DNSSEC Analyzer - signotincepted.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2021-12-07 18:30:28 UTC, NTP stratum 16

Analyzing DNSSEC problems for signotincepted.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 19758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to h.root-servers.net for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 594 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (594 octets) ;; HEADER SECTION ;; id = 4068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20211220170000 20211207160000 14748 . PcOntzfDwezllugLKynJ3Sq/9dSuDpvAmWE5o6zhDagmrExDQKtZnROjxDz6XGeO9KgCU0aMbSQv yIFQ2NXQkTtdrY8egYPy2jZwWjjgiz7EdkDNjIJjMVLsxQhNTu7XbNDQAc3hs7HIsaSWJMZa0Fsm BLwMIn6r5piC8iTdvsrlfO6zUMYWdjseZGnxozNARd+xWHWQdIp7wbsLox6hJYqyPvj4avICUi3d v7OmGSnXVKQJGCNVkugo2t+fLWJffGR9N3WRK0KY6Ry4BwWyOgsnNbEDoBp4qOgX8CvcZo4f/F69 f3Gt/yti74yUHo/Tm2VjWycgWpUNkG/BJbLixw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (556 octets) ;; HEADER SECTION ;; id = 8406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20211220170000 20211207160000 14748 . PcOntzfDwezllugLKynJ3Sq/9dSuDpvAmWE5o6zhDagmrExDQKtZnROjxDz6XGeO9KgCU0aMbSQv yIFQ2NXQkTtdrY8egYPy2jZwWjjgiz7EdkDNjIJjMVLsxQhNTu7XbNDQAc3hs7HIsaSWJMZa0Fsm BLwMIn6r5piC8iTdvsrlfO6zUMYWdjseZGnxozNARd+xWHWQdIp7wbsLox6hJYqyPvj4avICUi3d v7OmGSnXVKQJGCNVkugo2t+fLWJffGR9N3WRK0KY6Ry4BwWyOgsnNbEDoBp4qOgX8CvcZo4f/F69 f3Gt/yti74yUHo/Tm2VjWycgWpUNkG/BJbLixw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to b.root-servers.net for nl/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 8179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20211220170000 20211207160000 14748 . PcOntzfDwezllugLKynJ3Sq/9dSuDpvAmWE5o6zhDagmrExDQKtZnROjxDz6XGeO9KgCU0aMbSQv yIFQ2NXQkTtdrY8egYPy2jZwWjjgiz7EdkDNjIJjMVLsxQhNTu7XbNDQAc3hs7HIsaSWJMZa0Fsm BLwMIn6r5piC8iTdvsrlfO6zUMYWdjseZGnxozNARd+xWHWQdIp7wbsLox6hJYqyPvj4avICUi3d v7OmGSnXVKQJGCNVkugo2t+fLWJffGR9N3WRK0KY6Ry4BwWyOgsnNbEDoBp4qOgX8CvcZo4f/F69 f3Gt/yti74yUHo/Tm2VjWycgWpUNkG/BJbLixw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20211220170000 20211207160000 14748 . PcOntzfDwezllugLKynJ3Sq/9dSuDpvAmWE5o6zhDagmrExDQKtZnROjxDz6XGeO9KgCU0aMbSQv yIFQ2NXQkTtdrY8egYPy2jZwWjjgiz7EdkDNjIJjMVLsxQhNTu7XbNDQAc3hs7HIsaSWJMZa0Fsm BLwMIn6r5piC8iTdvsrlfO6zUMYWdjseZGnxozNARd+xWHWQdIp7wbsLox6hJYqyPvj4avICUi3d v7OmGSnXVKQJGCNVkugo2t+fLWJffGR9N3WRK0KY6Ry4BwWyOgsnNbEDoBp4qOgX8CvcZo4f/F69 f3Gt/yti74yUHo/Tm2VjWycgWpUNkG/BJbLixw== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 893 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (893 octets) ;; HEADER SECTION ;; id = 48683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAcKJANbbveTo0as2AYV0Z4KGmkxKtFyCPOogIUvGwS/TO7wv2v+Pgw+Hl8D0lzt3RKJabbhg cYcFrDxhRK1uYjFYFrrZTblc2PmrUmDEsXD6sY6UwAziT8dJIIrnDZnuHI25Gw6gIrWFy2Q5DH49 pUgIhVmyNFyg9Z6OS8J17UEn ) ; Key ID = 38503 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20211220031051 20211206000832 34112 nl. TKA+iHiGOqtJd2zVfoscOvGSh/49//4hDUFWM03yM1tQkdWtVMo8VF87DKrh1jdWDIi9qPqskx2d gkZIhaQs5cZ4Gv5fByfsk3TeUTPFxDhbse2CxJw3hHJkuuCbNoMV+zFI1XI8b13nlONzRLQVA6Cl dWm6YoNNLAbaHOuFXcGSO7Hb6qI8LbENpPaHqWSGycb6AQVlEThCsI8D3YU0Vm6PUJJY+Fbrq/Yo 17p38CVflPLohQkP9PlBEhT/NypApRUbivSx0mEl5uTuJkSlaMjuV2iI8fNvnguRHBpO6vjkppuq AV97jK094VT6drBykDelq30PXX++D6ed/t7vhw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAcKJANbbveTo0as2AYV0Z4KGmkxKtFyCPOogIUvGwS/TO7wv2v+Pgw+Hl8D0lzt3RKJabbhg cYcFrDxhRK1uYjFYFrrZTblc2PmrUmDEsXD6sY6UwAziT8dJIIrnDZnuHI25Gw6gIrWFy2Q5DH49 pUgIhVmyNFyg9Z6OS8J17UEn ) ; Key ID = 38503`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20211220031051 20211206000832 34112 nl. TKA+iHiGOqtJd2zVfoscOvGSh/49//4hDUFWM03yM1tQkdWtVMo8VF87DKrh1jdWDIi9qPqskx2d gkZIhaQs5cZ4Gv5fByfsk3TeUTPFxDhbse2CxJw3hHJkuuCbNoMV+zFI1XI8b13nlONzRLQVA6Cl dWm6YoNNLAbaHOuFXcGSO7Hb6qI8LbENpPaHqWSGycb6AQVlEThCsI8D3YU0Vm6PUJJY+Fbrq/Yo 17p38CVflPLohQkP9PlBEhT/NypApRUbivSx0mEl5uTuJkSlaMjuV2iI8fNvnguRHBpO6vjkppuq AV97jK094VT6drBykDelq30PXX++D6ed/t7vhw== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=38503 is now in the chain-of-trust
	DNSKEY=31851 is now in the chain-of-trust
	Query to ns3.dns.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 470 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (470 octets) ;; HEADER SECTION ;; id = 5295 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20211217121901 20211203204035 38503 nl. sIS8lR3XYTku2qNkf+xPEMNDtnntw63G5unx/3Hc17IpyM5CdmposiTaaohqL2cJGnTMK+rf6yyK Q618KtvPfIAG41KJSN0QHMmp3ddJYv2+wsL8ppW8qSQeQBCBU7oRrme81I4gUPnhgVF8+GItlWrU 9z1f/P24n5N7tAgMIa0= ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to ns2.dns.nl for sidnlabs.nl/DNSKEY
	Received 443 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (443 octets) ;; HEADER SECTION ;; id = 3203 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20211217121901 20211203204035 38503 nl. sIS8lR3XYTku2qNkf+xPEMNDtnntw63G5unx/3Hc17IpyM5CdmposiTaaohqL2cJGnTMK+rf6yyK Q618KtvPfIAG41KJSN0QHMmp3ddJYv2+wsL8ppW8qSQeQBCBU7oRrme81I4gUPnhgVF8+GItlWrU 9z1f/P24n5N7tAgMIa0= ) ;; ADDITIONAL SECTION (7 records) ns5.sidn.nl. 3600 IN A 145.40.68.55 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns2.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (250 octets) ;; HEADER SECTION ;; id = 16414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20211217121901 20211203204035 38503 nl. sIS8lR3XYTku2qNkf+xPEMNDtnntw63G5unx/3Hc17IpyM5CdmposiTaaohqL2cJGnTMK+rf6yyK Q618KtvPfIAG41KJSN0QHMmp3ddJYv2+wsL8ppW8qSQeQBCBU7oRrme81I4gUPnhgVF8+GItlWrU 9z1f/P24n5N7tAgMIa0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20211217121901 20211203204035 38503 nl. sIS8lR3XYTku2qNkf+xPEMNDtnntw63G5unx/3Hc17IpyM5CdmposiTaaohqL2cJGnTMK+rf6yyK Q618KtvPfIAG41KJSN0QHMmp3ddJYv2+wsL8ppW8qSQeQBCBU7oRrme81I4gUPnhgVF8+GItlWrU 9z1f/P24n5N7tAgMIa0= )`
	RRSIG=38503 and DNSKEY=38503 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns3.sidn.nl for sidnlabs.nl/DNSKEY
	Received 763 bytes from 194.0.30.2
	;; Response received from 194.0.30.2 (763 octets) ;; HEADER SECTION ;; id = 35329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20211223115714 20211123105844 52720 sidnlabs.nl. lI79BhhdCPKQGlAYiv8roI6T281Lwh3+ZnlGl2zM+hbRupWblUMM/k0p05oivdiljT0NFAU3rl2v kzGXGsDr9rT1edcUtLDxTZkhcoczcZ5oAVqEollaMulZiMRwaMsC57oWj5gQ1JD5mKIfPrvuYRIq kbN4CcWfKkzEKY6fVWE5hFdyQTVVRaQGGNbCv9RBw0s5QAbTlwuY4aiOuRbIMsA2GqDJ+bQxL6ZJ UhJE9JeiiB3huQUDiHl6L2QVcWy7QXUqPGSFCOEEU35WIG3r5Ry8wwy9lqvK7/2/YCGAFVSjIB5t d8b9nI45iTyJf1AmvpKh8bvd85pze2Bn90ZPag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20211223115714 20211123105844 52720 sidnlabs.nl. lI79BhhdCPKQGlAYiv8roI6T281Lwh3+ZnlGl2zM+hbRupWblUMM/k0p05oivdiljT0NFAU3rl2v kzGXGsDr9rT1edcUtLDxTZkhcoczcZ5oAVqEollaMulZiMRwaMsC57oWj5gQ1JD5mKIfPrvuYRIq kbN4CcWfKkzEKY6fVWE5hFdyQTVVRaQGGNbCv9RBw0s5QAbTlwuY4aiOuRbIMsA2GqDJ+bQxL6ZJ UhJE9JeiiB3huQUDiHl6L2QVcWy7QXUqPGSFCOEEU35WIG3r5Ry8wwy9lqvK7/2/YCGAFVSjIB5t d8b9nI45iTyJf1AmvpKh8bvd85pze2Bn90ZPag== )`
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns1.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 404 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (404 octets) ;; HEADER SECTION ;; id = 62320 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20211225132917 20211125132606 20853 sidnlabs.nl. ylgix9Da55g8dirMH0qUdgwewSTJYUbVWL3cZKkVx4FCebzCr6MSO5w3S9xXfcFTxuu0DASo1yWq Hp5SrfS6MLDrVBMgZPo0ZKU+a8q0aA1FPvMfjHUYqRsaeyE+qxJ6xHtnPtwcImS+UBMkn4oZatVR pChlD8ohg/U7IXd9v5I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1097 bytes from 145.40.68.55
	;; Response received from 145.40.68.55 (1097 octets) ;; HEADER SECTION ;; id = 26162 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20211225132917 20211125132606 20853 sidnlabs.nl. ylgix9Da55g8dirMH0qUdgwewSTJYUbVWL3cZKkVx4FCebzCr6MSO5w3S9xXfcFTxuu0DASo1yWq Hp5SrfS6MLDrVBMgZPo0ZKU+a8q0aA1FPvMfjHUYqRsaeyE+qxJ6xHtnPtwcImS+UBMkn4oZatVR pChlD8ohg/U7IXd9v5I= ) ;; ADDITIONAL SECTION (14 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20220103023143 20211204015514 20853 sidnlabs.nl. hq/Hz0/ouxBcGWwmVhblyqICpCc47aGLlwn3eWVXAWT1LmL0OPKYood/onQylVAqAE/7XCyY2GG7 Mv+th1F0dG7bJLsM4I2KRaJ6K9PXinJxOwCGwUyNVZV4HVUJivZLwquNZ79hrp/hFXV0Kdz87xZ0 uYmMJGehttwlrovC5t4= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20220103023143 20211204015514 20853 sidnlabs.nl. FkR5KjRbtjk2RaAWTGHSfbTl6yRkuQoG3AkjQ/3FxdaiFRwBkdbyH6Iep2tYdcjXZpCM41mnu4kQ EvyED7QXnIfWdj9fZcYUqLaiu8aCGPebAL9EtnX3zvmNT2oIdrp/Eslk5DhFjQqoEuq8Hus9sMba EPnAFHBM15gd3Ha76kE= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20211228005828 20211128005047 20853 sidnlabs.nl. KQhBBHal+F2ixIDthUrcto61Umt4hCbS2lj57wswGNLrlbvm6qMJNb8Dyhp4VeVlEf+YlL1jnKdQ rIm0eeI0pmAwrumKkuCo8PxvCX4Rg3HvZtspbTS64FOdYAI1xZKTx/LiloEa1q6ZM1pp+wEDsAxG zVMWkTAFieyAnciTMS4= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 194.0.30.2
	;; Response received from 194.0.30.2 (262 octets) ;; HEADER SECTION ;; id = 50384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20211225132917 20211125132606 20853 sidnlabs.nl. ylgix9Da55g8dirMH0qUdgwewSTJYUbVWL3cZKkVx4FCebzCr6MSO5w3S9xXfcFTxuu0DASo1yWq Hp5SrfS6MLDrVBMgZPo0ZKU+a8q0aA1FPvMfjHUYqRsaeyE+qxJ6xHtnPtwcImS+UBMkn4oZatVR pChlD8ohg/U7IXd9v5I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20211225132917 20211125132606 20853 sidnlabs.nl. ylgix9Da55g8dirMH0qUdgwewSTJYUbVWL3cZKkVx4FCebzCr6MSO5w3S9xXfcFTxuu0DASo1yWq Hp5SrfS6MLDrVBMgZPo0ZKU+a8q0aA1FPvMfjHUYqRsaeyE+qxJ6xHtnPtwcImS+UBMkn4oZatVR pChlD8ohg/U7IXd9v5I= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to yadifa.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (897 octets) ;; HEADER SECTION ;; id = 14927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (285 octets) ;; HEADER SECTION ;; id = 56139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yadifa.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (387 octets) ;; HEADER SECTION ;; id = 10669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 352 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (352 octets) ;; HEADER SECTION ;; id = 17507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: powerdns.sidnlabs.nl, bind9.sidnlabs.nl, nsd4.sidnlabs.nl, knot.sidnlabs.nl, yadifa.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (404 octets) ;; HEADER SECTION ;; id = 28857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (387 octets) ;; HEADER SECTION ;; id = 55748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (285 octets) ;; HEADER SECTION ;; id = 2856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (417 octets) ;; HEADER SECTION ;; id = 47264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone signotincepted.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/NS
	Received 371 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (371 octets) ;; HEADER SECTION ;; id = 7778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found signotincepted.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, powerdns.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DS
	Received 302 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (302 octets) ;; HEADER SECTION ;; id = 51342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27101 8 2 aa3112e83a916db72486ca6ca966edf55bad16ea3d055ba3e865de60d7c58778 ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. X52uUAYeW8KLDKqgY49n4XwDkaKsNTO+6HPigB9BAQSMOJJb+6dtMfIh5X7BFi9Sl7gDkKuKsTdn 7pe+aQQ0+qdKyYkGNVuGdvbdENo6pkQI7lRUgJkQkuDQHiGmexFc5PzB7EWuZpayQH8221yY2GRa xY/WFPAovEcs+SB00d0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for signotincepted.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=27101/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. X52uUAYeW8KLDKqgY49n4XwDkaKsNTO+6HPigB9BAQSMOJJb+6dtMfIh5X7BFi9Sl7gDkKuKsTdn 7pe+aQQ0+qdKyYkGNVuGdvbdENo6pkQI7lRUgJkQkuDQHiGmexFc5PzB7EWuZpayQH8221yY2GRa xY/WFPAovEcs+SB00d0= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=27101/SHA-256 is now in the chain-of-trust
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27101 8 2 aa3112e83a916db72486ca6ca966edf55bad16ea3d055ba3e865de60d7c58778 )`
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (417 octets) ;; HEADER SECTION ;; id = 18506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for signotincepted.bad-dnssec.wb.sidnlabs.nl
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbUoaEqXe5MHiIZmTA4TsVxp8Z+i0C8edoSvR6KHbzJkmilyQNo8iZD1kVArhHazRqeHg5nH au4FfJZqmQ5pljNTl4eBs1hKUiOzS8YDz/JPchLyVuSQqaBNiHU9XFWmDS33grEOZJ0pzbgheeqm Bt/aIuYiwjDvpA+stc5Ec+UR ) ; Key ID = 27101`
	DNSKEY=27101/SEP is now in the chain-of-trust
	DS=27101/SHA-256 verifies DNSKEY=27101/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. SFO1bM4Hix80x95BzOE9DtL5zl+19EuLHuJGcCUml6kEvd2xk9i6F6m5CAwdKwD3FYoDmkXbR3aA KQl94tj5HHI2cqLNULXRCMSCq/YLp2Qr3G8HN279u0rl2o+chvHmvNTJ8qBHiteL/2QvKgSVsQxp rh3EiajaP4qx2xYDoJQ= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (285 octets) ;; HEADER SECTION ;; id = 28503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 618 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (618 octets) ;; HEADER SECTION ;; id = 22497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (322 octets) ;; HEADER SECTION ;; id = 54996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (322 octets) ;; HEADER SECTION ;; id = 62195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 629 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (629 octets) ;; HEADER SECTION ;; id = 39590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. VBPRMjdgc90uVdJaPEIBYRSY94/nONx/KibvHMF2JwjkSzyBCb/BS+ee2N7vaqKk6KcbWFJTN8y+ QEibo6acpgpvOmL8Ab9ymnOmJ24OeeS3VEU0/vNpxaDUy8NvEgL/+BNRoIqFXgaBYB4shsbRm88b OnoifLCJ5b+cw5DYDY4= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (285 octets) ;; HEADER SECTION ;; id = 61119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (285 octets) ;; HEADER SECTION ;; id = 8187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	powerdns.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (285 octets) ;; HEADER SECTION ;; id = 41924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (285 octets) ;; HEADER SECTION ;; id = 29011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yadifa.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (285 octets) ;; HEADER SECTION ;; id = 65465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (587 octets) ;; HEADER SECTION ;; id = 57043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsd4.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (587 octets) ;; HEADER SECTION ;; id = 16254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (598 octets) ;; HEADER SECTION ;; id = 19542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bind9.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (598 octets) ;; HEADER SECTION ;; id = 52777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. inOVG9n0pl0MzW3rJfqpohRDpwFdg/GZfbPljOVxZIiH+vEGgu4C4p5A0kQJolA1kNedfdfNmBjC to2fU94PbTsPoCSjIFAjeYb7q0VmcAN5vVRpEMiJ3/3gfxOkXF8vEuNek0zqf7lCdPhi4HWNrM8k 0JQc/WikAhy7ESlw7cU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20311216103316 20301216103316 27101 signotincepted.bad-dnssec.wb.sidnlabs.nl. LArHOXlF6uXEzpbf7kpvYmLxsgNXUrCEhi+4DXqo3TDt0pBp2vGJePqF5240CVIOe7LgRWNZI+oh Q50HIfDUJtGRkx/JKpgu0dIaH6CaD2TH4GrH8ISsOredLG2IOoDrNbeaUoBQv5Aj9BDZeK0xlp3w XQBYtpoZsfWjjPQfA7U= )`
	RRSIG=27101 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test signotincepted.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: