DNSSEC Debugger - ccn-cert.cni.es

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-19 17:39:28 UTC

Analyzing DNSSEC problems for ccn-cert.cni.es

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1414 octets ;; HEADER SECTION ;; id = 52472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to g.root-servers.net for ccn-cert.cni.es/A
	Received 623 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 623 octets ;; HEADER SECTION ;; id = 40497 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS g.nic.es. es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261002050000 20260919040000 57780 . iZeO1jntbgYBEuQsk/pFCClyE5FQfWWhQ/TYqSy7Laa6O3fEUXWNHZ4d1+RDWf+yoh18cEDqLwnA dTjCun/D11x7/FubesQJUWvt5dp3PuGt0Ec0V0l07B+Dhig974t+GL1R6UMNkzG26HopjSlv2VJ3 i8t/CsIPGQPihiRFuaK71ftZoOBOM5nZqGzn+zg6s6Dxxn3Mr2LIMnkv//wLLylq0GQX8xCSNT3+ ClUZsvCiygJ5d+PZqm6O3+ZFDvRSfdZIiYjGjxW50H7MOLBYf5bMZtEsaEto/Vr/3uqpkypeemFa LwIITgKcFBa3E1alsh1a4QzIRaY5ElFcvtTO8Q== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for es/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 37576 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261002050000 20260919040000 57780 . iZeO1jntbgYBEuQsk/pFCClyE5FQfWWhQ/TYqSy7Laa6O3fEUXWNHZ4d1+RDWf+yoh18cEDqLwnA dTjCun/D11x7/FubesQJUWvt5dp3PuGt0Ec0V0l07B+Dhig974t+GL1R6UMNkzG26HopjSlv2VJ3 i8t/CsIPGQPihiRFuaK71ftZoOBOM5nZqGzn+zg6s6Dxxn3Mr2LIMnkv//wLLylq0GQX8xCSNT3+ ClUZsvCiygJ5d+PZqm6O3+ZFDvRSfdZIiYjGjxW50H7MOLBYf5bMZtEsaEto/Vr/3uqpkypeemFa LwIITgKcFBa3E1alsh1a4QzIRaY5ElFcvtTO8Q== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Found child zone es

	Checking DS between . and es
	Query to b.root-servers.net for es/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 16251 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261002050000 20260919040000 57780 . iZeO1jntbgYBEuQsk/pFCClyE5FQfWWhQ/TYqSy7Laa6O3fEUXWNHZ4d1+RDWf+yoh18cEDqLwnA dTjCun/D11x7/FubesQJUWvt5dp3PuGt0Ec0V0l07B+Dhig974t+GL1R6UMNkzG26HopjSlv2VJ3 i8t/CsIPGQPihiRFuaK71ftZoOBOM5nZqGzn+zg6s6Dxxn3Mr2LIMnkv//wLLylq0GQX8xCSNT3+ ClUZsvCiygJ5d+PZqm6O3+ZFDvRSfdZIiYjGjxW50H7MOLBYf5bMZtEsaEto/Vr/3uqpkypeemFa LwIITgKcFBa3E1alsh1a4QzIRaY5ElFcvtTO8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for es in the . zone
	DS=54404/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20261002050000 20260919040000 57780 . iZeO1jntbgYBEuQsk/pFCClyE5FQfWWhQ/TYqSy7Laa6O3fEUXWNHZ4d1+RDWf+yoh18cEDqLwnA dTjCun/D11x7/FubesQJUWvt5dp3PuGt0Ec0V0l07B+Dhig974t+GL1R6UMNkzG26HopjSlv2VJ3 i8t/CsIPGQPihiRFuaK71ftZoOBOM5nZqGzn+zg6s6Dxxn3Mr2LIMnkv//wLLylq0GQX8xCSNT3+ ClUZsvCiygJ5d+PZqm6O3+ZFDvRSfdZIiYjGjxW50H7MOLBYf5bMZtEsaEto/Vr/3uqpkypeemFa LwIITgKcFBa3E1alsh1a4QzIRaY5ElFcvtTO8Q== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=54404/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 )`
	Query to c.nic.es for es/DNSKEY
	Received 873 bytes from 194.0.34.53
	;; Response received from [194.0.34.53] 873 octets ;; HEADER SECTION ;; id = 14938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAa6pIoHWeOa1jJOgEjE64T91B37zSCTGp6iPBo5qH+o7U7DRDyL7LqnTUnbzK6EtsDltOVc8 CJJDgF/J0wMFeHnXo71rhlqncSmareJptRT/ZuStXN07rugunnPa59i0KB63y6k38yyVWMyada5/ vtW67aSyIIhwdlk2md3LIH/qkD6eX3DQlahBiXnZOtunmaoGexyaMnbTLJsqelCIy+iR8bcArJnn FZQt29RHq0ghZete/h+CrKocLV1/55sIbyuXU/5kjD7ouacadN/i4moNQNSdUcXRQi48IWWFhaKi ZZacZKPHBp90OTgh31ZKIV0ot6uEWiaL3vMlK/68pfU= ) ; keytag 18030 es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20261003153412 20260919150731 54404 es. qJFrmurJ5Ow3SnDMMUV6dsuA8GIG3BcJBuf6+2uGr1iomwQr+VziOFZ8mWHjj+1E1DOP/6DF9ZNq jsXub2iJox8lSTy+oo7AFITekiSFcswgWRfa53bH827c1exo2mCIxCaEz8lg3LaGVaqgEIjhO7WP wzX87UhWmXfIqd2tNEruWVfo3UWc17QuVVfyLuAa4O7f7cpICbOf+IJOlI0C/aLVgce8OYB801Pn mjGWw0JW/bqECGpy9PGtvkAmarz3cN6TKYGOPw1V4nCUZsnMlhJhQgQTBI70XJMEEiQOyaFWWtEF wFBgGbXAJq6yMk3bMMPcSFXLwcJglPZ/wNvU9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAa6pIoHWeOa1jJOgEjE64T91B37zSCTGp6iPBo5qH+o7U7DRDyL7LqnTUnbzK6EtsDltOVc8 CJJDgF/J0wMFeHnXo71rhlqncSmareJptRT/ZuStXN07rugunnPa59i0KB63y6k38yyVWMyada5/ vtW67aSyIIhwdlk2md3LIH/qkD6eX3DQlahBiXnZOtunmaoGexyaMnbTLJsqelCIy+iR8bcArJnn FZQt29RHq0ghZete/h+CrKocLV1/55sIbyuXU/5kjD7ouacadN/i4moNQNSdUcXRQi48IWWFhaKi ZZacZKPHBp90OTgh31ZKIV0ot6uEWiaL3vMlK/68pfU= ) ; keytag 18030`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404`
	DNSKEY=54404/SEP is now in the chain-of-trust
	DS=54404/SHA-256 verifies DNSKEY=54404/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20261003153412 20260919150731 54404 es. qJFrmurJ5Ow3SnDMMUV6dsuA8GIG3BcJBuf6+2uGr1iomwQr+VziOFZ8mWHjj+1E1DOP/6DF9ZNq jsXub2iJox8lSTy+oo7AFITekiSFcswgWRfa53bH827c1exo2mCIxCaEz8lg3LaGVaqgEIjhO7WP wzX87UhWmXfIqd2tNEruWVfo3UWc17QuVVfyLuAa4O7f7cpICbOf+IJOlI0C/aLVgce8OYB801Pn mjGWw0JW/bqECGpy9PGtvkAmarz3cN6TKYGOPw1V4nCUZsnMlhJhQgQTBI70XJMEEiQOyaFWWtEF wFBgGbXAJq6yMk3bMMPcSFXLwcJglPZ/wNvU9g== )`
	RRSIG=54404 and DNSKEY=54404/SEP verifies the DNSKEY RRset
	DNSKEY=18030 is now in the chain-of-trust
	Query to c.nic.es for ccn-cert.cni.es/A
	Received 898 bytes from 194.0.34.53
	;; Response received from [194.0.34.53] 898 octets ;; HEADER SECTION ;; id = 24650 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cni.es. 86400 IN NS ns1.interdomain.net. cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 frnn4fch8qsd7p5h9lgmtlfald90r560 NS DS RRSIG ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260927140655 20260913150710 18030 es. GpGIhrYAsobqL1f4qSfvcLbQn//qvwXCrvVfj6jj9MV/WcXu+Yxvh6cXQRv2qSc72gdrh3qYv0NL +bl5lUgui2O0eJrcML+xb5l5hqlmNXs3zBE0qwXFSt47h7AEkfguD3J7yfoYlt/MatsEgqE7punG 9XjySKhuto+ceeMhfe9+THqnaMPT7uKDxdB7betCXqL63VTZ1e/74L1I3teL3qxP0bNvaQOPG7LY KhektwGBqPHZZirfAouV94aRwFdav59TVAMahmmaGvdchBBhy3bdxlPQn8CvMH4gyQ4F3h3Iq8TW evscp6A5Sz6PD/CBaitv7vhmsE/WBk27AoBDpQ== ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260928021618 20260914070740 18030 es. QW0iQS4RauI0uAb6rx4ci7aNxHDehHTzwcNXcz6VG8daRLMRfzJPo0QoGTi3ighDi1KmLZ9U3/Db KrZLsuLqO712rmR7Cjh3K9PxC3ETZdUMilxrg+x2n0REC7JJckBY5x3gyX37ChQdjChTpt3c1qE4 QrKPy5CLMNILuPQmlX/ibHQbKhsiKO6yCjvDtLUZZpGOh/hJMKHKK/1fjhOkcmcswjqSZVurK/FX ziyxnx0ItuZknuZqD7jGmYkt8LeUMM0CYpQvuZzZ1HRSO99x+tWRJ07kBIslzx2viitDoCpPy1CY wnz9J6JhswLMKnadaBCm4wlLB6UbAuecT0zoYw== ) ;; ADDITIONAL SECTION (2 records) ns3.interdomain.es. 86400 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	Query to h.nic.es for cni.es/DNSKEY
	Received 889 bytes from 194.0.33.53
	;; Response received from [194.0.33.53] 889 octets ;; HEADER SECTION ;; id = 26749 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cni.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cni.es. 86400 IN NS ns1.interdomain.net. cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 frnn4fch8qsd7p5h9lgmtlfald90r560 NS DS RRSIG ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260927140655 20260913150710 18030 es. GpGIhrYAsobqL1f4qSfvcLbQn//qvwXCrvVfj6jj9MV/WcXu+Yxvh6cXQRv2qSc72gdrh3qYv0NL +bl5lUgui2O0eJrcML+xb5l5hqlmNXs3zBE0qwXFSt47h7AEkfguD3J7yfoYlt/MatsEgqE7punG 9XjySKhuto+ceeMhfe9+THqnaMPT7uKDxdB7betCXqL63VTZ1e/74L1I3teL3qxP0bNvaQOPG7LY KhektwGBqPHZZirfAouV94aRwFdav59TVAMahmmaGvdchBBhy3bdxlPQn8CvMH4gyQ4F3h3Iq8TW evscp6A5Sz6PD/CBaitv7vhmsE/WBk27AoBDpQ== ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260928021618 20260914070740 18030 es. QW0iQS4RauI0uAb6rx4ci7aNxHDehHTzwcNXcz6VG8daRLMRfzJPo0QoGTi3ighDi1KmLZ9U3/Db KrZLsuLqO712rmR7Cjh3K9PxC3ETZdUMilxrg+x2n0REC7JJckBY5x3gyX37ChQdjChTpt3c1qE4 QrKPy5CLMNILuPQmlX/ibHQbKhsiKO6yCjvDtLUZZpGOh/hJMKHKK/1fjhOkcmcswjqSZVurK/FX ziyxnx0ItuZknuZqD7jGmYkt8LeUMM0CYpQvuZzZ1HRSO99x+tWRJ07kBIslzx2viitDoCpPy1CY wnz9J6JhswLMKnadaBCm4wlLB6UbAuecT0zoYw== ) ;; ADDITIONAL SECTION (2 records) ns3.interdomain.es. 86400 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	Found child zone cni.es

cni.es

	Checking DS between es and cni.es
	Query to g.nic.es for cni.es/DS
	Received 1137 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 1137 octets ;; HEADER SECTION ;; id = 1264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cni.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260927140655 20260913150710 18030 es. GpGIhrYAsobqL1f4qSfvcLbQn//qvwXCrvVfj6jj9MV/WcXu+Yxvh6cXQRv2qSc72gdrh3qYv0NL +bl5lUgui2O0eJrcML+xb5l5hqlmNXs3zBE0qwXFSt47h7AEkfguD3J7yfoYlt/MatsEgqE7punG 9XjySKhuto+ceeMhfe9+THqnaMPT7uKDxdB7betCXqL63VTZ1e/74L1I3teL3qxP0bNvaQOPG7LY KhektwGBqPHZZirfAouV94aRwFdav59TVAMahmmaGvdchBBhy3bdxlPQn8CvMH4gyQ4F3h3Iq8TW evscp6A5Sz6PD/CBaitv7vhmsE/WBk27AoBDpQ== ) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2026091910 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 3600 IN RRSIG ( SOA 8 1 3600 20261003211202 20260919150731 18030 es. L39Tl3CMVbJq64ehncOhwmajRlfYca49ry86y6B6SxEe1AysAouGN/IY5qo33OdJYINV1UNopt6D U/2gAmh+AB/Snz/Ds6BIxGED9YuPc49MXNKAHWt/XFlMvb6IYk7GRI2mZNMHaC+i3vKBQ5qePh2y dH0MMF3MhyIWo73z2jNBEmBRTwtwppEMiqO/ia0wDaheiE84R/LMOncnhjjdcUgyx7s6QUgrPWz4 dfTw8aF8EgsulPpGZVdCxvtRvIfq5z5bIq8750xq/koACmDycjByaArzAFdEKPXZ80G+jv2BX6WK JPTay7QQQZwwReXn9ib8g1axggFgt2g9JfCUZg== ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 frnn4fch8qsd7p5h9lgmtlfald90r560 NS DS RRSIG ) frldvbbdmmqlh37rjfh1hvnjhb87n5h9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260928021618 20260914070740 18030 es. QW0iQS4RauI0uAb6rx4ci7aNxHDehHTzwcNXcz6VG8daRLMRfzJPo0QoGTi3ighDi1KmLZ9U3/Db KrZLsuLqO712rmR7Cjh3K9PxC3ETZdUMilxrg+x2n0REC7JJckBY5x3gyX37ChQdjChTpt3c1qE4 QrKPy5CLMNILuPQmlX/ibHQbKhsiKO6yCjvDtLUZZpGOh/hJMKHKK/1fjhOkcmcswjqSZVurK/FX ziyxnx0ItuZknuZqD7jGmYkt8LeUMM0CYpQvuZzZ1HRSO99x+tWRJ07kBIslzx2viitDoCpPy1CY wnz9J6JhswLMKnadaBCm4wlLB6UbAuecT0zoYw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cni.es in the es zone
	Query to ns3.interdomain.es for cni.es/DNSKEY
	Received 96 bytes from 217.116.0.208
	;; Response received from [217.116.0.208] 96 octets ;; HEADER SECTION ;; id = 5890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cni.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cni.es. 3600 IN SOA ( ns1.interdomain.net. admin.interdomain.net. 746445638 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.interdomain.net for ccn-cert.cni.es/A
	Received 189 bytes from 86.109.99.246
	;; Response received from [86.109.99.246] 189 octets ;; HEADER SECTION ;; id = 41487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN A ;; ANSWER SECTION (1 record) ccn-cert.cni.es. 86400 IN A 185.104.134.129 ;; AUTHORITY SECTION (3 records) cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. cni.es. 86400 IN NS ns1.interdomain.net. ;; ADDITIONAL SECTION (4 records) ns1.interdomain.net. 300 IN A 217.116.0.206 ns2.interdomain.net. 300 IN A 86.109.99.246 ns3.interdomain.es. 300 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	ns2.interdomain.net is authoritative for ccn-cert.cni.es
	Query to ns3.interdomain.es for ccn-cert.cni.es/DNSKEY
	Received 105 bytes from 217.116.0.208
	;; Response received from [217.116.0.208] 105 octets ;; HEADER SECTION ;; id = 3615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cni.es. 3600 IN SOA ( ns1.interdomain.net. admin.interdomain.net. 746445638 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.interdomain.net for cni.es/SOA
	Received 206 bytes from 217.116.0.206
	;; Response received from [217.116.0.206] 206 octets ;; HEADER SECTION ;; id = 56349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cni.es. IN SOA ;; ANSWER SECTION (1 record) cni.es. 86400 IN SOA ( ns1.interdomain.net. admin.interdomain.net. 746445638 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) cni.es. 86400 IN NS ns3.interdomain.es. cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns1.interdomain.net. ;; ADDITIONAL SECTION (4 records) ns1.interdomain.net. 300 IN A 217.116.0.206 ns2.interdomain.net. 300 IN A 86.109.99.246 ns3.interdomain.es. 300 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	Query to ns3.interdomain.es for cni.es/SOA
	Received 206 bytes from 217.116.0.208
	;; Response received from [217.116.0.208] 206 octets ;; HEADER SECTION ;; id = 63682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cni.es. IN SOA ;; ANSWER SECTION (1 record) cni.es. 86400 IN SOA ( ns1.interdomain.net. admin.interdomain.net. 746445638 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) cni.es. 86400 IN NS ns1.interdomain.net. cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. ;; ADDITIONAL SECTION (4 records) ns1.interdomain.net. 300 IN A 217.116.0.206 ns2.interdomain.net. 300 IN A 86.109.99.246 ns3.interdomain.es. 300 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	Query to ns2.interdomain.net for ccn-cert.cni.es/A
	ccn-cert.cni.es A RR has value 185.104.134.129
	No RRSIGs found

cni.es

	Query to ns3.interdomain.es for ccn-cert.cni.es/A
	Received 189 bytes from 217.116.0.208
	;; Response received from [217.116.0.208] 189 octets ;; HEADER SECTION ;; id = 23677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN A ;; ANSWER SECTION (1 record) ccn-cert.cni.es. 86400 IN A 185.104.134.129 ;; AUTHORITY SECTION (3 records) cni.es. 86400 IN NS ns1.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. cni.es. 86400 IN NS ns2.interdomain.net. ;; ADDITIONAL SECTION (4 records) ns1.interdomain.net. 300 IN A 217.116.0.206 ns2.interdomain.net. 300 IN A 86.109.99.246 ns3.interdomain.es. 300 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	ns3.interdomain.es is authoritative for ccn-cert.cni.es
	Query to ns1.interdomain.net for ccn-cert.cni.es/DNSKEY
	Received 105 bytes from 217.116.0.206
	;; Response received from [217.116.0.206] 105 octets ;; HEADER SECTION ;; id = 20787 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cni.es. 3600 IN SOA ( ns1.interdomain.net. admin.interdomain.net. 746445638 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.interdomain.es for ccn-cert.cni.es/A
	ccn-cert.cni.es A RR has value 185.104.134.129
	No RRSIGs found

cni.es

	Query to ns1.interdomain.net for ccn-cert.cni.es/A
	Received 189 bytes from 217.116.0.206
	;; Response received from [217.116.0.206] 189 octets ;; HEADER SECTION ;; id = 25953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ccn-cert.cni.es. IN A ;; ANSWER SECTION (1 record) ccn-cert.cni.es. 86400 IN A 185.104.134.129 ;; AUTHORITY SECTION (3 records) cni.es. 86400 IN NS ns1.interdomain.net. cni.es. 86400 IN NS ns2.interdomain.net. cni.es. 86400 IN NS ns3.interdomain.es. ;; ADDITIONAL SECTION (4 records) ns1.interdomain.net. 300 IN A 217.116.0.206 ns2.interdomain.net. 300 IN A 86.109.99.246 ns3.interdomain.es. 300 IN A 217.116.0.208 ;; { "EDNS-VERSION": 0 }
	ns1.interdomain.net is authoritative for ccn-cert.cni.es
	Query to ns1.interdomain.net for ccn-cert.cni.es/DNSKEY
	Query to ns1.interdomain.net for ccn-cert.cni.es/A
	ccn-cert.cni.es A RR has value 185.104.134.129
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ccn-cert.cni.es at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: