DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-08 19:16:07 UTC

Analyzing DNSSEC problems for see.you

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 63127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to a.root-servers.net for see.you/A
	Received 879 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 879 octets ;; HEADER SECTION ;; id = 21954 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) you. 172800 IN NS dnsd.nic.you. you. 172800 IN NS dns4.nic.you. you. 172800 IN NS dnsb.nic.you. you. 172800 IN NS dns2.nic.you. you. 172800 IN NS dnsc.nic.you. you. 172800 IN NS dns3.nic.you. you. 172800 IN NS dnsa.nic.you. you. 172800 IN NS dns1.nic.you. you. 86400 IN DS ( 41656 8 2 4d7022047e13ae416d1e12ac44c5eb5ab58c4bf1e4e86dd47c9dd62106a0e348 ) you. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . n9OBF3YPCMFPhny4wjxHOOOORUxiXUVv1LKwhlgOkEIPzNT7+7kqgeUlSRgmltZ/VNc1i5nFDeiD I7mk6p+Heg1eGDB6OENg0XCKPwWGVXb4s1eeyNrXNAGnc2RckBX/iAskiUMw1W2AoduJ/cUMFE5C ywh6S8fvfQ1xxKszEniRxaqdV3kgpgrbnVPcLAVnXr8nexpD/Q9FsZnINNeGpgHdSs4D6ATLEQMk 18Eh/lbBI5i+TvBh8hYgx56mHMw3F6/Q533jBm9CFAsZl3x53fAXwQbSzwyvJr46UYr2odXHmnlH jNNnR8NDNzADPEJBX+ob47uEjUT2Gyabxrb09w== ) ;; ADDITIONAL SECTION (17 records) dnsd.nic.you. 172800 IN A 156.154.103.3 dnsd.nic.you. 172800 IN AAAA 2610:a1:1010::3 dns4.nic.you. 172800 IN A 43.230.50.89 dns4.nic.you. 172800 IN AAAA 2401:fd80:406::89 dnsb.nic.you. 172800 IN A 156.154.101.3 dnsb.nic.you. 172800 IN AAAA 2001:502:2eda::3 dns2.nic.you. 172800 IN A 103.49.82.89 dns2.nic.you. 172800 IN AAAA 2401:fd80:402::89 dnsc.nic.you. 172800 IN A 156.154.102.3 dnsc.nic.you. 172800 IN AAAA 2610:a1:1009::3 dns3.nic.you. 172800 IN A 213.248.222.89 dns3.nic.you. 172800 IN AAAA 2a01:618:406::89 dnsa.nic.you. 172800 IN A 156.154.100.3 dnsa.nic.you. 172800 IN AAAA 2001:502:ad09::3 dns1.nic.you. 172800 IN A 213.248.218.89 dns1.nic.you. 172800 IN AAAA 2a01:618:402::89 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for you/DNSKEY
	Received 875 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 875 octets ;; HEADER SECTION ;; id = 63908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; you. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) you. 172800 IN NS dnsd.nic.you. you. 172800 IN NS dns4.nic.you. you. 172800 IN NS dns2.nic.you. you. 172800 IN NS dns1.nic.you. you. 172800 IN NS dns3.nic.you. you. 172800 IN NS dnsc.nic.you. you. 172800 IN NS dnsa.nic.you. you. 172800 IN NS dnsb.nic.you. you. 86400 IN DS ( 41656 8 2 4d7022047e13ae416d1e12ac44c5eb5ab58c4bf1e4e86dd47c9dd62106a0e348 ) you. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . n9OBF3YPCMFPhny4wjxHOOOORUxiXUVv1LKwhlgOkEIPzNT7+7kqgeUlSRgmltZ/VNc1i5nFDeiD I7mk6p+Heg1eGDB6OENg0XCKPwWGVXb4s1eeyNrXNAGnc2RckBX/iAskiUMw1W2AoduJ/cUMFE5C ywh6S8fvfQ1xxKszEniRxaqdV3kgpgrbnVPcLAVnXr8nexpD/Q9FsZnINNeGpgHdSs4D6ATLEQMk 18Eh/lbBI5i+TvBh8hYgx56mHMw3F6/Q533jBm9CFAsZl3x53fAXwQbSzwyvJr46UYr2odXHmnlH jNNnR8NDNzADPEJBX+ob47uEjUT2Gyabxrb09w== ) ;; ADDITIONAL SECTION (17 records) dns1.nic.you. 172800 IN A 213.248.218.89 dns2.nic.you. 172800 IN A 103.49.82.89 dns3.nic.you. 172800 IN A 213.248.222.89 dns4.nic.you. 172800 IN A 43.230.50.89 dnsa.nic.you. 172800 IN A 156.154.100.3 dnsb.nic.you. 172800 IN A 156.154.101.3 dnsc.nic.you. 172800 IN A 156.154.102.3 dnsd.nic.you. 172800 IN A 156.154.103.3 dns1.nic.you. 172800 IN AAAA 2a01:618:402::89 dns2.nic.you. 172800 IN AAAA 2401:fd80:402::89 dns3.nic.you. 172800 IN AAAA 2a01:618:406::89 dns4.nic.you. 172800 IN AAAA 2401:fd80:406::89 dnsa.nic.you. 172800 IN AAAA 2001:502:ad09::3 dnsb.nic.you. 172800 IN AAAA 2001:502:2eda::3 dnsc.nic.you. 172800 IN AAAA 2610:a1:1009::3 dnsd.nic.you. 172800 IN AAAA 2610:a1:1010::3 ;; { "EDNS-VERSION": 0 }
	Found child zone you

you

	Checking DS between . and you
	Query to l.root-servers.net for you/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 9524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; you. IN DS ;; ANSWER SECTION (2 records) you. 86400 IN DS ( 41656 8 2 4d7022047e13ae416d1e12ac44c5eb5ab58c4bf1e4e86dd47c9dd62106a0e348 ) you. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . n9OBF3YPCMFPhny4wjxHOOOORUxiXUVv1LKwhlgOkEIPzNT7+7kqgeUlSRgmltZ/VNc1i5nFDeiD I7mk6p+Heg1eGDB6OENg0XCKPwWGVXb4s1eeyNrXNAGnc2RckBX/iAskiUMw1W2AoduJ/cUMFE5C ywh6S8fvfQ1xxKszEniRxaqdV3kgpgrbnVPcLAVnXr8nexpD/Q9FsZnINNeGpgHdSs4D6ATLEQMk 18Eh/lbBI5i+TvBh8hYgx56mHMw3F6/Q533jBm9CFAsZl3x53fAXwQbSzwyvJr46UYr2odXHmnlH jNNnR8NDNzADPEJBX+ob47uEjUT2Gyabxrb09w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for you in the . zone
	DS=41656/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`you. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . n9OBF3YPCMFPhny4wjxHOOOORUxiXUVv1LKwhlgOkEIPzNT7+7kqgeUlSRgmltZ/VNc1i5nFDeiD I7mk6p+Heg1eGDB6OENg0XCKPwWGVXb4s1eeyNrXNAGnc2RckBX/iAskiUMw1W2AoduJ/cUMFE5C ywh6S8fvfQ1xxKszEniRxaqdV3kgpgrbnVPcLAVnXr8nexpD/Q9FsZnINNeGpgHdSs4D6ATLEQMk 18Eh/lbBI5i+TvBh8hYgx56mHMw3F6/Q533jBm9CFAsZl3x53fAXwQbSzwyvJr46UYr2odXHmnlH jNNnR8NDNzADPEJBX+ob47uEjUT2Gyabxrb09w== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=41656/SHA-256 is now in the chain-of-trust
	`you. 86400 IN DS ( 41656 8 2 4d7022047e13ae416d1e12ac44c5eb5ab58c4bf1e4e86dd47c9dd62106a0e348 )`
	Query to dns3.nic.you for you/DNSKEY
	Received 875 bytes from 213.248.222.89
	;; Response received from [213.248.222.89] 875 octets ;; HEADER SECTION ;; id = 3227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; you. IN DNSKEY ;; ANSWER SECTION (3 records) you. 7200 IN DNSKEY ( 256 3 8 AwEAAa3vmZT+Fr0Ra/wdFdxATYspXbPsVFjwkYK8+xIh9Q+b+xqrTmtaCnHsrSA9lDIPdIuH3D1b oOhv6wH/yDLUTiszgjLoi6mPKueaBGLDvAe1WD/391Bxn7OXMd3KTRPBckX/3fdC/A/XvXTQ7oal eRXYpgjfvA1/KxsvF0jTwV3vHxNtZYxe3ieT/jKx5xpltFHr7vRBIwFy+LyBGMhI9NcgzRSjobAM dO7ojBnd0+4u0FE9A9dI3J8F0wFlZgK70uzE08OXYXpS1o+x1ukLy742OUzJ1PwS2oxqVhvyC+Or nkilYvVCz2JTIFJZcpe7+5BS9ERfRWbu4dVqB+8q2ss= ) ; keytag 15933 you. 7200 IN DNSKEY ( 257 3 8 AwEAAZ76djkSqeD9ssMy75aNTDeBFJWCYox27gYpJDqBDgDZIVoCEttBEooNkOD6pzJaAQnY1mAv eAlEvCRc2+hgx5AMFhkVoncXd2SKYB6H7i5BXLLQJiCteht+BKihiK7BW6vfTEZqmbkypMNsqhEE 4TGMA6Fzk1cP6qOLU3q99I0wfc2Hgzb9L8aycLvzofM62E6W7/TgmZw+1bymAZ8DuTHApmG3I4mm DrNUvbRnna9oaQxVv3mkQNJD0rppP/dng7nFs0h1C9ckW3DimGxfAi3UIj12cLELYZSkWjx50nFj u+6p67whx73pKkmFt+kJrzkGzn4U85CBViNw1wWbh50= ) ; keytag 41656 you. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261013083035 20260908074419 41656 you. DVAy4u/aMsAKsDcxnQ3sEoE5rUwX+1Wpa7CPqx8qRnqyrCrovetOnZ/c85oqrK1/Ou3av9vGg6a4 rWdIn7Hlq9wrOfQA+6aAkPHbi1SoeEompQ4V+7xGjSiiyq68uClMom01zs502+HBBeqBjg1JgG+N lkKKnkp6xzwBXxXlEL0Jseua+8ex5nPC6aODaZD7l7FhsjbHXDkNsOkgtlyDMKoJ6Q9nQRlMa2+1 7gPOjGHFYmsxbo8ssxsxwuVkWWr7iqMu5WlpgbEROXL77BCa3cKXUvC5OT1xpJEozo4xKJyx8Ol8 OgTYfubyzLsMCCK1/9eUG08NwVzxYUjUw8wbzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for you
	`you. 7200 IN DNSKEY ( 256 3 8 AwEAAa3vmZT+Fr0Ra/wdFdxATYspXbPsVFjwkYK8+xIh9Q+b+xqrTmtaCnHsrSA9lDIPdIuH3D1b oOhv6wH/yDLUTiszgjLoi6mPKueaBGLDvAe1WD/391Bxn7OXMd3KTRPBckX/3fdC/A/XvXTQ7oal eRXYpgjfvA1/KxsvF0jTwV3vHxNtZYxe3ieT/jKx5xpltFHr7vRBIwFy+LyBGMhI9NcgzRSjobAM dO7ojBnd0+4u0FE9A9dI3J8F0wFlZgK70uzE08OXYXpS1o+x1ukLy742OUzJ1PwS2oxqVhvyC+Or nkilYvVCz2JTIFJZcpe7+5BS9ERfRWbu4dVqB+8q2ss= ) ; keytag 15933`
	`you. 7200 IN DNSKEY ( 257 3 8 AwEAAZ76djkSqeD9ssMy75aNTDeBFJWCYox27gYpJDqBDgDZIVoCEttBEooNkOD6pzJaAQnY1mAv eAlEvCRc2+hgx5AMFhkVoncXd2SKYB6H7i5BXLLQJiCteht+BKihiK7BW6vfTEZqmbkypMNsqhEE 4TGMA6Fzk1cP6qOLU3q99I0wfc2Hgzb9L8aycLvzofM62E6W7/TgmZw+1bymAZ8DuTHApmG3I4mm DrNUvbRnna9oaQxVv3mkQNJD0rppP/dng7nFs0h1C9ckW3DimGxfAi3UIj12cLELYZSkWjx50nFj u+6p67whx73pKkmFt+kJrzkGzn4U85CBViNw1wWbh50= ) ; keytag 41656`
	DNSKEY=41656/SEP is now in the chain-of-trust
	DS=41656/SHA-256 verifies DNSKEY=41656/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`you. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261013083035 20260908074419 41656 you. DVAy4u/aMsAKsDcxnQ3sEoE5rUwX+1Wpa7CPqx8qRnqyrCrovetOnZ/c85oqrK1/Ou3av9vGg6a4 rWdIn7Hlq9wrOfQA+6aAkPHbi1SoeEompQ4V+7xGjSiiyq68uClMom01zs502+HBBeqBjg1JgG+N lkKKnkp6xzwBXxXlEL0Jseua+8ex5nPC6aODaZD7l7FhsjbHXDkNsOkgtlyDMKoJ6Q9nQRlMa2+1 7gPOjGHFYmsxbo8ssxsxwuVkWWr7iqMu5WlpgbEROXL77BCa3cKXUvC5OT1xpJEozo4xKJyx8Ol8 OgTYfubyzLsMCCK1/9eUG08NwVzxYUjUw8wbzg== )`
	RRSIG=41656 and DNSKEY=41656/SEP verifies the DNSKEY RRset
	DNSKEY=15933 is now in the chain-of-trust
	Query to dnsc.nic.you for see.you/A
	Received 435 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 435 octets ;; HEADER SECTION ;; id = 24407 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) see.you. 172800 IN NS yichun.ns.cloudflare.com. see.you. 172800 IN NS bristol.ns.cloudflare.com. see.you. 3600 IN DS ( 2371 13 2 cf873c1efbbabb84da061d3d8223ad07d9bd022ba0872161024a2a9e84a3c740 ) see.you. 3600 IN RRSIG ( DS 8 2 3600 20261013055704 20260908053352 15933 you. Pw1bYNbS444o/NtBVjgi/O6H7X+wM8LQxVCL3dDiL75754BndFtJUmgF+UiLyzUGf0HVelFfW/hR sDV+eDM/wVDhsuwGY5P5yUkbNvuWVtgzvUlp+qWa4r0xPbsZxeBg/JG+h2+UStwoYm1rshQh4zsL xOQdF7o/3ahd6LP2KV8Wje1LlyGqr6ERh1Da9FV+iXEHEgnp3wA1q6krbotfkMb7nijugsAyfiV+ wgMRKV70mfuRZOmksaCYndRE53R5dm3K/1qJ0xVKebwCj2VIcFDpkMLALzU7CjroFLEyGcytm+xM SjWdpCeKHcstbwjzeyutVtAgBZby1iJ5LjhcKA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dnsa.nic.you for see.you/DNSKEY
	Received 435 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 435 octets ;; HEADER SECTION ;; id = 14546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) see.you. 172800 IN NS bristol.ns.cloudflare.com. see.you. 172800 IN NS yichun.ns.cloudflare.com. see.you. 3600 IN DS ( 2371 13 2 cf873c1efbbabb84da061d3d8223ad07d9bd022ba0872161024a2a9e84a3c740 ) see.you. 3600 IN RRSIG ( DS 8 2 3600 20261013055704 20260908053352 15933 you. Pw1bYNbS444o/NtBVjgi/O6H7X+wM8LQxVCL3dDiL75754BndFtJUmgF+UiLyzUGf0HVelFfW/hR sDV+eDM/wVDhsuwGY5P5yUkbNvuWVtgzvUlp+qWa4r0xPbsZxeBg/JG+h2+UStwoYm1rshQh4zsL xOQdF7o/3ahd6LP2KV8Wje1LlyGqr6ERh1Da9FV+iXEHEgnp3wA1q6krbotfkMb7nijugsAyfiV+ wgMRKV70mfuRZOmksaCYndRE53R5dm3K/1qJ0xVKebwCj2VIcFDpkMLALzU7CjroFLEyGcytm+xM SjWdpCeKHcstbwjzeyutVtAgBZby1iJ5LjhcKA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone see.you

see.you

	Checking DS between you and see.you
	Query to dnsd.nic.you for see.you/DS
	Received 375 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 375 octets ;; HEADER SECTION ;; id = 3862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN DS ;; ANSWER SECTION (2 records) see.you. 3600 IN DS ( 2371 13 2 cf873c1efbbabb84da061d3d8223ad07d9bd022ba0872161024a2a9e84a3c740 ) see.you. 3600 IN RRSIG ( DS 8 2 3600 20261013055704 20260908053352 15933 you. Pw1bYNbS444o/NtBVjgi/O6H7X+wM8LQxVCL3dDiL75754BndFtJUmgF+UiLyzUGf0HVelFfW/hR sDV+eDM/wVDhsuwGY5P5yUkbNvuWVtgzvUlp+qWa4r0xPbsZxeBg/JG+h2+UStwoYm1rshQh4zsL xOQdF7o/3ahd6LP2KV8Wje1LlyGqr6ERh1Da9FV+iXEHEgnp3wA1q6krbotfkMb7nijugsAyfiV+ wgMRKV70mfuRZOmksaCYndRE53R5dm3K/1qJ0xVKebwCj2VIcFDpkMLALzU7CjroFLEyGcytm+xM SjWdpCeKHcstbwjzeyutVtAgBZby1iJ5LjhcKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for see.you in the you zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`see.you. 3600 IN RRSIG ( DS 8 2 3600 20261013055704 20260908053352 15933 you. Pw1bYNbS444o/NtBVjgi/O6H7X+wM8LQxVCL3dDiL75754BndFtJUmgF+UiLyzUGf0HVelFfW/hR sDV+eDM/wVDhsuwGY5P5yUkbNvuWVtgzvUlp+qWa4r0xPbsZxeBg/JG+h2+UStwoYm1rshQh4zsL xOQdF7o/3ahd6LP2KV8Wje1LlyGqr6ERh1Da9FV+iXEHEgnp3wA1q6krbotfkMb7nijugsAyfiV+ wgMRKV70mfuRZOmksaCYndRE53R5dm3K/1qJ0xVKebwCj2VIcFDpkMLALzU7CjroFLEyGcytm+xM SjWdpCeKHcstbwjzeyutVtAgBZby1iJ5LjhcKA== )`
	RRSIG=15933 and DNSKEY=15933 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`see.you. 3600 IN DS ( 2371 13 2 cf873c1efbbabb84da061d3d8223ad07d9bd022ba0872161024a2a9e84a3c740 )`
	Query to yichun.ns.cloudflare.com for see.you/DNSKEY
	Received 299 bytes from 172.64.33.248
	;; Response received from [172.64.33.248] 299 octets ;; HEADER SECTION ;; id = 5372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN DNSKEY ;; ANSWER SECTION (3 records) see.you. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 see.you. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 see.you. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261102192054 20260902192054 2371 see.you. L11jI+08Dc6linDTA6qSVug2U1DxrCI94w0mcBbS3NWIwAU/u/DgJUSLxtD6RSKjwn59inA0nyNQ cF/pgNX6Kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for see.you
	`see.you. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`see.you. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`see.you. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261102192054 20260902192054 2371 see.you. L11jI+08Dc6linDTA6qSVug2U1DxrCI94w0mcBbS3NWIwAU/u/DgJUSLxtD6RSKjwn59inA0nyNQ cF/pgNX6Kg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to bristol.ns.cloudflare.com for see.you/A
	Received 187 bytes from 162.159.38.47
	;; Response received from [162.159.38.47] 187 octets ;; HEADER SECTION ;; id = 24635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN A ;; ANSWER SECTION (4 records) see.you. 300 IN A 104.26.13.47 see.you. 300 IN A 104.26.12.47 see.you. 300 IN A 172.67.74.127 see.you. 300 IN RRSIG ( A 13 2 300 20260909201608 20260907181608 34505 see.you. 0o2e1JyJmwXFV3XT+Zje9H6vMDPNWvbnFzCEo1K/5FwaP2wSCmsQP6R0Aso8svf1f0YRHVQb3Cfa uqbLUOwu1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bristol.ns.cloudflare.com is authoritative for see.you
	Found RRSIG signed by see.you zone
	Query to yichun.ns.cloudflare.com for see.you/SOA
	Received 204 bytes from 172.64.33.248
	;; Response received from [172.64.33.248] 204 octets ;; HEADER SECTION ;; id = 47634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN SOA ;; ANSWER SECTION (2 records) see.you. 1800 IN SOA ( bristol.ns.cloudflare.com. dns.cloudflare.com. 2413948959 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) see.you. 1800 IN RRSIG ( SOA 13 2 1800 20260909201608 20260907181608 34505 see.you. C+2dYPDPT70LPHSUmvBnLK/BuUqXGnEw8UYkQ78YF9xmLxrf4h49ww5kOE/VWG4etLSPmpI4H9+Z 3yWZe+DJXA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to bristol.ns.cloudflare.com for see.you/A
	see.you A RR has value 104.26.13.47
	see.you A RR has value 104.26.12.47
	see.you A RR has value 172.67.74.127
	Found 1 RRSIGs over A RRset
	`see.you. 300 IN RRSIG ( A 13 2 300 20260909201608 20260907181608 34505 see.you. 0o2e1JyJmwXFV3XT+Zje9H6vMDPNWvbnFzCEo1K/5FwaP2wSCmsQP6R0Aso8svf1f0YRHVQb3Cfa uqbLUOwu1Q== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

see.you

	Query to yichun.ns.cloudflare.com for see.you/A
	Received 187 bytes from 173.245.59.248
	;; Response received from [173.245.59.248] 187 octets ;; HEADER SECTION ;; id = 38265 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; see.you. IN A ;; ANSWER SECTION (4 records) see.you. 300 IN A 104.26.12.47 see.you. 300 IN A 172.67.74.127 see.you. 300 IN A 104.26.13.47 see.you. 300 IN RRSIG ( A 13 2 300 20260909201608 20260907181608 34505 see.you. DpLketoFMmw4nLy5oRBLVDXfyE/sdm9FX1RwyG+lPj0nzVF2YPJNQfJ5d/A6Lz1hcayWunpGzfS0 Kp0OaHkAvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	yichun.ns.cloudflare.com is authoritative for see.you
	Found RRSIG signed by see.you zone
	Query to yichun.ns.cloudflare.com for see.you/A
	see.you A RR has value 104.26.12.47
	see.you A RR has value 172.67.74.127
	see.you A RR has value 104.26.13.47
	Found 1 RRSIGs over A RRset
	`see.you. 300 IN RRSIG ( A 13 2 300 20260909201608 20260907181608 34505 see.you. DpLketoFMmw4nLy5oRBLVDXfyE/sdm9FX1RwyG+lPj0nzVF2YPJNQfJ5d/A6Lz1hcayWunpGzfS0 Kp0OaHkAvQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test see.you at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: