DNSSEC Debugger

Domain Name:

Time: 2026-04-02 02:19:12 UTC

Analyzing DNSSEC problems for ht

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1414 octets ;; HEADER SECTION ;; id = 54537 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260422000000 20260401000000 20326 . Nt4x7yqmsincs4ioIgZsndCkDnX0VGYvrwktw71R5xqyzdE8no8GBFuMSWBfOe7t64hIVApinTCZ ozwhiHQ9vjxEzz1vOf/3AjXXYclWI2UtaLlkJnb+Kv5ZFQH5j98nmRo1d0DKHg5rVUUQKY0VsfxP mnJ0y+ZWA7RWzQSR0zKvZbrX2wjtaUe5ZqpWk/+Yk3e4MiC1P9wMs5w6X+MkidQDlMQsrYQW57Xt 8iqTK2Wm66WIXzDkP7OSl8jTLINhz+o/3OOMLgkG8zTwh4BTWI36ySyZIUtqXdrsIZrX60U1nutq AMONInBHXGLfw3VODBlMvIeD0WLk3e52pYP/Tg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for ht/A
	Received 574 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 574 octets ;; HEADER SECTION ;; id = 32475 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260414170000 20260401160000 54393 . BW/fYe5kovKHJXxxSNKDc5KERqy2OK5N7H55Mn+9KxdnVIK5zQGsyGRWslPIioy/6GVQ1UUQLLZ1 pmuM1h66evfmiTNRhRU/Vwwa+S91h7kJoPGuPEIowB0f7t5Zkz3u2vuzZ8NaVLiXlXeC1NPyAVbX RRus64hTou9vzdgxDedb/PZIH/pQtR9ZVWVQlCZ6vkGQ7Ukdr2DVdN2kQCn9FZNV8ucbaCO8Bb8n jqpAzh9ONNd6rUW8wvP3KS2izfovQWoebzLuv/0OlbXmcterZGWKwOJobkTfcdp+k/NiBCzRIH1X qthc5hwAAE17qZ1Pbitliz7JqOT66V5kkSjiQA== ) ;; ADDITIONAL SECTION (7 records) pch.nic.ht. 172800 IN A 204.61.216.38 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns-ht.nic.fr. 172800 IN A 194.0.9.1 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for ht/DNSKEY
	Received 574 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 574 octets ;; HEADER SECTION ;; id = 33242 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS ns-ht.nic.fr. ht. 172800 IN NS pch.nic.ht. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260414170000 20260401160000 54393 . BW/fYe5kovKHJXxxSNKDc5KERqy2OK5N7H55Mn+9KxdnVIK5zQGsyGRWslPIioy/6GVQ1UUQLLZ1 pmuM1h66evfmiTNRhRU/Vwwa+S91h7kJoPGuPEIowB0f7t5Zkz3u2vuzZ8NaVLiXlXeC1NPyAVbX RRus64hTou9vzdgxDedb/PZIH/pQtR9ZVWVQlCZ6vkGQ7Ukdr2DVdN2kQCn9FZNV8ucbaCO8Bb8n jqpAzh9ONNd6rUW8wvP3KS2izfovQWoebzLuv/0OlbXmcterZGWKwOJobkTfcdp+k/NiBCzRIH1X qthc5hwAAE17qZ1Pbitliz7JqOT66V5kkSjiQA== ) ;; ADDITIONAL SECTION (7 records) ns-ht.nic.fr. 172800 IN A 194.0.9.1 pch.nic.ht. 172800 IN A 204.61.216.38 a.lactld.org. 172800 IN A 200.0.68.10 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Found child zone ht

	Checking DS between . and ht
	Query to e.root-servers.net for ht/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 29307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DS ;; ANSWER SECTION (2 records) ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260414170000 20260401160000 54393 . BW/fYe5kovKHJXxxSNKDc5KERqy2OK5N7H55Mn+9KxdnVIK5zQGsyGRWslPIioy/6GVQ1UUQLLZ1 pmuM1h66evfmiTNRhRU/Vwwa+S91h7kJoPGuPEIowB0f7t5Zkz3u2vuzZ8NaVLiXlXeC1NPyAVbX RRus64hTou9vzdgxDedb/PZIH/pQtR9ZVWVQlCZ6vkGQ7Ukdr2DVdN2kQCn9FZNV8ucbaCO8Bb8n jqpAzh9ONNd6rUW8wvP3KS2izfovQWoebzLuv/0OlbXmcterZGWKwOJobkTfcdp+k/NiBCzRIH1X qthc5hwAAE17qZ1Pbitliz7JqOT66V5kkSjiQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ht in the . zone
	DS=2176/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ht. 86400 IN RRSIG ( DS 8 1 86400 20260414170000 20260401160000 54393 . BW/fYe5kovKHJXxxSNKDc5KERqy2OK5N7H55Mn+9KxdnVIK5zQGsyGRWslPIioy/6GVQ1UUQLLZ1 pmuM1h66evfmiTNRhRU/Vwwa+S91h7kJoPGuPEIowB0f7t5Zkz3u2vuzZ8NaVLiXlXeC1NPyAVbX RRus64hTou9vzdgxDedb/PZIH/pQtR9ZVWVQlCZ6vkGQ7Ukdr2DVdN2kQCn9FZNV8ucbaCO8Bb8n jqpAzh9ONNd6rUW8wvP3KS2izfovQWoebzLuv/0OlbXmcterZGWKwOJobkTfcdp+k/NiBCzRIH1X qthc5hwAAE17qZ1Pbitliz7JqOT66V5kkSjiQA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2176/SHA-256 is now in the chain-of-trust
	`ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 )`
	Query to a.lactld.org for ht/DNSKEY
	Received 1661 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 1661 octets ;; HEADER SECTION ;; id = 42343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (4 records) ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcz6unZt1rmuMfYokhYr/SpjV41ekA/KVxEWgCTS4miKwGkFk67d5v4a2pSJLR20W/nNG4ns TrxzAUTaXWKpwcvEVKDZJO+8pRoY7BO+oYLWCADJPMJPerU3G9pQmBBQV9R8D9m0zspMqLQ7DqrC w7vRVZafnuW7VAt9VGyA4joZRPf3qYjOLUt6u8JB2XvxxmERB/CCYC2cEQ5/XwrqKT0WhXEtmlxd Wc9kiWBJmuMmcj7PoSYS2teqvBPHmTr6NMQpC55b6D94nW1j1eCnvs4effnwP3XzxBC3p0zFdk2W jWOlspiGrWmglqUW1yGdCcoG7JNZ2eXdocfllKNSqVM= ) ; keytag 41433 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAbOD/EXDJtjh+nc2YxMDM+4oTkkbKAYtMOwfEaCs0giWzWNFGHpIpjsRUdx9YUeM/ebsK0Lm b0NXn3NYNE/aVi1ntAa/mlhdBIzfLwH1/h9/vyeoZxz0te2LbEUhBZhMsJbOFE7H66VEDf/d117H zKte7Nq3gWbLDMKkSf9znwJVyiBz5DeOfnsHlapeJnp2+qCpO6/Ne+IOYvO5zwTHK3kZmkPOboLf GN222jjVeOp5ZUZCVDsHt04dm13C/uqq1YRln1rQRDh7c24ulHwKqJdpzM3DhFNIxpsOAKxGiPBJ yBXjkGjltDtvK7s0oHdTclvzDImyATsYk9VgnDZVcj8= ) ; keytag 40006 ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260417120000 20260323120000 2176 ht. SbCSWmR/G50iCprIsTCOYWIbE+ag5AVrlsLM0bvXqXh65wdSJKFn2brbBYyBw1lmBisaUlVBtFog jLRwH25ni4iDYDY+Du2iOOs4hYdqBbtBMAVTMjn2VVNxLgdIUPj1EOMDB8Y78mtajNpMtsS/tZis DcR+9HdlzUyXQ/mXZRSB+bN6fA5n7Uj2zw4vc78fMkx/mBt1HJkgfdMPVYfK8JyvK2gs7cBqnqMw mgy7htcNbfFZLjZAx+ggjU2sMlfa23MAtcYUcyXZVd3qNE3WMTqjm6qV0fhZgIKLeRB9GFGKStwS lCeZCML9xSnZPhlpwCOAAYySgapt9Qmu5qg3V/xpaD7GkmUlFQe2pOYQ7F5drTiOsOZ1K9JOms8a 6yd0FY26nwQgWse5CIs5lcqEp2N0hW84GJ/bgRShKPduomHA2QPaFFyp1g2EZ5loPVjzet8+aKn3 Y94lq/V2QxyOLr6Y1r2PLIakYizJaTJxhBdKmOIAr7LhnlLDZpfHRkeGwFoSs4RDqkTa2johsAsp QsQRaJHv4+Xt7/scVt0eeRyIdgeRJ9i3zWw9pzunvbNuckQzSblOv9uGQAfUdYypiDh/VyayzBcd omMtslamsVGVdXxtwBPaAwsvglgfwPRRsVMW8QwWGOZijOqQN4RE6xyRwfFB3J5XY7BVu15feqY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ht
	ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcz6unZt1rmuMfYokhYr/SpjV41ekA/KVxEWgCTS4miKwGkFk67d5v4a2pSJLR20W/nNG4ns TrxzAUTaXWKpwcvEVKDZJO+8pRoY7BO+oYLWCADJPMJPerU3G9pQmBBQV9R8D9m0zspMqLQ7DqrC w7vRVZafnuW7VAt9VGyA4joZRPf3qYjOLUt6u8JB2XvxxmERB/CCYC2cEQ5/XwrqKT0WhXEtmlxd Wc9kiWBJmuMmcj7PoSYS2teqvBPHmTr6NMQpC55b6D94nW1j1eCnvs4effnwP3XzxBC3p0zFdk2W jWOlspiGrWmglqUW1yGdCcoG7JNZ2eXdocfllKNSqVM= ) ; keytag 41433`
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAbOD/EXDJtjh+nc2YxMDM+4oTkkbKAYtMOwfEaCs0giWzWNFGHpIpjsRUdx9YUeM/ebsK0Lm b0NXn3NYNE/aVi1ntAa/mlhdBIzfLwH1/h9/vyeoZxz0te2LbEUhBZhMsJbOFE7H66VEDf/d117H zKte7Nq3gWbLDMKkSf9znwJVyiBz5DeOfnsHlapeJnp2+qCpO6/Ne+IOYvO5zwTHK3kZmkPOboLf GN222jjVeOp5ZUZCVDsHt04dm13C/uqq1YRln1rQRDh7c24ulHwKqJdpzM3DhFNIxpsOAKxGiPBJ yBXjkGjltDtvK7s0oHdTclvzDImyATsYk9VgnDZVcj8= ) ; keytag 40006`
	DNSKEY=2176/SEP is now in the chain-of-trust
	DS=2176/SHA-256 verifies DNSKEY=2176/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260417120000 20260323120000 2176 ht. SbCSWmR/G50iCprIsTCOYWIbE+ag5AVrlsLM0bvXqXh65wdSJKFn2brbBYyBw1lmBisaUlVBtFog jLRwH25ni4iDYDY+Du2iOOs4hYdqBbtBMAVTMjn2VVNxLgdIUPj1EOMDB8Y78mtajNpMtsS/tZis DcR+9HdlzUyXQ/mXZRSB+bN6fA5n7Uj2zw4vc78fMkx/mBt1HJkgfdMPVYfK8JyvK2gs7cBqnqMw mgy7htcNbfFZLjZAx+ggjU2sMlfa23MAtcYUcyXZVd3qNE3WMTqjm6qV0fhZgIKLeRB9GFGKStwS lCeZCML9xSnZPhlpwCOAAYySgapt9Qmu5qg3V/xpaD7GkmUlFQe2pOYQ7F5drTiOsOZ1K9JOms8a 6yd0FY26nwQgWse5CIs5lcqEp2N0hW84GJ/bgRShKPduomHA2QPaFFyp1g2EZ5loPVjzet8+aKn3 Y94lq/V2QxyOLr6Y1r2PLIakYizJaTJxhBdKmOIAr7LhnlLDZpfHRkeGwFoSs4RDqkTa2johsAsp QsQRaJHv4+Xt7/scVt0eeRyIdgeRJ9i3zWw9pzunvbNuckQzSblOv9uGQAfUdYypiDh/VyayzBcd omMtslamsVGVdXxtwBPaAwsvglgfwPRRsVMW8QwWGOZijOqQN4RE6xyRwfFB3J5XY7BVu15feqY= )
	RRSIG=2176 and DNSKEY=2176/SEP verifies the DNSKEY RRset
	DNSKEY=41433 is now in the chain-of-trust
	DNSKEY=40006 is now in the chain-of-trust
	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 64808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) d49v0vbmb2o186oos29sn3r3utilfqrq.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) d49v0vbmb2o186oos29sn3r3utilfqrq.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.lactld.org is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/SOA
	Received 734 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 734 octets ;; HEADER SECTION ;; id = 11636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) ;; AUTHORITY SECTION (4 records) ht. 86400 IN NS ns-ht.nic.fr. ht. 86400 IN NS a.lactld.org. ht. 86400 IN NS pch.nic.ht. ht. 86400 IN RRSIG ( NS 8 1 86400 20260417200000 20260323200000 41433 ht. DnsD6GDPIn0pGSKjJV1bQJBAyMFNhF9/oL4Zqh7cdvLjf3aUhE3sSWyAmJRvSNVHPN0ZbxstV1jH q35FP6S9RbsVy3luRMrmF+AXWKX/+vwhLjDFexE/7kXiGOefgoAkANOOrd4RX+3tFtL8KnuMAK2f y+3wWcJULrWmhQ2or1JtqbKYKTKNyvG9ZFu1l+B1W2p48b/UTew9n0wbAg0EognT4sCOecGsqEG1 3MgU5o3ICbJmHNxw76mq21vqdhVMV6gbXKyDgyIpwLwFoy4wArH+XVCS7MbQGL7Q6cXzb5Zc47bL 5TaVVa+wHgXBulzF/UZpGWDdffR6hmSU7GAmKQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-ht.nic.fr for ht/SOA
	Received 376 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 376 octets ;; HEADER SECTION ;; id = 39098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 32639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) d49v0vbmb2o186oos29sn3r3utilfqrq.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) d49v0vbmb2o186oos29sn3r3utilfqrq.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 5045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-ht.nic.fr is authoritative for ht
	Found RRSIG signed by ht zone
	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 63877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 34995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch.nic.ht is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 16691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3550181322 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN NSEC3 ( 1 1 0 03e61ac0 d5gdm13hliuu55sa0sfmamivv319cu8c NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) D49V0VBMB2O186OOS29SN3R3UTILFQRQ.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260417200000 20260323200000 41433 ht. hs46keCUsZyY7Y6IOXfD4n0mwcbvd1xOIZgxnvao1oBvPUogIFUGePgUx+tiyfZVUZcGWECQjf8n aqklafE/4CdtZjEepatUdPuK3YezC8uV6UqwQi5XKuEuyN9jxE4HSXtLeISXCeUjuHGYcH+YLEYo MKXWnThsGAXNpb2bCRfjWeWSFWVYlld+Q4iA9zFvzzyiHimHCS/U7Jw7L68nep8ZNE+gO6DrSDKu LV24AeSILHRHcVKfiLv7bzdvmo80Flgkav4TwHTGbpISEqM0/jvCxs8IlpDga4In4VYwsym5i1I4 jhJY2eeU7fIpoBtlfQlElTEeHIbyCkTb+jCkbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260417200000 20260323200000 41433 ht. Gj3HR3CcsLc0cG/ddOsOJZcJNDsI9JIeL5BkNLqCFBAN2W9QgfrRSQgd58g9QMg1P3oC/zFsumlC yh/xIavXcJzuk4XRD2/QFm28VGJqumguNLIkWVLSqIeDD5Q/DartfEyv7P+oMGBpGwTweyLVN2yJ K1GGfjPIqfoL0arcLfA0CEMbwyGWIagpDDS7QAO3RzwGooNXUdi+D6tv/LHB7apGuWugbH39MMai GMx/DEWi9EDCbeMp22HfPzsyq78PPhhhSVUVkxhKhZOPUNouN9HJY5YLPqMh5J8NZNBirhaI0BLK Kw1y+mxj82JQvjqA0AG5Clr52znDrTz5cKTBUA== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ht at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: