DNSSEC Analyzer - cornell.edu

Domain Name:

Time: 2020-08-13 05:49:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for cornell.edu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 40037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to b.root-servers.net for cornell.edu/A
	Received 1170 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (1170 bytes) ;; HEADER SECTION ;; id = 15266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 86400 IN DS ( 28065 8 2 4172496cde85534e51129040355bd04b1fcfebae996dfdde652006f6f8b2ce76 ) edu. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . M564evZdprEHi+mHoLfEGz7XVr7xQxN/t51b9cLlt2xjmtFbyUbBF55aMQxv09hApL1DStVnIqh5 cVDgy1FJEwb4aRn4OIe7PS0dT6LDJTopn1c9vVjesD40xe2hB4oSS/JGU+TYWBujDMTbgWOGhvbT L9GGtMmUPnx4L4EwL3j1IzURJYluJeb1KjCIH4Puc2amBH3/TB/mNQDiDEJKW1n5on0ARwow6hVI HsYL/JDwp3yEDK6ijcxTB+VoY0+2WLa00LBk3mtoc7D9c76K7Sl2uLesaIRzAzoZ1Fw8tf1N9ED4 vWR2mO8DGvHvIIaSJunQncj4lgh0KxhB3/H78Q== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 b.edu-servers.net. 172800 IN A 192.33.14.30 c.edu-servers.net. 172800 IN A 192.26.92.30 d.edu-servers.net. 172800 IN A 192.31.80.30 e.edu-servers.net. 172800 IN A 192.12.94.30 f.edu-servers.net. 172800 IN A 192.35.51.30 g.edu-servers.net. 172800 IN A 192.42.93.30 h.edu-servers.net. 172800 IN A 192.54.112.30 i.edu-servers.net. 172800 IN A 192.43.172.30 j.edu-servers.net. 172800 IN A 192.48.79.30 k.edu-servers.net. 172800 IN A 192.52.178.30 l.edu-servers.net. 172800 IN A 192.41.162.30 m.edu-servers.net. 172800 IN A 192.55.83.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1162 bytes) ;; HEADER SECTION ;; id = 42457 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 28065 8 2 4172496cde85534e51129040355bd04b1fcfebae996dfdde652006f6f8b2ce76 ) edu. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . M564evZdprEHi+mHoLfEGz7XVr7xQxN/t51b9cLlt2xjmtFbyUbBF55aMQxv09hApL1DStVnIqh5 cVDgy1FJEwb4aRn4OIe7PS0dT6LDJTopn1c9vVjesD40xe2hB4oSS/JGU+TYWBujDMTbgWOGhvbT L9GGtMmUPnx4L4EwL3j1IzURJYluJeb1KjCIH4Puc2amBH3/TB/mNQDiDEJKW1n5on0ARwow6hVI HsYL/JDwp3yEDK6ijcxTB+VoY0+2WLa00LBk3mtoc7D9c76K7Sl2uLesaIRzAzoZ1Fw8tf1N9ED4 vWR2mO8DGvHvIIaSJunQncj4lgh0KxhB3/H78Q== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone edu

edu

	Checking DS between . and edu
	Query to j.root-servers.net for edu/DS
	Received 367 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (367 bytes) ;; HEADER SECTION ;; id = 10818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 28065 8 2 4172496cde85534e51129040355bd04b1fcfebae996dfdde652006f6f8b2ce76 ) edu. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . M564evZdprEHi+mHoLfEGz7XVr7xQxN/t51b9cLlt2xjmtFbyUbBF55aMQxv09hApL1DStVnIqh5 cVDgy1FJEwb4aRn4OIe7PS0dT6LDJTopn1c9vVjesD40xe2hB4oSS/JGU+TYWBujDMTbgWOGhvbT L9GGtMmUPnx4L4EwL3j1IzURJYluJeb1KjCIH4Puc2amBH3/TB/mNQDiDEJKW1n5on0ARwow6hVI HsYL/JDwp3yEDK6ijcxTB+VoY0+2WLa00LBk3mtoc7D9c76K7Sl2uLesaIRzAzoZ1Fw8tf1N9ED4 vWR2mO8DGvHvIIaSJunQncj4lgh0KxhB3/H78Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for edu in the . zone
	DS=28065/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . M564evZdprEHi+mHoLfEGz7XVr7xQxN/t51b9cLlt2xjmtFbyUbBF55aMQxv09hApL1DStVnIqh5 cVDgy1FJEwb4aRn4OIe7PS0dT6LDJTopn1c9vVjesD40xe2hB4oSS/JGU+TYWBujDMTbgWOGhvbT L9GGtMmUPnx4L4EwL3j1IzURJYluJeb1KjCIH4Puc2amBH3/TB/mNQDiDEJKW1n5on0ARwow6hVI HsYL/JDwp3yEDK6ijcxTB+VoY0+2WLa00LBk3mtoc7D9c76K7Sl2uLesaIRzAzoZ1Fw8tf1N9ED4 vWR2mO8DGvHvIIaSJunQncj4lgh0KxhB3/H78Q== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=28065/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 28065 8 2 4172496cde85534e51129040355bd04b1fcfebae996dfdde652006f6f8b2ce76 )`
	Query to l.edu-servers.net for edu/DNSKEY
	Received 775 bytes from 192.41.162.30
	;; Answer received from 192.41.162.30 (775 bytes) ;; HEADER SECTION ;; id = 62563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (3 records) edu. 86400 IN DNSKEY ( 257 3 8 AQOluvuVWACqSUX6EZr3d5YIIv13SDXBpDeGRCIET3T0l1wp0NprtJhfc1YVehIlNqucijLnEhSL N2i0Txnh3bU5aQJLRf/qm21etL35ozAIlnfSgY5D0nxLPoBIRq++8Mxvr+2YCSRaCNyrqaU4TnHa PiHLuKe7sGyHQ8K8rXst7HxF5zgG+gIeytYIxpy4/bAaKCNVvGaYHxuNSBJBiYSrxjiZk268EP6E 3T+bSdi2HepB3ZuBWyOewsmHO8aoHmzIH049vBNI7iFZByRKY9yAJ8TshANtiUHHwAF7JJtWLW9o O10BqygYG+zS4weKGtkcNpzOUDWs41FWM8aFs4L1 ) ; Key ID = 28065 edu. 86400 IN DNSKEY ( 256 3 8 AQPGOhHCYbu5iDjLtR5l9F5pXJWyNTTqiTd6A9YIu0hf9zYRwh2Hek14Ip4ifgvb7SDCv8AVkK3n 9iuc9X56fy/nPluYZpP9JNjUFbTqzdB5m6FumjUJwbKgXsL+bNB9rH4/v9sVTPztlpUSm5wmoCr6 Cbsa03/HCwNw7azyLVdjfMM2TMp8TwH9MKMFRlnEyIfp1eeL+VRGn06Caf8fsJTP ) ; Key ID = 33233 edu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200827185303 20200812184803 28065 edu. ZZE6Hhp2cFdtye+Zyf2zmjUETCowQO5tXQz5cb+kbvHIIvHoi0bpnK+V8rZzLEliy/ntGz1CVjcC G3OoH0O1Gp24dFMbFdQmcSxp8k20eRgzKluccihNNTqd1haBOVES0rI0fSY6M7qxJxUjDoeAX/5G DyuxAsWSgpnD3JX3IYeuAh81UNN9eogDDgqTfuKFjSYcODH7r+Q4+7vPCr9OsRH0sNcb3OM56QNs StIJI+dSf8bBixJdQkmzLAW0Ut3e1p4AQv0rDxLydQ93UiAlvuwjmgT6p92YZkJDu+BUfu+0mBm5 zlG6BLgAo8s5KeWvVQ/yrY7O/JlFLzW0balrsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 257 3 8 AQOluvuVWACqSUX6EZr3d5YIIv13SDXBpDeGRCIET3T0l1wp0NprtJhfc1YVehIlNqucijLnEhSL N2i0Txnh3bU5aQJLRf/qm21etL35ozAIlnfSgY5D0nxLPoBIRq++8Mxvr+2YCSRaCNyrqaU4TnHa PiHLuKe7sGyHQ8K8rXst7HxF5zgG+gIeytYIxpy4/bAaKCNVvGaYHxuNSBJBiYSrxjiZk268EP6E 3T+bSdi2HepB3ZuBWyOewsmHO8aoHmzIH049vBNI7iFZByRKY9yAJ8TshANtiUHHwAF7JJtWLW9o O10BqygYG+zS4weKGtkcNpzOUDWs41FWM8aFs4L1 ) ; Key ID = 28065`
	`edu. 86400 IN DNSKEY ( 256 3 8 AQPGOhHCYbu5iDjLtR5l9F5pXJWyNTTqiTd6A9YIu0hf9zYRwh2Hek14Ip4ifgvb7SDCv8AVkK3n 9iuc9X56fy/nPluYZpP9JNjUFbTqzdB5m6FumjUJwbKgXsL+bNB9rH4/v9sVTPztlpUSm5wmoCr6 Cbsa03/HCwNw7azyLVdjfMM2TMp8TwH9MKMFRlnEyIfp1eeL+VRGn06Caf8fsJTP ) ; Key ID = 33233`
	DNSKEY=28065/SEP is now in the chain-of-trust
	DS=28065/SHA-256 verifies DNSKEY=28065/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200827185303 20200812184803 28065 edu. ZZE6Hhp2cFdtye+Zyf2zmjUETCowQO5tXQz5cb+kbvHIIvHoi0bpnK+V8rZzLEliy/ntGz1CVjcC G3OoH0O1Gp24dFMbFdQmcSxp8k20eRgzKluccihNNTqd1haBOVES0rI0fSY6M7qxJxUjDoeAX/5G DyuxAsWSgpnD3JX3IYeuAh81UNN9eogDDgqTfuKFjSYcODH7r+Q4+7vPCr9OsRH0sNcb3OM56QNs StIJI+dSf8bBixJdQkmzLAW0Ut3e1p4AQv0rDxLydQ93UiAlvuwjmgT6p92YZkJDu+BUfu+0mBm5 zlG6BLgAo8s5KeWvVQ/yrY7O/JlFLzW0balrsQ== )`
	RRSIG=28065 and DNSKEY=28065/SEP verifies the DNSKEY RRset
	DNSKEY=33233 is now in the chain-of-trust
	Query to b.edu-servers.net for cornell.edu/A
	Received 773 bytes from 192.33.14.30
	;; Answer received from 192.33.14.30 (773 bytes) ;; HEADER SECTION ;; id = 63462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cornell.edu. 172800 IN NS bigred.cit.cornell.edu. cornell.edu. 172800 IN NS cudns.cit.cornell.edu. cornell.edu. 172800 IN NS dns.cit.cornell.edu. cornell.edu. 172800 IN NS drdns.cit.cornell.edu. cornell.edu. 172800 IN NS drdns2.cit.cornell.edu. 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN NSEC3 ( 1 1 0 - 9fcf1egsoaien6sntrasim03tm0po3vj NS SOA RRSIG DNSKEY NSEC3PARAM ) 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820053152 20200813042152 33233 edu. HUV4RihX5/NyQlpNtr0ouD8w4z/75B7IWQl8A+H+DP8f+W8dn2ZhC4EP6e1xSJYLDMNDysvs2Ygx 4Rwb9qMNHkPmuI/MqgzonYjMmp5UzkaoemfAHYO6+1ud/Qr9nESzF3xkV7NLuq5HPpuYmDpDkUQH cu2/BpscBw5+jRt849fKG5Kc6vn5NpFiyy6nyfKo7KBvUqL0t4GeYRHwXvAOqw== ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN NSEC3 ( 1 1 0 - dmut7rvnnmaj480g6q6l0qli607ucv6t NS DS RRSIG ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820043423 20200813032423 33233 edu. SBNOMTr5zf0PS2Pcy0/OzoarnjEhu4tt+BnzN0xKGEniQlVhZSPMRadlLNBLRbEmcX3bCff3wGSP VvY8FpN3WLQivd8ptKmQO2Mx3qKBcWBP07MGkeKCz5cVliuzDdVtTLEN8bWUdr9q4fNHHxmex9Og sp0IAWJWsoHwWAwDb3yrvFWbfpfy01QWDQ4vFNdL/Bp3PDh/d8WD0kQ6gzFiXg== ) ;; ADDITIONAL SECTION (6 records) bigred.cit.cornell.edu. 172800 IN A 128.253.180.35 cudns.cit.cornell.edu. 172800 IN A 132.236.56.252 dns.cit.cornell.edu. 172800 IN A 192.35.82.53 drdns.cit.cornell.edu. 172800 IN A 192.195.74.252 drdns2.cit.cornell.edu. 172800 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.edu-servers.net for cornell.edu/DNSKEY
	Received 773 bytes from 192.12.94.30
	;; Answer received from 192.12.94.30 (773 bytes) ;; HEADER SECTION ;; id = 38278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cornell.edu. 172800 IN NS bigred.cit.cornell.edu. cornell.edu. 172800 IN NS cudns.cit.cornell.edu. cornell.edu. 172800 IN NS dns.cit.cornell.edu. cornell.edu. 172800 IN NS drdns.cit.cornell.edu. cornell.edu. 172800 IN NS drdns2.cit.cornell.edu. 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN NSEC3 ( 1 1 0 - 9fcf1egsoaien6sntrasim03tm0po3vj NS SOA RRSIG DNSKEY NSEC3PARAM ) 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820053152 20200813042152 33233 edu. HUV4RihX5/NyQlpNtr0ouD8w4z/75B7IWQl8A+H+DP8f+W8dn2ZhC4EP6e1xSJYLDMNDysvs2Ygx 4Rwb9qMNHkPmuI/MqgzonYjMmp5UzkaoemfAHYO6+1ud/Qr9nESzF3xkV7NLuq5HPpuYmDpDkUQH cu2/BpscBw5+jRt849fKG5Kc6vn5NpFiyy6nyfKo7KBvUqL0t4GeYRHwXvAOqw== ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN NSEC3 ( 1 1 0 - dmut7rvnnmaj480g6q6l0qli607ucv6t NS DS RRSIG ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820043423 20200813032423 33233 edu. SBNOMTr5zf0PS2Pcy0/OzoarnjEhu4tt+BnzN0xKGEniQlVhZSPMRadlLNBLRbEmcX3bCff3wGSP VvY8FpN3WLQivd8ptKmQO2Mx3qKBcWBP07MGkeKCz5cVliuzDdVtTLEN8bWUdr9q4fNHHxmex9Og sp0IAWJWsoHwWAwDb3yrvFWbfpfy01QWDQ4vFNdL/Bp3PDh/d8WD0kQ6gzFiXg== ) ;; ADDITIONAL SECTION (6 records) bigred.cit.cornell.edu. 172800 IN A 128.253.180.35 cudns.cit.cornell.edu. 172800 IN A 132.236.56.252 dns.cit.cornell.edu. 172800 IN A 192.35.82.53 drdns.cit.cornell.edu. 172800 IN A 192.195.74.252 drdns2.cit.cornell.edu. 172800 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cornell.edu

cornell.edu

	Checking DS between edu and cornell.edu
	Query to c.edu-servers.net for cornell.edu/DS
	Received 859 bytes from 192.26.92.30
	;; Answer received from 192.26.92.30 (859 bytes) ;; HEADER SECTION ;; id = 45835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN NSEC3 ( 1 1 0 - 9fcf1egsoaien6sntrasim03tm0po3vj NS SOA RRSIG DNSKEY NSEC3PARAM ) 9DHS4EP5G85PF9NUFK06HEK0O48QGK77.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820053152 20200813042152 33233 edu. HUV4RihX5/NyQlpNtr0ouD8w4z/75B7IWQl8A+H+DP8f+W8dn2ZhC4EP6e1xSJYLDMNDysvs2Ygx 4Rwb9qMNHkPmuI/MqgzonYjMmp5UzkaoemfAHYO6+1ud/Qr9nESzF3xkV7NLuq5HPpuYmDpDkUQH cu2/BpscBw5+jRt849fKG5Kc6vn5NpFiyy6nyfKo7KBvUqL0t4GeYRHwXvAOqw== ) edu. 900 IN SOA ( a.edu-servers.net. nstld.verisign-grs.com. 1597297753 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) edu. 900 IN RRSIG ( SOA 8 1 900 20200820054913 20200813043913 33233 edu. wy3hVPt3PJgnjGll9gOS6z0feLw9jOGMDRi6J2NYAcktm5ClEcXRl9T1G7jlxdlC2j995xng/5e4 cBMHaqeU6ta7FG5nNwF2bYSJ35WzEfzm4s4rDbHcwTkZG+lt6x26okGvxFc6xnWS6/aXKBaMNxBR d8icFiGFAnfFjZnq2OHdj1sDKWihuZp29vjGHD0ccvfm4xKwTw+FuDH8Nj9k1g== ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN NSEC3 ( 1 1 0 - dmut7rvnnmaj480g6q6l0qli607ucv6t NS DS RRSIG ) DJQJOL9OHIS0EOBL9S4M43IPCGUJT1S0.edu. 86400 IN RRSIG ( NSEC3 8 2 86400 20200820043423 20200813032423 33233 edu. SBNOMTr5zf0PS2Pcy0/OzoarnjEhu4tt+BnzN0xKGEniQlVhZSPMRadlLNBLRbEmcX3bCff3wGSP VvY8FpN3WLQivd8ptKmQO2Mx3qKBcWBP07MGkeKCz5cVliuzDdVtTLEN8bWUdr9q4fNHHxmex9Og sp0IAWJWsoHwWAwDb3yrvFWbfpfy01QWDQ4vFNdL/Bp3PDh/d8WD0kQ6gzFiXg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cornell.edu in the edu zone
	Query to dns.cit.cornell.edu for cornell.edu/DNSKEY
	Received 93 bytes from 192.35.82.53
	;; Answer received from 192.35.82.53 (93 bytes) ;; HEADER SECTION ;; id = 14962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cornell.edu. 3600 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to drdns.cit.cornell.edu for cornell.edu/A
	Received 288 bytes from 52.152.185.125
	;; Answer received from 52.152.185.125 (288 bytes) ;; HEADER SECTION ;; id = 60609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN A ;; ANSWER SECTION (4 records) cornell.edu. 10800 IN A 128.253.173.248 cornell.edu. 10800 IN A 128.253.173.247 cornell.edu. 10800 IN A 128.253.173.245 cornell.edu. 10800 IN A 128.253.173.242 ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cornell.edu is authoritative for cornell.edu
	Query to dns.cit.cornell.edu for cornell.edu/SOA
	Received 269 bytes from 192.35.82.53
	;; Answer received from 192.35.82.53 (269 bytes) ;; HEADER SECTION ;; id = 46828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN SOA ;; ANSWER SECTION (1 record) cornell.edu. 86400 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. cornell.edu. 432000 IN NS cudns.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to drdns2.cit.cornell.edu for cornell.edu/SOA
	Received 269 bytes from 52.45.47.12
	;; Answer received from 52.45.47.12 (269 bytes) ;; HEADER SECTION ;; id = 40521 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN SOA ;; ANSWER SECTION (1 record) cornell.edu. 86400 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bigred.cit.cornell.edu for cornell.edu/SOA
	Received 269 bytes from 128.253.180.35
	;; Answer received from 128.253.180.35 (269 bytes) ;; HEADER SECTION ;; id = 25685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN SOA ;; ANSWER SECTION (1 record) cornell.edu. 86400 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to cudns.cit.cornell.edu for cornell.edu/SOA
	Received 269 bytes from 132.236.56.252
	;; Answer received from 132.236.56.252 (269 bytes) ;; HEADER SECTION ;; id = 13260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN SOA ;; ANSWER SECTION (1 record) cornell.edu. 86400 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to drdns.cit.cornell.edu for cornell.edu/SOA
	Received 269 bytes from 52.152.185.125
	;; Answer received from 52.152.185.125 (269 bytes) ;; HEADER SECTION ;; id = 3324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN SOA ;; ANSWER SECTION (1 record) cornell.edu. 86400 IN SOA ( dns.cit.cornell.edu. nsmaster.cornell.edu. 3008130102 ;serial 1860 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS dns.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS bigred.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to drdns.cit.cornell.edu for cornell.edu/A
	Received 288 bytes from 52.152.185.125
	;; Answer received from 52.152.185.125 (288 bytes) ;; HEADER SECTION ;; id = 15078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cornell.edu. IN A ;; ANSWER SECTION (4 records) cornell.edu. 10800 IN A 128.253.173.245 cornell.edu. 10800 IN A 128.253.173.247 cornell.edu. 10800 IN A 128.253.173.242 cornell.edu. 10800 IN A 128.253.173.248 ;; AUTHORITY SECTION (5 records) cornell.edu. 432000 IN NS bigred.cit.cornell.edu. cornell.edu. 432000 IN NS drdns2.cit.cornell.edu. cornell.edu. 432000 IN NS drdns.cit.cornell.edu. cornell.edu. 432000 IN NS cudns.cit.cornell.edu. cornell.edu. 432000 IN NS dns.cit.cornell.edu. ;; ADDITIONAL SECTION (6 records) dns.cit.cornell.edu. 86400 IN A 192.35.82.53 cudns.cit.cornell.edu. 86400 IN A 132.236.56.252 drdns.cit.cornell.edu. 86400 IN A 52.152.185.125 bigred.cit.cornell.edu. 86400 IN A 128.253.180.35 drdns2.cit.cornell.edu. 86400 IN A 52.45.47.12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cornell.edu A RR has value 128.253.173.245
	cornell.edu A RR has value 128.253.173.247
	cornell.edu A RR has value 128.253.173.242
	cornell.edu A RR has value 128.253.173.248
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cornell.edu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: