DNSSEC Analyzer - saberpungli.id

Domain Name:

Time: 2021-09-17 17:21:22 UTC, NTP stratum 16

Analyzing DNSSEC problems for saberpungli.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (864 octets) ;; HEADER SECTION ;; id = 9551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210930000000 20210909000000 20326 . GIveMHf2/xg4SncDbJbRelG4iYJLRF5SuIaJTb0BajdPCA+1KYJRcpbYWERDNgmo9hralc+z0+wL VL+CXkAUW1RuIboqDeHedtI2Kn9NdIIPRKy1r/QQJMieKL2m+ZpSlzC/YuJUInhmiNxIrO+bfQAc nlOAdhVsGOeON7iVielAm95MuQJNX9ySPMSVAiFFkMCSMo+x7YNEB7x3xUl3MqXfMoWakj6ZguIS AeVj6IHzwBQU7h5jEtDF4STYcPayZcKzoZ4jyY91U03OP0dry51krrXyQyCvlYJ3kycshl+6xvXL Ap/OZyL2EDX9u0bvf0x1wauIoqtBSAdDHZb4Bg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210930000000 20210909000000 20326 . GIveMHf2/xg4SncDbJbRelG4iYJLRF5SuIaJTb0BajdPCA+1KYJRcpbYWERDNgmo9hralc+z0+wL VL+CXkAUW1RuIboqDeHedtI2Kn9NdIIPRKy1r/QQJMieKL2m+ZpSlzC/YuJUInhmiNxIrO+bfQAc nlOAdhVsGOeON7iVielAm95MuQJNX9ySPMSVAiFFkMCSMo+x7YNEB7x3xUl3MqXfMoWakj6ZguIS AeVj6IHzwBQU7h5jEtDF4STYcPayZcKzoZ4jyY91U03OP0dry51krrXyQyCvlYJ3kycshl+6xvXL Ap/OZyL2EDX9u0bvf0x1wauIoqtBSAdDHZb4Bg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to e.root-servers.net for saberpungli.id/A
	Received 729 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (729 octets) ;; HEADER SECTION ;; id = 23637 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20210930050000 20210917040000 26838 . NBj8X7UY8D84bMk++S6ST+W+0fS+dOlzGTxRH1ydH0+RBRHGpepE8shskQGftBhDK6Zb3L5QrwjF BZZATKYSXpQ+rlLQbhsX//UVQDrLVSLdJdbELt8XMQqEIN0VgOBpcPBXXN4GnvLfhWDT85iAbwrw /jd1pjF8OqPC/v+QPXbhBzvU0ABzH9x2AHdE238VhzZTB7/124UamxQTSG9oq4QWwUeYDcvKO+ep BgiTWtaeg4LS0ggjJfTrNiRN5QBj30cxK7QFC1oG/oAolFg9PKAgUtXylTH4bkL1gvT1sJjZEpdP 36C3MIzMUqkBNP3IHShPwIQwJjXUeMNjaUf5RA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN A 103.19.178.178 c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN A 45.126.57.57 d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN A 103.19.177.177 e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN A 202.12.31.53 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for id/DNSKEY
	Received 717 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (717 octets) ;; HEADER SECTION ;; id = 37646 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS d.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS e.dns.id. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20210930050000 20210917040000 26838 . NBj8X7UY8D84bMk++S6ST+W+0fS+dOlzGTxRH1ydH0+RBRHGpepE8shskQGftBhDK6Zb3L5QrwjF BZZATKYSXpQ+rlLQbhsX//UVQDrLVSLdJdbELt8XMQqEIN0VgOBpcPBXXN4GnvLfhWDT85iAbwrw /jd1pjF8OqPC/v+QPXbhBzvU0ABzH9x2AHdE238VhzZTB7/124UamxQTSG9oq4QWwUeYDcvKO+ep BgiTWtaeg4LS0ggjJfTrNiRN5QBj30cxK7QFC1oG/oAolFg9PKAgUtXylTH4bkL1gvT1sJjZEpdP 36C3MIzMUqkBNP3IHShPwIQwJjXUeMNjaUf5RA== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to f.root-servers.net for id/DS
	Received 402 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (402 octets) ;; HEADER SECTION ;; id = 12081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20210930050000 20210917040000 26838 . NBj8X7UY8D84bMk++S6ST+W+0fS+dOlzGTxRH1ydH0+RBRHGpepE8shskQGftBhDK6Zb3L5QrwjF BZZATKYSXpQ+rlLQbhsX//UVQDrLVSLdJdbELt8XMQqEIN0VgOBpcPBXXN4GnvLfhWDT85iAbwrw /jd1pjF8OqPC/v+QPXbhBzvU0ABzH9x2AHdE238VhzZTB7/124UamxQTSG9oq4QWwUeYDcvKO+ep BgiTWtaeg4LS0ggjJfTrNiRN5QBj30cxK7QFC1oG/oAolFg9PKAgUtXylTH4bkL1gvT1sJjZEpdP 36C3MIzMUqkBNP3IHShPwIQwJjXUeMNjaUf5RA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-1 has algorithm RSASHA256
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20210930050000 20210917040000 26838 . NBj8X7UY8D84bMk++S6ST+W+0fS+dOlzGTxRH1ydH0+RBRHGpepE8shskQGftBhDK6Zb3L5QrwjF BZZATKYSXpQ+rlLQbhsX//UVQDrLVSLdJdbELt8XMQqEIN0VgOBpcPBXXN4GnvLfhWDT85iAbwrw /jd1pjF8OqPC/v+QPXbhBzvU0ABzH9x2AHdE238VhzZTB7/124UamxQTSG9oq4QWwUeYDcvKO+ep BgiTWtaeg4LS0ggjJfTrNiRN5QBj30cxK7QFC1oG/oAolFg9PKAgUtXylTH4bkL1gvT1sJjZEpdP 36C3MIzMUqkBNP3IHShPwIQwJjXUeMNjaUf5RA== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=26887/SHA-1 is now in the chain-of-trust
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to ns4.apnic.net for id/DNSKEY
	Received 1163 bytes from 202.12.31.53
	;; Response received from 202.12.31.53 (1163 octets) ;; HEADER SECTION ;; id = 30628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211007023107 20210907014719 22449 id. JcPmIuU3UIb/H2jLWOm1/Xou3/NnGyvfHPnLXUu7Mg4fPdnjTmkQc0sHJU4bce398zgCLhUCgqwZ g6lzePNEksHklzMxazOMHyuWPOS+MZTMky5KOwgGcWq+xnZ8A0/CpDqL8Fh50xkKENPCHpwNSSbd 8p3/oOJVr9vTQpfWPU5ppu/IGn9GECQ2ivN3Lvr5glGJkwR4c8mtDXY4TFYcBOjZw6+enKoZQUCE aeEc8HRb2Ds6K0jlHqv1otvqx7W7G87AKzT10WXX8ckP/wuVt6O2AZ2e3DIU2rf/C9oRQbMypsbF 295c8fhjAN80ou9keIepebhfhSWoozqU25F79A== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211007023107 20210907014719 26887 id. FGzP4VjNqcavzcYWUoZGdiFMV2Eslpbt0sFjjc932kOVGjlKILW0wJjooLPYMa3u6PNNBNEQyqqb b/jcfKC3/9SeGmU9IRuUa8cRn79Yu0EBKNHOVffFevJwmfkLKl/K6BRYuRfgJfRoUoqCRLC1qBzq Rn20beXmwJxUx+eHrhyUpsrO9SYjT2BMXcaWQ/kyvAtU0pzvziiEoA07FtX6IZZfdg309A67MJHx gVu9sHEfMBMzPH79SJmRQifnMwhlLx4D+yggJGJ5l150rUe1dhkq/CUqDqAqFr0Mc/6MnI6GHQD7 nFethnGswtbIFEjeB9lJTz+a6Pl+/bUW8YjwrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211007023107 20210907014719 22449 id. JcPmIuU3UIb/H2jLWOm1/Xou3/NnGyvfHPnLXUu7Mg4fPdnjTmkQc0sHJU4bce398zgCLhUCgqwZ g6lzePNEksHklzMxazOMHyuWPOS+MZTMky5KOwgGcWq+xnZ8A0/CpDqL8Fh50xkKENPCHpwNSSbd 8p3/oOJVr9vTQpfWPU5ppu/IGn9GECQ2ivN3Lvr5glGJkwR4c8mtDXY4TFYcBOjZw6+enKoZQUCE aeEc8HRb2Ds6K0jlHqv1otvqx7W7G87AKzT10WXX8ckP/wuVt6O2AZ2e3DIU2rf/C9oRQbMypsbF 295c8fhjAN80ou9keIepebhfhSWoozqU25F79A== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211007023107 20210907014719 26887 id. FGzP4VjNqcavzcYWUoZGdiFMV2Eslpbt0sFjjc932kOVGjlKILW0wJjooLPYMa3u6PNNBNEQyqqb b/jcfKC3/9SeGmU9IRuUa8cRn79Yu0EBKNHOVffFevJwmfkLKl/K6BRYuRfgJfRoUoqCRLC1qBzq Rn20beXmwJxUx+eHrhyUpsrO9SYjT2BMXcaWQ/kyvAtU0pzvziiEoA07FtX6IZZfdg309A67MJHx gVu9sHEfMBMzPH79SJmRQifnMwhlLx4D+yggJGJ5l150rUe1dhkq/CUqDqAqFr0Mc/6MnI6GHQD7 nFethnGswtbIFEjeB9lJTz+a6Pl+/bUW8YjwrQ== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to c.dns.id for saberpungli.id/A
	Received 427 bytes from 103.19.178.178
	;; Response received from 103.19.178.178 (427 octets) ;; HEADER SECTION ;; id = 34962 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) saberpungli.id. 3600 IN NS nx1.polkam.go.id. saberpungli.id. 3600 IN NS nx2.polkam.go.id. saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210927203514 20210828194529 22449 id. uyG3EgraPhCmmPb4BF0FMehlbQNIMdons1RLnFN+lR9jGXAV50B7PF27xnC8IS6zRjdMfitInxAF rUwsk6QHnaYsnpYP+CAcmtRvUrV34mEOxwiAeD5DFI7Y7jc1NAVHtd/bA4o2xALP12/iLjmvzpJ8 R4YXf77FDyArSm/IhVNpBDY7RKECmY1GxG7M4KjGHnJ5+9mu+XU/pDr6Xxqls7UPH/8rJ1CD9t3T JKziG5tz0NqVaCtl6aq5bpkv8eydqtz925bNrQbKLwHd/jaebzn6dpXhFHcmW/p3WZ/m3y4lUNmS ADCrPDEjmtNoCDIHSOPxp7Bw6EgygT6fnwSiqA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.dns.id for saberpungli.id/DNSKEY
	Received 427 bytes from 45.126.57.57
	;; Response received from 45.126.57.57 (427 octets) ;; HEADER SECTION ;; id = 11465 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) saberpungli.id. 3600 IN NS nx1.polkam.go.id. saberpungli.id. 3600 IN NS nx2.polkam.go.id. saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210927203514 20210828194529 22449 id. uyG3EgraPhCmmPb4BF0FMehlbQNIMdons1RLnFN+lR9jGXAV50B7PF27xnC8IS6zRjdMfitInxAF rUwsk6QHnaYsnpYP+CAcmtRvUrV34mEOxwiAeD5DFI7Y7jc1NAVHtd/bA4o2xALP12/iLjmvzpJ8 R4YXf77FDyArSm/IhVNpBDY7RKECmY1GxG7M4KjGHnJ5+9mu+XU/pDr6Xxqls7UPH/8rJ1CD9t3T JKziG5tz0NqVaCtl6aq5bpkv8eydqtz925bNrQbKLwHd/jaebzn6dpXhFHcmW/p3WZ/m3y4lUNmS ADCrPDEjmtNoCDIHSOPxp7Bw6EgygT6fnwSiqA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone saberpungli.id

saberpungli.id

	Checking DS between id and saberpungli.id
	Query to b.dns.id for saberpungli.id/DS
	Received 381 bytes from 103.19.179.179
	;; Response received from 103.19.179.179 (381 octets) ;; HEADER SECTION ;; id = 35289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DS ;; ANSWER SECTION (2 records) saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 ) saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210927203514 20210828194529 22449 id. uyG3EgraPhCmmPb4BF0FMehlbQNIMdons1RLnFN+lR9jGXAV50B7PF27xnC8IS6zRjdMfitInxAF rUwsk6QHnaYsnpYP+CAcmtRvUrV34mEOxwiAeD5DFI7Y7jc1NAVHtd/bA4o2xALP12/iLjmvzpJ8 R4YXf77FDyArSm/IhVNpBDY7RKECmY1GxG7M4KjGHnJ5+9mu+XU/pDr6Xxqls7UPH/8rJ1CD9t3T JKziG5tz0NqVaCtl6aq5bpkv8eydqtz925bNrQbKLwHd/jaebzn6dpXhFHcmW/p3WZ/m3y4lUNmS ADCrPDEjmtNoCDIHSOPxp7Bw6EgygT6fnwSiqA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for saberpungli.id in the id zone
	DS=59722/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`saberpungli.id. 3600 IN RRSIG ( DS 8 2 3600 20210927203514 20210828194529 22449 id. uyG3EgraPhCmmPb4BF0FMehlbQNIMdons1RLnFN+lR9jGXAV50B7PF27xnC8IS6zRjdMfitInxAF rUwsk6QHnaYsnpYP+CAcmtRvUrV34mEOxwiAeD5DFI7Y7jc1NAVHtd/bA4o2xALP12/iLjmvzpJ8 R4YXf77FDyArSm/IhVNpBDY7RKECmY1GxG7M4KjGHnJ5+9mu+XU/pDr6Xxqls7UPH/8rJ1CD9t3T JKziG5tz0NqVaCtl6aq5bpkv8eydqtz925bNrQbKLwHd/jaebzn6dpXhFHcmW/p3WZ/m3y4lUNmS ADCrPDEjmtNoCDIHSOPxp7Bw6EgygT6fnwSiqA== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=59722/SHA-256 is now in the chain-of-trust
	`saberpungli.id. 3600 IN DS ( 59722 13 2 e92d4f06473c2fb55dec07976121413061dbfb419644050d5bc3b73c6fa228b5 )`
	Query to nx1.polkam.go.id for saberpungli.id/DNSKEY
	Received 423 bytes from 103.226.218.1
	;; Response received from 103.226.218.1 (423 octets) ;; HEADER SECTION ;; id = 49338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN DNSKEY ;; ANSWER SECTION (4 records) saberpungli.id. 86400 IN DNSKEY ( 256 3 13 dfNb2ZIObg3eeqjPtr+CaKWwa1z6/IfNnt/XqBSM48mgJ6UcaWHFuXIBSclu3E2e5CFATcJa+6X8 XuaxKvoulg== ) ; Key ID = 42196 saberpungli.id. 86400 IN DNSKEY ( 257 3 13 zLlWfv9nLNoDeq0N6TgZk5WNtnPOoQ9xejQyB7jedKPv4AveqBMKLvP4QANGKmS1SyD3QF896doR 0tTKIMq+3w== ) ; Key ID = 59722 saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. bkS0Y1Wcw96fLBA98px/YVq/IFEYQ1LkP/8jkCIdalFWlaTWgK5L1BR/UGFb5VcfMfG5wp73naVw mJVzzTE1ug== ) saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210825023138 20210726023138 59722 saberpungli.id. zABm0zANl77Ce8kGppTgnspoKJUGwFOtrBE1A7JZ3kWTybECyIqDR17asHf13NycR9MKMEs47mdJ Zyqg4QkU9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for saberpungli.id
	`saberpungli.id. 86400 IN DNSKEY ( 256 3 13 dfNb2ZIObg3eeqjPtr+CaKWwa1z6/IfNnt/XqBSM48mgJ6UcaWHFuXIBSclu3E2e5CFATcJa+6X8 XuaxKvoulg== ) ; Key ID = 42196`
	`saberpungli.id. 86400 IN DNSKEY ( 257 3 13 zLlWfv9nLNoDeq0N6TgZk5WNtnPOoQ9xejQyB7jedKPv4AveqBMKLvP4QANGKmS1SyD3QF896doR 0tTKIMq+3w== ) ; Key ID = 59722`
	DNSKEY=59722/SEP is now in the chain-of-trust
	DS=59722/SHA-256 verifies DNSKEY=59722/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. bkS0Y1Wcw96fLBA98px/YVq/IFEYQ1LkP/8jkCIdalFWlaTWgK5L1BR/UGFb5VcfMfG5wp73naVw mJVzzTE1ug== )`
	`saberpungli.id. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210825023138 20210726023138 59722 saberpungli.id. zABm0zANl77Ce8kGppTgnspoKJUGwFOtrBE1A7JZ3kWTybECyIqDR17asHf13NycR9MKMEs47mdJ Zyqg4QkU9Q== )`
	RRSIG=42196 is expired
	RRSIG=59722 is expired
	None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to nx1.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.1
	;; Response received from 103.226.218.1 (169 octets) ;; HEADER SECTION ;; id = 26771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nx1.polkam.go.id is authoritative for saberpungli.id
	Found RRSIG signed by saberpungli.id zone
	Query to nx2.polkam.go.id for saberpungli.id/SOA
	Received 214 bytes from 103.226.218.2
	;; Response received from 103.226.218.2 (214 octets) ;; HEADER SECTION ;; id = 62748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN SOA ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN SOA ( nx1.polkam.go.id. hostmaster.polkam.go.id. 2018101417 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) saberpungli.id. 86400 IN RRSIG ( SOA 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. Qv8eAn7+8UA2Qu6rGbP5GOMnC06NuGkMSwJL5EfgrE7hhP8R6GIfUSyip7SN82lvnCRRKDdeb5S6 zcOqkLp6sg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nx1.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.1
	;; Response received from 103.226.218.1 (169 octets) ;; HEADER SECTION ;; id = 21094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saberpungli.id A RR has value 103.226.218.7
	Found 1 RRSIGs over A RRset
	`saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== )`
	RRSIG=42196 is expired
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

saberpungli.id

	Query to nx2.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.2
	;; Response received from 103.226.218.2 (169 octets) ;; HEADER SECTION ;; id = 11855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nx2.polkam.go.id is authoritative for saberpungli.id
	Found RRSIG signed by saberpungli.id zone
	Query to nx2.polkam.go.id for saberpungli.id/A
	Received 169 bytes from 103.226.218.2
	;; Response received from 103.226.218.2 (169 octets) ;; HEADER SECTION ;; id = 19014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saberpungli.id. IN A ;; ANSWER SECTION (2 records) saberpungli.id. 86400 IN A 103.226.218.7 saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saberpungli.id A RR has value 103.226.218.7
	Found 1 RRSIGs over A RRset
	`saberpungli.id. 86400 IN RRSIG ( A 13 2 86400 20210825023138 20210726023138 42196 saberpungli.id. xMGNQr+DPpZDU6j4H/3ouzongWMbmfyh5hpcTrn6oiSI59EZFkK+t1HxUskeoYPtNtXxK733PzK4 Ti/F9bBOgg== )`
	RRSIG=42196 is expired
	None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test saberpungli.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: