DNSSEC Analyzer - saberpungli.id

Domain Name:

Time: 2021-03-09 08:17:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for saberpungli.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 9503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to l.root-servers.net for saberpungli.id/A
	Received 729 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (729 bytes) ;; HEADER SECTION ;; id = 37900 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . E5RMO8aIdsQ1D/gz0VbeX7XLus3W12iFMaGdq1lufY7/G4LVxQHCzTagWco1HNCw2VCQ2Lyu3IyE sW8/mOXBLd0j4mAqs+/77heSk3TSseV/ISMSGzFkDtwjIV8Tmr8VuUdMTFIdFaL3otgapEHqsqVA Gp91fApo9XR8xeTw83lAuar9qGTgIgvoZrwVIRLpeQyKXJnY3JunCoLaOUIcCgKjwNor+HOIyed0 NX9sigJkwYuoAsmrHQTG7jdIV3x6UYSDvJuKcCLfDare9PjqCuLos/TzQh281oRO3q0Q55Tlwh5w cghlW02/8hIMvCEElLRoDmVYIZa++wHc/YdYQw== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN A 103.19.178.178 c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN A 45.126.57.57 d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN A 103.19.177.177 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for id/DNSKEY
	Received 717 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (717 bytes) ;; HEADER SECTION ;; id = 11652 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS d.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS e.dns.id. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . E5RMO8aIdsQ1D/gz0VbeX7XLus3W12iFMaGdq1lufY7/G4LVxQHCzTagWco1HNCw2VCQ2Lyu3IyE sW8/mOXBLd0j4mAqs+/77heSk3TSseV/ISMSGzFkDtwjIV8Tmr8VuUdMTFIdFaL3otgapEHqsqVA Gp91fApo9XR8xeTw83lAuar9qGTgIgvoZrwVIRLpeQyKXJnY3JunCoLaOUIcCgKjwNor+HOIyed0 NX9sigJkwYuoAsmrHQTG7jdIV3x6UYSDvJuKcCLfDare9PjqCuLos/TzQh281oRO3q0Q55Tlwh5w cghlW02/8hIMvCEElLRoDmVYIZa++wHc/YdYQw== ) ;; ADDITIONAL SECTION (11 records) d.dns.id. 172800 IN A 45.126.57.57 d.dns.id. 172800 IN AAAA 2402:ee80:d::d b.dns.id. 172800 IN A 103.19.179.179 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN A 103.19.178.178 c.dns.id. 172800 IN AAAA 2402:ee80:c::c ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 e.dns.id. 172800 IN A 103.19.177.177 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to g.root-servers.net for id/DS
	Received 402 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (402 bytes) ;; HEADER SECTION ;; id = 50982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . E5RMO8aIdsQ1D/gz0VbeX7XLus3W12iFMaGdq1lufY7/G4LVxQHCzTagWco1HNCw2VCQ2Lyu3IyE sW8/mOXBLd0j4mAqs+/77heSk3TSseV/ISMSGzFkDtwjIV8Tmr8VuUdMTFIdFaL3otgapEHqsqVA Gp91fApo9XR8xeTw83lAuar9qGTgIgvoZrwVIRLpeQyKXJnY3JunCoLaOUIcCgKjwNor+HOIyed0 NX9sigJkwYuoAsmrHQTG7jdIV3x6UYSDvJuKcCLfDare9PjqCuLos/TzQh281oRO3q0Q55Tlwh5w cghlW02/8hIMvCEElLRoDmVYIZa++wHc/YdYQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	DS=26887/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . E5RMO8aIdsQ1D/gz0VbeX7XLus3W12iFMaGdq1lufY7/G4LVxQHCzTagWco1HNCw2VCQ2Lyu3IyE sW8/mOXBLd0j4mAqs+/77heSk3TSseV/ISMSGzFkDtwjIV8Tmr8VuUdMTFIdFaL3otgapEHqsqVA Gp91fApo9XR8xeTw83lAuar9qGTgIgvoZrwVIRLpeQyKXJnY3JunCoLaOUIcCgKjwNor+HOIyed0 NX9sigJkwYuoAsmrHQTG7jdIV3x6UYSDvJuKcCLfDare9PjqCuLos/TzQh281oRO3q0Q55Tlwh5w cghlW02/8hIMvCEElLRoDmVYIZa++wHc/YdYQw== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	Query to e.dns.id for id/DNSKEY
	Received 1163 bytes from 103.19.177.177
	;; Answer received from 103.19.177.177 (1163 bytes) ;; HEADER SECTION ;; id = 40736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210318194409 20210216191146 22449 id. qvZexmpQjjD550lu8Xlx7PpqNXB/IsfoBtsfPr3ZVDkF1TRwMBpREe2uIPPlEmCF7pjuEW1cTkJA 3AdzHGlCA4kJcPY0/SBnUUp7w0gdeiQ0b8BVpXSfa0XOdMlr0xvvWjLKkwPRyP8oEcd4qENgeK6l CyQRQwFro+dbVGaxeZYG3hq8xcdfYmiUXmlEmlo5S0f44k60qZlNYNH0mTSSZuJwHLNQMPLg5g6Q 8KW+8JDp64gaUuW8R1miEpLKOYrvWHEdrPf8co8aHbw6hEah9ZnCqhWnl/eObdp9KL5XqNUaXjRG o45QxepdpuxwdFBfU2jSFtjqjggNyADDx4/rFA== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210318194409 20210216191146 26887 id. fdFRNyUhdefygd6tfkbgCyXsEs2+U5efeqXlJUC3Ukw9FiQh8Gx6LIDyRhDFI6RDyEZauQzlL8e3 UABd1cMHvx++pvfCKjhFT4Iv0Gt6uBkRb6qSn3XWAAvu+signgi0uF+LB38JfpncURkLexGYrQfa H90hwjRY3H3s3PUNey76bQlR5L+XwserD+gy/bH55xmN3mPGJLZD+z5r3hPXXze84yzknVlZ1yM4 4oHMKjowXZdQQ4iK91Iywx+wzcUa0t2pF0fU0hejGC3sGDWlBqSiFRsrKifHtK4vMZbrJuGFf1oB eDopFzXazxpWiII7kMmf0PkygMUd0ihgQ5eYqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210318194409 20210216191146 22449 id. qvZexmpQjjD550lu8Xlx7PpqNXB/IsfoBtsfPr3ZVDkF1TRwMBpREe2uIPPlEmCF7pjuEW1cTkJA 3AdzHGlCA4kJcPY0/SBnUUp7w0gdeiQ0b8BVpXSfa0XOdMlr0xvvWjLKkwPRyP8oEcd4qENgeK6l CyQRQwFro+dbVGaxeZYG3hq8xcdfYmiUXmlEmlo5S0f44k60qZlNYNH0mTSSZuJwHLNQMPLg5g6Q 8KW+8JDp64gaUuW8R1miEpLKOYrvWHEdrPf8co8aHbw6hEah9ZnCqhWnl/eObdp9KL5XqNUaXjRG o45QxepdpuxwdFBfU2jSFtjqjggNyADDx4/rFA== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210318194409 20210216191146 26887 id. fdFRNyUhdefygd6tfkbgCyXsEs2+U5efeqXlJUC3Ukw9FiQh8Gx6LIDyRhDFI6RDyEZauQzlL8e3 UABd1cMHvx++pvfCKjhFT4Iv0Gt6uBkRb6qSn3XWAAvu+signgi0uF+LB38JfpncURkLexGYrQfa H90hwjRY3H3s3PUNey76bQlR5L+XwserD+gy/bH55xmN3mPGJLZD+z5r3hPXXze84yzknVlZ1yM4 4oHMKjowXZdQQ4iK91Iywx+wzcUa0t2pF0fU0hejGC3sGDWlBqSiFRsrKifHtK4vMZbrJuGFf1oB eDopFzXazxpWiII7kMmf0PkygMUd0ihgQ5eYqg== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to d.dns.id for saberpungli.id/A
	Received 427 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (427 bytes) ;; HEADER SECTION ;; id = 27069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) saberpungli.id. 3600 IN NS nx1.polkam.go.id. saberpungli.id. 3600 IN NS nx2.polkam.go.id. saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210331230533 20210301222906 22449 id. DzSx8dSE4eqJJUcbmeo4PyGSyMjh61J/McXPkcUYNvv69EA0sEsUA02pKAdHuNVZRYWjuW26LMiu npgij+atMmI4IbAsPEApu20T2A0zvTM+9aoAbxgNhn4MzY7fy8Y5HeYVXM1s4Vriy8Mb9T8YqcPI 5EmgEg5kaQK4Eh+MvCba2369HLtU3EQWhFT3gT9uR5HlXrBK/VJ56RFeIq6kIXbpHMf/bWj9w4M9 xlkGcR5HXFF2OaHv6rCq+SxuoFrZtrj07xjQ4OevDXK2g63KX6vZYlt3ntt4BPemxX0Iw5OrjXGV tzrsJ1slCY5MA/Jm3HDqNACtadIau56NW5k0RA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.dns.id for saberpungli.id/DNSKEY
	Received 427 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (427 bytes) ;; HEADER SECTION ;; id = 28048 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) saberpungli.id. 3600 IN NS nx1.polkam.go.id. saberpungli.id. 3600 IN NS nx2.polkam.go.id. saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210331230533 20210301222906 22449 id. DzSx8dSE4eqJJUcbmeo4PyGSyMjh61J/McXPkcUYNvv69EA0sEsUA02pKAdHuNVZRYWjuW26LMiu npgij+atMmI4IbAsPEApu20T2A0zvTM+9aoAbxgNhn4MzY7fy8Y5HeYVXM1s4Vriy8Mb9T8YqcPI 5EmgEg5kaQK4Eh+MvCba2369HLtU3EQWhFT3gT9uR5HlXrBK/VJ56RFeIq6kIXbpHMf/bWj9w4M9 xlkGcR5HXFF2OaHv6rCq+SxuoFrZtrj07xjQ4OevDXK2g63KX6vZYlt3ntt4BPemxX0Iw5OrjXGV tzrsJ1slCY5MA/Jm3HDqNACtadIau56NW5k0RA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone saberpungli.id

saberpungli.id

	Checking DS between id and saberpungli.id
	Query to d.dns.id for saberpungli.id/DS
	Received 381 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (381 bytes) ;; HEADER SECTION ;; id = 1466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DS ;; ANSWER SECTION (2 records) saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210331230533 20210301222906 22449 id. DzSx8dSE4eqJJUcbmeo4PyGSyMjh61J/McXPkcUYNvv69EA0sEsUA02pKAdHuNVZRYWjuW26LMiu npgij+atMmI4IbAsPEApu20T2A0zvTM+9aoAbxgNhn4MzY7fy8Y5HeYVXM1s4Vriy8Mb9T8YqcPI 5EmgEg5kaQK4Eh+MvCba2369HLtU3EQWhFT3gT9uR5HlXrBK/VJ56RFeIq6kIXbpHMf/bWj9w4M9 xlkGcR5HXFF2OaHv6rCq+SxuoFrZtrj07xjQ4OevDXK2g63KX6vZYlt3ntt4BPemxX0Iw5OrjXGV tzrsJ1slCY5MA/Jm3HDqNACtadIau56NW5k0RA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for saberpungli.id in the id zone
	DS=59722/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210331230533 20210301222906 22449 id. DzSx8dSE4eqJJUcbmeo4PyGSyMjh61J/McXPkcUYNvv69EA0sEsUA02pKAdHuNVZRYWjuW26LMiu npgij+atMmI4IbAsPEApu20T2A0zvTM+9aoAbxgNhn4MzY7fy8Y5HeYVXM1s4Vriy8Mb9T8YqcPI 5EmgEg5kaQK4Eh+MvCba2369HLtU3EQWhFT3gT9uR5HlXrBK/VJ56RFeIq6kIXbpHMf/bWj9w4M9 xlkGcR5HXFF2OaHv6rCq+SxuoFrZtrj07xjQ4OevDXK2g63KX6vZYlt3ntt4BPemxX0Iw5OrjXGV tzrsJ1slCY5MA/Jm3HDqNACtadIau56NW5k0RA== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=59722/SHA-256 is now in the chain-of-trust
	`saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 )`
	Query to nx1.polkam.go.id for saberpungli.id/DNSKEY
	Received 423 bytes from 103.226.218.1
	;; Answer received from 103.226.218.1 (423 bytes) ;; HEADER SECTION ;; id = 61501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DNSKEY ;; ANSWER SECTION (4 records) saberpungli.id. 86400 IN DNSKEY ( 256 3 13 dfNb2ZIObg3eeqjPtr+CaKWwa1z6/IfNnt/XqBSM48mgJ6UcaWHFuXIBSclu3E2e5CFATcJa+6X8 XuaxKvoulg== ) ; Key ID = 42196 saberpungli.id. 86400 IN DNSKEY ( 257 3 13 zLlWfv9nLNoDeq0N6TgZk5WNtnPOoQ9xejQyB7jedKPv4AveqBMKLvP4QANGKmS1SyD3QF896doR 0tTKIMq+3w== ) ; Key ID = 59722 saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. lRku8LQJj8kZzATnCANgwW6QwXnUcYoQ2OF8dgIodNvvjtbjbHCIbiF4wgUBCi5H4MzfKMHuAnFy V+hWEghoPQ== ) saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210407114541 20210308114541 59722 saberpungli.id. unPEtJNL4kT4/6h/1JCZ4vpQcnfy3CDemVvCmverWt53psxmsqUMWn0k09/h+Fwa0s97RSfqpYIw phAmAj5OTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for saberpungli.id
	`saberpungli.id. 86400 IN DNSKEY ( 256 3 13 dfNb2ZIObg3eeqjPtr+CaKWwa1z6/IfNnt/XqBSM48mgJ6UcaWHFuXIBSclu3E2e5CFATcJa+6X8 XuaxKvoulg== ) ; Key ID = 42196`
	`saberpungli.id. 86400 IN DNSKEY ( 257 3 13 zLlWfv9nLNoDeq0N6TgZk5WNtnPOoQ9xejQyB7jedKPv4AveqBMKLvP4QANGKmS1SyD3QF896doR 0tTKIMq+3w== ) ; Key ID = 59722`
	DNSKEY=59722/SEP is now in the chain-of-trust
	DS=59722/SHA-256 verifies DNSKEY=59722/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. lRku8LQJj8kZzATnCANgwW6QwXnUcYoQ2OF8dgIodNvvjtbjbHCIbiF4wgUBCi5H4MzfKMHuAnFy V+hWEghoPQ== )`
	`saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210407114541 20210308114541 59722 saberpungli.id. unPEtJNL4kT4/6h/1JCZ4vpQcnfy3CDemVvCmverWt53psxmsqUMWn0k09/h+Fwa0s97RSfqpYIw phAmAj5OTw== )`
	RRSIG=42196 and DNSKEY=42196 verifies the DNSKEY RRset
	RRSIG=59722 and DNSKEY=59722/SEP verifies the DNSKEY RRset
	DNSKEY=42196 is now in the chain-of-trust
	Query to nx2.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.2
	;; Answer received from 103.226.218.2 (169 bytes) ;; HEADER SECTION ;; id = 23585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. cHfjOxQBrz81O2KfnHnLuJwX5LPZhWsnBNZPkMzpiqgdfQHd3g8JWxRQDJAQWGvcxucmGQKvLY6N DuBE0wFd2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saberpungli.id is authoritative for saberpungli.id
	Found RRSIG signed by saberpungli.id zone
	Query to nx1.polkam.go.id for saberpungli.id/SOA
	Received 214 bytes from 103.226.218.1
	;; Answer received from 103.226.218.1 (214 bytes) ;; HEADER SECTION ;; id = 39578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN SOA ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN SOA ( nx1.polkam.go.id. hostmaster.polkam.go.id. 2018101266 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) saberpungli.id. 86400 IN RRSIG ( SOA 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. RmFs53QHkz2WZ7ONEKNrXd18CQen8+PlHw/4sClttvGJlcqw22pOI+sDXCboGrJe2Gis7C/Cqutc HO0G74VYCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx2.polkam.go.id for saberpungli.id/SOA
	Received 214 bytes from 103.226.218.2
	;; Answer received from 103.226.218.2 (214 bytes) ;; HEADER SECTION ;; id = 52642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN SOA ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN SOA ( nx1.polkam.go.id. hostmaster.polkam.go.id. 2018101266 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) saberpungli.id. 86400 IN RRSIG ( SOA 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. RmFs53QHkz2WZ7ONEKNrXd18CQen8+PlHw/4sClttvGJlcqw22pOI+sDXCboGrJe2Gis7C/Cqutc HO0G74VYCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx2.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.2
	;; Answer received from 103.226.218.2 (169 bytes) ;; HEADER SECTION ;; id = 18046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. cHfjOxQBrz81O2KfnHnLuJwX5LPZhWsnBNZPkMzpiqgdfQHd3g8JWxRQDJAQWGvcxucmGQKvLY6N DuBE0wFd2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saberpungli.id A RR has value 103.226.218.7
	Found 1 RRSIGs over A RRset
	`saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210407114541 20210308114541 42196 saberpungli.id. cHfjOxQBrz81O2KfnHnLuJwX5LPZhWsnBNZPkMzpiqgdfQHd3g8JWxRQDJAQWGvcxucmGQKvLY6N DuBE0wFd2Q== )`
	RRSIG=42196 and DNSKEY=42196 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test saberpungli.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: