DNSSEC Debugger - maloca.marduk.pro

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-10 11:18:22 UTC

Analyzing DNSSEC problems for maloca.marduk.pro

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 37774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260522000000 20260501000000 20326 . XC4YzJpuixXq5eF9t9OXXvrNtB0+0gs/MO3lX+JodZefuAr2U4nez+6R/I9QRfgJqwfCotzoE8AL UikNxpFUw+hfd4bEMId+6iYfj+7gWVQRM2msZAidCdbp4NddeHYDrlsyOel4QBlnUJPyJFekQygB b3ZfyfLl0HEUD9Bb1R4C1uK7tAprVAP8XXA0n8PMhGEmr1SXgodiHpkZ9X4S31ahRh3tSpTn1eGz 04kydmswhw8RDzCdd18BXBZGDSpzFBSSUr1ttRkQmjTZbBFkNrG092D4yDu7h2xVrePmMcjZMhpL UI75Ks2vXO6dX08oey9sbDAezOwZtvSLld936w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260522000000 20260501000000 20326 . XC4YzJpuixXq5eF9t9OXXvrNtB0+0gs/MO3lX+JodZefuAr2U4nez+6R/I9QRfgJqwfCotzoE8AL UikNxpFUw+hfd4bEMId+6iYfj+7gWVQRM2msZAidCdbp4NddeHYDrlsyOel4QBlnUJPyJFekQygB b3ZfyfLl0HEUD9Bb1R4C1uK7tAprVAP8XXA0n8PMhGEmr1SXgodiHpkZ9X4S31ahRh3tSpTn1eGz 04kydmswhw8RDzCdd18BXBZGDSpzFBSSUr1ttRkQmjTZbBFkNrG092D4yDu7h2xVrePmMcjZMhpL UI75Ks2vXO6dX08oey9sbDAezOwZtvSLld936w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to m.root-servers.net for maloca.marduk.pro/A
	Received 789 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 789 octets ;; HEADER SECTION ;; id = 41764 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pro. 172800 IN NS d0.pro.afilias-nst.org. pro. 172800 IN NS a0.pro.afilias-nst.info. pro. 172800 IN NS a2.pro.afilias-nst.info. pro. 172800 IN NS b0.pro.afilias-nst.org. pro. 172800 IN NS b2.pro.afilias-nst.org. pro. 172800 IN NS c0.pro.afilias-nst.info. pro. 86400 IN DS ( 42154 8 2 5a8a58f4e30cde44a47091488870d109108ff45d42fdfdd30b448d78dffd5566 ) pro. 86400 IN RRSIG ( DS 8 1 86400 20260523050000 20260510040000 54393 . b/OsiBtYfmAV94mD7ywT+AJ5xCIrqYGySrPkF8nZQK2613XEVZGL8vJnzG7OmdE41gZkfS8YuQVR 0H6FgFfuHsuh+kb+EHRX3zzrpcS82tjva4O96N8+HR3Rnls8cB2bfWNaTIVBF6xza9XVHUh5bFkE kQvwoNVghevuxNBRoV/NG6Ol4PGs3tCYNgvE/uwDuReRTd3WZGaSEpPswWVRI4Jgmo/CTu6MRslo e9JsDLULdejTGIs7fNV3VXPtR/OyVzqtYk1fq+aTuT+neqjX2ZVzUsB7AKNcvtrYDE8ljMjtMwnK dQ9DE55aMmu/luMHkARK2HMXLeayVOnie9JKLQ== ) ;; ADDITIONAL SECTION (13 records) d0.pro.afilias-nst.org. 172800 IN A 199.182.17.1 c0.pro.afilias-nst.info. 172800 IN A 199.182.16.1 b2.pro.afilias-nst.org. 172800 IN A 199.182.40.1 b0.pro.afilias-nst.org. 172800 IN A 199.182.1.1 a2.pro.afilias-nst.info. 172800 IN A 199.182.32.1 a0.pro.afilias-nst.info. 172800 IN A 199.182.0.1 d0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:d1::1 c0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:d0::1 b2.pro.afilias-nst.org. 172800 IN AAAA 2001:500:e1::1 b0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:c1::1 a2.pro.afilias-nst.info. 172800 IN AAAA 2001:500:e0::1 a0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:c0::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for pro/DNSKEY
	Received 772 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 772 octets ;; HEADER SECTION ;; id = 34664 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pro. 172800 IN NS a2.pro.afilias-nst.info. pro. 172800 IN NS a0.pro.afilias-nst.info. pro. 172800 IN NS b2.pro.afilias-nst.org. pro. 172800 IN NS c0.pro.afilias-nst.info. pro. 172800 IN NS d0.pro.afilias-nst.org. pro. 172800 IN NS b0.pro.afilias-nst.org. pro. 86400 IN DS ( 42154 8 2 5a8a58f4e30cde44a47091488870d109108ff45d42fdfdd30b448d78dffd5566 ) pro. 86400 IN RRSIG ( DS 8 1 86400 20260523050000 20260510040000 54393 . b/OsiBtYfmAV94mD7ywT+AJ5xCIrqYGySrPkF8nZQK2613XEVZGL8vJnzG7OmdE41gZkfS8YuQVR 0H6FgFfuHsuh+kb+EHRX3zzrpcS82tjva4O96N8+HR3Rnls8cB2bfWNaTIVBF6xza9XVHUh5bFkE kQvwoNVghevuxNBRoV/NG6Ol4PGs3tCYNgvE/uwDuReRTd3WZGaSEpPswWVRI4Jgmo/CTu6MRslo e9JsDLULdejTGIs7fNV3VXPtR/OyVzqtYk1fq+aTuT+neqjX2ZVzUsB7AKNcvtrYDE8ljMjtMwnK dQ9DE55aMmu/luMHkARK2HMXLeayVOnie9JKLQ== ) ;; ADDITIONAL SECTION (13 records) d0.pro.afilias-nst.org. 172800 IN A 199.182.17.1 c0.pro.afilias-nst.info. 172800 IN A 199.182.16.1 b2.pro.afilias-nst.org. 172800 IN A 199.182.40.1 b0.pro.afilias-nst.org. 172800 IN A 199.182.1.1 a2.pro.afilias-nst.info. 172800 IN A 199.182.32.1 a0.pro.afilias-nst.info. 172800 IN A 199.182.0.1 d0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:d1::1 c0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:d0::1 b2.pro.afilias-nst.org. 172800 IN AAAA 2001:500:e1::1 b0.pro.afilias-nst.org. 172800 IN AAAA 2001:500:c1::1 a2.pro.afilias-nst.info. 172800 IN AAAA 2001:500:e0::1 a0.pro.afilias-nst.info. 172800 IN AAAA 2001:500:c0::1 ;; { "EDNS-VERSION": 0 }
	Found child zone pro

pro

	Checking DS between . and pro
	Query to h.root-servers.net for pro/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DS ;; ANSWER SECTION (2 records) pro. 86400 IN DS ( 42154 8 2 5a8a58f4e30cde44a47091488870d109108ff45d42fdfdd30b448d78dffd5566 ) pro. 86400 IN RRSIG ( DS 8 1 86400 20260523050000 20260510040000 54393 . b/OsiBtYfmAV94mD7ywT+AJ5xCIrqYGySrPkF8nZQK2613XEVZGL8vJnzG7OmdE41gZkfS8YuQVR 0H6FgFfuHsuh+kb+EHRX3zzrpcS82tjva4O96N8+HR3Rnls8cB2bfWNaTIVBF6xza9XVHUh5bFkE kQvwoNVghevuxNBRoV/NG6Ol4PGs3tCYNgvE/uwDuReRTd3WZGaSEpPswWVRI4Jgmo/CTu6MRslo e9JsDLULdejTGIs7fNV3VXPtR/OyVzqtYk1fq+aTuT+neqjX2ZVzUsB7AKNcvtrYDE8ljMjtMwnK dQ9DE55aMmu/luMHkARK2HMXLeayVOnie9JKLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pro in the . zone
	DS=42154/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pro. 86400 IN RRSIG ( DS 8 1 86400 20260523050000 20260510040000 54393 . b/OsiBtYfmAV94mD7ywT+AJ5xCIrqYGySrPkF8nZQK2613XEVZGL8vJnzG7OmdE41gZkfS8YuQVR 0H6FgFfuHsuh+kb+EHRX3zzrpcS82tjva4O96N8+HR3Rnls8cB2bfWNaTIVBF6xza9XVHUh5bFkE kQvwoNVghevuxNBRoV/NG6Ol4PGs3tCYNgvE/uwDuReRTd3WZGaSEpPswWVRI4Jgmo/CTu6MRslo e9JsDLULdejTGIs7fNV3VXPtR/OyVzqtYk1fq+aTuT+neqjX2ZVzUsB7AKNcvtrYDE8ljMjtMwnK dQ9DE55aMmu/luMHkARK2HMXLeayVOnie9JKLQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=42154/SHA-256 is now in the chain-of-trust
	`pro. 86400 IN DS ( 42154 8 2 5a8a58f4e30cde44a47091488870d109108ff45d42fdfdd30b448d78dffd5566 )`
	Query to a0.pro.afilias-nst.info for pro/DNSKEY
	Received 895 bytes from 199.182.0.1
	;; Response received from [199.182.0.1] 895 octets ;; HEADER SECTION ;; id = 29065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pro. IN DNSKEY ;; ANSWER SECTION (4 records) pro. 3600 IN DNSKEY ( 256 3 8 AwEAAZYe9NDxPkH2sV0JuTLOjbHqW2UVPl426Aje7lwUHzKcKblKDQ2CFdrgoZ1XUk0uiZUwVYAQ NKaAXzBi+RW2LNHefoEuWreHOOKo0NWo9Uu83WLgCRAAaaC1EvgoxZIRJi8TRNa3u818fPi2QLiO zjUiblhXFd1C2ZDdBUKKK7ZF ) ; keytag 33144 pro. 3600 IN DNSKEY ( 257 3 8 AwEAAb2os9GYUftDTAAkuXay8knZ26r9DY5E7ijma/BhK1BGVhrFhOh00hoHy+8oQbRk17uNgpJl bvKKM1xDC0+sFZUS0D4vpp9plJFg01/6ptCo4pCK7fZucVbI18UEKoXpGRb/7EVn9eIZUomZhWXA b1HMkFJPpYrigAWe6UrTfTT4v6kjPPwg53951vQQFCcecKPrUpBbNDTSBnOPjUpK5/wTwO0hD1gM h2mvBFa9WgiXGe/fbsahAxsRf/0YxkKI3bSQsyZ9PkUzWSzwa2qeBgLxeljPNitxziIR6uvawgpY s9s50Enz8nD22n35k0FHEKtAZW47qv6VDlmANUejfJc= ) ; keytag 42154 pro. 3600 IN DNSKEY ( 256 3 8 AwEAAb4QGhG78sZ1FCBeuu3sLoSwDYYFlmCiCWWulo0oHx6evng7FcLEV8ZSlMBA23yaGiJ8WsuH ANqq7AMq+lLrky2KHFDpSsoyY8y2zGVHYYGfKwTufylRG9aQCSQ1dTJcloluXyFC3I/Xd01CIelR uWilxDFcvTtwWaTydJYX2PXx ) ; keytag 64863 pro. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260530152920 20260509142920 42154 pro. txGJ2CzuDbOBeJ3sR2JjYc+gxGZEmc9DaahXGn2Lq5tK/md+EbX+0eXwLNVRygsAEu2Ljod+iuJy ibqhcZrFxF7BrkGDVdt8V54ku0BTROeOaVgtWiEaXVVenttOoSyaGawR4BD70UhU/vbD6G5i6G4N pDmfxFS7ud80fWeKKqfmM+Y7yygWaNmdbAyhPcxLsENUtfm3h/evzZqXU10X0NZsbM42V4liQVzk lTJPKa8PE1qJfo4pibg3ZSyhFu1cUXxgRhPOtQB6wfr77hkHCdny5X8QWnbj7DeSOBHH6w6szFZG D/7O2cdIRnIlALMAKmcZdvWQCWgNlN7GHTSvXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for pro
	`pro. 3600 IN DNSKEY ( 256 3 8 AwEAAZYe9NDxPkH2sV0JuTLOjbHqW2UVPl426Aje7lwUHzKcKblKDQ2CFdrgoZ1XUk0uiZUwVYAQ NKaAXzBi+RW2LNHefoEuWreHOOKo0NWo9Uu83WLgCRAAaaC1EvgoxZIRJi8TRNa3u818fPi2QLiO zjUiblhXFd1C2ZDdBUKKK7ZF ) ; keytag 33144`
	`pro. 3600 IN DNSKEY ( 257 3 8 AwEAAb2os9GYUftDTAAkuXay8knZ26r9DY5E7ijma/BhK1BGVhrFhOh00hoHy+8oQbRk17uNgpJl bvKKM1xDC0+sFZUS0D4vpp9plJFg01/6ptCo4pCK7fZucVbI18UEKoXpGRb/7EVn9eIZUomZhWXA b1HMkFJPpYrigAWe6UrTfTT4v6kjPPwg53951vQQFCcecKPrUpBbNDTSBnOPjUpK5/wTwO0hD1gM h2mvBFa9WgiXGe/fbsahAxsRf/0YxkKI3bSQsyZ9PkUzWSzwa2qeBgLxeljPNitxziIR6uvawgpY s9s50Enz8nD22n35k0FHEKtAZW47qv6VDlmANUejfJc= ) ; keytag 42154`
	`pro. 3600 IN DNSKEY ( 256 3 8 AwEAAb4QGhG78sZ1FCBeuu3sLoSwDYYFlmCiCWWulo0oHx6evng7FcLEV8ZSlMBA23yaGiJ8WsuH ANqq7AMq+lLrky2KHFDpSsoyY8y2zGVHYYGfKwTufylRG9aQCSQ1dTJcloluXyFC3I/Xd01CIelR uWilxDFcvTtwWaTydJYX2PXx ) ; keytag 64863`
	DNSKEY=42154/SEP is now in the chain-of-trust
	DS=42154/SHA-256 verifies DNSKEY=42154/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pro. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260530152920 20260509142920 42154 pro. txGJ2CzuDbOBeJ3sR2JjYc+gxGZEmc9DaahXGn2Lq5tK/md+EbX+0eXwLNVRygsAEu2Ljod+iuJy ibqhcZrFxF7BrkGDVdt8V54ku0BTROeOaVgtWiEaXVVenttOoSyaGawR4BD70UhU/vbD6G5i6G4N pDmfxFS7ud80fWeKKqfmM+Y7yygWaNmdbAyhPcxLsENUtfm3h/evzZqXU10X0NZsbM42V4liQVzk lTJPKa8PE1qJfo4pibg3ZSyhFu1cUXxgRhPOtQB6wfr77hkHCdny5X8QWnbj7DeSOBHH6w6szFZG D/7O2cdIRnIlALMAKmcZdvWQCWgNlN7GHTSvXQ== )`
	RRSIG=42154 and DNSKEY=42154/SEP verifies the DNSKEY RRset
	DNSKEY=33144 is now in the chain-of-trust
	DNSKEY=64863 is now in the chain-of-trust
	Query to d0.pro.afilias-nst.org for maloca.marduk.pro/A
	Received 584 bytes from 199.182.17.1
	;; Response received from [199.182.17.1] 584 octets ;; HEADER SECTION ;; id = 49651 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) marduk.pro. 3600 IN NS ns1.dns-parking.com. marduk.pro. 3600 IN NS ns2.dns-parking.com. 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN NSEC3 ( 1 1 0 73 5o338169sg3r65ne4pc9i2j4gc65psf4 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260531110826 20260510100826 64863 pro. YFOt/dlKoWRIkS6KF/Q+2ItmOo7n174z60gghLGv7L/Rke15wnvI7ch9ssm1tngHrAMSRn3KtUv6 H8lt0oPT/mGzVklsXJltMDNoXcRTuN8CjIGdLvy0nhhX+NZLObpnZ5qJNlvk0nOW2jESEaxnzj4A M0UryZwcHmMljgK+Olc= ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN NSEC3 ( 1 1 0 73 464nfnpta1f8ft22ss8j61du1m8ma547 NS DS RRSIG ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260530152920 20260509142920 64863 pro. amlsJj17SCZrZoLEO1vVtMeuTVZwvpczfhsuynKlnVona68F0MjGA0FgnWAcggztV8vUOm33R9XZ GzXSb8LLWiMlXUXv+G5YwjYckEf4/zXrgNNs9+47s9nIlDZ87aj4PWoPhArUuXvX4ZUQVknG6l+f 6CBMZchX7qd3AoQnba8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c0.pro.afilias-nst.info for marduk.pro/DNSKEY
	Received 577 bytes from 199.182.16.1
	;; Response received from [199.182.16.1] 577 octets ;; HEADER SECTION ;; id = 36091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; marduk.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) marduk.pro. 3600 IN NS ns2.dns-parking.com. marduk.pro. 3600 IN NS ns1.dns-parking.com. 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN NSEC3 ( 1 1 0 73 5o338169sg3r65ne4pc9i2j4gc65psf4 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260531110826 20260510100826 64863 pro. YFOt/dlKoWRIkS6KF/Q+2ItmOo7n174z60gghLGv7L/Rke15wnvI7ch9ssm1tngHrAMSRn3KtUv6 H8lt0oPT/mGzVklsXJltMDNoXcRTuN8CjIGdLvy0nhhX+NZLObpnZ5qJNlvk0nOW2jESEaxnzj4A M0UryZwcHmMljgK+Olc= ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN NSEC3 ( 1 1 0 73 464nfnpta1f8ft22ss8j61du1m8ma547 NS DS RRSIG ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260530152920 20260509142920 64863 pro. amlsJj17SCZrZoLEO1vVtMeuTVZwvpczfhsuynKlnVona68F0MjGA0FgnWAcggztV8vUOm33R9XZ GzXSb8LLWiMlXUXv+G5YwjYckEf4/zXrgNNs9+47s9nIlDZ87aj4PWoPhArUuXvX4ZUQVknG6l+f 6CBMZchX7qd3AoQnba8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone marduk.pro

marduk.pro

	Checking DS between pro and marduk.pro
	Query to c0.pro.afilias-nst.info for marduk.pro/DS
	Received 771 bytes from 199.182.16.1
	;; Response received from [199.182.16.1] 771 octets ;; HEADER SECTION ;; id = 38119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; marduk.pro. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN NSEC3 ( 1 1 0 73 5o338169sg3r65ne4pc9i2j4gc65psf4 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5o1dgu7m45gusoiaq7jg6kff8t3u67ce.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260531110826 20260510100826 64863 pro. YFOt/dlKoWRIkS6KF/Q+2ItmOo7n174z60gghLGv7L/Rke15wnvI7ch9ssm1tngHrAMSRn3KtUv6 H8lt0oPT/mGzVklsXJltMDNoXcRTuN8CjIGdLvy0nhhX+NZLObpnZ5qJNlvk0nOW2jESEaxnzj4A M0UryZwcHmMljgK+Olc= ) pro. 3600 IN SOA ( a0.pro.afilias-nst.info. hostmaster.donuts.email. 1778411129 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) pro. 3600 IN RRSIG ( SOA 8 1 3600 20260531110826 20260510100826 64863 pro. alHIFlaN8vSQAUCI9PqOJy3rXJTwbbUfMCdhQoIwoXjB69cjwd2eqDlAz48GNMEm+L4Undct6/A3 jNwjn+0rja63DNQj9pI2n+xNbxiX1FcU76AoJ9esLLYo7987gWSsnq2cuPE+BtH3YlFxrLlEQftI Ix/E0TAxq1A9tYWUbFs= ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN NSEC3 ( 1 1 0 73 464nfnpta1f8ft22ss8j61du1m8ma547 NS DS RRSIG ) 461hehrf8nsv0qqifb6fouj5don2ltuo.pro. 3600 IN RRSIG ( NSEC3 8 2 3600 20260530152920 20260509142920 64863 pro. amlsJj17SCZrZoLEO1vVtMeuTVZwvpczfhsuynKlnVona68F0MjGA0FgnWAcggztV8vUOm33R9XZ GzXSb8LLWiMlXUXv+G5YwjYckEf4/zXrgNNs9+47s9nIlDZ87aj4PWoPhArUuXvX4ZUQVknG6l+f 6CBMZchX7qd3AoQnba8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for marduk.pro in the pro zone
	Query to ns2.dns-parking.com for marduk.pro/DNSKEY
	Received 108 bytes from 162.159.25.42
	;; Response received from [162.159.25.42] 108 octets ;; HEADER SECTION ;; id = 37709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; marduk.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) marduk.pro. 600 IN SOA ( ns1.dns-parking.com. dns.hostinger.com. 2026050902 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.dns-parking.com for maloca.marduk.pro/A
	Received 62 bytes from 162.159.25.42
	;; Response received from [162.159.25.42] 62 octets ;; HEADER SECTION ;; id = 1836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN A ;; ANSWER SECTION (1 record) maloca.marduk.pro. 3600 IN A 82.25.92.96 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.dns-parking.com is authoritative for maloca.marduk.pro
	Query to ns2.dns-parking.com for maloca.marduk.pro/DNSKEY
	Received 115 bytes from 162.159.25.42
	;; Response received from [162.159.25.42] 115 octets ;; HEADER SECTION ;; id = 46734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) marduk.pro. 600 IN SOA ( ns1.dns-parking.com. dns.hostinger.com. 2026050902 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns-parking.com for marduk.pro/SOA
	Received 108 bytes from 162.159.24.201
	;; Response received from [162.159.24.201] 108 octets ;; HEADER SECTION ;; id = 6443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; marduk.pro. IN SOA ;; ANSWER SECTION (1 record) marduk.pro. 3600 IN SOA ( ns1.dns-parking.com. dns.hostinger.com. 2026050902 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.dns-parking.com for maloca.marduk.pro/A
	maloca.marduk.pro A RR has value 82.25.92.96
	No RRSIGs found

marduk.pro

	Query to ns1.dns-parking.com for maloca.marduk.pro/A
	Received 62 bytes from 162.159.24.201
	;; Response received from [162.159.24.201] 62 octets ;; HEADER SECTION ;; id = 23931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN A ;; ANSWER SECTION (1 record) maloca.marduk.pro. 3600 IN A 82.25.92.96 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.dns-parking.com is authoritative for maloca.marduk.pro
	Query to ns1.dns-parking.com for maloca.marduk.pro/DNSKEY
	Received 115 bytes from 162.159.24.201
	;; Response received from [162.159.24.201] 115 octets ;; HEADER SECTION ;; id = 38185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; maloca.marduk.pro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) marduk.pro. 600 IN SOA ( ns1.dns-parking.com. dns.hostinger.com. 2026050902 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns-parking.com for maloca.marduk.pro/A
	maloca.marduk.pro A RR has value 82.25.92.96
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test maloca.marduk.pro at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: