DNSSEC Debugger - ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2026-03-16 18:52:48 UTC

Analyzing DNSSEC problems for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 40732 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 592 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 592 octets ;; HEADER SECTION ;; id = 1915 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . sw/ViJ/Q/lVmW8ZZFaKt61/BLCJSezmc42AxXJK/fx/8EpHI2GaXmlxneOWlpWn8RZRFDLgGiBhu W9jo5L3jhuNAcY80INZC1tvco4DBzj3agRG5tVAgu1rqNKDFkAUBdhpAXuZMmk785CqNhlrdVcN0 9MhU6AghJQ9XXKN/QuFKVKKRm/Ym2N3b0zE4wJRiIcBkhHAjFezjZy+iU3rdYn56rgyouVWeKGuo 59BP6hKexaLvF3rRZ2cuhBpvkOW73fyVPFrzICbL8ekU9icJ7NB8zPFEQz5g+GdCzScJr+U3/YPJ cYHLucTZjOwwrO/8PVSCB/NK6/EI5KJ7nQkHeQ== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for nl/DNSKEY
	Received 556 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 556 octets ;; HEADER SECTION ;; id = 38520 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . sw/ViJ/Q/lVmW8ZZFaKt61/BLCJSezmc42AxXJK/fx/8EpHI2GaXmlxneOWlpWn8RZRFDLgGiBhu W9jo5L3jhuNAcY80INZC1tvco4DBzj3agRG5tVAgu1rqNKDFkAUBdhpAXuZMmk785CqNhlrdVcN0 9MhU6AghJQ9XXKN/QuFKVKKRm/Ym2N3b0zE4wJRiIcBkhHAjFezjZy+iU3rdYn56rgyouVWeKGuo 59BP6hKexaLvF3rRZ2cuhBpvkOW73fyVPFrzICbL8ekU9icJ7NB8zPFEQz5g+GdCzScJr+U3/YPJ cYHLucTZjOwwrO/8PVSCB/NK6/EI5KJ7nQkHeQ== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to c.root-servers.net for nl/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 38126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . sw/ViJ/Q/lVmW8ZZFaKt61/BLCJSezmc42AxXJK/fx/8EpHI2GaXmlxneOWlpWn8RZRFDLgGiBhu W9jo5L3jhuNAcY80INZC1tvco4DBzj3agRG5tVAgu1rqNKDFkAUBdhpAXuZMmk785CqNhlrdVcN0 9MhU6AghJQ9XXKN/QuFKVKKRm/Ym2N3b0zE4wJRiIcBkhHAjFezjZy+iU3rdYn56rgyouVWeKGuo 59BP6hKexaLvF3rRZ2cuhBpvkOW73fyVPFrzICbL8ekU9icJ7NB8zPFEQz5g+GdCzScJr+U3/YPJ cYHLucTZjOwwrO/8PVSCB/NK6/EI5KJ7nQkHeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . sw/ViJ/Q/lVmW8ZZFaKt61/BLCJSezmc42AxXJK/fx/8EpHI2GaXmlxneOWlpWn8RZRFDLgGiBhu W9jo5L3jhuNAcY80INZC1tvco4DBzj3agRG5tVAgu1rqNKDFkAUBdhpAXuZMmk785CqNhlrdVcN0 9MhU6AghJQ9XXKN/QuFKVKKRm/Ym2N3b0zE4wJRiIcBkhHAjFezjZy+iU3rdYn56rgyouVWeKGuo 59BP6hKexaLvF3rRZ2cuhBpvkOW73fyVPFrzICbL8ekU9icJ7NB8zPFEQz5g+GdCzScJr+U3/YPJ cYHLucTZjOwwrO/8PVSCB/NK6/EI5KJ7nQkHeQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 369 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 369 octets ;; HEADER SECTION ;; id = 35408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543 nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260411041629 20260314140720 17153 nl. KEWYxWQAwkzeO7sKrSmgm2URZJKEz6a/kkZzB/X9neUIAUilpKsMRG4ckk5/wVaTPY2gY0iZBpI7 KnBMU0E6dQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543`
	`nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260411041629 20260314140720 17153 nl. KEWYxWQAwkzeO7sKrSmgm2URZJKEz6a/kkZzB/X9neUIAUilpKsMRG4ckk5/wVaTPY2gY0iZBpI7 KnBMU0E6dQ== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=41543 is now in the chain-of-trust
	DNSKEY=37807 is now in the chain-of-trust
	Query to ns1.dns.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 400 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 400 octets ;; HEADER SECTION ;; id = 57914 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260403014541 20260306050720 41543 nl. frF/CbAUuMCWDThAiwF1YKfVZF7d0V9vM3YeW9TX0OwUd3M/3jRHfr1DQhWE+10pR8AS45LHFUK8 qcnlTDT5bw== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN A 147.75.205.55 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:5c00::d ;; { "EDNS-VERSION": 0 }
	Query to ns4.dns.nl for sidnlabs.nl/DNSKEY
	Received 377 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 377 octets ;; HEADER SECTION ;; id = 99 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260403014541 20260306050720 41543 nl. frF/CbAUuMCWDThAiwF1YKfVZF7d0V9vM3YeW9TX0OwUd3M/3jRHfr1DQhWE+10pR8AS45LHFUK8 qcnlTDT5bw== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN A 147.75.205.55 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:5c00::d ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 186 octets ;; HEADER SECTION ;; id = 31677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260403014541 20260306050720 41543 nl. frF/CbAUuMCWDThAiwF1YKfVZF7d0V9vM3YeW9TX0OwUd3M/3jRHfr1DQhWE+10pR8AS45LHFUK8 qcnlTDT5bw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260403014541 20260306050720 41543 nl. frF/CbAUuMCWDThAiwF1YKfVZF7d0V9vM3YeW9TX0OwUd3M/3jRHfr1DQhWE+10pR8AS45LHFUK8 qcnlTDT5bw== )`
	RRSIG=41543 and DNSKEY=41543 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns2.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 227 octets ;; HEADER SECTION ;; id = 41593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260324150159 20260310141045 11261 sidnlabs.nl. g3HcSPVBKk7q+QoxegPjPMMoP40Mzn6emVc0C36u2c7mp0ZPTlOlRPYB30sRZmnBCwMQhKuKFB+I kjA5cccWgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260324150159 20260310141045 11261 sidnlabs.nl. g3HcSPVBKk7q+QoxegPjPMMoP40Mzn6emVc0C36u2c7mp0ZPTlOlRPYB30sRZmnBCwMQhKuKFB+I kjA5cccWgw== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns2.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 1182 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 1182 octets ;; HEADER SECTION ;; id = 17718 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260324022511 20260310013106 11261 sidnlabs.nl. UWVVTkH38j/ZChGmcswIgrj0kZshtfCIzfHAzx71in88NCFgSLZThtunxRI/MgmjPGNGkFicykzG jwSMtTzQXg== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260324015151 20260310014434 11261 sidnlabs.nl. xhdUWtCaz9zGR2a1l8xRlhO4KKk5u9svz0AJ9d2EwKMSSXrfC75DPgRbeD+vdTOT4Lg2IKXvpZUl Y57/VHSfvg== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260324015151 20260310014434 11261 sidnlabs.nl. dNSC6iv7T82EIX3gYQJk5SH9uJla3rIbHtB8fF1kYK+PRz9v5TH8YvuFpl/ukNOTA9nSB7cS+NIS znOixPtTfw== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260324085512 20260310081650 11261 sidnlabs.nl. sek7pyceB6wFsnbFJT6Q3nfAEYP31m8iTr3TtBrShY7Pu5d5uTHgw9hKec4wDiXTRjh1H+qGCAw4 IL91dWW6Ug== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260324085512 20260310081650 11261 sidnlabs.nl. iEEY7jXIh44Q4cBfXu+KKe6Pbwl0QdIq3Kfidsczqe/mQ8bg9/JnMe8/gU3FRH1x2Vdi2iJOtKQe OX8xAO1jSg== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260324072719 20260310063615 11261 sidnlabs.nl. ing/icQWFxMmwBTkZSoTVmAFIezIDXbI1zpIjC6rx6Rn2OhBGKctECF6r0mhWPrdfyZjr8u4GltM 1hsF8Z8Ufw== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260324072719 20260310063615 11261 sidnlabs.nl. Bzh7oesIp9+mUHwb4H55s5Yrp7mfJw2l7cMdjKmLc9CObkVt/DsSYteDYdPWbU7PhwIYoNXi5Wrr NYP6y015Mw== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 300 bytes from 94.198.159.8
	;; Response received from [94.198.159.8] 300 octets ;; HEADER SECTION ;; id = 39974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260324022511 20260310013106 11261 sidnlabs.nl. UWVVTkH38j/ZChGmcswIgrj0kZshtfCIzfHAzx71in88NCFgSLZThtunxRI/MgmjPGNGkFicykzG jwSMtTzQXg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 147.75.205.55
	;; Response received from [147.75.205.55] 198 octets ;; HEADER SECTION ;; id = 22990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260324022511 20260310013106 11261 sidnlabs.nl. UWVVTkH38j/ZChGmcswIgrj0kZshtfCIzfHAzx71in88NCFgSLZThtunxRI/MgmjPGNGkFicykzG jwSMtTzQXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260324022511 20260310013106 11261 sidnlabs.nl. UWVVTkH38j/ZChGmcswIgrj0kZshtfCIzfHAzx71in88NCFgSLZThtunxRI/MgmjPGNGkFicykzG jwSMtTzQXg== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to bind9.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 897 octets ;; HEADER SECTION ;; id = 1292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704 wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to powerdns.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 273 octets ;; HEADER SECTION ;; id = 13365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 387 octets ;; HEADER SECTION ;; id = 54434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 352 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 352 octets ;; HEADER SECTION ;; id = 36356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bad-dnssec.wb.sidnlabs.nl nameservers: bind9.sidnlabs.nl, nsd4.sidnlabs.nl, powerdns.sidnlabs.nl, yadifa.sidnlabs.nl, knot.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 404 octets ;; HEADER SECTION ;; id = 6834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 387 octets ;; HEADER SECTION ;; id = 37427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 273 octets ;; HEADER SECTION ;; id = 43609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 393 octets ;; HEADER SECTION ;; id = 1655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694 ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 347 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 347 octets ;; HEADER SECTION ;; id = 13807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. iXv7hXJy+xAt6y6pJkl/pjcvP2Z6b6tlr911JPeNzX8Ez2+OEXLySaR0nG1Vt6Ob9AwbnqcZxiux kdErB+kyLUOu9roA8gNYh0w5nA5tkrlvcUbDTsZDlDuSKdCMgLzsI6AvYyTUH9P1UKKhtvAh7b54 ir3B7uGHfVxsR2PZX+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 290 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 290 octets ;; HEADER SECTION ;; id = 56432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= ) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=31694/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=31694/SHA-256 is now in the chain-of-trust
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f )`
	Query to knot.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 393 octets ;; HEADER SECTION ;; id = 54674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694 ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.bad-dnssec.wb.sidnlabs.nl
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694`
	DNSKEY=31694/SEP is now in the chain-of-trust
	DS=31694/SHA-256 verifies DNSKEY=31694/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DNSKEY RRset
	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 569 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 569 octets ;; HEADER SECTION ;; id = 57033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	All Queries to yadifa.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY timed out or failed
	Query to nsd4.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 399 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 399 octets ;; HEADER SECTION ;; id = 17710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; keytag 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 353 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 353 octets ;; HEADER SECTION ;; id = 15601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. ctyXSLheu+Jnc20lbuebFDiaFNL9FfD5+oTcDt5z9JMg4XO0z8HGC4BODmzOqgDh4dOsWkObHeVs 6Ry47QpMlrezQMHoyuSOx6CoPB5yHDUhUTByL7B0XDZAVYXEJiu5mANSqovaTLd+t8IdBR0WGssU bif+zOcRaQH7nMPsixI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.bad-dnssec.wb.sidnlabs.nl and ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 296 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 296 octets ;; HEADER SECTION ;; id = 12048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 57125 8 2 647b9360e8db4111a78db90c1a66f2468a2a90e2f26654b0983eac51f9e6fbed ) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. hzFOQnhjt1JSCHTs/vmYNPjuPvvHOPG6zXh3XPrnB1+MMuqawZ7VxczsYqbINZxMii0ONesuDcJW qKql7MKqp7SZELVaNTjNdQXYlhtD6ZgHgLH8wfj66SiXzW8xC5Fyz4ZasqfmxwY9Iy+XVrbPeWkR Tq/LDmPCvvjOx4SRG5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.ok.bad-dnssec.wb.sidnlabs.nl in the ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=57125/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. hzFOQnhjt1JSCHTs/vmYNPjuPvvHOPG6zXh3XPrnB1+MMuqawZ7VxczsYqbINZxMii0ONesuDcJW qKql7MKqp7SZELVaNTjNdQXYlhtD6ZgHgLH8wfj66SiXzW8xC5Fyz4ZasqfmxwY9Iy+XVrbPeWkR Tq/LDmPCvvjOx4SRG5o= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DS RRset
	DS=57125/SHA-256 is now in the chain-of-trust
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 57125 8 2 647b9360e8db4111a78db90c1a66f2468a2a90e2f26654b0983eac51f9e6fbed )`
	Query to bind9.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 399 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 399 octets ;; HEADER SECTION ;; id = 38948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; keytag 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.ok.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; keytag 57125`
	DNSKEY=57125/SEP is now in the chain-of-trust
	DS=57125/SHA-256 verifies DNSKEY=57125/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= )`
	RRSIG=57125 and DNSKEY=57125/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 580 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 580 octets ;; HEADER SECTION ;; id = 61674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 405 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 405 octets ;; HEADER SECTION ;; id = 4860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaJ9hlivf4bsnNIM6W6DWqj6eulQnphxkD0jExEg2Z8VbEKP9t62phAZoewTV66TjMwfGM1E c8sG8DUn+gPPOXkzWmPvgz9NKGv8SB+8YyWS1eKmNRrGJh6qs5aLxQRlc0U4mvAj0n46rJuNXD0H bwOZ9/ojFUhJx3es+N/W5YYH ) ; keytag 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. e4k5PQhj/c4hjtFOVH5AX3KWHv5iH8jSzjDyp2XDWfcKj9HV8gg1IpETeOwgPtNMqeem2i1T3aro ziNHzXlOB6xw0/Y7dg+C0f/a8qRNbIgAYCqUP3FHuiG6Q5khKoKCRAjPTmDVuRKmmZj5KLDLL7v1 z17Wuy/uluRJQtGPMtE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 370 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 370 octets ;; HEADER SECTION ;; id = 18910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl

ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.ok.bad-dnssec.wb.sidnlabs.nl and ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 302 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 302 octets ;; HEADER SECTION ;; id = 48690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 59504 8 2 61a5db924e0ba19a112bdeb23e5c73ff1f2d0b76feb77fa136a73507f58a3f6e ) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. kpsqLgEor0mLfgdFsjk7KUudbvg3Lkt8UeaRlTwPsa3Re92gSnAx1I/T6Qk5cuqa/CHAklSF2HlL 5j4kepZ0XGyxh4ZKq8fLdLE+CxfjCpkr6+W1K9gY+PXzqjmCumC3evZTCS9E6MsR0pGaiU/lFYvm 3W7DaAdZxCyfM8Fqatw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl in the ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=59504/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. kpsqLgEor0mLfgdFsjk7KUudbvg3Lkt8UeaRlTwPsa3Re92gSnAx1I/T6Qk5cuqa/CHAklSF2HlL 5j4kepZ0XGyxh4ZKq8fLdLE+CxfjCpkr6+W1K9gY+PXzqjmCumC3evZTCS9E6MsR0pGaiU/lFYvm 3W7DaAdZxCyfM8Fqatw= )`
	RRSIG=57125 and DNSKEY=57125/SEP verifies the DS RRset
	DS=59504/SHA-256 is now in the chain-of-trust
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 59504 8 2 61a5db924e0ba19a112bdeb23e5c73ff1f2d0b76feb77fa136a73507f58a3f6e )`
	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 405 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 405 octets ;; HEADER SECTION ;; id = 44358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaJ9hlivf4bsnNIM6W6DWqj6eulQnphxkD0jExEg2Z8VbEKP9t62phAZoewTV66TjMwfGM1E c8sG8DUn+gPPOXkzWmPvgz9NKGv8SB+8YyWS1eKmNRrGJh6qs5aLxQRlc0U4mvAj0n46rJuNXD0H bwOZ9/ojFUhJx3es+N/W5YYH ) ; keytag 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. e4k5PQhj/c4hjtFOVH5AX3KWHv5iH8jSzjDyp2XDWfcKj9HV8gg1IpETeOwgPtNMqeem2i1T3aro ziNHzXlOB6xw0/Y7dg+C0f/a8qRNbIgAYCqUP3FHuiG6Q5khKoKCRAjPTmDVuRKmmZj5KLDLL7v1 z17Wuy/uluRJQtGPMtE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaJ9hlivf4bsnNIM6W6DWqj6eulQnphxkD0jExEg2Z8VbEKP9t62phAZoewTV66TjMwfGM1E c8sG8DUn+gPPOXkzWmPvgz9NKGv8SB+8YyWS1eKmNRrGJh6qs5aLxQRlc0U4mvAj0n46rJuNXD0H bwOZ9/ojFUhJx3es+N/W5YYH ) ; keytag 59504`
	DNSKEY=59504/SEP is now in the chain-of-trust
	DS=59504/SHA-256 verifies DNSKEY=59504/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. e4k5PQhj/c4hjtFOVH5AX3KWHv5iH8jSzjDyp2XDWfcKj9HV8gg1IpETeOwgPtNMqeem2i1T3aro ziNHzXlOB6xw0/Y7dg+C0f/a8qRNbIgAYCqUP3FHuiG6Q5khKoKCRAjPTmDVuRKmmZj5KLDLL7v1 z17Wuy/uluRJQtGPMtE= )`
	RRSIG=59504 and DNSKEY=59504/SEP verifies the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 273 octets ;; HEADER SECTION ;; id = 11195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to knot.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 310 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 310 octets ;; HEADER SECTION ;; id = 21619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. gMxgg5xRMX3+7NYbJdIIfkAnYlKOP5vtEcsb7HxzjirZagaJHlxlamDrLj3uD6MmQmPA4r/aFW98 dL/2y39WSWwTQXSneN8Ap4EeHMUtW+0WE6JyiB+97AA7h8UsUT8jKpTvPoHW7M3G15estWw/wc0O UhA0JIg+HktEirH/7gI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 600 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 600 octets ;; HEADER SECTION ;; id = 58838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. gMxgg5xRMX3+7NYbJdIIfkAnYlKOP5vtEcsb7HxzjirZagaJHlxlamDrLj3uD6MmQmPA4r/aFW98 dL/2y39WSWwTQXSneN8Ap4EeHMUtW+0WE6JyiB+97AA7h8UsUT8jKpTvPoHW7M3G15estWw/wc0O UhA0JIg+HktEirH/7gI= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to yadifa.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	All Queries to yadifa.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA timed out or failed
	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 611 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 611 octets ;; HEADER SECTION ;; id = 37528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. gMxgg5xRMX3+7NYbJdIIfkAnYlKOP5vtEcsb7HxzjirZagaJHlxlamDrLj3uD6MmQmPA4r/aFW98 dL/2y39WSWwTQXSneN8Ap4EeHMUtW+0WE6JyiB+97AA7h8UsUT8jKpTvPoHW7M3G15estWw/wc0O UhA0JIg+HktEirH/7gI= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to powerdns.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 273 octets ;; HEADER SECTION ;; id = 54590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= )`
	RRSIG=59504 and DNSKEY=59504/SEP verifies the A RRset

ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 569 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 569 octets ;; HEADER SECTION ;; id = 37948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 569 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 569 octets ;; HEADER SECTION ;; id = 42815 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= )`
	RRSIG=59504 and DNSKEY=59504/SEP verifies the A RRset

ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 580 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 580 octets ;; HEADER SECTION ;; id = 28903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 580 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 580 octets ;; HEADER SECTION ;; id = 30879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (6 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. nvrPR2eT8bBWQxUYPBm8R1BRtn3fSeQFXRu7OonXMWEVDZ/HrvkT7ruD8rs/ahSQW+HNcDx0yd2O +6Cbz+6kkOf+7Rs790Yy/rMKUOM/cyySwl44MmUWfvCu7skX2Nw026lRC19GLDGVTGkWZP66KH3d pkXh4qqvvOcdi9u3zQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= )`
	RRSIG=59504 and DNSKEY=59504/SEP verifies the A RRset

ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to knot.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 273 octets ;; HEADER SECTION ;; id = 57518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to knot.sidnlabs.nl for ok.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 273 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 273 octets ;; HEADER SECTION ;; id = 59268 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 59504 ok.ok.ok.bad-dnssec.wb.sidnlabs.nl. R9uRS+UJcS6aXQVguTtXlkm7iDiinssbHFZcr1vjJL4TpISMdit/d50jcp0v6bOhc818L0M6ekJp IqiNsnfo2z8efbJvhU+i3mhsFChp/+VCdBpfjhUYPqPMHHph4cHDfMtfGyWlUPomlqtRib/ExBgs 7rPNBWzv5I9tNLJrjA0= )`
	RRSIG=59504 and DNSKEY=59504/SEP verifies the A RRset

ok.ok.ok.bad-dnssec.wb.sidnlabs.nl

No response from ok.ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ok.ok.ok.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: