DNSSEC Analyzer

Domain Name:

Time: 2021-03-01 12:58:28 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gy

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 28212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210313000000 20210220000000 20326 . pQBGiP7oxZqBaSdQ/CrejUs2H0lqdHhzeoweDucnavdzVK3CYHhGExnjuE+t8NI2Habz5nvYgyxd j/MCZEmEIomL/YuCPMd+BfOtykAUTaqHSWIVdvANBRepO7q3XcIAs6++na+SGzYpriMCSaSnjb0f a3O54yEZrJt2hD1pxdB0W4TlAa5Wdcbl1hkczzPLPLL5/7v1FXg2/soCgakJ/Em60pmy8T3zYzCy 5A3fpiZc4fZsp9GQKX6HRuoQQtgpB4cHBcFiKdW7IMHZPgM9xT0MiDlfLwv7dhvF6RPRhBDDDWHY f45IMt3dNiyfqKvEnOZIyRRFBjFoxEyHenxBGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210313000000 20210220000000 20326 . pQBGiP7oxZqBaSdQ/CrejUs2H0lqdHhzeoweDucnavdzVK3CYHhGExnjuE+t8NI2Habz5nvYgyxd j/MCZEmEIomL/YuCPMd+BfOtykAUTaqHSWIVdvANBRepO7q3XcIAs6++na+SGzYpriMCSaSnjb0f a3O54yEZrJt2hD1pxdB0W4TlAa5Wdcbl1hkczzPLPLL5/7v1FXg2/soCgakJ/Em60pmy8T3zYzCy 5A3fpiZc4fZsp9GQKX6HRuoQQtgpB4cHBcFiKdW7IMHZPgM9xT0MiDlfLwv7dhvF6RPRhBDDDWHY f45IMt3dNiyfqKvEnOZIyRRFBjFoxEyHenxBGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to a.root-servers.net for nl.gy/A
	Received 518 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (518 bytes) ;; HEADER SECTION ;; id = 42818 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gy. 172800 IN NS a.lactld.org. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20210314050000 20210301040000 42351 . KT6DTpEuh3TOVFOBERaUXhM3Ra3QNdeRlMNwMivTg4+cQuv7bsaD48b7a3051U/XNSAu4IlAG07h r7F8hOhk2HF13igljVKAsQB9PvjtnYDplD/d2g8t4YpGSkShUeQvr1fzCzCGcYYo7eMSFb8S7bO+ VwaG/c1bJgYGIbTGssUO07Uj8dcURxr/1+OX+ux6doAEACzNtEaoto1RAzUo88jsPO6yFZwJa7K6 aZiEfxyuqhbcAwj2UU26VNmVbV2meS1/3Ky1+BuOWLpO1qGdSJUW5YlYwfZ/Byjsjr7NTUQLkB4U 0OpLiucMwHWqwH8N7nbvw9Bd+dMmEaIwniVsYg== ) ;; ADDITIONAL SECTION (5 records) a.lactld.org. 172800 IN A 200.0.68.10 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for gy/DNSKEY
	Received 515 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (515 bytes) ;; HEADER SECTION ;; id = 37755 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gy. 172800 IN NS a.lactld.org. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20210314050000 20210301040000 42351 . KT6DTpEuh3TOVFOBERaUXhM3Ra3QNdeRlMNwMivTg4+cQuv7bsaD48b7a3051U/XNSAu4IlAG07h r7F8hOhk2HF13igljVKAsQB9PvjtnYDplD/d2g8t4YpGSkShUeQvr1fzCzCGcYYo7eMSFb8S7bO+ VwaG/c1bJgYGIbTGssUO07Uj8dcURxr/1+OX+ux6doAEACzNtEaoto1RAzUo88jsPO6yFZwJa7K6 aZiEfxyuqhbcAwj2UU26VNmVbV2meS1/3Ky1+BuOWLpO1qGdSJUW5YlYwfZ/Byjsjr7NTUQLkB4U 0OpLiucMwHWqwH8N7nbvw9Bd+dMmEaIwniVsYg== ) ;; ADDITIONAL SECTION (5 records) a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gy

	Checking DS between . and gy
	Query to b.root-servers.net for gy/DS
	Received 366 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (366 bytes) ;; HEADER SECTION ;; id = 5492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DS ;; ANSWER SECTION (2 records) gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20210314050000 20210301040000 42351 . KT6DTpEuh3TOVFOBERaUXhM3Ra3QNdeRlMNwMivTg4+cQuv7bsaD48b7a3051U/XNSAu4IlAG07h r7F8hOhk2HF13igljVKAsQB9PvjtnYDplD/d2g8t4YpGSkShUeQvr1fzCzCGcYYo7eMSFb8S7bO+ VwaG/c1bJgYGIbTGssUO07Uj8dcURxr/1+OX+ux6doAEACzNtEaoto1RAzUo88jsPO6yFZwJa7K6 aZiEfxyuqhbcAwj2UU26VNmVbV2meS1/3Ky1+BuOWLpO1qGdSJUW5YlYwfZ/Byjsjr7NTUQLkB4U 0OpLiucMwHWqwH8N7nbvw9Bd+dMmEaIwniVsYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gy in the . zone
	DS=50885/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gy. 86400 IN RRSIG ( DS 8 1 86400 20210314050000 20210301040000 42351 . KT6DTpEuh3TOVFOBERaUXhM3Ra3QNdeRlMNwMivTg4+cQuv7bsaD48b7a3051U/XNSAu4IlAG07h r7F8hOhk2HF13igljVKAsQB9PvjtnYDplD/d2g8t4YpGSkShUeQvr1fzCzCGcYYo7eMSFb8S7bO+ VwaG/c1bJgYGIbTGssUO07Uj8dcURxr/1+OX+ux6doAEACzNtEaoto1RAzUo88jsPO6yFZwJa7K6 aZiEfxyuqhbcAwj2UU26VNmVbV2meS1/3Ky1+BuOWLpO1qGdSJUW5YlYwfZ/Byjsjr7NTUQLkB4U 0OpLiucMwHWqwH8N7nbvw9Bd+dMmEaIwniVsYg== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=50885/SHA-256 is now in the chain-of-trust
	`gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df )`
	Query to a.lactld.org for gy/DNSKEY
	Received 1661 bytes from 200.0.68.10
	;; Answer received from 200.0.68.10 (1661 bytes) ;; HEADER SECTION ;; id = 31902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (4 records) gy. 86400 IN DNSKEY ( 256 3 8 AwEAAbysI86ev/bigCkrk6t1jE1HTCv074wn3bgN/j/dE4nYVh4nEYoznYXxAstOeE/AptYKNttJ 8p/Tx9GvoZhIKuq0GYm4TOy1Z1HQlqupGWe4hZP1v9TQXixl+tKGrB2Bp7+jXX1HTQmQoq0hw++t 0LN/UjNAx3s1MJypDhxAAtgDNJ56vw8geclXUiKz1xAb2wrAV4ddSU5LKVTUeF8+D5y4pFYQprth 33q73GrRai738roXEthV9BmNGSpmyYHr5Y7T0TeyDgvtkK1WU2r3Yv5fgXpiCRtIKlZj3XX4hEdC atObouJk5bg2Zjx+4OroE9MwGIF6J8VGvxJmaFdDilE= ) ; Key ID = 1821 gy. 86400 IN DNSKEY ( 256 3 8 AwEAAcGTvJvPNdDh1FXzlW3BPWXWiiJfnwcCr3x8rsYFmFNUR7fPi1gqYjaL7llX5q1k930R1gXN wewtgilG+i4RpM49Rl5Zro9oPeHddmhTxi4494GEDUpjj+2r6FqU+gFLTZ2jHfJphzfafnaJYGue 62AgQKeKpgkh4jDbiq0A56sVyFyMsKgxSJpbChjQ0i6gYfI/YeU7UkP/pKsmci7bBECCcmbCS5vJ 8j59RUVZbOkEhvxldp1SpgaUvefIqCyXEgQ6LmWfT5w+JUN2qOkgr2lb+nERB5Agwx81KrDioX6V XaZtwzZ4vGfLBgL0/5hX2YUKBaqOmBDpZrJac7WnJsE= ) ; Key ID = 57676 gy. 86400 IN DNSKEY ( 257 3 8 AwEAAbvxl2xtqOCSO5R/Z3AwDKany7ukbFMfNz97rrtusq6kbiNH+H9hJvcwo/R4mYw9jPpZ6Gyh 3sMFQBfdlgKmFwgjHxpppiaDKkxbuzIWWqNuNu805zWgzL45EqAQf4fAkyOLeJdsY4aYjrJXWrGc XfPCtg8t0WAxTVALWl81cxxiPBAE7lxPnC34KFdCsFe/G075yQPXXdk4hKCxe4xfG4JtHke3MS6m AtX/TYdA9CORJdRG+pHA9n1MUkzq2rO0OEi3nJbnOowZzSpnFMtKbV7c7Yp7zPxLXvzlUOfudyo6 ZNRmGYXe1LTb4fyeRd2cv2Zk3PqW7x9bTNtXxn63PuF/lAQZhFvL/Kru37tiYThtK0HGj+YXLsta EiRy/4iE9G8mLf4g73iXLKHnBUG0N6Y3uucTIAXHjK92A9L/y1eztsZb3pytdHaHP2cUDTJR1P9Q ouLOq1QDEzKQlAq9mlzb5HqWciknFJukr8Sd++sX5P1cgWVbN1jEpHjda/NEy59uT0CtRZsinCT/ 52CI2bmGBdsxueLpeO4CoBhE0E8wDb8vkbG9PymayBO1SLVZcEHEAIFJPXYqmR2wLoTTIAOG960E ChapI+gDbkmJ/ZX24rATcmctP3kFpUj4mOt8swXusL4bnMuvr40a8n0e8LE6MhHW0qxtNaJVqrNc zGF9 ) ; Key ID = 50885 gy. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210314000000 20210225000000 50885 gy. mpe/Y9KfivIvu2bxr3Ht/WT8TFdzl4CUFe/OUTzUjbVfI34xgIDnKoolAjPM5VpH5HEwnxOI+npv g4Y/+noAebX57/3pO+oJGQDK9ZQzzz4gdXdlfxU0J3RAz5l9zGpjnKjBzv6s4cXLEb0H/ODmWncg 8IHY9lapqdFrqeMr3YAsmD6WzyPiJ9A0c4Og0LakYp6OyvDb+jYKPpV7i4dyv14BiWd/1UJs2Ioi ug6H/Ror6P+EfrispRaX09iqFpgA9f3A9Us/gIvu8YO//3yRfBeytxhpnXkNlKSvTB3ATIDPOHhF rh6nHH05JRKlqMVXG5VLVCmzEnjBANF4LLtG41Eke/ucRTMgXVr7H92XoIVyLCkYZ65BN5zgRSff DUV2wPPKwqvew3e0L2GdLQR90n6CuEhS5wJd6e/MLukfwFIbSghMFtBfujuK2x2Kex1sR4POpgnA SYpwIgTwB2zqscRfP33InCDkWKUBvVwb9wtOXROIAdkARkSiQOPRU4Z+V7Fu6Gz8Qe3RQP6gZJG7 /8wcI055UuG0Ke9wgXkaAg39SpOrPoOVH9ohG9qkwnTBhH2qtZpl9F+9ABe8a98DXt2UabPWA8w0 t3sq9ksu6B+e/lDR4UeKQgcoO0Cp2BVrB4YZKLO2YpAOxDF1okJCIoG1N6n2nvJGhVM6UQSjRM8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gy
	`gy. 86400 IN DNSKEY ( 256 3 8 AwEAAbysI86ev/bigCkrk6t1jE1HTCv074wn3bgN/j/dE4nYVh4nEYoznYXxAstOeE/AptYKNttJ 8p/Tx9GvoZhIKuq0GYm4TOy1Z1HQlqupGWe4hZP1v9TQXixl+tKGrB2Bp7+jXX1HTQmQoq0hw++t 0LN/UjNAx3s1MJypDhxAAtgDNJ56vw8geclXUiKz1xAb2wrAV4ddSU5LKVTUeF8+D5y4pFYQprth 33q73GrRai738roXEthV9BmNGSpmyYHr5Y7T0TeyDgvtkK1WU2r3Yv5fgXpiCRtIKlZj3XX4hEdC atObouJk5bg2Zjx+4OroE9MwGIF6J8VGvxJmaFdDilE= ) ; Key ID = 1821`
	`gy. 86400 IN DNSKEY ( 256 3 8 AwEAAcGTvJvPNdDh1FXzlW3BPWXWiiJfnwcCr3x8rsYFmFNUR7fPi1gqYjaL7llX5q1k930R1gXN wewtgilG+i4RpM49Rl5Zro9oPeHddmhTxi4494GEDUpjj+2r6FqU+gFLTZ2jHfJphzfafnaJYGue 62AgQKeKpgkh4jDbiq0A56sVyFyMsKgxSJpbChjQ0i6gYfI/YeU7UkP/pKsmci7bBECCcmbCS5vJ 8j59RUVZbOkEhvxldp1SpgaUvefIqCyXEgQ6LmWfT5w+JUN2qOkgr2lb+nERB5Agwx81KrDioX6V XaZtwzZ4vGfLBgL0/5hX2YUKBaqOmBDpZrJac7WnJsE= ) ; Key ID = 57676`
	gy. 86400 IN DNSKEY ( 257 3 8 AwEAAbvxl2xtqOCSO5R/Z3AwDKany7ukbFMfNz97rrtusq6kbiNH+H9hJvcwo/R4mYw9jPpZ6Gyh 3sMFQBfdlgKmFwgjHxpppiaDKkxbuzIWWqNuNu805zWgzL45EqAQf4fAkyOLeJdsY4aYjrJXWrGc XfPCtg8t0WAxTVALWl81cxxiPBAE7lxPnC34KFdCsFe/G075yQPXXdk4hKCxe4xfG4JtHke3MS6m AtX/TYdA9CORJdRG+pHA9n1MUkzq2rO0OEi3nJbnOowZzSpnFMtKbV7c7Yp7zPxLXvzlUOfudyo6 ZNRmGYXe1LTb4fyeRd2cv2Zk3PqW7x9bTNtXxn63PuF/lAQZhFvL/Kru37tiYThtK0HGj+YXLsta EiRy/4iE9G8mLf4g73iXLKHnBUG0N6Y3uucTIAXHjK92A9L/y1eztsZb3pytdHaHP2cUDTJR1P9Q ouLOq1QDEzKQlAq9mlzb5HqWciknFJukr8Sd++sX5P1cgWVbN1jEpHjda/NEy59uT0CtRZsinCT/ 52CI2bmGBdsxueLpeO4CoBhE0E8wDb8vkbG9PymayBO1SLVZcEHEAIFJPXYqmR2wLoTTIAOG960E ChapI+gDbkmJ/ZX24rATcmctP3kFpUj4mOt8swXusL4bnMuvr40a8n0e8LE6MhHW0qxtNaJVqrNc zGF9 ) ; Key ID = 50885
	DNSKEY=50885/SEP is now in the chain-of-trust
	DS=50885/SHA-256 verifies DNSKEY=50885/SEP
	Found 1 RRSIGs over DNSKEY RRset
	gy. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210314000000 20210225000000 50885 gy. mpe/Y9KfivIvu2bxr3Ht/WT8TFdzl4CUFe/OUTzUjbVfI34xgIDnKoolAjPM5VpH5HEwnxOI+npv g4Y/+noAebX57/3pO+oJGQDK9ZQzzz4gdXdlfxU0J3RAz5l9zGpjnKjBzv6s4cXLEb0H/ODmWncg 8IHY9lapqdFrqeMr3YAsmD6WzyPiJ9A0c4Og0LakYp6OyvDb+jYKPpV7i4dyv14BiWd/1UJs2Ioi ug6H/Ror6P+EfrispRaX09iqFpgA9f3A9Us/gIvu8YO//3yRfBeytxhpnXkNlKSvTB3ATIDPOHhF rh6nHH05JRKlqMVXG5VLVCmzEnjBANF4LLtG41Eke/ucRTMgXVr7H92XoIVyLCkYZ65BN5zgRSff DUV2wPPKwqvew3e0L2GdLQR90n6CuEhS5wJd6e/MLukfwFIbSghMFtBfujuK2x2Kex1sR4POpgnA SYpwIgTwB2zqscRfP33InCDkWKUBvVwb9wtOXROIAdkARkSiQOPRU4Z+V7Fu6Gz8Qe3RQP6gZJG7 /8wcI055UuG0Ke9wgXkaAg39SpOrPoOVH9ohG9qkwnTBhH2qtZpl9F+9ABe8a98DXt2UabPWA8w0 t3sq9ksu6B+e/lDR4UeKQgcoO0Cp2BVrB4YZKLO2YpAOxDF1okJCIoG1N6n2nvJGhVM6UQSjRM8= )
	RRSIG=50885 and DNSKEY=50885/SEP verifies the DNSKEY RRset
	DNSKEY=1821 is now in the chain-of-trust
	DNSKEY=57676 is now in the chain-of-trust
	Query to gy-ns.anycast.pch.net for nl.gy/A
	Received 866 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (866 bytes) ;; HEADER SECTION ;; id = 31884 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. 4337RBAP49HCFHKVC33LQULHUB49L7H6.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 60kd7j0hk5m9nca1j0p2ghgecjr4pkhg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 4337RBAP49HCFHKVC33LQULHUB49L7H6.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. OdMTJJk783D43Kjt5d4P3AsFMEGJ5kaWsCwh48U6jot9vyorrJmBOPYJdZtivJQBaBmyxTdT+yW/ Sj2KztGJ3FdgmKBhisYAGgo9KKooOkYZt2CXn0LX7aN3YA4VY3rDYN4AcS0/g16hrgcJWsHJ3JOm XepkwhUyFKN7vKEZ0gE19FCngrK/MshjXV8vU2rbDN+uI7AESlU6HrjQctvC1NqHZAGAd3YjFhKg PnZ2Z9iNglWjR0WmwJuMU1enRHPCI876f3wraJkz/gxSBvLxZcZK69LJUIudEa2dQSjcN1FbYbgv uO0P0hCM07KHq8hHwvg0PV6xB8t2fARSPR1Uqw== ) 61OIO6QHBH80764TO3QRGBI6N0FOFURK.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 6nuhorbjise68cr7g9tlrj3es8kditmi NS DS RRSIG ) 61OIO6QHBH80764TO3QRGBI6N0FOFURK.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. Vu5+CuAiBmTx1296yEt6fjVJ2MpgIj/Ji16yqKHViyV3vYllkx2q9zKRSbAHW8IxIgAY61c4VGj4 YciNEmZHFWshUjXjDkMV+2CWcMFMOt8x+JsxYSOc7iEeqxO6VIYT0Ag6aYqRv66vK1pVcOelcvt7 JVSqGIRC6GQeefUtrtJiWZ9zU7HikwkFxxTbsKLgFCnxKbAYBr3JOAKEry5fY7nuWrcSgimGnFa7 De0q6sMxB61Bqk1WavzX5mIcy1IOlcxyuYRfOXB0lOkbpX6PTKYDXyzrH/NXtY02J8IX9HrjHrrA 01b5QoXVRij04hZMXeO96MEkUrBGyU75rfVUNw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.lactld.org for nl.gy/DNSKEY
	Received 866 bytes from 200.0.68.10
	;; Answer received from 200.0.68.10 (866 bytes) ;; HEADER SECTION ;; id = 20883 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. 4337rbap49hcfhkvc33lqulhub49l7h6.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 60kd7j0hk5m9nca1j0p2ghgecjr4pkhg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 4337rbap49hcfhkvc33lqulhub49l7h6.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. OdMTJJk783D43Kjt5d4P3AsFMEGJ5kaWsCwh48U6jot9vyorrJmBOPYJdZtivJQBaBmyxTdT+yW/ Sj2KztGJ3FdgmKBhisYAGgo9KKooOkYZt2CXn0LX7aN3YA4VY3rDYN4AcS0/g16hrgcJWsHJ3JOm XepkwhUyFKN7vKEZ0gE19FCngrK/MshjXV8vU2rbDN+uI7AESlU6HrjQctvC1NqHZAGAd3YjFhKg PnZ2Z9iNglWjR0WmwJuMU1enRHPCI876f3wraJkz/gxSBvLxZcZK69LJUIudEa2dQSjcN1FbYbgv uO0P0hCM07KHq8hHwvg0PV6xB8t2fARSPR1Uqw== ) 61oio6qhbh80764to3qrgbi6n0fofurk.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 6nuhorbjise68cr7g9tlrj3es8kditmi NS DS RRSIG ) 61oio6qhbh80764to3qrgbi6n0fofurk.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. Vu5+CuAiBmTx1296yEt6fjVJ2MpgIj/Ji16yqKHViyV3vYllkx2q9zKRSbAHW8IxIgAY61c4VGj4 YciNEmZHFWshUjXjDkMV+2CWcMFMOt8x+JsxYSOc7iEeqxO6VIYT0Ag6aYqRv66vK1pVcOelcvt7 JVSqGIRC6GQeefUtrtJiWZ9zU7HikwkFxxTbsKLgFCnxKbAYBr3JOAKEry5fY7nuWrcSgimGnFa7 De0q6sMxB61Bqk1WavzX5mIcy1IOlcxyuYRfOXB0lOkbpX6PTKYDXyzrH/NXtY02J8IX9HrjHrrA 01b5QoXVRij04hZMXeO96MEkUrBGyU75rfVUNw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gy

nl.gy

	Checking DS between gy and nl.gy
	Query to a.lactld.org for nl.gy/DS
	Received 1126 bytes from 200.0.68.10
	;; Answer received from 200.0.68.10 (1126 bytes) ;; HEADER SECTION ;; id = 27027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2021030108 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) gy. 38400 IN RRSIG ( SOA 8 1 38400 20210310100000 20210221100000 1821 gy. VR6mCOSRk7Bh59jDtBSZFZqBdnCZe+w1KPgmh3C/+aX3maLfUcEdwEOHBX4+2fDNax7oS/7qGt7S gaivvf4O+kns2scYIZvSeHqFDpeu7pRIdXxUbIc7p2/ggv0a9x4YI43NI1LXsHy5LpLVlqahFfCi s+qEqwyHq6IrS+6AzBmBPRXm6F9P8dk9kKhajNGQwgJY0PiRMLuv19UgZ1JA5ecp3tKiPcFzb80+ RoaJYmcsTdwASnuLH4X9lr4hg+rUXjh8e3G0MY/1dA8vgaLzHLIampFNTlF3mT2hAcWtK80leP1f HPp4tbPuD2i5OzDsyKmZI0R1835Xo03Cg0aVxg== ) 4337rbap49hcfhkvc33lqulhub49l7h6.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 60kd7j0hk5m9nca1j0p2ghgecjr4pkhg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 4337rbap49hcfhkvc33lqulhub49l7h6.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. OdMTJJk783D43Kjt5d4P3AsFMEGJ5kaWsCwh48U6jot9vyorrJmBOPYJdZtivJQBaBmyxTdT+yW/ Sj2KztGJ3FdgmKBhisYAGgo9KKooOkYZt2CXn0LX7aN3YA4VY3rDYN4AcS0/g16hrgcJWsHJ3JOm XepkwhUyFKN7vKEZ0gE19FCngrK/MshjXV8vU2rbDN+uI7AESlU6HrjQctvC1NqHZAGAd3YjFhKg PnZ2Z9iNglWjR0WmwJuMU1enRHPCI876f3wraJkz/gxSBvLxZcZK69LJUIudEa2dQSjcN1FbYbgv uO0P0hCM07KHq8hHwvg0PV6xB8t2fARSPR1Uqw== ) 61oio6qhbh80764to3qrgbi6n0fofurk.gy. 38400 IN NSEC3 ( 1 1 10 16ae0ea3 6nuhorbjise68cr7g9tlrj3es8kditmi NS DS RRSIG ) 61oio6qhbh80764to3qrgbi6n0fofurk.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20210310100000 20210221100000 1821 gy. Vu5+CuAiBmTx1296yEt6fjVJ2MpgIj/Ji16yqKHViyV3vYllkx2q9zKRSbAHW8IxIgAY61c4VGj4 YciNEmZHFWshUjXjDkMV+2CWcMFMOt8x+JsxYSOc7iEeqxO6VIYT0Ag6aYqRv66vK1pVcOelcvt7 JVSqGIRC6GQeefUtrtJiWZ9zU7HikwkFxxTbsKLgFCnxKbAYBr3JOAKEry5fY7nuWrcSgimGnFa7 De0q6sMxB61Bqk1WavzX5mIcy1IOlcxyuYRfOXB0lOkbpX6PTKYDXyzrH/NXtY02J8IX9HrjHrrA 01b5QoXVRij04hZMXeO96MEkUrBGyU75rfVUNw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gy in the gy zone
	Query to ns4.20dragons.com for nl.gy/DNSKEY
	Received 215 bytes from 213.59.123.40
	;; Answer received from 213.59.123.40 (215 bytes) ;; HEADER SECTION ;; id = 35711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20210311000000 20210218000000 14643 nl.gy. icVkuv6xRPGYg6CDDj3qUQFkly1U/fnmpRu/l3YwsDbf3hK/o6fdcCbtJSnjGRPRoi77tqVs9NFA plle8Wp+qQ== ) nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for nl.gy
	`nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20210311000000 20210218000000 14643 nl.gy. icVkuv6xRPGYg6CDDj3qUQFkly1U/fnmpRu/l3YwsDbf3hK/o6fdcCbtJSnjGRPRoi77tqVs9NFA plle8Wp+qQ== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for nl.gy/A
	Received 151 bytes from 46.21.152.18
	;; Answer received from 46.21.152.18 (151 bytes) ;; HEADER SECTION ;; id = 57359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.164.136.124 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20210311000000 20210218000000 14643 nl.gy. VEsNQQRhhXHcZ8y82/p4k65iiUrVlAPxRF9dLBy8ZwaATj+uI7vgp37o70hzAH59BCCkysRIMy7G NWKvbmDvyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nl.gy is authoritative for nl.gy
	Found RRSIG signed by nl.gy zone
	Query to ns3.20dragons.com for nl.gy/SOA
	Received 195 bytes from 46.21.152.18
	;; Answer received from 46.21.152.18 (195 bytes) ;; HEADER SECTION ;; id = 21390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20210311000000 20210218000000 14643 nl.gy. KCwDJyKewbT1jvfki5Lz+CheBA8BXoc+k/vlVp5RR5By6OTI49J0P+fyRfbtu6LvkVmjw9s/YWnd xCSAtAq1PA== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2021030104 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.20dragons.com for nl.gy/SOA
	Received 195 bytes from 213.59.123.40
	;; Answer received from 213.59.123.40 (195 bytes) ;; HEADER SECTION ;; id = 3209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20210311000000 20210218000000 14643 nl.gy. KCwDJyKewbT1jvfki5Lz+CheBA8BXoc+k/vlVp5RR5By6OTI49J0P+fyRfbtu6LvkVmjw9s/YWnd xCSAtAq1PA== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2021030104 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.20dragons.com for nl.gy/SOA
	Received 195 bytes from 210.16.120.139
	;; Answer received from 210.16.120.139 (195 bytes) ;; HEADER SECTION ;; id = 32181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20210311000000 20210218000000 14643 nl.gy. KCwDJyKewbT1jvfki5Lz+CheBA8BXoc+k/vlVp5RR5By6OTI49J0P+fyRfbtu6LvkVmjw9s/YWnd xCSAtAq1PA== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2021030104 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.20dragons.com for nl.gy/SOA
	Received 195 bytes from 185.185.41.97
	;; Answer received from 185.185.41.97 (195 bytes) ;; HEADER SECTION ;; id = 20861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2021030104 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20210311000000 20210218000000 14643 nl.gy. KCwDJyKewbT1jvfki5Lz+CheBA8BXoc+k/vlVp5RR5By6OTI49J0P+fyRfbtu6LvkVmjw9s/YWnd xCSAtAq1PA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.20dragons.com for nl.gy/A
	Received 151 bytes from 46.21.152.18
	;; Answer received from 46.21.152.18 (151 bytes) ;; HEADER SECTION ;; id = 9454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.164.136.124 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20210311000000 20210218000000 14643 nl.gy. VEsNQQRhhXHcZ8y82/p4k65iiUrVlAPxRF9dLBy8ZwaATj+uI7vgp37o70hzAH59BCCkysRIMy7G NWKvbmDvyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nl.gy A RR has value 185.164.136.124
	Found 1 RRSIGs over A RRset
	`nl.gy. 86400 IN RRSIG ( A 13 2 86400 20210311000000 20210218000000 14643 nl.gy. VEsNQQRhhXHcZ8y82/p4k65iiUrVlAPxRF9dLBy8ZwaATj+uI7vgp37o70hzAH59BCCkysRIMy7G NWKvbmDvyg== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gy at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: