DNSSEC Analyzer - nsec3-opt-out.wb.sidnlabs.nl

Domain Name:

Time: 2022-12-04 17:53:42 UTC, NTP stratum 16

Analyzing DNSSEC problems for nsec3-opt-out.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 865 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (865 octets) ;; HEADER SECTION ;; id = 10934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221221000000 20221130000000 20326 . EBqHCSXvacXYZX3LBW7wfHm6ObNQiH9UnraUjPzmaxaMW6//o6xiHpfz/ejt3Z74Rgqieuu8aFG/ xVFMtzOFGkceWdPVU2cUIhe4hfdIpspHG6OdYXZyLM/0bebCI8PRVeFOk66/jC2VW5gRO1mmX2fS tT1BufXAsVNBjwCW+lRi5KgOerBk1krKNJNqf9GUe8YugNikmm0T9Vgvgo2HwWXw9zT0MfFW0Q/1 U2IR3DAGcALdTx/+mXuNTjPXVmjuI2XkXzZMbZrV729d0edQIKajMyrjjEhlsug1Zo3dk0KaYBmd JgVt/eDthMKY4JheyUsPYkqBxZK10DAHRO7INA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221221000000 20221130000000 20326 . EBqHCSXvacXYZX3LBW7wfHm6ObNQiH9UnraUjPzmaxaMW6//o6xiHpfz/ejt3Z74Rgqieuu8aFG/ xVFMtzOFGkceWdPVU2cUIhe4hfdIpspHG6OdYXZyLM/0bebCI8PRVeFOk66/jC2VW5gRO1mmX2fS tT1BufXAsVNBjwCW+lRi5KgOerBk1krKNJNqf9GUe8YugNikmm0T9Vgvgo2HwWXw9zT0MfFW0Q/1 U2IR3DAGcALdTx/+mXuNTjPXVmjuI2XkXzZMbZrV729d0edQIKajMyrjjEhlsug1Zo3dk0KaYBmd JgVt/eDthMKY4JheyUsPYkqBxZK10DAHRO7INA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to d.root-servers.net for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 644 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (644 octets) ;; HEADER SECTION ;; id = 32004 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . EV1PvN0HiLIkW2xs9fhq9dl6J9OYSzbHiKPAwVVPV5b7/nawcrW4RKocKvC8oT27akaPqI5FGKuZ s0yWHas4qoTZOEpEYyPNMCVK5cXsmB6/RILzAXHz1qrL+uqZGXz5JCIeMshDGpaioJiOXLbk011g gaVXhXsebXVYpX5bcvDVSWCcCFKK6aBUbuyIJCsjRFixeQN7ugmpe7VjM2V5X3KLDFAUdzCYx1q1 rkITYPsr+ohh6SK98nD9UZuqI42PxUMIs3hwA64cIf8ffsHwEW8wIitnvonUCLtq0ju92Ok63fUy ffylhNZTUPlD5Aqr5fCLlKy4G56VFf/7rEvWrA== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to m.root-servers.net for nl/DNSKEY
	Received 620 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (620 octets) ;; HEADER SECTION ;; id = 23837 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . EV1PvN0HiLIkW2xs9fhq9dl6J9OYSzbHiKPAwVVPV5b7/nawcrW4RKocKvC8oT27akaPqI5FGKuZ s0yWHas4qoTZOEpEYyPNMCVK5cXsmB6/RILzAXHz1qrL+uqZGXz5JCIeMshDGpaioJiOXLbk011g gaVXhXsebXVYpX5bcvDVSWCcCFKK6aBUbuyIJCsjRFixeQN7ugmpe7VjM2V5X3KLDFAUdzCYx1q1 rkITYPsr+ohh6SK98nD9UZuqI42PxUMIs3hwA64cIf8ffsHwEW8wIitnvonUCLtq0ju92Ok63fUy ffylhNZTUPlD5Aqr5fCLlKy4G56VFf/7rEvWrA== ) ;; ADDITIONAL SECTION (9 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns2.dns.nl. 172800 IN A 194.146.106.42 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to h.root-servers.net for nl/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (366 octets) ;; HEADER SECTION ;; id = 54547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . EV1PvN0HiLIkW2xs9fhq9dl6J9OYSzbHiKPAwVVPV5b7/nawcrW4RKocKvC8oT27akaPqI5FGKuZ s0yWHas4qoTZOEpEYyPNMCVK5cXsmB6/RILzAXHz1qrL+uqZGXz5JCIeMshDGpaioJiOXLbk011g gaVXhXsebXVYpX5bcvDVSWCcCFKK6aBUbuyIJCsjRFixeQN7ugmpe7VjM2V5X3KLDFAUdzCYx1q1 rkITYPsr+ohh6SK98nD9UZuqI42PxUMIs3hwA64cIf8ffsHwEW8wIitnvonUCLtq0ju92Ok63fUy ffylhNZTUPlD5Aqr5fCLlKy4G56VFf/7rEvWrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . EV1PvN0HiLIkW2xs9fhq9dl6J9OYSzbHiKPAwVVPV5b7/nawcrW4RKocKvC8oT27akaPqI5FGKuZ s0yWHas4qoTZOEpEYyPNMCVK5cXsmB6/RILzAXHz1qrL+uqZGXz5JCIeMshDGpaioJiOXLbk011g gaVXhXsebXVYpX5bcvDVSWCcCFKK6aBUbuyIJCsjRFixeQN7ugmpe7VjM2V5X3KLDFAUdzCYx1q1 rkITYPsr+ohh6SK98nD9UZuqI42PxUMIs3hwA64cIf8ffsHwEW8wIitnvonUCLtq0ju92Ok63fUy ffylhNZTUPlD5Aqr5fCLlKy4G56VFf/7rEvWrA== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 893 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (893 octets) ;; HEADER SECTION ;; id = 55568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaMqlAUdcGCR0epck8ysH0mCyzTnPgOwxp42KkroCB1S/ot9jZXhbyTPDcNE59kwGK4WIujk 9wszIA0a91/FHXtyA4m7NtnJIn1fu5dMkWjAAqOLwr6n2MUBX18VYcZUnsmYCzGmg8aN+5BXxny9 uT5iqOc/yVuh0REaDz40HSOF ) ; Key ID = 3786 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdBMHLVXYPJGb+o8QXIj9v1CtqTu+EybrWyG/ShJp8/tc37GBt5NR7DzugoE9nfr2M0eKjnc 4E/qO6GauZouq6tLQuC8k4RD49u0/ecYZV/+EZ6Qv3I/iNOyatR9qhluj1V16hLRpMsHApVFE8rW oSlcxqM9Sbe4BfAHBmx582cp ) ; Key ID = 52584 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221214194230 20221201000734 34112 nl. EQkJcXE8bdCHx9xeh5FXBNKBExpSG4GVKi7qZyZ2VJe3YTwMjiOAYXncPH9kMsxBqWT1C31gT4+A fLekm1VJbThKGK1krKenz4FS0BiqUj6Gsph7C24QIXxUpToDMZy8WDo8HY5n6gS9PDwokHpt3iRp L9bV1oFtSyUMfwyQIo6clGwMA+sfHIu7FllVtAbvS86W55dRl42wrzfshtwP+nSMmrYPSF8h4atd mJ+FBnt9ljRtvmZVptomcj0lMdLbwykvEQ9dqnkDZxZCYTF+WqJ1R1uqTZSoo8iN8cuXA5cP+AIR qjk4yCl4NYlBEOfq/NBuBW4CHQLQtptnYgLZwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaMqlAUdcGCR0epck8ysH0mCyzTnPgOwxp42KkroCB1S/ot9jZXhbyTPDcNE59kwGK4WIujk 9wszIA0a91/FHXtyA4m7NtnJIn1fu5dMkWjAAqOLwr6n2MUBX18VYcZUnsmYCzGmg8aN+5BXxny9 uT5iqOc/yVuh0REaDz40HSOF ) ; Key ID = 3786`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdBMHLVXYPJGb+o8QXIj9v1CtqTu+EybrWyG/ShJp8/tc37GBt5NR7DzugoE9nfr2M0eKjnc 4E/qO6GauZouq6tLQuC8k4RD49u0/ecYZV/+EZ6Qv3I/iNOyatR9qhluj1V16hLRpMsHApVFE8rW oSlcxqM9Sbe4BfAHBmx582cp ) ; Key ID = 52584`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221214194230 20221201000734 34112 nl. EQkJcXE8bdCHx9xeh5FXBNKBExpSG4GVKi7qZyZ2VJe3YTwMjiOAYXncPH9kMsxBqWT1C31gT4+A fLekm1VJbThKGK1krKenz4FS0BiqUj6Gsph7C24QIXxUpToDMZy8WDo8HY5n6gS9PDwokHpt3iRp L9bV1oFtSyUMfwyQIo6clGwMA+sfHIu7FllVtAbvS86W55dRl42wrzfshtwP+nSMmrYPSF8h4atd mJ+FBnt9ljRtvmZVptomcj0lMdLbwykvEQ9dqnkDZxZCYTF+WqJ1R1uqTZSoo8iN8cuXA5cP+AIR qjk4yCl4NYlBEOfq/NBuBW4CHQLQtptnYgLZwA== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=3786 is now in the chain-of-trust
	DNSKEY=52584 is now in the chain-of-trust
	Query to ns4.dns.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 471 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (471 octets) ;; HEADER SECTION ;; id = 52983 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221217023952 20221203080812 3786 nl. Rzr+hgK/Ge/wVKQP9lnalLaYnm3HsxQXQBi8oRkGqU2fc+nocnk4ytTWyd8331Fn3Z62uhZdK7Ri Y5fJQVGaVPlcDaE6jLycZuoK8T3dj2g5/DGQHP2nj6d1m86sajkotkxcnd0RdNiM3sOzrXw7RZtQ y3EtHCD2ZkOLyxjJ4NY= ) ;; ADDITIONAL SECTION (7 records) ns5.sidn.nl. 3600 IN A 145.40.68.55 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.dns.nl for sidnlabs.nl/DNSKEY
	Received 443 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (443 octets) ;; HEADER SECTION ;; id = 43155 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221217023952 20221203080812 3786 nl. Rzr+hgK/Ge/wVKQP9lnalLaYnm3HsxQXQBi8oRkGqU2fc+nocnk4ytTWyd8331Fn3Z62uhZdK7Ri Y5fJQVGaVPlcDaE6jLycZuoK8T3dj2g5/DGQHP2nj6d1m86sajkotkxcnd0RdNiM3sOzrXw7RZtQ y3EtHCD2ZkOLyxjJ4NY= ) ;; ADDITIONAL SECTION (7 records) ns5.sidn.nl. 3600 IN A 145.40.68.55 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns4.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (250 octets) ;; HEADER SECTION ;; id = 33772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221217023952 20221203080812 3786 nl. Rzr+hgK/Ge/wVKQP9lnalLaYnm3HsxQXQBi8oRkGqU2fc+nocnk4ytTWyd8331Fn3Z62uhZdK7Ri Y5fJQVGaVPlcDaE6jLycZuoK8T3dj2g5/DGQHP2nj6d1m86sajkotkxcnd0RdNiM3sOzrXw7RZtQ y3EtHCD2ZkOLyxjJ4NY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221217023952 20221203080812 3786 nl. Rzr+hgK/Ge/wVKQP9lnalLaYnm3HsxQXQBi8oRkGqU2fc+nocnk4ytTWyd8331Fn3Z62uhZdK7Ri Y5fJQVGaVPlcDaE6jLycZuoK8T3dj2g5/DGQHP2nj6d1m86sajkotkxcnd0RdNiM3sOzrXw7RZtQ y3EtHCD2ZkOLyxjJ4NY= )`
	RRSIG=3786 and DNSKEY=3786 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns5.sidn.nl for sidnlabs.nl/DNSKEY
	Received 763 bytes from 145.40.68.55
	;; Response received from 145.40.68.55 (763 octets) ;; HEADER SECTION ;; id = 40346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221217120214 20221117111029 52720 sidnlabs.nl. Y97Jo1PAoJ0o6Zi9XuXqQDha3ufhByVX52xWNgN7zCLXULWqmvjbS6KK0Yf0a9RTSVuL4pwdF9cp tkRv6jaLyPCT3QsX5OrAMbw+5zTAAMOeJZ5TdOe6QpWTfQfemDN/bhj5GS6JQ6WiQ0D/H+5wwxFj Ze1R2pZ5vuYUuxx5Z5zpHPpANK2REHc1YlrSFH0CdlKY9QjwtLZ0uVu2+Y8RuGA8yAtYdqH8ihL4 Ql9qWeg2tcwlcG6+BkzgqY7fZ17uykGVhYY0XiYjjdhv2d3VyfsBLMVt++M6DTO78oW41ZOIHrhQ l42wgwbFlaoKvEEpcUI7PttKmOsbgtNANViizw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221217120214 20221117111029 52720 sidnlabs.nl. Y97Jo1PAoJ0o6Zi9XuXqQDha3ufhByVX52xWNgN7zCLXULWqmvjbS6KK0Yf0a9RTSVuL4pwdF9cp tkRv6jaLyPCT3QsX5OrAMbw+5zTAAMOeJZ5TdOe6QpWTfQfemDN/bhj5GS6JQ6WiQ0D/H+5wwxFj Ze1R2pZ5vuYUuxx5Z5zpHPpANK2REHc1YlrSFH0CdlKY9QjwtLZ0uVu2+Y8RuGA8yAtYdqH8ihL4 Ql9qWeg2tcwlcG6+BkzgqY7fZ17uykGVhYY0XiYjjdhv2d3VyfsBLMVt++M6DTO78oW41ZOIHrhQ l42wgwbFlaoKvEEpcUI7PttKmOsbgtNANViizw== )`
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns3.sidn.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 1111 bytes from 194.0.30.2
	;; Response received from 194.0.30.2 (1111 octets) ;; HEADER SECTION ;; id = 53803 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221216153526 20221116145551 20853 sidnlabs.nl. x8VIqObCGlbsYq5VtSJq5vs6HxB6R82NIP0j2XOWRyKVYF3ozIfm+NXeDuQg1wdZzB2spxQ6RrHB u+AuM4uugl39xy0uS5v+ROrMV+lvodhWuG5SEoWGdqqXoxtrEhF7x+D0vQEZXyDoUQ0gl+0rxK3p WzE5UNOrnm6W/6JThVs= ) ;; ADDITIONAL SECTION (14 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20221213101104 20221113100749 20853 sidnlabs.nl. iNdEqNDtgU3E2eWvHv9EKBtr9LWy8/b35i+4EUkLHuB4TgWfQzR5ycbALou6Gue213j+MxjIMDOt 9TqLcQn4jpZLUxZlh7IUU2GTVlXdek6qbl7lnFCUWrS1GmDfpDBPJDgmcOAablj8QQZOIGh3Bh7k 3b6+Q+8bIMvhvbnuyo8= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20221213101104 20221113100749 20853 sidnlabs.nl. aY0HOeEpghK+Y0uiVzDm2hqbRJZuLXRxR+/fKTaOSlAmAxqXkFNyjmnfk2oBfvNkkm5Rw9+rW3gt O5wtOf/KKxPFbsu9DsCN6mAK7+G1xqrarbfZCF/qoV0S0XgvkZjltOgBdc9ZWsnv7Idlhb/2hBfd lczFkINyj4BEQTdai70= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20230102070904 20221203062700 20853 sidnlabs.nl. Tkh7oL7mVcMdDBeco0pmxWA/F9Nhv8ADFLWk5LlqAMsh/Ke0XLU4IkEUN1gY7iVPubrHXdRziDpQ wmyATVbjn/ClAXyf6SxdjhZ30cM75NJKnLzdBWWiGWtQ5powZ4lzBTr5fY5CQyM2UY0HRmcB1Gdt uhx+s7aQ7wtsVP5pg5c= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1097 bytes from 194.0.30.2
	;; Response received from 194.0.30.2 (1097 octets) ;; HEADER SECTION ;; id = 9651 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221216153526 20221116145551 20853 sidnlabs.nl. x8VIqObCGlbsYq5VtSJq5vs6HxB6R82NIP0j2XOWRyKVYF3ozIfm+NXeDuQg1wdZzB2spxQ6RrHB u+AuM4uugl39xy0uS5v+ROrMV+lvodhWuG5SEoWGdqqXoxtrEhF7x+D0vQEZXyDoUQ0gl+0rxK3p WzE5UNOrnm6W/6JThVs= ) ;; ADDITIONAL SECTION (14 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20221213101104 20221113100749 20853 sidnlabs.nl. iNdEqNDtgU3E2eWvHv9EKBtr9LWy8/b35i+4EUkLHuB4TgWfQzR5ycbALou6Gue213j+MxjIMDOt 9TqLcQn4jpZLUxZlh7IUU2GTVlXdek6qbl7lnFCUWrS1GmDfpDBPJDgmcOAablj8QQZOIGh3Bh7k 3b6+Q+8bIMvhvbnuyo8= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20221213101104 20221113100749 20853 sidnlabs.nl. aY0HOeEpghK+Y0uiVzDm2hqbRJZuLXRxR+/fKTaOSlAmAxqXkFNyjmnfk2oBfvNkkm5Rw9+rW3gt O5wtOf/KKxPFbsu9DsCN6mAK7+G1xqrarbfZCF/qoV0S0XgvkZjltOgBdc9ZWsnv7Idlhb/2hBfd lczFkINyj4BEQTdai70= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20230102070904 20221203062700 20853 sidnlabs.nl. Tkh7oL7mVcMdDBeco0pmxWA/F9Nhv8ADFLWk5LlqAMsh/Ke0XLU4IkEUN1gY7iVPubrHXdRziDpQ wmyATVbjn/ClAXyf6SxdjhZ30cM75NJKnLzdBWWiGWtQ5powZ4lzBTr5fY5CQyM2UY0HRmcB1Gdt uhx+s7aQ7wtsVP5pg5c= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 145.40.68.55
	;; Response received from 145.40.68.55 (262 octets) ;; HEADER SECTION ;; id = 56346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221216153526 20221116145551 20853 sidnlabs.nl. x8VIqObCGlbsYq5VtSJq5vs6HxB6R82NIP0j2XOWRyKVYF3ozIfm+NXeDuQg1wdZzB2spxQ6RrHB u+AuM4uugl39xy0uS5v+ROrMV+lvodhWuG5SEoWGdqqXoxtrEhF7x+D0vQEZXyDoUQ0gl+0rxK3p WzE5UNOrnm6W/6JThVs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221216153526 20221116145551 20853 sidnlabs.nl. x8VIqObCGlbsYq5VtSJq5vs6HxB6R82NIP0j2XOWRyKVYF3ozIfm+NXeDuQg1wdZzB2spxQ6RrHB u+AuM4uugl39xy0uS5v+ROrMV+lvodhWuG5SEoWGdqqXoxtrEhF7x+D0vQEZXyDoUQ0gl+0rxK3p WzE5UNOrnm6W/6JThVs= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to powerdns.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (897 octets) ;; HEADER SECTION ;; id = 47066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (807 octets) ;; HEADER SECTION ;; id = 29266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsd4.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (925 octets) ;; HEADER SECTION ;; id = 47921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nsec3-opt-out.wb.sidnlabs.nl
	Attempting to learn nameservers for nsec3-opt-out.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/NS
	Received 475 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (475 octets) ;; HEADER SECTION ;; id = 58656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found nsec3-opt-out.wb.sidnlabs.nl nameservers: yadifa.sidnlabs.nl, nsd4.sidnlabs.nl, knot.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl

nsec3-opt-out.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and nsec3-opt-out.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DS
	Received 407 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (407 octets) ;; HEADER SECTION ;; id = 8340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 ) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. zwOYM+HZYlxgKLxHgvebLdmrhrs3ThDYzgt5M2Tw/6mWoayqp/VUqeZP74WztRWjWsSwDsWHWRxt NkZwKJO5IlTCIAQQwCmAHHI0yyIw66XNKWmxxaIfrQsEbfhz5GDxs6cJmvpfBvN57K0Hwv7A8Rft rXEnW2BomVZFzWq3DHjDarydYe3PZwa0Q9S2bKr7uUwEOUi1BKZWVyNGA3pe1PpXA+AjxtlHnXs7 J5uoD0JV1qb9EYdsmfLlNw/ZDhSsedtr+GLfAqoqIRuj3ZD6WMhwIwfpveValfVqN/pjvi9n+1fM hMFrZdZQ0sPYtrV0xbpyj1LbfnP02MYyq12Qyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nsec3-opt-out.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=16645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. zwOYM+HZYlxgKLxHgvebLdmrhrs3ThDYzgt5M2Tw/6mWoayqp/VUqeZP74WztRWjWsSwDsWHWRxt NkZwKJO5IlTCIAQQwCmAHHI0yyIw66XNKWmxxaIfrQsEbfhz5GDxs6cJmvpfBvN57K0Hwv7A8Rft rXEnW2BomVZFzWq3DHjDarydYe3PZwa0Q9S2bKr7uUwEOUi1BKZWVyNGA3pe1PpXA+AjxtlHnXs7 J5uoD0JV1qb9EYdsmfLlNw/ZDhSsedtr+GLfAqoqIRuj3ZD6WMhwIwfpveValfVqN/pjvi9n+1fM hMFrZdZQ0sPYtrV0xbpyj1LbfnP02MYyq12Qyg== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=16645/SHA-256 is now in the chain-of-trust
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 )`
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (925 octets) ;; HEADER SECTION ;; id = 62010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645 nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nsec3-opt-out.wb.sidnlabs.nl
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645`
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443`
	DNSKEY=16645/SEP is now in the chain-of-trust
	DS=16645/SHA-256 verifies DNSKEY=16645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== )`
	RRSIG=16645 and DNSKEY=16645/SEP verifies the DNSKEY RRset
	DNSKEY=22443 is now in the chain-of-trust
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (389 octets) ;; HEADER SECTION ;; id = 26811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	knot.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 426 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (426 octets) ;; HEADER SECTION ;; id = 18662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 838 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (838 octets) ;; HEADER SECTION ;; id = 52735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 426 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (426 octets) ;; HEADER SECTION ;; id = 40907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 849 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (849 octets) ;; HEADER SECTION ;; id = 57916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (389 octets) ;; HEADER SECTION ;; id = 5642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (807 octets) ;; HEADER SECTION ;; id = 26102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsd4.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (807 octets) ;; HEADER SECTION ;; id = 12295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 818 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (818 octets) ;; HEADER SECTION ;; id = 39656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	bind9.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 818 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (818 octets) ;; HEADER SECTION ;; id = 22004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (389 octets) ;; HEADER SECTION ;; id = 49400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	powerdns.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (389 octets) ;; HEADER SECTION ;; id = 46596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (389 octets) ;; HEADER SECTION ;; id = 59808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yadifa.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (389 octets) ;; HEADER SECTION ;; id = 55888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nsec3-opt-out.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: