DNSSEC Analyzer

Domain Name:

Time: 2019-09-19 16:52:57 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gy

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1139 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (1139 bytes) ;; HEADER SECTION ;; id = 35642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	DNSKEY=59944 is now in the chain-of-trust
	Query to b.root-servers.net for nl.gy/A
	Received 589 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (589 bytes) ;; HEADER SECTION ;; id = 305 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . NvZ6fNSASGgMiZDVWgDlHyEUGICwhuQk4rB1seW6c3K4z56CAoWkN60TC5rYlCCZHd8WnwtTpB9q qGdA+Iu7hd0KcdrzecVY+HQ0oNWIYLrIM+dBHi3bgniWibhRQHPijj05V3wVUNxB0LZz6O8TKpp/ bB/i4q0u2zY/LVvA6afF66r90ZutekPHoIt8Qw8IF7nqAjrJ8tqsc/0zRb245FV4V6ZI2Y8xQMbS +Qu2zfgGYcS1dIIPoKqNin2FpdUZMi+EzgqQDLYthp2EMiazTrJ5qAqyUs+kKDqy00DONfzRydvH t6u5S/24amNnqUpZ4oqOCsu9yFGW+gTWaLbosQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for gy/DNSKEY
	Received 586 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (586 bytes) ;; HEADER SECTION ;; id = 56916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS sns-pb.isc.org. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . NvZ6fNSASGgMiZDVWgDlHyEUGICwhuQk4rB1seW6c3K4z56CAoWkN60TC5rYlCCZHd8WnwtTpB9q qGdA+Iu7hd0KcdrzecVY+HQ0oNWIYLrIM+dBHi3bgniWibhRQHPijj05V3wVUNxB0LZz6O8TKpp/ bB/i4q0u2zY/LVvA6afF66r90ZutekPHoIt8Qw8IF7nqAjrJ8tqsc/0zRb245FV4V6ZI2Y8xQMbS +Qu2zfgGYcS1dIIPoKqNin2FpdUZMi+EzgqQDLYthp2EMiazTrJ5qAqyUs+kKDqy00DONfzRydvH t6u5S/24amNnqUpZ4oqOCsu9yFGW+gTWaLbosQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gy

	Checking DS between . and gy
	Query to i.root-servers.net for gy/DS
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for gy/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (366 bytes) ;; HEADER SECTION ;; id = 48976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DS ;; ANSWER SECTION (2 records) gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df ) gy. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . NvZ6fNSASGgMiZDVWgDlHyEUGICwhuQk4rB1seW6c3K4z56CAoWkN60TC5rYlCCZHd8WnwtTpB9q qGdA+Iu7hd0KcdrzecVY+HQ0oNWIYLrIM+dBHi3bgniWibhRQHPijj05V3wVUNxB0LZz6O8TKpp/ bB/i4q0u2zY/LVvA6afF66r90ZutekPHoIt8Qw8IF7nqAjrJ8tqsc/0zRb245FV4V6ZI2Y8xQMbS +Qu2zfgGYcS1dIIPoKqNin2FpdUZMi+EzgqQDLYthp2EMiazTrJ5qAqyUs+kKDqy00DONfzRydvH t6u5S/24amNnqUpZ4oqOCsu9yFGW+gTWaLbosQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gy in the . zone
	DS=50885/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gy. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . NvZ6fNSASGgMiZDVWgDlHyEUGICwhuQk4rB1seW6c3K4z56CAoWkN60TC5rYlCCZHd8WnwtTpB9q qGdA+Iu7hd0KcdrzecVY+HQ0oNWIYLrIM+dBHi3bgniWibhRQHPijj05V3wVUNxB0LZz6O8TKpp/ bB/i4q0u2zY/LVvA6afF66r90ZutekPHoIt8Qw8IF7nqAjrJ8tqsc/0zRb245FV4V6ZI2Y8xQMbS +Qu2zfgGYcS1dIIPoKqNin2FpdUZMi+EzgqQDLYthp2EMiazTrJ5qAqyUs+kKDqy00DONfzRydvH t6u5S/24amNnqUpZ4oqOCsu9yFGW+gTWaLbosQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=50885/SHA-256 is now in the chain-of-trust
	`gy. 86400 IN DS ( 50885 8 2 6b06025eccb7efb21793e58afd2ce16d5949884f4ac352047daccd841627a3df )`
	Query to ns.cocca.fr for gy/DNSKEY
	Received 1385 bytes from 185.17.236.93
	;; Answer received from 185.17.236.93 (1385 bytes) ;; HEADER SECTION ;; id = 60504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (3 records) gy. 86400 IN DNSKEY ( 257 3 8 AwEAAbvxl2xtqOCSO5R/Z3AwDKany7ukbFMfNz97rrtusq6kbiNH+H9hJvcwo/R4mYw9jPpZ6Gyh 3sMFQBfdlgKmFwgjHxpppiaDKkxbuzIWWqNuNu805zWgzL45EqAQf4fAkyOLeJdsY4aYjrJXWrGc XfPCtg8t0WAxTVALWl81cxxiPBAE7lxPnC34KFdCsFe/G075yQPXXdk4hKCxe4xfG4JtHke3MS6m AtX/TYdA9CORJdRG+pHA9n1MUkzq2rO0OEi3nJbnOowZzSpnFMtKbV7c7Yp7zPxLXvzlUOfudyo6 ZNRmGYXe1LTb4fyeRd2cv2Zk3PqW7x9bTNtXxn63PuF/lAQZhFvL/Kru37tiYThtK0HGj+YXLsta EiRy/4iE9G8mLf4g73iXLKHnBUG0N6Y3uucTIAXHjK92A9L/y1eztsZb3pytdHaHP2cUDTJR1P9Q ouLOq1QDEzKQlAq9mlzb5HqWciknFJukr8Sd++sX5P1cgWVbN1jEpHjda/NEy59uT0CtRZsinCT/ 52CI2bmGBdsxueLpeO4CoBhE0E8wDb8vkbG9PymayBO1SLVZcEHEAIFJPXYqmR2wLoTTIAOG960E ChapI+gDbkmJ/ZX24rATcmctP3kFpUj4mOt8swXusL4bnMuvr40a8n0e8LE6MhHW0qxtNaJVqrNc zGF9 ) ; Key ID = 50885 gy. 86400 IN DNSKEY ( 256 3 8 AwEAAbmsLQQBEGhXKsM9ntBpjnHQP/SCEyyHvVd/1N/e24WmwLebQF6VmqmovOxWhZTjXFoVYZY8 poNaA+n77t5MHrqOH2jfCl+hLpWg0Y/l/XmbjQ2jAWnqlpYWq+2c8xclbxtCOEzspYx07N82OcLt Gpbz0VCv8OWVeuytkG2oRo/9/v4/s4P6ps/uf22GsV5FZ4uefEdqfmVOvv3WMrVjihxdk/mk2xoz BZCbgc35XcZvdKIShI95NNFvP+rUkGNP6itfZ2k6ZZi1wDB7ok3/5nr7I68lcxO9rNxjSQQTkg/y UJClHVgNVfDzGbKSWOh0nyWoIms3sDQacR9vPBYvBXk= ) ; Key ID = 50665 gy. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191006060000 20190919060000 50885 gy. AxooUZfKrbsYWzcs9HHq7UtggfpLCyVJENMbtrQ/l7ZlrdB3fD8+lZXyeoWAiZoEChdSlX5GosZs oSym/i9xAiC3YFWlXgxoKWknCaFdgaqdktt5vUhbczrzk7h9yIEMiYKC+lRlA9tgWlEtQVD7W5qg 8Ejj3BUf7gnCCui2g10FW7i/jFFEZ/RJn0X3bkXoRHMvBQVMzFrXxWiGdoombtW/ZDoVLMnmTBWz 3kaT739pcNWhIqKqJmFgXL4z3vkGmENwy/b6JgeXtYYWzTrr0G2pcXt+99wyGiLV4pbbOV+kB6s7 JlRg0YifMFT7dGW2pqiMu8BPwsaDkPZCOGF5CcE9ux+AQqlYdT0TC0ALG3PLXKIAVpB4i1wj3tWP 6v+TDaNPiZ3P55Dc2RtlviDTNyjqaKk+6CezDVaBxf2yi66pIRn6m6Pqr1CFaeM+Kh1bbtRamgC5 Kfi/Wrdkn9hzp9esVTtIQgFsuJvUZoupoBxt6fqHjTid5LMbttuwm/yHRWUTuNCqDvBRnC7jzCgc O1n2cpzKCGTpS6wq/y5TW4aghpZAHjC5gG4gXbljJrg5DVayfoaI4UiwXi5w7ZnCzP0ypCXXoYTs ff6ibkAbJRMwyQcCB/kOO/2/S4azfSizxxP5FhTyn0x1b+rOA38jU4hHSVHVbuaI1SxObBhhpB4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gy
	gy. 86400 IN DNSKEY ( 257 3 8 AwEAAbvxl2xtqOCSO5R/Z3AwDKany7ukbFMfNz97rrtusq6kbiNH+H9hJvcwo/R4mYw9jPpZ6Gyh 3sMFQBfdlgKmFwgjHxpppiaDKkxbuzIWWqNuNu805zWgzL45EqAQf4fAkyOLeJdsY4aYjrJXWrGc XfPCtg8t0WAxTVALWl81cxxiPBAE7lxPnC34KFdCsFe/G075yQPXXdk4hKCxe4xfG4JtHke3MS6m AtX/TYdA9CORJdRG+pHA9n1MUkzq2rO0OEi3nJbnOowZzSpnFMtKbV7c7Yp7zPxLXvzlUOfudyo6 ZNRmGYXe1LTb4fyeRd2cv2Zk3PqW7x9bTNtXxn63PuF/lAQZhFvL/Kru37tiYThtK0HGj+YXLsta EiRy/4iE9G8mLf4g73iXLKHnBUG0N6Y3uucTIAXHjK92A9L/y1eztsZb3pytdHaHP2cUDTJR1P9Q ouLOq1QDEzKQlAq9mlzb5HqWciknFJukr8Sd++sX5P1cgWVbN1jEpHjda/NEy59uT0CtRZsinCT/ 52CI2bmGBdsxueLpeO4CoBhE0E8wDb8vkbG9PymayBO1SLVZcEHEAIFJPXYqmR2wLoTTIAOG960E ChapI+gDbkmJ/ZX24rATcmctP3kFpUj4mOt8swXusL4bnMuvr40a8n0e8LE6MhHW0qxtNaJVqrNc zGF9 ) ; Key ID = 50885
	`gy. 86400 IN DNSKEY ( 256 3 8 AwEAAbmsLQQBEGhXKsM9ntBpjnHQP/SCEyyHvVd/1N/e24WmwLebQF6VmqmovOxWhZTjXFoVYZY8 poNaA+n77t5MHrqOH2jfCl+hLpWg0Y/l/XmbjQ2jAWnqlpYWq+2c8xclbxtCOEzspYx07N82OcLt Gpbz0VCv8OWVeuytkG2oRo/9/v4/s4P6ps/uf22GsV5FZ4uefEdqfmVOvv3WMrVjihxdk/mk2xoz BZCbgc35XcZvdKIShI95NNFvP+rUkGNP6itfZ2k6ZZi1wDB7ok3/5nr7I68lcxO9rNxjSQQTkg/y UJClHVgNVfDzGbKSWOh0nyWoIms3sDQacR9vPBYvBXk= ) ; Key ID = 50665`
	DNSKEY=50885/SEP is now in the chain-of-trust
	DS=50885/SHA-256 verifies DNSKEY=50885/SEP
	Found 1 RRSIGs over DNSKEY RRset
	gy. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191006060000 20190919060000 50885 gy. AxooUZfKrbsYWzcs9HHq7UtggfpLCyVJENMbtrQ/l7ZlrdB3fD8+lZXyeoWAiZoEChdSlX5GosZs oSym/i9xAiC3YFWlXgxoKWknCaFdgaqdktt5vUhbczrzk7h9yIEMiYKC+lRlA9tgWlEtQVD7W5qg 8Ejj3BUf7gnCCui2g10FW7i/jFFEZ/RJn0X3bkXoRHMvBQVMzFrXxWiGdoombtW/ZDoVLMnmTBWz 3kaT739pcNWhIqKqJmFgXL4z3vkGmENwy/b6JgeXtYYWzTrr0G2pcXt+99wyGiLV4pbbOV+kB6s7 JlRg0YifMFT7dGW2pqiMu8BPwsaDkPZCOGF5CcE9ux+AQqlYdT0TC0ALG3PLXKIAVpB4i1wj3tWP 6v+TDaNPiZ3P55Dc2RtlviDTNyjqaKk+6CezDVaBxf2yi66pIRn6m6Pqr1CFaeM+Kh1bbtRamgC5 Kfi/Wrdkn9hzp9esVTtIQgFsuJvUZoupoBxt6fqHjTid5LMbttuwm/yHRWUTuNCqDvBRnC7jzCgc O1n2cpzKCGTpS6wq/y5TW4aghpZAHjC5gG4gXbljJrg5DVayfoaI4UiwXi5w7ZnCzP0ypCXXoYTs ff6ibkAbJRMwyQcCB/kOO/2/S4azfSizxxP5FhTyn0x1b+rOA38jU4hHSVHVbuaI1SxObBhhpB4= )
	RRSIG=50885 and DNSKEY=50885/SEP verifies the DNSKEY RRset
	DNSKEY=50665 is now in the chain-of-trust
	Query to gy-ns.anycast.pch.net for nl.gy/A
	Received 866 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (866 bytes) ;; HEADER SECTION ;; id = 2429 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 va6hfkj4q197v1pked5cujbik12bnt08 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. Oc1H+DtnFvcfThaTcPyRjCsu86nwEfzsBvQYt3xKLpFH0Sxn+5b4oXywv1fa3D4d7ASldyZsLCFE I0PbPtjXy5Pb74Y3uls5JpTRSu5ZPqsvlYvlnMKnMK4uKY5vDiIcRuBONW+98oKfW5MHpiGrOsTP lqyOMGeindar3A1vKDsSwaHTSgvg5I3rQirhP/nt+r+XXoyNClhzVrCtEhRHhvhEIoN379udUdJp jahKuDHnY/VuSxfEM8yuDj+YCPv7NL0tJt51z0hEGLMyPCsKxX+2/C8FxldkpgaHHuwk4FJStdkF 1rPrY/mRERseou65mMF7ILYS7Nx98tid54vrfA== ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 5nh3r7a15ksrcpfnf5ko2i42cmur96hi NS DS RRSIG ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. BIV4pman7vxg1w917e7C/sJh8c1G2G58YMVcx/rqkjLMIQhXoEFvgjn7XSBHmux75kIHU7J1znOd 4d+UjGUXYcpUrx1bI4XBiO4r3PIOirs6HbQuJhDyY7AU1t4JrZQgXDOpLZ4kWO4CJbBjlxkQnF+h 2qLcFN0ldVLt71wLksM+VM8LdVhrDNzT+moB2qoZkevLm5NspXS6Q/q1kw2Ck6R5uv5CuEGTguHb FCvSiUF5S7AfCmTIP+IL93B/yD16AF+nyvCi9LG6uCEzpT0BkU2ijfE0q25xRgIUz5OnxxcE1tzt BqA3J7qxd09jZ4KIi5tLGnI/AhOQ03m/QCLhVg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.cocca.fr for nl.gy/DNSKEY
	Received 866 bytes from 185.17.236.93
	;; Answer received from 185.17.236.93 (866 bytes) ;; HEADER SECTION ;; id = 31040 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns2.20dragons.com. TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 va6hfkj4q197v1pked5cujbik12bnt08 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. Oc1H+DtnFvcfThaTcPyRjCsu86nwEfzsBvQYt3xKLpFH0Sxn+5b4oXywv1fa3D4d7ASldyZsLCFE I0PbPtjXy5Pb74Y3uls5JpTRSu5ZPqsvlYvlnMKnMK4uKY5vDiIcRuBONW+98oKfW5MHpiGrOsTP lqyOMGeindar3A1vKDsSwaHTSgvg5I3rQirhP/nt+r+XXoyNClhzVrCtEhRHhvhEIoN379udUdJp jahKuDHnY/VuSxfEM8yuDj+YCPv7NL0tJt51z0hEGLMyPCsKxX+2/C8FxldkpgaHHuwk4FJStdkF 1rPrY/mRERseou65mMF7ILYS7Nx98tid54vrfA== ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 5nh3r7a15ksrcpfnf5ko2i42cmur96hi NS DS RRSIG ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. BIV4pman7vxg1w917e7C/sJh8c1G2G58YMVcx/rqkjLMIQhXoEFvgjn7XSBHmux75kIHU7J1znOd 4d+UjGUXYcpUrx1bI4XBiO4r3PIOirs6HbQuJhDyY7AU1t4JrZQgXDOpLZ4kWO4CJbBjlxkQnF+h 2qLcFN0ldVLt71wLksM+VM8LdVhrDNzT+moB2qoZkevLm5NspXS6Q/q1kw2Ck6R5uv5CuEGTguHb FCvSiUF5S7AfCmTIP+IL93B/yD16AF+nyvCi9LG6uCEzpT0BkU2ijfE0q25xRgIUz5OnxxcE1tzt BqA3J7qxd09jZ4KIi5tLGnI/AhOQ03m/QCLhVg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gy

nl.gy

	Checking DS between gy and nl.gy
	Query to gy-ns.anycast.pch.net for nl.gy/DS
	Received 1126 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (1126 bytes) ;; HEADER SECTION ;; id = 39381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 va6hfkj4q197v1pked5cujbik12bnt08 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) TUHI47606F3PJ3R8UBMFGC6058KF8FN0.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. Oc1H+DtnFvcfThaTcPyRjCsu86nwEfzsBvQYt3xKLpFH0Sxn+5b4oXywv1fa3D4d7ASldyZsLCFE I0PbPtjXy5Pb74Y3uls5JpTRSu5ZPqsvlYvlnMKnMK4uKY5vDiIcRuBONW+98oKfW5MHpiGrOsTP lqyOMGeindar3A1vKDsSwaHTSgvg5I3rQirhP/nt+r+XXoyNClhzVrCtEhRHhvhEIoN379udUdJp jahKuDHnY/VuSxfEM8yuDj+YCPv7NL0tJt51z0hEGLMyPCsKxX+2/C8FxldkpgaHHuwk4FJStdkF 1rPrY/mRERseou65mMF7ILYS7Nx98tid54vrfA== ) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019091915 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) gy. 38400 IN RRSIG ( SOA 8 1 38400 20190926170000 20190909170000 50665 gy. RCyosQ5QuUUrtUzuIcB4EOn+3mQfLgDXzny8lOB7ibmgawKAN8aW3XWiRADT+85KumQMS9yykylO gatN5MFpCniOIrEPqg24JmDrehvrpmswHDjlQ8nBZu+5UcY1PEAwXvIMqZSz0yAzQ8uCkbKv7fOk yaS4EKexdAvrJQJQ/UmVL5veuzvovV6gzRa2lc+fJhAmlHkkcYEYOjgphcB6s5eU8JQlyv+B63Sh UZl7QozNgKxuTxK1Trqd7m+Yr7Vf5n43fdgahj8eGf0/dcBJzBxsZr/Qo7WdeaceBNqwao4Kcgre PlbNgAhtdVh0j2rSkbwXYeFpfz+Q9YFScujr+g== ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN NSEC3 ( 1 1 10 56fc3e85 5nh3r7a15ksrcpfnf5ko2i42cmur96hi NS DS RRSIG ) 25FB1TT5ILO31INA7E44ABB08E73JPMA.gy. 38400 IN RRSIG ( NSEC3 8 2 38400 20190926170000 20190909170000 50665 gy. BIV4pman7vxg1w917e7C/sJh8c1G2G58YMVcx/rqkjLMIQhXoEFvgjn7XSBHmux75kIHU7J1znOd 4d+UjGUXYcpUrx1bI4XBiO4r3PIOirs6HbQuJhDyY7AU1t4JrZQgXDOpLZ4kWO4CJbBjlxkQnF+h 2qLcFN0ldVLt71wLksM+VM8LdVhrDNzT+moB2qoZkevLm5NspXS6Q/q1kw2Ck6R5uv5CuEGTguHb FCvSiUF5S7AfCmTIP+IL93B/yD16AF+nyvCi9LG6uCEzpT0BkU2ijfE0q25xRgIUz5OnxxcE1tzt BqA3J7qxd09jZ4KIi5tLGnI/AhOQ03m/QCLhVg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gy in the gy zone
	Query to ns3.20dragons.com for nl.gy/DNSKEY
	Error querying ns3.20dragons.com/2a04:92c7:e:73e:0:0:0:1001 for nl.gy/DNSKEY: 'IPv6 transport disabled'
	ns3.20dragons.com returns REFUSED for nl.gy/DNSKEY
	Query to ns2.20dragons.com for nl.gy/DNSKEY
	Received 215 bytes from 107.172.60.68
	;; Answer received from 107.172.60.68 (215 bytes) ;; HEADER SECTION ;; id = 54780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20191003000000 20190912000000 14643 nl.gy. ia1h5qHqzTECECr71eHHfzcT6ByRS31cIkZCMMhEWbII2fIb7oj0SsgpJhecGPIoD9rX/cB5lI38 BORpfa6dHw== ) nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for nl.gy
	`nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20191003000000 20190912000000 14643 nl.gy. ia1h5qHqzTECECr71eHHfzcT6ByRS31cIkZCMMhEWbII2fIb7oj0SsgpJhecGPIoD9rX/cB5lI38 BORpfa6dHw== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the DNSKEY RRset
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 107.172.234.158
	;; Answer received from 107.172.234.158 (151 bytes) ;; HEADER SECTION ;; id = 19365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 14643 nl.gy. xhzT7BzxLGm0AM7cD0uBd4ozut14QCEwkRNDiA2U7hrXcvOAwO22sOfMxsydABAAuU0TjHAvE7+Y rHrwPHL/Rw== ) nl.gy. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy is authoritative for nl.gy
	Found RRSIG signed by nl.gy zone
	Query to ns4.20dragons.com for nl.gy/SOA
	Received 195 bytes from 107.172.234.158
	;; Answer received from 107.172.234.158 (195 bytes) ;; HEADER SECTION ;; id = 661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 14643 nl.gy. YKahifJGxtSdu9B79eUx/o2uGlmfJxPy8fSSffVJZZ0kxlKnwWmdxW1X3cK3ewzdrpZeyy2gbpRJ Rk4eR+sdFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for nl.gy/SOA
	Received 195 bytes from 107.172.60.68
	;; Answer received from 107.172.60.68 (195 bytes) ;; HEADER SECTION ;; id = 54439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 14643 nl.gy. YKahifJGxtSdu9B79eUx/o2uGlmfJxPy8fSSffVJZZ0kxlKnwWmdxW1X3cK3ewzdrpZeyy2gbpRJ Rk4eR+sdFw== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.20dragons.com for nl.gy/SOA
	Error querying ns1.20dragons.com/2001:ac8:22:2:0:0:11fc:6413 for nl.gy/SOA: 'IPv6 transport disabled'
	Received 195 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (195 bytes) ;; HEADER SECTION ;; id = 1928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 14643 nl.gy. YKahifJGxtSdu9B79eUx/o2uGlmfJxPy8fSSffVJZZ0kxlKnwWmdxW1X3cK3ewzdrpZeyy2gbpRJ Rk4eR+sdFw== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 107.172.234.158
	;; Answer received from 107.172.234.158 (151 bytes) ;; HEADER SECTION ;; id = 34961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 14643 nl.gy. xhzT7BzxLGm0AM7cD0uBd4ozut14QCEwkRNDiA2U7hrXcvOAwO22sOfMxsydABAAuU0TjHAvE7+Y rHrwPHL/Rw== ) nl.gy. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy A RR has value 185.164.136.124
	Found 1 RRSIGs over A RRset
	`nl.gy. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 14643 nl.gy. xhzT7BzxLGm0AM7cD0uBd4ozut14QCEwkRNDiA2U7hrXcvOAwO22sOfMxsydABAAuU0TjHAvE7+Y rHrwPHL/Rw== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gy at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: