DNSSEC Analyzer - keys.openpgp.org

Domain Name:

Time: 2021-04-21 05:49:22 UTC, NTP stratum 4

Analyzing DNSSEC problems for keys.openpgp.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 2930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to a.root-servers.net for keys.openpgp.org/A
	Received 782 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (782 bytes) ;; HEADER SECTION ;; id = 37010 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . Ar538PNbS3jSf6/c8JSAy0LVS0vZjBRpOWhK/KeKf8FsoSIe5AvfDGaWf1AMqDySv1eVKvz+fb+i SjB9YK1XeF1xAS+RuQHU+8KLSzh69Sc3SXnkkMayeF1W8iBgu/ZYXKCyogTVU4xMjJsOVsfkYPnX Gox8Xr/sJ0rL1JRLQqxpbAr8r3c1Av03zV9WPmJSWy8k6NZebK7pe2s4//Rvq1A/X+zk5lqyxxKd lgeRb5Wg52xq7r7jFJvqYRjRYyUgSfkaVh5MI+gp7VCmBxLM21BLRVsLTOCXL84ZgwQFZzSYViE2 AIvi3HyIToPOdZtsCtbS0Z+waD3icLwa+0Q1Qw== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for org/DNSKEY
	Received 769 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (769 bytes) ;; HEADER SECTION ;; id = 36952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . Ar538PNbS3jSf6/c8JSAy0LVS0vZjBRpOWhK/KeKf8FsoSIe5AvfDGaWf1AMqDySv1eVKvz+fb+i SjB9YK1XeF1xAS+RuQHU+8KLSzh69Sc3SXnkkMayeF1W8iBgu/ZYXKCyogTVU4xMjJsOVsfkYPnX Gox8Xr/sJ0rL1JRLQqxpbAr8r3c1Av03zV9WPmJSWy8k6NZebK7pe2s4//Rvq1A/X+zk5lqyxxKd lgeRb5Wg52xq7r7jFJvqYRjRYyUgSfkaVh5MI+gp7VCmBxLM21BLRVsLTOCXL84ZgwQFZzSYViE2 AIvi3HyIToPOdZtsCtbS0Z+waD3icLwa+0Q1Qw== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to l.root-servers.net for org/DS
	Received 367 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (367 bytes) ;; HEADER SECTION ;; id = 31924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . Ar538PNbS3jSf6/c8JSAy0LVS0vZjBRpOWhK/KeKf8FsoSIe5AvfDGaWf1AMqDySv1eVKvz+fb+i SjB9YK1XeF1xAS+RuQHU+8KLSzh69Sc3SXnkkMayeF1W8iBgu/ZYXKCyogTVU4xMjJsOVsfkYPnX Gox8Xr/sJ0rL1JRLQqxpbAr8r3c1Av03zV9WPmJSWy8k6NZebK7pe2s4//Rvq1A/X+zk5lqyxxKd lgeRb5Wg52xq7r7jFJvqYRjRYyUgSfkaVh5MI+gp7VCmBxLM21BLRVsLTOCXL84ZgwQFZzSYViE2 AIvi3HyIToPOdZtsCtbS0Z+waD3icLwa+0Q1Qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . Ar538PNbS3jSf6/c8JSAy0LVS0vZjBRpOWhK/KeKf8FsoSIe5AvfDGaWf1AMqDySv1eVKvz+fb+i SjB9YK1XeF1xAS+RuQHU+8KLSzh69Sc3SXnkkMayeF1W8iBgu/ZYXKCyogTVU4xMjJsOVsfkYPnX Gox8Xr/sJ0rL1JRLQqxpbAr8r3c1Av03zV9WPmJSWy8k6NZebK7pe2s4//Rvq1A/X+zk5lqyxxKd lgeRb5Wg52xq7r7jFJvqYRjRYyUgSfkaVh5MI+gp7VCmBxLM21BLRVsLTOCXL84ZgwQFZzSYViE2 AIvi3HyIToPOdZtsCtbS0Z+waD3icLwa+0Q1Qw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to c0.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.19.53.1
	;; Answer received from 199.19.53.1 (895 bytes) ;; HEADER SECTION ;; id = 59037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 900 IN DNSKEY ( 256 3 8 AwEAAbdQqhkl+yfPrZR8XDFp3AA2pdryOP/XAMokb68tjfXohqaPQFVtKC3TMQQfv8WsfYZTKdnI DwJCIpVwBTZ0D408+U0x7xL2+9MXp282Oq+JzZK+rH5uesExKNVNfJGrog6DSqBKORyPXoAM0+PP YglkGX1XAfapC+XYc8Yoq9CF ) ; Key ID = 27558 org. 900 IN DNSKEY ( 256 3 8 AwEAAcKDArXnH8EERegb6ZI1Dlu0TsvT0LmFTf9SHV7Pgl3+JunL1Ibi1I1kEFrlK5kX8p5nttQx KUSGIxoD0bgMWx77oPD6lgsMOjgxNM2O1vcJ40NRdkAmgOLs5k5V9Rh8AgoBiOSovUSEyhgMniks Zyc+4Nz4xlKc1Ce/bGJiFAnb ) ; Key ID = 30453 org. 900 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 900 IN RRSIG ( DNSKEY 8 1 900 20210508153229 20210417143229 26974 org. yIooWyMg3jBRtwVo1nC7aXpP7ttaHbSPmrFCgNLrjwM5w6JHMVXx/J72ISA9MFcY1YSdnrTRo82y HhwtJh21h8jJ1laugZIk4hsD8WtbFttbfPR9XuUNan7ryyCjDUJdzRuUVKBXelZnCCX/MxnmDUDR bytde/EaJLkGQu4Yfw30yPwENY0MoBTn8xwfFnTQoTSnvMfW5UZ+/yiITDgn0tYLWqWwvrhk1vHO QNfoNon3xm/Ls67RTPCJkbaKGo9pgvxgNpq4KKSaeYaitc4qvG/Vo5zh/zFqScdBvSDTPT4IXk0s 7pcKCJovabUnP4T9jbpfnKeVJbiCkkbooeVTLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 900 IN DNSKEY ( 256 3 8 AwEAAbdQqhkl+yfPrZR8XDFp3AA2pdryOP/XAMokb68tjfXohqaPQFVtKC3TMQQfv8WsfYZTKdnI DwJCIpVwBTZ0D408+U0x7xL2+9MXp282Oq+JzZK+rH5uesExKNVNfJGrog6DSqBKORyPXoAM0+PP YglkGX1XAfapC+XYc8Yoq9CF ) ; Key ID = 27558`
	`org. 900 IN DNSKEY ( 256 3 8 AwEAAcKDArXnH8EERegb6ZI1Dlu0TsvT0LmFTf9SHV7Pgl3+JunL1Ibi1I1kEFrlK5kX8p5nttQx KUSGIxoD0bgMWx77oPD6lgsMOjgxNM2O1vcJ40NRdkAmgOLs5k5V9Rh8AgoBiOSovUSEyhgMniks Zyc+4Nz4xlKc1Ce/bGJiFAnb ) ; Key ID = 30453`
	`org. 900 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 900 IN RRSIG ( DNSKEY 8 1 900 20210508153229 20210417143229 26974 org. yIooWyMg3jBRtwVo1nC7aXpP7ttaHbSPmrFCgNLrjwM5w6JHMVXx/J72ISA9MFcY1YSdnrTRo82y HhwtJh21h8jJ1laugZIk4hsD8WtbFttbfPR9XuUNan7ryyCjDUJdzRuUVKBXelZnCCX/MxnmDUDR bytde/EaJLkGQu4Yfw30yPwENY0MoBTn8xwfFnTQoTSnvMfW5UZ+/yiITDgn0tYLWqWwvrhk1vHO QNfoNon3xm/Ls67RTPCJkbaKGo9pgvxgNpq4KKSaeYaitc4qvG/Vo5zh/zFqScdBvSDTPT4IXk0s 7pcKCJovabUnP4T9jbpfnKeVJbiCkkbooeVTLg== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=27558 is now in the chain-of-trust
	DNSKEY=30453 is now in the chain-of-trust
	Query to a0.org.afilias-nst.info for keys.openpgp.org/A
	Received 304 bytes from 199.19.56.1
	;; Answer received from 199.19.56.1 (304 bytes) ;; HEADER SECTION ;; id = 8126 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) openpgp.org. 86400 IN NS kitsune.swcp.com. openpgp.org. 86400 IN NS ns2.swcp.com. openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210508153229 20210417143229 27558 org. cluyQWZaOf7696E1QOSnbPM85vbZe0oO8oZbIo91SsGn6Pz39k6ao3dzpHZBf1jFP0qd5YVl0lX0 DaRRgp+dUxXdas8xt5IVmX7iaNFfEYC5VRaaYY2XIqZfjSsi6kjmJ7GPZmFdr+YTjBI4a4TuU1Iz jR2PHER50JLp6d8ucHM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a2.org.afilias-nst.info for openpgp.org/DNSKEY
	Received 299 bytes from 199.249.112.1
	;; Answer received from 199.249.112.1 (299 bytes) ;; HEADER SECTION ;; id = 8414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) openpgp.org. 86400 IN NS kitsune.swcp.com. openpgp.org. 86400 IN NS ns2.swcp.com. openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210508153229 20210417143229 27558 org. cluyQWZaOf7696E1QOSnbPM85vbZe0oO8oZbIo91SsGn6Pz39k6ao3dzpHZBf1jFP0qd5YVl0lX0 DaRRgp+dUxXdas8xt5IVmX7iaNFfEYC5VRaaYY2XIqZfjSsi6kjmJ7GPZmFdr+YTjBI4a4TuU1Iz jR2PHER50JLp6d8ucHM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone openpgp.org

openpgp.org

	Checking DS between org and openpgp.org
	Query to b2.org.afilias-nst.org for openpgp.org/DS
	Received 251 bytes from 199.249.120.1
	;; Answer received from 199.249.120.1 (251 bytes) ;; HEADER SECTION ;; id = 36516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DS ;; ANSWER SECTION (2 records) openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210508153229 20210417143229 27558 org. cluyQWZaOf7696E1QOSnbPM85vbZe0oO8oZbIo91SsGn6Pz39k6ao3dzpHZBf1jFP0qd5YVl0lX0 DaRRgp+dUxXdas8xt5IVmX7iaNFfEYC5VRaaYY2XIqZfjSsi6kjmJ7GPZmFdr+YTjBI4a4TuU1Iz jR2PHER50JLp6d8ucHM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for openpgp.org in the org zone
	DS=26041/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210508153229 20210417143229 27558 org. cluyQWZaOf7696E1QOSnbPM85vbZe0oO8oZbIo91SsGn6Pz39k6ao3dzpHZBf1jFP0qd5YVl0lX0 DaRRgp+dUxXdas8xt5IVmX7iaNFfEYC5VRaaYY2XIqZfjSsi6kjmJ7GPZmFdr+YTjBI4a4TuU1Iz jR2PHER50JLp6d8ucHM= )`
	RRSIG=27558 and DNSKEY=27558 verifies the DS RRset
	DS=26041/SHA-256 is now in the chain-of-trust
	`openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c )`
	Query to kitsune.swcp.com for openpgp.org/DNSKEY
	Received 1190 bytes from 198.59.115.2
	;; Answer received from 198.59.115.2 (1190 bytes) ;; HEADER SECTION ;; id = 4016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DNSKEY ;; ANSWER SECTION (4 records) openpgp.org. 120 IN DNSKEY ( 256 3 8 AwEAAcmKm3eN4EiVyopunUJsjgnYiChWaGryi39e2c+Cvw1EvH58Aa1yNxkE9l0HprUjWN3xCgrp ocHlfcJsIveJb7yzG9pUXbuRPSB/6uon+cS5ulZrPS0L1kW5+2YCRlV7Nui7uab+N+AAikrUTuyE dtWdpo8o7B9b6A4iiH3CR5pyt0YpzAVCtzyDn2D+1qh0E9aeoklRjal3Z5VPY9COBbHf+Qbd4dd8 ev197DbLUJVQlfhLIEQbqagbwTpnSDyF++DLoY23P2NHGCxP7ZH3GLlJNhGYuHhGpF7JRgUcWhPi yhUCvmaaWnXu2byYsEBa0XhrFxvAKzeowgY5s4+WiKU= ) ; Key ID = 63435 openpgp.org. 120 IN DNSKEY ( 257 3 8 AwEAAb1qvXeWZyisHjP4sfRppmYkS+yqkfKshPFDi4Gjm7vOxdpMzWE0zJw71nb4ZHvK1I2CJama HWNuO/75dltEe1/BA3tVr63YMDtz7B7K/nyy+o7hSbVAV+a1z+MzX80A0LnqY3EM25/kHuzT1AaZ mm62H8BKw5xcJK1d0SRz5EwRpI5x2oyj+w6r/x1pj7tJwcx/8NUz3bPN3WpZ5GQelfP0c6MJxKL1 vTQuXwm6rrIpkGF4FO7Z1eiGBgW24jovAZp6EmiPkNo9CBfa/unImnr+VD0TrXqphonIp/uqhpQv X1FIXFUuIpw2Dl77qDZbJgrykwat0ykXRcIjSsXmbzE= ) ; Key ID = 26041 openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210506022126 20210406015916 26041 openpgp.org. eOPsptWKcqWy2HwA8N3iucre4FhjwJH6bnBXjJE8s8Ol2fWrQmoPDP/HaN+L+nV01Bww1upPIyQS 01pnbROdgKUCjGhC97cvpkxKdeshHt6bSAcbJp1B+SgdJ9GxfNU5UyG8uk/JB6nhRPEVAMNdQRZe d6mvDV0u5f1wrhcUW4io6G5JQy35QntUctl0XZBiLVM1Qpjo758AFIsQFA8QpxLnZqhDkSHzomRc oFX9Rbiy8hsmHixU+bffv1AJf+AH7skx+UYktnNb6t10T0J551iZecdELrTcKc5iIeVg321ajbZD 7ViPzLu8pmIvM+fcep2EBOBuYZ58OcozT/4gRQ== ) openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210506022126 20210406015916 63435 openpgp.org. iPq7ETgBrh+W9Kq2FmCcouinqUHCsHzCct8onsdEjlrkCi8X9GvD4c2vZ6y5/N5DFciehm45a0Mf pv07CIK6VCtZLxxBb0b9PfYfRA2Ou3xzA2spiIa72hdng59+/zxw3FH37TArweNzGyABCQ28p4Ob T4WEojV6FKs755H6ylHhW8i8mKTELuOewJSquncdROOzugM9AWUa9Yi2kBRX3YxW31jAhFBNEHRR ZUdmoCCPF99pZTjZo7JPfPAyHwZHkHnlTTjVTnRY+JWgbaOYAIfPpl14BFA8GTQLO1kIehAJr4N5 PB7AMm3fgS2SpjKdlpHTuaIMK2DmLZUquGhbMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for openpgp.org
	`openpgp.org. 120 IN DNSKEY ( 256 3 8 AwEAAcmKm3eN4EiVyopunUJsjgnYiChWaGryi39e2c+Cvw1EvH58Aa1yNxkE9l0HprUjWN3xCgrp ocHlfcJsIveJb7yzG9pUXbuRPSB/6uon+cS5ulZrPS0L1kW5+2YCRlV7Nui7uab+N+AAikrUTuyE dtWdpo8o7B9b6A4iiH3CR5pyt0YpzAVCtzyDn2D+1qh0E9aeoklRjal3Z5VPY9COBbHf+Qbd4dd8 ev197DbLUJVQlfhLIEQbqagbwTpnSDyF++DLoY23P2NHGCxP7ZH3GLlJNhGYuHhGpF7JRgUcWhPi yhUCvmaaWnXu2byYsEBa0XhrFxvAKzeowgY5s4+WiKU= ) ; Key ID = 63435`
	`openpgp.org. 120 IN DNSKEY ( 257 3 8 AwEAAb1qvXeWZyisHjP4sfRppmYkS+yqkfKshPFDi4Gjm7vOxdpMzWE0zJw71nb4ZHvK1I2CJama HWNuO/75dltEe1/BA3tVr63YMDtz7B7K/nyy+o7hSbVAV+a1z+MzX80A0LnqY3EM25/kHuzT1AaZ mm62H8BKw5xcJK1d0SRz5EwRpI5x2oyj+w6r/x1pj7tJwcx/8NUz3bPN3WpZ5GQelfP0c6MJxKL1 vTQuXwm6rrIpkGF4FO7Z1eiGBgW24jovAZp6EmiPkNo9CBfa/unImnr+VD0TrXqphonIp/uqhpQv X1FIXFUuIpw2Dl77qDZbJgrykwat0ykXRcIjSsXmbzE= ) ; Key ID = 26041`
	DNSKEY=26041/SEP is now in the chain-of-trust
	DS=26041/SHA-256 verifies DNSKEY=26041/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210506022126 20210406015916 26041 openpgp.org. eOPsptWKcqWy2HwA8N3iucre4FhjwJH6bnBXjJE8s8Ol2fWrQmoPDP/HaN+L+nV01Bww1upPIyQS 01pnbROdgKUCjGhC97cvpkxKdeshHt6bSAcbJp1B+SgdJ9GxfNU5UyG8uk/JB6nhRPEVAMNdQRZe d6mvDV0u5f1wrhcUW4io6G5JQy35QntUctl0XZBiLVM1Qpjo758AFIsQFA8QpxLnZqhDkSHzomRc oFX9Rbiy8hsmHixU+bffv1AJf+AH7skx+UYktnNb6t10T0J551iZecdELrTcKc5iIeVg321ajbZD 7ViPzLu8pmIvM+fcep2EBOBuYZ58OcozT/4gRQ== )`
	`openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210506022126 20210406015916 63435 openpgp.org. iPq7ETgBrh+W9Kq2FmCcouinqUHCsHzCct8onsdEjlrkCi8X9GvD4c2vZ6y5/N5DFciehm45a0Mf pv07CIK6VCtZLxxBb0b9PfYfRA2Ou3xzA2spiIa72hdng59+/zxw3FH37TArweNzGyABCQ28p4Ob T4WEojV6FKs755H6ylHhW8i8mKTELuOewJSquncdROOzugM9AWUa9Yi2kBRX3YxW31jAhFBNEHRR ZUdmoCCPF99pZTjZo7JPfPAyHwZHkHnlTTjVTnRY+JWgbaOYAIfPpl14BFA8GTQLO1kIehAJr4N5 PB7AMm3fgS2SpjKdlpHTuaIMK2DmLZUquGhbMA== )`
	RRSIG=26041 and DNSKEY=26041/SEP verifies the DNSKEY RRset
	RRSIG=63435 and DNSKEY=63435 verifies the DNSKEY RRset
	DNSKEY=63435 is now in the chain-of-trust
	Query to ns2.swcp.com for keys.openpgp.org/A
	Received 513 bytes from 216.243.105.246
	;; Answer received from 216.243.105.246 (513 bytes) ;; HEADER SECTION ;; id = 7327 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) keys.openpgp.org. 120 IN NS ns-cloud-a2.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a3.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a1.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a4.googledomains.com. keys.openpgp.org. 120 IN DS ( 14555 8 2 f7b4a72b3f6ee38abc9f3a30c94080a5105df5ffd923c980447f45e39959f4d3 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210506040129 20210406030717 63435 openpgp.org. oB3UGeR/Szsb31VhA/bA8iOd62jTiz/C2RUkV7zPGO+A+d4zwmmYwvStAkbuOcQ0OsY59n7sGjUF 791MF1YR/iqBHxTzQhkpobmKujKGOk8Wm7LJnfYpU+XPSFFpLvMPfB6Z4g+GXq85SWslY1lVeh4C bUh9eQssYUHivZHL3Ya4rFuuq5nZ5c6QLUrsT6d7koOaCIAuDxl4iRr2+aZJqtqmNJCeC2H9kIH2 V3vpJwgn5gm2HLFaU2KPWXX2Q1+KuA4Pj6wz3Cn3DNg3+cFciLSYG6jjWW6ywRDPwI7+J5lRyacD u0R/7M2pKRnXaJK07kG3PP8xTgIQ317iI67pGw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.swcp.com for keys.openpgp.org/DNSKEY
	Received 513 bytes from 216.243.105.246
	;; Answer received from 216.243.105.246 (513 bytes) ;; HEADER SECTION ;; id = 34218 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) keys.openpgp.org. 120 IN NS ns-cloud-a1.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a4.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a3.googledomains.com. keys.openpgp.org. 120 IN NS ns-cloud-a2.googledomains.com. keys.openpgp.org. 120 IN DS ( 14555 8 2 f7b4a72b3f6ee38abc9f3a30c94080a5105df5ffd923c980447f45e39959f4d3 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210506040129 20210406030717 63435 openpgp.org. oB3UGeR/Szsb31VhA/bA8iOd62jTiz/C2RUkV7zPGO+A+d4zwmmYwvStAkbuOcQ0OsY59n7sGjUF 791MF1YR/iqBHxTzQhkpobmKujKGOk8Wm7LJnfYpU+XPSFFpLvMPfB6Z4g+GXq85SWslY1lVeh4C bUh9eQssYUHivZHL3Ya4rFuuq5nZ5c6QLUrsT6d7koOaCIAuDxl4iRr2+aZJqtqmNJCeC2H9kIH2 V3vpJwgn5gm2HLFaU2KPWXX2Q1+KuA4Pj6wz3Cn3DNg3+cFciLSYG6jjWW6ywRDPwI7+J5lRyacD u0R/7M2pKRnXaJK07kG3PP8xTgIQ317iI67pGw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone keys.openpgp.org

keys.openpgp.org

	Checking DS between openpgp.org and keys.openpgp.org
	Query to kitsune.swcp.com for keys.openpgp.org/DS
	Received 392 bytes from 198.59.115.2
	;; Answer received from 198.59.115.2 (392 bytes) ;; HEADER SECTION ;; id = 23899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DS ;; ANSWER SECTION (2 records) keys.openpgp.org. 120 IN DS ( 14555 8 2 f7b4a72b3f6ee38abc9f3a30c94080a5105df5ffd923c980447f45e39959f4d3 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210506040129 20210406030717 63435 openpgp.org. oB3UGeR/Szsb31VhA/bA8iOd62jTiz/C2RUkV7zPGO+A+d4zwmmYwvStAkbuOcQ0OsY59n7sGjUF 791MF1YR/iqBHxTzQhkpobmKujKGOk8Wm7LJnfYpU+XPSFFpLvMPfB6Z4g+GXq85SWslY1lVeh4C bUh9eQssYUHivZHL3Ya4rFuuq5nZ5c6QLUrsT6d7koOaCIAuDxl4iRr2+aZJqtqmNJCeC2H9kIH2 V3vpJwgn5gm2HLFaU2KPWXX2Q1+KuA4Pj6wz3Cn3DNg3+cFciLSYG6jjWW6ywRDPwI7+J5lRyacD u0R/7M2pKRnXaJK07kG3PP8xTgIQ317iI67pGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for keys.openpgp.org in the openpgp.org zone
	DS=14555/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210506040129 20210406030717 63435 openpgp.org. oB3UGeR/Szsb31VhA/bA8iOd62jTiz/C2RUkV7zPGO+A+d4zwmmYwvStAkbuOcQ0OsY59n7sGjUF 791MF1YR/iqBHxTzQhkpobmKujKGOk8Wm7LJnfYpU+XPSFFpLvMPfB6Z4g+GXq85SWslY1lVeh4C bUh9eQssYUHivZHL3Ya4rFuuq5nZ5c6QLUrsT6d7koOaCIAuDxl4iRr2+aZJqtqmNJCeC2H9kIH2 V3vpJwgn5gm2HLFaU2KPWXX2Q1+KuA4Pj6wz3Cn3DNg3+cFciLSYG6jjWW6ywRDPwI7+J5lRyacD u0R/7M2pKRnXaJK07kG3PP8xTgIQ317iI67pGw== )`
	RRSIG=63435 and DNSKEY=63435 verifies the DS RRset
	DS=14555/SHA-256 is now in the chain-of-trust
	`keys.openpgp.org. 120 IN DS ( 14555 8 2 f7b4a72b3f6ee38abc9f3a30c94080a5105df5ffd923c980447f45e39959f4d3 )`
	Query to ns-cloud-a1.googledomains.com for keys.openpgp.org/DNSKEY
	Received 773 bytes from 216.239.32.106
	;; Answer received from 216.239.32.106 (773 bytes) ;; HEADER SECTION ;; id = 52168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DNSKEY ;; ANSWER SECTION (3 records) keys.openpgp.org. 300 IN DNSKEY ( 256 3 8 AwEAAYqp+yvfn/5VVS4Ew/n8UD0by819IPvZ94M+M/DJwUUi6n69ltvfLJWVf+v4S2RPorWGJioq j23qpMq3Wglxb2fgI62OlFvY/LpUuPQJNprplIyl2ye+AWjR3wRKdYqj5sbnyHqHzCC07zwigWZW foojIWo4Fzf0YUh5iCHg6M0/ ) ; Key ID = 31575 keys.openpgp.org. 300 IN DNSKEY ( 257 3 8 AwEAAYudcCsltTKqpGfNWgQ113BVCOdQZVKnm2AuOK6+T5fkGkDE/bambQTOQpD4ejyYe6Ulh5DW AgDMr7nLXdMUgy0fy4O+SdWgpiI5EPm1jIGqk8t9LOoQQcl0S5gPLOOJX6/zBrxaM99f1pO8kNRp AtnjxS90vmmq5wTgddIVeV/j08cHell1BFjhXxXUgLeh18icsTcQKskGmrs5rLuA/6G78vPBqvNW M5IqI25GOvxFmKelS/OOTuKfp7RPWw/RlpfkD7RTBjzfAU8vxy8ZviUDB4HDjIrgpAYRfH/2nJ8X gBeUxmY8OMwpGmckqe+dG+1PcaMz/cMvNQ7vQOa7I0E= ) ; Key ID = 14555 keys.openpgp.org. 300 IN RRSIG ( DNSKEY 8 3 300 20210509205720 20210417205720 14555 keys.openpgp.org. DiWCr9/BC4hvz4C3gqWRR5coLV+ODkwlVbeYjNSnWtInLvQMkK4EE61A9ZU1eT/5E22RIP0YeHY8 d0u/Wk0W8k9uGGTs0pwJ5kzIrL9u6+/Ec0jjlANIZPLsKf6uvqvYf2rcM6yvR4SawUY5XN8oUOhp HmiwiVY6h9V7yIIYv15o13DSJpGLTzj6cKrDrNel0TZx+jpVVFUHLIpjJ5KkpmsbVOHyhVKULQ9M TobuXhE1ulQOqk6MMP9MO5JzjXbGXGVbDWPA/7M0Y99xYe9xLkkh3mR2LFt1P0CJrxBFz7ZgJfsF TmgOES4GJM7uw+rDg4oxwqCmoIjA2Ryc4HONDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for keys.openpgp.org
	`keys.openpgp.org. 300 IN DNSKEY ( 256 3 8 AwEAAYqp+yvfn/5VVS4Ew/n8UD0by819IPvZ94M+M/DJwUUi6n69ltvfLJWVf+v4S2RPorWGJioq j23qpMq3Wglxb2fgI62OlFvY/LpUuPQJNprplIyl2ye+AWjR3wRKdYqj5sbnyHqHzCC07zwigWZW foojIWo4Fzf0YUh5iCHg6M0/ ) ; Key ID = 31575`
	`keys.openpgp.org. 300 IN DNSKEY ( 257 3 8 AwEAAYudcCsltTKqpGfNWgQ113BVCOdQZVKnm2AuOK6+T5fkGkDE/bambQTOQpD4ejyYe6Ulh5DW AgDMr7nLXdMUgy0fy4O+SdWgpiI5EPm1jIGqk8t9LOoQQcl0S5gPLOOJX6/zBrxaM99f1pO8kNRp AtnjxS90vmmq5wTgddIVeV/j08cHell1BFjhXxXUgLeh18icsTcQKskGmrs5rLuA/6G78vPBqvNW M5IqI25GOvxFmKelS/OOTuKfp7RPWw/RlpfkD7RTBjzfAU8vxy8ZviUDB4HDjIrgpAYRfH/2nJ8X gBeUxmY8OMwpGmckqe+dG+1PcaMz/cMvNQ7vQOa7I0E= ) ; Key ID = 14555`
	DNSKEY=14555/SEP is now in the chain-of-trust
	DS=14555/SHA-256 verifies DNSKEY=14555/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`keys.openpgp.org. 300 IN RRSIG ( DNSKEY 8 3 300 20210509205720 20210417205720 14555 keys.openpgp.org. DiWCr9/BC4hvz4C3gqWRR5coLV+ODkwlVbeYjNSnWtInLvQMkK4EE61A9ZU1eT/5E22RIP0YeHY8 d0u/Wk0W8k9uGGTs0pwJ5kzIrL9u6+/Ec0jjlANIZPLsKf6uvqvYf2rcM6yvR4SawUY5XN8oUOhp HmiwiVY6h9V7yIIYv15o13DSJpGLTzj6cKrDrNel0TZx+jpVVFUHLIpjJ5KkpmsbVOHyhVKULQ9M TobuXhE1ulQOqk6MMP9MO5JzjXbGXGVbDWPA/7M0Y99xYe9xLkkh3mR2LFt1P0CJrxBFz7ZgJfsF TmgOES4GJM7uw+rDg4oxwqCmoIjA2Ryc4HONDA== )`
	RRSIG=14555 and DNSKEY=14555/SEP verifies the DNSKEY RRset
	DNSKEY=31575 is now in the chain-of-trust
	Query to ns-cloud-a4.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.38.106
	;; Answer received from 216.239.38.106 (237 bytes) ;; HEADER SECTION ;; id = 6567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-a4.googledomains.com is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns-cloud-a3.googledomains.com for keys.openpgp.org/SOA
	Received 582 bytes from 216.239.36.106
	;; Answer received from 216.239.36.106 (582 bytes) ;; HEADER SECTION ;; id = 27074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN SOA ;; ANSWER SECTION (2 records) keys.openpgp.org. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 7 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) keys.openpgp.org. 21600 IN RRSIG ( SOA 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. gM+NfbAJo53y6osagPHZWy+jt8HaCyORfANPgFm0lKB21jMBTpL9mb1N4beXGnU3n8kfwq7D24gu PS+xCVOWDACOBdcTrUvavLq/lodsQohKLVh4QH3Yq2svMjjx7ydFr97ZRrvAkD5Zy7Ni7h4Yfin0 cUgW1JHxoIZ0MAesUWI= ) ;; AUTHORITY SECTION (5 records) keys.openpgp.org. 21600 IN NS ns-cloud-a1.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a2.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a3.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a4.googledomains.com. keys.openpgp.org. 21600 IN RRSIG ( NS 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. dIlYP4nXSi+6yIPsKMSoSySoCtkvszlpt4/IKP9s45XBdnvJ0hWmyeP1tCGxtZxOOBaRUmOOgjAr JsAyffwWv//69Jht6FVa5p7+LhYh4R/MpvlJnYJfpfQu9QY2chxMy0uMN76fDxjuUkZt7tbvGjah R/OiDaCjZRkVCSDl0ik= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-a1.googledomains.com for keys.openpgp.org/SOA
	Received 582 bytes from 216.239.32.106
	;; Answer received from 216.239.32.106 (582 bytes) ;; HEADER SECTION ;; id = 9393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN SOA ;; ANSWER SECTION (2 records) keys.openpgp.org. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 7 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) keys.openpgp.org. 21600 IN RRSIG ( SOA 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. gM+NfbAJo53y6osagPHZWy+jt8HaCyORfANPgFm0lKB21jMBTpL9mb1N4beXGnU3n8kfwq7D24gu PS+xCVOWDACOBdcTrUvavLq/lodsQohKLVh4QH3Yq2svMjjx7ydFr97ZRrvAkD5Zy7Ni7h4Yfin0 cUgW1JHxoIZ0MAesUWI= ) ;; AUTHORITY SECTION (5 records) keys.openpgp.org. 21600 IN NS ns-cloud-a1.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a2.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a3.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a4.googledomains.com. keys.openpgp.org. 21600 IN RRSIG ( NS 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. dIlYP4nXSi+6yIPsKMSoSySoCtkvszlpt4/IKP9s45XBdnvJ0hWmyeP1tCGxtZxOOBaRUmOOgjAr JsAyffwWv//69Jht6FVa5p7+LhYh4R/MpvlJnYJfpfQu9QY2chxMy0uMN76fDxjuUkZt7tbvGjah R/OiDaCjZRkVCSDl0ik= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-a2.googledomains.com for keys.openpgp.org/SOA
	Received 582 bytes from 216.239.34.106
	;; Answer received from 216.239.34.106 (582 bytes) ;; HEADER SECTION ;; id = 15848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN SOA ;; ANSWER SECTION (2 records) keys.openpgp.org. 21600 IN SOA ( ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 7 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) keys.openpgp.org. 21600 IN RRSIG ( SOA 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. gM+NfbAJo53y6osagPHZWy+jt8HaCyORfANPgFm0lKB21jMBTpL9mb1N4beXGnU3n8kfwq7D24gu PS+xCVOWDACOBdcTrUvavLq/lodsQohKLVh4QH3Yq2svMjjx7ydFr97ZRrvAkD5Zy7Ni7h4Yfin0 cUgW1JHxoIZ0MAesUWI= ) ;; AUTHORITY SECTION (5 records) keys.openpgp.org. 21600 IN NS ns-cloud-a1.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a2.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a3.googledomains.com. keys.openpgp.org. 21600 IN NS ns-cloud-a4.googledomains.com. keys.openpgp.org. 21600 IN RRSIG ( NS 8 3 21600 20210509205720 20210417205720 31575 keys.openpgp.org. dIlYP4nXSi+6yIPsKMSoSySoCtkvszlpt4/IKP9s45XBdnvJ0hWmyeP1tCGxtZxOOBaRUmOOgjAr JsAyffwWv//69Jht6FVa5p7+LhYh4R/MpvlJnYJfpfQu9QY2chxMy0uMN76fDxjuUkZt7tbvGjah R/OiDaCjZRkVCSDl0ik= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-a4.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.38.106
	;; Answer received from 216.239.38.106 (237 bytes) ;; HEADER SECTION ;; id = 30680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= )`
	RRSIG=31575 and DNSKEY=31575 verifies the A RRset

keys.openpgp.org

	Query to ns-cloud-a1.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.32.106
	;; Answer received from 216.239.32.106 (237 bytes) ;; HEADER SECTION ;; id = 39193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-a1.googledomains.com is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns-cloud-a1.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.32.106
	;; Answer received from 216.239.32.106 (237 bytes) ;; HEADER SECTION ;; id = 50783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= )`
	RRSIG=31575 and DNSKEY=31575 verifies the A RRset

keys.openpgp.org

	Query to ns-cloud-a2.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.34.106
	;; Answer received from 216.239.34.106 (237 bytes) ;; HEADER SECTION ;; id = 27514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-a2.googledomains.com is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns-cloud-a2.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.34.106
	;; Answer received from 216.239.34.106 (237 bytes) ;; HEADER SECTION ;; id = 5482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= )`
	RRSIG=31575 and DNSKEY=31575 verifies the A RRset

keys.openpgp.org

	Query to ns-cloud-a3.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.36.106
	;; Answer received from 216.239.36.106 (237 bytes) ;; HEADER SECTION ;; id = 64789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-a3.googledomains.com is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns-cloud-a3.googledomains.com for keys.openpgp.org/A
	Received 237 bytes from 216.239.36.106
	;; Answer received from 216.239.36.106 (237 bytes) ;; HEADER SECTION ;; id = 19115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 8 3 3600 20210509205720 20210417205720 31575 keys.openpgp.org. FifUnZ/n54eCp3pmLrmqGT1wUa5iotmb5+Zd0kAagp4mZVmvUyarhaosjCRfKntLpVyUzxTw7cBr EyIVS9HYE9j69joalVMOpuznE3tvLsQNP7Vabe3aJS+5GTmIk2jf3vUPZERjy+eutHFBiYwyKi3m X4tMyRM4euuxcX7HBBY= )`
	RRSIG=31575 and DNSKEY=31575 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test keys.openpgp.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: