DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-28 15:52:34 UTC

Analyzing DNSSEC problems for ht

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 46941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to m.root-servers.net for ht/A
	Received 574 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 574 octets ;; HEADER SECTION ;; id = 43276 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS ns-ht.nic.fr. ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260810050000 20260728040000 57780 . CHw46BicsNa8XO6WROCIHH/J/7IV1CUrqGRfVV0ju6EzZUgXsy0IW3yJfENE1HVLYlxN2l6uLe44 BQWnQQbRYDL/JLYCeS0yRqYsn0BzB/a6oZt+SXasgnWvel1rNJUtuLXAod8pJnBmmZHWLioghiT/ HrhSY7J9tIaRULybWViYwH32X71k0R8JbM2JDSlg4FL7fAEzMhBRw5jqxrFQ9OKrI1OnFCcR57An FJ3tIIm72By9f2YRCAP9aM28PDjh01xsKJuX3eeEK/yaQumjE95+FSgLZZM+NX9P2X3Pr2bZv3LY aNJG9jwoRTlLOLNabYDMxvpqsdiPZXnQRdSY3A== ) ;; ADDITIONAL SECTION (7 records) ns-ht.nic.fr. 172800 IN A 194.0.9.1 pch.nic.ht. 172800 IN A 204.61.216.38 a.lactld.org. 172800 IN A 200.0.68.10 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for ht/DNSKEY
	Received 572 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 572 octets ;; HEADER SECTION ;; id = 24752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260810050000 20260728040000 57780 . CHw46BicsNa8XO6WROCIHH/J/7IV1CUrqGRfVV0ju6EzZUgXsy0IW3yJfENE1HVLYlxN2l6uLe44 BQWnQQbRYDL/JLYCeS0yRqYsn0BzB/a6oZt+SXasgnWvel1rNJUtuLXAod8pJnBmmZHWLioghiT/ HrhSY7J9tIaRULybWViYwH32X71k0R8JbM2JDSlg4FL7fAEzMhBRw5jqxrFQ9OKrI1OnFCcR57An FJ3tIIm72By9f2YRCAP9aM28PDjh01xsKJuX3eeEK/yaQumjE95+FSgLZZM+NX9P2X3Pr2bZv3LY aNJG9jwoRTlLOLNabYDMxvpqsdiPZXnQRdSY3A== ) ;; ADDITIONAL SECTION (7 records) a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 pch.nic.ht. 172800 IN A 204.61.216.38 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 ns-ht.nic.fr. 172800 IN A 194.0.9.1 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ht

	Checking DS between . and ht
	Query to m.root-servers.net for ht/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 6531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DS ;; ANSWER SECTION (2 records) ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260810050000 20260728040000 57780 . CHw46BicsNa8XO6WROCIHH/J/7IV1CUrqGRfVV0ju6EzZUgXsy0IW3yJfENE1HVLYlxN2l6uLe44 BQWnQQbRYDL/JLYCeS0yRqYsn0BzB/a6oZt+SXasgnWvel1rNJUtuLXAod8pJnBmmZHWLioghiT/ HrhSY7J9tIaRULybWViYwH32X71k0R8JbM2JDSlg4FL7fAEzMhBRw5jqxrFQ9OKrI1OnFCcR57An FJ3tIIm72By9f2YRCAP9aM28PDjh01xsKJuX3eeEK/yaQumjE95+FSgLZZM+NX9P2X3Pr2bZv3LY aNJG9jwoRTlLOLNabYDMxvpqsdiPZXnQRdSY3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ht in the . zone
	DS=2176/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ht. 86400 IN RRSIG ( DS 8 1 86400 20260810050000 20260728040000 57780 . CHw46BicsNa8XO6WROCIHH/J/7IV1CUrqGRfVV0ju6EzZUgXsy0IW3yJfENE1HVLYlxN2l6uLe44 BQWnQQbRYDL/JLYCeS0yRqYsn0BzB/a6oZt+SXasgnWvel1rNJUtuLXAod8pJnBmmZHWLioghiT/ HrhSY7J9tIaRULybWViYwH32X71k0R8JbM2JDSlg4FL7fAEzMhBRw5jqxrFQ9OKrI1OnFCcR57An FJ3tIIm72By9f2YRCAP9aM28PDjh01xsKJuX3eeEK/yaQumjE95+FSgLZZM+NX9P2X3Pr2bZv3LY aNJG9jwoRTlLOLNabYDMxvpqsdiPZXnQRdSY3A== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2176/SHA-256 is now in the chain-of-trust
	`ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 )`
	Query to ns-ht.nic.fr for ht/DNSKEY
	Received 1661 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 1661 octets ;; HEADER SECTION ;; id = 58734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (4 records) ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAbOD/EXDJtjh+nc2YxMDM+4oTkkbKAYtMOwfEaCs0giWzWNFGHpIpjsRUdx9YUeM/ebsK0Lm b0NXn3NYNE/aVi1ntAa/mlhdBIzfLwH1/h9/vyeoZxz0te2LbEUhBZhMsJbOFE7H66VEDf/d117H zKte7Nq3gWbLDMKkSf9znwJVyiBz5DeOfnsHlapeJnp2+qCpO6/Ne+IOYvO5zwTHK3kZmkPOboLf GN222jjVeOp5ZUZCVDsHt04dm13C/uqq1YRln1rQRDh7c24ulHwKqJdpzM3DhFNIxpsOAKxGiPBJ yBXjkGjltDtvK7s0oHdTclvzDImyATsYk9VgnDZVcj8= ) ; keytag 40006 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcTKdtPEwUq8CJZS32uhvshwHMYYEs6gJLZMNxCae6KRKFgX0TAsVLwFf5mk98F3s2i6v0GM wTR8ktQKh1G4j1oCX8+/ZjFAHmWcsYG8eHxpbzKRTL3qPYx3u7xg6NjYELXMTZWfy0nzmaaenHIZ yFxWes1q4/V4vKxRSWa0rKCWs+CmKv+Y3t/yx+35pqiLdWI63GNLuYJtF7QSfOMCiyN9wy6ARycp NAfdx/U6WqUw0J6pkfMdPSU7qCIF8oCcXbNeNOC0u1kJYBxOx3sckR6FHYkUPIF5ityw8n8Z3zm5 SHQWmXgVNuXaBJb4a8oOdKlxA5sEoG1fN8PhFqjV3f8= ) ; keytag 44904 ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260821180000 20260727180000 2176 ht. StXj1yxcZwKKsqqux6R5bw/gTU2S5IQM0yrLDLR9CuOucYyLXgfDgVoNdG2B/xQTHib347+pTljb anhSolpGai95tRsP8EXkR3xZ941N7oOM3Vkn8enzYlawOkwqQTkLuEJijNUgmsArYANy0TkVwf+O IpNcPom7IaqJrBMUtZQ0CFVfGVabqYgOdyM/roWEUi7lKlR+bJPNrya/TmSk4S/RWg5lj2MspFAa /Y0XR3pJDTZu3EstxzJP2leknJauwyKdn/lQAH32+op8/FBaOVOqTu58w97dn4MCztGvcZAWnOVH /fWS43RaFPG0H4CEGlsbEI98t/nUVGLZR42PiA9YpVCs9yOLbuyJCgrF+YWMG57WEWLm7aGc1/jE ATXV07Lf3vMSQP7mcqDpHCMErff+00isd/9HRh2dcPHKSpsuXXyUnAXW3mD2LpKmqOHUsMZ1/sXf ZW47O1hxoPD6zbUgQ8unPipj/wBylWCoSIJIyHn7xl0t2f37XvkdOy+SohTWmZ0S0QRs1KG+74Dk 8P8UnmEwu0wVK683rJ6goylXmAwjFlu1OgyyVIi19F8PBEfKL0gI4X3DAg3Zyv/rH+ayhaHccCrB Z29K8N16kpahn0GiaMKFaeBDIqrjxKDgoJB6Xw264gAOXZ/gb66+hJAx98SpK2E4HILY/PhBiEY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ht
	ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAbOD/EXDJtjh+nc2YxMDM+4oTkkbKAYtMOwfEaCs0giWzWNFGHpIpjsRUdx9YUeM/ebsK0Lm b0NXn3NYNE/aVi1ntAa/mlhdBIzfLwH1/h9/vyeoZxz0te2LbEUhBZhMsJbOFE7H66VEDf/d117H zKte7Nq3gWbLDMKkSf9znwJVyiBz5DeOfnsHlapeJnp2+qCpO6/Ne+IOYvO5zwTHK3kZmkPOboLf GN222jjVeOp5ZUZCVDsHt04dm13C/uqq1YRln1rQRDh7c24ulHwKqJdpzM3DhFNIxpsOAKxGiPBJ yBXjkGjltDtvK7s0oHdTclvzDImyATsYk9VgnDZVcj8= ) ; keytag 40006`
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcTKdtPEwUq8CJZS32uhvshwHMYYEs6gJLZMNxCae6KRKFgX0TAsVLwFf5mk98F3s2i6v0GM wTR8ktQKh1G4j1oCX8+/ZjFAHmWcsYG8eHxpbzKRTL3qPYx3u7xg6NjYELXMTZWfy0nzmaaenHIZ yFxWes1q4/V4vKxRSWa0rKCWs+CmKv+Y3t/yx+35pqiLdWI63GNLuYJtF7QSfOMCiyN9wy6ARycp NAfdx/U6WqUw0J6pkfMdPSU7qCIF8oCcXbNeNOC0u1kJYBxOx3sckR6FHYkUPIF5ityw8n8Z3zm5 SHQWmXgVNuXaBJb4a8oOdKlxA5sEoG1fN8PhFqjV3f8= ) ; keytag 44904`
	DNSKEY=2176/SEP is now in the chain-of-trust
	DS=2176/SHA-256 verifies DNSKEY=2176/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260821180000 20260727180000 2176 ht. StXj1yxcZwKKsqqux6R5bw/gTU2S5IQM0yrLDLR9CuOucYyLXgfDgVoNdG2B/xQTHib347+pTljb anhSolpGai95tRsP8EXkR3xZ941N7oOM3Vkn8enzYlawOkwqQTkLuEJijNUgmsArYANy0TkVwf+O IpNcPom7IaqJrBMUtZQ0CFVfGVabqYgOdyM/roWEUi7lKlR+bJPNrya/TmSk4S/RWg5lj2MspFAa /Y0XR3pJDTZu3EstxzJP2leknJauwyKdn/lQAH32+op8/FBaOVOqTu58w97dn4MCztGvcZAWnOVH /fWS43RaFPG0H4CEGlsbEI98t/nUVGLZR42PiA9YpVCs9yOLbuyJCgrF+YWMG57WEWLm7aGc1/jE ATXV07Lf3vMSQP7mcqDpHCMErff+00isd/9HRh2dcPHKSpsuXXyUnAXW3mD2LpKmqOHUsMZ1/sXf ZW47O1hxoPD6zbUgQ8unPipj/wBylWCoSIJIyHn7xl0t2f37XvkdOy+SohTWmZ0S0QRs1KG+74Dk 8P8UnmEwu0wVK683rJ6goylXmAwjFlu1OgyyVIi19F8PBEfKL0gI4X3DAg3Zyv/rH+ayhaHccCrB Z29K8N16kpahn0GiaMKFaeBDIqrjxKDgoJB6Xw264gAOXZ/gb66+hJAx98SpK2E4HILY/PhBiEY= )
	RRSIG=2176 and DNSKEY=2176/SEP verifies the DNSKEY RRset
	DNSKEY=40006 is now in the chain-of-trust
	DNSKEY=44904 is now in the chain-of-trust
	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 4008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3570504357 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== ) MCK1ARTVQGS7DMQ422V83R8SH9G9JTMH.ht. 38400 IN NSEC3 ( 1 1 0 7bb76a8d ncf7e8je0q4sl1biienv53aafdhs9dvd NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCK1ARTVQGS7DMQ422V83R8SH9G9JTMH.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260812050000 20260718050000 44904 ht. eiQ0bBuBQsNZFUi10d8R6Pz3rreN3hYF7ahSlWB7H+/psuZ3fuUORf73DyiWDMpdDgZDkCs0HJAo SOmF8hdr5U6ecaM236DPfZaklem3FZ199fZEE2kgRUXJLOB3xs7R/odtHZonwTiY7yC6/DlpdZ0z dG6ZyEcgtruyybhR6PcxKQukBaeGeYo7eagGrhk+brm8ygAVLxsFqtTUFh7AyPYTVg54nxJu0S58 jz4Ojh59OFXA+kwdt3TtLkdunLO2eem1AO+aNMcyBGmQtvUVE5ICkIQ+nQ1hHmjiTaiQoa9w2OrS WNdHo8BdQ3uu/itTtj+LqdD0VUaygF8i4+spvg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-ht.nic.fr is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/SOA
	Received 734 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 734 octets ;; HEADER SECTION ;; id = 15486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3570504357 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== ) ;; AUTHORITY SECTION (4 records) ht. 86400 IN NS pch.nic.ht. ht. 86400 IN NS a.lactld.org. ht. 86400 IN NS ns-ht.nic.fr. ht. 86400 IN RRSIG ( NS 8 1 86400 20260812050000 20260718050000 44904 ht. ZZiJkM+gNKvNpTn2cmm7kSbdKG8r/ooVZmg/5OOvF/M5GcjYbqFeV087zntJfMS6o+Y+9wEvHWlQ qsE8HhE0XxC7Yjq7xVjiTnZvZBkHbLIIEEJhNTc/DhYX7vYmhxT0zI7Flo4N1pdG/7JZRN15ELRh t4KIIvgdc1GtFLjSagatPCCjp+yMSa3mloODZpjGyYPic5h/FFF4/HU9/aXCeo32oLSHWkwkkkrp sEZY0AeD68jtsqXD0GO/GeEI42MFwg8LBRYOWJ+P99MOEkgejUe5TJDN7ztIOwEGTsP7CSnMza7z B89BjaF69s6yBueUTh6+ogxHm98t40klV3XFEA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.lactld.org for ht/SOA
	Received 732 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 732 octets ;; HEADER SECTION ;; id = 54801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3570504357 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== ) ;; AUTHORITY SECTION (4 records) ht. 86400 IN NS a.lactld.org. ht. 86400 IN NS pch.nic.ht. ht. 86400 IN NS ns-ht.nic.fr. ht. 86400 IN RRSIG ( NS 8 1 86400 20260812050000 20260718050000 44904 ht. ZZiJkM+gNKvNpTn2cmm7kSbdKG8r/ooVZmg/5OOvF/M5GcjYbqFeV087zntJfMS6o+Y+9wEvHWlQ qsE8HhE0XxC7Yjq7xVjiTnZvZBkHbLIIEEJhNTc/DhYX7vYmhxT0zI7Flo4N1pdG/7JZRN15ELRh t4KIIvgdc1GtFLjSagatPCCjp+yMSa3mloODZpjGyYPic5h/FFF4/HU9/aXCeo32oLSHWkwkkkrp sEZY0AeD68jtsqXD0GO/GeEI42MFwg8LBRYOWJ+P99MOEkgejUe5TJDN7ztIOwEGTsP7CSnMza7z B89BjaF69s6yBueUTh6+ogxHm98t40klV3XFEA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-ht.nic.fr for ht/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== )`
	RRSIG=44904 and DNSKEY=44904 verifies the SOA RRset

	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 47971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3570504357 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== ) mck1artvqgs7dmq422v83r8sh9g9jtmh.ht. 38400 IN NSEC3 ( 1 1 0 7bb76a8d ncf7e8je0q4sl1biienv53aafdhs9dvd NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) mck1artvqgs7dmq422v83r8sh9g9jtmh.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260812050000 20260718050000 44904 ht. eiQ0bBuBQsNZFUi10d8R6Pz3rreN3hYF7ahSlWB7H+/psuZ3fuUORf73DyiWDMpdDgZDkCs0HJAo SOmF8hdr5U6ecaM236DPfZaklem3FZ199fZEE2kgRUXJLOB3xs7R/odtHZonwTiY7yC6/DlpdZ0z dG6ZyEcgtruyybhR6PcxKQukBaeGeYo7eagGrhk+brm8ygAVLxsFqtTUFh7AyPYTVg54nxJu0S58 jz4Ojh59OFXA+kwdt3TtLkdunLO2eem1AO+aNMcyBGmQtvUVE5ICkIQ+nQ1hHmjiTaiQoa9w2OrS WNdHo8BdQ3uu/itTtj+LqdD0VUaygF8i4+spvg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.lactld.org is authoritative for ht
	Found RRSIG signed by ht zone
	Query to a.lactld.org for ht/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== )`
	RRSIG=44904 and DNSKEY=44904 verifies the SOA RRset

	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 10048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3570504357 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== ) MCK1ARTVQGS7DMQ422V83R8SH9G9JTMH.ht. 38400 IN NSEC3 ( 1 1 0 7bb76a8d ncf7e8je0q4sl1biienv53aafdhs9dvd NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCK1ARTVQGS7DMQ422V83R8SH9G9JTMH.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260812050000 20260718050000 44904 ht. eiQ0bBuBQsNZFUi10d8R6Pz3rreN3hYF7ahSlWB7H+/psuZ3fuUORf73DyiWDMpdDgZDkCs0HJAo SOmF8hdr5U6ecaM236DPfZaklem3FZ199fZEE2kgRUXJLOB3xs7R/odtHZonwTiY7yC6/DlpdZ0z dG6ZyEcgtruyybhR6PcxKQukBaeGeYo7eagGrhk+brm8ygAVLxsFqtTUFh7AyPYTVg54nxJu0S58 jz4Ojh59OFXA+kwdt3TtLkdunLO2eem1AO+aNMcyBGmQtvUVE5ICkIQ+nQ1hHmjiTaiQoa9w2OrS WNdHo8BdQ3uu/itTtj+LqdD0VUaygF8i4+spvg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch.nic.ht is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260812050000 20260718050000 44904 ht. M3XImabNe5w2OB5zNBNcsSJW6hWkNihcDKz4VVInPD+D7ac78QBUGnjv+9CXHcL/uedD9FaU/BWR Tw1QuK0TGsLyz9ZSJICXPFBX6kW31kqiDKq4BVGEUpcm1DNB/MNqRpZADZPUWTYbgYL4Xqbe+GS9 ey8+U+xtT3iw0Oz7XuYuLJ33yI9SPVOuJY7JFiYM31/yx76/m4EOOBe8zJCE5kDBDjXdcCAJwF+M tX2WaIXbZtjPgkxHrUyQex47tVvutfP9hG5KD2vwgWzE38d1hPY2+bWjLQ4rWwNqICNwXFA0g7OF RUWF8Qy7JNs/m4kze+MZai43BtfYyHe9dnZx+w== )`
	RRSIG=44904 and DNSKEY=44904 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ht at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: