DNSSEC Debugger - cursos.asia

Domain Name:

Time: 2025-01-15 12:58:23 UTC

Analyzing DNSSEC problems for cursos.asia

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 4838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for cursos.asia/A
	Received 799 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 799 octets ;; HEADER SECTION ;; id = 12975 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) asia. 172800 IN NS a0.asia.afilias-nst.info. asia. 172800 IN NS a2.asia.afilias-nst.info. asia. 172800 IN NS b0.asia.afilias-nst.asia. asia. 172800 IN NS b2.asia.afilias-nst.org. asia. 172800 IN NS c0.asia.afilias-nst.info. asia. 172800 IN NS d0.asia.afilias-nst.asia. asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UsGkG+YqN7eGM/k0iOkMb+gQZMxI/QZ1CXpp9/n96Jo6bqYQiVqWmD6ZD/phpfco16cI0ShFwbtY DKjQ8DwST/ZKVe7Ly9/Q6MWkDBLz1W8xFsoBT+p+Aw3rqg59eZBA++6odj5076adc5i35by0n9a0 fdZ1BZiiK8fIfnvrdM8nzGgf6CAm/kG77q5OiSbI7FF4jpTUg74Kpvk2rXWzthTBBH0vZmYAjyi7 0h0Xew7uPSg00pECS5m4QS0PPi9+0La7W2nPqfVsOwA22Ihlh2Xg1hvC6OGpDPjUvg6bXt5mJPAg OLupNULzzi4IEgWYhVy9B/si53fN6edLti6iSg== ) ;; ADDITIONAL SECTION (13 records) a0.asia.afilias-nst.info. 172800 IN A 199.19.55.1 a2.asia.afilias-nst.info. 172800 IN A 199.249.114.1 b0.asia.afilias-nst.asia. 172800 IN A 199.254.28.1 b2.asia.afilias-nst.org. 172800 IN A 199.249.122.1 c0.asia.afilias-nst.info. 172800 IN A 199.254.29.1 d0.asia.afilias-nst.asia. 172800 IN A 199.254.30.1 a0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:d::1 a2.asia.afilias-nst.info. 172800 IN AAAA 2001:500:42::1 b0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:16::1 b2.asia.afilias-nst.org. 172800 IN AAAA 2001:500:4a::1 c0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:17::1 d0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:18::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for asia/DNSKEY
	Received 796 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 796 octets ;; HEADER SECTION ;; id = 41725 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; asia. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) asia. 172800 IN NS c0.asia.afilias-nst.info. asia. 172800 IN NS a0.asia.afilias-nst.info. asia. 172800 IN NS b0.asia.afilias-nst.asia. asia. 172800 IN NS a2.asia.afilias-nst.info. asia. 172800 IN NS b2.asia.afilias-nst.org. asia. 172800 IN NS d0.asia.afilias-nst.asia. asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UsGkG+YqN7eGM/k0iOkMb+gQZMxI/QZ1CXpp9/n96Jo6bqYQiVqWmD6ZD/phpfco16cI0ShFwbtY DKjQ8DwST/ZKVe7Ly9/Q6MWkDBLz1W8xFsoBT+p+Aw3rqg59eZBA++6odj5076adc5i35by0n9a0 fdZ1BZiiK8fIfnvrdM8nzGgf6CAm/kG77q5OiSbI7FF4jpTUg74Kpvk2rXWzthTBBH0vZmYAjyi7 0h0Xew7uPSg00pECS5m4QS0PPi9+0La7W2nPqfVsOwA22Ihlh2Xg1hvC6OGpDPjUvg6bXt5mJPAg OLupNULzzi4IEgWYhVy9B/si53fN6edLti6iSg== ) ;; ADDITIONAL SECTION (13 records) d0.asia.afilias-nst.asia. 172800 IN A 199.254.30.1 c0.asia.afilias-nst.info. 172800 IN A 199.254.29.1 b2.asia.afilias-nst.org. 172800 IN A 199.249.122.1 b0.asia.afilias-nst.asia. 172800 IN A 199.254.28.1 a2.asia.afilias-nst.info. 172800 IN A 199.249.114.1 a0.asia.afilias-nst.info. 172800 IN A 199.19.55.1 d0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:18::1 c0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:17::1 b2.asia.afilias-nst.org. 172800 IN AAAA 2001:500:4a::1 b0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:16::1 a2.asia.afilias-nst.info. 172800 IN AAAA 2001:500:42::1 a0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:d::1 ;; { "EDNS-VERSION": 0 }
	Found child zone asia

asia

	Checking DS between . and asia
	Query to a.root-servers.net for asia/DS
	Received 368 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 368 octets ;; HEADER SECTION ;; id = 14158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; asia. IN DS ;; ANSWER SECTION (2 records) asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UsGkG+YqN7eGM/k0iOkMb+gQZMxI/QZ1CXpp9/n96Jo6bqYQiVqWmD6ZD/phpfco16cI0ShFwbtY DKjQ8DwST/ZKVe7Ly9/Q6MWkDBLz1W8xFsoBT+p+Aw3rqg59eZBA++6odj5076adc5i35by0n9a0 fdZ1BZiiK8fIfnvrdM8nzGgf6CAm/kG77q5OiSbI7FF4jpTUg74Kpvk2rXWzthTBBH0vZmYAjyi7 0h0Xew7uPSg00pECS5m4QS0PPi9+0La7W2nPqfVsOwA22Ihlh2Xg1hvC6OGpDPjUvg6bXt5mJPAg OLupNULzzi4IEgWYhVy9B/si53fN6edLti6iSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for asia in the . zone
	DS=23407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`asia. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UsGkG+YqN7eGM/k0iOkMb+gQZMxI/QZ1CXpp9/n96Jo6bqYQiVqWmD6ZD/phpfco16cI0ShFwbtY DKjQ8DwST/ZKVe7Ly9/Q6MWkDBLz1W8xFsoBT+p+Aw3rqg59eZBA++6odj5076adc5i35by0n9a0 fdZ1BZiiK8fIfnvrdM8nzGgf6CAm/kG77q5OiSbI7FF4jpTUg74Kpvk2rXWzthTBBH0vZmYAjyi7 0h0Xew7uPSg00pECS5m4QS0PPi9+0La7W2nPqfVsOwA22Ihlh2Xg1hvC6OGpDPjUvg6bXt5mJPAg OLupNULzzi4IEgWYhVy9B/si53fN6edLti6iSg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=23407/SHA-256 is now in the chain-of-trust
	`asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c )`
	Query to b2.asia.afilias-nst.org for asia/DNSKEY
	Received 897 bytes from 199.249.122.1
	;; Response received from [199.249.122.1] 897 octets ;; HEADER SECTION ;; id = 31141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; asia. IN DNSKEY ;; ANSWER SECTION (4 records) asia. 3600 IN DNSKEY ( 256 3 8 AwEAAdxVDBZ0UkHyeoHIRycCEpVytfqdCvdWFDX9UixTtzpdH0XhJnLA4bzRpVD/ZhQUbmVGZFXZ THdRD4v9AD+hr6byHz+aI2yY4rhlM2cOQvI+9zIwfXcnUSazc/iehYsyx11C75sd7YKUnCjADhA0 Yi+QFCLbpF/oRu3d3Y/8dyk9 ) ; keytag 10821 asia. 3600 IN DNSKEY ( 256 3 8 AwEAAeKGgy+vQGg2Xo4HD9MhZ5v3EhAfTCV/MTLiwGteIVrESEmch2qlzhQ1LLdEls9NQYjXDHSP m/3h7Md+PczmKSh3FKlLZJksJjzP83h2HUo4fGufjqw5zQxT3SY1E8hLqYf2birZAz6m0lAScr1W z9zZf/CigS6UgQCAJCr2LU6z ) ; keytag 61146 asia. 3600 IN DNSKEY ( 257 3 8 AwEAAdJAKRWpCvzHLNVQ9K+n6c2QLPGSbm7CHYfu1jMMSZI0K6CYifkdqREAUcrzK0KmrUs83mBQ 5eSsWfoFgoTq89YpBAfqpYFPz7+NAgbhpfpBMy7GavHwbKPZWJiin/lrP/jn3fRJp1yRxxhVFUQl uNZEAuP6+FswdQJyk9qmKoBP/dSwDinVdjT6DFcfbvs/Ioq0cSUZCzGEhkkLH2kRw44Qjrht6ZBS /1XocR+SF3gJzsqiuPvmtM2UGCIwjG+XmxlU5j/DpJaFwhlDOlr1ilv6vws94RyyJNZnfZV/Ky2B HUCam4pKsNR3IO7tniGc3xV53cBCH9nEFSbfFZ9CO0c= ) ; keytag 23407 asia. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250130154353 20250109144353 23407 asia. vWsyyGY0U3I6r4fGFveNncDUvfnNZ+u/6nxA+178fs0nhATKFJxNbQ6Hvvzc9O6lDCytYticJDlU F7GTkSSCWLrc1n8e0bmlFJv/ASJGeWfrSuKmT9CbkZMnmT9IImrTf+i7aeHfT0CQ3U2M2vzXaYXC OBuI6N2VAg8s6uJjS5An69BWTI8fNwAJbujGbsOx3Aczth5Doi4HvKzMqoTAsP6iAkV5VmoG2zPH bHx98ur+wewARZgfZBvsgYCsZ1XmVS3uf8/untJAuQHOuLmUx3AYxcs8IPjdBB86r1MMA4oiHp8L fTKDGXvTBmQci0MBufB9sY3WW+un6M0GTEzhDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for asia
	`asia. 3600 IN DNSKEY ( 256 3 8 AwEAAdxVDBZ0UkHyeoHIRycCEpVytfqdCvdWFDX9UixTtzpdH0XhJnLA4bzRpVD/ZhQUbmVGZFXZ THdRD4v9AD+hr6byHz+aI2yY4rhlM2cOQvI+9zIwfXcnUSazc/iehYsyx11C75sd7YKUnCjADhA0 Yi+QFCLbpF/oRu3d3Y/8dyk9 ) ; keytag 10821`
	`asia. 3600 IN DNSKEY ( 256 3 8 AwEAAeKGgy+vQGg2Xo4HD9MhZ5v3EhAfTCV/MTLiwGteIVrESEmch2qlzhQ1LLdEls9NQYjXDHSP m/3h7Md+PczmKSh3FKlLZJksJjzP83h2HUo4fGufjqw5zQxT3SY1E8hLqYf2birZAz6m0lAScr1W z9zZf/CigS6UgQCAJCr2LU6z ) ; keytag 61146`
	`asia. 3600 IN DNSKEY ( 257 3 8 AwEAAdJAKRWpCvzHLNVQ9K+n6c2QLPGSbm7CHYfu1jMMSZI0K6CYifkdqREAUcrzK0KmrUs83mBQ 5eSsWfoFgoTq89YpBAfqpYFPz7+NAgbhpfpBMy7GavHwbKPZWJiin/lrP/jn3fRJp1yRxxhVFUQl uNZEAuP6+FswdQJyk9qmKoBP/dSwDinVdjT6DFcfbvs/Ioq0cSUZCzGEhkkLH2kRw44Qjrht6ZBS /1XocR+SF3gJzsqiuPvmtM2UGCIwjG+XmxlU5j/DpJaFwhlDOlr1ilv6vws94RyyJNZnfZV/Ky2B HUCam4pKsNR3IO7tniGc3xV53cBCH9nEFSbfFZ9CO0c= ) ; keytag 23407`
	DNSKEY=23407/SEP is now in the chain-of-trust
	DS=23407/SHA-256 verifies DNSKEY=23407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`asia. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250130154353 20250109144353 23407 asia. vWsyyGY0U3I6r4fGFveNncDUvfnNZ+u/6nxA+178fs0nhATKFJxNbQ6Hvvzc9O6lDCytYticJDlU F7GTkSSCWLrc1n8e0bmlFJv/ASJGeWfrSuKmT9CbkZMnmT9IImrTf+i7aeHfT0CQ3U2M2vzXaYXC OBuI6N2VAg8s6uJjS5An69BWTI8fNwAJbujGbsOx3Aczth5Doi4HvKzMqoTAsP6iAkV5VmoG2zPH bHx98ur+wewARZgfZBvsgYCsZ1XmVS3uf8/untJAuQHOuLmUx3AYxcs8IPjdBB86r1MMA4oiHp8L fTKDGXvTBmQci0MBufB9sY3WW+un6M0GTEzhDQ== )`
	RRSIG=23407 and DNSKEY=23407/SEP verifies the DNSKEY RRset
	DNSKEY=10821 is now in the chain-of-trust
	DNSKEY=61146 is now in the chain-of-trust
	Query to d0.asia.afilias-nst.asia for cursos.asia/A
	Received 582 bytes from 199.254.30.1
	;; Response received from [199.254.30.1] 582 octets ;; HEADER SECTION ;; id = 17448 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cursos.asia. 3600 IN NS cellist.dnspod.net. cursos.asia. 3600 IN NS twenty.dnspod.net. lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN NSEC3 ( 1 1 0 73 lavc844v046ij0kkt3en0n8v0l2dgcod NS SOA RRSIG DNSKEY NSEC3PARAM ) lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250205125637 20250115115637 10821 asia. yymD2wSYzMJq9IyLVVOo4v8VRvoWZNqVE5xz5fhmOPwCvEIuteoNAkAlIV2X3dKwsjAL471ZW0EF lRjYR7uAkz8+Z9USLhfF3r3YuMry+3161sOmzjnV8ZkyKiCxkkjq63CbP+S4cC3KHLQXaf3LOZPa pwiNVMNDPAdT6e+Tj6A= ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN NSEC3 ( 1 1 0 73 vofm8ukqqagig30c5acqvditq0b97od8 NS DS RRSIG ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250130154353 20250109144353 10821 asia. kvw4CWAbRlnFNDFWV4hWTCfi9Te6fRIcYVP1iuUqGs0Ml+8DJDxkdbqRZ5bjFMq4+obRAeCNtxAa 3eytgohqGG/7GKbPpdjrykuZLIDeMR0Tpl2GNv5gQcZVTGR1eObnCo6yNjFbZ5VJI8NAf1AwH122 dFPB+Hab+SWAT95mmo4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a0.asia.afilias-nst.info for cursos.asia/DNSKEY
	Received 582 bytes from 199.19.55.1
	;; Response received from [199.19.55.1] 582 octets ;; HEADER SECTION ;; id = 8741 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cursos.asia. 3600 IN NS twenty.dnspod.net. cursos.asia. 3600 IN NS cellist.dnspod.net. lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN NSEC3 ( 1 1 0 73 lavc844v046ij0kkt3en0n8v0l2dgcod NS SOA RRSIG DNSKEY NSEC3PARAM ) lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250205125637 20250115115637 10821 asia. yymD2wSYzMJq9IyLVVOo4v8VRvoWZNqVE5xz5fhmOPwCvEIuteoNAkAlIV2X3dKwsjAL471ZW0EF lRjYR7uAkz8+Z9USLhfF3r3YuMry+3161sOmzjnV8ZkyKiCxkkjq63CbP+S4cC3KHLQXaf3LOZPa pwiNVMNDPAdT6e+Tj6A= ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN NSEC3 ( 1 1 0 73 vofm8ukqqagig30c5acqvditq0b97od8 NS DS RRSIG ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250130154353 20250109144353 10821 asia. kvw4CWAbRlnFNDFWV4hWTCfi9Te6fRIcYVP1iuUqGs0Ml+8DJDxkdbqRZ5bjFMq4+obRAeCNtxAa 3eytgohqGG/7GKbPpdjrykuZLIDeMR0Tpl2GNv5gQcZVTGR1eObnCo6yNjFbZ5VJI8NAf1AwH122 dFPB+Hab+SWAT95mmo4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone cursos.asia

cursos.asia

	Checking DS between asia and cursos.asia
	Query to a2.asia.afilias-nst.info for cursos.asia/DS
	Received 776 bytes from 199.249.114.1
	;; Response received from [199.249.114.1] 776 octets ;; HEADER SECTION ;; id = 60044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN NSEC3 ( 1 1 0 73 lavc844v046ij0kkt3en0n8v0l2dgcod NS SOA RRSIG DNSKEY NSEC3PARAM ) lag9ulaeer4is91hbigtm39i041qooqs.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250205125637 20250115115637 10821 asia. yymD2wSYzMJq9IyLVVOo4v8VRvoWZNqVE5xz5fhmOPwCvEIuteoNAkAlIV2X3dKwsjAL471ZW0EF lRjYR7uAkz8+Z9USLhfF3r3YuMry+3161sOmzjnV8ZkyKiCxkkjq63CbP+S4cC3KHLQXaf3LOZPa pwiNVMNDPAdT6e+Tj6A= ) asia. 3600 IN SOA ( a0.asia.afilias-nst.info. hostmaster.donuts.email. 1736945751 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) asia. 3600 IN RRSIG ( SOA 8 1 3600 20250205125637 20250115115637 10821 asia. ZKiC3arwPYvMRCCt13MIsqyWqIss125RQRXuwNG+dHG9gGPICrum/4+etIkwr2LEMJUAWKMpEn87 EGJ3oymw1Yrjzj/Q2mR+SRhF/l4CExfa6dXHDdNSToJeBmXAKgFw+nKgs9hxnZ5OJQS1X4xg61y4 62yZbMAuPEd3IWxbOdM= ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN NSEC3 ( 1 1 0 73 vofm8ukqqagig30c5acqvditq0b97od8 NS DS RRSIG ) vnugvjlm4h92gj0i2v2ncpp1qack1u3v.asia. 3600 IN RRSIG ( NSEC3 8 2 3600 20250130154353 20250109144353 10821 asia. kvw4CWAbRlnFNDFWV4hWTCfi9Te6fRIcYVP1iuUqGs0Ml+8DJDxkdbqRZ5bjFMq4+obRAeCNtxAa 3eytgohqGG/7GKbPpdjrykuZLIDeMR0Tpl2GNv5gQcZVTGR1eObnCo6yNjFbZ5VJI8NAf1AwH122 dFPB+Hab+SWAT95mmo4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cursos.asia in the asia zone
	Query to twenty.dnspod.net for cursos.asia/DNSKEY
	Timeout querying twenty.dnspod.net/36.155.149.176 for cursos.asia/DNSKEY
	Received 132 bytes from 111.206.98.235
	;; Response received from [111.206.98.235] 132 octets ;; HEADER SECTION ;; id = 19754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN DNSKEY ;; ANSWER SECTION (1 record) cursos.asia. 600 IN CNAME 71042.bodis.com. ;; AUTHORITY SECTION (2 records) cursos.asia. 86400 IN NS cellist.dnspod.net. cursos.asia. 86400 IN NS twenty.dnspod.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to cellist.dnspod.net for cursos.asia/A
	Received 132 bytes from 112.80.181.45
	;; Response received from [112.80.181.45] 132 octets ;; HEADER SECTION ;; id = 44456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cursos.asia. IN A ;; ANSWER SECTION (1 record) cursos.asia. 600 IN CNAME 71042.bodis.com. ;; AUTHORITY SECTION (2 records) cursos.asia. 86400 IN NS twenty.dnspod.net. cursos.asia. 86400 IN NS cellist.dnspod.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cellist.dnspod.net is authoritative for cursos.asia
	cursos.asia is a CNAME to 71042.bodis.com
	No RRSIGs found

	Query to h.root-servers.net for 71042.bodis.com/A
	Received 1175 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1175 octets ;; HEADER SECTION ;; id = 56799 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . eu110twI6ATpbNtVa+/Wus5CaujL+4rWEQa1NF0CSAW1FAOMoJehfF+9FKUA7bpN9xT4uffLloao dv6oRi9Z26473AcZGETi7T1Q6xmjWbojeR8Q83uT1Wu0rfdjeQ08MMHYDF6EJQv8CzPhr6swDzQg e7CrBSWUgNWuoonjvOW4RSArro1km6cP09/8puxK3fFTPRbAVEkSdT3KF06BXhqA7qPiR4TQiZpM yyQFs+/rCwIt6OcKwE6V+Lnf41UGOev9I4E0JRMJbo4+YsuvsjsR/+ynACS+7LbUtu3vPLBsftpb 4WohiGvjpI85DI/ToNUeoxJxbk43SoxpOQy0Kg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1163 octets ;; HEADER SECTION ;; id = 65511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . eu110twI6ATpbNtVa+/Wus5CaujL+4rWEQa1NF0CSAW1FAOMoJehfF+9FKUA7bpN9xT4uffLloao dv6oRi9Z26473AcZGETi7T1Q6xmjWbojeR8Q83uT1Wu0rfdjeQ08MMHYDF6EJQv8CzPhr6swDzQg e7CrBSWUgNWuoonjvOW4RSArro1km6cP09/8puxK3fFTPRbAVEkSdT3KF06BXhqA7qPiR4TQiZpM yyQFs+/rCwIt6OcKwE6V+Lnf41UGOev9I4E0JRMJbo4+YsuvsjsR/+ynACS+7LbUtu3vPLBsftpb 4WohiGvjpI85DI/ToNUeoxJxbk43SoxpOQy0Kg== ) ;; ADDITIONAL SECTION (27 records) i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to m.root-servers.net for com/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 59115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . eu110twI6ATpbNtVa+/Wus5CaujL+4rWEQa1NF0CSAW1FAOMoJehfF+9FKUA7bpN9xT4uffLloao dv6oRi9Z26473AcZGETi7T1Q6xmjWbojeR8Q83uT1Wu0rfdjeQ08MMHYDF6EJQv8CzPhr6swDzQg e7CrBSWUgNWuoonjvOW4RSArro1km6cP09/8puxK3fFTPRbAVEkSdT3KF06BXhqA7qPiR4TQiZpM yyQFs+/rCwIt6OcKwE6V+Lnf41UGOev9I4E0JRMJbo4+YsuvsjsR/+ynACS+7LbUtu3vPLBsftpb 4WohiGvjpI85DI/ToNUeoxJxbk43SoxpOQy0Kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . eu110twI6ATpbNtVa+/Wus5CaujL+4rWEQa1NF0CSAW1FAOMoJehfF+9FKUA7bpN9xT4uffLloao dv6oRi9Z26473AcZGETi7T1Q6xmjWbojeR8Q83uT1Wu0rfdjeQ08MMHYDF6EJQv8CzPhr6swDzQg e7CrBSWUgNWuoonjvOW4RSArro1km6cP09/8puxK3fFTPRbAVEkSdT3KF06BXhqA7qPiR4TQiZpM yyQFs+/rCwIt6OcKwE6V+Lnf41UGOev9I4E0JRMJbo4+YsuvsjsR/+ynACS+7LbUtu3vPLBsftpb 4WohiGvjpI85DI/ToNUeoxJxbk43SoxpOQy0Kg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to d.gtld-servers.net for com/DNSKEY
	Received 371 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 371 octets ;; HEADER SECTION ;; id = 33586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (4 records) com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718 com. 86400 IN DNSKEY ( 256 3 13 pkypg02poKlakMmicLGweP8+fDKFWyeUuYXlkJ+qhZHwrHZq+xRSeEm+/68t287aYn0tn/IRw7Pb Hl08cnH66A== ) ; keytag 23202 com. 86400 IN DNSKEY ( 256 3 13 uugEQOG7/3zv3rVGq43NQTqfmZxWn4fMIpi6ph7JKEvTRwhtw3aIV4dSk+fgpFFmORrKNznT7AIu JKy6P/Mi1Q== ) ; keytag 29942 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250127150235 20250112145735 19718 com. Vhgnmk8I7ovz+3HLq1lQgjo8au56pSvxVtMXXLwDzjA0aK+ESkiruvyZAscKavsBaGVnLP5cG1oh zeihJiJxZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 pkypg02poKlakMmicLGweP8+fDKFWyeUuYXlkJ+qhZHwrHZq+xRSeEm+/68t287aYn0tn/IRw7Pb Hl08cnH66A== ) ; keytag 23202`
	`com. 86400 IN DNSKEY ( 256 3 13 uugEQOG7/3zv3rVGq43NQTqfmZxWn4fMIpi6ph7JKEvTRwhtw3aIV4dSk+fgpFFmORrKNznT7AIu JKy6P/Mi1Q== ) ; keytag 29942`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250127150235 20250112145735 19718 com. Vhgnmk8I7ovz+3HLq1lQgjo8au56pSvxVtMXXLwDzjA0aK+ESkiruvyZAscKavsBaGVnLP5cG1oh zeihJiJxZg== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=23202 is now in the chain-of-trust
	DNSKEY=29942 is now in the chain-of-trust
	Query to j.gtld-servers.net for 71042.bodis.com/A
	Received 469 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 469 octets ;; HEADER SECTION ;; id = 36760 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bodis.com. 172800 IN NS ns1.bodis.com. bodis.com. 172800 IN NS ns2.bodis.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20250119002630 20250111231630 29942 com. rHNCcFeS8Fk0oHmHeaoGvmZ7u/AxIbJ7mcPbGWAEs0av0apbFaE+CLvezZnLg/1eMfGqL4W5I0c6 sEl0W4OKyg== ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN NSEC3 ( 1 1 0 - sdebva894pp8jkmt0h999ack0ad4dem6 NS DS RRSIG ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN RRSIG ( NSEC3 13 2 900 20250120005403 20250112234403 29942 com. M8UOsNQOT00cJ3t4wDj7X04M6func0gFgtqizZz328wRByhnUY8he5Dt6OWEl+DgXFI+7bagizHB awE2jka+0w== ) ;; ADDITIONAL SECTION (3 records) ns1.bodis.com. 172800 IN A 199.59.243.110 ns2.bodis.com. 172800 IN A 34.48.46.38 ;; { "EDNS-VERSION": 0 }
	Query to b.gtld-servers.net for bodis.com/DNSKEY
	Received 463 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 463 octets ;; HEADER SECTION ;; id = 27655 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bodis.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bodis.com. 172800 IN NS ns1.bodis.com. bodis.com. 172800 IN NS ns2.bodis.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20250119002630 20250111231630 29942 com. rHNCcFeS8Fk0oHmHeaoGvmZ7u/AxIbJ7mcPbGWAEs0av0apbFaE+CLvezZnLg/1eMfGqL4W5I0c6 sEl0W4OKyg== ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN NSEC3 ( 1 1 0 - sdebva894pp8jkmt0h999ack0ad4dem6 NS DS RRSIG ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN RRSIG ( NSEC3 13 2 900 20250120005403 20250112234403 29942 com. M8UOsNQOT00cJ3t4wDj7X04M6func0gFgtqizZz328wRByhnUY8he5Dt6OWEl+DgXFI+7bagizHB awE2jka+0w== ) ;; ADDITIONAL SECTION (3 records) ns1.bodis.com. 172800 IN A 199.59.243.110 ns2.bodis.com. 172800 IN A 34.48.46.38 ;; { "EDNS-VERSION": 0 }
	Found child zone bodis.com

bodis.com

	Checking DS between com and bodis.com
	Query to j.gtld-servers.net for bodis.com/DS
	Received 567 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 567 octets ;; HEADER SECTION ;; id = 41368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bodis.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN NSEC3 ( 1 1 0 - ck0q3udg8cekkae7rukpgct1dvssh8ll NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 900 IN RRSIG ( NSEC3 13 2 900 20250119002630 20250111231630 29942 com. rHNCcFeS8Fk0oHmHeaoGvmZ7u/AxIbJ7mcPbGWAEs0av0apbFaE+CLvezZnLg/1eMfGqL4W5I0c6 sEl0W4OKyg== ) com. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1736945893 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) com. 900 IN RRSIG ( SOA 13 1 900 20250122125813 20250115114813 29942 com. xaTJ2uxmYJRRRN9ByKUKWkMcCCfo1eq9k1033UzSXhCBvgp/mSXQvcEIXv/E51fwJylzre8aoGTF rsVjkB+pUA== ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN NSEC3 ( 1 1 0 - sdebva894pp8jkmt0h999ack0ad4dem6 NS DS RRSIG ) SDEB77MHIO03DRCIFV5QHVIF19BGODOU.com. 900 IN RRSIG ( NSEC3 13 2 900 20250120005403 20250112234403 29942 com. M8UOsNQOT00cJ3t4wDj7X04M6func0gFgtqizZz328wRByhnUY8he5Dt6OWEl+DgXFI+7bagizHB awE2jka+0w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bodis.com in the com zone
	Query to ns1.bodis.com for bodis.com/DNSKEY
	Received 87 bytes from 199.59.243.110
	;; Response received from [199.59.243.110] 87 octets ;; HEADER SECTION ;; id = 21513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bodis.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bodis.com. 3600 IN SOA ( ns1.bodis.com. dnsadmin.bodis.com. 2017062202 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.bodis.com for 71042.bodis.com/A
	Received 60 bytes from 199.59.243.110
	;; Response received from [199.59.243.110] 60 octets ;; HEADER SECTION ;; id = 21904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (1 record) 71042.bodis.com. 10800 IN A 199.59.243.228 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.bodis.com is authoritative for 71042.bodis.com
	Query to ns2.bodis.com for 71042.bodis.com/DNSKEY
	Received 93 bytes from 34.48.46.38
	;; Response received from [34.48.46.38] 93 octets ;; HEADER SECTION ;; id = 20916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bodis.com. 3600 IN SOA ( ns1.bodis.com. dnsadmin.bodis.com. 2017062202 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bodis.com for bodis.com/SOA
	Received 87 bytes from 34.48.46.38
	;; Response received from [34.48.46.38] 87 octets ;; HEADER SECTION ;; id = 7607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bodis.com. IN SOA ;; ANSWER SECTION (1 record) bodis.com. 10800 IN SOA ( ns1.bodis.com. dnsadmin.bodis.com. 2017062202 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.bodis.com for 71042.bodis.com/A
	Received 60 bytes from 199.59.243.110
	;; Response received from [199.59.243.110] 60 octets ;; HEADER SECTION ;; id = 43852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (1 record) 71042.bodis.com. 10800 IN A 199.59.243.228 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	71042.bodis.com A RR has value 199.59.243.228
	No RRSIGs found

bodis.com

	Query to ns2.bodis.com for 71042.bodis.com/A
	Received 60 bytes from 34.48.46.38
	;; Response received from [34.48.46.38] 60 octets ;; HEADER SECTION ;; id = 5791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (1 record) 71042.bodis.com. 10800 IN A 199.59.243.228 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.bodis.com is authoritative for 71042.bodis.com
	Query to ns2.bodis.com for 71042.bodis.com/DNSKEY
	Received 93 bytes from 34.48.46.38
	;; Response received from [34.48.46.38] 93 octets ;; HEADER SECTION ;; id = 40445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bodis.com. 3600 IN SOA ( ns1.bodis.com. dnsadmin.bodis.com. 2017062202 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bodis.com for 71042.bodis.com/A
	Received 60 bytes from 34.48.46.38
	;; Response received from [34.48.46.38] 60 octets ;; HEADER SECTION ;; id = 38595 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 71042.bodis.com. IN A ;; ANSWER SECTION (1 record) 71042.bodis.com. 10800 IN A 199.59.243.228 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	71042.bodis.com A RR has value 199.59.243.228
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cursos.asia at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: