DNSSEC Analyzer - sapphire.cfts.co

Domain Name:

Time: 2020-08-09 14:56:59 UTC, NTP stratum 4

Analyzing DNSSEC problems for sapphire.cfts.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 865 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (865 bytes) ;; HEADER SECTION ;; id = 29526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200821000000 20200731000000 20326 . L2rJadIIoGRdheHJ6xBo8t8XCcTO2rA0F7ZLsAPKtjK4lmvoBWL/vVuBNkUkeecei038w3FrmzzL KeKNPvlC6iRihYvJZJk7yvmmWBcus7QZ9Z550LRrThnArghMSOGOFrEn0RN5RccsyU/WoaGDZ5gF 42YEb6qCRuSDuWk7nCGXVEFD3t3u+GOfdkYMVddTX5ocYe2o6mb0U3rNc9JycOpm5Na4hilxDzq7 Y64H8ekRviWuQAOibhzMOtuaX3aI+5PxEza/362iOnQrK64OSE5m8Yg8903bebeVCytTnJFXGM20 1AVOJH8yzcnTdVi2lTHxH2iCMCsNvfqZvfk1nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200821000000 20200731000000 20326 . L2rJadIIoGRdheHJ6xBo8t8XCcTO2rA0F7ZLsAPKtjK4lmvoBWL/vVuBNkUkeecei038w3FrmzzL KeKNPvlC6iRihYvJZJk7yvmmWBcus7QZ9Z550LRrThnArghMSOGOFrEn0RN5RccsyU/WoaGDZ5gF 42YEb6qCRuSDuWk7nCGXVEFD3t3u+GOfdkYMVddTX5ocYe2o6mb0U3rNc9JycOpm5Na4hilxDzq7 Y64H8ekRviWuQAOibhzMOtuaX3aI+5PxEza/362iOnQrK64OSE5m8Yg8903bebeVCytTnJFXGM20 1AVOJH8yzcnTdVi2lTHxH2iCMCsNvfqZvfk1nw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to k.root-servers.net for sapphire.cfts.co/A
	Received 794 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (794 bytes) ;; HEADER SECTION ;; id = 4752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . fu+TkmQSS0dxgVJBww559qrSmtdtUSKuVAY0CXNE09b8xsUHB27+wWhl+V9rjrzt0Q4aT1DHmLIq N/ekQl4EgUXCmDocIvMlXQGxVqUV9hKqeZIyjuBe6GJc5eJFyTyDHuPEyWwM67i1DlCIjIBOTLy3 QecLOEixlpxgDXTpkhKmjyIah5BGYpIq/oL3E4t3Pr7eZXZcOVBz/p8VU83UlNn3Xu09QF3TvTkV R4o0WhTLnTiY0Vqzh2CCP+5RcX32DySffiemCtZ1aPxmwAJrU2QWoVFMzUE6IUDHLCrA+Tt0mibv /45mcdm6hIbd1mzzxH6D6j6la8YukOUfy24LWw== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 156.154.100.25 ns2.cctld.co. 172800 IN A 156.154.101.25 ns3.cctld.co. 172800 IN A 156.154.102.25 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:502:2eda::21 ns2.cctld.co. 172800 IN AAAA 2001:502:ad09::21 ns3.cctld.co. 172800 IN AAAA 2610:a1:1009::21 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for co/DNSKEY
	Received 780 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (780 bytes) ;; HEADER SECTION ;; id = 53462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . fu+TkmQSS0dxgVJBww559qrSmtdtUSKuVAY0CXNE09b8xsUHB27+wWhl+V9rjrzt0Q4aT1DHmLIq N/ekQl4EgUXCmDocIvMlXQGxVqUV9hKqeZIyjuBe6GJc5eJFyTyDHuPEyWwM67i1DlCIjIBOTLy3 QecLOEixlpxgDXTpkhKmjyIah5BGYpIq/oL3E4t3Pr7eZXZcOVBz/p8VU83UlNn3Xu09QF3TvTkV R4o0WhTLnTiY0Vqzh2CCP+5RcX32DySffiemCtZ1aPxmwAJrU2QWoVFMzUE6IUDHLCrA+Tt0mibv /45mcdm6hIbd1mzzxH6D6j6la8YukOUfy24LWw== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 156.154.100.25 ns1.cctld.co. 172800 IN AAAA 2001:502:2eda::21 ns2.cctld.co. 172800 IN A 156.154.101.25 ns2.cctld.co. 172800 IN AAAA 2001:502:ad09::21 ns3.cctld.co. 172800 IN A 156.154.102.25 ns3.cctld.co. 172800 IN AAAA 2610:a1:1009::21 ns4.cctld.co. 172800 IN A 156.154.103.25 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN A 156.154.104.25 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN A 156.154.105.25 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone co

	Checking DS between . and co
	Query to d.root-servers.net for co/DS
	Received 402 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (402 bytes) ;; HEADER SECTION ;; id = 5476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (3 records) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . fu+TkmQSS0dxgVJBww559qrSmtdtUSKuVAY0CXNE09b8xsUHB27+wWhl+V9rjrzt0Q4aT1DHmLIq N/ekQl4EgUXCmDocIvMlXQGxVqUV9hKqeZIyjuBe6GJc5eJFyTyDHuPEyWwM67i1DlCIjIBOTLy3 QecLOEixlpxgDXTpkhKmjyIah5BGYpIq/oL3E4t3Pr7eZXZcOVBz/p8VU83UlNn3Xu09QF3TvTkV R4o0WhTLnTiY0Vqzh2CCP+5RcX32DySffiemCtZ1aPxmwAJrU2QWoVFMzUE6IUDHLCrA+Tt0mibv /45mcdm6hIbd1mzzxH6D6j6la8YukOUfy24LWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for co in the . zone
	DS=43834/SHA-1 has algorithm RSASHA256
	DS=43834/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . fu+TkmQSS0dxgVJBww559qrSmtdtUSKuVAY0CXNE09b8xsUHB27+wWhl+V9rjrzt0Q4aT1DHmLIq N/ekQl4EgUXCmDocIvMlXQGxVqUV9hKqeZIyjuBe6GJc5eJFyTyDHuPEyWwM67i1DlCIjIBOTLy3 QecLOEixlpxgDXTpkhKmjyIah5BGYpIq/oL3E4t3Pr7eZXZcOVBz/p8VU83UlNn3Xu09QF3TvTkV R4o0WhTLnTiY0Vqzh2CCP+5RcX32DySffiemCtZ1aPxmwAJrU2QWoVFMzUE6IUDHLCrA+Tt0mibv /45mcdm6hIbd1mzzxH6D6j6la8YukOUfy24LWw== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=43834/SHA-1 is now in the chain-of-trust
	`co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb`
	`co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e )`
	Query to ns4.cctld.co for co/DNSKEY
	Received 971 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (971 bytes) ;; HEADER SECTION ;; id = 56044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (4 records) co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278 co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834 co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20200902200925 20200803194009 43834 co. Qzh7vMybCb8DFw9vYJcjQ8Z4IOog5+6XP8FpvC0mH4UNZB2CaUBNy8ntfP3LH/5Jvnwi1rbzxGcz 65mp+EmPprq4HHRcvNzK0FiI4rqtZ6oCqR5h5gBWnICGr1kJ6BLDvjh5AKl9D+SIXERLb+HSqn72 RUKZXOq9tkIzUKu/0qyT8/TXCK7+157l8oIK982urrGXkm4t9Kn/vE6AAtUhecE4+bzigPP6s6I4 pKF83UW8S0SiTzmfpg0GnmdEz7adOnrzoz9eJYQ4te828rxkVgNSSLhlB+zE77QOdYg5setDfVnD /Nmu3rsKkbEQpI8qA2WT+r7nzbmnT2+gPKbFIw== ) co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20200902200925 20200803194009 64278 co. qRSOryUl9aQMsowbSUowaKqOxVtmpfP8jt/3PAnVU4t3M837yEMtzHaDJoq7+YHY3fu0uBqXasJF nkegSEZ3eanAedZW2cuejUnoWk7Z2Q8frrfJzm+LU2+J8ZOxj/1o58x3dURwGHLFoybkEwdtq8p9 qFxt4pEV6j7hDIt9qP1k/FZkgHVuub5ts8TRNPjn3W7UOYWi2mB32ct4xiKX9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for co
	`co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278`
	`co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834`
	DNSKEY=43834/SEP is now in the chain-of-trust
	DS=43834/SHA-1 verifies DNSKEY=43834/SEP
	DS=43834/SHA-256 verifies DNSKEY=43834/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20200902200925 20200803194009 43834 co. Qzh7vMybCb8DFw9vYJcjQ8Z4IOog5+6XP8FpvC0mH4UNZB2CaUBNy8ntfP3LH/5Jvnwi1rbzxGcz 65mp+EmPprq4HHRcvNzK0FiI4rqtZ6oCqR5h5gBWnICGr1kJ6BLDvjh5AKl9D+SIXERLb+HSqn72 RUKZXOq9tkIzUKu/0qyT8/TXCK7+157l8oIK982urrGXkm4t9Kn/vE6AAtUhecE4+bzigPP6s6I4 pKF83UW8S0SiTzmfpg0GnmdEz7adOnrzoz9eJYQ4te828rxkVgNSSLhlB+zE77QOdYg5setDfVnD /Nmu3rsKkbEQpI8qA2WT+r7nzbmnT2+gPKbFIw== )`
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20200902200925 20200803194009 64278 co. qRSOryUl9aQMsowbSUowaKqOxVtmpfP8jt/3PAnVU4t3M837yEMtzHaDJoq7+YHY3fu0uBqXasJF nkegSEZ3eanAedZW2cuejUnoWk7Z2Q8frrfJzm+LU2+J8ZOxj/1o58x3dURwGHLFoybkEwdtq8p9 qFxt4pEV6j7hDIt9qP1k/FZkgHVuub5ts8TRNPjn3W7UOYWi2mB32ct4xiKX9g== )`
	RRSIG=43834 and DNSKEY=43834/SEP verifies the DNSKEY RRset
	RRSIG=64278 and DNSKEY=64278 verifies the DNSKEY RRset
	DNSKEY=64278 is now in the chain-of-trust
	Query to ns4.cctld.co for sapphire.cfts.co/A
	Received 489 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (489 bytes) ;; HEADER SECTION ;; id = 23440 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20200903022131 20200804021547 64278 co. GaBIOgkf80r7mKrZUrJDK8bZzYoAFdtej4/SoeftvMjQUg0JyByP+cMOl1OcIBACgNxAAdsgNn/s RWUgAPd5IJ7o0Aa4qwmuG4ZjdhBo+P+sgxtHoouHDfvweNX4+ZHxabEqzPffAyH4zTiaIAgFrk3C LHSD7ZBvMe3JfGeE3WhvYDUC60DClt6c2Nw2wBBl1kith6ELPTpn9uJjbp/6iQ== ) ;; ADDITIONAL SECTION (4 records) ns1.cfts.co. 3600 IN A 109.169.37.60 ns2.cfts.co. 3600 IN A 146.185.146.236 ns3.cfts.co. 3600 IN A 192.241.226.147 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.cctld.co for cfts.co/DNSKEY
	Received 480 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (480 bytes) ;; HEADER SECTION ;; id = 50866 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cfts.co. 3600 IN NS ns2.cfts.co. cfts.co. 3600 IN NS ns1.cfts.co. cfts.co. 3600 IN NS ns3.cfts.co. cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20200903022131 20200804021547 64278 co. GaBIOgkf80r7mKrZUrJDK8bZzYoAFdtej4/SoeftvMjQUg0JyByP+cMOl1OcIBACgNxAAdsgNn/s RWUgAPd5IJ7o0Aa4qwmuG4ZjdhBo+P+sgxtHoouHDfvweNX4+ZHxabEqzPffAyH4zTiaIAgFrk3C LHSD7ZBvMe3JfGeE3WhvYDUC60DClt6c2Nw2wBBl1kith6ELPTpn9uJjbp/6iQ== ) ;; ADDITIONAL SECTION (4 records) ns1.cfts.co. 3600 IN A 109.169.37.60 ns2.cfts.co. 3600 IN A 146.185.146.236 ns3.cfts.co. 3600 IN A 192.241.226.147 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cfts.co

cfts.co

	Checking DS between co and cfts.co
	Query to ns5.cctld.co for cfts.co/DS
	Received 378 bytes from 156.154.104.25
	;; Answer received from 156.154.104.25 (378 bytes) ;; HEADER SECTION ;; id = 56334 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DS ;; ANSWER SECTION (4 records) cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb ) cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 ) cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20200903022131 20200804021547 64278 co. GaBIOgkf80r7mKrZUrJDK8bZzYoAFdtej4/SoeftvMjQUg0JyByP+cMOl1OcIBACgNxAAdsgNn/s RWUgAPd5IJ7o0Aa4qwmuG4ZjdhBo+P+sgxtHoouHDfvweNX4+ZHxabEqzPffAyH4zTiaIAgFrk3C LHSD7ZBvMe3JfGeE3WhvYDUC60DClt6c2Nw2wBBl1kith6ELPTpn9uJjbp/6iQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for cfts.co in the co zone
	DS=17491/SHA-256 has algorithm RSASHA256
	DS=17491/SHA-1 has algorithm RSASHA256
	DS=17491/SHA-384 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cfts.co. 3600 IN RRSIG ( DS 8 2 3600 20200903022131 20200804021547 64278 co. GaBIOgkf80r7mKrZUrJDK8bZzYoAFdtej4/SoeftvMjQUg0JyByP+cMOl1OcIBACgNxAAdsgNn/s RWUgAPd5IJ7o0Aa4qwmuG4ZjdhBo+P+sgxtHoouHDfvweNX4+ZHxabEqzPffAyH4zTiaIAgFrk3C LHSD7ZBvMe3JfGeE3WhvYDUC60DClt6c2Nw2wBBl1kith6ELPTpn9uJjbp/6iQ== )`
	RRSIG=64278 and DNSKEY=64278 verifies the DS RRset
	DS=17491/SHA-256 is now in the chain-of-trust
	`cfts.co. 3600 IN DS ( 17491 8 2 e9dec0ee75deed5cd65b95df2059e3a6f441fe7860442fbf673677ac95d65dbb )`
	`cfts.co. 3600 IN DS 17491 8 1 289bc9e258754461bb3c235e6e737411effda91e`
	`cfts.co. 3600 IN DS ( 17491 8 4 80ed8c255f756bceadd72a3b761cdf40b1070c66036d4c5cdc32caa6825f0e53 29610fbdb69187e1f3043f1e30a28198 )`
	Query to ns3.cfts.co for cfts.co/DNSKEY
	Received 755 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (755 bytes) ;; HEADER SECTION ;; id = 8028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN DNSKEY ;; ANSWER SECTION (3 records) cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200820000000 20200730000000 17491 cfts.co. yWJVc5/9Xcu3tfZzl/9B/p18yvrCEhtZ3nQlkOQkausiJJtGz47iv7fgFVAoD9T/fnvg1J2G/3CY hUI7AsQTwTD2yZb2XSD8BGWBP4FDjbzZWeE2CuwcnBMK8RZiS71cCDflI0ry0VZMKvukPQJzpNz7 ZXR4mWch9RR6mJ6U5HcguvvHuOYUP/ecq7OzXGN+RDPunnhLj7loZof6UsB/D83MDzLdpcYhiSa7 Q6vrMDAGzwM4EIFv9m7nRiv2Ip+1wPYNTflim5KxtaA4qFktJT4d0bF2i01etSEPIOPvIOHH1G5y a9WfZ2MrS9aiVV4wwXHpV0hpDcizkgZ8q02i/w== ) cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084 cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for cfts.co
	`cfts.co. 86400 IN DNSKEY ( 256 3 8 AwEAAcBrp3g1xz0jcYG8PKwVDTjdFRML+QGtUwfq030IZZwvvQEZfGZuMrUJw8B5JhfVlbGhGVUc 1o7p7323KokU2FhRaELbY7qBV+MeqytsMoNojCER/p9lKT7TlCo+WCQB9omyjDueZ5MDovBMZMpJ HNN9DFIrsiLfbo7Sx9AqInLf ) ; Key ID = 48084`
	`cfts.co. 86400 IN DNSKEY ( 257 3 8 AwEAAeV7XyA6KQ0OEPH/alnxxQ6TPe+yv1UaALEPK3jF9OBQ0aPlOOs07++pQcm6KeOycv3SyrDT +3I3kvLAHsQZkVbgAcVEkzZQ2iU/nvab3intGqocGYJY9fuszF3noK75zj9Hi7c4v5zCbgyrpOaO 4bV+JJwIIV1rt9Ja/L75HQDll+H5JP6UPvRbKlBfVuez5Ly3FyfeBc9ls5AvxIwZKTFzE+TV+3H6 3dp0ET0PCeBD8V8JhVz62hFgIADrN/a1qPbOIh1KGYZ45sGgDzepUL8CvD6ZnIWur+1loJqS/qMP zf47h2fSh3unqlKfol453RwXyb/Rkh9SuZry0q0DHoU= ) ; Key ID = 17491`
	DNSKEY=17491/SEP is now in the chain-of-trust
	DS=17491/SHA-256 verifies DNSKEY=17491/SEP
	DS=17491/SHA-1 verifies DNSKEY=17491/SEP
	DS=17491/SHA-384 verifies DNSKEY=17491/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cfts.co. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200820000000 20200730000000 17491 cfts.co. yWJVc5/9Xcu3tfZzl/9B/p18yvrCEhtZ3nQlkOQkausiJJtGz47iv7fgFVAoD9T/fnvg1J2G/3CY hUI7AsQTwTD2yZb2XSD8BGWBP4FDjbzZWeE2CuwcnBMK8RZiS71cCDflI0ry0VZMKvukPQJzpNz7 ZXR4mWch9RR6mJ6U5HcguvvHuOYUP/ecq7OzXGN+RDPunnhLj7loZof6UsB/D83MDzLdpcYhiSa7 Q6vrMDAGzwM4EIFv9m7nRiv2Ip+1wPYNTflim5KxtaA4qFktJT4d0bF2i01etSEPIOPvIOHH1G5y a9WfZ2MrS9aiVV4wwXHpV0hpDcizkgZ8q02i/w== )`
	RRSIG=17491 and DNSKEY=17491/SEP verifies the DNSKEY RRset
	DNSKEY=48084 is now in the chain-of-trust
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (228 bytes) ;; HEADER SECTION ;; id = 31442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20200820000000 20200730000000 48084 cfts.co. GTrhRd2BXLAg3HIM5Wr9cGDLjQPjL0/Ne2VCwIvFHnvQXwnTOx0LJPLWJdK06m3uisgaVLAvThRp P8WkQCKQdwCMeEuf2NVWW/K0wOQJZ1uS130yvaQ9X1kAqN7eipCmZ2wWQDVzhUlYvmpXAbh7enTF p+UEuuYAPQoVOhA5zIg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cfts.co is authoritative for sapphire.cfts.co
	Query to ns3.cfts.co for sapphire.cfts.co/DNSKEY
	Received 514 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (514 bytes) ;; HEADER SECTION ;; id = 64770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2020072801 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20200820000000 20200730000000 48084 cfts.co. ToAR+AHaRGW+RbU1UnEIxVvHFcjFzIV/+fjSpNCzxd+nrba/VXSSLhCFMGE0CSV+at1agF0dEjcK nDGXv1BmQihLrzV+hY9fgG9E8xobn7KWbJyrviXghUmCsdc1wqfDSNgsn2ZnB0tfH68e8sxloaf/ 1S9cKqTnK+89k33Q9hk= ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN NSEC3 ( 1 0 7 4bdecd73741f2c0f vjelrb298trglpvganqbvh9a8u1on3qg A TXT RRSIG ) vjelrb298trglpvganqbvh9a8u1on3qf.cfts.co. 86400 IN RRSIG ( NSEC3 8 3 86400 20200820000000 20200730000000 48084 cfts.co. RqN08M8FxHbpYUHOAm5qIWfMRfhVbnavEYKBwRZ3zyDmpTfTbJj52Ig6ulLut4mnSXBh6Qa5Ub3Q WmF12RMmcIAR0BkJ7g50qGkgzGq4vk/i0ISl0LjNLimarM8G3mrfXFtFcATWIZECWh/x5ppK6x61 hjjCA5bdqnYt2x75vmQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found RRSIG signed by cfts.co zone
	Query to ns2.cfts.co for cfts.co/SOA
	Received 251 bytes from 146.185.146.236
	;; Answer received from 146.185.146.236 (251 bytes) ;; HEADER SECTION ;; id = 38716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2020072801 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20200820000000 20200730000000 48084 cfts.co. ToAR+AHaRGW+RbU1UnEIxVvHFcjFzIV/+fjSpNCzxd+nrba/VXSSLhCFMGE0CSV+at1agF0dEjcK nDGXv1BmQihLrzV+hY9fgG9E8xobn7KWbJyrviXghUmCsdc1wqfDSNgsn2ZnB0tfH68e8sxloaf/ 1S9cKqTnK+89k33Q9hk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.cfts.co for cfts.co/SOA
	Received 251 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (251 bytes) ;; HEADER SECTION ;; id = 40804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20200820000000 20200730000000 48084 cfts.co. ToAR+AHaRGW+RbU1UnEIxVvHFcjFzIV/+fjSpNCzxd+nrba/VXSSLhCFMGE0CSV+at1agF0dEjcK nDGXv1BmQihLrzV+hY9fgG9E8xobn7KWbJyrviXghUmCsdc1wqfDSNgsn2ZnB0tfH68e8sxloaf/ 1S9cKqTnK+89k33Q9hk= ) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2020072801 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.cfts.co for cfts.co/SOA
	Received 251 bytes from 192.241.226.147
	;; Answer received from 192.241.226.147 (251 bytes) ;; HEADER SECTION ;; id = 65375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cfts.co. IN SOA ;; ANSWER SECTION (2 records) cfts.co. 86400 IN RRSIG ( SOA 8 2 86400 20200820000000 20200730000000 48084 cfts.co. ToAR+AHaRGW+RbU1UnEIxVvHFcjFzIV/+fjSpNCzxd+nrba/VXSSLhCFMGE0CSV+at1agF0dEjcK nDGXv1BmQihLrzV+hY9fgG9E8xobn7KWbJyrviXghUmCsdc1wqfDSNgsn2ZnB0tfH68e8sxloaf/ 1S9cKqTnK+89k33Q9hk= ) cfts.co. 86400 IN SOA ( ns1.cfts.co. hosting.cfts.co. 2020072801 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.cfts.co for sapphire.cfts.co/A
	Received 228 bytes from 109.169.37.60
	;; Answer received from 109.169.37.60 (228 bytes) ;; HEADER SECTION ;; id = 6834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; sapphire.cfts.co. IN A ;; ANSWER SECTION (2 records) sapphire.cfts.co. 14400 IN A 109.169.37.60 sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20200820000000 20200730000000 48084 cfts.co. GTrhRd2BXLAg3HIM5Wr9cGDLjQPjL0/Ne2VCwIvFHnvQXwnTOx0LJPLWJdK06m3uisgaVLAvThRp P8WkQCKQdwCMeEuf2NVWW/K0wOQJZ1uS130yvaQ9X1kAqN7eipCmZ2wWQDVzhUlYvmpXAbh7enTF p+UEuuYAPQoVOhA5zIg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	sapphire.cfts.co A RR has value 109.169.37.60
	Found 1 RRSIGs over A RRset
	`sapphire.cfts.co. 14400 IN RRSIG ( A 8 3 14400 20200820000000 20200730000000 48084 cfts.co. GTrhRd2BXLAg3HIM5Wr9cGDLjQPjL0/Ne2VCwIvFHnvQXwnTOx0LJPLWJdK06m3uisgaVLAvThRp P8WkQCKQdwCMeEuf2NVWW/K0wOQJZ1uS130yvaQ9X1kAqN7eipCmZ2wWQDVzhUlYvmpXAbh7enTF p+UEuuYAPQoVOhA5zIg= )`
	RRSIG=48084 and DNSKEY=48084 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sapphire.cfts.co at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: