DNSSEC Debugger - mff.cuni.cz

Domain Name:

Time: 2025-03-26 15:35:23 UTC

Analyzing DNSSEC problems for mff.cuni.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1414 octets ;; HEADER SECTION ;; id = 31750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	Query to i.root-servers.net for mff.cuni.cz/A
	Received 626 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 626 octets ;; HEADER SECTION ;; id = 29074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20250408140000 20250326130000 26470 . fUL3EFjCLxQ77sYM7cbppxEjh9IBpdXwoxqAdg82TEOA3TWbMadQXFpSCECFl+ii5T0ylaP7iBHy vl7/zk+LEATfure93mML4otfig6vsf52B/QrMRbRbyM0InDggRSxtn2Iew96OmTBz2ASQo6KZ4kd 1M4dp36Gi5mjO5JGrCupJabzPa5sqCzBDYw693GpPXQe3w8GTABqgp7ugQ1mZUtHD/lxZedpSH5I Qplikwo95r8wf6EZEvpcJLOESwVKX6568RrYi4ZAQoGKlxSRQgfhlEe+d2aWefg/Icu/kjslRTlP azxUXbBca9aFlvhi4e9re7BgBiO/3lyeg3DiLA== ) ;; ADDITIONAL SECTION (9 records) d.ns.nic.cz. 172800 IN A 193.29.206.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 a.ns.nic.cz. 172800 IN A 194.0.12.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for cz/DNSKEY
	Received 615 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 615 octets ;; HEADER SECTION ;; id = 23929 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20250408140000 20250326130000 26470 . fUL3EFjCLxQ77sYM7cbppxEjh9IBpdXwoxqAdg82TEOA3TWbMadQXFpSCECFl+ii5T0ylaP7iBHy vl7/zk+LEATfure93mML4otfig6vsf52B/QrMRbRbyM0InDggRSxtn2Iew96OmTBz2ASQo6KZ4kd 1M4dp36Gi5mjO5JGrCupJabzPa5sqCzBDYw693GpPXQe3w8GTABqgp7ugQ1mZUtHD/lxZedpSH5I Qplikwo95r8wf6EZEvpcJLOESwVKX6568RrYi4ZAQoGKlxSRQgfhlEe+d2aWefg/Icu/kjslRTlP azxUXbBca9aFlvhi4e9re7BgBiO/3lyeg3DiLA== ) ;; ADDITIONAL SECTION (9 records) d.ns.nic.cz. 172800 IN A 193.29.206.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 a.ns.nic.cz. 172800 IN A 194.0.12.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cz

	Checking DS between . and cz
	Query to e.root-servers.net for cz/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 9519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20250408140000 20250326130000 26470 . fUL3EFjCLxQ77sYM7cbppxEjh9IBpdXwoxqAdg82TEOA3TWbMadQXFpSCECFl+ii5T0ylaP7iBHy vl7/zk+LEATfure93mML4otfig6vsf52B/QrMRbRbyM0InDggRSxtn2Iew96OmTBz2ASQo6KZ4kd 1M4dp36Gi5mjO5JGrCupJabzPa5sqCzBDYw693GpPXQe3w8GTABqgp7ugQ1mZUtHD/lxZedpSH5I Qplikwo95r8wf6EZEvpcJLOESwVKX6568RrYi4ZAQoGKlxSRQgfhlEe+d2aWefg/Icu/kjslRTlP azxUXbBca9aFlvhi4e9re7BgBiO/3lyeg3DiLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20250408140000 20250326130000 26470 . fUL3EFjCLxQ77sYM7cbppxEjh9IBpdXwoxqAdg82TEOA3TWbMadQXFpSCECFl+ii5T0ylaP7iBHy vl7/zk+LEATfure93mML4otfig6vsf52B/QrMRbRbyM0InDggRSxtn2Iew96OmTBz2ASQo6KZ4kd 1M4dp36Gi5mjO5JGrCupJabzPa5sqCzBDYw693GpPXQe3w8GTABqgp7ugQ1mZUtHD/lxZedpSH5I Qplikwo95r8wf6EZEvpcJLOESwVKX6568RrYi4ZAQoGKlxSRQgfhlEe+d2aWefg/Icu/kjslRTlP azxUXbBca9aFlvhi4e9re7BgBiO/3lyeg3DiLA== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to a.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.12.1
	;; Response received from [194.0.12.1] 289 octets ;; HEADER SECTION ;; id = 26948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 256 3 13 JDcbxTHoO6cZ/4hzaLgqRTF++3ZfFRlBOEWxpPg8O81iNcE4VUak7emjb8HzFD9sJgljXp+H+YDh sUElk27Mng== ) ; keytag 63781 cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250406002134 20250322225134 20237 cz. dM5wGE3eMGdZhx8pGUfrDGj/M6tV6pSCogjneX94SLN4rBhZBmV6Epitt6P8FlKzE5wqppUTExdg s6WLHsHbGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 256 3 13 JDcbxTHoO6cZ/4hzaLgqRTF++3ZfFRlBOEWxpPg8O81iNcE4VUak7emjb8HzFD9sJgljXp+H+YDh sUElk27Mng== ) ; keytag 63781`
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250406002134 20250322225134 20237 cz. dM5wGE3eMGdZhx8pGUfrDGj/M6tV6pSCogjneX94SLN4rBhZBmV6Epitt6P8FlKzE5wqppUTExdg s6WLHsHbGw== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=63781 is now in the chain-of-trust
	Query to a.ns.nic.cz for mff.cuni.cz/A
	Received 414 bytes from 194.0.12.1
	;; Response received from [194.0.12.1] 414 octets ;; HEADER SECTION ;; id = 27362 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cuni.cz. 3600 IN NS nsa.ces.net. cuni.cz. 3600 IN NS cuce.ruk.cuni.cz. cuni.cz. 3600 IN NS david.ruk.cuni.cz. cuni.cz. 3600 IN NS golias.ruk.cuni.cz. cuni.cz. 3600 IN DS ( 43474 13 2 f030314d575105b12fa185aa8572386b6a54a9c8a238736320c3628038dfe20c ) cuni.cz. 3600 IN RRSIG ( DS 13 2 3600 20250329194651 20250315181651 63781 cz. bkVK4RBnU3gyW9XXl5rgvXiFw2QTPqHhDUTc8nwYnSH/9lXkPgqJuqZ3DhNPaPNgJRmWxu0Wmrvo nydUgSSPeA== ) ;; ADDITIONAL SECTION (7 records) cuce.ruk.cuni.cz. 3600 IN A 195.113.0.8 cuce.ruk.cuni.cz. 3600 IN AAAA 2001:718:1e03:1::8 david.ruk.cuni.cz. 3600 IN A 78.128.213.242 david.ruk.cuni.cz. 3600 IN AAAA 2001:718:1203:502::2 golias.ruk.cuni.cz. 3600 IN A 195.113.0.2 golias.ruk.cuni.cz. 3600 IN AAAA 2001:718:1e03:1::2 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.nic.cz for cuni.cz/DNSKEY
	Received 410 bytes from 193.29.206.1
	;; Response received from [193.29.206.1] 410 octets ;; HEADER SECTION ;; id = 14932 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cuni.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cuni.cz. 3600 IN NS nsa.ces.net. cuni.cz. 3600 IN NS cuce.ruk.cuni.cz. cuni.cz. 3600 IN NS david.ruk.cuni.cz. cuni.cz. 3600 IN NS golias.ruk.cuni.cz. cuni.cz. 3600 IN DS ( 43474 13 2 f030314d575105b12fa185aa8572386b6a54a9c8a238736320c3628038dfe20c ) cuni.cz. 3600 IN RRSIG ( DS 13 2 3600 20250329194651 20250315181651 63781 cz. bkVK4RBnU3gyW9XXl5rgvXiFw2QTPqHhDUTc8nwYnSH/9lXkPgqJuqZ3DhNPaPNgJRmWxu0Wmrvo nydUgSSPeA== ) ;; ADDITIONAL SECTION (7 records) golias.ruk.cuni.cz. 3600 IN A 195.113.0.2 david.ruk.cuni.cz. 3600 IN A 78.128.213.242 cuce.ruk.cuni.cz. 3600 IN A 195.113.0.8 golias.ruk.cuni.cz. 3600 IN AAAA 2001:718:1e03:1::2 david.ruk.cuni.cz. 3600 IN AAAA 2001:718:1203:502::2 cuce.ruk.cuni.cz. 3600 IN AAAA 2001:718:1e03:1::8 ;; { "EDNS-VERSION": 0 }
	Found child zone cuni.cz

cuni.cz

	Checking DS between cz and cuni.cz
	Query to d.ns.nic.cz for cuni.cz/DS
	Received 182 bytes from 193.29.206.1
	;; Response received from [193.29.206.1] 182 octets ;; HEADER SECTION ;; id = 61705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cuni.cz. IN DS ;; ANSWER SECTION (2 records) cuni.cz. 3600 IN DS ( 43474 13 2 f030314d575105b12fa185aa8572386b6a54a9c8a238736320c3628038dfe20c ) cuni.cz. 3600 IN RRSIG ( DS 13 2 3600 20250329194651 20250315181651 63781 cz. bkVK4RBnU3gyW9XXl5rgvXiFw2QTPqHhDUTc8nwYnSH/9lXkPgqJuqZ3DhNPaPNgJRmWxu0Wmrvo nydUgSSPeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cuni.cz in the cz zone
	DS=43474/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cuni.cz. 3600 IN RRSIG ( DS 13 2 3600 20250329194651 20250315181651 63781 cz. bkVK4RBnU3gyW9XXl5rgvXiFw2QTPqHhDUTc8nwYnSH/9lXkPgqJuqZ3DhNPaPNgJRmWxu0Wmrvo nydUgSSPeA== )`
	RRSIG=63781 and DNSKEY=63781 verifies the DS RRset
	DS=43474/SHA-256 is now in the chain-of-trust
	`cuni.cz. 3600 IN DS ( 43474 13 2 f030314d575105b12fa185aa8572386b6a54a9c8a238736320c3628038dfe20c )`
	Query to david.ruk.cuni.cz for cuni.cz/DNSKEY
	Received 219 bytes from 78.128.213.242
	;; Response received from [78.128.213.242] 219 octets ;; HEADER SECTION ;; id = 63600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cuni.cz. IN DNSKEY ;; ANSWER SECTION (2 records) cuni.cz. 3600 IN DNSKEY ( 257 3 13 CRfC63IEp1cb9ALSIHYAFosTvel5Pr7I0KRXgcNMw9JbBO0mba2hBtB+82IdFwOa48PnBNoMl3rZ ohtZLxy07g== ) ; keytag 43474 cuni.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250403103436 20250320100414 43474 cuni.cz. 8zoPgYmapJYNq/ezPzUCs2Rs3N22MdRMAVHJviUw5wUe5OkhWjHAs57guABbckTU6YPgwGj44fqw feFnsgajmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for cuni.cz
	`cuni.cz. 3600 IN DNSKEY ( 257 3 13 CRfC63IEp1cb9ALSIHYAFosTvel5Pr7I0KRXgcNMw9JbBO0mba2hBtB+82IdFwOa48PnBNoMl3rZ ohtZLxy07g== ) ; keytag 43474`
	DNSKEY=43474/SEP is now in the chain-of-trust
	DS=43474/SHA-256 verifies DNSKEY=43474/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cuni.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250403103436 20250320100414 43474 cuni.cz. 8zoPgYmapJYNq/ezPzUCs2Rs3N22MdRMAVHJviUw5wUe5OkhWjHAs57guABbckTU6YPgwGj44fqw feFnsgajmA== )`
	RRSIG=43474 and DNSKEY=43474/SEP verifies the DNSKEY RRset
	Query to nsa.ces.net for mff.cuni.cz/A
	Received 457 bytes from 195.113.144.205
	;; Response received from [195.113.144.205] 457 octets ;; HEADER SECTION ;; id = 30793 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) mff.cuni.cz. 86400 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 86400 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 86400 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 86400 IN NS david.ruk.cuni.cz. mff.cuni.cz. 86400 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 86400 IN DS ( 47500 13 2 6e5316a92bf1ac95f4f9916f57195d305a9e08ef7d0fdda6274f47b03a6abc19 ) mff.cuni.cz. 86400 IN RRSIG ( DS 13 3 86400 20250402191109 20250319183406 43474 cuni.cz. zrV72jVOs7ySIzeMIAINBcVmr5FIzaiplClJmk2/IebBeCOloT/xb0GAUtD0RVCI/Y1NIZs4t23p qxzIHjqmGw== ) ;; ADDITIONAL SECTION (9 records) ns.n.mff.cuni.cz. 86400 IN A 195.113.16.2 ns.ms.mff.cuni.cz. 86400 IN A 195.113.20.71 sns.ms.mff.cuni.cz. 86400 IN A 195.113.20.77 david.ruk.cuni.cz. 86400 IN A 78.128.213.242 golias.ruk.cuni.cz. 86400 IN A 195.113.0.2 ns.n.mff.cuni.cz. 86400 IN AAAA 2001:718:1e03:e01::2 david.ruk.cuni.cz. 86400 IN AAAA 2001:718:1203:502::2 golias.ruk.cuni.cz. 86400 IN AAAA 2001:718:1e03:1::2 ;; { "EDNS-VERSION": 0 }
	Query to cuce.ruk.cuni.cz for mff.cuni.cz/DNSKEY
	Received 457 bytes from 195.113.0.8
	;; Response received from [195.113.0.8] 457 octets ;; HEADER SECTION ;; id = 39772 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) mff.cuni.cz. 86400 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 86400 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 86400 IN NS david.ruk.cuni.cz. mff.cuni.cz. 86400 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 86400 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 86400 IN DS ( 47500 13 2 6e5316a92bf1ac95f4f9916f57195d305a9e08ef7d0fdda6274f47b03a6abc19 ) mff.cuni.cz. 86400 IN RRSIG ( DS 13 3 86400 20250402191109 20250319183406 43474 cuni.cz. zrV72jVOs7ySIzeMIAINBcVmr5FIzaiplClJmk2/IebBeCOloT/xb0GAUtD0RVCI/Y1NIZs4t23p qxzIHjqmGw== ) ;; ADDITIONAL SECTION (9 records) ns.n.mff.cuni.cz. 86400 IN A 195.113.16.2 ns.ms.mff.cuni.cz. 86400 IN A 195.113.20.71 sns.ms.mff.cuni.cz. 86400 IN A 195.113.20.77 golias.ruk.cuni.cz. 86400 IN A 195.113.0.2 david.ruk.cuni.cz. 86400 IN A 78.128.213.242 ns.n.mff.cuni.cz. 86400 IN AAAA 2001:718:1e03:e01::2 golias.ruk.cuni.cz. 86400 IN AAAA 2001:718:1e03:1::2 david.ruk.cuni.cz. 86400 IN AAAA 2001:718:1203:502::2 ;; { "EDNS-VERSION": 0 }
	Found child zone mff.cuni.cz

mff.cuni.cz

	Checking DS between cuni.cz and mff.cuni.cz
	Query to nsa.ces.net for mff.cuni.cz/DS
	Received 191 bytes from 195.113.144.205
	;; Response received from [195.113.144.205] 191 octets ;; HEADER SECTION ;; id = 18376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN DS ;; ANSWER SECTION (2 records) mff.cuni.cz. 86400 IN DS ( 47500 13 2 6e5316a92bf1ac95f4f9916f57195d305a9e08ef7d0fdda6274f47b03a6abc19 ) mff.cuni.cz. 86400 IN RRSIG ( DS 13 3 86400 20250402191109 20250319183406 43474 cuni.cz. zrV72jVOs7ySIzeMIAINBcVmr5FIzaiplClJmk2/IebBeCOloT/xb0GAUtD0RVCI/Y1NIZs4t23p qxzIHjqmGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for mff.cuni.cz in the cuni.cz zone
	DS=47500/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`mff.cuni.cz. 86400 IN RRSIG ( DS 13 3 86400 20250402191109 20250319183406 43474 cuni.cz. zrV72jVOs7ySIzeMIAINBcVmr5FIzaiplClJmk2/IebBeCOloT/xb0GAUtD0RVCI/Y1NIZs4t23p qxzIHjqmGw== )`
	RRSIG=43474 and DNSKEY=43474/SEP verifies the DS RRset
	DS=47500/SHA-256 is now in the chain-of-trust
	`mff.cuni.cz. 86400 IN DS ( 47500 13 2 6e5316a92bf1ac95f4f9916f57195d305a9e08ef7d0fdda6274f47b03a6abc19 )`
	Query to sns.ms.mff.cuni.cz for mff.cuni.cz/DNSKEY
	Received 227 bytes from 195.113.20.77
	;; Response received from [195.113.20.77] 227 octets ;; HEADER SECTION ;; id = 32991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN DNSKEY ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN DNSKEY ( 257 3 13 1PMTgkDSUJEO8PbtFEtJ6sqtBUwlqv5yWMAQpedPoJtvJ9Oxoen3OJoFxEnZCFBCouNsR58PYdzY DowWEQAJVw== ) ; keytag 47500 mff.cuni.cz. 28800 IN RRSIG ( DNSKEY 13 3 28800 20250619165642 20250219155643 47500 mff.cuni.cz. bK/wsE2OTsTkK9/lkolPCyAeu4Z2BI5Dc+Nm+vZc8uHk/Qd05lY1GxFOWc4+RqBxOK+FaAq84YgR 0tC+vuLdkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for mff.cuni.cz
	`mff.cuni.cz. 28800 IN DNSKEY ( 257 3 13 1PMTgkDSUJEO8PbtFEtJ6sqtBUwlqv5yWMAQpedPoJtvJ9Oxoen3OJoFxEnZCFBCouNsR58PYdzY DowWEQAJVw== ) ; keytag 47500`
	DNSKEY=47500/SEP is now in the chain-of-trust
	DS=47500/SHA-256 verifies DNSKEY=47500/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`mff.cuni.cz. 28800 IN RRSIG ( DNSKEY 13 3 28800 20250619165642 20250219155643 47500 mff.cuni.cz. bK/wsE2OTsTkK9/lkolPCyAeu4Z2BI5Dc+Nm+vZc8uHk/Qd05lY1GxFOWc4+RqBxOK+FaAq84YgR 0tC+vuLdkg== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the DNSKEY RRset
	Query to david.ruk.cuni.cz for mff.cuni.cz/A
	Received 378 bytes from 78.128.213.242
	;; Response received from [78.128.213.242] 378 octets ;; HEADER SECTION ;; id = 28998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	david.ruk.cuni.cz is authoritative for mff.cuni.cz
	Found RRSIG signed by mff.cuni.cz zone
	Query to ns.n.mff.cuni.cz for mff.cuni.cz/SOA
	Received 432 bytes from 195.113.16.2
	;; Response received from [195.113.16.2] 432 octets ;; HEADER SECTION ;; id = 16546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN SOA ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN SOA ( ns.ms.mff.cuni.cz. hostmaster.ms.mff.cuni.cz. 2025022149 ;serial 3600 ;refresh 1200 ;retry 2419200 ;expire 3600 ;minimum ) mff.cuni.cz. 28800 IN RRSIG ( SOA 13 3 28800 20250724113012 20250326103012 47500 mff.cuni.cz. QSAcWVwZNwZMszy6Oi5fjWYvrxBj6JeiHu+bZ5XtT7NSLTAYeoIQldgjKvQLaOecqYBVmOHFPuS9 a7uYkhDyqA== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to golias.ruk.cuni.cz for mff.cuni.cz/SOA
	Received 409 bytes from 195.113.0.2
	;; Response received from [195.113.0.2] 409 octets ;; HEADER SECTION ;; id = 36934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN SOA ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN SOA ( ns.ms.mff.cuni.cz. hostmaster.ms.mff.cuni.cz. 2025022149 ;serial 3600 ;refresh 1200 ;retry 2419200 ;expire 3600 ;minimum ) mff.cuni.cz. 28800 IN RRSIG ( SOA 13 3 28800 20250724113012 20250326103012 47500 mff.cuni.cz. QSAcWVwZNwZMszy6Oi5fjWYvrxBj6JeiHu+bZ5XtT7NSLTAYeoIQldgjKvQLaOecqYBVmOHFPuS9 a7uYkhDyqA== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to sns.ms.mff.cuni.cz for mff.cuni.cz/SOA
	Received 432 bytes from 195.113.20.77
	;; Response received from [195.113.20.77] 432 octets ;; HEADER SECTION ;; id = 14430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN SOA ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN SOA ( ns.ms.mff.cuni.cz. hostmaster.ms.mff.cuni.cz. 2025022149 ;serial 3600 ;refresh 1200 ;retry 2419200 ;expire 3600 ;minimum ) mff.cuni.cz. 28800 IN RRSIG ( SOA 13 3 28800 20250724113012 20250326103012 47500 mff.cuni.cz. QSAcWVwZNwZMszy6Oi5fjWYvrxBj6JeiHu+bZ5XtT7NSLTAYeoIQldgjKvQLaOecqYBVmOHFPuS9 a7uYkhDyqA== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.ms.mff.cuni.cz for mff.cuni.cz/SOA
	Received 432 bytes from 195.113.20.71
	;; Response received from [195.113.20.71] 432 octets ;; HEADER SECTION ;; id = 40667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN SOA ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN SOA ( ns.ms.mff.cuni.cz. hostmaster.ms.mff.cuni.cz. 2025022149 ;serial 3600 ;refresh 1200 ;retry 2419200 ;expire 3600 ;minimum ) mff.cuni.cz. 28800 IN RRSIG ( SOA 13 3 28800 20250724113012 20250326103012 47500 mff.cuni.cz. QSAcWVwZNwZMszy6Oi5fjWYvrxBj6JeiHu+bZ5XtT7NSLTAYeoIQldgjKvQLaOecqYBVmOHFPuS9 a7uYkhDyqA== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to david.ruk.cuni.cz for mff.cuni.cz/A
	Received 378 bytes from 78.128.213.242
	;; Response received from [78.128.213.242] 378 octets ;; HEADER SECTION ;; id = 7736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mff.cuni.cz A RR has value 195.113.27.222
	Found 1 RRSIGs over A RRset
	`mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the A RRset

mff.cuni.cz

	Query to ns.n.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.16.2
	;; Response received from [195.113.16.2] 401 octets ;; HEADER SECTION ;; id = 8368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.n.mff.cuni.cz is authoritative for mff.cuni.cz
	Found RRSIG signed by mff.cuni.cz zone
	Query to ns.n.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.16.2
	;; Response received from [195.113.16.2] 401 octets ;; HEADER SECTION ;; id = 19417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mff.cuni.cz A RR has value 195.113.27.222
	Found 1 RRSIGs over A RRset
	`mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the A RRset

mff.cuni.cz

	Query to ns.ms.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.20.71
	;; Response received from [195.113.20.71] 401 octets ;; HEADER SECTION ;; id = 38231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.ms.mff.cuni.cz is authoritative for mff.cuni.cz
	Found RRSIG signed by mff.cuni.cz zone
	Query to ns.ms.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.20.71
	;; Response received from [195.113.20.71] 401 octets ;; HEADER SECTION ;; id = 62674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mff.cuni.cz A RR has value 195.113.27.222
	Found 1 RRSIGs over A RRset
	`mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the A RRset

mff.cuni.cz

	Query to golias.ruk.cuni.cz for mff.cuni.cz/A
	Received 378 bytes from 195.113.0.2
	;; Response received from [195.113.0.2] 378 octets ;; HEADER SECTION ;; id = 9855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	golias.ruk.cuni.cz is authoritative for mff.cuni.cz
	Found RRSIG signed by mff.cuni.cz zone
	Query to golias.ruk.cuni.cz for mff.cuni.cz/A
	Received 378 bytes from 195.113.0.2
	;; Response received from [195.113.0.2] 378 octets ;; HEADER SECTION ;; id = 19111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mff.cuni.cz A RR has value 195.113.27.222
	Found 1 RRSIGs over A RRset
	`mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the A RRset

mff.cuni.cz

	Query to sns.ms.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.20.77
	;; Response received from [195.113.20.77] 401 octets ;; HEADER SECTION ;; id = 64722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sns.ms.mff.cuni.cz is authoritative for mff.cuni.cz
	Found RRSIG signed by mff.cuni.cz zone
	Query to sns.ms.mff.cuni.cz for mff.cuni.cz/A
	Received 401 bytes from 195.113.20.77
	;; Response received from [195.113.20.77] 401 octets ;; HEADER SECTION ;; id = 21805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mff.cuni.cz. IN A ;; ANSWER SECTION (2 records) mff.cuni.cz. 28800 IN A 195.113.27.222 mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== ) ;; AUTHORITY SECTION (6 records) mff.cuni.cz. 28800 IN NS ns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS david.ruk.cuni.cz. mff.cuni.cz. 28800 IN NS sns.ms.mff.cuni.cz. mff.cuni.cz. 28800 IN NS ns.n.mff.cuni.cz. mff.cuni.cz. 28800 IN NS golias.ruk.cuni.cz. mff.cuni.cz. 28800 IN RRSIG ( NS 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. UbzJX5cRNFvfwLU6IzitzHJgbApTEQVRs7hEzPIThMFX7ZFv7LJweyAwtDDoXByHqGgpsonU7nWV NnJo6ignpw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mff.cuni.cz A RR has value 195.113.27.222
	Found 1 RRSIGs over A RRset
	`mff.cuni.cz. 28800 IN RRSIG ( A 13 3 28800 20250704143553 20250306142417 47500 mff.cuni.cz. rVHqPx6i3QuQmY4ksZrXQaWLbZJyWqPopHRsS7H/oGL8Opc38/UaD0FFVWUgVRrnnHgfOTAcrAfk LqaRQkSX9Q== )`
	RRSIG=47500 and DNSKEY=47500/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test mff.cuni.cz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: