DNSSEC Analyzer - sapphire.cfts.co

Domain Name:

Time: 2021-08-06 03:55:16 UTC, NTP stratum 16

Analyzing DNSSEC problems for sapphire.cfts.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 55280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to i.root-servers.net for sapphire.cfts.co/A
	Received 798 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (798 octets) ;; HEADER SECTION ;; id = 2385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns6.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . aK4ta8hRvPLgs/jcIurhVZPXJ1TNSLroRdWLh7SQCOq+Fmq4RZ3BlCaKf1IBjh+FLfq9VxrL5n8n 44Ey1XbFwYicAdXehrDoKV70vkoJ63CUhyDg6Y190DmiaY+4B7XYMvlfQ89CM52kBrJOb/pTh2P6 /ExQxvCDs6iRXq9Gx1G9dMCx369hRYfe+X3QhkhRAnoD3e0se3GMVqCSRA1DcSobtD7oPZ3iM66P kls3taHUOoQgxpGKSygWOloqCOxFbs/A7R4+1SdFqMO4GQPOa9PSdqz7fdMW+5r8CbWCSRgwnuG+ zi/+OpHHkOoo9i309fG7k5nTGv2ECJqYzBVkaQ== ) ;; ADDITIONAL SECTION (13 records) ns6.cctld.co. 172800 IN A 156.154.105.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns4.cctld.co. 172800 IN A 156.154.103.25 ns3.cctld.co. 172800 IN A 37.209.196.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns1.cctld.co. 172800 IN A 37.209.192.14 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for co/DNSKEY
	Received 780 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (780 octets) ;; HEADER SECTION ;; id = 9873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . aK4ta8hRvPLgs/jcIurhVZPXJ1TNSLroRdWLh7SQCOq+Fmq4RZ3BlCaKf1IBjh+FLfq9VxrL5n8n 44Ey1XbFwYicAdXehrDoKV70vkoJ63CUhyDg6Y190DmiaY+4B7XYMvlfQ89CM52kBrJOb/pTh2P6 /ExQxvCDs6iRXq9Gx1G9dMCx369hRYfe+X3QhkhRAnoD3e0se3GMVqCSRA1DcSobtD7oPZ3iM66P kls3taHUOoQgxpGKSygWOloqCOxFbs/A7R4+1SdFqMO4GQPOa9PSdqz7fdMW+5r8CbWCSRgwnuG+ zi/+OpHHkOoo9i309fG7k5nTGv2ECJqYzBVkaQ== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone co

	Checking DS between . and co
	Query to m.root-servers.net for co/DS
	Received 402 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (402 octets) ;; HEADER SECTION ;; id = 13156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (3 records) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . aK4ta8hRvPLgs/jcIurhVZPXJ1TNSLroRdWLh7SQCOq+Fmq4RZ3BlCaKf1IBjh+FLfq9VxrL5n8n 44Ey1XbFwYicAdXehrDoKV70vkoJ63CUhyDg6Y190DmiaY+4B7XYMvlfQ89CM52kBrJOb/pTh2P6 /ExQxvCDs6iRXq9Gx1G9dMCx369hRYfe+X3QhkhRAnoD3e0se3GMVqCSRA1DcSobtD7oPZ3iM66P kls3taHUOoQgxpGKSygWOloqCOxFbs/A7R4+1SdFqMO4GQPOa9PSdqz7fdMW+5r8CbWCSRgwnuG+ zi/+OpHHkOoo9i309fG7k5nTGv2ECJqYzBVkaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for co in the . zone
	DS=43834/SHA-1 has algorithm RSASHA256
	DS=43834/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . aK4ta8hRvPLgs/jcIurhVZPXJ1TNSLroRdWLh7SQCOq+Fmq4RZ3BlCaKf1IBjh+FLfq9VxrL5n8n 44Ey1XbFwYicAdXehrDoKV70vkoJ63CUhyDg6Y190DmiaY+4B7XYMvlfQ89CM52kBrJOb/pTh2P6 /ExQxvCDs6iRXq9Gx1G9dMCx369hRYfe+X3QhkhRAnoD3e0se3GMVqCSRA1DcSobtD7oPZ3iM66P kls3taHUOoQgxpGKSygWOloqCOxFbs/A7R4+1SdFqMO4GQPOa9PSdqz7fdMW+5r8CbWCSRgwnuG+ zi/+OpHHkOoo9i309fG7k5nTGv2ECJqYzBVkaQ== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=43834/SHA-1 is now in the chain-of-trust
	`co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb`
	`co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e )`
	Query to ns6.cctld.co for co/DNSKEY
	Received 971 bytes from 156.154.105.25
	;; Response received from 156.154.105.25 (971 octets) ;; HEADER SECTION ;; id = 58543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (4 records) co. 900 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278 co. 900 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834 co. 900 IN RRSIG ( DNSKEY 8 1 900 20210902095740 20210803091424 43834 co. iBOViGFxwi8E6Eus1EL1D+v+yQvf66mO2QuH7dB7v3u5uVoyNi/9vndHS/j330spueQMlbur6/re TP+vFYxP4useWz4vRg4BC6IE6Ki3YwF4hwEsYeJPVBGcEKGj2ChBLMvlEWPdtDHiHP9rZ0ZtWZnS cTxadO3EAp6Kz9QyZVvuPzep8N2Kk7BKl6Hi4xF3ofa6dFkqwM9YSqfV4e66TL6y9Qrdt9eoCqOj ml4Ri5jv5OsPBPvAKQMbmGK8PPQQgIqnr0hL3aNOc9N8n2fkL7ZdGDDapZ4WPo38XaYGyFINED7/ 6kA0H5cg/ft3gAVBaAVAXo1JSQ0g7YBwvTPsoQ== ) co. 900 IN RRSIG ( DNSKEY 8 1 900 20210902095740 20210803091424 64278 co. n5KvB8+WHrwvBNy++RUDjy7Hzhopq/+W84zRlGTtfJILBgL/wbOLca/FYc6BH4lRrUH/OmUksVoo 1EeOjInstjIEcHqYfmxPDdXhtKUOHU15hn8GW2UKD8MO+yWH+Ru7tco4qJ5st1z8phCC8AjRHYOu yI6dyX6nxqsdydzPLtzasDmCj72ede5RNvS8o/3a+5Wy6cLyWf7TqhLO6waBhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for co
	`co. 900 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278`
	`co. 900 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834`
	DNSKEY=43834/SEP is now in the chain-of-trust
	DS=43834/SHA-1 verifies DNSKEY=43834/SEP
	DS=43834/SHA-256 verifies DNSKEY=43834/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 900 IN RRSIG ( DNSKEY 8 1 900 20210902095740 20210803091424 43834 co. iBOViGFxwi8E6Eus1EL1D+v+yQvf66mO2QuH7dB7v3u5uVoyNi/9vndHS/j330spueQMlbur6/re TP+vFYxP4useWz4vRg4BC6IE6Ki3YwF4hwEsYeJPVBGcEKGj2ChBLMvlEWPdtDHiHP9rZ0ZtWZnS cTxadO3EAp6Kz9QyZVvuPzep8N2Kk7BKl6Hi4xF3ofa6dFkqwM9YSqfV4e66TL6y9Qrdt9eoCqOj ml4Ri5jv5OsPBPvAKQMbmGK8PPQQgIqnr0hL3aNOc9N8n2fkL7ZdGDDapZ4WPo38XaYGyFINED7/ 6kA0H5cg/ft3gAVBaAVAXo1JSQ0g7YBwvTPsoQ== )`
	`co. 900 IN RRSIG ( DNSKEY 8 1 900 20210902095740 20210803091424 64278 co. n5KvB8+WHrwvBNy++RUDjy7Hzhopq/+W84zRlGTtfJILBgL/wbOLca/FYc6BH4lRrUH/OmUksVoo 1EeOjInstjIEcHqYfmxPDdXhtKUOHU15hn8GW2UKD8MO+yWH+Ru7tco4qJ5st1z8phCC8AjRHYOu yI6dyX6nxqsdydzPLtzasDmCj72ede5RNvS8o/3a+5Wy6cLyWf7TqhLO6waBhQ== )`
	RRSIG=43834 and DNSKEY=43834/SEP verifies the DNSKEY RRset
	RRSIG=64278 and DNSKEY=64278 verifies the DNSKEY RRset
	DNSKEY=64278 is now in the chain-of-trust
	Query to ns6.cctld.co for sapphire.cfts.co/A
	Received 489 bytes from 156.154.105.25
	;; Response received from 156.154.105.25 (489 octets) ;; HEADER SECTION ;; id = 21564 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210902083842 20210803075340 64278 co. Bc+FLPCFCIQ/AZ9IkYxvxbnyJCmwzwiUbuozgA5w/WH8ULAU+w8zO3+gj9hiSD5ckC5QVOWLsbkl MTWMb6yfB41y1peN+DYhV6hh6y16pLBa8bcoFZskqt8jQRpo98zjoXc0MhOkDOcUoZxUfas7ybTj eLkmjLnQAH1+oG6XnKCMYo6uCffQ286/mav2tDBzEX0opUJNlByROjZWg6jKKg== ) ;; ADDITIONAL SECTION (4 records) ns1.cfts.co. 3600 IN A 109.169.37.60 ns2.cfts.co. 3600 IN A 146.185.146.236 ns3.cfts.co. 3600 IN A 192.241.226.147 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.cctld.co for cfts.co/DNSKEY
	Received 480 bytes from 156.154.103.25
	;; Response received from 156.154.103.25 (480 octets) ;; HEADER SECTION ;; id = 63928 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210902083842 20210803075340 64278 co. Bc+FLPCFCIQ/AZ9IkYxvxbnyJCmwzwiUbuozgA5w/WH8ULAU+w8zO3+gj9hiSD5ckC5QVOWLsbkl MTWMb6yfB41y1peN+DYhV6hh6y16pLBa8bcoFZskqt8jQRpo98zjoXc0MhOkDOcUoZxUfas7ybTj eLkmjLnQAH1+oG6XnKCMYo6uCffQ286/mav2tDBzEX0opUJNlByROjZWg6jKKg== ) ;; ADDITIONAL SECTION (4 records) ns1.cfts.co. 3600 IN A 109.169.37.60 ns2.cfts.co. 3600 IN A 146.185.146.236 ns3.cfts.co. 3600 IN A 192.241.226.147 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cfts.co

cfts.co

	Checking DS between co and cfts.co
	Query to ns6.cctld.co for cfts.co/DS
	Received 378 bytes from 156.154.105.25
	;; Response received from 156.154.105.25 (378 octets) ;; HEADER SECTION ;; id = 63110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DS ;; ANSWER SECTION (4 records) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210902083842 20210803075340 64278 co. Bc+FLPCFCIQ/AZ9IkYxvxbnyJCmwzwiUbuozgA5w/WH8ULAU+w8zO3+gj9hiSD5ckC5QVOWLsbkl MTWMb6yfB41y1peN+DYhV6hh6y16pLBa8bcoFZskqt8jQRpo98zjoXc0MhOkDOcUoZxUfas7ybTj eLkmjLnQAH1+oG6XnKCMYo6uCffQ286/mav2tDBzEX0opUJNlByROjZWg6jKKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for cfts.co in the co zone
	DS=17491/SHA-384 has algorithm RSASHA256
	DS=17491/SHA-256 has algorithm RSASHA256
	DS=17491/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210902083842 20210803075340 64278 co. Bc+FLPCFCIQ/AZ9IkYxvxbnyJCmwzwiUbuozgA5w/WH8ULAU+w8zO3+gj9hiSD5ckC5QVOWLsbkl MTWMb6yfB41y1peN+DYhV6hh6y16pLBa8bcoFZskqt8jQRpo98zjoXc0MhOkDOcUoZxUfas7ybTj eLkmjLnQAH1+oG6XnKCMYo6uCffQ286/mav2tDBzEX0opUJNlByROjZWg6jKKg== )`
	RRSIG=64278 and DNSKEY=64278 verifies the DS RRset
	DS=17491/SHA-384 is now in the chain-of-trust
	`cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 )`
	`cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb )`
	`cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e`
	Query to ns1.cfts.co for cfts.co/DNSKEY
	Received 755 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (755 octets) ;; HEADER SECTION ;; id = 4925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (3 records) cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210819000000 20210729000000 17491 cfts.co. SY+PTqP2eRqQ/qv+HdbwMgBDJvTnyXebH/HNL+5hQhNsHo+tYO6t9P71znDOqzXHs11+mukMbzOD +aYf3PyhY1SiulthAcJG8J0XTYHgKTkca4nvw5sFpjBu7w9TYeJqHRBh4C/RIFsk19detBY5sthN Tws43znMVyO4/JfWI4gOI5obOpGHDIZ+ZKUFKo1q7MtEEfivS30HmthWVhdlIUe4utyz3eZBFqdW CpYwjS1V7pvgJRWEjVvs31HjI/ScQmUJgR67fdT2lPhdh9LJAq6Xg4dUDI3xDGfDm4E9isU559Ic 5AWTtx6bJgE1Bfz/J7wkL4VolqdO/Eyaj4M7SA== ) cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491 cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cfts.co
	`cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491`
	`cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084`
	DNSKEY=17491/SEP is now in the chain-of-trust
	DS=17491/SHA-384 verifies DNSKEY=17491/SEP
	DS=17491/SHA-256 verifies DNSKEY=17491/SEP
	DS=17491/SHA-1 verifies DNSKEY=17491/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210819000000 20210729000000 17491 cfts.co. SY+PTqP2eRqQ/qv+HdbwMgBDJvTnyXebH/HNL+5hQhNsHo+tYO6t9P71znDOqzXHs11+mukMbzOD +aYf3PyhY1SiulthAcJG8J0XTYHgKTkca4nvw5sFpjBu7w9TYeJqHRBh4C/RIFsk19detBY5sthN Tws43znMVyO4/JfWI4gOI5obOpGHDIZ+ZKUFKo1q7MtEEfivS30HmthWVhdlIUe4utyz3eZBFqdW CpYwjS1V7pvgJRWEjVvs31HjI/ScQmUJgR67fdT2lPhdh9LJAq6Xg4dUDI3xDGfDm4E9isU559Ic 5AWTtx6bJgE1Bfz/J7wkL4VolqdO/Eyaj4M7SA== )`
	RRSIG=17491 and DNSKEY=17491/SEP verifies the DNSKEY RRset
	DNSKEY=48084 is now in the chain-of-trust
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (228 octets) ;; HEADER SECTION ;; id = 25159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (514 octets) ;; HEADER SECTION ;; id = 16088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021072502 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210819000000 20210729000000 48084 cfts.co. m6nlMP8HVDXqxrk1VbkkO1ZnVFxoz9ZE3Qq2r6FjPU/y9LSqCBNB1fUD09K4kB6nlC22phA3gWvQ zDLt6531u3547xwXxvtuONZCzzjp2Vi15HssdmBKL+gU3G4jBLBZWtltM43g7L+dvKarWCqg97eL /xjOvdBH5Qa3qhMDFyA= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210819000000 20210729000000 48084 cfts.co. hmeD1TiRqsiugy8YoB7wqcPnfeDBXuXnujupPSzm+jegHvi1Raw2u/2AaNDE2UmVC71b9KG92qvl vjI3MPRwoFWd6KMt+BtW2kJIL8nqQpEc1ShfZh5mmeDvCKLiFDli0JNPvmMx6qOURR4iNC0K086l O61X7NoYqfqguDZ2yys= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns2.cfts.co for cfts.co/SOA
	Received 251 bytes from 146.185.146.236
	;; Response received from 146.185.146.236 (251 octets) ;; HEADER SECTION ;; id = 3006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210819000000 20210729000000 48084 cfts.co. m6nlMP8HVDXqxrk1VbkkO1ZnVFxoz9ZE3Qq2r6FjPU/y9LSqCBNB1fUD09K4kB6nlC22phA3gWvQ zDLt6531u3547xwXxvtuONZCzzjp2Vi15HssdmBKL+gU3G4jBLBZWtltM43g7L+dvKarWCqg97eL /xjOvdBH5Qa3qhMDFyA= ) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021072502 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.cfts.co for cfts.co/SOA
	Received 251 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (251 octets) ;; HEADER SECTION ;; id = 34133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210819000000 20210729000000 48084 cfts.co. m6nlMP8HVDXqxrk1VbkkO1ZnVFxoz9ZE3Qq2r6FjPU/y9LSqCBNB1fUD09K4kB6nlC22phA3gWvQ zDLt6531u3547xwXxvtuONZCzzjp2Vi15HssdmBKL+gU3G4jBLBZWtltM43g7L+dvKarWCqg97eL /xjOvdBH5Qa3qhMDFyA= ) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021072502 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (228 octets) ;; HEADER SECTION ;; id = 9953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

cfts.co

	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 146.185.146.236
	;; Response received from 146.185.146.236 (228 octets) ;; HEADER SECTION ;; id = 64573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (514 octets) ;; HEADER SECTION ;; id = 23651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021072502 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210819000000 20210729000000 48084 cfts.co. m6nlMP8HVDXqxrk1VbkkO1ZnVFxoz9ZE3Qq2r6FjPU/y9LSqCBNB1fUD09K4kB6nlC22phA3gWvQ zDLt6531u3547xwXxvtuONZCzzjp2Vi15HssdmBKL+gU3G4jBLBZWtltM43g7L+dvKarWCqg97eL /xjOvdBH5Qa3qhMDFyA= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210819000000 20210729000000 48084 cfts.co. hmeD1TiRqsiugy8YoB7wqcPnfeDBXuXnujupPSzm+jegHvi1Raw2u/2AaNDE2UmVC71b9KG92qvl vjI3MPRwoFWd6KMt+BtW2kJIL8nqQpEc1ShfZh5mmeDvCKLiFDli0JNPvmMx6qOURR4iNC0K086l O61X7NoYqfqguDZ2yys= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 146.185.146.236
	;; Response received from 146.185.146.236 (228 octets) ;; HEADER SECTION ;; id = 21513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

cfts.co

	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (228 octets) ;; HEADER SECTION ;; id = 64341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) sapphire.cfts.co. 14400 IN A 109.169.37.60 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (514 octets) ;; HEADER SECTION ;; id = 38350 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021072502 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210819000000 20210729000000 48084 cfts.co. m6nlMP8HVDXqxrk1VbkkO1ZnVFxoz9ZE3Qq2r6FjPU/y9LSqCBNB1fUD09K4kB6nlC22phA3gWvQ zDLt6531u3547xwXxvtuONZCzzjp2Vi15HssdmBKL+gU3G4jBLBZWtltM43g7L+dvKarWCqg97eL /xjOvdBH5Qa3qhMDFyA= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210819000000 20210729000000 48084 cfts.co. hmeD1TiRqsiugy8YoB7wqcPnfeDBXuXnujupPSzm+jegHvi1Raw2u/2AaNDE2UmVC71b9KG92qvl vjI3MPRwoFWd6KMt+BtW2kJIL8nqQpEc1ShfZh5mmeDvCKLiFDli0JNPvmMx6qOURR4iNC0K086l O61X7NoYqfqguDZ2yys= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (228 octets) ;; HEADER SECTION ;; id = 49294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= ) sapphire.cfts.co. 14400 IN A 109.169.37.60 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210819000000 20210729000000 48084 cfts.co. TJFX+AV2svsfnvFpKa8LO1CYFtcx7QDgVeoc3woHttyyo9HCc/zfcW8VINYfWYvEJoGbKt15D1OP aIb+bxTmDYy+XueFmMDadkz0oSYcQgTG452mg370jqJC5I9e+2WkINRDC9oKu+/cnB5wJvRNa+JM idS+6qYfMOtYp7XUYZE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sapphire.cfts.co at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: