DNSSEC Debugger - ip6.arpa

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-18 23:54:19 UTC

Analyzing DNSSEC problems for ip6.arpa

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1139 octets ;; HEADER SECTION ;; id = 35432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to f.root-servers.net for ip6.arpa/A
	Received 845 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 845 octets ;; HEADER SECTION ;; id = 16919 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260701180000 20260618170000 53731 arpa. SxE2oxmWPH8brubeletbs99DzrvFzC9FX383E1N8kAZeX5uml+5wKYkxbXNVSSeEBhx7OEKuYYdU L+rTNFjucFiY/hqLjQCNQnsgnIbZIhLrSWR2y/1E/XeXmeBnZlm0vdiDn4HnOY/macx0EfQwtVJ/ fqQBXCUrk+xWQYNVmqVCuZyiBLQowDNT8/zFthGwcMO0WbhHvkWAoY650RmCE4/IZi9/GJ+Eciky TXVA3FxT+Mqbd14vQROXVXaZ2UXI68ChNzTWYr1lNcK5JPXfLcHytHfCHBnwOABUDGalOpmhNpmM DqjySXvdPNdo71ZhFNSUKXxqRjhxIjbqG+crHQ== ) ;; ADDITIONAL SECTION (13 records) a.ip6-servers.arpa. 172800 IN A 199.180.182.53 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 b.ip6-servers.arpa. 172800 IN A 199.253.182.182 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 f.ip6-servers.arpa. 172800 IN A 193.0.9.2 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for arpa/DNSKEY
	Received 877 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 877 octets ;; HEADER SECTION ;; id = 3804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DNSKEY ;; ANSWER SECTION (3 records) arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdfYf181uSGch+kaBf5CVyrlj9LRDEO+Fm0i+7WU2kiBXjaG8ZEeJYJ82ux90JwdFaJ6vP5a c3+BHIgzTwpz3Cirw3z2Gcew77WdapMUN7Ba1IbErYUg8c8VBwc6rDiiKt+0hlmmcetR5+J7x1/5 BTP0ueiHYKL2aqUr7iKaPvuhYIjZaYzIKqvvH5mVKD4yOtW9oSSxnTKeYJJeYDYOFPvyJSRnUZ/e HjTY+PrlZSJq6nGdejpyLyLyrEi5GOHLy2CslACApx4M5b22kLaluVGzhiCfyOJwrruFDqvQBBeZ JlPFa4pC9YNzWAErSOsb2aSY4XFfj1B41l5unevstgE= ) ; keytag 53731 arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581 arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260701000000 20260610000000 42581 arpa. NvOUIb2ZFu0SWE2L6js1N+8t8SF8JAYJ26xjpObDk4bf3QJTOiEc6rRNuO723Ua0ZJnUHl7WdAa9 hPWF1m+mefHkXo5nxoaEa9IJyoCHmeVcOhLTGGCvwOz/xkfEpBx2jVxIesjFALvc5D3XOQUclfMl uBJ4/TriexTBpRx24ftQxRxLEI8vrXG54LV48vTt/yCYlSTOAReKAf7aZsDFDsOjIhI7F+hDgjiY 711ZIftlMX2qVxZtcqAD25+iodj0o7OHFLNyYMpkssoHipLvPaKYig+ZWGm/3SU7Pk1Pzy6AkNi4 gujen1QBPQ/6m/gVL686Y4bMV5t6Fdm0vKbKjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone arpa
	Attempting to learn nameservers for arpa
	Query to j.root-servers.net for arpa/NS
	Received 1048 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1048 octets ;; HEADER SECTION ;; id = 57990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 13 ;; nscount = 0 arcount = 25 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN NS ;; ANSWER SECTION (13 records) arpa. 518400 IN NS a.ns.arpa. arpa. 518400 IN NS b.ns.arpa. arpa. 518400 IN NS c.ns.arpa. arpa. 518400 IN NS d.ns.arpa. arpa. 518400 IN NS e.ns.arpa. arpa. 518400 IN NS f.ns.arpa. arpa. 518400 IN NS g.ns.arpa. arpa. 518400 IN NS h.ns.arpa. arpa. 518400 IN NS i.ns.arpa. arpa. 518400 IN NS k.ns.arpa. arpa. 518400 IN NS l.ns.arpa. arpa. 518400 IN NS m.ns.arpa. arpa. 518400 IN RRSIG ( NS 8 1 518400 20260701180000 20260618170000 53731 arpa. QXM21Al9hBMqOqiJKKk2HbchsAtlIT2uVFosovAykRghou6V27enGQG6lYgYI61Fd2glq1jsgbQU 7jRNNBll7oT5vzNNu0z7Wz1pCqvlq112Q/8t/1AjEQ0kHvMqfK8l0T2KtMZNYNPlaSADUq7XJE7O iDm7J5XUyuxTGEy4eXvFjsc/R2C3Zhdy+j+XjRzNcG4EPI2Fknh4fQvMld7kOOgkXvL9KlKCDr5z yeFeg0aMRJWlVqfa43YbrvHNCeaUjg4JEztS6a97AYRgZvnQoEVl/ZXq1mgE9hboxnB0Xaf0WxDV 1ejyFlhox1yK6l2UFTEwEzzhtpvNCOqdzaVd3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (25 records) a.ns.arpa. 518400 IN A 198.41.0.4 a.ns.arpa. 518400 IN AAAA 2001:503:ba3e::2:30 b.ns.arpa. 518400 IN A 170.247.170.2 b.ns.arpa. 518400 IN AAAA 2801:1b8:10::b c.ns.arpa. 518400 IN A 192.33.4.12 c.ns.arpa. 518400 IN AAAA 2001:500:2::c d.ns.arpa. 518400 IN A 199.7.91.13 d.ns.arpa. 518400 IN AAAA 2001:500:2d::d e.ns.arpa. 518400 IN A 192.203.230.10 e.ns.arpa. 518400 IN AAAA 2001:500:a8::e f.ns.arpa. 518400 IN A 192.5.5.241 f.ns.arpa. 518400 IN AAAA 2001:500:2f::f g.ns.arpa. 518400 IN A 192.112.36.4 g.ns.arpa. 518400 IN AAAA 2001:500:12::d0d h.ns.arpa. 518400 IN A 198.97.190.53 h.ns.arpa. 518400 IN AAAA 2001:500:1::53 i.ns.arpa. 518400 IN A 192.36.148.17 i.ns.arpa. 518400 IN AAAA 2001:7fe::53 k.ns.arpa. 518400 IN A 193.0.14.129 k.ns.arpa. 518400 IN AAAA 2001:7fd::1 l.ns.arpa. 518400 IN A 199.7.83.42 l.ns.arpa. 518400 IN AAAA 2001:500:9f::42 m.ns.arpa. 518400 IN A 202.12.27.33 m.ns.arpa. 518400 IN AAAA 2001:dc3::35 ;; { "EDNS-VERSION": 0 }
	Found arpa nameservers: a.ns.arpa, b.ns.arpa, c.ns.arpa, d.ns.arpa, e.ns.arpa, f.ns.arpa, g.ns.arpa, h.ns.arpa, i.ns.arpa, k.ns.arpa, l.ns.arpa, m.ns.arpa

arpa

	Checking DS between . and arpa
	Query to k.root-servers.net for arpa/DS
	Received 368 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 368 octets ;; HEADER SECTION ;; id = 47156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DS ;; ANSWER SECTION (2 records) arpa. 86400 IN DS ( 42581 8 2 f28391c1ed4dc0f151edd251a3103dce0b9a5a251acf6e24073771d71f3c40f9 ) arpa. 86400 IN RRSIG ( DS 8 1 86400 20260701200000 20260618190000 54393 . PVfgc5mijQgBgskWZ/TLTwHqNwPclpKc0LRx8bdSkceRrwWE5ZbmFhD2hQodQ+ffKOdD/DwR6/ZL 3robBxAjGtUsSitgD9pmrEYFZ3K9VQQg7fvq5jBsjMqk+AKquMZm1RKJ8aDBAmuzukjrrz6Y+9Pj 1mpzcA47dSQXsd10T81Hxuu1ybAhQvDVNW9XMhAfydz4n0P6prDQnMTJnpN/73DHrQ9J3pUXpgXb Ew63BtJnVVzc2F8G9998u1poCVujBp5wLH6Whtwykk7UbCZZmOJkMfmLyiE2a4INGRDP0LgUizx8 ah+cXGQs1Bcy1QJH4fV4V1uMm224oNiJLjcJ0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for arpa in the . zone
	DS=42581/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`arpa. 86400 IN RRSIG ( DS 8 1 86400 20260701200000 20260618190000 54393 . PVfgc5mijQgBgskWZ/TLTwHqNwPclpKc0LRx8bdSkceRrwWE5ZbmFhD2hQodQ+ffKOdD/DwR6/ZL 3robBxAjGtUsSitgD9pmrEYFZ3K9VQQg7fvq5jBsjMqk+AKquMZm1RKJ8aDBAmuzukjrrz6Y+9Pj 1mpzcA47dSQXsd10T81Hxuu1ybAhQvDVNW9XMhAfydz4n0P6prDQnMTJnpN/73DHrQ9J3pUXpgXb Ew63BtJnVVzc2F8G9998u1poCVujBp5wLH6Whtwykk7UbCZZmOJkMfmLyiE2a4INGRDP0LgUizx8 ah+cXGQs1Bcy1QJH4fV4V1uMm224oNiJLjcJ0Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=42581/SHA-256 is now in the chain-of-trust
	`arpa. 86400 IN DS ( 42581 8 2 f28391c1ed4dc0f151edd251a3103dce0b9a5a251acf6e24073771d71f3c40f9 )`
	Query to k.ns.arpa for arpa/DNSKEY
	Received 877 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 877 octets ;; HEADER SECTION ;; id = 37982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; arpa. IN DNSKEY ;; ANSWER SECTION (3 records) arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdfYf181uSGch+kaBf5CVyrlj9LRDEO+Fm0i+7WU2kiBXjaG8ZEeJYJ82ux90JwdFaJ6vP5a c3+BHIgzTwpz3Cirw3z2Gcew77WdapMUN7Ba1IbErYUg8c8VBwc6rDiiKt+0hlmmcetR5+J7x1/5 BTP0ueiHYKL2aqUr7iKaPvuhYIjZaYzIKqvvH5mVKD4yOtW9oSSxnTKeYJJeYDYOFPvyJSRnUZ/e HjTY+PrlZSJq6nGdejpyLyLyrEi5GOHLy2CslACApx4M5b22kLaluVGzhiCfyOJwrruFDqvQBBeZ JlPFa4pC9YNzWAErSOsb2aSY4XFfj1B41l5unevstgE= ) ; keytag 53731 arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581 arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260701000000 20260610000000 42581 arpa. NvOUIb2ZFu0SWE2L6js1N+8t8SF8JAYJ26xjpObDk4bf3QJTOiEc6rRNuO723Ua0ZJnUHl7WdAa9 hPWF1m+mefHkXo5nxoaEa9IJyoCHmeVcOhLTGGCvwOz/xkfEpBx2jVxIesjFALvc5D3XOQUclfMl uBJ4/TriexTBpRx24ftQxRxLEI8vrXG54LV48vTt/yCYlSTOAReKAf7aZsDFDsOjIhI7F+hDgjiY 711ZIftlMX2qVxZtcqAD25+iodj0o7OHFLNyYMpkssoHipLvPaKYig+ZWGm/3SU7Pk1Pzy6AkNi4 gujen1QBPQ/6m/gVL686Y4bMV5t6Fdm0vKbKjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for arpa
	`arpa. 172800 IN DNSKEY ( 256 3 8 AwEAAdfYf181uSGch+kaBf5CVyrlj9LRDEO+Fm0i+7WU2kiBXjaG8ZEeJYJ82ux90JwdFaJ6vP5a c3+BHIgzTwpz3Cirw3z2Gcew77WdapMUN7Ba1IbErYUg8c8VBwc6rDiiKt+0hlmmcetR5+J7x1/5 BTP0ueiHYKL2aqUr7iKaPvuhYIjZaYzIKqvvH5mVKD4yOtW9oSSxnTKeYJJeYDYOFPvyJSRnUZ/e HjTY+PrlZSJq6nGdejpyLyLyrEi5GOHLy2CslACApx4M5b22kLaluVGzhiCfyOJwrruFDqvQBBeZ JlPFa4pC9YNzWAErSOsb2aSY4XFfj1B41l5unevstgE= ) ; keytag 53731`
	`arpa. 172800 IN DNSKEY ( 257 3 8 AwEAAaTeX8QjGPfu932a6OfQGYeeIdyXdLGLbvQD4LdNmEqJLL98kdOWB3bE97Wdh3FzI87OOqAV CITqWxqAM+phyZ6DsBzHpLDdqvFXkvv99n042rU1DROyIuHdZe/0qjR56PboiSEM6I7cPJWGJxln R+JZVWXWJ3lK38teTaVrNm2Te/WPU2ntHY160etwVlxms4xbXa7WBbWXEq1q/9y18A56N/yz2dKk VLh9fmMU/frslsnn5BDYlkg4Xo0V+cw2Qw46mYV4g03ueCiDJAenUfV4iU9ud2h0Dq6Rhz7GMuTo jDu3hdUz4DskR66yCetWRyofLCwVtZShGYqqLbiDTJc= ) ; keytag 42581`
	DNSKEY=42581/SEP is now in the chain-of-trust
	DS=42581/SHA-256 verifies DNSKEY=42581/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`arpa. 172800 IN RRSIG ( DNSKEY 8 1 172800 20260701000000 20260610000000 42581 arpa. NvOUIb2ZFu0SWE2L6js1N+8t8SF8JAYJ26xjpObDk4bf3QJTOiEc6rRNuO723Ua0ZJnUHl7WdAa9 hPWF1m+mefHkXo5nxoaEa9IJyoCHmeVcOhLTGGCvwOz/xkfEpBx2jVxIesjFALvc5D3XOQUclfMl uBJ4/TriexTBpRx24ftQxRxLEI8vrXG54LV48vTt/yCYlSTOAReKAf7aZsDFDsOjIhI7F+hDgjiY 711ZIftlMX2qVxZtcqAD25+iodj0o7OHFLNyYMpkssoHipLvPaKYig+ZWGm/3SU7Pk1Pzy6AkNi4 gujen1QBPQ/6m/gVL686Y4bMV5t6Fdm0vKbKjA== )`
	RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
	DNSKEY=53731 is now in the chain-of-trust
	Query to a.ns.arpa for ip6.arpa/A
	Received 845 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 845 octets ;; HEADER SECTION ;; id = 31273 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260701180000 20260618170000 53731 arpa. SxE2oxmWPH8brubeletbs99DzrvFzC9FX383E1N8kAZeX5uml+5wKYkxbXNVSSeEBhx7OEKuYYdU L+rTNFjucFiY/hqLjQCNQnsgnIbZIhLrSWR2y/1E/XeXmeBnZlm0vdiDn4HnOY/macx0EfQwtVJ/ fqQBXCUrk+xWQYNVmqVCuZyiBLQowDNT8/zFthGwcMO0WbhHvkWAoY650RmCE4/IZi9/GJ+Eciky TXVA3FxT+Mqbd14vQROXVXaZ2UXI68ChNzTWYr1lNcK5JPXfLcHytHfCHBnwOABUDGalOpmhNpmM DqjySXvdPNdo71ZhFNSUKXxqRjhxIjbqG+crHQ== ) ;; ADDITIONAL SECTION (13 records) b.ip6-servers.arpa. 172800 IN A 199.253.182.182 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 f.ip6-servers.arpa. 172800 IN A 193.0.9.2 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 a.ip6-servers.arpa. 172800 IN A 199.180.182.53 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 ;; { "EDNS-VERSION": 0 }
	Query to g.ns.arpa for ip6.arpa/DNSKEY
	Received 849 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 849 octets ;; HEADER SECTION ;; id = 11224 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ip6.arpa. 172800 IN NS e.ip6-servers.arpa. ip6.arpa. 172800 IN NS a.ip6-servers.arpa. ip6.arpa. 172800 IN NS c.ip6-servers.arpa. ip6.arpa. 172800 IN NS b.ip6-servers.arpa. ip6.arpa. 172800 IN NS d.ip6-servers.arpa. ip6.arpa. 172800 IN NS f.ip6-servers.arpa. ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260701180000 20260618170000 53731 arpa. SxE2oxmWPH8brubeletbs99DzrvFzC9FX383E1N8kAZeX5uml+5wKYkxbXNVSSeEBhx7OEKuYYdU L+rTNFjucFiY/hqLjQCNQnsgnIbZIhLrSWR2y/1E/XeXmeBnZlm0vdiDn4HnOY/macx0EfQwtVJ/ fqQBXCUrk+xWQYNVmqVCuZyiBLQowDNT8/zFthGwcMO0WbhHvkWAoY650RmCE4/IZi9/GJ+Eciky TXVA3FxT+Mqbd14vQROXVXaZ2UXI68ChNzTWYr1lNcK5JPXfLcHytHfCHBnwOABUDGalOpmhNpmM DqjySXvdPNdo71ZhFNSUKXxqRjhxIjbqG+crHQ== ) ;; ADDITIONAL SECTION (13 records) f.ip6-servers.arpa. 172800 IN A 193.0.9.2 e.ip6-servers.arpa. 172800 IN A 203.119.86.101 d.ip6-servers.arpa. 172800 IN A 200.7.86.53 c.ip6-servers.arpa. 172800 IN A 196.216.169.11 b.ip6-servers.arpa. 172800 IN A 199.253.182.182 a.ip6-servers.arpa. 172800 IN A 199.180.182.53 f.ip6-servers.arpa. 172800 IN AAAA 2a13:27c0:30::2 e.ip6-servers.arpa. 172800 IN AAAA 2001:dd8:6::101 d.ip6-servers.arpa. 172800 IN AAAA 2001:13c7:7012::53 c.ip6-servers.arpa. 172800 IN AAAA 2001:43f8:110::11 b.ip6-servers.arpa. 172800 IN AAAA 2001:500:86::86 a.ip6-servers.arpa. 172800 IN AAAA 2620:37:e000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ip6.arpa

ip6.arpa

	Checking DS between arpa and ip6.arpa
	Query to k.ns.arpa for ip6.arpa/DS
	Received 473 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 473 octets ;; HEADER SECTION ;; id = 49438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DS ;; ANSWER SECTION (4 records) ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 ) ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb ) ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b ) ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260701180000 20260618170000 53731 arpa. SxE2oxmWPH8brubeletbs99DzrvFzC9FX383E1N8kAZeX5uml+5wKYkxbXNVSSeEBhx7OEKuYYdU L+rTNFjucFiY/hqLjQCNQnsgnIbZIhLrSWR2y/1E/XeXmeBnZlm0vdiDn4HnOY/macx0EfQwtVJ/ fqQBXCUrk+xWQYNVmqVCuZyiBLQowDNT8/zFthGwcMO0WbhHvkWAoY650RmCE4/IZi9/GJ+Eciky TXVA3FxT+Mqbd14vQROXVXaZ2UXI68ChNzTWYr1lNcK5JPXfLcHytHfCHBnwOABUDGalOpmhNpmM DqjySXvdPNdo71ZhFNSUKXxqRjhxIjbqG+crHQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for ip6.arpa in the arpa zone
	DS=13880/SHA-256 has algorithm RSASHA256
	DS=45094/SHA-256 has algorithm RSASHA256
	DS=64060/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ip6.arpa. 86400 IN RRSIG ( DS 8 2 86400 20260701180000 20260618170000 53731 arpa. SxE2oxmWPH8brubeletbs99DzrvFzC9FX383E1N8kAZeX5uml+5wKYkxbXNVSSeEBhx7OEKuYYdU L+rTNFjucFiY/hqLjQCNQnsgnIbZIhLrSWR2y/1E/XeXmeBnZlm0vdiDn4HnOY/macx0EfQwtVJ/ fqQBXCUrk+xWQYNVmqVCuZyiBLQowDNT8/zFthGwcMO0WbhHvkWAoY650RmCE4/IZi9/GJ+Eciky TXVA3FxT+Mqbd14vQROXVXaZ2UXI68ChNzTWYr1lNcK5JPXfLcHytHfCHBnwOABUDGalOpmhNpmM DqjySXvdPNdo71ZhFNSUKXxqRjhxIjbqG+crHQ== )`
	RRSIG=53731 and DNSKEY=53731 verifies the DS RRset
	DS=13880/SHA-256 is now in the chain-of-trust
	DS=45094/SHA-256 is now in the chain-of-trust
	DS=64060/SHA-256 is now in the chain-of-trust
	`ip6.arpa. 86400 IN DS ( 13880 8 2 068554efcb5861f42af93ef8e79c442a86c16fc5652e6b6d2419ed527f344d17 )`
	`ip6.arpa. 86400 IN DS ( 45094 8 2 e6b54e0a20ce1edbfcb6879c02f5782059cecb043a31d804a04afa51af01d5fb )`
	`ip6.arpa. 86400 IN DS ( 64060 8 2 8a11501086330132be2c23f22dedf0634ad5ff668b4aa1988e172c6a2a4e5f7b )`
	Query to e.ip6-servers.arpa for ip6.arpa/DNSKEY
	Received 1329 bytes from 203.119.86.101
	;; Response received from [203.119.86.101] 1329 octets ;; HEADER SECTION ;; id = 15858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN DNSKEY ;; ANSWER SECTION (5 records) ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAa8bJ22d6oorQjwmAivlT8diruwB75t3hz7G/FHOgFxTKnbRzkCtFItnxaBvD+lygqsj38am SqwsLYnNvejL/9kSzMdntRc5fC+9E+0m9Wq+liYSm60IxKvSL0fzApA80UgD1rpRtelBrkyiJyj3 byiRcEDJhRXPmyQOqNDnVpq3tTDPlkwEAF7uAmp3qKRZWJF6VswoAFqya7pMiCt8M+No+xiWZro8 7ZqTwRUBMJWKafO5ONH+HoZDvDeP+CNsKyt5GTROX+UxxT8xSueJidceJsKaI75HvEOp0kLAr8TP Svg4eBkk5Pgn+LvNBQ3ZdPMfHIKSLbZ+J3OOJJIkgpk= ) ; keytag 21619 ip6.arpa. 3600 IN DNSKEY ( 256 3 8 AwEAAdiTygbxKgCYFKx/ByKiFegRN+6Dkh2PiQwiDMsE1SaGOratXd5eZRXqQiqn8J9tnhFAxap2 KmZ7pCTbdy3Xq1/nOMLpDgF5W8HWNMcWSClf0zfHty1DxPmawBk0mj3L3TgO6wIzxOuZxCchvOjk E9hy2xxUGmP8jQQogocy0mLj ) ; keytag 28411 ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAb+iy1CqMSS2fAoZhqeG0b1MxbegsUt94GIYCOe4PRQYiyVZb0Wi3s2RpSNoC1XNz1ne1CYA q2B0/XCwXzBVBppG4zJ6Hr4LAoXBRmlLSmNlbqbNJ8WCy0y5c6CNMKGRfd9KPzko1MO1wLbTRFiF DjE2h602c3K1qawngVcbRLMNnttAWJU2q+8BzdN26YeDdpsSFdPI+CbifItfwFfJx8BOIQkcOJX8 gjFxs9bvGuXTaf7qLzyNFklZG7NY63ooOdVYV9UoZH0bcdVSRg4a/Ilqryvb9eBeihkWs1+h57pp QGcR61ryfQqGc+19hSvO9DM1+X2g9uFzdxs3zg5e3n8= ) ; keytag 64060 ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260702141845 20260611021503 21619 ip6.arpa. KPel20GUg9I22jLzyHLQ/gpY7gsSZdMZsq4BHYBjQF3VnlrEmY+omjlgFDEMtElZGtbnSvVk5Ix1 v5COJjT7fH/KAVDO3aSCpSifp1+VHThRXjuAjvtE+fmQwQywfNGD5Nv8ZkHaWowRI43vd4VluDP9 rnoLIPVCk2B10kLaVWK9kWCMm/hJVsvp76He185HGudZzsj5rHMcYURndWTFMfzC/6rspQigXWex qv/1Ca0reBdOVDIHkudEeYPRS0PH28q2IMpFGGlpplJx5ah0ws1e0YfmsYIrrPHMykqZGxAJlipa iwLbTijk9CsJgbdQEcAZGi0oIDx7FvNXr0MnxA== ) ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260702141845 20260611021503 64060 ip6.arpa. c7EX1T/yoCf+TTls20yjTTjcKckE5j1fa798MWofXwnVgC7T23yfAXS4kq5mrKNMX1gs2t4beJzY 3xCiaP20T6kSRUL40c9pThposwdbvGun2DXHG7F/BlR3L/3FUpiCAXN1bNbsTM7pFQXD2T/InGVa kJ+nLj2f2udFzKp00cIxWNC4DccBUmIdBuHlZY7Bwn3t8VB2QYC8Kgsjh8GOgzXP/Dj/7popt4bG rpx9Kdok9WA2egjdxXDx/mpH21lNtD6fjIcaMDqTIRkkjY4LHtHsWKD2FF1uh7IGxNTzdUOYDwsC AfcYCzjukS1vWqsyl1K/iTAlXyzeCZmyEhQ5BA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ip6.arpa
	`ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAa8bJ22d6oorQjwmAivlT8diruwB75t3hz7G/FHOgFxTKnbRzkCtFItnxaBvD+lygqsj38am SqwsLYnNvejL/9kSzMdntRc5fC+9E+0m9Wq+liYSm60IxKvSL0fzApA80UgD1rpRtelBrkyiJyj3 byiRcEDJhRXPmyQOqNDnVpq3tTDPlkwEAF7uAmp3qKRZWJF6VswoAFqya7pMiCt8M+No+xiWZro8 7ZqTwRUBMJWKafO5ONH+HoZDvDeP+CNsKyt5GTROX+UxxT8xSueJidceJsKaI75HvEOp0kLAr8TP Svg4eBkk5Pgn+LvNBQ3ZdPMfHIKSLbZ+J3OOJJIkgpk= ) ; keytag 21619`
	`ip6.arpa. 3600 IN DNSKEY ( 256 3 8 AwEAAdiTygbxKgCYFKx/ByKiFegRN+6Dkh2PiQwiDMsE1SaGOratXd5eZRXqQiqn8J9tnhFAxap2 KmZ7pCTbdy3Xq1/nOMLpDgF5W8HWNMcWSClf0zfHty1DxPmawBk0mj3L3TgO6wIzxOuZxCchvOjk E9hy2xxUGmP8jQQogocy0mLj ) ; keytag 28411`
	`ip6.arpa. 3600 IN DNSKEY ( 257 3 8 AwEAAb+iy1CqMSS2fAoZhqeG0b1MxbegsUt94GIYCOe4PRQYiyVZb0Wi3s2RpSNoC1XNz1ne1CYA q2B0/XCwXzBVBppG4zJ6Hr4LAoXBRmlLSmNlbqbNJ8WCy0y5c6CNMKGRfd9KPzko1MO1wLbTRFiF DjE2h602c3K1qawngVcbRLMNnttAWJU2q+8BzdN26YeDdpsSFdPI+CbifItfwFfJx8BOIQkcOJX8 gjFxs9bvGuXTaf7qLzyNFklZG7NY63ooOdVYV9UoZH0bcdVSRg4a/Ilqryvb9eBeihkWs1+h57pp QGcR61ryfQqGc+19hSvO9DM1+X2g9uFzdxs3zg5e3n8= ) ; keytag 64060`
	DNSKEY=64060/SEP is now in the chain-of-trust
	DS=64060/SHA-256 verifies DNSKEY=64060/SEP
	DS=13880/SHA-256 is published, but a corresponding DNSKEY is not
	DS=45094/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260702141845 20260611021503 21619 ip6.arpa. KPel20GUg9I22jLzyHLQ/gpY7gsSZdMZsq4BHYBjQF3VnlrEmY+omjlgFDEMtElZGtbnSvVk5Ix1 v5COJjT7fH/KAVDO3aSCpSifp1+VHThRXjuAjvtE+fmQwQywfNGD5Nv8ZkHaWowRI43vd4VluDP9 rnoLIPVCk2B10kLaVWK9kWCMm/hJVsvp76He185HGudZzsj5rHMcYURndWTFMfzC/6rspQigXWex qv/1Ca0reBdOVDIHkudEeYPRS0PH28q2IMpFGGlpplJx5ah0ws1e0YfmsYIrrPHMykqZGxAJlipa iwLbTijk9CsJgbdQEcAZGi0oIDx7FvNXr0MnxA== )`
	`ip6.arpa. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260702141845 20260611021503 64060 ip6.arpa. c7EX1T/yoCf+TTls20yjTTjcKckE5j1fa798MWofXwnVgC7T23yfAXS4kq5mrKNMX1gs2t4beJzY 3xCiaP20T6kSRUL40c9pThposwdbvGun2DXHG7F/BlR3L/3FUpiCAXN1bNbsTM7pFQXD2T/InGVa kJ+nLj2f2udFzKp00cIxWNC4DccBUmIdBuHlZY7Bwn3t8VB2QYC8Kgsjh8GOgzXP/Dj/7popt4bG rpx9Kdok9WA2egjdxXDx/mpH21lNtD6fjIcaMDqTIRkkjY4LHtHsWKD2FF1uh7IGxNTzdUOYDwsC AfcYCzjukS1vWqsyl1K/iTAlXyzeCZmyEhQ5BA== )`
	RRSIG=21619 and DNSKEY=21619/SEP verifies the DNSKEY RRset
	RRSIG=64060 and DNSKEY=64060/SEP verifies the DNSKEY RRset
	DNSKEY=21619/SEP is now in the chain-of-trust
	DNSKEY=28411 is now in the chain-of-trust
	Query to f.ip6-servers.arpa for ip6.arpa/A
	Received 482 bytes from 193.0.9.2
	;; Response received from [193.0.9.2] 482 octets ;; HEADER SECTION ;; id = 37644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to e.ip6-servers.arpa for ip6.arpa/SOA
	Received 269 bytes from 203.119.86.101
	;; Response received from [203.119.86.101] 269 octets ;; HEADER SECTION ;; id = 18835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ip6-servers.arpa for ip6.arpa/SOA
	Received 273 bytes from 199.180.182.53
	;; Response received from [199.180.182.53] 273 octets ;; HEADER SECTION ;; id = 64263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ip6-servers.arpa for ip6.arpa/SOA
	Received 535 bytes from 200.7.86.53
	;; Response received from [200.7.86.53] 535 octets ;; HEADER SECTION ;; id = 23375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ;; AUTHORITY SECTION (7 records) ip6.arpa. 3600 IN NS f.ip6-servers.arpa. ip6.arpa. 3600 IN NS a.ip6-servers.arpa. ip6.arpa. 3600 IN NS d.ip6-servers.arpa. ip6.arpa. 3600 IN NS b.ip6-servers.arpa. ip6.arpa. 3600 IN NS c.ip6-servers.arpa. ip6.arpa. 3600 IN NS e.ip6-servers.arpa. ip6.arpa. 3600 IN RRSIG ( NS 8 2 3600 20260702140846 20260611201503 28411 ip6.arpa. XXWw2edmb6IOribdlpBaOHbzBOD1zCKxWxYEA7X6zJEkH3/pFfnHIwInv//dUt4w3R+G2UdOXTa9 pnWznrSM0KByUxIb1PGRaTY8DD1k1aHyDmN2RGw/DKPOZdH6zI8OmQc3Ny6TLx5NJLrAa0FORZrZ oeWVnhvGcxPlKN0DHfI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ip6-servers.arpa for ip6.arpa/SOA
	Received 531 bytes from 196.216.169.11
	;; Response received from [196.216.169.11] 531 octets ;; HEADER SECTION ;; id = 31976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ;; AUTHORITY SECTION (7 records) ip6.arpa. 3600 IN NS a.ip6-servers.arpa. ip6.arpa. 3600 IN NS b.ip6-servers.arpa. ip6.arpa. 3600 IN NS c.ip6-servers.arpa. ip6.arpa. 3600 IN NS d.ip6-servers.arpa. ip6.arpa. 3600 IN NS e.ip6-servers.arpa. ip6.arpa. 3600 IN NS f.ip6-servers.arpa. ip6.arpa. 3600 IN RRSIG ( NS 8 2 3600 20260702140846 20260611201503 28411 ip6.arpa. XXWw2edmb6IOribdlpBaOHbzBOD1zCKxWxYEA7X6zJEkH3/pFfnHIwInv//dUt4w3R+G2UdOXTa9 pnWznrSM0KByUxIb1PGRaTY8DD1k1aHyDmN2RGw/DKPOZdH6zI8OmQc3Ny6TLx5NJLrAa0FORZrZ oeWVnhvGcxPlKN0DHfI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ip6-servers.arpa for ip6.arpa/SOA
	Received 531 bytes from 199.253.182.182
	;; Response received from [199.253.182.182] 531 octets ;; HEADER SECTION ;; id = 59510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN SOA ;; ANSWER SECTION (2 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ;; AUTHORITY SECTION (7 records) ip6.arpa. 3600 IN NS a.ip6-servers.arpa. ip6.arpa. 3600 IN NS b.ip6-servers.arpa. ip6.arpa. 3600 IN NS c.ip6-servers.arpa. ip6.arpa. 3600 IN NS d.ip6-servers.arpa. ip6.arpa. 3600 IN NS e.ip6-servers.arpa. ip6.arpa. 3600 IN NS f.ip6-servers.arpa. ip6.arpa. 3600 IN RRSIG ( NS 8 2 3600 20260702140846 20260611201503 28411 ip6.arpa. XXWw2edmb6IOribdlpBaOHbzBOD1zCKxWxYEA7X6zJEkH3/pFfnHIwInv//dUt4w3R+G2UdOXTa9 pnWznrSM0KByUxIb1PGRaTY8DD1k1aHyDmN2RGw/DKPOZdH6zI8OmQc3Ny6TLx5NJLrAa0FORZrZ oeWVnhvGcxPlKN0DHfI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

ip6.arpa

	Query to c.ip6-servers.arpa for ip6.arpa/A
	Received 482 bytes from 196.216.169.11
	;; Response received from [196.216.169.11] 482 octets ;; HEADER SECTION ;; id = 53548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to c.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

ip6.arpa

	Query to e.ip6-servers.arpa for ip6.arpa/A
	Received 482 bytes from 203.119.86.101
	;; Response received from [203.119.86.101] 482 octets ;; HEADER SECTION ;; id = 54097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to e.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

ip6.arpa

	Query to b.ip6-servers.arpa for ip6.arpa/A
	Received 482 bytes from 199.253.182.182
	;; Response received from [199.253.182.182] 482 octets ;; HEADER SECTION ;; id = 3443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to b.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

ip6.arpa

	Query to d.ip6-servers.arpa for ip6.arpa/A
	Received 486 bytes from 200.7.86.53
	;; Response received from [200.7.86.53] 486 octets ;; HEADER SECTION ;; id = 32393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to d.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

ip6.arpa

	Query to a.ip6-servers.arpa for ip6.arpa/A
	Received 486 bytes from 199.180.182.53
	;; Response received from [199.180.182.53] 486 octets ;; HEADER SECTION ;; id = 31109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ip6.arpa. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ip6.arpa. 3600 IN SOA ( b.ip6-servers.arpa. nstld.iana.org. 2026022491 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= ) ip6.arpa. 3600 IN NSEC 3.0.0.1.0.0.2.ip6.arpa. NS SOA RRSIG NSEC DNSKEY ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ip6-servers.arpa is authoritative for ip6.arpa
	Found RRSIG signed by ip6.arpa zone
	Query to a.ip6-servers.arpa for ip6.arpa/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`ip6.arpa. 3600 IN RRSIG ( NSEC 8 2 3600 20260702072522 20260611141503 28411 ip6.arpa. C42UOrt87JCWBAkoOm+ZCQtDhthnvGgXp4s+ZN9Pwf92qtP1YGObRslVZebbXPnh0HrYJugE7K0u EeTHim/utcjvYAOzlYe1A3DrzQ0sQi7o9gNM77p2+SIYta21tuuwVsFGFKxy5d6Gsl6adT5WAhh2 iKx7IYY8e9eC5E80eVE= )`
	RRSIG=28411 and DNSKEY=28411 verifies the NSEC RRset
	NSEC proves no records of type A exist for ip6.arpa
	Found 1 RRSIGs over SOA RRset
	`ip6.arpa. 3600 IN RRSIG ( SOA 8 2 3600 20260709035505 20260618141503 28411 ip6.arpa. fWu7tMpSzKYt5L4tN0N3Jha84L0JFEclx4GRW6FW+ZO/1KAxNazOTFB9PbR8UbHKoxWgCB1ChNcj OoAXuQ6Q0xXNPFPyMJztWDuY9lc3BIiPIwuVXsygGnytmqU4F6TlpRmUebRtT3MysWYGzMdI1Xgw WdTNmIHGQs7a7i0csso= )`
	RRSIG=28411 and DNSKEY=28411 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ip6.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: