DNSKEY=2222/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov.au. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260730151621 20260709141621 2222 gov.au. BAzzzuRaeUqJhWzexOBJG8kAX6QLPq7Qz1OOQ7qoq1x3NAnP++CziYkvGvPdEUunBk6AaDqqlsfE ufC8CL+0oLPHZxGwls3uCgXsIwjgEenMWqa8TI8slKSeP66dUdmNAKzrCoOh5HPRyQHlWsEuwW/9 UNwek+/USddYzRDlEvgto/vprmG5i0w0HxgBBpSw1CqT5fcz8Cl2gf+ikWYwUJWJ0pbRlAu/dswR +a9kdigaYXM+pvVXDerzX/M7UFmBQ63uHiIB5Z05DSZ3MWtw6GwO9pVIaC3Vupe040ytX6k5tI1+ 2dtO1SLVbxhl0g2ThgZNjX6jOb/ZhfetT5w1oQ== )`
	RRSIG=2222 and DNSKEY=2222/SEP verifies the DNSKEY RRset
	DNSKEY=61833 is now in the chain-of-trust
	DNSKEY=22653 is now in the chain-of-trust
	Query to r.au for bstpoc.serviceconnect.defence.gov.au/A
	Received 641 bytes from 65.22.197.1
	;; Response received from [65.22.197.1] 641 octets ;; HEADER SECTION ;; id = 30512 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bstpoc.serviceconnect.defence.gov.au. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) defence.gov.au. 3600 IN NS actns01.defence.gov.au. defence.gov.au. 3600 IN NS nactns01.defence.gov.au. t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab tf5alsfv3ga8u9nsnkbrpf0gtddqfhjq NS SOA RRSIG DNSKEY NSEC3PARAM ) t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260731145356 20260710135356 61833 gov.au. D/GL8uBGEejY10s8zpMW+u2/l3aijC4G5VWqP6xe+MkKVJxp3FIYgojCFgoNhmsC5krcughKDyvP 2/kDP6ttMEFRMa/AnaO0sYBX+lFB4gBp3al4ir9T/e3C/7k3ztkIlOKbJLBiO911/mZsMmPrCumG 1p0g/QhS8rrn+keztQ4= ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab d7de3ol02dp4pt1o44a1hssugjlrlg98 A AAAA RRSIG ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260730151621 20260709141621 61833 gov.au. NaMktv6Pp7A6/lq3SMZkNiXZaBeuzSDyHN1Lvg0m/RYOBTu451hdgiZEGwMwfS2+0Tvc9ULMqdMg jmHEmKgXNIVyCFjJC9PAFRUIVQcHOLipz1+7c7psU3U4I8ARCeOQX8TXA4edmGkX9WfZ3jqB4rJG /YvPRZKlzvvuGOa3z0Q= ) ;; ADDITIONAL SECTION (3 records) actns01.defence.gov.au. 3600 IN A 203.6.66.1 nactns01.defence.gov.au. 3600 IN A 203.6.74.1 ;; { "EDNS-VERSION": 0 }
	Query to q.au for defence.gov.au/DNSKEY
	Received 619 bytes from 65.22.196.1
	;; Response received from [65.22.196.1] 619 octets ;; HEADER SECTION ;; id = 22519 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defence.gov.au. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) defence.gov.au. 3600 IN NS actns01.defence.gov.au. defence.gov.au. 3600 IN NS nactns01.defence.gov.au. t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab tf5alsfv3ga8u9nsnkbrpf0gtddqfhjq NS SOA RRSIG DNSKEY NSEC3PARAM ) t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260731145356 20260710135356 61833 gov.au. D/GL8uBGEejY10s8zpMW+u2/l3aijC4G5VWqP6xe+MkKVJxp3FIYgojCFgoNhmsC5krcughKDyvP 2/kDP6ttMEFRMa/AnaO0sYBX+lFB4gBp3al4ir9T/e3C/7k3ztkIlOKbJLBiO911/mZsMmPrCumG 1p0g/QhS8rrn+keztQ4= ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab d7de3ol02dp4pt1o44a1hssugjlrlg98 A AAAA RRSIG ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260730151621 20260709141621 61833 gov.au. NaMktv6Pp7A6/lq3SMZkNiXZaBeuzSDyHN1Lvg0m/RYOBTu451hdgiZEGwMwfS2+0Tvc9ULMqdMg jmHEmKgXNIVyCFjJC9PAFRUIVQcHOLipz1+7c7psU3U4I8ARCeOQX8TXA4edmGkX9WfZ3jqB4rJG /YvPRZKlzvvuGOa3z0Q= ) ;; ADDITIONAL SECTION (3 records) actns01.defence.gov.au. 3600 IN A 203.6.66.1 nactns01.defence.gov.au. 3600 IN A 203.6.74.1 ;; { "EDNS-VERSION": 0 }
	Found child zone defence.gov.au

defence.gov.au

	Checking DS between gov.au and defence.gov.au
	Query to t.au for defence.gov.au/DS
	Received 769 bytes from 65.22.199.1
	;; Response received from [65.22.199.1] 769 octets ;; HEADER SECTION ;; id = 58318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defence.gov.au. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov.au. 3600 IN SOA ( q.au. hostmaster.donuts.email. 1783695202 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab tf5alsfv3ga8u9nsnkbrpf0gtddqfhjq NS SOA RRSIG DNSKEY NSEC3PARAM ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN NSEC3 ( 1 1 1 d399eaab d7de3ol02dp4pt1o44a1hssugjlrlg98 A AAAA RRSIG ) gov.au. 3600 IN RRSIG ( SOA 8 2 3600 20260731145356 20260710135356 61833 gov.au. T4K+5dTrf8kb1gxzCcNCYgv1OzYJk/zlpV4gXEB2jW1z1aps6g0DzzbTORZtDluiScVl2OfmwsqJ ApuvvwerDhH+V7CK/NJWg4/GVck5Lq4t0bzQMQb7T8DRuqsO1b7z336b053vyBJ6OudgoBh8OUu1 H/RwsCU+r8Ku8pPgVDo= ) t4bv9tj3neu3iaj9svbcrnpsoklreo26.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260731145356 20260710135356 61833 gov.au. D/GL8uBGEejY10s8zpMW+u2/l3aijC4G5VWqP6xe+MkKVJxp3FIYgojCFgoNhmsC5krcughKDyvP 2/kDP6ttMEFRMa/AnaO0sYBX+lFB4gBp3al4ir9T/e3C/7k3ztkIlOKbJLBiO911/mZsMmPrCumG 1p0g/QhS8rrn+keztQ4= ) bspbplrkeu2vhvvsd5i8b9urnf74a4gf.gov.au. 3600 IN RRSIG ( NSEC3 8 3 3600 20260730151621 20260709141621 61833 gov.au. NaMktv6Pp7A6/lq3SMZkNiXZaBeuzSDyHN1Lvg0m/RYOBTu451hdgiZEGwMwfS2+0Tvc9ULMqdMg jmHEmKgXNIVyCFjJC9PAFRUIVQcHOLipz1+7c7psU3U4I8ARCeOQX8TXA4edmGkX9WfZ3jqB4rJG /YvPRZKlzvvuGOa3z0Q= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for defence.gov.au in the gov.au zone
	Query to actns01.defence.gov.au for defence.gov.au/DNSKEY
	Received 98 bytes from 203.6.66.1
	;; Response received from [203.6.66.1] 98 octets ;; HEADER SECTION ;; id = 28234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defence.gov.au. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) defence.gov.au. 3600 IN SOA ( actns01.defence.gov.au. hostmaster.defence.gov.au. 2026071001 ;serial 10800 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to nactns01.defence.gov.au for bstpoc.serviceconnect.defence.gov.au/A
	Received 136 bytes from 203.6.74.1
	;; Response received from [203.6.74.1] 136 octets ;; HEADER SECTION ;; id = 22257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bstpoc.serviceconnect.defence.gov.au. IN A ;; ANSWER SECTION (1 record) bstpoc.serviceconnect.defence.gov.au. 3600 IN CNAME ( npserviceconnectappgw.australiacentral.cloudapp.azure.com. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nactns01.defence.gov.au is authoritative for bstpoc.serviceconnect.defence.gov.au
	Query to actns01.defence.gov.au for serviceconnect.defence.gov.au/DNSKEY
	Received 113 bytes from 203.6.66.1
	;; Response received from [203.6.66.1] 113 octets ;; HEADER SECTION ;; id = 52943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; serviceconnect.defence.gov.au. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) defence.gov.au. 3600 IN SOA ( actns01.defence.gov.au. hostmaster.defence.gov.au. 2026071001 ;serial 10800 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to actns01.defence.gov.au for bstpoc.serviceconnect.defence.gov.au/DNSKEY
	Received 136 bytes from 203.6.66.1
	;; Response received from [203.6.66.1] 136 octets ;; HEADER SECTION ;; id = 51222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bstpoc.serviceconnect.defence.gov.au. IN DNSKEY ;; ANSWER SECTION (1 record) bstpoc.serviceconnect.defence.gov.au. 3600 IN CNAME ( npserviceconnectappgw.australiacentral.cloudapp.azure.com. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bstpoc.serviceconnect.defence.gov.au is a CNAME to npserviceconnectappgw.australiacentral.cloudapp.azure.com
	No RRSIGs found

	Query to h.root-servers.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 1189 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1189 octets ;; HEADER SECTION ;; id = 48978 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 26 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . iLJMlL1o8cEq3g7HIE3/CZBFAhwz57HAjmA+1jSkz6VP1JVM6hKkt92Gn6/eQcQPrHaXDs3vQTzU crt60bHzf0i3jmbLVTlYfMwctMVkr/Pdr7Tk9KoMYQrExyc7xJsqpZEQesGvTNfs60iwHjzfxbKv KQZYjdA9djW73BcAJfRebWqOE4h0h4R3lGpQipNABwsyPQovhNsSRv9jLrKoaDbRG5SL4OdGEKmG sCn1MntguFJL14N/FYcNCMI3jWGieo2yRFqb7gFCnyctJ4XqHPn8iLyRdwTE+7Z902FjszAVktxE aR5/UhhDZEzJ3ryR9frwDRXp7hnuHn8lFy6/bw== ) ;; ADDITIONAL SECTION (26 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for com/DNSKEY
	Received 1163 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1163 octets ;; HEADER SECTION ;; id = 56092 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . iLJMlL1o8cEq3g7HIE3/CZBFAhwz57HAjmA+1jSkz6VP1JVM6hKkt92Gn6/eQcQPrHaXDs3vQTzU crt60bHzf0i3jmbLVTlYfMwctMVkr/Pdr7Tk9KoMYQrExyc7xJsqpZEQesGvTNfs60iwHjzfxbKv KQZYjdA9djW73BcAJfRebWqOE4h0h4R3lGpQipNABwsyPQovhNsSRv9jLrKoaDbRG5SL4OdGEKmG sCn1MntguFJL14N/FYcNCMI3jWGieo2yRFqb7gFCnyctJ4XqHPn8iLyRdwTE+7Z902FjszAVktxE aR5/UhhDZEzJ3ryR9frwDRXp7hnuHn8lFy6/bw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to k.root-servers.net for com/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 52259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . iLJMlL1o8cEq3g7HIE3/CZBFAhwz57HAjmA+1jSkz6VP1JVM6hKkt92Gn6/eQcQPrHaXDs3vQTzU crt60bHzf0i3jmbLVTlYfMwctMVkr/Pdr7Tk9KoMYQrExyc7xJsqpZEQesGvTNfs60iwHjzfxbKv KQZYjdA9djW73BcAJfRebWqOE4h0h4R3lGpQipNABwsyPQovhNsSRv9jLrKoaDbRG5SL4OdGEKmG sCn1MntguFJL14N/FYcNCMI3jWGieo2yRFqb7gFCnyctJ4XqHPn8iLyRdwTE+7Z902FjszAVktxE aR5/UhhDZEzJ3ryR9frwDRXp7hnuHn8lFy6/bw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20260723050000 20260710040000 57780 . iLJMlL1o8cEq3g7HIE3/CZBFAhwz57HAjmA+1jSkz6VP1JVM6hKkt92Gn6/eQcQPrHaXDs3vQTzU crt60bHzf0i3jmbLVTlYfMwctMVkr/Pdr7Tk9KoMYQrExyc7xJsqpZEQesGvTNfs60iwHjzfxbKv KQZYjdA9djW73BcAJfRebWqOE4h0h4R3lGpQipNABwsyPQovhNsSRv9jLrKoaDbRG5SL4OdGEKmG sCn1MntguFJL14N/FYcNCMI3jWGieo2yRFqb7gFCnyctJ4XqHPn8iLyRdwTE+7Z902FjszAVktxE aR5/UhhDZEzJ3ryR9frwDRXp7hnuHn8lFy6/bw== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to a.gtld-servers.net for com/DNSKEY
	Received 371 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 371 octets ;; HEADER SECTION ;; id = 7097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (4 records) com. 86400 IN DNSKEY ( 256 3 13 o6onp+t66olg3PFhuIXaaatogT3OrqHrqt48IkYGuxwW8tSnQVMGyO+TSmp8sTRtkD9km+N/VQvv tqVM8ra9/Q== ) ; keytag 41446 com. 86400 IN DNSKEY ( 256 3 13 5eHMITHLlTLKXKAZh1/ghH7lZOfDap0HVvPtxX0a6YE+6+EQ/D8MP66HLVaihA5Bq1uhy0mQ3bVf 6aUtuqtD0A== ) ; keytag 27677 com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260721140235 20260706135735 19718 com. f1F6TFL52dayzW8XX5fT/uywSh/ynwoW9Ps3y4pRYwWBCe+RrIXc2jXao9Q7kPWajn7QCh3VDmik 1ygHfGe3tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 13 o6onp+t66olg3PFhuIXaaatogT3OrqHrqt48IkYGuxwW8tSnQVMGyO+TSmp8sTRtkD9km+N/VQvv tqVM8ra9/Q== ) ; keytag 41446`
	`com. 86400 IN DNSKEY ( 256 3 13 5eHMITHLlTLKXKAZh1/ghH7lZOfDap0HVvPtxX0a6YE+6+EQ/D8MP66HLVaihA5Bq1uhy0mQ3bVf 6aUtuqtD0A== ) ; keytag 27677`
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260721140235 20260706135735 19718 com. f1F6TFL52dayzW8XX5fT/uywSh/ynwoW9Ps3y4pRYwWBCe+RrIXc2jXao9Q7kPWajn7QCh3VDmik 1ygHfGe3tw== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=41446 is now in the chain-of-trust
	DNSKEY=27677 is now in the chain-of-trust
	Query to l.gtld-servers.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 593 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 593 octets ;; HEADER SECTION ;; id = 62720 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azure.com. 172800 IN NS ns1-39.azure-dns.com. azure.com. 172800 IN NS ns2-39.azure-dns.net. azure.com. 172800 IN NS ns3-39.azure-dns.org. azure.com. 172800 IN NS ns4-39.azure-dns.info. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260717002624 20260709231624 27677 com. MvQxqY0xQosm47FQQJE0RMGmb+bKhNFzSepz7oSq0jOU7lNOo/U+rIxVjtAu4/Aswd7on4EBo+7/ I56OUg04Bw== ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN NSEC3 ( 1 1 0 - 2vpeuel3boaf78babeg23c474itpfcln NS DS RRSIG ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN RRSIG ( NSEC3 13 2 900 20260714005940 20260706234940 27677 com. l9B5SCG4ESb+krqGnxrF7Mz0AjTdqBlfsfg/6nxe8qzrQa1u38AVBCMJQpWhRfFK1DWV2lKVr6tG uOFYNxV8XA== ) ;; ADDITIONAL SECTION (2 records) ns1-39.azure-dns.com. 172800 IN A 150.171.10.39 ;; { "EDNS-VERSION": 0 }
	Query to m.gtld-servers.net for azure.com/DNSKEY
	Received 545 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 545 octets ;; HEADER SECTION ;; id = 13527 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) azure.com. 172800 IN NS ns1-39.azure-dns.com. azure.com. 172800 IN NS ns2-39.azure-dns.net. azure.com. 172800 IN NS ns3-39.azure-dns.org. azure.com. 172800 IN NS ns4-39.azure-dns.info. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260717002624 20260709231624 27677 com. MvQxqY0xQosm47FQQJE0RMGmb+bKhNFzSepz7oSq0jOU7lNOo/U+rIxVjtAu4/Aswd7on4EBo+7/ I56OUg04Bw== ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN NSEC3 ( 1 1 0 - 2vpeuel3boaf78babeg23c474itpfcln NS DS RRSIG ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN RRSIG ( NSEC3 13 2 900 20260714005940 20260706234940 27677 com. l9B5SCG4ESb+krqGnxrF7Mz0AjTdqBlfsfg/6nxe8qzrQa1u38AVBCMJQpWhRfFK1DWV2lKVr6tG uOFYNxV8XA== ) ;; ADDITIONAL SECTION (2 records) ns1-39.azure-dns.com. 172800 IN A 150.171.10.39 ;; { "EDNS-VERSION": 0 }
	Found child zone azure.com

azure.com

	Checking DS between com and azure.com
	Query to a.gtld-servers.net for azure.com/DS
	Received 567 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 567 octets ;; HEADER SECTION ;; id = 36444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azure.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20260717002624 20260709231624 27677 com. MvQxqY0xQosm47FQQJE0RMGmb+bKhNFzSepz7oSq0jOU7lNOo/U+rIxVjtAu4/Aswd7on4EBo+7/ I56OUg04Bw== ) com. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1783695357 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) com. 900 IN RRSIG ( SOA 13 1 900 20260717145557 20260710134557 27677 com. 25xSw+t66z01hMAAZfykLAvxMlg0ascliLR/nvpp2uA7mlMDS41ff+lOeyW0SqR89Q3y82biM2l+ narJr2YyUQ== ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN NSEC3 ( 1 1 0 - 2vpeuel3boaf78babeg23c474itpfcln NS DS RRSIG ) 2VPER9CB2TJM9FDH5HI1KB72BTKLF6T3.com. 900 IN RRSIG ( NSEC3 13 2 900 20260714005940 20260706234940 27677 com. l9B5SCG4ESb+krqGnxrF7Mz0AjTdqBlfsfg/6nxe8qzrQa1u38AVBCMJQpWhRfFK1DWV2lKVr6tG uOFYNxV8XA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for azure.com in the com zone
	Query to ns1-39.azure-dns.com for azure.com/DNSKEY
	Received 121 bytes from 150.171.10.39
	;; Response received from [150.171.10.39] 121 octets ;; HEADER SECTION ;; id = 34662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azure.com. 300 IN SOA ( ns1-39.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4-39.azure-dns.info for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 220 bytes from 13.107.206.39
	;; Response received from [13.107.206.39] 220 octets ;; HEADER SECTION ;; id = 632 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) australiacentral.cloudapp.azure.com. 3600 IN NS ns1-05.azure-dns.com. australiacentral.cloudapp.azure.com. 3600 IN NS ns2-05.azure-dns.net. australiacentral.cloudapp.azure.com. 3600 IN NS ns3-05.azure-dns.org. australiacentral.cloudapp.azure.com. 3600 IN NS ns4-05.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-39.azure-dns.com for cloudapp.azure.com/DNSKEY
	Received 130 bytes from 150.171.10.39
	;; Response received from [150.171.10.39] 130 octets ;; HEADER SECTION ;; id = 30570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azure.com. 300 IN SOA ( ns1-39.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2-39.azure-dns.net for australiacentral.cloudapp.azure.com/DNSKEY
	Received 198 bytes from 150.171.16.39
	;; Response received from [150.171.16.39] 198 octets ;; HEADER SECTION ;; id = 44343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) australiacentral.cloudapp.azure.com. 3600 IN NS ns1-05.azure-dns.com. australiacentral.cloudapp.azure.com. 3600 IN NS ns2-05.azure-dns.net. australiacentral.cloudapp.azure.com. 3600 IN NS ns3-05.azure-dns.org. australiacentral.cloudapp.azure.com. 3600 IN NS ns4-05.azure-dns.info. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone australiacentral.cloudapp.azure.com

australiacentral.cloudapp.azure.com

	Checking DS between azure.com and australiacentral.cloudapp.azure.com
	Query to ns1-39.azure-dns.com for australiacentral.cloudapp.azure.com/DS
	Received 147 bytes from 150.171.10.39
	;; Response received from [150.171.10.39] 147 octets ;; HEADER SECTION ;; id = 6038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) azure.com. 300 IN SOA ( ns1-39.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for australiacentral.cloudapp.azure.com in the azure.com zone
	Query to ns3-05.azure-dns.org for australiacentral.cloudapp.azure.com/DNSKEY
	Received 134 bytes from 204.14.183.5
	;; Response received from [204.14.183.5] 134 octets ;; HEADER SECTION ;; id = 41752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) australiacentral.cloudapp.azure.com. 60 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4-05.azure-dns.info for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 102 bytes from 208.84.5.5
	;; Response received from [208.84.5.5] 102 octets ;; HEADER SECTION ;; id = 15972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (1 record) npserviceconnectappgw.australiacentral.cloudapp.azure.com. 10 IN A ( 20.70.4.114 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4-05.azure-dns.info is authoritative for npserviceconnectappgw.australiacentral.cloudapp.azure.com
	Query to ns4-05.azure-dns.info for npserviceconnectappgw.australiacentral.cloudapp.azure.com/DNSKEY
	Received 156 bytes from 208.84.5.5
	;; Response received from [208.84.5.5] 156 octets ;; HEADER SECTION ;; id = 32681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) australiacentral.cloudapp.azure.com. 60 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3-05.azure-dns.org for australiacentral.cloudapp.azure.com/SOA
	Received 134 bytes from 204.14.183.5
	;; Response received from [204.14.183.5] 134 octets ;; HEADER SECTION ;; id = 26392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN SOA ;; ANSWER SECTION (1 record) australiacentral.cloudapp.azure.com. 3600 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2-05.azure-dns.net for australiacentral.cloudapp.azure.com/SOA
	Received 134 bytes from 150.171.21.5
	;; Response received from [150.171.21.5] 134 octets ;; HEADER SECTION ;; id = 43611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN SOA ;; ANSWER SECTION (1 record) australiacentral.cloudapp.azure.com. 3600 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-05.azure-dns.com for australiacentral.cloudapp.azure.com/SOA
	Received 134 bytes from 13.107.236.5
	;; Response received from [13.107.236.5] 134 octets ;; HEADER SECTION ;; id = 62413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; australiacentral.cloudapp.azure.com. IN SOA ;; ANSWER SECTION (1 record) australiacentral.cloudapp.azure.com. 3600 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4-05.azure-dns.info for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	npserviceconnectappgw.australiacentral.cloudapp.azure.com A RR has value 20.70.4.114
	No RRSIGs found

australiacentral.cloudapp.azure.com

	Query to ns1-05.azure-dns.com for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 102 bytes from 13.107.236.5
	;; Response received from [13.107.236.5] 102 octets ;; HEADER SECTION ;; id = 57877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (1 record) npserviceconnectappgw.australiacentral.cloudapp.azure.com. 10 IN A ( 20.70.4.114 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-05.azure-dns.com is authoritative for npserviceconnectappgw.australiacentral.cloudapp.azure.com
	Query to ns1-05.azure-dns.com for npserviceconnectappgw.australiacentral.cloudapp.azure.com/DNSKEY
	Received 156 bytes from 13.107.236.5
	;; Response received from [13.107.236.5] 156 octets ;; HEADER SECTION ;; id = 18077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) australiacentral.cloudapp.azure.com. 60 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-05.azure-dns.com for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	npserviceconnectappgw.australiacentral.cloudapp.azure.com A RR has value 20.70.4.114
	No RRSIGs found

australiacentral.cloudapp.azure.com

	Query to ns3-05.azure-dns.org for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 102 bytes from 204.14.183.5
	;; Response received from [204.14.183.5] 102 octets ;; HEADER SECTION ;; id = 3842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (1 record) npserviceconnectappgw.australiacentral.cloudapp.azure.com. 10 IN A ( 20.70.4.114 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3-05.azure-dns.org is authoritative for npserviceconnectappgw.australiacentral.cloudapp.azure.com
	Query to ns2-05.azure-dns.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/DNSKEY
	Received 156 bytes from 150.171.21.5
	;; Response received from [150.171.21.5] 156 octets ;; HEADER SECTION ;; id = 47224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) australiacentral.cloudapp.azure.com. 60 IN SOA ( ns1-05.azure-dns.com. msnhst.microsoft.com. 1 ;serial 900 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3-05.azure-dns.org for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	npserviceconnectappgw.australiacentral.cloudapp.azure.com A RR has value 20.70.4.114
	No RRSIGs found

australiacentral.cloudapp.azure.com

	Query to ns2-05.azure-dns.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	Received 102 bytes from 150.171.21.5
	;; Response received from [150.171.21.5] 102 octets ;; HEADER SECTION ;; id = 26855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; npserviceconnectappgw.australiacentral.cloudapp.azure.com. IN A ;; ANSWER SECTION (1 record) npserviceconnectappgw.australiacentral.cloudapp.azure.com. 10 IN A ( 20.70.4.114 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2-05.azure-dns.net is authoritative for npserviceconnectappgw.australiacentral.cloudapp.azure.com
	Query to ns2-05.azure-dns.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/DNSKEY
	Query to ns2-05.azure-dns.net for npserviceconnectappgw.australiacentral.cloudapp.azure.com/A
	npserviceconnectappgw.australiacentral.cloudapp.azure.com A RR has value 20.70.4.114
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bstpoc.serviceconnect.defence.gov.au at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: