DNSSEC Debugger - signotincepted.bad-dnssec.wb.sidnlabs.nl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-13 09:18:53 UTC

Analyzing DNSSEC problems for signotincepted.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 60608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to b.root-servers.net for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 594 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 594 octets ;; HEADER SECTION ;; id = 18612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260826050000 20260813040000 57780 . hwl+4GHn+Z13b2AeH3DcLMIb0N6e4lbvYhoGbY5MCgOe4FeTT1avWsmPr106dyltlSQGzy68sBHv PuLS6NIsBQdHY/tsbpxjDEE6bDCLQUjEIi6VGxuiIkqy/5EKz5ighEtbcVPW1jzRqatyQmO+g9kM r0xoYM8ivwWDAPEmj3iya42toMU9/KojfAPgfeX86hWbMoQKvzJDpzP/SA+1Q/li2PcR7gEzRjPz yRCy4zrrgeJoxSk5uF/01Xe0zKVT5enwd42q8ygTQA55vHC8KRuzMcoyX2tVcVq32h03K+nFBreg 8hisaDkQnovegtj+hRBUUrohI7sZW0v0Y2F56Q== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 556 octets ;; HEADER SECTION ;; id = 62385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260826050000 20260813040000 57780 . hwl+4GHn+Z13b2AeH3DcLMIb0N6e4lbvYhoGbY5MCgOe4FeTT1avWsmPr106dyltlSQGzy68sBHv PuLS6NIsBQdHY/tsbpxjDEE6bDCLQUjEIi6VGxuiIkqy/5EKz5ighEtbcVPW1jzRqatyQmO+g9kM r0xoYM8ivwWDAPEmj3iya42toMU9/KojfAPgfeX86hWbMoQKvzJDpzP/SA+1Q/li2PcR7gEzRjPz yRCy4zrrgeJoxSk5uF/01Xe0zKVT5enwd42q8ygTQA55vHC8KRuzMcoyX2tVcVq32h03K+nFBreg 8hisaDkQnovegtj+hRBUUrohI7sZW0v0Y2F56Q== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to h.root-servers.net for nl/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 20802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260826050000 20260813040000 57780 . hwl+4GHn+Z13b2AeH3DcLMIb0N6e4lbvYhoGbY5MCgOe4FeTT1avWsmPr106dyltlSQGzy68sBHv PuLS6NIsBQdHY/tsbpxjDEE6bDCLQUjEIi6VGxuiIkqy/5EKz5ighEtbcVPW1jzRqatyQmO+g9kM r0xoYM8ivwWDAPEmj3iya42toMU9/KojfAPgfeX86hWbMoQKvzJDpzP/SA+1Q/li2PcR7gEzRjPz yRCy4zrrgeJoxSk5uF/01Xe0zKVT5enwd42q8ygTQA55vHC8KRuzMcoyX2tVcVq32h03K+nFBreg 8hisaDkQnovegtj+hRBUUrohI7sZW0v0Y2F56Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260826050000 20260813040000 57780 . hwl+4GHn+Z13b2AeH3DcLMIb0N6e4lbvYhoGbY5MCgOe4FeTT1avWsmPr106dyltlSQGzy68sBHv PuLS6NIsBQdHY/tsbpxjDEE6bDCLQUjEIi6VGxuiIkqy/5EKz5ighEtbcVPW1jzRqatyQmO+g9kM r0xoYM8ivwWDAPEmj3iya42toMU9/KojfAPgfeX86hWbMoQKvzJDpzP/SA+1Q/li2PcR7gEzRjPz yRCy4zrrgeJoxSk5uF/01Xe0zKVT5enwd42q8ygTQA55vHC8KRuzMcoyX2tVcVq32h03K+nFBreg 8hisaDkQnovegtj+hRBUUrohI7sZW0v0Y2F56Q== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 289 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 289 octets ;; HEADER SECTION ;; id = 4114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260828203854 20260731073722 17153 nl. 2NQBxEWx9vSGE+JQ0mYpWSnvsfL1gKudGFoSYLzEnwkKflmF/izx0EJFNAMlXap5V04qX2SO06P6 s9Nq6cdAjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260828203854 20260731073722 17153 nl. 2NQBxEWx9vSGE+JQ0mYpWSnvsfL1gKudGFoSYLzEnwkKflmF/izx0EJFNAMlXap5V04qX2SO06P6 s9Nq6cdAjA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=467 is now in the chain-of-trust
	Query to ns1.dns.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 491 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 491 octets ;; HEADER SECTION ;; id = 4216 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sidnlabs.nl. 3600 IN NS ns1.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260903142039 20260806010821 467 nl. PfaVnC6eL7mchNoxTKlEDjUglvnvrZPxFNokSs260dKu+ygG2yUT4zLH7KBFmmAKAMVqKVs5CWmG qaJAYENkXQ== ) ;; ADDITIONAL SECTION (9 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns1.sidn.nl. 3600 IN A 192.174.68.144 ns1.sidn.nl. 3600 IN AAAA 2001:67c:1bc::144 ns2.sidn.nl. 3600 IN A 176.97.158.144 ns2.sidn.nl. 3600 IN AAAA 2001:67c:10b8::144 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.nl for sidnlabs.nl/DNSKEY
	Received 439 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 439 octets ;; HEADER SECTION ;; id = 34463 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns1.sidn.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260903142039 20260806010821 467 nl. PfaVnC6eL7mchNoxTKlEDjUglvnvrZPxFNokSs260dKu+ygG2yUT4zLH7KBFmmAKAMVqKVs5CWmG qaJAYENkXQ== ) ;; ADDITIONAL SECTION (9 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns1.sidn.nl. 3600 IN A 192.174.68.144 ns2.sidn.nl. 3600 IN A 176.97.158.144 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns1.sidn.nl. 3600 IN AAAA 2001:67c:1bc::144 ns2.sidn.nl. 3600 IN AAAA 2001:67c:10b8::144 ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 186 octets ;; HEADER SECTION ;; id = 54634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260903142039 20260806010821 467 nl. PfaVnC6eL7mchNoxTKlEDjUglvnvrZPxFNokSs260dKu+ygG2yUT4zLH7KBFmmAKAMVqKVs5CWmG qaJAYENkXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260903142039 20260806010821 467 nl. PfaVnC6eL7mchNoxTKlEDjUglvnvrZPxFNokSs260dKu+ygG2yUT4zLH7KBFmmAKAMVqKVs5CWmG qaJAYENkXQ== )`
	RRSIG=467 and DNSKEY=467 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns1.sidn.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 192.174.68.144
	;; Response received from [192.174.68.144] 227 octets ;; HEADER SECTION ;; id = 32663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260824041801 20260810040951 11261 sidnlabs.nl. qgd7kjc8zbSgHI7lUR64RQ1Ms2SY9UL+d2U8mXlYwZ+vgA3lAaRmrWQVk3YzWlC8mFwAiZdKqKYR 2BImhkCaYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260824041801 20260810040951 11261 sidnlabs.nl. qgd7kjc8zbSgHI7lUR64RQ1Ms2SY9UL+d2U8mXlYwZ+vgA3lAaRmrWQVk3YzWlC8mFwAiZdKqKYR 2BImhkCaYA== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns2.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 1188 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 1188 octets ;; HEADER SECTION ;; id = 35007 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260823181015 20260809171729 11261 sidnlabs.nl. tZCC0DNvrwA8TfPNVjumnzjBPEXQhe97x9s9rcYeyF6+FevOnzWmhSGOjsVyonSU/HnI8xOX5MQk UsaMw4CQig== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260823170216 20260809165718 11261 sidnlabs.nl. JKCXjo78ax31HgG6cCaskk2McUaSa1ehJoHmOntpFb2oCkJj5rqWS7k9EYP3QOzlApBYrXER24SQ VniBjC3Ulg== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260823170216 20260809165718 11261 sidnlabs.nl. 4bUHLZdvjeNm1ZL7zF3amsGnWAmeIFwHt3I6PFq6ejQsYJtV4iAN+8GEaYvwEMnt3DgVGQXB0LKf X4uj/77OYg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260824023614 20260810014432 11261 sidnlabs.nl. DfAJ1NkcRZwwPaXyScId5iHiqAGBXDcebMOuBnScirePUGJzl0sfgj3l/dWX/21JxGPT+1x42Wvr 2UfTh1ABZQ== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260824023614 20260810014432 11261 sidnlabs.nl. CT6vKat76PWmXSqb07vquwah6BolZxCOmXWGZAUtKR11c6dXaRV5x3H6rNHNNRJrNw8/ZZIHu1Au fPChtJ4t/A== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260823234807 20260809230922 11261 sidnlabs.nl. Rzr6IEFUOeuPO05vTLPnevWviwMQk7A1RG9mOO3wbNYwCdGlH8spIbDtu6BCsn31IOxK0sqJ2GD7 kXLd0bZFKA== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260823234807 20260809230922 11261 sidnlabs.nl. 6bGpZttxXCUGZi9lJ5j16Kq+ifBkwgGpDBBWdW/A1Hj9Ilm2kcE+DjS39nfmNuGkkISz1jvS9m5w RVAnyjeO8A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1590 bytes from 176.97.158.144
	;; Response received from [176.97.158.144] 1590 octets ;; HEADER SECTION ;; id = 4795 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 21 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260823181015 20260809171729 11261 sidnlabs.nl. tZCC0DNvrwA8TfPNVjumnzjBPEXQhe97x9s9rcYeyF6+FevOnzWmhSGOjsVyonSU/HnI8xOX5MQk UsaMw4CQig== ) ;; ADDITIONAL SECTION (21 records) yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260824033043 20260810031030 11261 sidnlabs.nl. FtiZgtL7gw2f+k7v7qY8myf++xQgJa+5omaOD5kPNJsHC6q960cvXeuKVlbak8PUc0mtKSqGdAM4 7QDHN/37xg== ) bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260823234807 20260809230922 11261 sidnlabs.nl. Rzr6IEFUOeuPO05vTLPnevWviwMQk7A1RG9mOO3wbNYwCdGlH8spIbDtu6BCsn31IOxK0sqJ2GD7 kXLd0bZFKA== ) nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260824023614 20260810014432 11261 sidnlabs.nl. DfAJ1NkcRZwwPaXyScId5iHiqAGBXDcebMOuBnScirePUGJzl0sfgj3l/dWX/21JxGPT+1x42Wvr 2UfTh1ABZQ== ) powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260823205740 20260809200612 11261 sidnlabs.nl. 1SQAMggYhb6m8Z7zZ0O3z2rfV1iFAYnPLawog3uG8y1DsvH78aPZ6s49Z5QMVylbRtyIdLrBKQsr TK2l4UyFOA== ) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260823170216 20260809165718 11261 sidnlabs.nl. JKCXjo78ax31HgG6cCaskk2McUaSa1ehJoHmOntpFb2oCkJj5rqWS7k9EYP3QOzlApBYrXER24SQ VniBjC3Ulg== ) yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260824033043 20260810031030 11261 sidnlabs.nl. wp4e6Kaenfr1Xoowws1Gs4k53WlV/pKLAfCS0KBFf5lCD/UpZaktjuJFggcPvZ8YH7AN2IzsZcsw I9X5p0rfnQ== ) bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260823234807 20260809230922 11261 sidnlabs.nl. 6bGpZttxXCUGZi9lJ5j16Kq+ifBkwgGpDBBWdW/A1Hj9Ilm2kcE+DjS39nfmNuGkkISz1jvS9m5w RVAnyjeO8A== ) nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260824023614 20260810014432 11261 sidnlabs.nl. CT6vKat76PWmXSqb07vquwah6BolZxCOmXWGZAUtKR11c6dXaRV5x3H6rNHNNRJrNw8/ZZIHu1Au fPChtJ4t/A== ) powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260823205740 20260809200612 11261 sidnlabs.nl. TxW/E2cqW8NziKfrocOhQnfgtDL1BDG4ud7mVg+pWWvWM59Hr8zQAGAaKjd2fLMpzuyuI+h/u6pr CjKyZkEaEQ== ) knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260823170216 20260809165718 11261 sidnlabs.nl. 4bUHLZdvjeNm1ZL7zF3amsGnWAmeIFwHt3I6PFq6ejQsYJtV4iAN+8GEaYvwEMnt3DgVGQXB0LKf X4uj/77OYg== ) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 94.198.159.8
	;; Response received from [94.198.159.8] 198 octets ;; HEADER SECTION ;; id = 56748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260823181015 20260809171729 11261 sidnlabs.nl. tZCC0DNvrwA8TfPNVjumnzjBPEXQhe97x9s9rcYeyF6+FevOnzWmhSGOjsVyonSU/HnI8xOX5MQk UsaMw4CQig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260823181015 20260809171729 11261 sidnlabs.nl. tZCC0DNvrwA8TfPNVjumnzjBPEXQhe97x9s9rcYeyF6+FevOnzWmhSGOjsVyonSU/HnI8xOX5MQk UsaMw4CQig== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to nsd4.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 897 octets ;; HEADER SECTION ;; id = 44075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Response received from [94.198.159.28] 285 octets ;; HEADER SECTION ;; id = 57528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	yadifa.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 387 octets ;; HEADER SECTION ;; id = 18392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.28
	;; Response received from [94.198.159.28] 341 octets ;; HEADER SECTION ;; id = 40492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, powerdns.sidnlabs.nl, yadifa.sidnlabs.nl, bind9.sidnlabs.nl, nsd4.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 404 octets ;; HEADER SECTION ;; id = 17332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 387 octets ;; HEADER SECTION ;; id = 23314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 587 octets ;; HEADER SECTION ;; id = 46485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 417 octets ;; HEADER SECTION ;; id = 3638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; keytag 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone signotincepted.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/NS
	Received 371 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 371 octets ;; HEADER SECTION ;; id = 35470 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found signotincepted.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl