DNSSEC Debugger - hubzilla.kane-il.us

Domain Name:

Time: 2025-07-01 02:41:42 UTC

Analyzing DNSSEC problems for hubzilla.kane-il.us

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1414 octets ;; HEADER SECTION ;; id = 38862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250711000000 20250620000000 20326 . S0XHgtn2OkSZ0ZOGtgOM4Xipyq/72x7vHPJy3SV8p7TUCtMNj2XxEPjZoXSYvxbkhtaeI6E+9dvv QrqrB6ovKdW8DE/o88jFBLsfe9niPDHgZAs0ZpfGAtRfdFrXvtXZ4CCTYCSsxnaIMNS7By4+Ti1V 9QFp/+ml0VjzVkc92SvmFJMYYpORmeq97VQMOdUJwEYhKx6Npw8cdSVxjqtytx/iNgB6KRt6i6j3 dASECBA8hSxMesKFbnVwLW8lxObBiTnsQo1WDw2IO8vMBSNGagFUUA2YTzvEwYPOQskebK3C0LAW 2GzOvoy69fIK0a9RqKkO9scvKVtLDdrEEDLBZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250711000000 20250620000000 20326 . S0XHgtn2OkSZ0ZOGtgOM4Xipyq/72x7vHPJy3SV8p7TUCtMNj2XxEPjZoXSYvxbkhtaeI6E+9dvv QrqrB6ovKdW8DE/o88jFBLsfe9niPDHgZAs0ZpfGAtRfdFrXvtXZ4CCTYCSsxnaIMNS7By4+Ti1V 9QFp/+ml0VjzVkc92SvmFJMYYpORmeq97VQMOdUJwEYhKx6Npw8cdSVxjqtytx/iNgB6KRt6i6j3 dASECBA8hSxMesKFbnVwLW8lxObBiTnsQo1WDw2IO8vMBSNGagFUUA2YTzvEwYPOQskebK3C0LAW 2GzOvoy69fIK0a9RqKkO9scvKVtLDdrEEDLBZA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to l.root-servers.net for hubzilla.kane-il.us/A
	Received 869 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 869 octets ;; HEADER SECTION ;; id = 18464 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS b.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS m.cctld.us. us. 172800 IN NS n.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS y.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250713170000 20250630160000 53148 . bKqXliOX7A43NpbGXDG4SX+U445FB74wPfTxRoS/ePlM/5EOkgj+2T4xD7TYO+XCZ/OQ+pshM4lN BbtB3Yq9Rtj9LZeNbUDaSdZDS1g+M5ckF+SoqJzAPg49avOalWpm25b6z+AkG3ufxUCSpbSntBEw Cfw55KGJZ7+ttxqZ7YaZsrJ2n//IBIMwl2LoZ4EU+wY5c/y6ygplKAlBftrsx3bBzJPykMjNFu7j 0j00bm6jPRF9vqoHpE/AQUswvX3cnsTq3wsocMIC8Oeth8juYo2r5qT1yJGfs6Iu08aFLemqeFEj 0ZXfNbv6Wex/WzHKXqivAUqN0zaL3RA8qELsfA== ) ;; ADDITIONAL SECTION (17 records) b.cctld.us. 172800 IN A 156.154.125.70 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 f.cctld.us. 172800 IN A 209.173.58.70 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 k.cctld.us. 172800 IN A 156.154.128.70 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 m.cctld.us. 172800 IN A 204.74.105.1 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 n.cctld.us. 172800 IN A 204.74.107.1 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 w.cctld.us. 172800 IN A 37.209.192.15 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 x.cctld.us. 172800 IN A 37.209.194.15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 y.cctld.us. 172800 IN A 37.209.196.15 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for us/DNSKEY
	Received 852 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 852 octets ;; HEADER SECTION ;; id = 44760 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS b.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS y.cctld.us. us. 172800 IN NS m.cctld.us. us. 172800 IN NS n.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250713170000 20250630160000 53148 . bKqXliOX7A43NpbGXDG4SX+U445FB74wPfTxRoS/ePlM/5EOkgj+2T4xD7TYO+XCZ/OQ+pshM4lN BbtB3Yq9Rtj9LZeNbUDaSdZDS1g+M5ckF+SoqJzAPg49avOalWpm25b6z+AkG3ufxUCSpbSntBEw Cfw55KGJZ7+ttxqZ7YaZsrJ2n//IBIMwl2LoZ4EU+wY5c/y6ygplKAlBftrsx3bBzJPykMjNFu7j 0j00bm6jPRF9vqoHpE/AQUswvX3cnsTq3wsocMIC8Oeth8juYo2r5qT1yJGfs6Iu08aFLemqeFEj 0ZXfNbv6Wex/WzHKXqivAUqN0zaL3RA8qELsfA== ) ;; ADDITIONAL SECTION (17 records) b.cctld.us. 172800 IN A 156.154.125.70 f.cctld.us. 172800 IN A 209.173.58.70 k.cctld.us. 172800 IN A 156.154.128.70 w.cctld.us. 172800 IN A 37.209.192.15 x.cctld.us. 172800 IN A 37.209.194.15 y.cctld.us. 172800 IN A 37.209.196.15 m.cctld.us. 172800 IN A 204.74.105.1 n.cctld.us. 172800 IN A 204.74.107.1 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 ;; { "EDNS-VERSION": 0 }
	Found child zone us

	Checking DS between . and us
	Query to i.root-servers.net for us/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 1601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DS ;; ANSWER SECTION (2 records) us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250713170000 20250630160000 53148 . bKqXliOX7A43NpbGXDG4SX+U445FB74wPfTxRoS/ePlM/5EOkgj+2T4xD7TYO+XCZ/OQ+pshM4lN BbtB3Yq9Rtj9LZeNbUDaSdZDS1g+M5ckF+SoqJzAPg49avOalWpm25b6z+AkG3ufxUCSpbSntBEw Cfw55KGJZ7+ttxqZ7YaZsrJ2n//IBIMwl2LoZ4EU+wY5c/y6ygplKAlBftrsx3bBzJPykMjNFu7j 0j00bm6jPRF9vqoHpE/AQUswvX3cnsTq3wsocMIC8Oeth8juYo2r5qT1yJGfs6Iu08aFLemqeFEj 0ZXfNbv6Wex/WzHKXqivAUqN0zaL3RA8qELsfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for us in the . zone
	DS=59017/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`us. 86400 IN RRSIG ( DS 8 1 86400 20250713170000 20250630160000 53148 . bKqXliOX7A43NpbGXDG4SX+U445FB74wPfTxRoS/ePlM/5EOkgj+2T4xD7TYO+XCZ/OQ+pshM4lN BbtB3Yq9Rtj9LZeNbUDaSdZDS1g+M5ckF+SoqJzAPg49avOalWpm25b6z+AkG3ufxUCSpbSntBEw Cfw55KGJZ7+ttxqZ7YaZsrJ2n//IBIMwl2LoZ4EU+wY5c/y6ygplKAlBftrsx3bBzJPykMjNFu7j 0j00bm6jPRF9vqoHpE/AQUswvX3cnsTq3wsocMIC8Oeth8juYo2r5qT1yJGfs6Iu08aFLemqeFEj 0ZXfNbv6Wex/WzHKXqivAUqN0zaL3RA8qELsfA== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=59017/SHA-256 is now in the chain-of-trust
	`us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 )`
	Query to k.cctld.us for us/DNSKEY
	Received 777 bytes from 156.154.128.70
	;; Response received from [156.154.128.70] 777 octets ;; HEADER SECTION ;; id = 16869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (3 records) us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017 us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159 us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250712174412 20250628173411 59017 us. goCvC82wT8OuVHpA2EZBSgXbpHCHSB/69RoJ9vx8JJ2MxxzN2qiL4BuNuqg+AHPsQixwJQsdm1ol 4Y+xoI5kCcWziiNH10dqCfoIAxOpfscMozxYBToQWgzs3O9ucRafRJxHrmuxSwXSAfPikTJoGgFk 6nYu3BRhsONshh8JTPQ8ifuAttY1FOusv9UFlzP+KtkdKC30SnQBBzWgJSw112MZp2NZZCn38GJz xc72oSfN6bZ3dT4F2hDag2Bqjmkke7kyWub9Oi9/znCb1jpm5b/xGgK24zZ1wtt/hySSbaeA3M52 M43ujizT+548lUBv60xfeduCs4GDuT3SGjql+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for us
	`us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017`
	`us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159`
	DNSKEY=59017/SEP is now in the chain-of-trust
	DS=59017/SHA-256 verifies DNSKEY=59017/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250712174412 20250628173411 59017 us. goCvC82wT8OuVHpA2EZBSgXbpHCHSB/69RoJ9vx8JJ2MxxzN2qiL4BuNuqg+AHPsQixwJQsdm1ol 4Y+xoI5kCcWziiNH10dqCfoIAxOpfscMozxYBToQWgzs3O9ucRafRJxHrmuxSwXSAfPikTJoGgFk 6nYu3BRhsONshh8JTPQ8ifuAttY1FOusv9UFlzP+KtkdKC30SnQBBzWgJSw112MZp2NZZCn38GJz xc72oSfN6bZ3dT4F2hDag2Bqjmkke7kyWub9Oi9/znCb1jpm5b/xGgK24zZ1wtt/hySSbaeA3M52 M43ujizT+548lUBv60xfeduCs4GDuT3SGjql+g== )`
	RRSIG=59017 and DNSKEY=59017/SEP verifies the DNSKEY RRset
	DNSKEY=54159 is now in the chain-of-trust
	Query to n.cctld.us for hubzilla.kane-il.us/A
	Received 462 bytes from 204.74.107.1
	;; Response received from [204.74.107.1] 462 octets ;; HEADER SECTION ;; id = 33671 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN DS ( 23868 14 2 1cee6fbd5ced31d5b99704c27e157369ef771dd4a7e3632893ee56520fb29284 ) kane-il.us. 3600 IN DS ( 33040 14 2 259e967198abbaafad672cabfd150284f5d580e4f4712d5c11dc2758190bf864 ) kane-il.us. 3600 IN RRSIG ( DS 8 2 3600 20250712091245 20250628085240 54159 us. biQpAbU3Vxn8XIcCDwEh0RGSwTVfUTPJscjgNWWTb0DY3GRAqVqtlF5wTEUzD3Ap9o/oCZo3YXgd CM9iPVcRf+vQ5DU4cjIe+XPkfM+nhLO2dwrl04CF//8s9vRjh4gGIPOUSjpzpiyeFieVxl+AofuT p6B4ZK5TveqAgRCnrnWln/0J1yV+Rfu13bGx7dz1WhzOKAucKrTvYNjHjFS3gQ== ) ;; ADDITIONAL SECTION (5 records) ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ;; { "EDNS-VERSION": 0 }
	Query to w.cctld.us for kane-il.us/DNSKEY
	Received 453 bytes from 37.209.192.15
	;; Response received from [37.209.192.15] 453 octets ;; HEADER SECTION ;; id = 15630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kane-il.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN DS ( 23868 14 2 1cee6fbd5ced31d5b99704c27e157369ef771dd4a7e3632893ee56520fb29284 ) kane-il.us. 3600 IN DS ( 33040 14 2 259e967198abbaafad672cabfd150284f5d580e4f4712d5c11dc2758190bf864 ) kane-il.us. 3600 IN RRSIG ( DS 8 2 3600 20250712091245 20250628085240 54159 us. biQpAbU3Vxn8XIcCDwEh0RGSwTVfUTPJscjgNWWTb0DY3GRAqVqtlF5wTEUzD3Ap9o/oCZo3YXgd CM9iPVcRf+vQ5DU4cjIe+XPkfM+nhLO2dwrl04CF//8s9vRjh4gGIPOUSjpzpiyeFieVxl+AofuT p6B4ZK5TveqAgRCnrnWln/0J1yV+Rfu13bGx7dz1WhzOKAucKrTvYNjHjFS3gQ== ) ;; ADDITIONAL SECTION (5 records) ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ;; { "EDNS-VERSION": 0 }
	Found child zone kane-il.us

kane-il.us

	Checking DS between us and kane-il.us
	Query to b.cctld.us for kane-il.us/DS
	Received 329 bytes from 156.154.125.70
	;; Response received from [156.154.125.70] 329 octets ;; HEADER SECTION ;; id = 58749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kane-il.us. IN DS ;; ANSWER SECTION (3 records) kane-il.us. 3600 IN DS ( 33040 14 2 259e967198abbaafad672cabfd150284f5d580e4f4712d5c11dc2758190bf864 ) kane-il.us. 3600 IN DS ( 23868 14 2 1cee6fbd5ced31d5b99704c27e157369ef771dd4a7e3632893ee56520fb29284 ) kane-il.us. 3600 IN RRSIG ( DS 8 2 3600 20250712091245 20250628085240 54159 us. biQpAbU3Vxn8XIcCDwEh0RGSwTVfUTPJscjgNWWTb0DY3GRAqVqtlF5wTEUzD3Ap9o/oCZo3YXgd CM9iPVcRf+vQ5DU4cjIe+XPkfM+nhLO2dwrl04CF//8s9vRjh4gGIPOUSjpzpiyeFieVxl+AofuT p6B4ZK5TveqAgRCnrnWln/0J1yV+Rfu13bGx7dz1WhzOKAucKrTvYNjHjFS3gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for kane-il.us in the us zone
	DS=33040/SHA-256 has algorithm ECDSAP384SHA384
	DS=23868/SHA-256 has algorithm ECDSAP384SHA384
	Found 1 RRSIGs over DS RRset
	`kane-il.us. 3600 IN RRSIG ( DS 8 2 3600 20250712091245 20250628085240 54159 us. biQpAbU3Vxn8XIcCDwEh0RGSwTVfUTPJscjgNWWTb0DY3GRAqVqtlF5wTEUzD3Ap9o/oCZo3YXgd CM9iPVcRf+vQ5DU4cjIe+XPkfM+nhLO2dwrl04CF//8s9vRjh4gGIPOUSjpzpiyeFieVxl+AofuT p6B4ZK5TveqAgRCnrnWln/0J1yV+Rfu13bGx7dz1WhzOKAucKrTvYNjHjFS3gQ== )`
	RRSIG=54159 and DNSKEY=54159 verifies the DS RRset
	DS=33040/SHA-256 is now in the chain-of-trust
	DS=23868/SHA-256 is now in the chain-of-trust
	`kane-il.us. 3600 IN DS ( 33040 14 2 259e967198abbaafad672cabfd150284f5d580e4f4712d5c11dc2758190bf864 )`
	`kane-il.us. 3600 IN DS ( 23868 14 2 1cee6fbd5ced31d5b99704c27e157369ef771dd4a7e3632893ee56520fb29284 )`
	Query to ns1.kane-il.us for kane-il.us/DNSKEY
	Received 539 bytes from 45.79.142.190
	;; Response received from [45.79.142.190] 539 octets ;; HEADER SECTION ;; id = 53220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kane-il.us. IN DNSKEY ;; ANSWER SECTION (4 records) kane-il.us. 3600 IN DNSKEY ( 257 3 14 VN7A6xUEEMl9u1QrmhGBI2fV+okpPDycSquepIWQxMflWtV650r+n+RQowEYVaONP8F4EB8C0ZwY 30sNK7mBpppiM1kMjcazCpr6Ww4lW0C3ItydPCRTbaH915IBPA1F ) ; keytag 33040 kane-il.us. 3600 IN DNSKEY ( 256 3 14 hgqiA6RV+uJojuA6ta4y/HgWtjQwUwvntsmKNbpUoahZKIINoqBCA/6rKVFJ8vOdmQZfnstxu27o VhiECRS122Wr9Nd2ntkGuI4NDxEKmKwK6VAnuMx18OuLnqnqKET5 ) ; keytag 50596 kane-il.us. 3600 IN RRSIG ( DNSKEY 14 2 3600 20250724103709 20250624103709 33040 kane-il.us. SbIRtfUZLi6+uXUGaxPEHzcqkKWoX09atualmi9/TUE3XwMJvrJJ3swIHqpCRw1t9619y2Y6q1Ku bmJpE9vI2Rq/sPqc4s0GsxPiE9MsfQ4Dj6d2j/5RaQtsUE5S+Th0 ) kane-il.us. 3600 IN RRSIG ( DNSKEY 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. caoRBO96VXweoQeH5JNZkwnTgTdhu0L5L6Q8cqUXfkmLP9Arvyz+TAaoHcggUF8oaa6sO4Cz+hzH adigaHqHXHT82vwbaFfNWIwZlXcrc+hLAbMwfF6SmLtYUTc5qDWr ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for kane-il.us
	`kane-il.us. 3600 IN DNSKEY ( 257 3 14 VN7A6xUEEMl9u1QrmhGBI2fV+okpPDycSquepIWQxMflWtV650r+n+RQowEYVaONP8F4EB8C0ZwY 30sNK7mBpppiM1kMjcazCpr6Ww4lW0C3ItydPCRTbaH915IBPA1F ) ; keytag 33040`
	`kane-il.us. 3600 IN DNSKEY ( 256 3 14 hgqiA6RV+uJojuA6ta4y/HgWtjQwUwvntsmKNbpUoahZKIINoqBCA/6rKVFJ8vOdmQZfnstxu27o VhiECRS122Wr9Nd2ntkGuI4NDxEKmKwK6VAnuMx18OuLnqnqKET5 ) ; keytag 50596`
	DNSKEY=33040/SEP is now in the chain-of-trust
	DS=33040/SHA-256 verifies DNSKEY=33040/SEP
	DS=23868/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`kane-il.us. 3600 IN RRSIG ( DNSKEY 14 2 3600 20250724103709 20250624103709 33040 kane-il.us. SbIRtfUZLi6+uXUGaxPEHzcqkKWoX09atualmi9/TUE3XwMJvrJJ3swIHqpCRw1t9619y2Y6q1Ku bmJpE9vI2Rq/sPqc4s0GsxPiE9MsfQ4Dj6d2j/5RaQtsUE5S+Th0 )`
	`kane-il.us. 3600 IN RRSIG ( DNSKEY 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. caoRBO96VXweoQeH5JNZkwnTgTdhu0L5L6Q8cqUXfkmLP9Arvyz+TAaoHcggUF8oaa6sO4Cz+hzH adigaHqHXHT82vwbaFfNWIwZlXcrc+hLAbMwfF6SmLtYUTc5qDWr )`
	RRSIG=33040 and DNSKEY=33040/SEP verifies the DNSKEY RRset
	RRSIG=50596 and DNSKEY=50596 verifies the DNSKEY RRset
	DNSKEY=50596 is now in the chain-of-trust
	Query to ns2.kane-il.us for hubzilla.kane-il.us/A
	Received 1087 bytes from 175.45.180.8
	;; Response received from [175.45.180.8] 1087 octets ;; HEADER SECTION ;; id = 57992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (2 records) hubzilla.kane-il.us. 3600 IN A 45.33.113.202 hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 ) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN RRSIG ( NS 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. AT9GHAQPMQH9XxV5SGrq431YpBIzJ8PJk4uqU+9gEobtevZYneVMCkhD73B0LrN4ja7G1OhQvNLd wAyER+hm5MFjd7/M+vzXhHJ/0vMsDU4k9q5oYQ7/ljbUTrzvOLSW ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) ;; ADDITIONAL SECTION (8 records) ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. yzwwxh+ggFP21hX8DTfPThEjfvytM3GQlsRqNgJlHaVsE4yRGJz358vH/MYIjx97kHEjL1FWLRUJ anBvnpy6yqQS+bB2ohQfYoSdqrvyardJFZYS+oA8ljPGA1+Xarg8 ) ns1.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kYwtgkeHD6/YtYq0TchmcbjsRBmbOaNWwjx1NoudOLxbHVSv7FYLSqZle3kNn79AdJgtoPiQ/3y2 IXpyJXj9ooFpo25v91FOMpsQT4QNcPV4J4mNTOqsjOPLhi41zmry ) ns2.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. 4OBbtm0TISzxwR5RCkFeEsVeTEO1oa//ViwC4vcdt/GB9S7kxKLdOa7hEzcF02IMDXVob6dofr+M 5cPkCIfV1CFnycttx4RrpB5lTJGCBsmWwK6W/tY3QBpm3/pVhSkj ) ;; { "EDNS-VERSION": 0 }
	ns2.kane-il.us is authoritative for hubzilla.kane-il.us
	Query to ns2.kane-il.us for hubzilla.kane-il.us/DNSKEY
	Received 884 bytes from 175.45.180.8
	;; Response received from [175.45.180.8] 884 octets ;; HEADER SECTION ;; id = 3344 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) IKL3EMMQDG6LUC60FP11I813M9LI4QFJ.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - iq41o4lh7bj2rk3vjh6blnavjsou2ftr A NS SOA MX TXT AAAA RRSIG DNSKEY NSEC3PARAM CAA ) IKL3EMMQDG6LUC60FP11I813M9LI4QFJ.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kgHnYCJ9UnJxxO5avIH80hKfLQi0T7QI56WOk264Sch6/kLpZotws5w1IfoE7CL8DkHD0zFwf7hp 1C0iHTEbVoCFfCu7y/qpo/sqPTeE4jWePhge9sFhixNEnOxB5LVt ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) TNSVASKCTRIBD371HCR5AE6CEK28RS9D.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - uct0k95nbruq81v91o6apv8rmikcglpc A AAAA RRSIG ) TNSVASKCTRIBD371HCR5AE6CEK28RS9D.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. ZK8kAQ7eZMy+8tRPOC3JETImkYXnTBm/+T+fa8oIdF276uTwwtT8GYGrkeCKIsbUMAJ1VOtceChK tL/bPnxy4mQG6se7opYyg5jSn4M0jgutghPRM70rdTFIULitiTAu ) kane-il.us. 3600 IN SOA ( ns1.kane-il.us. postmaster.kane-il.us. 2025062400 ;serial 7200 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) kane-il.us. 3600 IN RRSIG ( SOA 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. kRz4b16/7DJIlnTwBcuhQ5muMp9Z4thocUgO3m6SlAwGRtTKaKVtQxrmYbYdb2bzGIxwqbCI2jb7 ldpfiiZYLTIk7UZ857fPv3O/sh9E+/4jH8IKcY9ZscFLOpCv3vXm ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by kane-il.us zone
	Query to ns1.kane-il.us for kane-il.us/SOA
	Received 1038 bytes from 45.79.142.190
	;; Response received from [45.79.142.190] 1038 octets ;; HEADER SECTION ;; id = 13206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kane-il.us. IN SOA ;; ANSWER SECTION (2 records) kane-il.us. 3600 IN SOA ( ns1.kane-il.us. postmaster.kane-il.us. 2025062400 ;serial 7200 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) kane-il.us. 3600 IN RRSIG ( SOA 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. kRz4b16/7DJIlnTwBcuhQ5muMp9Z4thocUgO3m6SlAwGRtTKaKVtQxrmYbYdb2bzGIxwqbCI2jb7 ldpfiiZYLTIk7UZ857fPv3O/sh9E+/4jH8IKcY9ZscFLOpCv3vXm ) ;; AUTHORITY SECTION (3 records) kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN RRSIG ( NS 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. AT9GHAQPMQH9XxV5SGrq431YpBIzJ8PJk4uqU+9gEobtevZYneVMCkhD73B0LrN4ja7G1OhQvNLd wAyER+hm5MFjd7/M+vzXhHJ/0vMsDU4k9q5oYQ7/ljbUTrzvOLSW ) ;; ADDITIONAL SECTION (9 records) ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. yzwwxh+ggFP21hX8DTfPThEjfvytM3GQlsRqNgJlHaVsE4yRGJz358vH/MYIjx97kHEjL1FWLRUJ anBvnpy6yqQS+bB2ohQfYoSdqrvyardJFZYS+oA8ljPGA1+Xarg8 ) ns1.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kYwtgkeHD6/YtYq0TchmcbjsRBmbOaNWwjx1NoudOLxbHVSv7FYLSqZle3kNn79AdJgtoPiQ/3y2 IXpyJXj9ooFpo25v91FOMpsQT4QNcPV4J4mNTOqsjOPLhi41zmry ) ns2.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. 4OBbtm0TISzxwR5RCkFeEsVeTEO1oa//ViwC4vcdt/GB9S7kxKLdOa7hEzcF02IMDXVob6dofr+M 5cPkCIfV1CFnycttx4RrpB5lTJGCBsmWwK6W/tY3QBpm3/pVhSkj ) ns2.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. p9x1UoBZe5j1F47KpP/02s/iBgsWYozHHsyQljbijL+L+ByausQfVggaLduV/plxpsRAtCI4HaXC 9gJEzbhe0xfPM0Bx5Cbz9G9z7nc/Gvz9WE8cIaZvXgn1I0IkF+Zb ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.kane-il.us for hubzilla.kane-il.us/A
	Received 1087 bytes from 175.45.180.8
	;; Response received from [175.45.180.8] 1087 octets ;; HEADER SECTION ;; id = 9799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (2 records) hubzilla.kane-il.us. 3600 IN A 45.33.113.202 hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 ) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN RRSIG ( NS 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. AT9GHAQPMQH9XxV5SGrq431YpBIzJ8PJk4uqU+9gEobtevZYneVMCkhD73B0LrN4ja7G1OhQvNLd wAyER+hm5MFjd7/M+vzXhHJ/0vMsDU4k9q5oYQ7/ljbUTrzvOLSW ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) ;; ADDITIONAL SECTION (8 records) ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. yzwwxh+ggFP21hX8DTfPThEjfvytM3GQlsRqNgJlHaVsE4yRGJz358vH/MYIjx97kHEjL1FWLRUJ anBvnpy6yqQS+bB2ohQfYoSdqrvyardJFZYS+oA8ljPGA1+Xarg8 ) ns1.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kYwtgkeHD6/YtYq0TchmcbjsRBmbOaNWwjx1NoudOLxbHVSv7FYLSqZle3kNn79AdJgtoPiQ/3y2 IXpyJXj9ooFpo25v91FOMpsQT4QNcPV4J4mNTOqsjOPLhi41zmry ) ns2.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. 4OBbtm0TISzxwR5RCkFeEsVeTEO1oa//ViwC4vcdt/GB9S7kxKLdOa7hEzcF02IMDXVob6dofr+M 5cPkCIfV1CFnycttx4RrpB5lTJGCBsmWwK6W/tY3QBpm3/pVhSkj ) ;; { "EDNS-VERSION": 0 }
	hubzilla.kane-il.us A RR has value 45.33.113.202
	Found 1 RRSIGs over A RRset
	`hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 )`
	RRSIG=50596 and DNSKEY=50596 verifies the A RRset

kane-il.us

	Query to ns1.kane-il.us for hubzilla.kane-il.us/A
	Received 1087 bytes from 45.79.142.190
	;; Response received from [45.79.142.190] 1087 octets ;; HEADER SECTION ;; id = 57777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (2 records) hubzilla.kane-il.us. 3600 IN A 45.33.113.202 hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 ) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN RRSIG ( NS 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. AT9GHAQPMQH9XxV5SGrq431YpBIzJ8PJk4uqU+9gEobtevZYneVMCkhD73B0LrN4ja7G1OhQvNLd wAyER+hm5MFjd7/M+vzXhHJ/0vMsDU4k9q5oYQ7/ljbUTrzvOLSW ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) ;; ADDITIONAL SECTION (8 records) ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. yzwwxh+ggFP21hX8DTfPThEjfvytM3GQlsRqNgJlHaVsE4yRGJz358vH/MYIjx97kHEjL1FWLRUJ anBvnpy6yqQS+bB2ohQfYoSdqrvyardJFZYS+oA8ljPGA1+Xarg8 ) ns1.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kYwtgkeHD6/YtYq0TchmcbjsRBmbOaNWwjx1NoudOLxbHVSv7FYLSqZle3kNn79AdJgtoPiQ/3y2 IXpyJXj9ooFpo25v91FOMpsQT4QNcPV4J4mNTOqsjOPLhi41zmry ) ns2.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. 4OBbtm0TISzxwR5RCkFeEsVeTEO1oa//ViwC4vcdt/GB9S7kxKLdOa7hEzcF02IMDXVob6dofr+M 5cPkCIfV1CFnycttx4RrpB5lTJGCBsmWwK6W/tY3QBpm3/pVhSkj ) ;; { "EDNS-VERSION": 0 }
	ns1.kane-il.us is authoritative for hubzilla.kane-il.us
	Query to ns1.kane-il.us for hubzilla.kane-il.us/DNSKEY
	Received 884 bytes from 45.79.142.190
	;; Response received from [45.79.142.190] 884 octets ;; HEADER SECTION ;; id = 42709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) IKL3EMMQDG6LUC60FP11I813M9LI4QFJ.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - iq41o4lh7bj2rk3vjh6blnavjsou2ftr A NS SOA MX TXT AAAA RRSIG DNSKEY NSEC3PARAM CAA ) IKL3EMMQDG6LUC60FP11I813M9LI4QFJ.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kgHnYCJ9UnJxxO5avIH80hKfLQi0T7QI56WOk264Sch6/kLpZotws5w1IfoE7CL8DkHD0zFwf7hp 1C0iHTEbVoCFfCu7y/qpo/sqPTeE4jWePhge9sFhixNEnOxB5LVt ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) TNSVASKCTRIBD371HCR5AE6CEK28RS9D.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - uct0k95nbruq81v91o6apv8rmikcglpc A AAAA RRSIG ) TNSVASKCTRIBD371HCR5AE6CEK28RS9D.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. ZK8kAQ7eZMy+8tRPOC3JETImkYXnTBm/+T+fa8oIdF276uTwwtT8GYGrkeCKIsbUMAJ1VOtceChK tL/bPnxy4mQG6se7opYyg5jSn4M0jgutghPRM70rdTFIULitiTAu ) kane-il.us. 3600 IN SOA ( ns1.kane-il.us. postmaster.kane-il.us. 2025062400 ;serial 7200 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) kane-il.us. 3600 IN RRSIG ( SOA 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. kRz4b16/7DJIlnTwBcuhQ5muMp9Z4thocUgO3m6SlAwGRtTKaKVtQxrmYbYdb2bzGIxwqbCI2jb7 ldpfiiZYLTIk7UZ857fPv3O/sh9E+/4jH8IKcY9ZscFLOpCv3vXm ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by kane-il.us zone
	Query to ns1.kane-il.us for hubzilla.kane-il.us/A
	Received 1087 bytes from 45.79.142.190
	;; Response received from [45.79.142.190] 1087 octets ;; HEADER SECTION ;; id = 2726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hubzilla.kane-il.us. IN A ;; ANSWER SECTION (2 records) hubzilla.kane-il.us. 3600 IN A 45.33.113.202 hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 ) ;; AUTHORITY SECTION (5 records) kane-il.us. 3600 IN NS ns1.kane-il.us. kane-il.us. 3600 IN NS ns2.kane-il.us. kane-il.us. 3600 IN RRSIG ( NS 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. AT9GHAQPMQH9XxV5SGrq431YpBIzJ8PJk4uqU+9gEobtevZYneVMCkhD73B0LrN4ja7G1OhQvNLd wAyER+hm5MFjd7/M+vzXhHJ/0vMsDU4k9q5oYQ7/ljbUTrzvOLSW ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN NSEC3 ( 1 0 0 - vs59akdqa4lv1d5t93np1d2v4oc4r1no ) UCT0K95NBRUQ81V91O6APV8RMIKCGLPC.kane-il.us. 3600 IN RRSIG ( NSEC3 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. h1m71gwL0kHLhnU5drZgJ8YYfHVUYSQbRR+obJIFJ0ZTJwhzvlscxxhLHyRkEKGNGdiIqyFjk39t ex8WvCwA/SWPMw1qZ70JxLlU47VWAkQfw/8y1uQMCdhw4mZ5ahKy ) ;; ADDITIONAL SECTION (8 records) ns1.kane-il.us. 3600 IN A 45.79.142.190 ns2.kane-il.us. 3600 IN A 175.45.180.8 ns1.kane-il.us. 3600 IN AAAA 2600:3c03:e000:575:: ns2.kane-il.us. 3600 IN AAAA 2404:9400:2:0:216:3eff:fee4:9f0 ns1.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. yzwwxh+ggFP21hX8DTfPThEjfvytM3GQlsRqNgJlHaVsE4yRGJz358vH/MYIjx97kHEjL1FWLRUJ anBvnpy6yqQS+bB2ohQfYoSdqrvyardJFZYS+oA8ljPGA1+Xarg8 ) ns1.kane-il.us. 3600 IN RRSIG ( AAAA 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. kYwtgkeHD6/YtYq0TchmcbjsRBmbOaNWwjx1NoudOLxbHVSv7FYLSqZle3kNn79AdJgtoPiQ/3y2 IXpyJXj9ooFpo25v91FOMpsQT4QNcPV4J4mNTOqsjOPLhi41zmry ) ns2.kane-il.us. 3600 IN RRSIG ( A 14 3 3600 20250724103709 20250624103709 50596 kane-il.us. 4OBbtm0TISzxwR5RCkFeEsVeTEO1oa//ViwC4vcdt/GB9S7kxKLdOa7hEzcF02IMDXVob6dofr+M 5cPkCIfV1CFnycttx4RrpB5lTJGCBsmWwK6W/tY3QBpm3/pVhSkj ) ;; { "EDNS-VERSION": 0 }
	hubzilla.kane-il.us A RR has value 45.33.113.202
	Found 1 RRSIGs over A RRset
	`hubzilla.kane-il.us. 3600 IN RRSIG ( A 14 2 3600 20250724103709 20250624103709 50596 kane-il.us. JPQuLJYV6BY/6Qw8dWcbJSYGnLVm9rUiM0fN8I4r9NpBvs3lmCBtS45IQVSW4X7NyByDz49lVekS 2bDfirMcF93ldI91KMZFgX+iUKPNkbQ9XYg0DTO/FGgQX+R7u3K3 )`
	RRSIG=50596 and DNSKEY=50596 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hubzilla.kane-il.us at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: