DNSSEC Debugger - checkpoints2.townforger.net

Domain Name:

Time: 2025-09-30 23:05:34 UTC

Analyzing DNSSEC problems for checkpoints2.townforger.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 29120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251010000000 20250919000000 20326 . CVcncT9kkS/apfuTXRvZJ3DDVmjulM9+z9vnInDMDsyFE0WwloiWDcRNVcDojWGeuhDhvggNqrYX m/FbeGRx3cwDk22+FPTaeAbrtMNI6hIEL0tZhN+2NkogMwv8rByMbgoy2nNT2h9zM/4cUxVeZIl3 /WM3MTfgq9WLEbTQ09eAEmqB5B5HKN92JQobXSvfcqsxjI0xS6WplM1chyosBi9HDedsrdYybpnI rEzYHqnnnxHEgrhJZU4kLaMS1i7cGIFKbNefJkUyoebtJewa0wzmFabP7fhc5Op4Kf2kGUjKxjVx tu6bSzxc/EQ5Ru9O09+86kKlIdzdDT2qTxrrBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251010000000 20250919000000 20326 . CVcncT9kkS/apfuTXRvZJ3DDVmjulM9+z9vnInDMDsyFE0WwloiWDcRNVcDojWGeuhDhvggNqrYX m/FbeGRx3cwDk22+FPTaeAbrtMNI6hIEL0tZhN+2NkogMwv8rByMbgoy2nNT2h9zM/4cUxVeZIl3 /WM3MTfgq9WLEbTQ09eAEmqB5B5HKN92JQobXSvfcqsxjI0xS6WplM1chyosBi9HDedsrdYybpnI rEzYHqnnnxHEgrhJZU4kLaMS1i7cGIFKbNefJkUyoebtJewa0wzmFabP7fhc5Op4Kf2kGUjKxjVx tu6bSzxc/EQ5Ru9O09+86kKlIdzdDT2qTxrrBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for checkpoints2.townforger.net/A
	Received 1184 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1184 octets ;; HEADER SECTION ;; id = 25753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251013170000 20250930160000 46441 . TFW3Rb+rg2IcuxkGTmVzxJyfkM9jnwENMw/4jWT/YG+mCa+CRf1P+IC1aaTV/Kf/kPMIDVQyQs3o p6uKNr7oFBCaEkNu8/Qo/4/f/z/VQQPj2aVa+lPPAYMsvCqLwf5QdrZAHnL7UtgpOs6IrOqU6fao QBV1sz44o0+tY6QFW8y3Y1DDpA9FLbAmTWJOgvwGL/vz/yl1NTix8lYZyq1z6qQsqvgzAQeZ3Odc qRMP7FolkX7yxtwQcmRVGUoPQObxL9XizJ4rUopRcs9qtnoFRJCftBqjUbxn1Ad7HE4NWSbbveUM CuxxJUotD9dliLLT7WCQm0z4+vcv7a8MEbEcNA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1160 octets ;; HEADER SECTION ;; id = 59626 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251013170000 20250930160000 46441 . TFW3Rb+rg2IcuxkGTmVzxJyfkM9jnwENMw/4jWT/YG+mCa+CRf1P+IC1aaTV/Kf/kPMIDVQyQs3o p6uKNr7oFBCaEkNu8/Qo/4/f/z/VQQPj2aVa+lPPAYMsvCqLwf5QdrZAHnL7UtgpOs6IrOqU6fao QBV1sz44o0+tY6QFW8y3Y1DDpA9FLbAmTWJOgvwGL/vz/yl1NTix8lYZyq1z6qQsqvgzAQeZ3Odc qRMP7FolkX7yxtwQcmRVGUoPQObxL9XizJ4rUopRcs9qtnoFRJCftBqjUbxn1Ad7HE4NWSbbveUM CuxxJUotD9dliLLT7WCQm0z4+vcv7a8MEbEcNA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 51423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20251013170000 20250930160000 46441 . TFW3Rb+rg2IcuxkGTmVzxJyfkM9jnwENMw/4jWT/YG+mCa+CRf1P+IC1aaTV/Kf/kPMIDVQyQs3o p6uKNr7oFBCaEkNu8/Qo/4/f/z/VQQPj2aVa+lPPAYMsvCqLwf5QdrZAHnL7UtgpOs6IrOqU6fao QBV1sz44o0+tY6QFW8y3Y1DDpA9FLbAmTWJOgvwGL/vz/yl1NTix8lYZyq1z6qQsqvgzAQeZ3Odc qRMP7FolkX7yxtwQcmRVGUoPQObxL9XizJ4rUopRcs9qtnoFRJCftBqjUbxn1Ad7HE4NWSbbveUM CuxxJUotD9dliLLT7WCQm0z4+vcv7a8MEbEcNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20251013170000 20250930160000 46441 . TFW3Rb+rg2IcuxkGTmVzxJyfkM9jnwENMw/4jWT/YG+mCa+CRf1P+IC1aaTV/Kf/kPMIDVQyQs3o p6uKNr7oFBCaEkNu8/Qo/4/f/z/VQQPj2aVa+lPPAYMsvCqLwf5QdrZAHnL7UtgpOs6IrOqU6fao QBV1sz44o0+tY6QFW8y3Y1DDpA9FLbAmTWJOgvwGL/vz/yl1NTix8lYZyq1z6qQsqvgzAQeZ3Odc qRMP7FolkX7yxtwQcmRVGUoPQObxL9XizJ4rUopRcs9qtnoFRJCftBqjUbxn1Ad7HE4NWSbbveUM CuxxJUotD9dliLLT7WCQm0z4+vcv7a8MEbEcNA== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to d.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 291 octets ;; HEADER SECTION ;; id = 50991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251014141035 20250929140535 37331 net. cOUmX1DHDdGtvMsEqeYWZLhCEBmPg07kyTWteDCxqK0fO5GJDXLHjyzjGRcAYE/fN0BNeAMKNLPH MF+NsKPxbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BwmuZTRDEnF5yIylRPdiibpfukzvMWY569GigcA4DNHHhLWxndFz8tUHIfAyY9AAVdX9hfRoRvnr 2OThC4+7Hg== ) ; keytag 33296`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251014141035 20250929140535 37331 net. cOUmX1DHDdGtvMsEqeYWZLhCEBmPg07kyTWteDCxqK0fO5GJDXLHjyzjGRcAYE/fN0BNeAMKNLPH MF+NsKPxbA== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=33296 is now in the chain-of-trust
	Query to b.gtld-servers.net for checkpoints2.townforger.net/A
	Received 290 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 290 octets ;; HEADER SECTION ;; id = 7953 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) townforger.net. 172800 IN NS 1-you.njalla.no. townforger.net. 172800 IN NS 2-can.njalla.in. townforger.net. 172800 IN NS 3-get.njalla.fo. townforger.net. 86400 IN DS ( 47186 8 2 ea844824de29b4d4f5d9a8c7b85921a8179cf06076fd11c80033992ba43d6f2d ) townforger.net. 86400 IN RRSIG ( DS 13 2 86400 20251006031327 20250929020327 33296 net. DOLrtzR5V8/wg+WnsOR++m6wt95w9Xmk1NqYMbPIyGSQ7mlVjI93hhf0fY2xTl/gfCg/tKjnmN8/ fdgrYkNyJg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.gtld-servers.net for townforger.net/DNSKEY
	Received 277 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 277 octets ;; HEADER SECTION ;; id = 33532 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; townforger.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) townforger.net. 172800 IN NS 1-you.njalla.no. townforger.net. 172800 IN NS 2-can.njalla.in. townforger.net. 172800 IN NS 3-get.njalla.fo. townforger.net. 86400 IN DS ( 47186 8 2 ea844824de29b4d4f5d9a8c7b85921a8179cf06076fd11c80033992ba43d6f2d ) townforger.net. 86400 IN RRSIG ( DS 13 2 86400 20251006031327 20250929020327 33296 net. DOLrtzR5V8/wg+WnsOR++m6wt95w9Xmk1NqYMbPIyGSQ7mlVjI93hhf0fY2xTl/gfCg/tKjnmN8/ fdgrYkNyJg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone townforger.net

townforger.net

	Checking DS between net and townforger.net
	Query to d.gtld-servers.net for townforger.net/DS
	Received 1082 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1082 octets ;; HEADER SECTION ;; id = 3043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; townforger.net. IN DS ;; ANSWER SECTION (2 records) townforger.net. 86400 IN DS ( 47186 8 2 ea844824de29b4d4f5d9a8c7b85921a8179cf06076fd11c80033992ba43d6f2d ) townforger.net. 86400 IN RRSIG ( DS 13 2 86400 20251006031327 20250929020327 33296 net. DOLrtzR5V8/wg+WnsOR++m6wt95w9Xmk1NqYMbPIyGSQ7mlVjI93hhf0fY2xTl/gfCg/tKjnmN8/ fdgrYkNyJg== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20251004030732 20250927015732 33296 net. v9f7AoK5Pzrfai9/w6ibVhnY58WZtNVsU5KMZilvrg0K5u/vhddcVew2aSAI9h52j0HOPokPbFZr zsmQj1DJuQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for townforger.net in the net zone
	DS=47186/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`townforger.net. 86400 IN RRSIG ( DS 13 2 86400 20251006031327 20250929020327 33296 net. DOLrtzR5V8/wg+WnsOR++m6wt95w9Xmk1NqYMbPIyGSQ7mlVjI93hhf0fY2xTl/gfCg/tKjnmN8/ fdgrYkNyJg== )`
	RRSIG=33296 and DNSKEY=33296 verifies the DS RRset
	DS=47186/SHA-256 is now in the chain-of-trust
	`townforger.net. 86400 IN DS ( 47186 8 2 ea844824de29b4d4f5d9a8c7b85921a8179cf06076fd11c80033992ba43d6f2d )`
	Query to 2-can.njalla.in for townforger.net/DNSKEY
	Received 2289 bytes from 185.193.124.34
	;; Response received from [185.193.124.34] 2289 octets ;; HEADER SECTION ;; id = 16610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; townforger.net. IN DNSKEY ;; ANSWER SECTION (6 records) townforger.net. 10800 IN DNSKEY ( 256 3 8 AwEAAbIikaheYz67xtLQVNw3LAO9B5QEc4SotF9go2qIq/jsGfUBsRPsdUQ5Qdxom5nDp7ANL0xB zMbrVJNdc2GpVJEpQvvBhW+C1jqZH7VTVXgg7Jkk3W/znllMbVqRTpT6a9PkeRGNgDYTTimRTHJL /nDOedwKWnb/9L2wKTzQAVV64javbBpcRsTuVodbpOIb8TnfMtwmif7+vozP+y7sIGXMICweWiqC CFp+fjcVpolp7ioSHqwufZs7iX0n1z3bpTrZGuwX1kWSHsialkc9ipO21fNCGCXUMB3l3jN3FQmM muAfyvtkHxR5A2p5toBOWJSkhX/pzqZexJiNFH39mTM= ) ; keytag 21874 townforger.net. 10800 IN DNSKEY ( 256 3 8 AwEAAcSGytm99C1WFO0vkiI6h3bFo5DPm9wtfRFyu38F0uFLqLWR/8Bq/VxHsPs+0locd9SDPLyv +HjCfxf/mRVlIROVBN5sdeiYdfHgO4NzsT6uhsVlP2UJmCA0Opdzv7Sk+S+wnM+46SHOBLfcY+2R hsq987rDOioxn+yRx11BXU+J+OAGFzCdh+adi7NzCQLOHaPiAioGZDtR4y/DxOq+YampKZKfHVqx RmRvEkSDgyyKHqUjmo9XBpH7aR2GJXNRiYIwPM5mYNVGmnxE2769RaEGEewpSYgKfSY6h4fFJvCU qRMBS7oUQXB6Q0B1BMEGe0sa9arqIYj06+k4OK07KxU= ) ; keytag 63108 townforger.net. 10800 IN DNSKEY ( 257 3 8 AwEAAcDZSnDB2VFzI4pHeNwf4fvEWNMHzmR6jSIUKFsE6QLA5391BFUSfHxKH7qzzij8tnjDv7WA ZM2ubIMOP+q+TN/BWZj4sbP1YOkzny/fbQG+0Xoh6+vRm1sNxKd5Mlw3VIlGfR8yTlclk7U1tA8I yUlv6+uHt4peZD0LebrkUhvrvulVjuEX4wqfg20oX6gvjESF8ibpDsLHVS0cU0it/kguVjF5Ghmj HDaVcFCGK9fwJM+ZnJka10r7Sjc2ja0IhUgMNenBA6DtXrluZWiaxYnl/LKNI6hq+J9ZvHhASO8U gineJ+TpeDkwgrcAimuPOo/ElVPH8LW5tN7j3ljhikk8FI6Bkqdogf4+zTLokMqRxmw/msUq+GWb sVBAdpeDJRP0rTmDd4w5qia8U+6qwbbP9n9HFVq2eZBHMWXh3ZaeFfFCYZhKUiNrqF3ZvpxLfN5y Z1XdMJHebTByKdq1AeQZZ7VhVkpiESLHL5rqDvA3qZAHSReEkJI6bSAbxSNV9xZz6TvkEPepbAH9 i/g4ajklW69hZE1Ykb61kcdEQI3pfxKd7ytMDGXZG3odE1NglxpofjVTheyhEajdfYMKcIaDFBVS VmK9Y4mn4FPX20/zXQ1Cv0nyjloLs3Dl/7SYC10z4vPwnSfaEhX2jaEZp2x7bAQHPt9wOF8M9DMM 1qRH ) ; keytag 47186 townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 21874 townforger.net. ZN7qb/MQV1b7NfXz+E8rHBx5pG9yUN1teFTjcK0RFdnGZT7IjGucY9I4htonCXieE/PQmjUQmv4F I50xmuECoYTrJA0uaET+/Sz+r4dQ8zWFT08QVG38O7YxqLHrGo1QdxLmWMk8iR6jIFHGrTMzNht2 XzdeEx63bZDkZhMtAoMIL6jqT5VxnPA4gqU7bHxOgWY1S8jcT6Qkwo6uUcLp5hwRzWVi0mWN66Le 2oxadYRsdYKdoXY+FpolE/pll2b44aRuQaQ7P0W2p1pde369Mt4IIrdaRsquXVxIKsGe9QDYpVP2 D9xmbNQ161bnuGAZ+znt6vCEmzcniN//zn+dEw== ) townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 47186 townforger.net. eYgPLG5eyUWeQFaXOvn9cmU1oWQGNuQGONbFonN8I9Jb1R9nlQmadP3q/7oLjqOJduW1WJgaTZxn Kqm7BNbGw5pJlywYNbhsh6LR7JqOu3gkj/Bs3Omh3QUPeYCp/tQmKWR88FibC0Fbx8QmgYBVnef3 8r5Du94LX1axMgZBXh912km1mb0GgGm3wxEVXDhAsIvEV9PW2S3xAQxNE6Yz8hsdria7B7j3QM/R xE91Y9jG3YrItaLyQu3iluuNV5yfVLSdBxWxsV0PcTVYWLYa2Cu+oox1xDohcYVirwdqxiOUH2XU Xs3UkNYafDUFaW94l4mhpAVqFYJoNP0WZLZ06EvZWoY+QS/AMI0zrNdcUKZwaS5srtsep0rSLqDj HczDtILUNIfDPKO7wUKGCFNJM7GBUmyrqJJHXlUcnOEE2MgILXy74SomTasJ1efIW1AZyd1HtC+J QEnn9PYz2BaV2TmI0dW11afpPTOLMIOQUrfk2mLQHZ40SpJCNFMmPwg3r/mYHG1erJUy400iQuBJ fZnFmLLeUeSqAKNA4+Zk4Cl8tcAyNEhf/0qUjsrXGPgu9u9IYNBLAnTq0FwFvrxCf/cY2VP6p+Eo 1SPZck9yn0bbLSaAZc9+2n+r3dzY6yZ2tNugatbbtOavqb3EuGzuEePW86mYfCttfjD/Jq0bcbw= ) townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 63108 townforger.net. MWdgXXSwMDcn098QjI6hKw9/Wa5fi1KzCbZuY6AoA4uP17Ll0LqYSB60Xb9NawpSIx6xwZKXWESn tx9SmuIDIoj3/fuT3obAmiUbfvuuKetiHsr45KodDUhy0Hu8UiviUNiS3imT1GOl0e3JT6rkd3ee 9ug89XC5hUXhFX8eecvjc82mV22dxfLz1eyOlH8A5+q1RzuUgx3ZwbMegD1CUWG7foiM7NN1C4gY LMONmiTH+RqR5JUHIaBdahUp4fO1uaWqGg5XKu+b37nLJrGAqPfuskKRiySYx8Sj5zdU1U4z4Rqi PeStq8KNAMh6FcEhwD7RetLMxW1HsDYYqgbSBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for townforger.net
	`townforger.net. 10800 IN DNSKEY ( 256 3 8 AwEAAbIikaheYz67xtLQVNw3LAO9B5QEc4SotF9go2qIq/jsGfUBsRPsdUQ5Qdxom5nDp7ANL0xB zMbrVJNdc2GpVJEpQvvBhW+C1jqZH7VTVXgg7Jkk3W/znllMbVqRTpT6a9PkeRGNgDYTTimRTHJL /nDOedwKWnb/9L2wKTzQAVV64javbBpcRsTuVodbpOIb8TnfMtwmif7+vozP+y7sIGXMICweWiqC CFp+fjcVpolp7ioSHqwufZs7iX0n1z3bpTrZGuwX1kWSHsialkc9ipO21fNCGCXUMB3l3jN3FQmM muAfyvtkHxR5A2p5toBOWJSkhX/pzqZexJiNFH39mTM= ) ; keytag 21874`
	`townforger.net. 10800 IN DNSKEY ( 256 3 8 AwEAAcSGytm99C1WFO0vkiI6h3bFo5DPm9wtfRFyu38F0uFLqLWR/8Bq/VxHsPs+0locd9SDPLyv +HjCfxf/mRVlIROVBN5sdeiYdfHgO4NzsT6uhsVlP2UJmCA0Opdzv7Sk+S+wnM+46SHOBLfcY+2R hsq987rDOioxn+yRx11BXU+J+OAGFzCdh+adi7NzCQLOHaPiAioGZDtR4y/DxOq+YampKZKfHVqx RmRvEkSDgyyKHqUjmo9XBpH7aR2GJXNRiYIwPM5mYNVGmnxE2769RaEGEewpSYgKfSY6h4fFJvCU qRMBS7oUQXB6Q0B1BMEGe0sa9arqIYj06+k4OK07KxU= ) ; keytag 63108`
	townforger.net. 10800 IN DNSKEY ( 257 3 8 AwEAAcDZSnDB2VFzI4pHeNwf4fvEWNMHzmR6jSIUKFsE6QLA5391BFUSfHxKH7qzzij8tnjDv7WA ZM2ubIMOP+q+TN/BWZj4sbP1YOkzny/fbQG+0Xoh6+vRm1sNxKd5Mlw3VIlGfR8yTlclk7U1tA8I yUlv6+uHt4peZD0LebrkUhvrvulVjuEX4wqfg20oX6gvjESF8ibpDsLHVS0cU0it/kguVjF5Ghmj HDaVcFCGK9fwJM+ZnJka10r7Sjc2ja0IhUgMNenBA6DtXrluZWiaxYnl/LKNI6hq+J9ZvHhASO8U gineJ+TpeDkwgrcAimuPOo/ElVPH8LW5tN7j3ljhikk8FI6Bkqdogf4+zTLokMqRxmw/msUq+GWb sVBAdpeDJRP0rTmDd4w5qia8U+6qwbbP9n9HFVq2eZBHMWXh3ZaeFfFCYZhKUiNrqF3ZvpxLfN5y Z1XdMJHebTByKdq1AeQZZ7VhVkpiESLHL5rqDvA3qZAHSReEkJI6bSAbxSNV9xZz6TvkEPepbAH9 i/g4ajklW69hZE1Ykb61kcdEQI3pfxKd7ytMDGXZG3odE1NglxpofjVTheyhEajdfYMKcIaDFBVS VmK9Y4mn4FPX20/zXQ1Cv0nyjloLs3Dl/7SYC10z4vPwnSfaEhX2jaEZp2x7bAQHPt9wOF8M9DMM 1qRH ) ; keytag 47186
	DNSKEY=47186/SEP is now in the chain-of-trust
	DS=47186/SHA-256 verifies DNSKEY=47186/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 21874 townforger.net. ZN7qb/MQV1b7NfXz+E8rHBx5pG9yUN1teFTjcK0RFdnGZT7IjGucY9I4htonCXieE/PQmjUQmv4F I50xmuECoYTrJA0uaET+/Sz+r4dQ8zWFT08QVG38O7YxqLHrGo1QdxLmWMk8iR6jIFHGrTMzNht2 XzdeEx63bZDkZhMtAoMIL6jqT5VxnPA4gqU7bHxOgWY1S8jcT6Qkwo6uUcLp5hwRzWVi0mWN66Le 2oxadYRsdYKdoXY+FpolE/pll2b44aRuQaQ7P0W2p1pde369Mt4IIrdaRsquXVxIKsGe9QDYpVP2 D9xmbNQ161bnuGAZ+znt6vCEmzcniN//zn+dEw== )`
	townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 47186 townforger.net. eYgPLG5eyUWeQFaXOvn9cmU1oWQGNuQGONbFonN8I9Jb1R9nlQmadP3q/7oLjqOJduW1WJgaTZxn Kqm7BNbGw5pJlywYNbhsh6LR7JqOu3gkj/Bs3Omh3QUPeYCp/tQmKWR88FibC0Fbx8QmgYBVnef3 8r5Du94LX1axMgZBXh912km1mb0GgGm3wxEVXDhAsIvEV9PW2S3xAQxNE6Yz8hsdria7B7j3QM/R xE91Y9jG3YrItaLyQu3iluuNV5yfVLSdBxWxsV0PcTVYWLYa2Cu+oox1xDohcYVirwdqxiOUH2XU Xs3UkNYafDUFaW94l4mhpAVqFYJoNP0WZLZ06EvZWoY+QS/AMI0zrNdcUKZwaS5srtsep0rSLqDj HczDtILUNIfDPKO7wUKGCFNJM7GBUmyrqJJHXlUcnOEE2MgILXy74SomTasJ1efIW1AZyd1HtC+J QEnn9PYz2BaV2TmI0dW11afpPTOLMIOQUrfk2mLQHZ40SpJCNFMmPwg3r/mYHG1erJUy400iQuBJ fZnFmLLeUeSqAKNA4+Zk4Cl8tcAyNEhf/0qUjsrXGPgu9u9IYNBLAnTq0FwFvrxCf/cY2VP6p+Eo 1SPZck9yn0bbLSaAZc9+2n+r3dzY6yZ2tNugatbbtOavqb3EuGzuEePW86mYfCttfjD/Jq0bcbw= )
	`townforger.net. 10800 IN RRSIG ( DNSKEY 8 2 10800 20251018190011 20250918190011 63108 townforger.net. MWdgXXSwMDcn098QjI6hKw9/Wa5fi1KzCbZuY6AoA4uP17Ll0LqYSB60Xb9NawpSIx6xwZKXWESn tx9SmuIDIoj3/fuT3obAmiUbfvuuKetiHsr45KodDUhy0Hu8UiviUNiS3imT1GOl0e3JT6rkd3ee 9ug89XC5hUXhFX8eecvjc82mV22dxfLz1eyOlH8A5+q1RzuUgx3ZwbMegD1CUWG7foiM7NN1C4gY LMONmiTH+RqR5JUHIaBdahUp4fO1uaWqGg5XKu+b37nLJrGAqPfuskKRiySYx8Sj5zdU1U4z4Rqi PeStq8KNAMh6FcEhwD7RetLMxW1HsDYYqgbSBw== )`
	RRSIG=21874 and DNSKEY=21874 verifies the DNSKEY RRset
	RRSIG=47186 and DNSKEY=47186/SEP verifies the DNSKEY RRset
	RRSIG=63108 and DNSKEY=63108 verifies the DNSKEY RRset
	DNSKEY=21874 is now in the chain-of-trust
	DNSKEY=63108 is now in the chain-of-trust
	Query to 2-can.njalla.in for checkpoints2.townforger.net/A
	Received 739 bytes from 185.193.124.34
	;; Response received from [185.193.124.34] 739 octets ;; HEADER SECTION ;; id = 58972 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) checkpoints2.townforger.net. 300 IN NS ns1-checkpoints2.townforger.net. checkpoints2.townforger.net. 300 IN DS ( 36693 15 2 b1218ab95d21849aa2fdbc89fe74708f326149ffcb45724d92f60c8772887bab ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 21874 townforger.net. RS6oRVvq0k25mfXSK1Sj2YuRYem0ArjIJ46Y4SlUgvI2PAJa4864s7tI3pJnWWrsiinjHVurR/qf mgm0HCoAgZDeOIDw3ppR133GXA3y2//6u/14IZHEXtpNhcsMvMANyVCjSfCwkkzXwLVShKqDJMAp BcVPDzOqQckzsG4T6QOKB/RmHmy2W8pSZQZF2HwV4M13HGPURvxR1swrQzsMbQJmIpmGD0J2S1yu 4GHTlUHLCcIgqw99cZhYKuv9RwLkWBG4lOQ2weiBJmNDOn9EV7z2zdImbPKUhfzD4f8Ut+k37hXY gNw7tJO1Pgobk03zVzdNe2/F1/JZHXTl+YXYOg== ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 63108 townforger.net. VQyD6mOQ0TCfJ7l9jHTQKizg5jccCXtDfrQczdtxM15DTsUaYvAQbQQaqdRQBjejajhcxOJRH1/K mKNGvO86eBTG203QcLdgY59b9A7qD3/RPbXzYcqMYjdfS3Nr4K9wtTteH7wcDko9stHxxl3yIKxr +K4CyZCe2m0Hm7b9S87WdcwEJj/mM06QGLDCEx1OmiJbon6Pa6V3cPlT4GuvNrO1qA3QjAaZxucO ominomLSqAyGrU7P8E2vFLzA+btsdEc3p8tU8R+oogEd9yEyvlf9/3VaoEl1sdUA5d4k1oZJwQ6I tQ7voGn1mgkOb5vJqJXj11l1ye+oItSSesej9w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to 2-can.njalla.in for checkpoints2.townforger.net/DNSKEY
	Received 739 bytes from 185.193.124.34
	;; Response received from [185.193.124.34] 739 octets ;; HEADER SECTION ;; id = 17182 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) checkpoints2.townforger.net. 300 IN NS ns1-checkpoints2.townforger.net. checkpoints2.townforger.net. 300 IN DS ( 36693 15 2 b1218ab95d21849aa2fdbc89fe74708f326149ffcb45724d92f60c8772887bab ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 21874 townforger.net. RS6oRVvq0k25mfXSK1Sj2YuRYem0ArjIJ46Y4SlUgvI2PAJa4864s7tI3pJnWWrsiinjHVurR/qf mgm0HCoAgZDeOIDw3ppR133GXA3y2//6u/14IZHEXtpNhcsMvMANyVCjSfCwkkzXwLVShKqDJMAp BcVPDzOqQckzsG4T6QOKB/RmHmy2W8pSZQZF2HwV4M13HGPURvxR1swrQzsMbQJmIpmGD0J2S1yu 4GHTlUHLCcIgqw99cZhYKuv9RwLkWBG4lOQ2weiBJmNDOn9EV7z2zdImbPKUhfzD4f8Ut+k37hXY gNw7tJO1Pgobk03zVzdNe2/F1/JZHXTl+YXYOg== ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 63108 townforger.net. VQyD6mOQ0TCfJ7l9jHTQKizg5jccCXtDfrQczdtxM15DTsUaYvAQbQQaqdRQBjejajhcxOJRH1/K mKNGvO86eBTG203QcLdgY59b9A7qD3/RPbXzYcqMYjdfS3Nr4K9wtTteH7wcDko9stHxxl3yIKxr +K4CyZCe2m0Hm7b9S87WdcwEJj/mM06QGLDCEx1OmiJbon6Pa6V3cPlT4GuvNrO1qA3QjAaZxucO ominomLSqAyGrU7P8E2vFLzA+btsdEc3p8tU8R+oogEd9yEyvlf9/3VaoEl1sdUA5d4k1oZJwQ6I tQ7voGn1mgkOb5vJqJXj11l1ye+oItSSesej9w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone checkpoints2.townforger.net

checkpoints2.townforger.net

	Checking DS between townforger.net and checkpoints2.townforger.net
	Query to 1-you.njalla.no for checkpoints2.townforger.net/DS
	Received 708 bytes from 185.193.124.2
	;; Response received from [185.193.124.2] 708 octets ;; HEADER SECTION ;; id = 24388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN DS ;; ANSWER SECTION (3 records) checkpoints2.townforger.net. 300 IN DS ( 36693 15 2 b1218ab95d21849aa2fdbc89fe74708f326149ffcb45724d92f60c8772887bab ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 21874 townforger.net. RS6oRVvq0k25mfXSK1Sj2YuRYem0ArjIJ46Y4SlUgvI2PAJa4864s7tI3pJnWWrsiinjHVurR/qf mgm0HCoAgZDeOIDw3ppR133GXA3y2//6u/14IZHEXtpNhcsMvMANyVCjSfCwkkzXwLVShKqDJMAp BcVPDzOqQckzsG4T6QOKB/RmHmy2W8pSZQZF2HwV4M13HGPURvxR1swrQzsMbQJmIpmGD0J2S1yu 4GHTlUHLCcIgqw99cZhYKuv9RwLkWBG4lOQ2weiBJmNDOn9EV7z2zdImbPKUhfzD4f8Ut+k37hXY gNw7tJO1Pgobk03zVzdNe2/F1/JZHXTl+YXYOg== ) checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 63108 townforger.net. VQyD6mOQ0TCfJ7l9jHTQKizg5jccCXtDfrQczdtxM15DTsUaYvAQbQQaqdRQBjejajhcxOJRH1/K mKNGvO86eBTG203QcLdgY59b9A7qD3/RPbXzYcqMYjdfS3Nr4K9wtTteH7wcDko9stHxxl3yIKxr +K4CyZCe2m0Hm7b9S87WdcwEJj/mM06QGLDCEx1OmiJbon6Pa6V3cPlT4GuvNrO1qA3QjAaZxucO ominomLSqAyGrU7P8E2vFLzA+btsdEc3p8tU8R+oogEd9yEyvlf9/3VaoEl1sdUA5d4k1oZJwQ6I tQ7voGn1mgkOb5vJqJXj11l1ye+oItSSesej9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for checkpoints2.townforger.net in the townforger.net zone
	DS=36693/SHA-256 has algorithm ED25519
	Found 2 RRSIGs over DS RRset
	`checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 21874 townforger.net. RS6oRVvq0k25mfXSK1Sj2YuRYem0ArjIJ46Y4SlUgvI2PAJa4864s7tI3pJnWWrsiinjHVurR/qf mgm0HCoAgZDeOIDw3ppR133GXA3y2//6u/14IZHEXtpNhcsMvMANyVCjSfCwkkzXwLVShKqDJMAp BcVPDzOqQckzsG4T6QOKB/RmHmy2W8pSZQZF2HwV4M13HGPURvxR1swrQzsMbQJmIpmGD0J2S1yu 4GHTlUHLCcIgqw99cZhYKuv9RwLkWBG4lOQ2weiBJmNDOn9EV7z2zdImbPKUhfzD4f8Ut+k37hXY gNw7tJO1Pgobk03zVzdNe2/F1/JZHXTl+YXYOg== )`
	`checkpoints2.townforger.net. 300 IN RRSIG ( DS 8 3 300 20251018190011 20250918190011 63108 townforger.net. VQyD6mOQ0TCfJ7l9jHTQKizg5jccCXtDfrQczdtxM15DTsUaYvAQbQQaqdRQBjejajhcxOJRH1/K mKNGvO86eBTG203QcLdgY59b9A7qD3/RPbXzYcqMYjdfS3Nr4K9wtTteH7wcDko9stHxxl3yIKxr +K4CyZCe2m0Hm7b9S87WdcwEJj/mM06QGLDCEx1OmiJbon6Pa6V3cPlT4GuvNrO1qA3QjAaZxucO ominomLSqAyGrU7P8E2vFLzA+btsdEc3p8tU8R+oogEd9yEyvlf9/3VaoEl1sdUA5d4k1oZJwQ6I tQ7voGn1mgkOb5vJqJXj11l1ye+oItSSesej9w== )`
	RRSIG=21874 and DNSKEY=21874 verifies the DS RRset
	RRSIG=63108 and DNSKEY=63108 verifies the DS RRset
	DS=36693/SHA-256 is now in the chain-of-trust
	`checkpoints2.townforger.net. 300 IN DS ( 36693 15 2 b1218ab95d21849aa2fdbc89fe74708f326149ffcb45724d92f60c8772887bab )`
	Query to ns1-checkpoints2.townforger.net for checkpoints2.townforger.net/DNSKEY
	Received 356 bytes from 185.193.127.188
	;; Response received from [185.193.127.188] 356 octets ;; HEADER SECTION ;; id = 54603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN DNSKEY ;; ANSWER SECTION (3 records) checkpoints2.townforger.net. 86400 IN DNSKEY ( 256 3 15 0xgiewaqLnd89rgiYEzlrsDzsCAc7YTuJOU/TpSo2a8= ) ; keytag 36692 checkpoints2.townforger.net. 86400 IN DNSKEY ( 257 3 15 0xgiewaqLnd89rgiYEzlrsDzsCAc7YTuJOU/TpSo2a8= ) ; keytag 36693 checkpoints2.townforger.net. 86400 IN RRSIG ( DNSKEY 15 3 86400 20251002230443 20250929230423 36693 checkpoints2.townforger.net. 8yExeEsxiKVmhUfYDWPJ4lV2g3l3nhC15PVQ0WaZdOSvxWnmFXaFJSNa+8J5zJC8kA2sy16MJ9fU q2zp5NmsCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for checkpoints2.townforger.net
	`checkpoints2.townforger.net. 86400 IN DNSKEY ( 256 3 15 0xgiewaqLnd89rgiYEzlrsDzsCAc7YTuJOU/TpSo2a8= ) ; keytag 36692`
	`checkpoints2.townforger.net. 86400 IN DNSKEY ( 257 3 15 0xgiewaqLnd89rgiYEzlrsDzsCAc7YTuJOU/TpSo2a8= ) ; keytag 36693`
	DNSKEY=36693/SEP is now in the chain-of-trust
	DS=36693/SHA-256 verifies DNSKEY=36693/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`checkpoints2.townforger.net. 86400 IN RRSIG ( DNSKEY 15 3 86400 20251002230443 20250929230423 36693 checkpoints2.townforger.net. 8yExeEsxiKVmhUfYDWPJ4lV2g3l3nhC15PVQ0WaZdOSvxWnmFXaFJSNa+8J5zJC8kA2sy16MJ9fU q2zp5NmsCA== )`
	RRSIG=36693 and DNSKEY=36693/SEP verifies the DNSKEY RRset
	DNSKEY=36692 is now in the chain-of-trust
	Query to ns1-checkpoints2.townforger.net for checkpoints2.townforger.net/A
	Received 548 bytes from 185.193.127.188
	;; Response received from [185.193.127.188] 548 octets ;; HEADER SECTION ;; id = 29085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) checkpoints2.townforger.net. 86400 IN SOA ( ns1-checkpoints2.townforger.net. admin.townforger.net. 1759273463 ;serial 60 ;refresh 30 ;retry 6000 ;expire 30 ;minimum ) checkpoints2.townforger.net. 86400 IN RRSIG ( SOA 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. DpW7g4OhC4CNvC/w3XeyEXKQrDB1qxdGla54DguFKf78Imt2hatHPF9yi0YXtpjNuh4S6PQkRXsZ +2P9MhOiDg== ) checkpoints2.townforger.net. 86400 IN NSEC ( checkpoints2.townforger.net. NS SOA TXT RRSIG NSEC DNSKEY CDS CDNSKEY ) checkpoints2.townforger.net. 86400 IN RRSIG ( NSEC 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. nOIfeDsKCri/Kjcy5bdd2abXb35x6C0V7UP3CBrzePpI7kZZHeT+qZJXRdO/vIFpOupKmNDDV0hG QcH3EM1xCg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-checkpoints2.townforger.net is authoritative for checkpoints2.townforger.net
	Found RRSIG signed by checkpoints2.townforger.net zone
	Query to ns1-checkpoints2.townforger.net for checkpoints2.townforger.net/A
	Received 548 bytes from 185.193.127.188
	;; Response received from [185.193.127.188] 548 octets ;; HEADER SECTION ;; id = 1475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; checkpoints2.townforger.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) checkpoints2.townforger.net. 86400 IN SOA ( ns1-checkpoints2.townforger.net. admin.townforger.net. 1759273463 ;serial 60 ;refresh 30 ;retry 6000 ;expire 30 ;minimum ) checkpoints2.townforger.net. 86400 IN RRSIG ( SOA 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. DpW7g4OhC4CNvC/w3XeyEXKQrDB1qxdGla54DguFKf78Imt2hatHPF9yi0YXtpjNuh4S6PQkRXsZ +2P9MhOiDg== ) checkpoints2.townforger.net. 86400 IN NSEC ( checkpoints2.townforger.net. NS SOA TXT RRSIG NSEC DNSKEY CDS CDNSKEY ) checkpoints2.townforger.net. 86400 IN RRSIG ( NSEC 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. nOIfeDsKCri/Kjcy5bdd2abXb35x6C0V7UP3CBrzePpI7kZZHeT+qZJXRdO/vIFpOupKmNDDV0hG QcH3EM1xCg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`checkpoints2.townforger.net. 86400 IN RRSIG ( NSEC 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. nOIfeDsKCri/Kjcy5bdd2abXb35x6C0V7UP3CBrzePpI7kZZHeT+qZJXRdO/vIFpOupKmNDDV0hG QcH3EM1xCg== )`
	RRSIG=36692 and DNSKEY=36692 verifies the NSEC RRset
	NSEC proves no records of type A exist for checkpoints2.townforger.net
	Found 1 RRSIGs over SOA RRset
	`checkpoints2.townforger.net. 86400 IN RRSIG ( SOA 15 3 86400 20251002230443 20250929230423 36692 checkpoints2.townforger.net. DpW7g4OhC4CNvC/w3XeyEXKQrDB1qxdGla54DguFKf78Imt2hatHPF9yi0YXtpjNuh4S6PQkRXsZ +2P9MhOiDg== )`
	RRSIG=36692 and DNSKEY=36692 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test checkpoints2.townforger.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: