DNSSEC Analyzer - knot.nsd4.powerdns.delegations.wb.sidnlabs.nl

Domain Name:

Time: 2019-08-19 07:55:59 UTC, NTP stratum 4

Analyzing DNSSEC problems for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 9624 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190831000000 20190810000000 20326 . aqUzhXpgfWBkwR+s6UE8VT6RohWeWfyw1JD30Eqtc3LN113C/6ASGzzXw2fIMtod+w95D0ui+sOG MtH40kT96pV8ifUx6nkC4QcRxgAy5Pg7To39Pa/gwakDEDorruQHEjp2CJdL0dQ+yv6Iab0mUjCH hr/9xFtVf1sNT+6wHbzlJmUNxPsF6DAQcSwb59gGyjww/EcrYHzpDjZd1Zs6tXjH8g9Y8edQRJok HYHYuLeRKnjFzPTZgCZKnyqYesFH/sG17+b9v2wjy0uftpkGbRo4Klv+kFgonlMarDavJgRxm6JI GGhkDm53cChcWA02ciLrD1dX+Slckrd9iOiMyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190831000000 20190810000000 20326 . aqUzhXpgfWBkwR+s6UE8VT6RohWeWfyw1JD30Eqtc3LN113C/6ASGzzXw2fIMtod+w95D0ui+sOG MtH40kT96pV8ifUx6nkC4QcRxgAy5Pg7To39Pa/gwakDEDorruQHEjp2CJdL0dQ+yv6Iab0mUjCH hr/9xFtVf1sNT+6wHbzlJmUNxPsF6DAQcSwb59gGyjww/EcrYHzpDjZd1Zs6tXjH8g9Y8edQRJok HYHYuLeRKnjFzPTZgCZKnyqYesFH/sG17+b9v2wjy0uftpkGbRo4Klv+kFgonlMarDavJgRxm6JI GGhkDm53cChcWA02ciLrD1dX+Slckrd9iOiMyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to a.root-servers.net for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 671 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (671 bytes) ;; HEADER SECTION ;; id = 58919 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190901050000 20190819040000 59944 . JbHbzYCVjHwEslbHDWmqBNzYt19yJSeH56kYJo1ujkONUdSQ34NxyLXevrAAvNmT58iFG9lXsV/G 3DPF6QQD7m13V6GuMwilKE3/Zd1kEy0wWFnXW2lR3D+IAG0JfHDQIhTrAayQywTz4fxOyT7V+AGO 966wQpKg/zrUE6AqceDYzxqX2O+2FHiJ60pY87Lxo3pX2aC0DMZ+vV/skKx08rwDHw8C0iS+eR6l APeGGk7g9sT2Xf1qaJtL+h1x2/qDhbw89A8QFe0QjVKhlTbh1HwQ2b4OaGW5pRvINhFoWR4KnRy7 ZqtacqD4BSNUmJ84USw6Gwq2jUcNO2bvJNeAtQ== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to g.root-servers.net for nl/DNSKEY
	Received 628 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (628 bytes) ;; HEADER SECTION ;; id = 22231 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190901050000 20190819040000 59944 . JbHbzYCVjHwEslbHDWmqBNzYt19yJSeH56kYJo1ujkONUdSQ34NxyLXevrAAvNmT58iFG9lXsV/G 3DPF6QQD7m13V6GuMwilKE3/Zd1kEy0wWFnXW2lR3D+IAG0JfHDQIhTrAayQywTz4fxOyT7V+AGO 966wQpKg/zrUE6AqceDYzxqX2O+2FHiJ60pY87Lxo3pX2aC0DMZ+vV/skKx08rwDHw8C0iS+eR6l APeGGk7g9sT2Xf1qaJtL+h1x2/qDhbw89A8QFe0QjVKhlTbh1HwQ2b4OaGW5pRvINhFoWR4KnRy7 ZqtacqD4BSNUmJ84USw6Gwq2jUcNO2bvJNeAtQ== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to j.root-servers.net for nl/DS
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for nl/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190901050000 20190819040000 59944 . JbHbzYCVjHwEslbHDWmqBNzYt19yJSeH56kYJo1ujkONUdSQ34NxyLXevrAAvNmT58iFG9lXsV/G 3DPF6QQD7m13V6GuMwilKE3/Zd1kEy0wWFnXW2lR3D+IAG0JfHDQIhTrAayQywTz4fxOyT7V+AGO 966wQpKg/zrUE6AqceDYzxqX2O+2FHiJ60pY87Lxo3pX2aC0DMZ+vV/skKx08rwDHw8C0iS+eR6l APeGGk7g9sT2Xf1qaJtL+h1x2/qDhbw89A8QFe0QjVKhlTbh1HwQ2b4OaGW5pRvINhFoWR4KnRy7 ZqtacqD4BSNUmJ84USw6Gwq2jUcNO2bvJNeAtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20190901050000 20190819040000 59944 . JbHbzYCVjHwEslbHDWmqBNzYt19yJSeH56kYJo1ujkONUdSQ34NxyLXevrAAvNmT58iFG9lXsV/G 3DPF6QQD7m13V6GuMwilKE3/Zd1kEy0wWFnXW2lR3D+IAG0JfHDQIhTrAayQywTz4fxOyT7V+AGO 966wQpKg/zrUE6AqceDYzxqX2O+2FHiJ60pY87Lxo3pX2aC0DMZ+vV/skKx08rwDHw8C0iS+eR6l APeGGk7g9sT2Xf1qaJtL+h1x2/qDhbw89A8QFe0QjVKhlTbh1HwQ2b4OaGW5pRvINhFoWR4KnRy7 ZqtacqD4BSNUmJ84USw6Gwq2jUcNO2bvJNeAtQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (745 bytes) ;; HEADER SECTION ;; id = 33856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbevDMfROE8UgGqKkyPZ+5y5rtZBNA8OnoyWa45MfvIaV98WnzIu4dfsmgnmV2iUvQjCd7zT azE6Y8FTXhI6m3swr6QzTYzODHe9aY9adOthqoYg01dBALXQNJWagSfVxq1JrWOy1urAMnzB/Vur dVpBKUPHEo5pEL8ZmFzsVNwp ) ; Key ID = 17593 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190829000458 20190814123801 34112 nl. vwdqoKTMBks6pItdjHJhMsLgNb2iqD6hUJWab8e8KmaDswRUeBJ4t/uyIztElEZyWEyyM45XzISH k40CqtTyr+lUNimOcZMjAPmT4q7+icxdt/TEqnLl2NhQtqVpfW47uLAWdtnlmIDEKepomVmdt0uW fMAUqp53cYnyg0J6AlsQLvTMZsdEitu5PRqm6fgTyXhAJElEpWPZgLjIFZjcWNk7GiuChm7YeNPi 1aamWWK2F50JgeT3QPtX85DtgbL97fSZ8XEEE0DRSFIBWFu1TFSJDg9/Zx/vrugR7lpCfgWbi4WX xBzmm1Z70xoc4cs+ZSqAFNFZp0cDslWm1UUSbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbevDMfROE8UgGqKkyPZ+5y5rtZBNA8OnoyWa45MfvIaV98WnzIu4dfsmgnmV2iUvQjCd7zT azE6Y8FTXhI6m3swr6QzTYzODHe9aY9adOthqoYg01dBALXQNJWagSfVxq1JrWOy1urAMnzB/Vur dVpBKUPHEo5pEL8ZmFzsVNwp ) ; Key ID = 17593`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190829000458 20190814123801 34112 nl. vwdqoKTMBks6pItdjHJhMsLgNb2iqD6hUJWab8e8KmaDswRUeBJ4t/uyIztElEZyWEyyM45XzISH k40CqtTyr+lUNimOcZMjAPmT4q7+icxdt/TEqnLl2NhQtqVpfW47uLAWdtnlmIDEKepomVmdt0uW fMAUqp53cYnyg0J6AlsQLvTMZsdEitu5PRqm6fgTyXhAJElEpWPZgLjIFZjcWNk7GiuChm7YeNPi 1aamWWK2F50JgeT3QPtX85DtgbL97fSZ8XEEE0DRSFIBWFu1TFSJDg9/Zx/vrugR7lpCfgWbi4WX xBzmm1Z70xoc4cs+ZSqAFNFZp0cDslWm1UUSbw== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=17593 is now in the chain-of-trust
	Query to sns-pb.isc.org for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 426 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (426 bytes) ;; HEADER SECTION ;; id = 14982 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190825084514 20190811163802 17593 nl. OHWSo00UKWxetKAd7TAGUpG1dVn+wM7L/eHDps/R5AWUGUqdbG9m4XaXmT0BOxY9PjOgL7PMmEkg DQhu3RIUL0LXxxX6QQO54MZYxPam3MCR+gwsNBtDQBOEhOTChtthTFMQJ7COciWZ/NI22UMSi36O 8YUsfLg2qmA7ntECZs8= ) ;; ADDITIONAL SECTION (5 records) ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sns-pb.isc.org for sidnlabs.nl/DNSKEY
	Received 381 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (381 bytes) ;; HEADER SECTION ;; id = 3656 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190825084514 20190811163802 17593 nl. OHWSo00UKWxetKAd7TAGUpG1dVn+wM7L/eHDps/R5AWUGUqdbG9m4XaXmT0BOxY9PjOgL7PMmEkg DQhu3RIUL0LXxxX6QQO54MZYxPam3MCR+gwsNBtDQBOEhOTChtthTFMQJ7COciWZ/NI22UMSi36O 8YUsfLg2qmA7ntECZs8= ) ;; ADDITIONAL SECTION (5 records) ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (250 bytes) ;; HEADER SECTION ;; id = 31012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190825084514 20190811163802 17593 nl. OHWSo00UKWxetKAd7TAGUpG1dVn+wM7L/eHDps/R5AWUGUqdbG9m4XaXmT0BOxY9PjOgL7PMmEkg DQhu3RIUL0LXxxX6QQO54MZYxPam3MCR+gwsNBtDQBOEhOTChtthTFMQJ7COciWZ/NI22UMSi36O 8YUsfLg2qmA7ntECZs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190825084514 20190811163802 17593 nl. OHWSo00UKWxetKAd7TAGUpG1dVn+wM7L/eHDps/R5AWUGUqdbG9m4XaXmT0BOxY9PjOgL7PMmEkg DQhu3RIUL0LXxxX6QQO54MZYxPam3MCR+gwsNBtDQBOEhOTChtthTFMQJ7COciWZ/NI22UMSi36O 8YUsfLg2qmA7ntECZs8= )`
	RRSIG=17593 and DNSKEY=17593 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns1.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 934 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (934 bytes) ;; HEADER SECTION ;; id = 42929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (4 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190911104723 20190812095603 20853 sidnlabs.nl. op+/jk6Z1ZL/C95RtYBWxXtHeywsOfa9fjLXrf6tRjQ1377CzzxDM3A6C6XLWzfp+uVZxZwvxHm8 2iR/W1sBNenLIZgVwGzNluoxZisO5MY5T5f45HvtTdKfkCbHAN31kDEGD7XXVgwXFCa2msftuo+G wsvf+bp1xxT364rXZxA= ) sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190911104723 20190812095603 52720 sidnlabs.nl. aZDxSQ+Sm/UNPFk12aFXFdLWN9Pzc3/YBlOhk+1hPFIgqbvxclbExcSxyiDU0jmeXTEtBBqjxyrg QqffDVIl3qQO75Qyik/sVJiir+cOZd97hOih99SB9rnFiLdX8kKKeJ9x336CFjqFP23Z2X99Os3U HoTBsfrTszZOFLIk575dhHZLMO+v/LnA248AjWJc2I9U/qWlWgUrNF4me9wgsHwzcJRd6wWwKmSU cihOWBu//pdiwSBrmVm4HUYU9BPFdxXvB7IS4NxlKUUYgxwXnzXHk3Xap7rn6mV7uoLosWElRl19 g6YWRYh3sijZs58qNTsPPvEr/hjroEHQW/SlBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190911104723 20190812095603 20853 sidnlabs.nl. op+/jk6Z1ZL/C95RtYBWxXtHeywsOfa9fjLXrf6tRjQ1377CzzxDM3A6C6XLWzfp+uVZxZwvxHm8 2iR/W1sBNenLIZgVwGzNluoxZisO5MY5T5f45HvtTdKfkCbHAN31kDEGD7XXVgwXFCa2msftuo+G wsvf+bp1xxT364rXZxA= )`
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190911104723 20190812095603 52720 sidnlabs.nl. aZDxSQ+Sm/UNPFk12aFXFdLWN9Pzc3/YBlOhk+1hPFIgqbvxclbExcSxyiDU0jmeXTEtBBqjxyrg QqffDVIl3qQO75Qyik/sVJiir+cOZd97hOih99SB9rnFiLdX8kKKeJ9x336CFjqFP23Z2X99Os3U HoTBsfrTszZOFLIk575dhHZLMO+v/LnA248AjWJc2I9U/qWlWgUrNF4me9wgsHwzcJRd6wWwKmSU cihOWBu//pdiwSBrmVm4HUYU9BPFdxXvB7IS4NxlKUUYgxwXnzXHk3Xap7rn6mV7uoLosWElRl19 g6YWRYh3sijZs58qNTsPPvEr/hjroEHQW/SlBg== )`
	RRSIG=20853 and DNSKEY=20853 verifies the DNSKEY RRset
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns2.sidn.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Received 2325 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2325 bytes) ;; HEADER SECTION ;; id = 48910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190917191456 20190818181622 20853 sidnlabs.nl. lrq7VYSDWvGPRN83lm2JKXJz54xu+H72IKVrG/Yk5VHzc1PvYztqP1fKaFJMREBp78Opb2bHKalU 51IpDKdZjL3ugrErLP1qyxZsmjiX9P2wLvCpZNeKns7wJf5YyMMm/3ZdSBntkv8/Svfqm2RvKq02 J8FBR8PjGFOCg+eLsxk= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190917122255 20190818114929 20853 sidnlabs.nl. LglVPUJKE0ce/DhaHmBWHiDroh5O6BuPGh93qYfuij0KRRRTMHLQAWhBMuG6W4AJtloxdTYO1o/d 0H6KXVK6NewapYGcZmD0oCsSVC2LM+PAIS5yYa8TdQghoN6yzeTorSQ0Dc8okYiCCaQvJ+E5Pl73 UyNU6N0FMkMb9fVbuRE= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190917122255 20190818114929 20853 sidnlabs.nl. WvU967J9tdtB/3bGYQtyTmHy8tz1doEw5Isak2hu62G3mrC9F2j+mvY+Ua+4Y6pYXOSXMP1ih6sU PHHz0fjxP1XANM5Dn3e6sZ6jolXW9OtKqciEXwpDA6VeMoBFwXlqQX2WCCzk2Ymk7HSEZMWVpvvR mi4XENOZvf1VVp+ikTo= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190907025327 20190808020220 20853 sidnlabs.nl. X6yr8bXNPMXkFVa5a9q0GoEBtL4E25k7+jhm9M2XcwOfxvuMzvOReh0xzcDM+DCoaGKrfzYxA7rn eSuZo6gMmJRkkeJIUb/dG8NofjffRgzHEH6kG08lQ4gkYAaqBHGfjuUetBG5yDFbMq750MEmeqdl EZBnBF/ZhIMjYxS5Lo4= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190907025327 20190808020220 20853 sidnlabs.nl. qRx+o1dUk+A3qc9ng+OMPoYEfxLSMXGg8L7bHvoQe9WvxyvR0jUaC91FzYGIz/eNUSJz4cLZgXDp xEvkiDSKVFiFeEnWAH/Yf/2RZB2LEyIQaz6KxDkHuOtpunwW4iLQgpCEizBQjH77pN+4MQLY8nvu LD8DkiT48ZwZjbKZS4c= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190829064223 20190730062642 20853 sidnlabs.nl. upVds9FPwTwwt62ajRqimHIia5x/3aWAM5WEKzL63n8ysN63AogXQgFNABGZ7OtZgrPEWgRJqh5m S1CV4XKsg0xhYDZoSNPhYHgd3RDNXsF4UySVEBJEhTqGR3J3Eq0+2AEBET4asTiqZiIgoYRW4Wjs SI5mB33jtDZIyOdxaww= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190829064223 20190730062642 20853 sidnlabs.nl. QS0VBWxSFhs8vI+4jzPC+LM+5lYJl+ybJXcM/RdEfvDwQICtAgXXy0tMcEt2CMgM/Plh5x1NSKcW pp+LUr9NHwJDBsCD+GLFTPWQB2+JMcvNtchjJJi9JZbZgFW9PaNAWvmDbEXq/8TTQJBtMqVyP8dM 1nhV3tu5rzjHcMG8Yu4= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190910195011 20190811190502 20853 sidnlabs.nl. Z7FtUEe3PTAFuh1YkaMQsvz8o1ygnksbE4wdqYYpv+Gy32DJYzICq2kNi/WT2ahi/Bom48AoYp4B WYQUXhts9K+Vf6GHcRrrVIiOrPMJN2pVa4L0c3bNjcgCYKFpLCAI9q/h4EiFaR+Da2XlW5Va3mBX nB1rgU52EcZMYruGMRI= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190910195011 20190811190502 20853 sidnlabs.nl. eMQmq98A8ohNGJu2zJhmct110fC4q3K9FkSBcq3t+sJkpM509xYvuEOhVcmfrCg8u5MZnmX5HSXz T5LHsdCP95xa7P2lCSdyM9fKbIhjD1hnsodz9tAS+R7q6XPgyOT7Q9oHKX8DxB6JvPC7XvMCVIuu QeITCyYSvSEt9jYDnyw= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190827140111 20190728134729 20853 sidnlabs.nl. x2oVuxJ52qb4yD0RzF4QVcp+8L/Jv0GzTtp8wxavOFRNFY+QJGiLRTi+rz+dsY3nF/A8wz/a5VHI fFf6VSRrmMaDoi7eVirMvoTpT5kzqvRIdWSK/ib7H4hw9clIAX05e31T3XOdZG0l8C2/CsVPaqoF nOcpH6HQH86FBlxlybs= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190827140111 20190728134729 20853 sidnlabs.nl. QA6xetg5FVABW4xS0nsS7IDRR66OH2LfFfldr2BMjb1xMQNU7T2Scj6vWFudl/jGyziEPkjfL6z/ uL6ROK7S0X2P/cJT0uAH2WsfYxJrs2sxhMY1qNL0SQVHwaXqc6vZhXtZQEO6q2tdbAmCo0gD79L4 StIWrwqWsMjyUVWtST0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Error querying ns2.sidn.nl/2001:610:0:800d:0:0:0:5 for wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 2294 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2294 bytes) ;; HEADER SECTION ;; id = 52002 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190917191456 20190818181622 20853 sidnlabs.nl. lrq7VYSDWvGPRN83lm2JKXJz54xu+H72IKVrG/Yk5VHzc1PvYztqP1fKaFJMREBp78Opb2bHKalU 51IpDKdZjL3ugrErLP1qyxZsmjiX9P2wLvCpZNeKns7wJf5YyMMm/3ZdSBntkv8/Svfqm2RvKq02 J8FBR8PjGFOCg+eLsxk= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190917122255 20190818114929 20853 sidnlabs.nl. LglVPUJKE0ce/DhaHmBWHiDroh5O6BuPGh93qYfuij0KRRRTMHLQAWhBMuG6W4AJtloxdTYO1o/d 0H6KXVK6NewapYGcZmD0oCsSVC2LM+PAIS5yYa8TdQghoN6yzeTorSQ0Dc8okYiCCaQvJ+E5Pl73 UyNU6N0FMkMb9fVbuRE= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190917122255 20190818114929 20853 sidnlabs.nl. WvU967J9tdtB/3bGYQtyTmHy8tz1doEw5Isak2hu62G3mrC9F2j+mvY+Ua+4Y6pYXOSXMP1ih6sU PHHz0fjxP1XANM5Dn3e6sZ6jolXW9OtKqciEXwpDA6VeMoBFwXlqQX2WCCzk2Ymk7HSEZMWVpvvR mi4XENOZvf1VVp+ikTo= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190907025327 20190808020220 20853 sidnlabs.nl. X6yr8bXNPMXkFVa5a9q0GoEBtL4E25k7+jhm9M2XcwOfxvuMzvOReh0xzcDM+DCoaGKrfzYxA7rn eSuZo6gMmJRkkeJIUb/dG8NofjffRgzHEH6kG08lQ4gkYAaqBHGfjuUetBG5yDFbMq750MEmeqdl EZBnBF/ZhIMjYxS5Lo4= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190907025327 20190808020220 20853 sidnlabs.nl. qRx+o1dUk+A3qc9ng+OMPoYEfxLSMXGg8L7bHvoQe9WvxyvR0jUaC91FzYGIz/eNUSJz4cLZgXDp xEvkiDSKVFiFeEnWAH/Yf/2RZB2LEyIQaz6KxDkHuOtpunwW4iLQgpCEizBQjH77pN+4MQLY8nvu LD8DkiT48ZwZjbKZS4c= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190829064223 20190730062642 20853 sidnlabs.nl. upVds9FPwTwwt62ajRqimHIia5x/3aWAM5WEKzL63n8ysN63AogXQgFNABGZ7OtZgrPEWgRJqh5m S1CV4XKsg0xhYDZoSNPhYHgd3RDNXsF4UySVEBJEhTqGR3J3Eq0+2AEBET4asTiqZiIgoYRW4Wjs SI5mB33jtDZIyOdxaww= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190829064223 20190730062642 20853 sidnlabs.nl. QS0VBWxSFhs8vI+4jzPC+LM+5lYJl+ybJXcM/RdEfvDwQICtAgXXy0tMcEt2CMgM/Plh5x1NSKcW pp+LUr9NHwJDBsCD+GLFTPWQB2+JMcvNtchjJJi9JZbZgFW9PaNAWvmDbEXq/8TTQJBtMqVyP8dM 1nhV3tu5rzjHcMG8Yu4= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190910195011 20190811190502 20853 sidnlabs.nl. Z7FtUEe3PTAFuh1YkaMQsvz8o1ygnksbE4wdqYYpv+Gy32DJYzICq2kNi/WT2ahi/Bom48AoYp4B WYQUXhts9K+Vf6GHcRrrVIiOrPMJN2pVa4L0c3bNjcgCYKFpLCAI9q/h4EiFaR+Da2XlW5Va3mBX nB1rgU52EcZMYruGMRI= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190910195011 20190811190502 20853 sidnlabs.nl. eMQmq98A8ohNGJu2zJhmct110fC4q3K9FkSBcq3t+sJkpM509xYvuEOhVcmfrCg8u5MZnmX5HSXz T5LHsdCP95xa7P2lCSdyM9fKbIhjD1hnsodz9tAS+R7q6XPgyOT7Q9oHKX8DxB6JvPC7XvMCVIuu QeITCyYSvSEt9jYDnyw= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190827140111 20190728134729 20853 sidnlabs.nl. x2oVuxJ52qb4yD0RzF4QVcp+8L/Jv0GzTtp8wxavOFRNFY+QJGiLRTi+rz+dsY3nF/A8wz/a5VHI fFf6VSRrmMaDoi7eVirMvoTpT5kzqvRIdWSK/ib7H4hw9clIAX05e31T3XOdZG0l8C2/CsVPaqoF nOcpH6HQH86FBlxlybs= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190827140111 20190728134729 20853 sidnlabs.nl. QA6xetg5FVABW4xS0nsS7IDRR66OH2LfFfldr2BMjb1xMQNU7T2Scj6vWFudl/jGyziEPkjfL6z/ uL6ROK7S0X2P/cJT0uAH2WsfYxJrs2sxhMY1qNL0SQVHwaXqc6vZhXtZQEO6q2tdbAmCo0gD79L4 StIWrwqWsMjyUVWtST0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (262 bytes) ;; HEADER SECTION ;; id = 62594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190917191456 20190818181622 20853 sidnlabs.nl. lrq7VYSDWvGPRN83lm2JKXJz54xu+H72IKVrG/Yk5VHzc1PvYztqP1fKaFJMREBp78Opb2bHKalU 51IpDKdZjL3ugrErLP1qyxZsmjiX9P2wLvCpZNeKns7wJf5YyMMm/3ZdSBntkv8/Svfqm2RvKq02 J8FBR8PjGFOCg+eLsxk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190917191456 20190818181622 20853 sidnlabs.nl. lrq7VYSDWvGPRN83lm2JKXJz54xu+H72IKVrG/Yk5VHzc1PvYztqP1fKaFJMREBp78Opb2bHKalU 51IpDKdZjL3ugrErLP1qyxZsmjiX9P2wLvCpZNeKns7wJf5YyMMm/3ZdSBntkv8/Svfqm2RvKq02 J8FBR8PjGFOCg+eLsxk= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to nsd4.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Error querying nsd4.sidnlabs.nl/2a00:d78:0:712:94:198:159:33 for wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 897 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (897 bytes) ;; HEADER SECTION ;; id = 33455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to bind9.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Received 331 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (331 bytes) ;; HEADER SECTION ;; id = 22960 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 27424 8 2 e635adfda6d3dbbd21bf377333f1e220528010911e886e38577afed6a296ec83 ) powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. n7Pbxe+J66h2QVYyWty+49R7KbyRWIgChhZYCTDwkgn8MaVG5DLcbW0KARzjCI//Z/G786lnIt0G Aat7FR/cx1ZdQX1U5yOyYdnCMwPmkU4sW5KQuPYAfRD357u3gPNo9cFVsllj6v2zxj8ZyncMhS0L RgrZ5jlbZs4b3alGc8E= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to powerdns.sidnlabs.nl for delegations.wb.sidnlabs.nl/DNSKEY
	Error querying powerdns.sidnlabs.nl/2a00:d78:0:712:94:198:159:26 for delegations.wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 389 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (389 bytes) ;; HEADER SECTION ;; id = 22482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. 2l+B43VYcBCmdzKTTmFL89DLun54HzyFkq2xESpTzyqtj7ekfeZFQcpHuOrjl00G86qIC0G2Q8B6 WD/OwlJ+4fS2AbdfOk7h6Tg1ACqbG/0VnPU2zuPEEiddQoEBs1rlKJ1QNhoeuIcCfw1hUxxtdqGK 4Q4PFlwyfK4bWP0dKI4= ) delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAd2ljCav5IxUS5o6RMFi3ste1+TpW3dFi6ONZcF1n2cr4m1KjlopYTxs4pVca5J8+3iKWjp+ suGHFp1I0bcQY38paDEPSs+AbQFJQzhEygyn0ELmyv5jjDCgJX69eq4+lbSyrrFrm39kUHMMQXaS AUP3qJEbF8m88+l6Q4oJme7f ) ; Key ID = 39300 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found child zone delegations.wb.sidnlabs.nl
	Attempting to learn nameservers for delegations.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for delegations.wb.sidnlabs.nl/NS
	Received 343 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (343 bytes) ;; HEADER SECTION ;; id = 32460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; delegations.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) delegations.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. delegations.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. delegations.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. delegations.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. delegations.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. RRVa+zn5cjyoP/kh1Q1sqD9l85IrmvmYhwu//lX4HXycy/AQ0SUDfh+zCvUIrm8z2SpiBGguCOZl xS6JNtZ/G3vCBXVW/e34+Tzke7trxsLDP3TR6Ijbj6Y1Nd4aGWq5r7zIYj2pUT3mvkI1z4NiWaMb m18Xm7RbJ4oobYjhysU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found delegations.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

delegations.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and delegations.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for delegations.wb.sidnlabs.nl/DS
	Received 405 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (405 bytes) ;; HEADER SECTION ;; id = 36803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; delegations.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) delegations.wb.sidnlabs.nl. 3600 IN DS ( 39300 8 2 48d0bb28273605e895f40fb9b97dcdc7d61c9bd56ac6723b60ec356d27c49573 ) delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. 4UuAh4NI9oQQD8VTDmwBH8feKLFqkK8CiJIoXuwSwv9Vv3HdhnzTfxCz1wBU92lrl9DgPNoyt/dj neXwjF9Pau6CYcHxoZ2XUC7F7lYLS7kdxQtAMMjBCNLrxUYU+XgsakeDhS07P5OcQjYgDFZOQWJn BOvJ0U7+CO7dadkRokMYuYhc5VHRs+cygT1MfG5ipLo5+ZfM0irvJEzMEAIvbtMXbWQTmTuQyfL/ hXJYIeg3a75c0NNYvT1QbdDSbz2G8rLYZCtKkaScm0yZSysHtdl6Ff/RDlfKXkZPuNH46cBB7go8 ufrmjBOMXPp9ZnrOuLFFC9G7vPVWn86iVZf+Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for delegations.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=39300/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. 4UuAh4NI9oQQD8VTDmwBH8feKLFqkK8CiJIoXuwSwv9Vv3HdhnzTfxCz1wBU92lrl9DgPNoyt/dj neXwjF9Pau6CYcHxoZ2XUC7F7lYLS7kdxQtAMMjBCNLrxUYU+XgsakeDhS07P5OcQjYgDFZOQWJn BOvJ0U7+CO7dadkRokMYuYhc5VHRs+cygT1MfG5ipLo5+ZfM0irvJEzMEAIvbtMXbWQTmTuQyfL/ hXJYIeg3a75c0NNYvT1QbdDSbz2G8rLYZCtKkaScm0yZSysHtdl6Ff/RDlfKXkZPuNH46cBB7go8 ufrmjBOMXPp9ZnrOuLFFC9G7vPVWn86iVZf+Lw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=39300/SHA-256 is now in the chain-of-trust
	`delegations.wb.sidnlabs.nl. 3600 IN DS ( 39300 8 2 48d0bb28273605e895f40fb9b97dcdc7d61c9bd56ac6723b60ec356d27c49573 )`
	Query to powerdns.sidnlabs.nl for delegations.wb.sidnlabs.nl/DNSKEY
	Received 389 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (389 bytes) ;; HEADER SECTION ;; id = 5224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. 2l+B43VYcBCmdzKTTmFL89DLun54HzyFkq2xESpTzyqtj7ekfeZFQcpHuOrjl00G86qIC0G2Q8B6 WD/OwlJ+4fS2AbdfOk7h6Tg1ACqbG/0VnPU2zuPEEiddQoEBs1rlKJ1QNhoeuIcCfw1hUxxtdqGK 4Q4PFlwyfK4bWP0dKI4= ) delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAd2ljCav5IxUS5o6RMFi3ste1+TpW3dFi6ONZcF1n2cr4m1KjlopYTxs4pVca5J8+3iKWjp+ suGHFp1I0bcQY38paDEPSs+AbQFJQzhEygyn0ELmyv5jjDCgJX69eq4+lbSyrrFrm39kUHMMQXaS AUP3qJEbF8m88+l6Q4oJme7f ) ; Key ID = 39300 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for delegations.wb.sidnlabs.nl
	`delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAd2ljCav5IxUS5o6RMFi3ste1+TpW3dFi6ONZcF1n2cr4m1KjlopYTxs4pVca5J8+3iKWjp+ suGHFp1I0bcQY38paDEPSs+AbQFJQzhEygyn0ELmyv5jjDCgJX69eq4+lbSyrrFrm39kUHMMQXaS AUP3qJEbF8m88+l6Q4oJme7f ) ; Key ID = 39300`
	DNSKEY=39300 is now in the chain-of-trust
	DS=39300/SHA-256 verifies DNSKEY=39300
	Found 1 RRSIGs over DNSKEY RRset
	`delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. 2l+B43VYcBCmdzKTTmFL89DLun54HzyFkq2xESpTzyqtj7ekfeZFQcpHuOrjl00G86qIC0G2Q8B6 WD/OwlJ+4fS2AbdfOk7h6Tg1ACqbG/0VnPU2zuPEEiddQoEBs1rlKJ1QNhoeuIcCfw1hUxxtdqGK 4Q4PFlwyfK4bWP0dKI4= )`
	RRSIG=39300 and DNSKEY=39300 verifies the DNSKEY RRset
	Query to yadifa.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Error querying yadifa.sidnlabs.nl/2a00:d78:0:712:94:198:159:28 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 331 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (331 bytes) ;; HEADER SECTION ;; id = 46840 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 27424 8 2 e635adfda6d3dbbd21bf377333f1e220528010911e886e38577afed6a296ec83 ) powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. n7Pbxe+J66h2QVYyWty+49R7KbyRWIgChhZYCTDwkgn8MaVG5DLcbW0KARzjCI//Z/G786lnIt0G Aat7FR/cx1ZdQX1U5yOyYdnCMwPmkU4sW5KQuPYAfRD357u3gPNo9cFVsllj6v2zxj8ZyncMhS0L RgrZ5jlbZs4b3alGc8E= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Received 321 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (321 bytes) ;; HEADER SECTION ;; id = 23029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 27424 8 2 e635adfda6d3dbbd21bf377333f1e220528010911e886e38577afed6a296ec83 ) powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. n7Pbxe+J66h2QVYyWty+49R7KbyRWIgChhZYCTDwkgn8MaVG5DLcbW0KARzjCI//Z/G786lnIt0G Aat7FR/cx1ZdQX1U5yOyYdnCMwPmkU4sW5KQuPYAfRD357u3gPNo9cFVsllj6v2zxj8ZyncMhS0L RgrZ5jlbZs4b3alGc8E= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone powerdns.delegations.wb.sidnlabs.nl

powerdns.delegations.wb.sidnlabs.nl

	Checking DS between delegations.wb.sidnlabs.nl and powerdns.delegations.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for powerdns.delegations.wb.sidnlabs.nl/DS
	Error querying knot.sidnlabs.nl/2a00:d78:0:712:94:198:159:27 for powerdns.delegations.wb.sidnlabs.nl/DS: 'IPv6 transport disabled'
	Received 298 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (298 bytes) ;; HEADER SECTION ;; id = 46906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.delegations.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 27424 8 2 e635adfda6d3dbbd21bf377333f1e220528010911e886e38577afed6a296ec83 ) powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. n7Pbxe+J66h2QVYyWty+49R7KbyRWIgChhZYCTDwkgn8MaVG5DLcbW0KARzjCI//Z/G786lnIt0G Aat7FR/cx1ZdQX1U5yOyYdnCMwPmkU4sW5KQuPYAfRD357u3gPNo9cFVsllj6v2zxj8ZyncMhS0L RgrZ5jlbZs4b3alGc8E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for powerdns.delegations.wb.sidnlabs.nl in the delegations.wb.sidnlabs.nl zone
	DS=27424/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20190314080031 39300 delegations.wb.sidnlabs.nl. n7Pbxe+J66h2QVYyWty+49R7KbyRWIgChhZYCTDwkgn8MaVG5DLcbW0KARzjCI//Z/G786lnIt0G Aat7FR/cx1ZdQX1U5yOyYdnCMwPmkU4sW5KQuPYAfRD357u3gPNo9cFVsllj6v2zxj8ZyncMhS0L RgrZ5jlbZs4b3alGc8E= )`
	RRSIG=39300 and DNSKEY=39300 verifies the DS RRset
	DS=27424/SHA-256 is now in the chain-of-trust
	`powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 27424 8 2 e635adfda6d3dbbd21bf377333f1e220528010911e886e38577afed6a296ec83 )`
	Query to powerdns.sidnlabs.nl for powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Received 407 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (407 bytes) ;; HEADER SECTION ;; id = 6763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbf1VV6CGP/1lJRwlkZucpHLQ8TKo0s6tDu7HSdmzEBNLx+pv31ft9lpWORwORPSWWO+hZnY GxoUEqRT97nyfYZtkHcNP+yW+TD0Y5T+O2SGTTBh5+GkrA/c/6GWvV0VXizdO06L/IGAMo1p0rcv kKTzfinNKHDD97qZg1fUjBCX ) ; Key ID = 27424 powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. nRIR/u2T1esNJnheAJAf4y+J6vn3oYphMvX2U+0A+UdDUMiiCa7Hw11v/sDtpXaFFiSz947vr5SR +qCBndgtcw84xcX2wcwawer0uoV6uXSB5H3iiIHehGBfmhYCLZwIvLylY75mwNYnWEvy04M0J1SL n4jaSAYiniSrKE1uIzg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for powerdns.delegations.wb.sidnlabs.nl
	`powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbf1VV6CGP/1lJRwlkZucpHLQ8TKo0s6tDu7HSdmzEBNLx+pv31ft9lpWORwORPSWWO+hZnY GxoUEqRT97nyfYZtkHcNP+yW+TD0Y5T+O2SGTTBh5+GkrA/c/6GWvV0VXizdO06L/IGAMo1p0rcv kKTzfinNKHDD97qZg1fUjBCX ) ; Key ID = 27424`
	DNSKEY=27424/SEP is now in the chain-of-trust
	DS=27424/SHA-256 verifies DNSKEY=27424/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. nRIR/u2T1esNJnheAJAf4y+J6vn3oYphMvX2U+0A+UdDUMiiCa7Hw11v/sDtpXaFFiSz947vr5SR +qCBndgtcw84xcX2wcwawer0uoV6uXSB5H3iiIHehGBfmhYCLZwIvLylY75mwNYnWEvy04M0J1SL n4jaSAYiniSrKE1uIzg= )`
	RRSIG=27424 and DNSKEY=27424/SEP verifies the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Received 336 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (336 bytes) ;; HEADER SECTION ;; id = 7375 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 48484 8 2 57aa82b4c25980eb392d3db80d03f2462800ffc6a060a7f7bf2ebdd0b1d05342 ) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. kCQo54H2JIMECe39TZShurqurvJtJAnNOqpIkKPz6dIgMR6MjQpcqgui+sDoghnk0VECH1TZYh1p Ln/D0UmM1Bppu99Svl2Bv8VT7xH2GHzEAe9OvNLYlOlUmNh+jDfC5nUJkdf86KhKTqgp5AgsgxBN 9VuDdId/jqZWNQmBp3Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to powerdns.sidnlabs.nl for nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Received 331 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (331 bytes) ;; HEADER SECTION ;; id = 7688 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 48484 8 2 57aa82b4c25980eb392d3db80d03f2462800ffc6a060a7f7bf2ebdd0b1d05342 ) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. kCQo54H2JIMECe39TZShurqurvJtJAnNOqpIkKPz6dIgMR6MjQpcqgui+sDoghnk0VECH1TZYh1p Ln/D0UmM1Bppu99Svl2Bv8VT7xH2GHzEAe9OvNLYlOlUmNh+jDfC5nUJkdf86KhKTqgp5AgsgxBN 9VuDdId/jqZWNQmBp3Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found child zone nsd4.powerdns.delegations.wb.sidnlabs.nl

nsd4.powerdns.delegations.wb.sidnlabs.nl

	Checking DS between powerdns.delegations.wb.sidnlabs.nl and nsd4.powerdns.delegations.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for nsd4.powerdns.delegations.wb.sidnlabs.nl/DS
	Received 312 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (312 bytes) ;; HEADER SECTION ;; id = 29482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 48484 8 2 57aa82b4c25980eb392d3db80d03f2462800ffc6a060a7f7bf2ebdd0b1d05342 ) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. kCQo54H2JIMECe39TZShurqurvJtJAnNOqpIkKPz6dIgMR6MjQpcqgui+sDoghnk0VECH1TZYh1p Ln/D0UmM1Bppu99Svl2Bv8VT7xH2GHzEAe9OvNLYlOlUmNh+jDfC5nUJkdf86KhKTqgp5AgsgxBN 9VuDdId/jqZWNQmBp3Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DS records for nsd4.powerdns.delegations.wb.sidnlabs.nl in the powerdns.delegations.wb.sidnlabs.nl zone
	DS=48484/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080032 27424 powerdns.delegations.wb.sidnlabs.nl. kCQo54H2JIMECe39TZShurqurvJtJAnNOqpIkKPz6dIgMR6MjQpcqgui+sDoghnk0VECH1TZYh1p Ln/D0UmM1Bppu99Svl2Bv8VT7xH2GHzEAe9OvNLYlOlUmNh+jDfC5nUJkdf86KhKTqgp5AgsgxBN 9VuDdId/jqZWNQmBp3Q= )`
	RRSIG=27424 and DNSKEY=27424/SEP verifies the DS RRset
	DS=48484/SHA-256 is now in the chain-of-trust
	`nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 48484 8 2 57aa82b4c25980eb392d3db80d03f2462800ffc6a060a7f7bf2ebdd0b1d05342 )`
	Query to nsd4.sidnlabs.nl for nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Error querying nsd4.sidnlabs.nl/2a00:d78:0:712:94:198:159:33 for nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 417 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (417 bytes) ;; HEADER SECTION ;; id = 24273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbxic/pFDOoJwGRf+2krB+XW8QE1OwuKsNTTAMmQLhEnAfOGBADQzoaw7Xm0IQB2DSqHnxyk wswE0fmEfZB65UIz1KjIS4TMi8sr1P13FnAGy8zWCVPqQDYxAUcMpY5tY3CXNjOkACR4+9LuC2EQ iwfp3wjnGzbvNm/oU/PEcolb ) ; Key ID = 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. eONKuJnyY7RT3VhzUnxnpEFCUzaO64fRx3QWsjBfJuj3PRgffueZeBoGObscQ+2Q9KBgyruX8YqQ D9Vlu7QQ/D8ihAcNku7vJvxL60D+lotzwXbkxnkTTZmiiJXFAGk7KUyCuqwHHLprk4TAu2o91qFa JGYVwuP6hPtQ7uCwW6Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for nsd4.powerdns.delegations.wb.sidnlabs.nl
	`nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbxic/pFDOoJwGRf+2krB+XW8QE1OwuKsNTTAMmQLhEnAfOGBADQzoaw7Xm0IQB2DSqHnxyk wswE0fmEfZB65UIz1KjIS4TMi8sr1P13FnAGy8zWCVPqQDYxAUcMpY5tY3CXNjOkACR4+9LuC2EQ iwfp3wjnGzbvNm/oU/PEcolb ) ; Key ID = 48484`
	DNSKEY=48484/SEP is now in the chain-of-trust
	DS=48484/SHA-256 verifies DNSKEY=48484/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. eONKuJnyY7RT3VhzUnxnpEFCUzaO64fRx3QWsjBfJuj3PRgffueZeBoGObscQ+2Q9KBgyruX8YqQ D9Vlu7QQ/D8ihAcNku7vJvxL60D+lotzwXbkxnkTTZmiiJXFAGk7KUyCuqwHHLprk4TAu2o91qFa JGYVwuP6hPtQ7uCwW6Y= )`
	RRSIG=48484 and DNSKEY=48484/SEP verifies the DNSKEY RRset
	Query to nsd4.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Received 341 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (341 bytes) ;; HEADER SECTION ;; id = 62919 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 49669 8 2 70c27a7a1da4dc53e08a6da23c8e6b4e73d03297476eee502031ec73165a0d94 ) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. oW29rv5FoGOurYkLV3eYr5VUxywbbQ8zSIorbEh3YL6l+jRaQm9D5Jdp6UVCcy+K2B2HFAm30waB S15I4waHZr4HXoAY9ProcMZg3oqzKf84pKqgQIF7oCSbQlC1FE54AUGtNNSS7zWspSJELC6jfh1I ijfKGqqAmYHuAK3aIUI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nsd4.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Error querying nsd4.sidnlabs.nl/2a00:d78:0:712:94:198:159:33 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 341 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (341 bytes) ;; HEADER SECTION ;; id = 55725 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 49669 8 2 70c27a7a1da4dc53e08a6da23c8e6b4e73d03297476eee502031ec73165a0d94 ) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. oW29rv5FoGOurYkLV3eYr5VUxywbbQ8zSIorbEh3YL6l+jRaQm9D5Jdp6UVCcy+K2B2HFAm30waB S15I4waHZr4HXoAY9ProcMZg3oqzKf84pKqgQIF7oCSbQlC1FE54AUGtNNSS7zWspSJELC6jfh1I ijfKGqqAmYHuAK3aIUI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone knot.nsd4.powerdns.delegations.wb.sidnlabs.nl

knot.nsd4.powerdns.delegations.wb.sidnlabs.nl

	Checking DS between nsd4.powerdns.delegations.wb.sidnlabs.nl and knot.nsd4.powerdns.delegations.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/DS
	Received 322 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (322 bytes) ;; HEADER SECTION ;; id = 4174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 49669 8 2 70c27a7a1da4dc53e08a6da23c8e6b4e73d03297476eee502031ec73165a0d94 ) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. oW29rv5FoGOurYkLV3eYr5VUxywbbQ8zSIorbEh3YL6l+jRaQm9D5Jdp6UVCcy+K2B2HFAm30waB S15I4waHZr4HXoAY9ProcMZg3oqzKf84pKqgQIF7oCSbQlC1FE54AUGtNNSS7zWspSJELC6jfh1I ijfKGqqAmYHuAK3aIUI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl in the nsd4.powerdns.delegations.wb.sidnlabs.nl zone
	DS=49669/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080032 48484 nsd4.powerdns.delegations.wb.sidnlabs.nl. oW29rv5FoGOurYkLV3eYr5VUxywbbQ8zSIorbEh3YL6l+jRaQm9D5Jdp6UVCcy+K2B2HFAm30waB S15I4waHZr4HXoAY9ProcMZg3oqzKf84pKqgQIF7oCSbQlC1FE54AUGtNNSS7zWspSJELC6jfh1I ijfKGqqAmYHuAK3aIUI= )`
	RRSIG=48484 and DNSKEY=48484/SEP verifies the DS RRset
	DS=49669/SHA-256 is now in the chain-of-trust
	`knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DS ( 49669 8 2 70c27a7a1da4dc53e08a6da23c8e6b4e73d03297476eee502031ec73165a0d94 )`
	Query to knot.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY
	Error querying knot.sidnlabs.nl/2a00:d78:0:712:94:198:159:27 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 427 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (427 bytes) ;; HEADER SECTION ;; id = 38951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbQAFjvCs+VN4m2kdIkOFHffwyJck9piD17JI6y5vwDRHlonfA6+Dg3aCWrsFuVHgx3CeSgP i//PaNe7dyN//l57KUlmC7waTxma/WRHaL8hl7whuNYa6zq+G0vFFac36C/T5OnPTnZWycTBeC1t VMK75kAj26VM1dDP68lKAY+D ) ; Key ID = 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. Xlb1mfr6/YEQFW8/QVTJB9/8nSIRuAsxlyJ3QzA9PR8q5O9/LRn5prD9923UvtI5hrll2QRB9Unp /lIqnsPwD0A+RIPBialUEUyAT7yTZBPHJsdGS5w6mfZ2ySsGHejGIrr5z3KjN33Or2iGUEcbkImA 7p04K+4ZDMqxo7c95ao= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl
	`knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbQAFjvCs+VN4m2kdIkOFHffwyJck9piD17JI6y5vwDRHlonfA6+Dg3aCWrsFuVHgx3CeSgP i//PaNe7dyN//l57KUlmC7waTxma/WRHaL8hl7whuNYa6zq+G0vFFac36C/T5OnPTnZWycTBeC1t VMK75kAj26VM1dDP68lKAY+D ) ; Key ID = 49669`
	DNSKEY=49669/SEP is now in the chain-of-trust
	DS=49669/SHA-256 verifies DNSKEY=49669/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. Xlb1mfr6/YEQFW8/QVTJB9/8nSIRuAsxlyJ3QzA9PR8q5O9/LRn5prD9923UvtI5hrll2QRB9Unp /lIqnsPwD0A+RIPBialUEUyAT7yTZBPHJsdGS5w6mfZ2ySsGHejGIrr5z3KjN33Or2iGUEcbkImA 7p04K+4ZDMqxo7c95ao= )`
	RRSIG=49669 and DNSKEY=49669/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Error querying knot.sidnlabs.nl/2a00:d78:0:712:94:198:159:27 for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 295 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (295 bytes) ;; HEADER SECTION ;; id = 4693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. JWEWwBNkz0y0ddH+5IIzOXr7cVIH0k/NmMPt9pW8XtpRu/p3QcUOUtgZPUmgksdrECWsUFDvZNyy UK74c3/eErhmQH7Y1QUQwFkmA2MwFRGomBessTmXV2n1AB5/YU15Vn4pQ4NFGcskGKE3WL/im5bi FKW/6cv9PTlkeGlUJb4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.nsd4.powerdns.delegations.wb.sidnlabs.nl is authoritative for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl
	Found RRSIG signed by knot.nsd4.powerdns.delegations.wb.sidnlabs.nl zone
	Query to knot.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/SOA
	Received 332 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (332 bytes) ;; HEADER SECTION ;; id = 45084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. i9hCfqJCQ/zbLMnItWXDl8CIb68RKVM2dOPUzTDiWKYl4cTHj3NnZVuJuGYAC6JSlKEsPd5rQ9dX OTD3A284VH6zA1cViFXHuFzFQRww1jx9Au9wWoho1fa+7NN/0MplW/n5n+nIoUPDT+We0UJLQDl+ tvPIs6KgdTd0PDKfTJ4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for knot.nsd4.powerdns.delegations.wb.sidnlabs.nl/A
	Received 295 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (295 bytes) ;; HEADER SECTION ;; id = 57559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. JWEWwBNkz0y0ddH+5IIzOXr7cVIH0k/NmMPt9pW8XtpRu/p3QcUOUtgZPUmgksdrECWsUFDvZNyy UK74c3/eErhmQH7Y1QUQwFkmA2MwFRGomBessTmXV2n1AB5/YU15Vn4pQ4NFGcskGKE3WL/im5bi FKW/6cv9PTlkeGlUJb4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.nsd4.powerdns.delegations.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080032 49669 knot.nsd4.powerdns.delegations.wb.sidnlabs.nl. JWEWwBNkz0y0ddH+5IIzOXr7cVIH0k/NmMPt9pW8XtpRu/p3QcUOUtgZPUmgksdrECWsUFDvZNyy UK74c3/eErhmQH7Y1QUQwFkmA2MwFRGomBessTmXV2n1AB5/YU15Vn4pQ4NFGcskGKE3WL/im5bi FKW/6cv9PTlkeGlUJb4= )`
	RRSIG=49669 and DNSKEY=49669/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test knot.nsd4.powerdns.delegations.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: