DNSSEC Analyzer - sapphire.cfts.co

Domain Name:

Time: 2021-04-21 05:20:18 UTC, NTP stratum 4

Analyzing DNSSEC problems for sapphire.cfts.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 30446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to i.root-servers.net for sapphire.cfts.co/A
	Received 798 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (798 bytes) ;; HEADER SECTION ;; id = 52865 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . eE2GYzetgmgIOXuSLoYjhw5DAKjL26+0FS+vUQU8EPwr/gN/7zt03LPvP6b8BCyCLYBqE0s7UGxz eEaZpWN82YWEBZeB6y36OSilqmSVLSYq6q2LThxJo6n6+GBecjR4hyLmoU5f5G9/rpanFeVCI40c QHTKJnBEzQ2whBH5JsW6r1bxfgqpGaRuFhuOdYX4JW14uQQP3GruJ/tfK8UyhKfpSWj8Siizrq8a GvEgcCtlfCEe99tEhUN9lsSwAlWv0w+pA1UQ7mCnut8ghXPiRW6ShXZRiq/NCewzxWNHllZmKC2x Hs+RQzYE2eWNzou/8sVjtjlRjkl9TUOqJydL4Q== ) ;; ADDITIONAL SECTION (13 records) ns6.cctld.co. 172800 IN A 156.154.105.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns4.cctld.co. 172800 IN A 156.154.103.25 ns3.cctld.co. 172800 IN A 37.209.196.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns1.cctld.co. 172800 IN A 37.209.192.14 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for co/DNSKEY
	Received 780 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (780 bytes) ;; HEADER SECTION ;; id = 4876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . eE2GYzetgmgIOXuSLoYjhw5DAKjL26+0FS+vUQU8EPwr/gN/7zt03LPvP6b8BCyCLYBqE0s7UGxz eEaZpWN82YWEBZeB6y36OSilqmSVLSYq6q2LThxJo6n6+GBecjR4hyLmoU5f5G9/rpanFeVCI40c QHTKJnBEzQ2whBH5JsW6r1bxfgqpGaRuFhuOdYX4JW14uQQP3GruJ/tfK8UyhKfpSWj8Siizrq8a GvEgcCtlfCEe99tEhUN9lsSwAlWv0w+pA1UQ7mCnut8ghXPiRW6ShXZRiq/NCewzxWNHllZmKC2x Hs+RQzYE2eWNzou/8sVjtjlRjkl9TUOqJydL4Q== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone co

	Checking DS between . and co
	Query to j.root-servers.net for co/DS
	Received 402 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (402 bytes) ;; HEADER SECTION ;; id = 3078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (3 records) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . eE2GYzetgmgIOXuSLoYjhw5DAKjL26+0FS+vUQU8EPwr/gN/7zt03LPvP6b8BCyCLYBqE0s7UGxz eEaZpWN82YWEBZeB6y36OSilqmSVLSYq6q2LThxJo6n6+GBecjR4hyLmoU5f5G9/rpanFeVCI40c QHTKJnBEzQ2whBH5JsW6r1bxfgqpGaRuFhuOdYX4JW14uQQP3GruJ/tfK8UyhKfpSWj8Siizrq8a GvEgcCtlfCEe99tEhUN9lsSwAlWv0w+pA1UQ7mCnut8ghXPiRW6ShXZRiq/NCewzxWNHllZmKC2x Hs+RQzYE2eWNzou/8sVjtjlRjkl9TUOqJydL4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for co in the . zone
	DS=43834/SHA-1 has algorithm RSASHA256
	DS=43834/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . eE2GYzetgmgIOXuSLoYjhw5DAKjL26+0FS+vUQU8EPwr/gN/7zt03LPvP6b8BCyCLYBqE0s7UGxz eEaZpWN82YWEBZeB6y36OSilqmSVLSYq6q2LThxJo6n6+GBecjR4hyLmoU5f5G9/rpanFeVCI40c QHTKJnBEzQ2whBH5JsW6r1bxfgqpGaRuFhuOdYX4JW14uQQP3GruJ/tfK8UyhKfpSWj8Siizrq8a GvEgcCtlfCEe99tEhUN9lsSwAlWv0w+pA1UQ7mCnut8ghXPiRW6ShXZRiq/NCewzxWNHllZmKC2x Hs+RQzYE2eWNzou/8sVjtjlRjkl9TUOqJydL4Q== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=43834/SHA-1 is now in the chain-of-trust
	`co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb`
	`co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e )`
	Query to ns5.cctld.co for co/DNSKEY
	Received 971 bytes from 156.154.104.25
	;; Answer received from 156.154.104.25 (971 bytes) ;; HEADER SECTION ;; id = 27693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (4 records) co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278 co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834 co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 43834 co. bcHwaWQ8GW9AgqLfW7+YgZkfFjehN4igVs1yFxj+s6CSGfxDN6H2pYsjJqcI76NtlaLVjJBKazB2 05b8llZnPdo/BTbWMtSrTh/G6CxNhYm0Fm9v3vyFUbYjKy8Sz9L7k1BxqdnlrPRBuRzIn55EQ/aD WNxpsPsMIu22fHTahtjtCAEOrSHe91/2ZGvTZFRLU14yyZfpLWrcaYYoN54UYtdW5L5VWAmnSyK9 KYm1KIZtODkw0z4pzZrtTUuvh66v0ULVu8fGTXnb2N279UZmPSwslCKnGqeBHs1M5xuFC9WgO2Fs zIKv6lHB6vYIknX7KBaRgRTuCsP6gehAtX3EHg== ) co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 64278 co. qvF/mIM/RXHmC93lJsmrWaxHhVOfu9wKVOdRaWp95UQYEaleRsIeeaG0V0r9pLcveXwDAe/QeV+n CTPDeyi1cAY4KTpAFw8AhBx9i5K1XJrvboX/9s0SZshPhuLC6WEfUpqfCAOgiWez1rP1UbRV2c3f WOX/AW8uPm8uZwGDKyVWCF8dyvCYyjYBbpxB+Sp1tKHydo4+2sKPeOf88r6Ujw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for co
	`co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278`
	`co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834`
	DNSKEY=43834/SEP is now in the chain-of-trust
	DS=43834/SHA-1 verifies DNSKEY=43834/SEP
	DS=43834/SHA-256 verifies DNSKEY=43834/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 43834 co. bcHwaWQ8GW9AgqLfW7+YgZkfFjehN4igVs1yFxj+s6CSGfxDN6H2pYsjJqcI76NtlaLVjJBKazB2 05b8llZnPdo/BTbWMtSrTh/G6CxNhYm0Fm9v3vyFUbYjKy8Sz9L7k1BxqdnlrPRBuRzIn55EQ/aD WNxpsPsMIu22fHTahtjtCAEOrSHe91/2ZGvTZFRLU14yyZfpLWrcaYYoN54UYtdW5L5VWAmnSyK9 KYm1KIZtODkw0z4pzZrtTUuvh66v0ULVu8fGTXnb2N279UZmPSwslCKnGqeBHs1M5xuFC9WgO2Fs zIKv6lHB6vYIknX7KBaRgRTuCsP6gehAtX3EHg== )`
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 64278 co. qvF/mIM/RXHmC93lJsmrWaxHhVOfu9wKVOdRaWp95UQYEaleRsIeeaG0V0r9pLcveXwDAe/QeV+n CTPDeyi1cAY4KTpAFw8AhBx9i5K1XJrvboX/9s0SZshPhuLC6WEfUpqfCAOgiWez1rP1UbRV2c3f WOX/AW8uPm8uZwGDKyVWCF8dyvCYyjYBbpxB+Sp1tKHydo4+2sKPeOf88r6Ujw== )`
	RRSIG=43834 and DNSKEY=43834/SEP verifies the DNSKEY RRset
	RRSIG=64278 and DNSKEY=64278 verifies the DNSKEY RRset
	DNSKEY=64278 is now in the chain-of-trust
	Query to ns1.cctld.co for sapphire.cfts.co/A
	Received 489 bytes from 37.209.192.14
	;; Answer received from 37.209.192.14 (489 bytes) ;; HEADER SECTION ;; id = 36243 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210519081454 20210419075408 64278 co. cofCoicykcXbsbvaN9NmYF485TUcKz/RcMsw+A/lN4LSSkybe7KoJrPeUqjoC3EOGsFUIqvMd/5u Mtgd77zeXjDaudz90HPwuVcqSkhLf9sW6EHa4iP/BAAt3h58MSBTrABAcqhPHMMSn+qY2uCpdzjr BMgFC+ZHJzuL5/J61zNqe5RK6UE++3c/jaEuL7twfkVuVt5ubC5GewVOiiHxrg== ) ;; ADDITIONAL SECTION (4 records) ns3.cfts.co. 3600 IN A 192.241.226.147 ns2.cfts.co. 3600 IN A 146.185.146.236 ns1.cfts.co. 3600 IN A 109.169.37.60 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.cctld.co for cfts.co/DNSKEY
	Received 480 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (480 bytes) ;; HEADER SECTION ;; id = 51452 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210519081454 20210419075408 64278 co. cofCoicykcXbsbvaN9NmYF485TUcKz/RcMsw+A/lN4LSSkybe7KoJrPeUqjoC3EOGsFUIqvMd/5u Mtgd77zeXjDaudz90HPwuVcqSkhLf9sW6EHa4iP/BAAt3h58MSBTrABAcqhPHMMSn+qY2uCpdzjr BMgFC+ZHJzuL5/J61zNqe5RK6UE++3c/jaEuL7twfkVuVt5ubC5GewVOiiHxrg== ) ;; ADDITIONAL SECTION (4 records) ns1.cfts.co. 3600 IN A 109.169.37.60 ns2.cfts.co. 3600 IN A 146.185.146.236 ns3.cfts.co. 3600 IN A 192.241.226.147 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cfts.co

cfts.co

	Checking DS between co and cfts.co
	Query to ns1.cctld.co for cfts.co/DS
	Received 378 bytes from 37.209.192.14
	;; Answer received from 37.209.192.14 (378 bytes) ;; HEADER SECTION ;; id = 19810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DS ;; ANSWER SECTION (4 records) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210519081454 20210419075408 64278 co. cofCoicykcXbsbvaN9NmYF485TUcKz/RcMsw+A/lN4LSSkybe7KoJrPeUqjoC3EOGsFUIqvMd/5u Mtgd77zeXjDaudz90HPwuVcqSkhLf9sW6EHa4iP/BAAt3h58MSBTrABAcqhPHMMSn+qY2uCpdzjr BMgFC+ZHJzuL5/J61zNqe5RK6UE++3c/jaEuL7twfkVuVt5ubC5GewVOiiHxrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for cfts.co in the co zone
	DS=17491/SHA-384 has algorithm RSASHA256
	DS=17491/SHA-1 has algorithm RSASHA256
	DS=17491/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20210519081454 20210419075408 64278 co. cofCoicykcXbsbvaN9NmYF485TUcKz/RcMsw+A/lN4LSSkybe7KoJrPeUqjoC3EOGsFUIqvMd/5u Mtgd77zeXjDaudz90HPwuVcqSkhLf9sW6EHa4iP/BAAt3h58MSBTrABAcqhPHMMSn+qY2uCpdzjr BMgFC+ZHJzuL5/J61zNqe5RK6UE++3c/jaEuL7twfkVuVt5ubC5GewVOiiHxrg== )`
	RRSIG=64278 and DNSKEY=64278 verifies the DS RRset
	DS=17491/SHA-384 is now in the chain-of-trust
	`cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 )`
	`cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e`
	`cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb )`
	Query to ns2.cfts.co for cfts.co/DNSKEY
	Received 755 bytes from 146.185.146.236
	;; Answer received from 146.185.146.236 (755 bytes) ;; HEADER SECTION ;; id = 30462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (3 records) cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210429000000 20210408000000 17491 cfts.co. Yfs6TgBMxGujGbzia5CRU8Wc+mmWkvjIUwmM+gKYyxUMqELiv5ArjkSNpNewnnNngddK0o9+1QfJ LtqzyBnagjMiNwegPrd+BF5BCEHOG5V6+b6ZPnuP0DEmoWHIgfeywMjft/pm7hpbwzbtcB1QL9Jh Ey/wBI8vios7065N1bH28PFQF2DbbLs0QKCqaQPB5nXU7CqXXqd3k//+RpnlWnFwhfOH49Ck3fUp ALL90+uL/rvLqxu0YE8nL+ACGLClXEdaMTbeESDtR9qzXPnHOTbRHbcpLzVLEsmnRvwQhl4Q/Pog eEPiNdnpoYD4G0FllZkKrxlrRr/fDT4c5Cef8g== ) cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084 cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cfts.co
	`cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084`
	`cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491`
	DNSKEY=17491/SEP is now in the chain-of-trust
	DS=17491/SHA-384 verifies DNSKEY=17491/SEP
	DS=17491/SHA-1 verifies DNSKEY=17491/SEP
	DS=17491/SHA-256 verifies DNSKEY=17491/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210429000000 20210408000000 17491 cfts.co. Yfs6TgBMxGujGbzia5CRU8Wc+mmWkvjIUwmM+gKYyxUMqELiv5ArjkSNpNewnnNngddK0o9+1QfJ LtqzyBnagjMiNwegPrd+BF5BCEHOG5V6+b6ZPnuP0DEmoWHIgfeywMjft/pm7hpbwzbtcB1QL9Jh Ey/wBI8vios7065N1bH28PFQF2DbbLs0QKCqaQPB5nXU7CqXXqd3k//+RpnlWnFwhfOH49Ck3fUp ALL90+uL/rvLqxu0YE8nL+ACGLClXEdaMTbeESDtR9qzXPnHOTbRHbcpLzVLEsmnRvwQhl4Q/Pog eEPiNdnpoYD4G0FllZkKrxlrRr/fDT4c5Cef8g== )`
	RRSIG=17491 and DNSKEY=17491/SEP verifies the DNSKEY RRset
	DNSKEY=48084 is now in the chain-of-trust
	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 146.185.146.236
	;; Answer received from 146.185.146.236 (228 bytes) ;; HEADER SECTION ;; id = 19001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.cfts.co is authoritative for sapphire.cfts.co
	Query to ns1.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (514 bytes) ;; HEADER SECTION ;; id = 3377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021031802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210429000000 20210408000000 48084 cfts.co. QtVKhUE/qUINbia7bmHqXESA2xeh4sWphavcH+qD9X77oZ/ghrxdiSxZT704AiSk5F+Dj/Sfn0Cn aXGGXPocNz5g6mO/Ehl7P2ixEPjvj5+E5b4CDj5A7siUcFAFYDIU5zjKCKzD3QUm1hws1b0l3u3C c2cJx7zAKqvuQOisy8E= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210429000000 20210408000000 48084 cfts.co. R3v/GsoxQRn+6F88MUTSCBaH/od3d3I9R+x+qNBW+qniYaEbxuHjrqOwf0nmdd0juQSIV2TckS/x ZAqilMSvatsw3R27oiQ3BxMNzm9ksXSDlVL3wj/e2vh52xEhpsLs+DKCPh1vE09gR1wO/mNidN3K a5pJQixfPyBU8Mn7Gho= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns1.cfts.co for cfts.co/SOA
	Received 251 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (251 bytes) ;; HEADER SECTION ;; id = 56332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021031802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210429000000 20210408000000 48084 cfts.co. QtVKhUE/qUINbia7bmHqXESA2xeh4sWphavcH+qD9X77oZ/ghrxdiSxZT704AiSk5F+Dj/Sfn0Cn aXGGXPocNz5g6mO/Ehl7P2ixEPjvj5+E5b4CDj5A7siUcFAFYDIU5zjKCKzD3QUm1hws1b0l3u3C c2cJx7zAKqvuQOisy8E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.cfts.co for cfts.co/SOA
	Received 251 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (251 bytes) ;; HEADER SECTION ;; id = 34144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210429000000 20210408000000 48084 cfts.co. QtVKhUE/qUINbia7bmHqXESA2xeh4sWphavcH+qD9X77oZ/ghrxdiSxZT704AiSk5F+Dj/Sfn0Cn aXGGXPocNz5g6mO/Ehl7P2ixEPjvj5+E5b4CDj5A7siUcFAFYDIU5zjKCKzD3QUm1hws1b0l3u3C c2cJx7zAKqvuQOisy8E= ) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021031802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 146.185.146.236
	;; Answer received from 146.185.146.236 (228 bytes) ;; HEADER SECTION ;; id = 21387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

cfts.co

	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (228 bytes) ;; HEADER SECTION ;; id = 20260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.cfts.co is authoritative for sapphire.cfts.co
	Query to ns1.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (514 bytes) ;; HEADER SECTION ;; id = 64166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021031802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210429000000 20210408000000 48084 cfts.co. QtVKhUE/qUINbia7bmHqXESA2xeh4sWphavcH+qD9X77oZ/ghrxdiSxZT704AiSk5F+Dj/Sfn0Cn aXGGXPocNz5g6mO/Ehl7P2ixEPjvj5+E5b4CDj5A7siUcFAFYDIU5zjKCKzD3QUm1hws1b0l3u3C c2cJx7zAKqvuQOisy8E= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210429000000 20210408000000 48084 cfts.co. R3v/GsoxQRn+6F88MUTSCBaH/od3d3I9R+x+qNBW+qniYaEbxuHjrqOwf0nmdd0juQSIV2TckS/x ZAqilMSvatsw3R27oiQ3BxMNzm9ksXSDlVL3wj/e2vh52xEhpsLs+DKCPh1vE09gR1wO/mNidN3K a5pJQixfPyBU8Mn7Gho= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (228 bytes) ;; HEADER SECTION ;; id = 53935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

cfts.co

	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (228 bytes) ;; HEADER SECTION ;; id = 16063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) sapphire.cfts.co. 14400 IN A 109.169.37.60 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (514 bytes) ;; HEADER SECTION ;; id = 31715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2021031802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20210429000000 20210408000000 48084 cfts.co. QtVKhUE/qUINbia7bmHqXESA2xeh4sWphavcH+qD9X77oZ/ghrxdiSxZT704AiSk5F+Dj/Sfn0Cn aXGGXPocNz5g6mO/Ehl7P2ixEPjvj5+E5b4CDj5A7siUcFAFYDIU5zjKCKzD3QUm1hws1b0l3u3C c2cJx7zAKqvuQOisy8E= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20210429000000 20210408000000 48084 cfts.co. R3v/GsoxQRn+6F88MUTSCBaH/od3d3I9R+x+qNBW+qniYaEbxuHjrqOwf0nmdd0juQSIV2TckS/x ZAqilMSvatsw3R27oiQ3BxMNzm9ksXSDlVL3wj/e2vh52xEhpsLs+DKCPh1vE09gR1wO/mNidN3K a5pJQixfPyBU8Mn7Gho= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (228 bytes) ;; HEADER SECTION ;; id = 26855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= ) sapphire.cfts.co. 14400 IN A 109.169.37.60 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20210429000000 20210408000000 48084 cfts.co. YePrpc7+CYY9n17MjY2k+qftWRsq1pMW6MHeE0Gngp5G2JZsBbN+BHZrIDauypt1j4pHakNf/6C3 0kqIxc0llmk4IJXONfxK3TxSEOtSleb8hrsb1PsStw02aYJ8IKHpCWerR9/R3Rx4G3AeihvIBqkx WmTQAtwGOJtu5PROTCE= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sapphire.cfts.co at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: