DNSSEC Analyzer - sapphire.cfts.co

Domain Name:

Time: 2022-06-26 08:38:14 UTC, NTP stratum 16

Analyzing DNSSEC problems for sapphire.cfts.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (1139 octets) ;; HEADER SECTION ;; id = 10479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to d.root-servers.net for sapphire.cfts.co/A
	Received 806 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (806 octets) ;; HEADER SECTION ;; id = 3864 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS ( 61744 8 2 b9adca87453c1f69a9a524681f4179a88374c546a45892acc10e2653519accbd ) co. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . DRe5bv2Ojyc8pxDTGDTyp2C9fsWQQnARVZACBOYJcUMMfERRnaE0RLAGVWlXNMlWL0LmnF1DJnyD k1Ba99UosY4oHDeybwpizU0EmEJ2LLth6sRoi/QyhLrOXSpd9UVVU8tl8cdJ1bQU2SfZngqofxR3 wiXmUX8qTvYTUsNLu2MaIHsrDB3TBDrZXFWLP88Z4mwIQKf+ZiQETFDu7fK8ZzxUr2OOpdsTCb+5 rSiq6izcbxtCqCiwmffuQTFkHwIZaCF5ELuHcHRevjSMyxxhNOOP2bNDnEGqflQJr37qzdRlvGXO G6bjPm4En5FiIrJafmyYBGlOHbkw5dWKKEJf3Q== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to j.root-servers.net for co/DNSKEY
	Received 792 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (792 octets) ;; HEADER SECTION ;; id = 62536 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS ( 61744 8 2 b9adca87453c1f69a9a524681f4179a88374c546a45892acc10e2653519accbd ) co. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . DRe5bv2Ojyc8pxDTGDTyp2C9fsWQQnARVZACBOYJcUMMfERRnaE0RLAGVWlXNMlWL0LmnF1DJnyD k1Ba99UosY4oHDeybwpizU0EmEJ2LLth6sRoi/QyhLrOXSpd9UVVU8tl8cdJ1bQU2SfZngqofxR3 wiXmUX8qTvYTUsNLu2MaIHsrDB3TBDrZXFWLP88Z4mwIQKf+ZiQETFDu7fK8ZzxUr2OOpdsTCb+5 rSiq6izcbxtCqCiwmffuQTFkHwIZaCF5ELuHcHRevjSMyxxhNOOP2bNDnEGqflQJr37qzdRlvGXO G6bjPm4En5FiIrJafmyYBGlOHbkw5dWKKEJf3Q== ) ;; ADDITIONAL SECTION (13 records) ns4.cctld.co. 172800 IN A 156.154.103.25 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns3.cctld.co. 172800 IN A 37.209.196.14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns1.cctld.co. 172800 IN A 37.209.192.14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns6.cctld.co. 172800 IN A 156.154.105.25 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ns5.cctld.co. 172800 IN A 156.154.104.25 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone co

	Checking DS between . and co
	Query to l.root-servers.net for co/DS
	Received 414 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (414 octets) ;; HEADER SECTION ;; id = 58562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (3 records) co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS ( 61744 8 2 b9adca87453c1f69a9a524681f4179a88374c546a45892acc10e2653519accbd ) co. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . DRe5bv2Ojyc8pxDTGDTyp2C9fsWQQnARVZACBOYJcUMMfERRnaE0RLAGVWlXNMlWL0LmnF1DJnyD k1Ba99UosY4oHDeybwpizU0EmEJ2LLth6sRoi/QyhLrOXSpd9UVVU8tl8cdJ1bQU2SfZngqofxR3 wiXmUX8qTvYTUsNLu2MaIHsrDB3TBDrZXFWLP88Z4mwIQKf+ZiQETFDu7fK8ZzxUr2OOpdsTCb+5 rSiq6izcbxtCqCiwmffuQTFkHwIZaCF5ELuHcHRevjSMyxxhNOOP2bNDnEGqflQJr37qzdRlvGXO G6bjPm4En5FiIrJafmyYBGlOHbkw5dWKKEJf3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for co in the . zone
	DS=43834/SHA-256 has algorithm RSASHA256
	DS=61744/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . DRe5bv2Ojyc8pxDTGDTyp2C9fsWQQnARVZACBOYJcUMMfERRnaE0RLAGVWlXNMlWL0LmnF1DJnyD k1Ba99UosY4oHDeybwpizU0EmEJ2LLth6sRoi/QyhLrOXSpd9UVVU8tl8cdJ1bQU2SfZngqofxR3 wiXmUX8qTvYTUsNLu2MaIHsrDB3TBDrZXFWLP88Z4mwIQKf+ZiQETFDu7fK8ZzxUr2OOpdsTCb+5 rSiq6izcbxtCqCiwmffuQTFkHwIZaCF5ELuHcHRevjSMyxxhNOOP2bNDnEGqflQJr37qzdRlvGXO G6bjPm4En5FiIrJafmyYBGlOHbkw5dWKKEJf3Q== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=43834/SHA-256 is now in the chain-of-trust
	DS=61744/SHA-256 is now in the chain-of-trust
	`co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e )`
	`co. 86400 IN DS ( 61744 8 2 b9adca87453c1f69a9a524681f4179a88374c546a45892acc10e2653519accbd )`
	Query to ns3.cctld.co for co/DNSKEY
	Received 1717 bytes from 37.209.196.14
	;; Response received from 37.209.196.14 (1717 octets) ;; HEADER SECTION ;; id = 24348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (7 records) co. 900 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278 co. 900 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834 co. 900 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744 co. 900 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065 co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 19065 co. eK5FvyK9zZ1z9EEzRfOqNzscbfiThvieiHGLks3Gmwi+YXYmAmJWdqzctswvMmorChrccLvap1D3 ZKTZ/zIibfTJSZ9DsLE973QSBlwgps7c20PLRPwTHPIGR2ycGRkTSoo8WsRNBBan1y4asmb5I9yC AVzCgTg+z2E4oUFmTYZ3pcKak15c9GA8M1rRxKCwzisQJRIMJnZEWNSP3sK8xA== ) co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 43834 co. O9kyEE2lZwJjQkSD98rCyzIzz2aTmPBHuSTuoLXJN9Q6oRKIXgamYEKaDqlS5hn1iGKoChntXznf 2rwKO4+F6pMoRsY9zh/tgrLiG0zwfSDlhk5B7RNl+mj9sE+NOtDfQ1A3iG8c78hydSw4vXmk2mzx 0DWv3vx/6j287PN77sKpJ6SAGUTfjjmX3nSIb3PbDRt3mvHxHvytOXVK1eMJ3M9FvIjUxNze0F8u lVf/ywCMG6em+/I+U9OUL/1GfrY7QNEGteWACm/3qwOo8Ies03GPRP/IKyV/fei5y/uGYeKjJ+QS 46qlnORTHUL+tPhjKcYPwUvPyre1yZ9QSI0IRQ== ) co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 61744 co. FyzgigF0JxhxKLR+aWYm32roNJA0q7jy60c09y+kYnVpJPmwpz6IkOw+2mlRfkeFje+a7shxPttp xRVQnCS61sUbjowjVVZ3bhP0Dg+mqKMLSOUGcKdQd5rLylBTKzkd+1Uw1EMnKhBRbGCvE1WAIwwS mn6WZnikoeiiouoXZggfW/0cjqSdGHseST4UNbaQwo1FHM4EU06Uellq7j6PiuubkplkqK9hdXQa RjHAikSnepfxdTu9jmeIdnFCbK8FVzFWhoyxvB4Dh+G6afwWk8edQBCC0lAvTXQ/59v76y+sqo7g gNtcy8/5s13D93luQ4vbcuyq1nPzcAaE0fur+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for co
	`co. 900 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278`
	`co. 900 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834`
	`co. 900 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744`
	`co. 900 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065`
	DNSKEY=43834/SEP is now in the chain-of-trust
	DS=43834/SHA-256 verifies DNSKEY=43834/SEP
	DNSKEY=61744/SEP is now in the chain-of-trust
	DS=61744/SHA-256 verifies DNSKEY=61744/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 19065 co. eK5FvyK9zZ1z9EEzRfOqNzscbfiThvieiHGLks3Gmwi+YXYmAmJWdqzctswvMmorChrccLvap1D3 ZKTZ/zIibfTJSZ9DsLE973QSBlwgps7c20PLRPwTHPIGR2ycGRkTSoo8WsRNBBan1y4asmb5I9yC AVzCgTg+z2E4oUFmTYZ3pcKak15c9GA8M1rRxKCwzisQJRIMJnZEWNSP3sK8xA== )`
	`co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 43834 co. O9kyEE2lZwJjQkSD98rCyzIzz2aTmPBHuSTuoLXJN9Q6oRKIXgamYEKaDqlS5hn1iGKoChntXznf 2rwKO4+F6pMoRsY9zh/tgrLiG0zwfSDlhk5B7RNl+mj9sE+NOtDfQ1A3iG8c78hydSw4vXmk2mzx 0DWv3vx/6j287PN77sKpJ6SAGUTfjjmX3nSIb3PbDRt3mvHxHvytOXVK1eMJ3M9FvIjUxNze0F8u lVf/ywCMG6em+/I+U9OUL/1GfrY7QNEGteWACm/3qwOo8Ies03GPRP/IKyV/fei5y/uGYeKjJ+QS 46qlnORTHUL+tPhjKcYPwUvPyre1yZ9QSI0IRQ== )`
	`co. 900 IN RRSIG ( DNSKEY 8 1 900 20220720014400 20220620005226 61744 co. FyzgigF0JxhxKLR+aWYm32roNJA0q7jy60c09y+kYnVpJPmwpz6IkOw+2mlRfkeFje+a7shxPttp xRVQnCS61sUbjowjVVZ3bhP0Dg+mqKMLSOUGcKdQd5rLylBTKzkd+1Uw1EMnKhBRbGCvE1WAIwwS mn6WZnikoeiiouoXZggfW/0cjqSdGHseST4UNbaQwo1FHM4EU06Uellq7j6PiuubkplkqK9hdXQa RjHAikSnepfxdTu9jmeIdnFCbK8FVzFWhoyxvB4Dh+G6afwWk8edQBCC0lAvTXQ/59v76y+sqo7g gNtcy8/5s13D93luQ4vbcuyq1nPzcAaE0fur+A== )`
	RRSIG=19065 and DNSKEY=19065 verifies the DNSKEY RRset
	RRSIG=43834 and DNSKEY=43834/SEP verifies the DNSKEY RRset
	RRSIG=61744 and DNSKEY=61744/SEP verifies the DNSKEY RRset
	DNSKEY=64278 is now in the chain-of-trust
	DNSKEY=19065 is now in the chain-of-trust
	Query to ns3.cctld.co for sapphire.cfts.co/A
	Received 489 bytes from 37.209.196.14
	;; Response received from 37.209.196.14 (489 octets) ;; HEADER SECTION ;; id = 47162 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN DS ( 6640 8 2 f218e7a5300642086bd3b707dea838caf61c598f6e55f3cfad119709063b7d71 ) cfts.co. 3600 IN DS 6640 8 1 77d286633211498f8d467ce4643f000f8db2c6e6 cfts.co. 3600 IN DS ( 6640 8 4 a3aa564e8aa38eaeb22dbe7b8d7bdf99fbffea905ca54eeeaf2ea9d5aa65222b 108c029fbb5ed4e16ec03281c359497d ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20220723135714 20220623135327 19065 co. lVG9zz9RTagXBx+UxWleUI9pxZUa8nN+nm8dfbejGAyF+XEqzn0TJhe97O+mNprUbmvf4auMGUcT BB5117n2+o1AkEZoqF91jbYESwe5VxuG+mWDNZyrU5CpwF3noZvaW/oNDvXSfRNIzwiCbSUHLEP2 R2xuv2mBr2Z+NQpKBOTfTOeYVASUcXDNbk+3PttKFSYCri7aoRyvOK+sKFtGXg== ) ;; ADDITIONAL SECTION (4 records) ns3.cfts.co. 3600 IN A 192.241.226.147 ns2.cfts.co. 3600 IN A 146.185.146.236 ns1.cfts.co. 3600 IN A 109.169.37.60 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.cctld.co for cfts.co/DNSKEY
	Received 480 bytes from 156.154.103.25
	;; Response received from 156.154.103.25 (480 octets) ;; HEADER SECTION ;; id = 32366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN DS ( 6640 8 2 f218e7a5300642086bd3b707dea838caf61c598f6e55f3cfad119709063b7d71 ) cfts.co. 3600 IN DS ( 6640 8 4 a3aa564e8aa38eaeb22dbe7b8d7bdf99fbffea905ca54eeeaf2ea9d5aa65222b 108c029fbb5ed4e16ec03281c359497d ) cfts.co. 3600 IN DS 6640 8 1 77d286633211498f8d467ce4643f000f8db2c6e6 cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20220723135714 20220623135327 19065 co. lVG9zz9RTagXBx+UxWleUI9pxZUa8nN+nm8dfbejGAyF+XEqzn0TJhe97O+mNprUbmvf4auMGUcT BB5117n2+o1AkEZoqF91jbYESwe5VxuG+mWDNZyrU5CpwF3noZvaW/oNDvXSfRNIzwiCbSUHLEP2 R2xuv2mBr2Z+NQpKBOTfTOeYVASUcXDNbk+3PttKFSYCri7aoRyvOK+sKFtGXg== ) ;; ADDITIONAL SECTION (4 records) ns3.cfts.co. 3600 IN A 192.241.226.147 ns2.cfts.co. 3600 IN A 146.185.146.236 ns1.cfts.co. 3600 IN A 109.169.37.60 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cfts.co

cfts.co

	Checking DS between co and cfts.co
	Query to ns5.cctld.co for cfts.co/DS
	Received 378 bytes from 156.154.104.25
	;; Response received from 156.154.104.25 (378 octets) ;; HEADER SECTION ;; id = 53101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DS ;; ANSWER SECTION (4 records) cfts.co. 3600 IN DS ( 6640 8 2 f218e7a5300642086bd3b707dea838caf61c598f6e55f3cfad119709063b7d71 ) cfts.co. 3600 IN DS 6640 8 1 77d286633211498f8d467ce4643f000f8db2c6e6 cfts.co. 3600 IN DS ( 6640 8 4 a3aa564e8aa38eaeb22dbe7b8d7bdf99fbffea905ca54eeeaf2ea9d5aa65222b 108c029fbb5ed4e16ec03281c359497d ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20220723135714 20220623135327 19065 co. lVG9zz9RTagXBx+UxWleUI9pxZUa8nN+nm8dfbejGAyF+XEqzn0TJhe97O+mNprUbmvf4auMGUcT BB5117n2+o1AkEZoqF91jbYESwe5VxuG+mWDNZyrU5CpwF3noZvaW/oNDvXSfRNIzwiCbSUHLEP2 R2xuv2mBr2Z+NQpKBOTfTOeYVASUcXDNbk+3PttKFSYCri7aoRyvOK+sKFtGXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for cfts.co in the co zone
	DS=6640/SHA-256 has algorithm RSASHA256
	DS=6640/SHA-1 has algorithm RSASHA256
	DS=6640/SHA-384 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20220723135714 20220623135327 19065 co. lVG9zz9RTagXBx+UxWleUI9pxZUa8nN+nm8dfbejGAyF+XEqzn0TJhe97O+mNprUbmvf4auMGUcT BB5117n2+o1AkEZoqF91jbYESwe5VxuG+mWDNZyrU5CpwF3noZvaW/oNDvXSfRNIzwiCbSUHLEP2 R2xuv2mBr2Z+NQpKBOTfTOeYVASUcXDNbk+3PttKFSYCri7aoRyvOK+sKFtGXg== )`
	RRSIG=19065 and DNSKEY=19065 verifies the DS RRset
	DS=6640/SHA-256 is now in the chain-of-trust
	`cfts.co. 3600 IN DS ( 6640 8 2 f218e7a5300642086bd3b707dea838caf61c598f6e55f3cfad119709063b7d71 )`
	`cfts.co. 3600 IN DS 6640 8 1 77d286633211498f8d467ce4643f000f8db2c6e6`
	`cfts.co. 3600 IN DS ( 6640 8 4 a3aa564e8aa38eaeb22dbe7b8d7bdf99fbffea905ca54eeeaf2ea9d5aa65222b 108c029fbb5ed4e16ec03281c359497d )`
	Query to ns3.cfts.co for cfts.co/DNSKEY
	Received 1474 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (1474 octets) ;; HEADER SECTION ;; id = 18939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (6 records) cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084 cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAdIa+TxF3eDJudQKQPRBQWnwr2SmAerjy2fAmTePV1czhaZEQDAjr7pf8NdeZgaDQZHgl0mM raXAnFlC2IAgpguey3Nn4OTMUiH1tVI3GcDqpAdhnOB35fnMIf+EdAxxwmOLJHqcUvRwCaeFfDVc UsczaBv3gGA18xe2h26tWsgz ) ; Key ID = 38754 cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAaY/81CQL/FcmKuo1h+hzRlHdLsUHYm5aIXepp38acRbXVVm3dquB/uC0SZFn/cxDCj6xLlV aAiUAvEPfBxcctReZCfwQkGHbrQADdsL8PEbwivfdxBAu+6g2WKFIyiigluVtZtpVlZE0jz+E0K/ i0D5VfNpcpXk9QZzQj1tJpV3DZS1sUlYbPJFhyZ2qnb4wE049axBMPyE4HQfGoCHPXxsnRzCAx/r N7i5yXd550pbYPkKzN2FTCA2ce7gR4Uy+YWmpgGDDBgc9c8liVZHB/DeuHpkwhovWn7FW08ngz7U Dko1A2RtrAi/jHYry+YmS0cXO4BtV62kHURcCFxqO1k= ) ; Key ID = 6640 cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491 cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220707000000 20220616000000 6640 cfts.co. dTE0J2CVt6CRuc4yAF8usCU+yKdxnGMujaNO06/h/uLE82rbrrXmkveT7nZeoQ1yj+wShe/nPiRF swwl61SU+aezEGE3Kzxt4qQWkATjqwHGk2zrhM1/O89P7dNsZ7oi6IA3AsHoIdj/jHuKL3olxY5O gmwAx4ml7gENubXwlgvgYpgaHygAdPw8gQfklyMMW977S2rYSrOKDuxi6XnhgBEvK8u92Bx2lgBq iL6FPeTVYE+1RA8LSWmjoJeOekwhzaa6Z0TOnBoCuvfgjSdtU535Cu3pILddZrHRZ/Q77NXMaOyE vsp10WCF2blJSLkYIpxdkeI2lkM1CIB2KX2H5w== ) cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220707000000 20220616000000 17491 cfts.co. nLZSinG0oCntn9N36syXt0jbzUcPO2nFlgDoTnygnr9e/qThbV+DuEcUhZgvjQPDPGbcKdH7+C5t MgaGvryIQ+3/fqYKxFkUb6a4BLDfNrG7gqzLIFF/7UgTcN/RuG0WllX0VqOVltIjCnKK96lo5rW4 45zMuGMRu5zxt5o1rsgI1uSr/UkQ//bPQUraEN4Xawc8hm66jdcwHDHfl1R3QZfTrdbP6lYsJWuG 8EXamZhpIBPnJEytwyRe/2SPSnDI3CbY4/NJsSKr7YqcQzfvBW76U9HilU0xY7am78Pn3+GbelJw RMB50kKtXLYdVVFZp3GwI2DQhJvePT0I8zC+fQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for cfts.co
	`cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084`
	`cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAdIa+TxF3eDJudQKQPRBQWnwr2SmAerjy2fAmTePV1czhaZEQDAjr7pf8NdeZgaDQZHgl0mM raXAnFlC2IAgpguey3Nn4OTMUiH1tVI3GcDqpAdhnOB35fnMIf+EdAxxwmOLJHqcUvRwCaeFfDVc UsczaBv3gGA18xe2h26tWsgz ) ; Key ID = 38754`
	`cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAaY/81CQL/FcmKuo1h+hzRlHdLsUHYm5aIXepp38acRbXVVm3dquB/uC0SZFn/cxDCj6xLlV aAiUAvEPfBxcctReZCfwQkGHbrQADdsL8PEbwivfdxBAu+6g2WKFIyiigluVtZtpVlZE0jz+E0K/ i0D5VfNpcpXk9QZzQj1tJpV3DZS1sUlYbPJFhyZ2qnb4wE049axBMPyE4HQfGoCHPXxsnRzCAx/r N7i5yXd550pbYPkKzN2FTCA2ce7gR4Uy+YWmpgGDDBgc9c8liVZHB/DeuHpkwhovWn7FW08ngz7U Dko1A2RtrAi/jHYry+YmS0cXO4BtV62kHURcCFxqO1k= ) ; Key ID = 6640`
	`cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491`
	DNSKEY=6640/SEP is now in the chain-of-trust
	DS=6640/SHA-256 verifies DNSKEY=6640/SEP
	DS=6640/SHA-1 verifies DNSKEY=6640/SEP
	DS=6640/SHA-384 verifies DNSKEY=6640/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220707000000 20220616000000 6640 cfts.co. dTE0J2CVt6CRuc4yAF8usCU+yKdxnGMujaNO06/h/uLE82rbrrXmkveT7nZeoQ1yj+wShe/nPiRF swwl61SU+aezEGE3Kzxt4qQWkATjqwHGk2zrhM1/O89P7dNsZ7oi6IA3AsHoIdj/jHuKL3olxY5O gmwAx4ml7gENubXwlgvgYpgaHygAdPw8gQfklyMMW977S2rYSrOKDuxi6XnhgBEvK8u92Bx2lgBq iL6FPeTVYE+1RA8LSWmjoJeOekwhzaa6Z0TOnBoCuvfgjSdtU535Cu3pILddZrHRZ/Q77NXMaOyE vsp10WCF2blJSLkYIpxdkeI2lkM1CIB2KX2H5w== )`
	`cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220707000000 20220616000000 17491 cfts.co. nLZSinG0oCntn9N36syXt0jbzUcPO2nFlgDoTnygnr9e/qThbV+DuEcUhZgvjQPDPGbcKdH7+C5t MgaGvryIQ+3/fqYKxFkUb6a4BLDfNrG7gqzLIFF/7UgTcN/RuG0WllX0VqOVltIjCnKK96lo5rW4 45zMuGMRu5zxt5o1rsgI1uSr/UkQ//bPQUraEN4Xawc8hm66jdcwHDHfl1R3QZfTrdbP6lYsJWuG 8EXamZhpIBPnJEytwyRe/2SPSnDI3CbY4/NJsSKr7YqcQzfvBW76U9HilU0xY7am78Pn3+GbelJw RMB50kKtXLYdVVFZp3GwI2DQhJvePT0I8zC+fQ== )`
	RRSIG=6640 and DNSKEY=6640/SEP verifies the DNSKEY RRset
	RRSIG=17491 and DNSKEY=17491/SEP verifies the DNSKEY RRset
	DNSKEY=48084 is now in the chain-of-trust
	DNSKEY=38754 is now in the chain-of-trust
	DNSKEY=17491/SEP is now in the chain-of-trust
	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 395 bytes from 146.185.146.236
	;; Response received from 146.185.146.236 (395 octets) ;; HEADER SECTION ;; id = 17111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (3 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 848 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (848 octets) ;; HEADER SECTION ;; id = 10796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cfts.co. 700 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2022053100 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. sffYhKTHEBycTWmve69CGTUH4hgSdlrtbex2oMNYWwSM/zAm6TevGpJM7sNtUvD2DFnAn+qXkaRJ qQj/pVVEO1y2YBk+0Axveo8Wo9BbEXD4+ntsk6L0I1s2dROdrhnNxje0Takaea7xB+zC1P0K0311 72mrRh5I0K4mYEU7IQs= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. ftLdcsEkj2udrVE7SsEa+gkEi4B/+DjyyyQIurAWlOzGPHwvc7ClzFtq99nOBQ+AbvpnFbEn0JLT uWc5T2e+cA1DsKba5m6XIuSPGJFVaHlmmyvNW6fQh5r0JiJkLJCjbcncOwc2BnP28ALSbdt1KKPi MiP8r9IIrxWTE4ULhaM= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN NSEC3 ( 1 0 7 5c69780a4a180bc9 kqtjdplg3is9c6ugdi7bm8n7kjdp0rj1 A TXT RRSIG ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 48084 cfts.co. S1LW6zYdnJdFRziIcLYW7muSmPH1RzbId5X2gicwq1LXPOwyVtZ3EM2U+oA+J8XK5eD8/Mqv/A2a YsFFzT7+Yv9sPo2Zd4O7x99OXbMKQWAk7jKhHWHVigiVkPA6HG9O28DQb3BYPNaHOw79y3KdeCs4 57HbjjsdJZP3qgsjmac= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns1.cfts.co for cfts.co/SOA
	Received 919 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (919 octets) ;; HEADER SECTION ;; id = 6846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (6 records) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2022051600 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.cfts.co for cfts.co/SOA
	Received 418 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (418 octets) ;; HEADER SECTION ;; id = 57149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (3 records) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. ftLdcsEkj2udrVE7SsEa+gkEi4B/+DjyyyQIurAWlOzGPHwvc7ClzFtq99nOBQ+AbvpnFbEn0JLT uWc5T2e+cA1DsKba5m6XIuSPGJFVaHlmmyvNW6fQh5r0JiJkLJCjbcncOwc2BnP28ALSbdt1KKPi MiP8r9IIrxWTE4ULhaM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. sffYhKTHEBycTWmve69CGTUH4hgSdlrtbex2oMNYWwSM/zAm6TevGpJM7sNtUvD2DFnAn+qXkaRJ qQj/pVVEO1y2YBk+0Axveo8Wo9BbEXD4+ntsk6L0I1s2dROdrhnNxje0Takaea7xB+zC1P0K0311 72mrRh5I0K4mYEU7IQs= ) cfts.co. 700 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2022053100 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.cfts.co serial (2022053100) differs from ns1.cfts.co serial (2022051600)
	Query to ns2.cfts.co for sapphire.cfts.co/A
	Received 395 bytes from 146.185.146.236
	;; Response received from 146.185.146.236 (395 octets) ;; HEADER SECTION ;; id = 24494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (3 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 2 RRSIGs over A RRset
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset
	RRSIG=38754 and DNSKEY=38754 verifies the A RRset

cfts.co

	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 395 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (395 octets) ;; HEADER SECTION ;; id = 13763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (3 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.cfts.co is authoritative for sapphire.cfts.co
	Query to ns1.cfts.co for sapphire.cfts.co/DNSKEY
	Received 1850 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (1850 octets) ;; HEADER SECTION ;; id = 14942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) cfts.co. 700 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2022051600 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN NSEC3 ( 1 0 7 5c69780a4a180bc9 kqtjdplg3is9c6ugdi7bm8n7kjdp0rj1 A TXT RRSIG ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 48084 cfts.co. S1LW6zYdnJdFRziIcLYW7muSmPH1RzbId5X2gicwq1LXPOwyVtZ3EM2U+oA+J8XK5eD8/Mqv/A2a YsFFzT7+Yv9sPo2Zd4O7x99OXbMKQWAk7jKhHWHVigiVkPA6HG9O28DQb3BYPNaHOw79y3KdeCs4 57HbjjsdJZP3qgsjmac= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 48084 cfts.co. S1LW6zYdnJdFRziIcLYW7muSmPH1RzbId5X2gicwq1LXPOwyVtZ3EM2U+oA+J8XK5eD8/Mqv/A2a YsFFzT7+Yv9sPo2Zd4O7x99OXbMKQWAk7jKhHWHVigiVkPA6HG9O28DQb3BYPNaHOw79y3KdeCs4 57HbjjsdJZP3qgsjmac= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns3.cfts.co for sapphire.cfts.co/A
	Received 395 bytes from 192.241.226.147
	;; Response received from 192.241.226.147 (395 octets) ;; HEADER SECTION ;; id = 28155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (3 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 2 RRSIGs over A RRset
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset
	RRSIG=38754 and DNSKEY=38754 verifies the A RRset

cfts.co

	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 896 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (896 octets) ;; HEADER SECTION ;; id = 6442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (6 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.cfts.co is authoritative for sapphire.cfts.co
	Query to ns1.cfts.co for sapphire.cfts.co/DNSKEY
	Received 1850 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (1850 octets) ;; HEADER SECTION ;; id = 29937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) cfts.co. 700 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2022051600 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 48084 cfts.co. J6BzdaYhZBNunxcvYn8OgdzZsOD7l/CR7DDh4Xk/iTYlz0vPihyMGu6m5/YvVOIHXDpjtB63+ZBS SFRilCmilLsKt0iJjoqAH6R9TqTWu+jhYSzoED+1E1TWTDc5h+DOt7WBJ87O/wKdFrENcP9BygIK xgrQqAbu4Xt5RpUbeVM= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) cfts.co. 700 IN RRSIG ( SOA 8 2 700 20220707000000 20220616000000 38754 cfts.co. T2cs+roxOhWfnn2MrwGCEA69n28NuDg2yZ7Kex500jhpaWuOLrV52aLtP3ByuJwYMy1B2MV+FfRb Un+vhAaAAzd+Mdt+mpkG2Nd/XI8fXJhDVUESh3ZiVV7GfTw/L4qgdf72sXjU9ijknf9zxJ/OqXQE i4X2tda5agCUFTGt5l0= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN NSEC3 ( 1 0 7 5c69780a4a180bc9 kqtjdplg3is9c6ugdi7bm8n7kjdp0rj1 A TXT RRSIG ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 48084 cfts.co. S1LW6zYdnJdFRziIcLYW7muSmPH1RzbId5X2gicwq1LXPOwyVtZ3EM2U+oA+J8XK5eD8/Mqv/A2a YsFFzT7+Yv9sPo2Zd4O7x99OXbMKQWAk7jKhHWHVigiVkPA6HG9O28DQb3BYPNaHOw79y3KdeCs4 57HbjjsdJZP3qgsjmac= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 48084 cfts.co. S1LW6zYdnJdFRziIcLYW7muSmPH1RzbId5X2gicwq1LXPOwyVtZ3EM2U+oA+J8XK5eD8/Mqv/A2a YsFFzT7+Yv9sPo2Zd4O7x99OXbMKQWAk7jKhHWHVigiVkPA6HG9O28DQb3BYPNaHOw79y3KdeCs4 57HbjjsdJZP3qgsjmac= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) kqtjdplg3is9c6ugdi7bm8n7kjdp0rj0.cfts.co. 700 IN RRSIG ( NSEC3 8 3 700 20220707000000 20220616000000 38754 cfts.co. KgyGrVHndCTo+gHqITn7hGIeNpLCoKhF+pA/NpuUuYHLOmBfjhX2k0uIr5Fl8ULV7syuic7nDme3 GIDoulvQbxrTheR8kj0XTlTUVJ6BqTZ73y7mJv7wTeClttEK+nk1W/s0W9pZZRA6rDMBpfeKlWkO uQupu/12RJLFGQ2lYjE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 896 bytes from 109.169.37.60
	;; Response received from 109.169.37.60 (896 octets) ;; HEADER SECTION ;; id = 44778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (6 records) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN A 109.169.37.60 sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= ) sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 5 RRSIGs over A RRset
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 38754 cfts.co. x9RWsWEhDlR77tKth9yFjuGZ9EafnYxfM6XEz8BMGBx6vFJ6KfVOW7HDfOYusbclXA+se0JTd0rN VLw4HxuNBHOOwu52rXNt3QaRsIDqUUShdlJUIZl5f+V2WtBwDKeUictOmtRtPUFGiU+B5cEby6ju i6ogn+V021OtqjlPD68= )`
	`sapphire.cfts.co. 700 IN RRSIG ( A 8 3 700 20220707000000 20220616000000 48084 cfts.co. HYAGB6Mji/c0T4Wz6AuG54xfUatvxUWiw/H6e5X5Vgcugzwrd8BCR3rdafJBjkL69OwfRVToBZK6 IW5MPQFPqJ1dC7gTabE7grH0CDVIVU01pTXKDGID7y1MjLj0sT2bh6vE/675ElbI2CNHx8fqidlp 3YV1yiyvcpLCXjoydPg= )`
	RRSIG=38754 and DNSKEY=38754 verifies the A RRset
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset
	RRSIG=38754 and DNSKEY=38754 verifies the A RRset
	RRSIG=38754 and DNSKEY=38754 verifies the A RRset
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sapphire.cfts.co at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: