DNSSEC Analyzer - signotincepted.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2021-06-17 23:40:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for signotincepted.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 41308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to g.root-servers.net for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 594 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (594 bytes) ;; HEADER SECTION ;; id = 30374 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210630170000 20210617160000 14631 . C1wakdugQD54OTo2DLSsCE/aFto2YkuDasVspqPFXA13NOj9OZU4/yy8gWOFeE7GMBvUvZ9PItpA QYU/mpKsA0+HU63AiaUngDN5vwi4qpuwmvsi/jHawazvaTmQyOHl6cqjbTNmIbu2+6y7b9YlFBAP FM4FBaN06PR1CFPT35i3cjcQ7+3imcgejeJ92B7ErlsPKyh9/4Fc3f6NlO4g2txy1dwMTEO9YK+H JA9Cwb+lebdliOSRk3f/JC7AgqPx6EDVc83KVYnQGGkodjFWxk/x1RsLFxDw8dHiIt7VyGi3P2mA dzVvA4pnpcth4cQfr0xZdD8PyhcvdFGK66Vh1g== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for nl/DNSKEY
	Received 556 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (556 bytes) ;; HEADER SECTION ;; id = 53328 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210630170000 20210617160000 14631 . C1wakdugQD54OTo2DLSsCE/aFto2YkuDasVspqPFXA13NOj9OZU4/yy8gWOFeE7GMBvUvZ9PItpA QYU/mpKsA0+HU63AiaUngDN5vwi4qpuwmvsi/jHawazvaTmQyOHl6cqjbTNmIbu2+6y7b9YlFBAP FM4FBaN06PR1CFPT35i3cjcQ7+3imcgejeJ92B7ErlsPKyh9/4Fc3f6NlO4g2txy1dwMTEO9YK+H JA9Cwb+lebdliOSRk3f/JC7AgqPx6EDVc83KVYnQGGkodjFWxk/x1RsLFxDw8dHiIt7VyGi3P2mA dzVvA4pnpcth4cQfr0xZdD8PyhcvdFGK66Vh1g== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to j.root-servers.net for nl/DS
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 44785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210630170000 20210617160000 14631 . C1wakdugQD54OTo2DLSsCE/aFto2YkuDasVspqPFXA13NOj9OZU4/yy8gWOFeE7GMBvUvZ9PItpA QYU/mpKsA0+HU63AiaUngDN5vwi4qpuwmvsi/jHawazvaTmQyOHl6cqjbTNmIbu2+6y7b9YlFBAP FM4FBaN06PR1CFPT35i3cjcQ7+3imcgejeJ92B7ErlsPKyh9/4Fc3f6NlO4g2txy1dwMTEO9YK+H JA9Cwb+lebdliOSRk3f/JC7AgqPx6EDVc83KVYnQGGkodjFWxk/x1RsLFxDw8dHiIt7VyGi3P2mA dzVvA4pnpcth4cQfr0xZdD8PyhcvdFGK66Vh1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20210630170000 20210617160000 14631 . C1wakdugQD54OTo2DLSsCE/aFto2YkuDasVspqPFXA13NOj9OZU4/yy8gWOFeE7GMBvUvZ9PItpA QYU/mpKsA0+HU63AiaUngDN5vwi4qpuwmvsi/jHawazvaTmQyOHl6cqjbTNmIbu2+6y7b9YlFBAP FM4FBaN06PR1CFPT35i3cjcQ7+3imcgejeJ92B7ErlsPKyh9/4Fc3f6NlO4g2txy1dwMTEO9YK+H JA9Cwb+lebdliOSRk3f/JC7AgqPx6EDVc83KVYnQGGkodjFWxk/x1RsLFxDw8dHiIt7VyGi3P2mA dzVvA4pnpcth4cQfr0xZdD8PyhcvdFGK66Vh1g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 893 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (893 bytes) ;; HEADER SECTION ;; id = 53343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbqARjMuNL7+wBWfinmoaunopTgyWA/RaK3MJQlu59mBp2Ead53tKbFu1BShZUXqUcQVI3/Z 898ynHrwPogiNLub4V37nSUmsH4IPSvOU7WL4WaSJ2aohSWUJZbReld4pXo/VjOsTYOBvcsBcFa4 0WOYCnVYAmJyji0TrYug+KPv ) ; Key ID = 59668 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN6QIAq1mCamESixu2OHxzb8xnHJlZ8DN//JHm5k0+RWWxJbwK5WFxQ9rBVlWUPRAOc9UND SRDwZYiDtPSJ+fura4nJt609KVMrMgWJnTBLh4kdtsAbGeg6waJUSlT0IItN4s4yLdGd3ioBGqrt r7JbalbvximF7dPn9hAYFYjx ) ; Key ID = 30171 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210623031952 20210609000835 34112 nl. l51lHIP2oOhwVVukh/LArwdB3MIBEgcCC9srQLW2A4d8jOTtEwTeJtmzGg2Lse/RmvrbvRUKlhrj l0fcKvKl/pR1toDLYBqzeiZpzSOnI8AIvS5puYfqjouqMIBJWBDgOj2OxPGgBif8CACCJrFVoQQE E3E9ES/6ARJGe66UWcUE17EYEu7q9t0S+tu8fUrSpq11BxaOQqRv2UqlvsGD+wsW1lSQkBAp5g2S Ypqc6AdA+/PC9Mo5J1pmJO5x80ktTPDWPjNnL8XjwtxUJpiy3m9amwAa4/mK7DthXhw6sSfdf8JS CTwdiWKE555Tu8XvQavKMosSXiJf+XdrF/Iy2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbqARjMuNL7+wBWfinmoaunopTgyWA/RaK3MJQlu59mBp2Ead53tKbFu1BShZUXqUcQVI3/Z 898ynHrwPogiNLub4V37nSUmsH4IPSvOU7WL4WaSJ2aohSWUJZbReld4pXo/VjOsTYOBvcsBcFa4 0WOYCnVYAmJyji0TrYug+KPv ) ; Key ID = 59668`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN6QIAq1mCamESixu2OHxzb8xnHJlZ8DN//JHm5k0+RWWxJbwK5WFxQ9rBVlWUPRAOc9UND SRDwZYiDtPSJ+fura4nJt609KVMrMgWJnTBLh4kdtsAbGeg6waJUSlT0IItN4s4yLdGd3ioBGqrt r7JbalbvximF7dPn9hAYFYjx ) ; Key ID = 30171`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210623031952 20210609000835 34112 nl. l51lHIP2oOhwVVukh/LArwdB3MIBEgcCC9srQLW2A4d8jOTtEwTeJtmzGg2Lse/RmvrbvRUKlhrj l0fcKvKl/pR1toDLYBqzeiZpzSOnI8AIvS5puYfqjouqMIBJWBDgOj2OxPGgBif8CACCJrFVoQQE E3E9ES/6ARJGe66UWcUE17EYEu7q9t0S+tu8fUrSpq11BxaOQqRv2UqlvsGD+wsW1lSQkBAp5g2S Ypqc6AdA+/PC9Mo5J1pmJO5x80ktTPDWPjNnL8XjwtxUJpiy3m9amwAa4/mK7DthXhw6sSfdf8JS CTwdiWKE555Tu8XvQavKMosSXiJf+XdrF/Iy2A== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=59668 is now in the chain-of-trust
	DNSKEY=30171 is now in the chain-of-trust
	Query to ns3.dns.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 470 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (470 bytes) ;; HEADER SECTION ;; id = 19695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210629090955 20210615070845 30171 nl. DROtWaSdZ2ErG15/V72uGH3k1jFwXieKIk+u6fG0xFjzt+oVxbtGXliWO3/FcEWHdrg/hxB9fNnb +u59nvTZ0AKTcJj7ckzOSwTypaHgyZhhJ9etz332LN0hw4+LHv06WwulAcz8ugDdIH6ltXXkQZTk fRItyu4xVsezRtI5Su4= ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to ns3.dns.nl for sidnlabs.nl/DNSKEY
	Received 441 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (441 bytes) ;; HEADER SECTION ;; id = 7319 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210629090955 20210615070845 30171 nl. DROtWaSdZ2ErG15/V72uGH3k1jFwXieKIk+u6fG0xFjzt+oVxbtGXliWO3/FcEWHdrg/hxB9fNnb +u59nvTZ0AKTcJj7ckzOSwTypaHgyZhhJ9etz332LN0hw4+LHv06WwulAcz8ugDdIH6ltXXkQZTk fRItyu4xVsezRtI5Su4= ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns2.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.146.106.42
	;; Answer received from 194.146.106.42 (250 bytes) ;; HEADER SECTION ;; id = 64108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210629090955 20210615070845 30171 nl. DROtWaSdZ2ErG15/V72uGH3k1jFwXieKIk+u6fG0xFjzt+oVxbtGXliWO3/FcEWHdrg/hxB9fNnb +u59nvTZ0AKTcJj7ckzOSwTypaHgyZhhJ9etz332LN0hw4+LHv06WwulAcz8ugDdIH6ltXXkQZTk fRItyu4xVsezRtI5Su4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210629090955 20210615070845 30171 nl. DROtWaSdZ2ErG15/V72uGH3k1jFwXieKIk+u6fG0xFjzt+oVxbtGXliWO3/FcEWHdrg/hxB9fNnb +u59nvTZ0AKTcJj7ckzOSwTypaHgyZhhJ9etz332LN0hw4+LHv06WwulAcz8ugDdIH6ltXXkQZTk fRItyu4xVsezRtI5Su4= )`
	RRSIG=30171 and DNSKEY=30171 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns3.sidn.nl for sidnlabs.nl/DNSKEY
	Received 763 bytes from 194.0.30.2
	;; Answer received from 194.0.30.2 (763 bytes) ;; HEADER SECTION ;; id = 50373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210626151119 20210527142254 52720 sidnlabs.nl. TvgDdJKtrUCY1mtZDAA4Pi+5i0r6uwBudvjETu5+dbBeSLO46FEx/vUyoND1ecyvuuDHxFynFBG0 tVrVB8hUihuF6qi/w83TST/sUtgYvwUGKq+VihodaJovio0unz8RcJehtNFOQS/qQjbl/RiA8Pzg t+gN3cag+Db6SrSnpikQZyYGGdCK7dmPxPOeVH4szRGEMjtJSRlGISxZBGqhlMZSpW58Zj9PcPze 8+LBE/RF/v6P74J2hOsK+OpDuvb9JWdhc7X/eRM3UqScFkYYficFlU4DzJM0TpIR6h5zUm2YQmkH LFKNJBezemyCESNcbd1HqAEfALvmvIiw3kR0vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210626151119 20210527142254 52720 sidnlabs.nl. TvgDdJKtrUCY1mtZDAA4Pi+5i0r6uwBudvjETu5+dbBeSLO46FEx/vUyoND1ecyvuuDHxFynFBG0 tVrVB8hUihuF6qi/w83TST/sUtgYvwUGKq+VihodaJovio0unz8RcJehtNFOQS/qQjbl/RiA8Pzg t+gN3cag+Db6SrSnpikQZyYGGdCK7dmPxPOeVH4szRGEMjtJSRlGISxZBGqhlMZSpW58Zj9PcPze 8+LBE/RF/v6P74J2hOsK+OpDuvb9JWdhc7X/eRM3UqScFkYYficFlU4DzJM0TpIR6h5zUm2YQmkH LFKNJBezemyCESNcbd1HqAEfALvmvIiw3kR0vA== )`
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns1.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 404 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (404 bytes) ;; HEADER SECTION ;; id = 50820 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210628182743 20210529175803 20853 sidnlabs.nl. leGxqzl5uoMGbcfLKbETePLUwuwvmN5m5FzMRbzEo/WDIipD18wwAZafV/xfXwVmQFn7kT/qmIRk drwh2bV1Qowm2GoJ9ZGl9iSdr0RrRce6a8k7WYmE++Z0uP7aqYhWOE4Bbji5Beq7b2tXJ1cNEY3Y o2HVqrULDOJJeIolEOA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1097 bytes from 194.0.30.2
	;; Answer received from 194.0.30.2 (1097 bytes) ;; HEADER SECTION ;; id = 56423 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210628182743 20210529175803 20853 sidnlabs.nl. leGxqzl5uoMGbcfLKbETePLUwuwvmN5m5FzMRbzEo/WDIipD18wwAZafV/xfXwVmQFn7kT/qmIRk drwh2bV1Qowm2GoJ9ZGl9iSdr0RrRce6a8k7WYmE++Z0uP7aqYhWOE4Bbji5Beq7b2tXJ1cNEY3Y o2HVqrULDOJJeIolEOA= ) ;; ADDITIONAL SECTION (14 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210707055427 20210607054415 20853 sidnlabs.nl. H1hAX1G91SeCrBHLAyXuar+lLLmoKDfkwO+su6n0QHBGLwnTMs62b+dKcllhraSvukm06XxRCrVC mnohcAaxDXTV3kQ3dkF9B0KQSrcLVlXM8nicAqu65A6f49qACln46ATund4As0hGWhRgBECpwWas FU6HtsTKykCwu7yruDI= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210707055427 20210607054415 20853 sidnlabs.nl. N9tDC1oNlveovFAX/QfY25yI19fpT5jWz0gKg3fnlFJRynaLXJsKgPDiek9Ak+Yr9O7dqAK0V4/9 gdcX10jf0HGIlKFlsqj7wTFeL33GTyUlVEBKfDgfNu4ycjUmbwh1w3y7sUKaBEoAwCwEMBtBKgEb 5LPM4H1hAreFMnGOkKU= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210701035016 20210601034808 20853 sidnlabs.nl. xwAX33cPPO6nfOGUzzDQdDf4+SrdbaPDm2ujIqc5hivMdypbdWxF6Mxq98vUKAfcjhCNgsChtYYP t/PY0OwkhwdtqY8WJMDdeLl63Sx/AWcQt7hP2tDZFy6hZMIMaiYEVPrM7SqKchRpCQ4x1Dzr0g5z /k3TQATWoWtLRMZFZ/g= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 194.0.30.2
	;; Answer received from 194.0.30.2 (262 bytes) ;; HEADER SECTION ;; id = 43481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210628182743 20210529175803 20853 sidnlabs.nl. leGxqzl5uoMGbcfLKbETePLUwuwvmN5m5FzMRbzEo/WDIipD18wwAZafV/xfXwVmQFn7kT/qmIRk drwh2bV1Qowm2GoJ9ZGl9iSdr0RrRce6a8k7WYmE++Z0uP7aqYhWOE4Bbji5Beq7b2tXJ1cNEY3Y o2HVqrULDOJJeIolEOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210628182743 20210529175803 20853 sidnlabs.nl. leGxqzl5uoMGbcfLKbETePLUwuwvmN5m5FzMRbzEo/WDIipD18wwAZafV/xfXwVmQFn7kT/qmIRk drwh2bV1Qowm2GoJ9ZGl9iSdr0RrRce6a8k7WYmE++Z0uP7aqYhWOE4Bbji5Beq7b2tXJ1cNEY3Y o2HVqrULDOJJeIolEOA= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to nsd4.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (897 bytes) ;; HEADER SECTION ;; id = 31541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (587 bytes) ;; HEADER SECTION ;; id = 32825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsd4.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (387 bytes) ;; HEADER SECTION ;; id = 32494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (341 bytes) ;; HEADER SECTION ;; id = 40333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, nsd4.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (404 bytes) ;; HEADER SECTION ;; id = 12570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (387 bytes) ;; HEADER SECTION ;; id = 41923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 35615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (417 bytes) ;; HEADER SECTION ;; id = 31623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone signotincepted.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/NS
	Received 371 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (371 bytes) ;; HEADER SECTION ;; id = 404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found signotincepted.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DS
	Received 302 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (302 bytes) ;; HEADER SECTION ;; id = 50643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27101 8 2 aa3112e83a916db72486ca6ca966edf55bad16ea3d055ba3e865de60d7c58778 ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. X52uUAYeW8KLDKqgY49n4XwDkaKsNTO+6HPigB9BAQSMOJJb+6dtMfIh5X7BFi9Sl7gDkKuKsTdn 7pe+aQQ0+qdKyYkGNVuGdvbdENo6pkQI7lRUgJkQkuDQHiGmexFc5PzB7EWuZpayQH8221yY2GRa xY/WFPAovEcs+SB00d0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for signotincepted.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=27101/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. X52uUAYeW8KLDKqgY49n4XwDkaKsNTO+6HPigB9BAQSMOJJb+6dtMfIh5X7BFi9Sl7gDkKuKsTdn 7pe+aQQ0+qdKyYkGNVuGdvbdENo6pkQI7lRUgJkQkuDQHiGmexFc5PzB7EWuZpayQH8221yY2GRa xY/WFPAovEcs+SB00d0= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=27101/SHA-256 is now in the chain-of-trust
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27101 8 2 aa3112e83a916db72486ca6ca966edf55bad16ea3d055ba3e865de60d7c58778 )`
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (417 bytes) ;; HEADER SECTION ;; id = 59427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for signotincepted.bad-dnssec.wb.sidnlabs.nl
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101`
	DNSKEY=27101/SEP is now in the chain-of-trust
	DS=27101/SHA-256 verifies DNSKEY=27101/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (285 bytes) ;; HEADER SECTION ;; id = 31597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	powerdns.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 618 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (618 bytes) ;; HEADER SECTION ;; id = 54272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (322 bytes) ;; HEADER SECTION ;; id = 23252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 629 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (629 bytes) ;; HEADER SECTION ;; id = 54137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (322 bytes) ;; HEADER SECTION ;; id = 24111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (285 bytes) ;; HEADER SECTION ;; id = 44585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (598 bytes) ;; HEADER SECTION ;; id = 27841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bind9.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (598 bytes) ;; HEADER SECTION ;; id = 505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (285 bytes) ;; HEADER SECTION ;; id = 63573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yadifa.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (285 bytes) ;; HEADER SECTION ;; id = 38232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (587 bytes) ;; HEADER SECTION ;; id = 6501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsd4.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (587 bytes) ;; HEADER SECTION ;; id = 6993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 53483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 31849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test signotincepted.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: