DNSSEC Debugger - nsec3-opt-out.wb.sidnlabs.nl

Domain Name:

Time: 2025-12-24 22:45:18 UTC

Analyzing DNSSEC problems for nsec3-opt-out.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 46612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to m.root-servers.net for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 586 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 586 octets ;; HEADER SECTION ;; id = 2943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260106170000 20251224160000 61809 . J7RBZgvpxcK6nGqNQK8A2BYOY5dQDSKq9X/iklkhdxEO45r5pOvErS03UoqhNz5Kr1JbRw1HuvDH xtr3EDaukX8of85HcIXavleSnt+62TcSqMX0V6Lz+RPKlh6yfyBJAUaWqXaan8JjEzKjjpD0e4wI xCmTO0cwoU1MCUsrtLU+XM0GTPJIH4OKrlhQllRvHIpAcqM1Qmsq4xwdZWDhb5R+mz671CUox1gW 26x/FrwSloyfJA3J64ABTcWlVZs9Dbr0hcdVVGp33mVodGfhzd3G5J+dzTEr27Wq1HgLhHamQXAz xQtC6qFpKid5kMlqUzJI95iGadjk6505S1uGug== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for nl/DNSKEY
	Received 558 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 558 octets ;; HEADER SECTION ;; id = 13787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260106170000 20251224160000 61809 . J7RBZgvpxcK6nGqNQK8A2BYOY5dQDSKq9X/iklkhdxEO45r5pOvErS03UoqhNz5Kr1JbRw1HuvDH xtr3EDaukX8of85HcIXavleSnt+62TcSqMX0V6Lz+RPKlh6yfyBJAUaWqXaan8JjEzKjjpD0e4wI xCmTO0cwoU1MCUsrtLU+XM0GTPJIH4OKrlhQllRvHIpAcqM1Qmsq4xwdZWDhb5R+mz671CUox1gW 26x/FrwSloyfJA3J64ABTcWlVZs9Dbr0hcdVVGp33mVodGfhzd3G5J+dzTEr27Wq1HgLhHamQXAz xQtC6qFpKid5kMlqUzJI95iGadjk6505S1uGug== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to f.root-servers.net for nl/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 24386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260106170000 20251224160000 61809 . J7RBZgvpxcK6nGqNQK8A2BYOY5dQDSKq9X/iklkhdxEO45r5pOvErS03UoqhNz5Kr1JbRw1HuvDH xtr3EDaukX8of85HcIXavleSnt+62TcSqMX0V6Lz+RPKlh6yfyBJAUaWqXaan8JjEzKjjpD0e4wI xCmTO0cwoU1MCUsrtLU+XM0GTPJIH4OKrlhQllRvHIpAcqM1Qmsq4xwdZWDhb5R+mz671CUox1gW 26x/FrwSloyfJA3J64ABTcWlVZs9Dbr0hcdVVGp33mVodGfhzd3G5J+dzTEr27Wq1HgLhHamQXAz xQtC6qFpKid5kMlqUzJI95iGadjk6505S1uGug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260106170000 20251224160000 61809 . J7RBZgvpxcK6nGqNQK8A2BYOY5dQDSKq9X/iklkhdxEO45r5pOvErS03UoqhNz5Kr1JbRw1HuvDH xtr3EDaukX8of85HcIXavleSnt+62TcSqMX0V6Lz+RPKlh6yfyBJAUaWqXaan8JjEzKjjpD0e4wI xCmTO0cwoU1MCUsrtLU+XM0GTPJIH4OKrlhQllRvHIpAcqM1Qmsq4xwdZWDhb5R+mz671CUox1gW 26x/FrwSloyfJA3J64ABTcWlVZs9Dbr0hcdVVGp33mVodGfhzd3G5J+dzTEr27Wq1HgLhHamQXAz xQtC6qFpKid5kMlqUzJI95iGadjk6505S1uGug== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 289 octets ;; HEADER SECTION ;; id = 64408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260102203232 20251219193720 17153 nl. Fxw4Dcfp+7fYXbgRWiHm/mFXrZ6zxt3w2BZgtLSCKdtf7B7OQNGTMeYcLpEwxU1zA1SnWz9REiTs 0tWNUlxrZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260102203232 20251219193720 17153 nl. Fxw4Dcfp+7fYXbgRWiHm/mFXrZ6zxt3w2BZgtLSCKdtf7B7OQNGTMeYcLpEwxU1zA1SnWz9REiTs 0tWNUlxrZg== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=37807 is now in the chain-of-trust
	Query to ns4.dns.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 394 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 394 octets ;; HEADER SECTION ;; id = 61781 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260106190619 20251224013723 37807 nl. MLZlvrNLJKAMvW4AAo+hNdKYVbc4UViKP3Q4gA0tNR9VfUa7YixOCODlE3CYAhhT/BqEZXRp9MMB Xh4S5iGXpA== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns5.sidn.nl. 3600 IN A 147.75.205.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:5c00::d ;; { "EDNS-VERSION": 0 }
	Query to ns4.dns.nl for sidnlabs.nl/DNSKEY
	Received 377 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 377 octets ;; HEADER SECTION ;; id = 40108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260106190619 20251224013723 37807 nl. MLZlvrNLJKAMvW4AAo+hNdKYVbc4UViKP3Q4gA0tNR9VfUa7YixOCODlE3CYAhhT/BqEZXRp9MMB Xh4S5iGXpA== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN A 147.75.205.55 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:5c00::d ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 186 octets ;; HEADER SECTION ;; id = 60410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260106190619 20251224013723 37807 nl. MLZlvrNLJKAMvW4AAo+hNdKYVbc4UViKP3Q4gA0tNR9VfUa7YixOCODlE3CYAhhT/BqEZXRp9MMB Xh4S5iGXpA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260106190619 20251224013723 37807 nl. MLZlvrNLJKAMvW4AAo+hNdKYVbc4UViKP3Q4gA0tNR9VfUa7YixOCODlE3CYAhhT/BqEZXRp9MMB Xh4S5iGXpA== )`
	RRSIG=37807 and DNSKEY=37807 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns2.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 227 octets ;; HEADER SECTION ;; id = 9388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260102194555 20251219192429 11261 sidnlabs.nl. zHlWkFi+dMqoG6wm2vytEdF/lo7cPQsmA3tX8DRGdGisxfcsfOSP7TKCYYqPQWLbGRTaP/sXQnBH QVveznH1MA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260102194555 20251219192429 11261 sidnlabs.nl. zHlWkFi+dMqoG6wm2vytEdF/lo7cPQsmA3tX8DRGdGisxfcsfOSP7TKCYYqPQWLbGRTaP/sXQnBH QVveznH1MA== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns2.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 1176 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 1176 octets ;; HEADER SECTION ;; id = 7490 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260102065326 20251219060640 11261 sidnlabs.nl. RQ6F7tVgozQQeaOm+EArsZY6SL0/7JOmr3a6pBOPNn2/MErl8RIS/xja9W1SoViIY+CuCbffySv9 ms/YPoKj0A== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102065718 20251219060820 11261 sidnlabs.nl. t53cgeLrn7kKTkNFvy/ZUp/aV6SP3aLUbLr7TKmeFq+XDf9YbmqgCoovUrsExTjnflYxAVP5dbOj qtWB3YnJqw== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102065718 20251219060820 11261 sidnlabs.nl. EULmvMm3SJJ2tENSKRGxavV+9n32ovqPTzEzWMdCX8o3qfpbfGn8gMR41T83CUiCyFgD9yhE1xvx 8U7OLJqwzg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102141255 20251219133513 11261 sidnlabs.nl. 7rKNAbuuMHpV6pcwcAF8IR3HCw48DKNyqvlQlUNflO4aMII/Z5zcqMDZLoNlVRTfl2tdaKX0NBB7 TVVgveWWSg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102141255 20251219133513 11261 sidnlabs.nl. /L2uiRKCOpjOzUhVV+xzeyIPBadVSfwkU+YicaB689NH0jGFMv+a4eNUcpfZv2trT0O1ityzXZii 0ODZWG9Gjg== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102120932 20251219112209 11261 sidnlabs.nl. mvXoS40quvfcz9KTud2+RxKoslpgJKPt1tU7WeU4xHJmRaIo8FWku+qYEJ3e//AbMwneQPS/9vuy ozSpkR4CCQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102120932 20251219112209 11261 sidnlabs.nl. 1IPXLwxEOR/dCZhWTeoCAsMFU/Y4IealWkAuAt7cxjqtW4eaMclux0WC6+EAkdYlOs+J9ijEyVNK 38X6SyYLcw== ) ;; { "EDNS-VERSION": 0 }
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1162 bytes from 147.75.205.55
	;; Response received from [147.75.205.55] 1162 octets ;; HEADER SECTION ;; id = 40808 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260102065326 20251219060640 11261 sidnlabs.nl. RQ6F7tVgozQQeaOm+EArsZY6SL0/7JOmr3a6pBOPNn2/MErl8RIS/xja9W1SoViIY+CuCbffySv9 ms/YPoKj0A== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102065718 20251219060820 11261 sidnlabs.nl. t53cgeLrn7kKTkNFvy/ZUp/aV6SP3aLUbLr7TKmeFq+XDf9YbmqgCoovUrsExTjnflYxAVP5dbOj qtWB3YnJqw== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102065718 20251219060820 11261 sidnlabs.nl. EULmvMm3SJJ2tENSKRGxavV+9n32ovqPTzEzWMdCX8o3qfpbfGn8gMR41T83CUiCyFgD9yhE1xvx 8U7OLJqwzg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102141255 20251219133513 11261 sidnlabs.nl. 7rKNAbuuMHpV6pcwcAF8IR3HCw48DKNyqvlQlUNflO4aMII/Z5zcqMDZLoNlVRTfl2tdaKX0NBB7 TVVgveWWSg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102141255 20251219133513 11261 sidnlabs.nl. /L2uiRKCOpjOzUhVV+xzeyIPBadVSfwkU+YicaB689NH0jGFMv+a4eNUcpfZv2trT0O1ityzXZii 0ODZWG9Gjg== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260102120932 20251219112209 11261 sidnlabs.nl. mvXoS40quvfcz9KTud2+RxKoslpgJKPt1tU7WeU4xHJmRaIo8FWku+qYEJ3e//AbMwneQPS/9vuy ozSpkR4CCQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260102120932 20251219112209 11261 sidnlabs.nl. 1IPXLwxEOR/dCZhWTeoCAsMFU/Y4IealWkAuAt7cxjqtW4eaMclux0WC6+EAkdYlOs+J9ijEyVNK 38X6SyYLcw== ) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns2.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 198 octets ;; HEADER SECTION ;; id = 58755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260102065326 20251219060640 11261 sidnlabs.nl. RQ6F7tVgozQQeaOm+EArsZY6SL0/7JOmr3a6pBOPNn2/MErl8RIS/xja9W1SoViIY+CuCbffySv9 ms/YPoKj0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260102065326 20251219060640 11261 sidnlabs.nl. RQ6F7tVgozQQeaOm+EArsZY6SL0/7JOmr3a6pBOPNn2/MErl8RIS/xja9W1SoViIY+CuCbffySv9 ms/YPoKj0A== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to knot.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 897 octets ;; HEADER SECTION ;; id = 52227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 807 octets ;; HEADER SECTION ;; id = 37991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 925 octets ;; HEADER SECTION ;; id = 32733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; keytag 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; keytag 16645 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nsec3-opt-out.wb.sidnlabs.nl
	Attempting to learn nameservers for nsec3-opt-out.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/NS
	Received 475 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 475 octets ;; HEADER SECTION ;; id = 44743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found nsec3-opt-out.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

nsec3-opt-out.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and nsec3-opt-out.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DS
	Received 407 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 407 octets ;; HEADER SECTION ;; id = 13645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 ) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. zwOYM+HZYlxgKLxHgvebLdmrhrs3ThDYzgt5M2Tw/6mWoayqp/VUqeZP74WztRWjWsSwDsWHWRxt NkZwKJO5IlTCIAQQwCmAHHI0yyIw66XNKWmxxaIfrQsEbfhz5GDxs6cJmvpfBvN57K0Hwv7A8Rft rXEnW2BomVZFzWq3DHjDarydYe3PZwa0Q9S2bKr7uUwEOUi1BKZWVyNGA3pe1PpXA+AjxtlHnXs7 J5uoD0JV1qb9EYdsmfLlNw/ZDhSsedtr+GLfAqoqIRuj3ZD6WMhwIwfpveValfVqN/pjvi9n+1fM hMFrZdZQ0sPYtrV0xbpyj1LbfnP02MYyq12Qyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nsec3-opt-out.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=16645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. zwOYM+HZYlxgKLxHgvebLdmrhrs3ThDYzgt5M2Tw/6mWoayqp/VUqeZP74WztRWjWsSwDsWHWRxt NkZwKJO5IlTCIAQQwCmAHHI0yyIw66XNKWmxxaIfrQsEbfhz5GDxs6cJmvpfBvN57K0Hwv7A8Rft rXEnW2BomVZFzWq3DHjDarydYe3PZwa0Q9S2bKr7uUwEOUi1BKZWVyNGA3pe1PpXA+AjxtlHnXs7 J5uoD0JV1qb9EYdsmfLlNw/ZDhSsedtr+GLfAqoqIRuj3ZD6WMhwIwfpveValfVqN/pjvi9n+1fM hMFrZdZQ0sPYtrV0xbpyj1LbfnP02MYyq12Qyg== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=16645/SHA-256 is now in the chain-of-trust
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 )`
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 925 octets ;; HEADER SECTION ;; id = 10214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; keytag 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; keytag 16645 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nsec3-opt-out.wb.sidnlabs.nl
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; keytag 22443`
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; keytag 16645`
	DNSKEY=16645/SEP is now in the chain-of-trust
	DS=16645/SHA-256 verifies DNSKEY=16645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20201218103317 16645 nsec3-opt-out.wb.sidnlabs.nl. Mhmjhe+6ZvoFnJWyAUZYdN0RRbSd2rmqniZz/vsNnVYwfoImIyYUQLACq2PsEPEz+I6681rrxH/s kxXtmhLEXvj9MAsnr1ieijdnbv76RAIQ5hK8dF7iiAZNnIAvi9aOKexS0WUj812jQPRjZ3jai9Lo epDgGv96iGi2luImZpYD2XoUEBSrgKiDbQR9KbzM5vINcZhXV/dKmPRY0q38046jqgwhP8M04DSd tft5hNXkVi7VxP3wlmqH6hCLjFnLMR/8PUcsK7WvwB6ipBGMLtvpaDSVEtmnk4qo9RGNbg6Ls6Ty Df4vqfV8gynZtz2GM5ry5qUc/jokrYgXAYCQPA== )`
	RRSIG=16645 and DNSKEY=16645/SEP verifies the DNSKEY RRset
	DNSKEY=22443 is now in the chain-of-trust
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 389 octets ;; HEADER SECTION ;; id = 13935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for nsec3-opt-out.wb.sidnlabs.nl/SOA
	All Queries to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA timed out or failed
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 849 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 849 octets ;; HEADER SECTION ;; id = 45623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 426 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 426 octets ;; HEADER SECTION ;; id = 60815 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 838 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 838 octets ;; HEADER SECTION ;; id = 44258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287594 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. D4JION24sPbmq4La4IjPyZ/B/3lwD9te56eBkjfXjbL5uFn7mYvPZ7YG4m4qX6qTJOVaTVEgbXQO QQrDbBFsSq3n/+/tqmDANXX4tlU6UhtdeoOpu6m5+7x5XpRYWz/Z1LQox+OK+QhO8D1oeX1Nv/eq 5bldU4x7gupqn+hy4sZUBRg78c2cauD+1ADJ+W1ZZ0XUM8jrz0ykMN61pxYwnXWrWWYhNqbTQMY8 9/PgOA+sUxU/aNMpI89T/zClH8FgwG1e9MdUKNZ9mwuu62cmEdSninkQ/hHjN7G9KzUUU9HI3dIs Z6snLK+WctUgMYC4lo2m8scO4AY0Pry95QIV3g== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 389 octets ;; HEADER SECTION ;; id = 3299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 818 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 818 octets ;; HEADER SECTION ;; id = 22584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 818 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 818 octets ;; HEADER SECTION ;; id = 59339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 389 octets ;; HEADER SECTION ;; id = 56334 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 389 octets ;; HEADER SECTION ;; id = 58242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 807 octets ;; HEADER SECTION ;; id = 52816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 807 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 807 octets ;; HEADER SECTION ;; id = 60310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. kZRDtrKr4x0yn0agu3HmCscirVtqm6GcmJlOduutznK6GxKwpMJ24tYG7sqGk/4eQqXYCM8qP833 e88+BbxvNmYk7kocqGI0nS//PjGDdGbRu2LzhHXk4UeTh3NRSrAyCLxFRJeuakTyTGDFbfAaE4EC ohhhcWeHiKOBjotCY2VsJFEvgWZ08gw8cZNU5IxlRNmq78YyQmlydvr6Tp+f97NgPRny5Wp5IDDO LwkaNsGpgmlwlvfLU7emeoaQGH6IajXwBdF1ixhRM3LbHd9hv7NO+8wo7YVbT8icSkdl2RuI3SP7 gBpjgL6FYvORPiSSATzILig8STWEcCunkvYPIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20201218103317 22443 nsec3-opt-out.wb.sidnlabs.nl. Cb6QsKitbi+l/+TIXYISYkK8nAP6Z9aYf1xXbTiwARjQTac/u3HhPpe3Z3c8GGr2VzKwsPyi89Jy gT/zlFVD1JI8JiX9LsdIXVGdWPrQ+AlNxjOmp2aUKgoEEa6Op71nY+KsM86VOtDcuJvEYDUNChf0 Dzqv8JonGQTFSaOzLDgwdjnozfzS2TOjv34Pkzh4OW5in4H/iK09FauOv/KAtedjjWGAhYR1r/03 eKTcDIxqNNo0o/gbqcs1Y84WEAQ8CNczsnZnwodrXMDLrYfNV6qcuE8gf+dgS0OtxhXSGTIlk77b EnzK8fuGbrFlw+hLupD1zQCmj3aXPGcTwB7z9Q== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

nsec3-opt-out.wb.sidnlabs.nl

No response from nsec3-opt-out.wb.sidnlabs.nl nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nsec3-opt-out.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: