DNSSEC Analyzer - nsec3-opt-out.wb.sidnlabs.nl

Domain Name:

Time: 2019-07-19 01:24:35 UTC, NTP stratum 4

Analyzing DNSSEC problems for nsec3-opt-out.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 18578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to l.root-servers.net for nsec3-opt-out.wb.sidnlabs.nl/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for nsec3-opt-out.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 654 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (654 bytes) ;; HEADER SECTION ;; id = 41511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190731170000 20190718160000 59944 . aar6w8ZKFzdur193kBn7/9UCdk90GGe1PI4/ujDLydc+NmYAYD1QEaTIcJ0/i9fFbpcfPDfrZJZg +pl+QqSsxTnjfEIzAfdRzOIvu4Mj9TzOSeuqcGFOjTpyzPK1+KNF5L1jEGcOEuulHN54AdK3KD3Y LUPwgI3OmCHRM4L3MPJJqKwNJR1OHrDFmKKbz5TQpM/Z7oH5ywZI3dmhDb2gFpz2oGP/VjixtlTp LVVr+wu9wOq+rGmzwrNZssfFZ6+w2qLfd5KX3+pIe8RJjs+hRXNN7C7lR8rdeNYnkCJSCQIbK+Zg BTm7X/JD8FkHWpc5qky6kJNWRcr7XFI5eNOhcQ== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for nl/DNSKEY
	Received 628 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (628 bytes) ;; HEADER SECTION ;; id = 65238 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190731170000 20190718160000 59944 . aar6w8ZKFzdur193kBn7/9UCdk90GGe1PI4/ujDLydc+NmYAYD1QEaTIcJ0/i9fFbpcfPDfrZJZg +pl+QqSsxTnjfEIzAfdRzOIvu4Mj9TzOSeuqcGFOjTpyzPK1+KNF5L1jEGcOEuulHN54AdK3KD3Y LUPwgI3OmCHRM4L3MPJJqKwNJR1OHrDFmKKbz5TQpM/Z7oH5ywZI3dmhDb2gFpz2oGP/VjixtlTp LVVr+wu9wOq+rGmzwrNZssfFZ6+w2qLfd5KX3+pIe8RJjs+hRXNN7C7lR8rdeNYnkCJSCQIbK+Zg BTm7X/JD8FkHWpc5qky6kJNWRcr7XFI5eNOhcQ== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to k.root-servers.net for nl/DS
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 44130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190731170000 20190718160000 59944 . aar6w8ZKFzdur193kBn7/9UCdk90GGe1PI4/ujDLydc+NmYAYD1QEaTIcJ0/i9fFbpcfPDfrZJZg +pl+QqSsxTnjfEIzAfdRzOIvu4Mj9TzOSeuqcGFOjTpyzPK1+KNF5L1jEGcOEuulHN54AdK3KD3Y LUPwgI3OmCHRM4L3MPJJqKwNJR1OHrDFmKKbz5TQpM/Z7oH5ywZI3dmhDb2gFpz2oGP/VjixtlTp LVVr+wu9wOq+rGmzwrNZssfFZ6+w2qLfd5KX3+pIe8RJjs+hRXNN7C7lR8rdeNYnkCJSCQIbK+Zg BTm7X/JD8FkHWpc5qky6kJNWRcr7XFI5eNOhcQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20190731170000 20190718160000 59944 . aar6w8ZKFzdur193kBn7/9UCdk90GGe1PI4/ujDLydc+NmYAYD1QEaTIcJ0/i9fFbpcfPDfrZJZg +pl+QqSsxTnjfEIzAfdRzOIvu4Mj9TzOSeuqcGFOjTpyzPK1+KNF5L1jEGcOEuulHN54AdK3KD3Y LUPwgI3OmCHRM4L3MPJJqKwNJR1OHrDFmKKbz5TQpM/Z7oH5ywZI3dmhDb2gFpz2oGP/VjixtlTp LVVr+wu9wOq+rGmzwrNZssfFZ6+w2qLfd5KX3+pIe8RJjs+hRXNN7C7lR8rdeNYnkCJSCQIbK+Zg BTm7X/JD8FkHWpc5qky6kJNWRcr7XFI5eNOhcQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (745 bytes) ;; HEADER SECTION ;; id = 17953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbevDMfROE8UgGqKkyPZ+5y5rtZBNA8OnoyWa45MfvIaV98WnzIu4dfsmgnmV2iUvQjCd7zT azE6Y8FTXhI6m3swr6QzTYzODHe9aY9adOthqoYg01dBALXQNJWagSfVxq1JrWOy1urAMnzB/Vur dVpBKUPHEo5pEL8ZmFzsVNwp ) ; Key ID = 17593 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190726042415 20190712050703 34112 nl. GioA/lBiTVFBKcvuwDEwXIlEi2E7uA7daMn4s31Lb7f+RDiCyQbUeX//05dBFNypqad0h9a/ZBG6 4taAzvrXwk8m3hXVQyvFCpgWrrXRydlzfXeZoCnvKUa/Be98RcMnnfeiCMDXxVMdehtLeWBUO2XG UCDDe9IyHhLlP5BiDscW5dAPdkm07gqRhMHvvADzBdBP2SXEdA5DkHEkH6wAHhyB1pjritvfswyK gwlbi40OFmbj1DjdYS6u8lL0JTG7k/MlS/oCwYYG2NOWTQ/E4AEeivuDywHGGparuNpQ6oVnh5sS 6jMNkQs/4lXkWr25n+7oAazgwAfCOJckMfxa0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbevDMfROE8UgGqKkyPZ+5y5rtZBNA8OnoyWa45MfvIaV98WnzIu4dfsmgnmV2iUvQjCd7zT azE6Y8FTXhI6m3swr6QzTYzODHe9aY9adOthqoYg01dBALXQNJWagSfVxq1JrWOy1urAMnzB/Vur dVpBKUPHEo5pEL8ZmFzsVNwp ) ; Key ID = 17593`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190726042415 20190712050703 34112 nl. GioA/lBiTVFBKcvuwDEwXIlEi2E7uA7daMn4s31Lb7f+RDiCyQbUeX//05dBFNypqad0h9a/ZBG6 4taAzvrXwk8m3hXVQyvFCpgWrrXRydlzfXeZoCnvKUa/Be98RcMnnfeiCMDXxVMdehtLeWBUO2XG UCDDe9IyHhLlP5BiDscW5dAPdkm07gqRhMHvvADzBdBP2SXEdA5DkHEkH6wAHhyB1pjritvfswyK gwlbi40OFmbj1DjdYS6u8lL0JTG7k/MlS/oCwYYG2NOWTQ/E4AEeivuDywHGGparuNpQ6oVnh5sS 6jMNkQs/4lXkWr25n+7oAazgwAfCOJckMfxa0w== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=17593 is now in the chain-of-trust
	Query to ns3.dns.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Error querying ns3.dns.nl/2001:678:20:0:0:0:0:24 for nsec3-opt-out.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 396 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (396 bytes) ;; HEADER SECTION ;; id = 39342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190723120453 20190709200902 17593 nl. URr/m6lgNceaSrpQ0ppCW4HHEjZbRMaXdyTOYejHlZnehEWmqn85kxlsPUDcujlTlzG69wGVhsme r0YlelcKriB4TbAQgWEx/EDcUL9QYxq/kUn9fk/WR2DvZnAxoMjm0QMyZFs/as2T9sMUUBVndcPo sO/D5Tvbt0aMg5PZy84= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sns-pb.isc.org for sidnlabs.nl/DNSKEY
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for sidnlabs.nl/DNSKEY: 'IPv6 transport disabled'
	Received 381 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (381 bytes) ;; HEADER SECTION ;; id = 63979 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190723120453 20190709200902 17593 nl. URr/m6lgNceaSrpQ0ppCW4HHEjZbRMaXdyTOYejHlZnehEWmqn85kxlsPUDcujlTlzG69wGVhsme r0YlelcKriB4TbAQgWEx/EDcUL9QYxq/kUn9fk/WR2DvZnAxoMjm0QMyZFs/as2T9sMUUBVndcPo sO/D5Tvbt0aMg5PZy84= ) ;; ADDITIONAL SECTION (5 records) ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to sns-pb.isc.org for sidnlabs.nl/DS
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for sidnlabs.nl/DS: 'IPv6 transport disabled'
	Received 250 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (250 bytes) ;; HEADER SECTION ;; id = 7848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190723120453 20190709200902 17593 nl. URr/m6lgNceaSrpQ0ppCW4HHEjZbRMaXdyTOYejHlZnehEWmqn85kxlsPUDcujlTlzG69wGVhsme r0YlelcKriB4TbAQgWEx/EDcUL9QYxq/kUn9fk/WR2DvZnAxoMjm0QMyZFs/as2T9sMUUBVndcPo sO/D5Tvbt0aMg5PZy84= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20190723120453 20190709200902 17593 nl. URr/m6lgNceaSrpQ0ppCW4HHEjZbRMaXdyTOYejHlZnehEWmqn85kxlsPUDcujlTlzG69wGVhsme r0YlelcKriB4TbAQgWEx/EDcUL9QYxq/kUn9fk/WR2DvZnAxoMjm0QMyZFs/as2T9sMUUBVndcPo sO/D5Tvbt0aMg5PZy84= )`
	RRSIG=17593 and DNSKEY=17593 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns2.sidn.nl for sidnlabs.nl/DNSKEY
	Received 934 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (934 bytes) ;; HEADER SECTION ;; id = 17557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (4 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190728113330 20190628105458 20853 sidnlabs.nl. eWw0UoJQaurMr0XYlwvRN4NNC2QLqN2msqKDAUFC9JGweW8u5H6geTGnRH9YWhUBOrgwwB9ixt7A rZ6HDY0M+Lz030a9dS+tu3z7tiACchCui+o1eSLLgUdvtyOUJMTyzTebF2FEMOyyOMC7TiKxam3b XlqW8/ndN7LAn42Mo68= ) sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190728113330 20190628105458 52720 sidnlabs.nl. mSsU6mixomMcNollLxFZRcqtgK7l4FC/fCCdncA8e2xahROwi6y13ZXpI/RDi0ESHk3I5rk/OdCX yvCuVDRbzTxDMk0qlxgTB5115DmwsH/DaVtlGWKfK5TSxcZc7ve+T0qC0V1A84oRTFxq1TlARh09 hvaoSadLPkBrnDBxCZrxUylXAmIPsFPSlsJ1VnKc8PUa8iq9dAGrA/u7kQxyBtmqvUUBUbneLiYo YRpyL8H8SEmyx3rPlb/JhZHsKENgEkN+6pNU6d2xcYUw5WLdJKTNhhnrtf73c4LKoq6Ozp5eJbEE 43aNXocdqQORzl+bo5DuX9vQSFyV1RcEx/ragA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190728113330 20190628105458 20853 sidnlabs.nl. eWw0UoJQaurMr0XYlwvRN4NNC2QLqN2msqKDAUFC9JGweW8u5H6geTGnRH9YWhUBOrgwwB9ixt7A rZ6HDY0M+Lz030a9dS+tu3z7tiACchCui+o1eSLLgUdvtyOUJMTyzTebF2FEMOyyOMC7TiKxam3b XlqW8/ndN7LAn42Mo68= )`
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190728113330 20190628105458 52720 sidnlabs.nl. mSsU6mixomMcNollLxFZRcqtgK7l4FC/fCCdncA8e2xahROwi6y13ZXpI/RDi0ESHk3I5rk/OdCX yvCuVDRbzTxDMk0qlxgTB5115DmwsH/DaVtlGWKfK5TSxcZc7ve+T0qC0V1A84oRTFxq1TlARh09 hvaoSadLPkBrnDBxCZrxUylXAmIPsFPSlsJ1VnKc8PUa8iq9dAGrA/u7kQxyBtmqvUUBUbneLiYo YRpyL8H8SEmyx3rPlb/JhZHsKENgEkN+6pNU6d2xcYUw5WLdJKTNhhnrtf73c4LKoq6Ozp5eJbEE 43aNXocdqQORzl+bo5DuX9vQSFyV1RcEx/ragA== )`
	RRSIG=20853 and DNSKEY=20853 verifies the DNSKEY RRset
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns2.sidn.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 2308 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2308 bytes) ;; HEADER SECTION ;; id = 54763 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190803201356 20190704193942 20853 sidnlabs.nl. M+YahtiDLzCCuEc73oR3Dhs1/WUmOra6XRY/rW7hiSSeEk7T2vxs0uq9CAMRl4pXN7deqTojMMsu ZszJOXZSgz6UoepQ+eSiTPsox6JFX/ULphfJv1TrwdThpg1ixWfWA/wfwP9+/hoGHm/pF8XUal+I BRasjfubtvJbtnJxTks= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190803133248 20190704125111 20853 sidnlabs.nl. G1eSvYuDME8SsA3t6NzDn9nKdDxzNwVtfy1hlN30r8tAFPwEgzEyZpZKJUV19rQAnNpgsxJl2Kta va7B6CK+RLoU1CM309IA7AdXAn1YImzcQ3l0JwwdX/zU2cDZE3Op01WrvIPy3jSbsLiJKQ7HFQlC jXUkWW+AhqWDynO94Wk= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190803133248 20190704125111 20853 sidnlabs.nl. mrM5nDPS2VjSvecA2x6fxBaawnZFeh8KIileo4nMETnlymtyczRUCfVdXwL+RFOevMrhVfvJxs5k cm+fDt9fhrsj4E1kSosvN56ctEkzimZTaVN3jSQKlxXsUQxYEFEeIA6GDhNxVIVdRD0j0/To9o+Y P/lvx0d7k5RNvXkBxX0= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190815150220 20190716143359 20853 sidnlabs.nl. E0VFC4XFY8f+sj969SJRdQkvgq2Uewjxa20p8R7+i7bAv4OTQZhBmxKjQuGlK9zAH72yuWrKX/P4 xI3yDftRLotRWTd6Gc2LgqioWJWy2SgGsvmiW7mo9N2vTZKLtG4Be+gt1cmxoEOlXakB8BMbDjTj WDhgkxgezIkd0uX/n+4= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190815150220 20190716143359 20853 sidnlabs.nl. aSZwgNXpG+tdTIxGe/8Q0vxWsl4Uxgj54QCBmFumB4FIULPlx9eYWjXykj8tiRfAaVcqAfhQK0f4 T97QVV4gVgPvwmpONiJMh1nZdIW4IJS0Qei9gNvbh/4n6TNauKtJOGUG1+F0P/cjVnqjMnob7kOo E4mL/O1joaEgfaVkaaU= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190806192642 20190707190335 20853 sidnlabs.nl. hwtRE1kIuWvcO3lc72vGV3FkUEnXw+Qu9Qk7ZVoLtvetaR/N/A6EVwYVP14lpb77xHoHaXamMIhn z7KRKacL9h4ALJJqpP71Cc7mvd+xj1JTtqA7G4AAu18+5DpQm/4d2JAsIRUF+IHQH56haMrZFIBt HU4mN4lqX1HBXI7w9SQ= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190806192642 20190707190335 20853 sidnlabs.nl. gYT89C420HTIk68zUZ50jMPiJh28uNC+WyaBJ9/yJW5mJ7NoOLa+RE0MiQe1x/ZYE8ykXs+Nk9uq o7AdUjWQB+YqwRwG3bKKd/FNbFyvC6uOoNm5I3JZ0/rMPd6B0o06AFS86dOulpBZp7gA2qm8I2oF /6kNBzZGMulbxlU6SeE= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190727201404 20190627195954 20853 sidnlabs.nl. uolAoThTLqPviwpYl1A/hoHvfFrd38RcfRW+bSR4fxA8jEtRAa/+HC8DbnKgCTb5NFGWcu9sRgRf I5mvecvzCgJLGudwXw6ai4D7nnpTqK7Jwwu2n6LdYQVe1unCwBWXJC1HvsWnUl83iowuGZIoKmzx W9DvmQWtei7eUxn1tgU= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190727201404 20190627195954 20853 sidnlabs.nl. W4ddt4atNDsu9qgtKdnw6WOwd0h9opjkfU4uHGn7naUMlROkjpmEi5jiMmbChq+wWgz2g+e9WEMN nDj8XBNWOCocEsuJpF/WnVjnxIomLAMMDdov8UIoxu+c9PXYbwSwiJPYdjn0ofTQu6KZS/WP/M3a SCpstq2Wx6RzKV66UQ8= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190805024729 20190706014851 20853 sidnlabs.nl. u/eAgzpQqH3C+I7Y692VuAHmT9nsr/WkhRFL2qKzDqQzd2B9m1Gjunmmyo0LcQIqPVWnC75WSiD+ CXOYSExZi+Hwp1jhwhCNmrGODVYkSWLnxxin5q8+bAv01W3BKLnSDEvlkhAhUOw2S4O2VCCbUgxF UyZVhcZCqVXD1a5ixH8= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190805024729 20190706014851 20853 sidnlabs.nl. VC3HQpUfhZ4Kw2P0kBTooG4j5ncFkGjI3CaTp7KniXX1JAjJI26TqAWmNKr6blXClEEu//92VD2K q1q7zhb6BdjR3iz3JmKt1QgR2f8lTOtm2BdvAD6xU07hsBMCFhurLoHoPtyam/E7E7VgqF5/aSUH MEr2KX1q2ByvAKXT6Vs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 2294 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2294 bytes) ;; HEADER SECTION ;; id = 31730 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190803201356 20190704193942 20853 sidnlabs.nl. M+YahtiDLzCCuEc73oR3Dhs1/WUmOra6XRY/rW7hiSSeEk7T2vxs0uq9CAMRl4pXN7deqTojMMsu ZszJOXZSgz6UoepQ+eSiTPsox6JFX/ULphfJv1TrwdThpg1ixWfWA/wfwP9+/hoGHm/pF8XUal+I BRasjfubtvJbtnJxTks= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190803133248 20190704125111 20853 sidnlabs.nl. G1eSvYuDME8SsA3t6NzDn9nKdDxzNwVtfy1hlN30r8tAFPwEgzEyZpZKJUV19rQAnNpgsxJl2Kta va7B6CK+RLoU1CM309IA7AdXAn1YImzcQ3l0JwwdX/zU2cDZE3Op01WrvIPy3jSbsLiJKQ7HFQlC jXUkWW+AhqWDynO94Wk= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190803133248 20190704125111 20853 sidnlabs.nl. mrM5nDPS2VjSvecA2x6fxBaawnZFeh8KIileo4nMETnlymtyczRUCfVdXwL+RFOevMrhVfvJxs5k cm+fDt9fhrsj4E1kSosvN56ctEkzimZTaVN3jSQKlxXsUQxYEFEeIA6GDhNxVIVdRD0j0/To9o+Y P/lvx0d7k5RNvXkBxX0= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190815150220 20190716143359 20853 sidnlabs.nl. E0VFC4XFY8f+sj969SJRdQkvgq2Uewjxa20p8R7+i7bAv4OTQZhBmxKjQuGlK9zAH72yuWrKX/P4 xI3yDftRLotRWTd6Gc2LgqioWJWy2SgGsvmiW7mo9N2vTZKLtG4Be+gt1cmxoEOlXakB8BMbDjTj WDhgkxgezIkd0uX/n+4= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190815150220 20190716143359 20853 sidnlabs.nl. aSZwgNXpG+tdTIxGe/8Q0vxWsl4Uxgj54QCBmFumB4FIULPlx9eYWjXykj8tiRfAaVcqAfhQK0f4 T97QVV4gVgPvwmpONiJMh1nZdIW4IJS0Qei9gNvbh/4n6TNauKtJOGUG1+F0P/cjVnqjMnob7kOo E4mL/O1joaEgfaVkaaU= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190806192642 20190707190335 20853 sidnlabs.nl. hwtRE1kIuWvcO3lc72vGV3FkUEnXw+Qu9Qk7ZVoLtvetaR/N/A6EVwYVP14lpb77xHoHaXamMIhn z7KRKacL9h4ALJJqpP71Cc7mvd+xj1JTtqA7G4AAu18+5DpQm/4d2JAsIRUF+IHQH56haMrZFIBt HU4mN4lqX1HBXI7w9SQ= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190806192642 20190707190335 20853 sidnlabs.nl. gYT89C420HTIk68zUZ50jMPiJh28uNC+WyaBJ9/yJW5mJ7NoOLa+RE0MiQe1x/ZYE8ykXs+Nk9uq o7AdUjWQB+YqwRwG3bKKd/FNbFyvC6uOoNm5I3JZ0/rMPd6B0o06AFS86dOulpBZp7gA2qm8I2oF /6kNBzZGMulbxlU6SeE= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190727201404 20190627195954 20853 sidnlabs.nl. uolAoThTLqPviwpYl1A/hoHvfFrd38RcfRW+bSR4fxA8jEtRAa/+HC8DbnKgCTb5NFGWcu9sRgRf I5mvecvzCgJLGudwXw6ai4D7nnpTqK7Jwwu2n6LdYQVe1unCwBWXJC1HvsWnUl83iowuGZIoKmzx W9DvmQWtei7eUxn1tgU= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190727201404 20190627195954 20853 sidnlabs.nl. W4ddt4atNDsu9qgtKdnw6WOwd0h9opjkfU4uHGn7naUMlROkjpmEi5jiMmbChq+wWgz2g+e9WEMN nDj8XBNWOCocEsuJpF/WnVjnxIomLAMMDdov8UIoxu+c9PXYbwSwiJPYdjn0ofTQu6KZS/WP/M3a SCpstq2Wx6RzKV66UQ8= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20190805024729 20190706014851 20853 sidnlabs.nl. u/eAgzpQqH3C+I7Y692VuAHmT9nsr/WkhRFL2qKzDqQzd2B9m1Gjunmmyo0LcQIqPVWnC75WSiD+ CXOYSExZi+Hwp1jhwhCNmrGODVYkSWLnxxin5q8+bAv01W3BKLnSDEvlkhAhUOw2S4O2VCCbUgxF UyZVhcZCqVXD1a5ixH8= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20190805024729 20190706014851 20853 sidnlabs.nl. VC3HQpUfhZ4Kw2P0kBTooG4j5ncFkGjI3CaTp7KniXX1JAjJI26TqAWmNKr6blXClEEu//92VD2K q1q7zhb6BdjR3iz3JmKt1QgR2f8lTOtm2BdvAD6xU07hsBMCFhurLoHoPtyam/E7E7VgqF5/aSUH MEr2KX1q2ByvAKXT6Vs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (262 bytes) ;; HEADER SECTION ;; id = 37168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190803201356 20190704193942 20853 sidnlabs.nl. M+YahtiDLzCCuEc73oR3Dhs1/WUmOra6XRY/rW7hiSSeEk7T2vxs0uq9CAMRl4pXN7deqTojMMsu ZszJOXZSgz6UoepQ+eSiTPsox6JFX/ULphfJv1TrwdThpg1ixWfWA/wfwP9+/hoGHm/pF8XUal+I BRasjfubtvJbtnJxTks= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20190803201356 20190704193942 20853 sidnlabs.nl. M+YahtiDLzCCuEc73oR3Dhs1/WUmOra6XRY/rW7hiSSeEk7T2vxs0uq9CAMRl4pXN7deqTojMMsu ZszJOXZSgz6UoepQ+eSiTPsox6JFX/ULphfJv1TrwdThpg1ixWfWA/wfwP9+/hoGHm/pF8XUal+I BRasjfubtvJbtnJxTks= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to nsd4.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (897 bytes) ;; HEADER SECTION ;; id = 48760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Received 389 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (389 bytes) ;; HEADER SECTION ;; id = 47907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. XB7CekpE4/PmaHHso4+HCdMVsEHeESZ/cQsurbLYAs4M1nBECPBEJoaoTPFTimnUNp4V5pmOI0rW YSZeSE/WPwLuUQ8nZQdg48XfSZ7cBPSiDjnkvF00qMS7ic2L25Fp2TCkU/0Gm13HmDmUi1RyA6dH Nk4XxCiuTdKUQnic3BHWyfflhC3xqq8lfQ8o98PslGHlKTmNxifnF5oau6NIV3g4q7Ch8IcUWNPB vUvWX3MDaNLQkDUB9eScFx1xyNae7pn3hywfL5+VoyeRle2N21WtvfNdMJxIop5MXeFAlPT1NtWg R6NK/20SgOQE7GUI7IZCY2obdYQqQUz8oFTCVg== ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	wb.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (925 bytes) ;; HEADER SECTION ;; id = 44005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20190314080033 16645 nsec3-opt-out.wb.sidnlabs.nl. FWiLh4mcZmpC1upkGvFRUZwKgS25xzoIe8O/5dkuP0QyDIh8goxKfBvGDalwDmrvmbC5F3UzIK1u bhG/o4o72VxJDvOs4sjvFEaNLxtLIGhd6Sccw+uAswdsa3H2duehAYqnrhSq1nx7F4fByXvvcGCa vuBZSCNT8JT+5Bsory4u2BVjpfV/54zHuKl5w7ePFGZUaDO2mkcxjeJAMlhuf7NvOWbKA5vQogny uetpqKFovQDqhDolBFB9C4sXsVgD7lphr1XvVeMxzEglNP0yqZTSG4F/MIaGjmStZlqw93nIVgqs tCh7D0qihofCpRCBzEPgRUcrewar+rj0GXtozQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nsec3-opt-out.wb.sidnlabs.nl
	Attempting to learn nameservers for nsec3-opt-out.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/NS
	Error querying nsd4.sidnlabs.nl/2a00:d78:0:712:94:198:159:33 for nsec3-opt-out.wb.sidnlabs.nl/NS: 'IPv6 transport disabled'
	Received 475 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (475 bytes) ;; HEADER SECTION ;; id = 19019 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found nsec3-opt-out.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

nsec3-opt-out.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and nsec3-opt-out.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DS
	Received 407 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (407 bytes) ;; HEADER SECTION ;; id = 21932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 ) nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. ESfvbXLcM9NjS5OF6xYEGOSTXn4AkAWqnU2cXXRmsY0g2qgKTJUC1ekVBYjQ2vDypyI3Oz3JIe3o /8g+dlYynEMEGe9sVBiBFJu6wpXkk93dpAxXEcTRUH72iDnSsqhlmFluT9oxSf4UUulmTHcZN7fN oAQFbaq/ovAFi+H3QNFOAiolRLXWcVGmV7uRF7dhw0uxECr4NobV0bCGSVhBBHXcMlFkKUSYZT2R rjqes9X6j63VUTZz0eOcqfQRw8anzWf9tC4+7y1W77ynB30xDnQwnpA6fDBNf61pDi8Bhjg3dtza D3gfGuaVcN+jyXPUdaTpS1iyTD/hXqTGyOMEBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nsec3-opt-out.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=16645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. ESfvbXLcM9NjS5OF6xYEGOSTXn4AkAWqnU2cXXRmsY0g2qgKTJUC1ekVBYjQ2vDypyI3Oz3JIe3o /8g+dlYynEMEGe9sVBiBFJu6wpXkk93dpAxXEcTRUH72iDnSsqhlmFluT9oxSf4UUulmTHcZN7fN oAQFbaq/ovAFi+H3QNFOAiolRLXWcVGmV7uRF7dhw0uxECr4NobV0bCGSVhBBHXcMlFkKUSYZT2R rjqes9X6j63VUTZz0eOcqfQRw8anzWf9tC4+7y1W77ynB30xDnQwnpA6fDBNf61pDi8Bhjg3dtza D3gfGuaVcN+jyXPUdaTpS1iyTD/hXqTGyOMEBQ== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=16645/SHA-256 is now in the chain-of-trust
	`nsec3-opt-out.wb.sidnlabs.nl. 3600 IN DS ( 16645 8 2 2976b24a9c50e5e428301761ecc9795ef22b1f5fa716bbb048c362596405a506 )`
	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/DNSKEY
	Received 925 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (925 bytes) ;; HEADER SECTION ;; id = 50485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645 nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20190314080033 16645 nsec3-opt-out.wb.sidnlabs.nl. FWiLh4mcZmpC1upkGvFRUZwKgS25xzoIe8O/5dkuP0QyDIh8goxKfBvGDalwDmrvmbC5F3UzIK1u bhG/o4o72VxJDvOs4sjvFEaNLxtLIGhd6Sccw+uAswdsa3H2duehAYqnrhSq1nx7F4fByXvvcGCa vuBZSCNT8JT+5Bsory4u2BVjpfV/54zHuKl5w7ePFGZUaDO2mkcxjeJAMlhuf7NvOWbKA5vQogny uetpqKFovQDqhDolBFB9C4sXsVgD7lphr1XvVeMxzEglNP0yqZTSG4F/MIaGjmStZlqw93nIVgqs tCh7D0qihofCpRCBzEPgRUcrewar+rj0GXtozQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nsec3-opt-out.wb.sidnlabs.nl
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAaaOAGSD4BNp0v+yjacNH/hZz0ZTL6Je/tMlkIn5ChUn+Ce5gWwFG+clsR1wyRTsabalH4gr 5tV2qYiiCtUU3vZcgya9pbmoIDcX2t2uOy9kvs1LAqHQxfxNxKh00+ucG0TtNq++mnq/pjpV8II3 hZ8OA9NlbpWURXhD0iOrjfLEPl8LFYnYtyOLLsK2ubHxugMHQqDyNZbtyGKNsvFt1Cu/1YrLeggX bmA/yjEwaDq20w2VS+iGPWpFGPThCriUJnIKquY+MYaB+2/cPihNMvTn9109f94SIzfVYGCfTso+ uBkc39JvWouz9h2a6locuh9zHo559C1AblLCKBZmq1s= ) ; Key ID = 16645`
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAaTUv1y4S20Zhmhll+IFYIVHoMOhBlc+rn4C06t36m/OuTXFdICbX58r4L5s5CUH2IQvukK7 oq6NSaf7KAtswwlyBtFbT0BO3m+TE3nY3IE9+GJaFNICB4Z7XW3BdeCiXY/jfBwHc57u5hqzvwn8 j3QjcXoXblB9mp0Akm2RkhFti/g+Ik8Zu7JUOXV2yGVQOmmlfKVwGa+VgPaTahAtG1muPXQ4ejVb nl2Jn8droXMoKJinM5boNiBHc2DVmS/CgKn5XbETjvcsBulq7lxvdRvccU9oZCIqc1WtDiJgjClq ZzJFiMTxDBWLXlIUaeo8+S2zZyQDbAe0AqoW/jj1iy8= ) ; Key ID = 22443`
	DNSKEY=16645/SEP is now in the chain-of-trust
	DS=16645/SHA-256 verifies DNSKEY=16645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 4 60 20300101000000 20190314080033 16645 nsec3-opt-out.wb.sidnlabs.nl. FWiLh4mcZmpC1upkGvFRUZwKgS25xzoIe8O/5dkuP0QyDIh8goxKfBvGDalwDmrvmbC5F3UzIK1u bhG/o4o72VxJDvOs4sjvFEaNLxtLIGhd6Sccw+uAswdsa3H2duehAYqnrhSq1nx7F4fByXvvcGCa vuBZSCNT8JT+5Bsory4u2BVjpfV/54zHuKl5w7ePFGZUaDO2mkcxjeJAMlhuf7NvOWbKA5vQogny uetpqKFovQDqhDolBFB9C4sXsVgD7lphr1XvVeMxzEglNP0yqZTSG4F/MIaGjmStZlqw93nIVgqs tCh7D0qihofCpRCBzEPgRUcrewar+rj0GXtozQ== )`
	RRSIG=16645 and DNSKEY=16645/SEP verifies the DNSKEY RRset
	DNSKEY=22443 is now in the chain-of-trust
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Error querying bind9.sidnlabs.nl/2a00:d78:0:712:94:198:159:39 for nsec3-opt-out.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 807 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (807 bytes) ;; HEADER SECTION ;; id = 14460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. XB7CekpE4/PmaHHso4+HCdMVsEHeESZ/cQsurbLYAs4M1nBECPBEJoaoTPFTimnUNp4V5pmOI0rW YSZeSE/WPwLuUQ8nZQdg48XfSZ7cBPSiDjnkvF00qMS7ic2L25Fp2TCkU/0Gm13HmDmUi1RyA6dH Nk4XxCiuTdKUQnic3BHWyfflhC3xqq8lfQ8o98PslGHlKTmNxifnF5oau6NIV3g4q7Ch8IcUWNPB vUvWX3MDaNLQkDUB9eScFx1xyNae7pn3hywfL5+VoyeRle2N21WtvfNdMJxIop5MXeFAlPT1NtWg R6NK/20SgOQE7GUI7IZCY2obdYQqQUz8oFTCVg== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl is authoritative for nsec3-opt-out.wb.sidnlabs.nl
	Found RRSIG signed by nsec3-opt-out.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Error querying powerdns.sidnlabs.nl/2a00:d78:0:712:94:198:159:26 for nsec3-opt-out.wb.sidnlabs.nl/SOA: 'IPv6 transport disabled'
	Received 426 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (426 bytes) ;; HEADER SECTION ;; id = 11945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. lgEg8dtKzdIlCfGcyq620OBYTwmRaqS7i9MijSvGN5Bc46Ky3vAU8uDnPNGrXk3ACciaCNnlBBlY yzUOmZOKLMrBMBxj4PCDCIkiDOa10aBxo1bQ46lFiadTDq2byWfnT5G7QZPl7x5rtwgridK38s8D GOaK5fHjQ0Bwy8nkY9jNkjPQmePh5eWsHpTYfUVmn6QrGcjKiNRI+hWTZUotQyTxmll+oT1Pum3i NZQRSoNJoqwguRqlhlt6555wYtJBtWBt+EVQ+ZuXbYBWM0dEZIjZhkgX7zZALx2YhUWvbXsRci37 nbp+pfe3wQXRvLqWbnGcVCovsHn5i8iO/Vnqxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nsd4.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Error querying nsd4.sidnlabs.nl/2a00:d78:0:712:94:198:159:33 for nsec3-opt-out.wb.sidnlabs.nl/SOA: 'IPv6 transport disabled'
	Received 838 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (838 bytes) ;; HEADER SECTION ;; id = 61077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. lgEg8dtKzdIlCfGcyq620OBYTwmRaqS7i9MijSvGN5Bc46Ky3vAU8uDnPNGrXk3ACciaCNnlBBlY yzUOmZOKLMrBMBxj4PCDCIkiDOa10aBxo1bQ46lFiadTDq2byWfnT5G7QZPl7x5rtwgridK38s8D GOaK5fHjQ0Bwy8nkY9jNkjPQmePh5eWsHpTYfUVmn6QrGcjKiNRI+hWTZUotQyTxmll+oT1Pum3i NZQRSoNJoqwguRqlhlt6555wYtJBtWBt+EVQ+ZuXbYBWM0dEZIjZhkgX7zZALx2YhUWvbXsRci37 nbp+pfe3wQXRvLqWbnGcVCovsHn5i8iO/Vnqxg== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Error querying yadifa.sidnlabs.nl/2a00:d78:0:712:94:198:159:28 for nsec3-opt-out.wb.sidnlabs.nl/SOA: 'IPv6 transport disabled'
	Received 838 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (838 bytes) ;; HEADER SECTION ;; id = 39092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. lgEg8dtKzdIlCfGcyq620OBYTwmRaqS7i9MijSvGN5Bc46Ky3vAU8uDnPNGrXk3ACciaCNnlBBlY yzUOmZOKLMrBMBxj4PCDCIkiDOa10aBxo1bQ46lFiadTDq2byWfnT5G7QZPl7x5rtwgridK38s8D GOaK5fHjQ0Bwy8nkY9jNkjPQmePh5eWsHpTYfUVmn6QrGcjKiNRI+hWTZUotQyTxmll+oT1Pum3i NZQRSoNJoqwguRqlhlt6555wYtJBtWBt+EVQ+ZuXbYBWM0dEZIjZhkgX7zZALx2YhUWvbXsRci37 nbp+pfe3wQXRvLqWbnGcVCovsHn5i8iO/Vnqxg== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 838 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (838 bytes) ;; HEADER SECTION ;; id = 61780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. lgEg8dtKzdIlCfGcyq620OBYTwmRaqS7i9MijSvGN5Bc46Ky3vAU8uDnPNGrXk3ACciaCNnlBBlY yzUOmZOKLMrBMBxj4PCDCIkiDOa10aBxo1bQ46lFiadTDq2byWfnT5G7QZPl7x5rtwgridK38s8D GOaK5fHjQ0Bwy8nkY9jNkjPQmePh5eWsHpTYfUVmn6QrGcjKiNRI+hWTZUotQyTxmll+oT1Pum3i NZQRSoNJoqwguRqlhlt6555wYtJBtWBt+EVQ+ZuXbYBWM0dEZIjZhkgX7zZALx2YhUWvbXsRci37 nbp+pfe3wQXRvLqWbnGcVCovsHn5i8iO/Vnqxg== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/SOA
	Received 426 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (426 bytes) ;; HEADER SECTION ;; id = 52973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550431 ;serial 3600 ;refresh 600 ;retry 3600 ;expire 3600 ;minimum ) nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( SOA 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. lgEg8dtKzdIlCfGcyq620OBYTwmRaqS7i9MijSvGN5Bc46Ky3vAU8uDnPNGrXk3ACciaCNnlBBlY yzUOmZOKLMrBMBxj4PCDCIkiDOa10aBxo1bQ46lFiadTDq2byWfnT5G7QZPl7x5rtwgridK38s8D GOaK5fHjQ0Bwy8nkY9jNkjPQmePh5eWsHpTYfUVmn6QrGcjKiNRI+hWTZUotQyTxmll+oT1Pum3i NZQRSoNJoqwguRqlhlt6555wYtJBtWBt+EVQ+ZuXbYBWM0dEZIjZhkgX7zZALx2YhUWvbXsRci37 nbp+pfe3wQXRvLqWbnGcVCovsHn5i8iO/Vnqxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for nsec3-opt-out.wb.sidnlabs.nl/A
	Error querying bind9.sidnlabs.nl/2a00:d78:0:712:94:198:159:39 for nsec3-opt-out.wb.sidnlabs.nl/A: 'IPv6 transport disabled'
	Received 807 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (807 bytes) ;; HEADER SECTION ;; id = 47871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nsec3-opt-out.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN A 94.198.159.39 nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. XB7CekpE4/PmaHHso4+HCdMVsEHeESZ/cQsurbLYAs4M1nBECPBEJoaoTPFTimnUNp4V5pmOI0rW YSZeSE/WPwLuUQ8nZQdg48XfSZ7cBPSiDjnkvF00qMS7ic2L25Fp2TCkU/0Gm13HmDmUi1RyA6dH Nk4XxCiuTdKUQnic3BHWyfflhC3xqq8lfQ8o98PslGHlKTmNxifnF5oau6NIV3g4q7Ch8IcUWNPB vUvWX3MDaNLQkDUB9eScFx1xyNae7pn3hywfL5+VoyeRle2N21WtvfNdMJxIop5MXeFAlPT1NtWg R6NK/20SgOQE7GUI7IZCY2obdYQqQUz8oFTCVg== ) ;; AUTHORITY SECTION (6 records) nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS knot.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS powerdns.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS nsd4.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS bind9.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN NS yadifa.sidnlabs.nl. nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( NS 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. BJ2CE8UAw+aF+ZBTmil3y/PEc7gW7C/6xwdXhbiAnhOxszaRm2koAP882KhYO61jnV4VRUwqJGdb anFmCCxAs4rbMpQOuE/km4VYwe3yp+fnhDFCCpAdVZRI8KENCkSi8gePNeXyszn3zBtsv+fbd8dm EPKE2fwzF6P7xjxhTUZQ9R3RcypkAoYEyl3V/8ImMbNamJugR2ffM6vzJsY4zIz6f8xBmGhRbQlG wlYcRj+wyDcFPzk9BtqjoxmmJm4DSmQGwCsmFA3I+AXYWgIps9Cur1ruYwPofc3UOyCJaAuYLstF hr/jRC17z99bPHEgyxCVmXOjUCpfDcc0Mmc7rw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsec3-opt-out.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`nsec3-opt-out.wb.sidnlabs.nl. 60 IN RRSIG ( A 8 4 60 20300101000000 20190314080033 22443 nsec3-opt-out.wb.sidnlabs.nl. XB7CekpE4/PmaHHso4+HCdMVsEHeESZ/cQsurbLYAs4M1nBECPBEJoaoTPFTimnUNp4V5pmOI0rW YSZeSE/WPwLuUQ8nZQdg48XfSZ7cBPSiDjnkvF00qMS7ic2L25Fp2TCkU/0Gm13HmDmUi1RyA6dH Nk4XxCiuTdKUQnic3BHWyfflhC3xqq8lfQ8o98PslGHlKTmNxifnF5oau6NIV3g4q7Ch8IcUWNPB vUvWX3MDaNLQkDUB9eScFx1xyNae7pn3hywfL5+VoyeRle2N21WtvfNdMJxIop5MXeFAlPT1NtWg R6NK/20SgOQE7GUI7IZCY2obdYQqQUz8oFTCVg== )`
	RRSIG=22443 and DNSKEY=22443 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nsec3-opt-out.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: