DNSSEC Debugger

Domain Name:

Time: 2026-02-08 14:06:09 UTC

Analyzing DNSSEC problems for ht

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 28435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for ht/A
	Received 572 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 572 octets ;; HEADER SECTION ;; id = 47746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 172800 IN NS a.lactld.org. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . MG3fUQ55pd/ljzKXio1hpAeRF4f/p1zCAElEs8RA7ziMPyxDns2Xvx16+qaoBvCPd8FGKPlxVMTd 1VkFYsyA1D1PHJ/Ku7lVxRo831109PaHFAIS/xXZmDBt6vDL3lla2SoMJmT0UqtyIN9gINRkt9kG PVGVUuk6xsqf8vawdiAnDo56s8zffLhuQWHs11N0b+A0XogWJE8umD5VIP9gWbT2mI7K/ooTbft8 U6mUsIDOz5Jn6uPDz0VuWUpE16L7G1i6h6uizNrfiVyrRs5987PJ8HDTmKrrYVfi1UEPUzZFYFbk T/6OqZt9UUT79KDABSFdbpJFYuPpBo0P+vM2pg== ) ;; ADDITIONAL SECTION (7 records) pch.nic.ht. 172800 IN A 204.61.216.38 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 ns-ht.nic.fr. 172800 IN A 194.0.9.1 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ht/DNSKEY
	Received 574 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 574 octets ;; HEADER SECTION ;; id = 5168 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . MG3fUQ55pd/ljzKXio1hpAeRF4f/p1zCAElEs8RA7ziMPyxDns2Xvx16+qaoBvCPd8FGKPlxVMTd 1VkFYsyA1D1PHJ/Ku7lVxRo831109PaHFAIS/xXZmDBt6vDL3lla2SoMJmT0UqtyIN9gINRkt9kG PVGVUuk6xsqf8vawdiAnDo56s8zffLhuQWHs11N0b+A0XogWJE8umD5VIP9gWbT2mI7K/ooTbft8 U6mUsIDOz5Jn6uPDz0VuWUpE16L7G1i6h6uizNrfiVyrRs5987PJ8HDTmKrrYVfi1UEPUzZFYFbk T/6OqZt9UUT79KDABSFdbpJFYuPpBo0P+vM2pg== ) ;; ADDITIONAL SECTION (7 records) ns-ht.nic.fr. 172800 IN A 194.0.9.1 pch.nic.ht. 172800 IN A 204.61.216.38 a.lactld.org. 172800 IN A 200.0.68.10 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Found child zone ht

	Checking DS between . and ht
	Query to i.root-servers.net for ht/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 20465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DS ;; ANSWER SECTION (2 records) ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . MG3fUQ55pd/ljzKXio1hpAeRF4f/p1zCAElEs8RA7ziMPyxDns2Xvx16+qaoBvCPd8FGKPlxVMTd 1VkFYsyA1D1PHJ/Ku7lVxRo831109PaHFAIS/xXZmDBt6vDL3lla2SoMJmT0UqtyIN9gINRkt9kG PVGVUuk6xsqf8vawdiAnDo56s8zffLhuQWHs11N0b+A0XogWJE8umD5VIP9gWbT2mI7K/ooTbft8 U6mUsIDOz5Jn6uPDz0VuWUpE16L7G1i6h6uizNrfiVyrRs5987PJ8HDTmKrrYVfi1UEPUzZFYFbk T/6OqZt9UUT79KDABSFdbpJFYuPpBo0P+vM2pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ht in the . zone
	DS=2176/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ht. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . MG3fUQ55pd/ljzKXio1hpAeRF4f/p1zCAElEs8RA7ziMPyxDns2Xvx16+qaoBvCPd8FGKPlxVMTd 1VkFYsyA1D1PHJ/Ku7lVxRo831109PaHFAIS/xXZmDBt6vDL3lla2SoMJmT0UqtyIN9gINRkt9kG PVGVUuk6xsqf8vawdiAnDo56s8zffLhuQWHs11N0b+A0XogWJE8umD5VIP9gWbT2mI7K/ooTbft8 U6mUsIDOz5Jn6uPDz0VuWUpE16L7G1i6h6uizNrfiVyrRs5987PJ8HDTmKrrYVfi1UEPUzZFYFbk T/6OqZt9UUT79KDABSFdbpJFYuPpBo0P+vM2pg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2176/SHA-256 is now in the chain-of-trust
	`ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 )`
	Query to a.lactld.org for ht/DNSKEY
	Received 1385 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 1385 octets ;; HEADER SECTION ;; id = 61296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (3 records) ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcz6unZt1rmuMfYokhYr/SpjV41ekA/KVxEWgCTS4miKwGkFk67d5v4a2pSJLR20W/nNG4ns TrxzAUTaXWKpwcvEVKDZJO+8pRoY7BO+oYLWCADJPMJPerU3G9pQmBBQV9R8D9m0zspMqLQ7DqrC w7vRVZafnuW7VAt9VGyA4joZRPf3qYjOLUt6u8JB2XvxxmERB/CCYC2cEQ5/XwrqKT0WhXEtmlxd Wc9kiWBJmuMmcj7PoSYS2teqvBPHmTr6NMQpC55b6D94nW1j1eCnvs4effnwP3XzxBC3p0zFdk2W jWOlspiGrWmglqUW1yGdCcoG7JNZ2eXdocfllKNSqVM= ) ; keytag 41433 ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260225060000 20260131060000 2176 ht. Ccr0rijb0GmuNyG683VEiSumlqK/4YBb4d4EkWJq3sK6JPxqKOII//1bGo8xtOIxG2++kjnsG3YA wbsr3gcP0vW5Oab4+vSxmmaCU0VCR6tVnKgTjmEooszU1/cU6R5c8BZPaUpK2zIP07mRk81heueD 82o6dZ+8tOZka4mtY6nrQ7Sv2WTJP3HAZ6gIcsxoHxDP2BMNBTYL7jZDLSFMSjBWX3M7LDMPnr7y uGgoRSt0Sn6WDTrYWUwl9SMvHO79SYbsN6/4RjEypSSJs+eUo/C/s3R5mT2EzjBtzyDhMqOEg3DA RnxeByVOUBn0Xv4LPGb8ZepXaK+xO4KhaJoYpsn+MTGHM/PEIlMVrro03YKEiBK/3rZfCvDA0glR GkltCfnbHjHqd+h1X8e/0VyiFWjWjoIXJbjcAbvyhzjrYfE1OwdA49istGO6J6jpkYMvYU39aZr/ Sdn9MhFRUTQu1H0tFWQl5eQeXRU7+0Wafqav3dhrromYm20wsmPNSI4e0RUvYBEHbUxN574er9DI OWKexRMVIB1gwTHfhA8/jIIunVaq9b+9Esg8E+Tou+SgGf/suDGYvrhp+1TRz0w7+yQG6OzJxWDu I+HPaRn2PC2NJRT5AdijyiHHwKFIzt0ovVhAcVP4ezZEhjbcZjd9cV0be77QnpmzHX4sC1OB8v8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ht
	ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAcz6unZt1rmuMfYokhYr/SpjV41ekA/KVxEWgCTS4miKwGkFk67d5v4a2pSJLR20W/nNG4ns TrxzAUTaXWKpwcvEVKDZJO+8pRoY7BO+oYLWCADJPMJPerU3G9pQmBBQV9R8D9m0zspMqLQ7DqrC w7vRVZafnuW7VAt9VGyA4joZRPf3qYjOLUt6u8JB2XvxxmERB/CCYC2cEQ5/XwrqKT0WhXEtmlxd Wc9kiWBJmuMmcj7PoSYS2teqvBPHmTr6NMQpC55b6D94nW1j1eCnvs4effnwP3XzxBC3p0zFdk2W jWOlspiGrWmglqUW1yGdCcoG7JNZ2eXdocfllKNSqVM= ) ; keytag 41433`
	DNSKEY=2176/SEP is now in the chain-of-trust
	DS=2176/SHA-256 verifies DNSKEY=2176/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260225060000 20260131060000 2176 ht. Ccr0rijb0GmuNyG683VEiSumlqK/4YBb4d4EkWJq3sK6JPxqKOII//1bGo8xtOIxG2++kjnsG3YA wbsr3gcP0vW5Oab4+vSxmmaCU0VCR6tVnKgTjmEooszU1/cU6R5c8BZPaUpK2zIP07mRk81heueD 82o6dZ+8tOZka4mtY6nrQ7Sv2WTJP3HAZ6gIcsxoHxDP2BMNBTYL7jZDLSFMSjBWX3M7LDMPnr7y uGgoRSt0Sn6WDTrYWUwl9SMvHO79SYbsN6/4RjEypSSJs+eUo/C/s3R5mT2EzjBtzyDhMqOEg3DA RnxeByVOUBn0Xv4LPGb8ZepXaK+xO4KhaJoYpsn+MTGHM/PEIlMVrro03YKEiBK/3rZfCvDA0glR GkltCfnbHjHqd+h1X8e/0VyiFWjWjoIXJbjcAbvyhzjrYfE1OwdA49istGO6J6jpkYMvYU39aZr/ Sdn9MhFRUTQu1H0tFWQl5eQeXRU7+0Wafqav3dhrromYm20wsmPNSI4e0RUvYBEHbUxN574er9DI OWKexRMVIB1gwTHfhA8/jIIunVaq9b+9Esg8E+Tou+SgGf/suDGYvrhp+1TRz0w7+yQG6OzJxWDu I+HPaRn2PC2NJRT5AdijyiHHwKFIzt0ovVhAcVP4ezZEhjbcZjd9cV0be77QnpmzHX4sC1OB8v8= )
	RRSIG=2176 and DNSKEY=2176/SEP verifies the DNSKEY RRset
	DNSKEY=41433 is now in the chain-of-trust
	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 47570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) j5nieb392vn9136nvtl7f3gddu1flera.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) j5nieb392vn9136nvtl7f3gddu1flera.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.lactld.org is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/SOA
	Received 734 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 734 octets ;; HEADER SECTION ;; id = 62850 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) ;; AUTHORITY SECTION (4 records) ht. 86400 IN NS ns-ht.nic.fr. ht. 86400 IN NS a.lactld.org. ht. 86400 IN NS pch.nic.ht. ht. 86400 IN RRSIG ( NS 8 1 86400 20260226230000 20260201230000 41433 ht. dkm/o/jtZET/bdR7eQjrh52na8Gz2ZZve81tkeeWkvOmm4PgbpQxRqhuzh6XiTrH8CumyO9Jxb8V j4yqCkzhLrmVosDBos05lV8TuaSlkVcxBeVFD1Qrp9gZ9iq2oi7sUWnh0q/Z+mFvzcpM5G73Ml4+ Ooe5QIY/aip8uixwHJKA9ZQ/4jmjaP8tZeo889FkFIjTdX4Z0OkM3Ksyw46Rsj2z+QZx793Q0eSZ T8iLhMAEijLmV2yJ/qQofI6RFlDAS7nY711irkMDP6/SlEKKmFajJnJqwMiAhkki1DjEqSj9Yt80 TPKbxKcU0zCo7KA0lsKF7dJ4KqkUX4laNvFKWA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-ht.nic.fr for ht/SOA
	Received 376 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 376 octets ;; HEADER SECTION ;; id = 25667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 51655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) j5nieb392vn9136nvtl7f3gddu1flera.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) j5nieb392vn9136nvtl7f3gddu1flera.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 53214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch.nic.ht is authoritative for ht
	Found RRSIG signed by ht zone
	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 15625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 15709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-ht.nic.fr is authoritative for ht
	Found RRSIG signed by ht zone
	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 49409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3541112759 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN NSEC3 ( 1 1 0 52003dc7 jrifrtsqgqs87r2mjdov6etlu19hv97h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) J5NIEB392VN9136NVTL7F3GDDU1FLERA.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20260226230000 20260201230000 41433 ht. dOHCXV9FmnXXcUmalTuXXzljD2t8ZAV3ioaeA0uMLfaD301pscm3wlZ3bHAjP8V++V0qo+pcejqs EM9BLaKYHKLjaCjYrTwSbNZdRllY1QRkRg4+WBzNmG1JL/hQubGHDlJbjw1JveAiMkr+rjYCfqFd 2hC6X5gI4D2WAFjaRjRzRaOLK1+gI5YdVgIWdBT7Sl0czCqiMv+zSpcVhVF7D0UnIDvTbNFtzw+q hGBryrUl1hAkpVj4SfTg2uLCwZ2c/UDzLU46n7nGBpmFeIOrPxuyGcoc4O/UO3WmDqsZC4P5859H 3xXdbRPxMv9UYP2dgj2F68ZJftiWQZ6oeoDe3Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20260226230000 20260201230000 41433 ht. yW6zTNa08WBJmOe5JywEsy6JvHqbJCtwaYgsq7y56bnUJL4LLf+cEOF/KZ0Y3q4Yy//8OmUj8ppv vYjO5uBVCJaTeM3t3ytHqI0vmPoikYXDuL9ERK9shc1RQAsxYlhybby1azxg4ysmtL0TXh+wiN8N Znci2QzgyIONH6HafKwn4gCzHJxJymmnC1BTj5MmGW9ZZAAf6JCacw8VFntbBMxbu97o3CwruFC9 iwr8rsH3sOamIMsvlgFwYwcXV+bonEW1Qc3l24v8ZbLwXnfMQePIxcXef8WrjFizzC0mDiab82mR 3S9qCBO9Nvc+VuK1btuu2+2WZSylEOoJrjCpLg== )`
	RRSIG=41433 and DNSKEY=41433 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ht at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: