DNSSEC Debugger

Domain Name:

Time: 2025-11-15 13:31:04 UTC

Analyzing DNSSEC problems for ht

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 7544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251201000000 20251110000000 20326 . Z8f/sJHf4Rp/UGL8oDy+jf/M9IJLtkD1SXasi/TBXZPxAiAA0l/jjD+gang8NYNQXbur7TycUflT DG7hySsoJS+8Us/N8qnIiq42/RshiaxIe3jaqdMOqSWIN8naQ7xn0S7jWHaSArWDFVUIZyBz6SVR 6LeHlIsTssDx/KWBcsx/Tz7odSq6QcuzT7+dSYQ1CDqh+RDwmcNe1Yf5sdCnryc5lctWpr+hB3b5 yNKazSA9XGI4MyQVO2qRhZd9OmB3os400ADZ6Oq3khc527h445sBpBZ4PvEMBI12m6m4hQUID+wf H8zR7DWaPQE0o9JAYfCTqwY1HIyRx9mkGJFzWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251201000000 20251110000000 20326 . Z8f/sJHf4Rp/UGL8oDy+jf/M9IJLtkD1SXasi/TBXZPxAiAA0l/jjD+gang8NYNQXbur7TycUflT DG7hySsoJS+8Us/N8qnIiq42/RshiaxIe3jaqdMOqSWIN8naQ7xn0S7jWHaSArWDFVUIZyBz6SVR 6LeHlIsTssDx/KWBcsx/Tz7odSq6QcuzT7+dSYQ1CDqh+RDwmcNe1Yf5sdCnryc5lctWpr+hB3b5 yNKazSA9XGI4MyQVO2qRhZd9OmB3os400ADZ6Oq3khc527h445sBpBZ4PvEMBI12m6m4hQUID+wf H8zR7DWaPQE0o9JAYfCTqwY1HIyRx9mkGJFzWw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to b.root-servers.net for ht/A
	Received 574 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 574 octets ;; HEADER SECTION ;; id = 55774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20251128050000 20251115040000 61809 . Qd1txH+9hHSZ1voW6GkOTqkHQzbgbnSoS11Ne81fJ3LgnNPxZ/cdvLbZJ1b+H9PW7Qk9yB8DMj7T mUY6bhqxBiWmC/QZufW56P2O9vog+UWSV2MyOyTyjAt/g0XxJDxki2qj+ciob1xoJXch9eI5s5ZO 1SlEx+WDeCUXZ94M3zWDQGcP2ZnyHuJD8L7TBVVcwc3ahbeYLFwh2as5XlQ6Qiqcy9KDQmTNxwxp 3slzTYyG6M7Rcd+MkjjZ40xhDkyKYEEmgaDJjjzqL+m1E8uMKFrbXNvZT16d4PXjVJ9PcZOIsFLH 7wZ0pE7wxxqPTCzqsz05d6Pps+A6MtoOw9xOlA== ) ;; ADDITIONAL SECTION (7 records) pch.nic.ht. 172800 IN A 204.61.216.38 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns-ht.nic.fr. 172800 IN A 194.0.9.1 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ht/DNSKEY
	Received 574 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 574 octets ;; HEADER SECTION ;; id = 14625 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ht. 172800 IN NS a.lactld.org. ht. 172800 IN NS pch.nic.ht. ht. 172800 IN NS ns-ht.nic.fr. ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20251128050000 20251115040000 61809 . Qd1txH+9hHSZ1voW6GkOTqkHQzbgbnSoS11Ne81fJ3LgnNPxZ/cdvLbZJ1b+H9PW7Qk9yB8DMj7T mUY6bhqxBiWmC/QZufW56P2O9vog+UWSV2MyOyTyjAt/g0XxJDxki2qj+ciob1xoJXch9eI5s5ZO 1SlEx+WDeCUXZ94M3zWDQGcP2ZnyHuJD8L7TBVVcwc3ahbeYLFwh2as5XlQ6Qiqcy9KDQmTNxwxp 3slzTYyG6M7Rcd+MkjjZ40xhDkyKYEEmgaDJjjzqL+m1E8uMKFrbXNvZT16d4PXjVJ9PcZOIsFLH 7wZ0pE7wxxqPTCzqsz05d6Pps+A6MtoOw9xOlA== ) ;; ADDITIONAL SECTION (7 records) pch.nic.ht. 172800 IN A 204.61.216.38 pch.nic.ht. 172800 IN AAAA 2001:500:14:6038:ad::1 a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns-ht.nic.fr. 172800 IN A 194.0.9.1 ns-ht.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ht

	Checking DS between . and ht
	Query to b.root-servers.net for ht/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 56923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DS ;; ANSWER SECTION (2 records) ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 ) ht. 86400 IN RRSIG ( DS 8 1 86400 20251128050000 20251115040000 61809 . Qd1txH+9hHSZ1voW6GkOTqkHQzbgbnSoS11Ne81fJ3LgnNPxZ/cdvLbZJ1b+H9PW7Qk9yB8DMj7T mUY6bhqxBiWmC/QZufW56P2O9vog+UWSV2MyOyTyjAt/g0XxJDxki2qj+ciob1xoJXch9eI5s5ZO 1SlEx+WDeCUXZ94M3zWDQGcP2ZnyHuJD8L7TBVVcwc3ahbeYLFwh2as5XlQ6Qiqcy9KDQmTNxwxp 3slzTYyG6M7Rcd+MkjjZ40xhDkyKYEEmgaDJjjzqL+m1E8uMKFrbXNvZT16d4PXjVJ9PcZOIsFLH 7wZ0pE7wxxqPTCzqsz05d6Pps+A6MtoOw9xOlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ht in the . zone
	DS=2176/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ht. 86400 IN RRSIG ( DS 8 1 86400 20251128050000 20251115040000 61809 . Qd1txH+9hHSZ1voW6GkOTqkHQzbgbnSoS11Ne81fJ3LgnNPxZ/cdvLbZJ1b+H9PW7Qk9yB8DMj7T mUY6bhqxBiWmC/QZufW56P2O9vog+UWSV2MyOyTyjAt/g0XxJDxki2qj+ciob1xoJXch9eI5s5ZO 1SlEx+WDeCUXZ94M3zWDQGcP2ZnyHuJD8L7TBVVcwc3ahbeYLFwh2as5XlQ6Qiqcy9KDQmTNxwxp 3slzTYyG6M7Rcd+MkjjZ40xhDkyKYEEmgaDJjjzqL+m1E8uMKFrbXNvZT16d4PXjVJ9PcZOIsFLH 7wZ0pE7wxxqPTCzqsz05d6Pps+A6MtoOw9xOlA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2176/SHA-256 is now in the chain-of-trust
	`ht. 86400 IN DS ( 2176 8 2 7ca97faad5fd19728c3cedfb2f647eadc144ee21d01dafb7f821954b38bdda78 )`
	Query to ns-ht.nic.fr for ht/DNSKEY
	Received 1385 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 1385 octets ;; HEADER SECTION ;; id = 30384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN DNSKEY ;; ANSWER SECTION (3 records) ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176 ht. 86400 IN DNSKEY ( 256 3 8 AwEAAZ76a8Xlif2T8td8a4yEbN05Byt19FH0hUpxWaFRXVaxfFXci274VqgU3bZlAW69/btSQ6rY mkeJ6ZJ14qcmUH3JUhEKa3zZUrt9Qb+4iaphR7FJcEAr0Oa+HGCBoEScL68AjN8lbd7fdWHF7mK0 twRX3W5oODTFwF73EYBcO/XDIAX09rNit71YHnypzTdPwDg6ElVEV3e65CIjRjtvC1QkJRvqiff6 gOlNuJWGG+h1DKQseUr8gPYQ17E+c8KGsc90/ygd/a8XdW3vZcsRWbTFWMZpmBG4daffToY4LBp4 7aZf7HtwgjLNpgmDaAO23h/avfYnnACzJkOtD6Xqpos= ) ; keytag 48636 ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251206000000 20251111000000 2176 ht. TT3d6LaS1sbvq4ndCFv8Rx3OIZ1ejJh5UO+xl62wCsrRIH3H4DBUXejqQdQHh9ZD6PgJ1ijMdia7 wz+R+0m1goFK53zdKiEtrwvvt3EhdEazO1KJ7BaprmZcIQwYtuj04sQIxOPSH5CPAQvsEcaCMP9r +nbXC4jM3qGv41SL9NdRY0xIsjWGrAv2ZT3LFEag+LNc3BOux67EszKOobFiaMEj/XR3K3QD7tde 7yCEg5hbfcQ10oWdUT7NEoLNWjEcnfEt3IcHoAhNbILjijQiG8SYESVJJeruKacNsEIXp0tB4ywP yAs4mVKBCA0JEqAzZCw53zBxRiCf7YojeYl+387ISaHcWrPDmPu/LBkKcGU0JpG8bqFpnldRl8P4 6lwsdHoZq1zpO5McLdY0RmZXOllfobx2H9cU76R5mgxMRcUFwsJn7ft+824RLPDKzZ5VTSr2nCC9 DqqY8uOk+jAgkr8AbGjngQ5s23yT6UKgjCiuUaBJfG9rtR5jOp/ylZq3/U0ZizBaqCp4yyMEtfUG KTs4DOv55Q4mVqhmjGdlNo+/ODUtp/xaxMuxyzvPuCLwmbZWV0qdG+8F+1IWs7/iUYu1aoBWsQCV 3G8STHQqXQak8yMO6lQwboQUD4ISY+SdW0MMKqY45DOlCuOemU4Z3jVa4PxMRiSoQYyDhQQPQ5w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ht
	ht. 86400 IN DNSKEY ( 257 3 8 AwEAAZMtIXJ4XZSxHRXQRYoy6UFR2BmhZbBV5oSciM0ThxMywKcuKKiZFd6PTe3zBeHtoa7nD32m Pxx2AyDLUITwUjCHG1NtKgmvCspQiQy7LX8h+GjEH/RYXuDz+7QBTUBmiIjkNKHDckIQQzjNRyaO z9dmNSd0j1SsQQY+ZIFnP6zWsBP7CMGXR5ZyHqNHrc+62NDfSwix2/WXijYgVfEbaqPDsKffW0nw iSdwgW5hoQZ4G3e9/iSXbET0B7h3eyNOOP6Gar5OE8NJLMISvYFgI2d98WYa7xTUjRf8pbMJkoJ4 RTU6NNS7IisdL4QNV0xMQHed6w8r8LjSt4aiC4nBUJLr8B1DwD7dDXq7WzZRpSJPRf6UBSXZg3sB l2TR1QidAJssDquD4PpmNr2cm5uWpqswggB/wqewobxHjc1P3l/0txnLbNmroH7Ft7qmUMSO0Mzc jgEIHnHxRxkGYtvN1bgGOauLa9y3Q9VSYH9MporowlpgcL7DAwE67z+fbflAyT9mmbGcDc5ji/L5 LhtkP4QOvk4H0mf4MgKSwcUG0J0Zh0PyRum6R7yE9XPkkXj2ZHvxQJG5Vx5U96sF5fYS1b0Ij48j 2RlN7+qz5y6MkfwFekagH3PUGBTKfbjd1CTwdSBSoXMpTslw2jG9cQSeyhHgIIV134hoD7M9L/42 I+ax ) ; keytag 2176
	`ht. 86400 IN DNSKEY ( 256 3 8 AwEAAZ76a8Xlif2T8td8a4yEbN05Byt19FH0hUpxWaFRXVaxfFXci274VqgU3bZlAW69/btSQ6rY mkeJ6ZJ14qcmUH3JUhEKa3zZUrt9Qb+4iaphR7FJcEAr0Oa+HGCBoEScL68AjN8lbd7fdWHF7mK0 twRX3W5oODTFwF73EYBcO/XDIAX09rNit71YHnypzTdPwDg6ElVEV3e65CIjRjtvC1QkJRvqiff6 gOlNuJWGG+h1DKQseUr8gPYQ17E+c8KGsc90/ygd/a8XdW3vZcsRWbTFWMZpmBG4daffToY4LBp4 7aZf7HtwgjLNpgmDaAO23h/avfYnnACzJkOtD6Xqpos= ) ; keytag 48636`
	DNSKEY=2176/SEP is now in the chain-of-trust
	DS=2176/SHA-256 verifies DNSKEY=2176/SEP
	Found 1 RRSIGs over DNSKEY RRset
	ht. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251206000000 20251111000000 2176 ht. TT3d6LaS1sbvq4ndCFv8Rx3OIZ1ejJh5UO+xl62wCsrRIH3H4DBUXejqQdQHh9ZD6PgJ1ijMdia7 wz+R+0m1goFK53zdKiEtrwvvt3EhdEazO1KJ7BaprmZcIQwYtuj04sQIxOPSH5CPAQvsEcaCMP9r +nbXC4jM3qGv41SL9NdRY0xIsjWGrAv2ZT3LFEag+LNc3BOux67EszKOobFiaMEj/XR3K3QD7tde 7yCEg5hbfcQ10oWdUT7NEoLNWjEcnfEt3IcHoAhNbILjijQiG8SYESVJJeruKacNsEIXp0tB4ywP yAs4mVKBCA0JEqAzZCw53zBxRiCf7YojeYl+387ISaHcWrPDmPu/LBkKcGU0JpG8bqFpnldRl8P4 6lwsdHoZq1zpO5McLdY0RmZXOllfobx2H9cU76R5mgxMRcUFwsJn7ft+824RLPDKzZ5VTSr2nCC9 DqqY8uOk+jAgkr8AbGjngQ5s23yT6UKgjCiuUaBJfG9rtR5jOp/ylZq3/U0ZizBaqCp4yyMEtfUG KTs4DOv55Q4mVqhmjGdlNo+/ODUtp/xaxMuxyzvPuCLwmbZWV0qdG+8F+1IWs7/iUYu1aoBWsQCV 3G8STHQqXQak8yMO6lQwboQUD4ISY+SdW0MMKqY45DOlCuOemU4Z3jVa4PxMRiSoQYyDhQQPQ5w= )
	RRSIG=2176 and DNSKEY=2176/SEP verifies the DNSKEY RRset
	DNSKEY=48636 is now in the chain-of-trust
	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 3825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch.nic.ht is authoritative for ht
	Found RRSIG signed by ht zone
	Query to ns-ht.nic.fr for ht/SOA
	Received 376 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 376 octets ;; HEADER SECTION ;; id = 31706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.lactld.org for ht/SOA
	Received 732 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 732 octets ;; HEADER SECTION ;; id = 63091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN SOA ;; ANSWER SECTION (2 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) ;; AUTHORITY SECTION (4 records) ht. 86400 IN NS a.lactld.org. ht. 86400 IN NS pch.nic.ht. ht. 86400 IN NS ns-ht.nic.fr. ht. 86400 IN RRSIG ( NS 8 1 86400 20251205200000 20251110200000 48636 ht. CAE2byZmoILnKg0ylFLmO9SuY3IddLOiQGmMd500KTiRTn1GMJzlocZm+FucpKocGnFmboyZ9Ruj Jvpnnzm03zMlE6PNfgjloIuzGpP/HIGAJlKcFmLYNRBFbg2PJd/Oyx/L8M4oq2sR9s4/2alh5sd9 o3CMATe33pS4q4Nj72eQ3w19FANrtmS0eiyWw4hYlgtDxXOM+nZX2OQ5hCMcm6Yz2195D22gUprQ LBTPF02kWAprZqhg8rhAqdisT5HT/kUP+CrO15W5Z63M0Q9TFUEfKSbeFI7MAJkdgkVL7WvNhBeH 5aNSEF5TFjakav2QcfpJhq08zqHaIqyJmBc3yA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pch.nic.ht for ht/A
	Received 752 bytes from 204.61.216.38
	;; Response received from [204.61.216.38] 752 octets ;; HEADER SECTION ;; id = 7992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== )`
	RRSIG=48636 and DNSKEY=48636 verifies the SOA RRset

	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 59798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) ajf0b9lb1m0nv7brnn60bbh895sso9i1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ajf0b9lb1m0nv7brnn60bbh895sso9i1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.lactld.org is authoritative for ht
	Found RRSIG signed by ht zone
	Query to a.lactld.org for ht/A
	Received 750 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 750 octets ;; HEADER SECTION ;; id = 40617 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) ajf0b9lb1m0nv7brnn60bbh895sso9i1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ajf0b9lb1m0nv7brnn60bbh895sso9i1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== )`
	RRSIG=48636 and DNSKEY=48636 verifies the SOA RRset

	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 13405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-ht.nic.fr is authoritative for ht
	Found RRSIG signed by ht zone
	Query to ns-ht.nic.fr for ht/A
	Received 750 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 750 octets ;; HEADER SECTION ;; id = 54875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ht. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ht. 38400 IN SOA ( pch.nic.ht. hostmaster.nic.ht. 3526414009 ;serial 10800 ;refresh 3600 ;retry 1296000 ;expire 38400 ;minimum ) ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN NSEC3 ( 1 1 0 50be2417 av06os6ibfq1b9dqlu3lkpv8i7mmvrsk NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) AJF0B9LB1M0NV7BRNN60BBH895SSO9I1.ht. 38400 IN RRSIG ( NSEC3 8 2 38400 20251205200000 20251110200000 48636 ht. V1SvfwHf20LTQ5iJ2oiXHj+SOKflq+Tizsm3Xf2Nqw1tJemrB5Ads+zQKSeGfcD2m5YYZsdeH6nK yg7KNPXoKl0QHrfBExIK61bMWAf8FxmepClZq6bMuY0x31HZVcCNbyEPzEcHWKcvYSEvD3zEOQHs 1RHndyFM67AtI0TKUCspBEWn+umWw0ZZKd65Kk4ghJG/5SI+pTlWAEWI3Vuif2OINTAhmLLPBa1Z JI329DdniEnF6p1t5zgr7rw7oIVQKmoV5j3oy7eOSk2nVYpMJ47aO03xHpp1ReDjcHWlJlbeNhkI i7Rb85Zkwc2RUSj7lVfY2s/hDwWySy0Fc5Zx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ht. 38400 IN RRSIG ( SOA 8 1 38400 20251205200000 20251110200000 48636 ht. S5eAHPphwUPobHbvcMB/Jachk3rEHMWQXSIWa5Xu913zlKAYVvpy0xnv5UOkv0dpwSRpoH4Vgn3k IfYSGmCNQFHsbZjX6eSs8i+vQNzW78LztVgEvp3EMZGf5hWfYzTKmvN/h7B2lxS/tBSnXF0rfSDO 6dUCE8m7I6yHEy/eLOW6ZcpiUypG6eut0wuYMepvixooW0CA8F1vOIsK6sDTdtrrVeErtZfaiJcC O4gRw0WLI1+KvNU9DCOa1q1sYkMkTJ6324R01DrKsYV0BzdTzj/R8qy/t37VtsgWvvWMf0cM7E/u gPiYpNwn763DN+F68ouGfA2tjU6a+eplHnmkLg== )`
	RRSIG=48636 and DNSKEY=48636 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ht at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: