DNSSEC Debugger

Domain Name:

Time: 2026-03-16 18:38:27 UTC

Analyzing DNSSEC problems for sm.ms

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 25945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for sm.ms/A
	Received 627 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 627 octets ;; HEADER SECTION ;; id = 45996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ms. 172800 IN NS a.lactld.org. ms. 172800 IN NS ns1.anycastdns.cz. ms. 172800 IN NS ns2.anycastdns.cz. ms. 172800 IN NS ms-ns.anycast.pch.net. ms. 86400 IN DS ( 50317 8 2 a32757d135853b428cc7825f0bb88fa79f73a2fe497fb4e9f69611cc1687572a ) ms. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . fqH9BrAml1Rqz7HSF1STcwa6VbbkFJAgz/emKCIlZDlGDin1Z5m2hZbbggIzaNC/Uyac2VqUuuWi 0O5u0P6wOpRMC0tEs1Uc2NM498bVBJbcvNMdDPgCQX8gOt5gbSkXczAzbYECHxUsA+PNgqyWLvGG pesL8rgzS/Ie48fya/iwNQ7DcWIHeL8WVfyzReohDgDIdLKCoZysCctN2nyEFxqyf42u1zdnlccI ly3EoBD3yOIyvP1VUMLnK0mtiRp6dQOhMSrrDe2hFD+5senOD+lnVb5dUqi8K9c2QP134Q01P1BM 2lq04aT07bxUZKqA51H/1H75qsEaLJQp0a+mBw== ) ;; ADDITIONAL SECTION (8 records) a.lactld.org. 172800 IN A 200.0.68.10 ns1.anycastdns.cz. 172800 IN A 185.38.108.108 ns2.anycastdns.cz. 172800 IN A 185.28.194.194 ms-ns.anycast.pch.net. 172800 IN A 204.61.216.33 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns1.anycastdns.cz. 172800 IN AAAA 2a00:fea0:dead::beef ms-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6033:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ms/DNSKEY
	Received 624 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 624 octets ;; HEADER SECTION ;; id = 64670 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ms. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ms. 172800 IN NS a.lactld.org. ms. 172800 IN NS ns1.anycastdns.cz. ms. 172800 IN NS ns2.anycastdns.cz. ms. 172800 IN NS ms-ns.anycast.pch.net. ms. 86400 IN DS ( 50317 8 2 a32757d135853b428cc7825f0bb88fa79f73a2fe497fb4e9f69611cc1687572a ) ms. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . fqH9BrAml1Rqz7HSF1STcwa6VbbkFJAgz/emKCIlZDlGDin1Z5m2hZbbggIzaNC/Uyac2VqUuuWi 0O5u0P6wOpRMC0tEs1Uc2NM498bVBJbcvNMdDPgCQX8gOt5gbSkXczAzbYECHxUsA+PNgqyWLvGG pesL8rgzS/Ie48fya/iwNQ7DcWIHeL8WVfyzReohDgDIdLKCoZysCctN2nyEFxqyf42u1zdnlccI ly3EoBD3yOIyvP1VUMLnK0mtiRp6dQOhMSrrDe2hFD+5senOD+lnVb5dUqi8K9c2QP134Q01P1BM 2lq04aT07bxUZKqA51H/1H75qsEaLJQp0a+mBw== ) ;; ADDITIONAL SECTION (8 records) a.lactld.org. 172800 IN A 200.0.68.10 ns1.anycastdns.cz. 172800 IN A 185.38.108.108 ns2.anycastdns.cz. 172800 IN A 185.28.194.194 ms-ns.anycast.pch.net. 172800 IN A 204.61.216.33 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns1.anycastdns.cz. 172800 IN AAAA 2a00:fea0:dead::beef ms-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6033:ad::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ms

	Checking DS between . and ms
	Query to k.root-servers.net for ms/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 1093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ms. IN DS ;; ANSWER SECTION (2 records) ms. 86400 IN DS ( 50317 8 2 a32757d135853b428cc7825f0bb88fa79f73a2fe497fb4e9f69611cc1687572a ) ms. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . fqH9BrAml1Rqz7HSF1STcwa6VbbkFJAgz/emKCIlZDlGDin1Z5m2hZbbggIzaNC/Uyac2VqUuuWi 0O5u0P6wOpRMC0tEs1Uc2NM498bVBJbcvNMdDPgCQX8gOt5gbSkXczAzbYECHxUsA+PNgqyWLvGG pesL8rgzS/Ie48fya/iwNQ7DcWIHeL8WVfyzReohDgDIdLKCoZysCctN2nyEFxqyf42u1zdnlccI ly3EoBD3yOIyvP1VUMLnK0mtiRp6dQOhMSrrDe2hFD+5senOD+lnVb5dUqi8K9c2QP134Q01P1BM 2lq04aT07bxUZKqA51H/1H75qsEaLJQp0a+mBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ms in the . zone
	DS=50317/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ms. 86400 IN RRSIG ( DS 8 1 86400 20260329170000 20260316160000 21831 . fqH9BrAml1Rqz7HSF1STcwa6VbbkFJAgz/emKCIlZDlGDin1Z5m2hZbbggIzaNC/Uyac2VqUuuWi 0O5u0P6wOpRMC0tEs1Uc2NM498bVBJbcvNMdDPgCQX8gOt5gbSkXczAzbYECHxUsA+PNgqyWLvGG pesL8rgzS/Ie48fya/iwNQ7DcWIHeL8WVfyzReohDgDIdLKCoZysCctN2nyEFxqyf42u1zdnlccI ly3EoBD3yOIyvP1VUMLnK0mtiRp6dQOhMSrrDe2hFD+5senOD+lnVb5dUqi8K9c2QP134Q01P1BM 2lq04aT07bxUZKqA51H/1H75qsEaLJQp0a+mBw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=50317/SHA-256 is now in the chain-of-trust
	`ms. 86400 IN DS ( 50317 8 2 a32757d135853b428cc7825f0bb88fa79f73a2fe497fb4e9f69611cc1687572a )`
	Query to ms-ns.anycast.pch.net for ms/DNSKEY
	Received 1149 bytes from 204.61.216.33
	;; Response received from [204.61.216.33] 1149 octets ;; HEADER SECTION ;; id = 14529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ms. IN DNSKEY ;; ANSWER SECTION (4 records) ms. 3600 IN DNSKEY ( 256 3 8 AwEAAbEP3oFCADb7DY6jH8MX40QlGSQJeGizU7oZ1Rrt5u8YhUo8ulupaadM5JRLRhiKsKcTOdY2 GaxB0IEkIAJxMtRdAl5COYw2PmOg97duhWiny1A9JgeWUOW8lOx9LfUOugXhKugMzfl3WpGg7k8/ 7kgphp0qjGlIWvf65u0dj6sY5KD3y6oS05tgXK2akTSYwFxzRqkSjSffYb/MfDX654op1WY0Uph4 CxZFvv9cAh3huFwYijQ82v1AJaWrEm/adXhyNKiwtTYAiFP1cLZa8Rws8NQYefRxxbXaOEOBccZ9 IrFOMeDfk/lgmtNVZpCdZIw7/IBKr1RRXq6kCZvy2+8= ) ; keytag 31078 ms. 3600 IN DNSKEY ( 257 3 8 AwEAAbYNRw50O3vzqEpy+5sWBlYzlg3aoGsXp0fGFoFYOldyhCe0hFsteC7y1Yv+HoZjC99PFFJ9 9KK+0/qtaAosD01gJQk2HS71I3nNfH0s/YXR5MN2uxYgZoFS4RujX2LYyDEs+UU4hA/WTrRuK6NU apH3oQ6KxBdcrGPPdzxiSdadsCGJvvxN4N3MGR1hDrz122C4Up5VsoA7O1mvccEFc65YYpzG2/lb MgR6XDSmtZ+ll7BGD/zStEeSew6sqm99CLGaFnr55ZjOD2KzZRBB+lGIvoz9mHnRKDWM986qXFPO nB1WWltLOYyTgvYhNh6K9uLEJNwOsMKOBhjsBMSJJw0= ) ; keytag 50317 ms. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7vxg64xb5KXx0lobZuplLsutkkC57UstzKA911wLQIAPvfe0BjO/Bfi/+XN2Q18hgvUWNo HPz/9N0JRSzCgIxuhlpieDDh7dI2TFQioCXkpilLTwQMxV3DwhLMIxQqc0BomjyyYcMV6LbWT2Rb DKX1YiHBu5Vys82nR+Izizjm5SqDVIlhV+JImxCZk2HtqFi4+p+kTHqKRi7bctRXccBq5IyeOrDm 6fNlxfurqPSkfuriUGuA08wjUapJF4Yz/0uLdpL9DHF6cvZ7SHZxcbmIOmKCtmOlS5KmLmlQDlP8 2DuTOOJS5MivXCsoeFNc/L7d11jnINULkMww8Wyzbs0= ) ; keytag 30775 ms. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260403083811 20260314070811 50317 ms. aW9k+GksgSaJP6K4ycEqwunVtSqNnDGNtPM2HjAE8+sKHRNd4fJ3Z0YzDWiMBjHaR5hmtCA1DLka L0XDYZW1eFVDQJTlT41+1kgHW/fGdbEX2/r0a/aORUw44/SXbveFOoV/M3STgQD7PyHaRclO4uLv MrPe/iGHVSDupkofE8SRG8fuLij5QZmDbwCKWPOWW8jX//mgxH3X4a/tT7dxxVV7yVTm4YruzG99 btCJlDDvbco1CN0oqmhtM/fzZooWRnH+xFZLDrpKNKSv/utR05KE5gvrmH6ufr/tyK14zkiViQ9G PX/Uj47tU2DmR+sMqrmH7SwNfpFH7mvrJDYBJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ms
	`ms. 3600 IN DNSKEY ( 256 3 8 AwEAAbEP3oFCADb7DY6jH8MX40QlGSQJeGizU7oZ1Rrt5u8YhUo8ulupaadM5JRLRhiKsKcTOdY2 GaxB0IEkIAJxMtRdAl5COYw2PmOg97duhWiny1A9JgeWUOW8lOx9LfUOugXhKugMzfl3WpGg7k8/ 7kgphp0qjGlIWvf65u0dj6sY5KD3y6oS05tgXK2akTSYwFxzRqkSjSffYb/MfDX654op1WY0Uph4 CxZFvv9cAh3huFwYijQ82v1AJaWrEm/adXhyNKiwtTYAiFP1cLZa8Rws8NQYefRxxbXaOEOBccZ9 IrFOMeDfk/lgmtNVZpCdZIw7/IBKr1RRXq6kCZvy2+8= ) ; keytag 31078`
	`ms. 3600 IN DNSKEY ( 257 3 8 AwEAAbYNRw50O3vzqEpy+5sWBlYzlg3aoGsXp0fGFoFYOldyhCe0hFsteC7y1Yv+HoZjC99PFFJ9 9KK+0/qtaAosD01gJQk2HS71I3nNfH0s/YXR5MN2uxYgZoFS4RujX2LYyDEs+UU4hA/WTrRuK6NU apH3oQ6KxBdcrGPPdzxiSdadsCGJvvxN4N3MGR1hDrz122C4Up5VsoA7O1mvccEFc65YYpzG2/lb MgR6XDSmtZ+ll7BGD/zStEeSew6sqm99CLGaFnr55ZjOD2KzZRBB+lGIvoz9mHnRKDWM986qXFPO nB1WWltLOYyTgvYhNh6K9uLEJNwOsMKOBhjsBMSJJw0= ) ; keytag 50317`
	`ms. 3600 IN DNSKEY ( 256 3 8 AwEAAZ7vxg64xb5KXx0lobZuplLsutkkC57UstzKA911wLQIAPvfe0BjO/Bfi/+XN2Q18hgvUWNo HPz/9N0JRSzCgIxuhlpieDDh7dI2TFQioCXkpilLTwQMxV3DwhLMIxQqc0BomjyyYcMV6LbWT2Rb DKX1YiHBu5Vys82nR+Izizjm5SqDVIlhV+JImxCZk2HtqFi4+p+kTHqKRi7bctRXccBq5IyeOrDm 6fNlxfurqPSkfuriUGuA08wjUapJF4Yz/0uLdpL9DHF6cvZ7SHZxcbmIOmKCtmOlS5KmLmlQDlP8 2DuTOOJS5MivXCsoeFNc/L7d11jnINULkMww8Wyzbs0= ) ; keytag 30775`
	DNSKEY=50317/SEP is now in the chain-of-trust
	DS=50317/SHA-256 verifies DNSKEY=50317/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ms. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260403083811 20260314070811 50317 ms. aW9k+GksgSaJP6K4ycEqwunVtSqNnDGNtPM2HjAE8+sKHRNd4fJ3Z0YzDWiMBjHaR5hmtCA1DLka L0XDYZW1eFVDQJTlT41+1kgHW/fGdbEX2/r0a/aORUw44/SXbveFOoV/M3STgQD7PyHaRclO4uLv MrPe/iGHVSDupkofE8SRG8fuLij5QZmDbwCKWPOWW8jX//mgxH3X4a/tT7dxxVV7yVTm4YruzG99 btCJlDDvbco1CN0oqmhtM/fzZooWRnH+xFZLDrpKNKSv/utR05KE5gvrmH6ufr/tyK14zkiViQ9G PX/Uj47tU2DmR+sMqrmH7SwNfpFH7mvrJDYBJQ== )`
	RRSIG=50317 and DNSKEY=50317/SEP verifies the DNSKEY RRset
	DNSKEY=31078 is now in the chain-of-trust
	DNSKEY=30775 is now in the chain-of-trust
	Query to a.lactld.org for sm.ms/A
	Received 812 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 812 octets ;; HEADER SECTION ;; id = 35672 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sm.ms. 86400 IN NS a.dns.sb. sm.ms. 86400 IN NS b.dns.sb. e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN NSEC3 ( 1 1 0 - eburph8bqm1t760biiq3mhg4ls5uehd5 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. elZN4ZTky7Yn5PkpQdovBeAHL2xIfNunz+UxT5cOCvOvPF3Ib+aWZkQ7fPIIdAzVHO0pC6mzVV/I p3Agh8U0HWfMwY0bSQM5LJTLmVePGwZhvUjYttg+f9QMeFTX/1EtmvkT/QV90glnDzX8e3S1rLib A9TjyZDzy8pH4k4+dMBRawj7QlkdijYCkxPJSpzjpZeYuZXgD31AVtkB0UGzdHKFrNn2NSTABgDU kUrrbFlnuszC86VVdlZ9twI8skDlJs+UyLawKYsb27v8RYkwc5TqtNR7lj9Kh47Rd7sKekdFXePy vkgavc/3w8JByAhw2qONrxAs/yfnf/tN4h9ErQ== ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN NSEC3 ( 1 1 0 - h94qst835ajftakl1q4doiad5tm91eqp TXT RRSIG ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. LA/y58sKNGgWzWCq/vuFA+iGPwfgWAF0bCO27MMOfoqhGBBdanOj4yyGAjrsmLRd1vaIb4LvTV0X x0wpPFPBP2q+W7IHxgqUdzzpJMQv6S8U2fIVmDl5MJqXaeSzkGTSCd3ZcwFDLWytO2XT/R68zP7h LZhJe4gq52WQOOtLs6zgb/nfAFkCiJGDi3SKQFPf0XNxILi8smABr3/k7ozGFDj5JIoXZiZEpn/w lVVKvx4dvr67F7e4gNK2OGUtYINNsBgNL1iMPOwQmseaaizCV7U0Q9LTeocVDwnyaEEZvCZJbs8y m21BeV+fATml2+APvef0+5ziYkyyDpaa+VJXiw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.lactld.org for sm.ms/DNSKEY
	Received 812 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 812 octets ;; HEADER SECTION ;; id = 25193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sm.ms. 86400 IN NS a.dns.sb. sm.ms. 86400 IN NS b.dns.sb. e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN NSEC3 ( 1 1 0 - eburph8bqm1t760biiq3mhg4ls5uehd5 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. elZN4ZTky7Yn5PkpQdovBeAHL2xIfNunz+UxT5cOCvOvPF3Ib+aWZkQ7fPIIdAzVHO0pC6mzVV/I p3Agh8U0HWfMwY0bSQM5LJTLmVePGwZhvUjYttg+f9QMeFTX/1EtmvkT/QV90glnDzX8e3S1rLib A9TjyZDzy8pH4k4+dMBRawj7QlkdijYCkxPJSpzjpZeYuZXgD31AVtkB0UGzdHKFrNn2NSTABgDU kUrrbFlnuszC86VVdlZ9twI8skDlJs+UyLawKYsb27v8RYkwc5TqtNR7lj9Kh47Rd7sKekdFXePy vkgavc/3w8JByAhw2qONrxAs/yfnf/tN4h9ErQ== ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN NSEC3 ( 1 1 0 - h94qst835ajftakl1q4doiad5tm91eqp TXT RRSIG ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. LA/y58sKNGgWzWCq/vuFA+iGPwfgWAF0bCO27MMOfoqhGBBdanOj4yyGAjrsmLRd1vaIb4LvTV0X x0wpPFPBP2q+W7IHxgqUdzzpJMQv6S8U2fIVmDl5MJqXaeSzkGTSCd3ZcwFDLWytO2XT/R68zP7h LZhJe4gq52WQOOtLs6zgb/nfAFkCiJGDi3SKQFPf0XNxILi8smABr3/k7ozGFDj5JIoXZiZEpn/w lVVKvx4dvr67F7e4gNK2OGUtYINNsBgNL1iMPOwQmseaaizCV7U0Q9LTeocVDwnyaEEZvCZJbs8y m21BeV+fATml2+APvef0+5ziYkyyDpaa+VJXiw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone sm.ms

sm.ms

	Checking DS between ms and sm.ms
	Query to a.lactld.org for sm.ms/DS
	Received 1126 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 1126 octets ;; HEADER SECTION ;; id = 34183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ms. 38400 IN SOA ( mnidns1.mninet.ms. hostmaster.mnidns1.mninet.ms. 2026031616 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ms. 38400 IN RRSIG ( SOA 8 1 38400 20260405173932 20260316160932 30775 ms. SOxPswIdJwKqRetWCJSiabmB23v751IuTz0keInHZ6NGMCsCnWRsYvHXCxdthShxhe28oTUTsXkK CV6IqmAkKjwkROD6PDPwpom8myGWUSjYWpnfG5ZxE0Ef2M5ro9nl1k9mRVq9q/9t1FkGa8KDA3VO +uLvety4l205NxNITvvSjtQdB+Vuae0Iedz6azz6o1zjHNbo2ocearHCpFbAbAvKn6tY+OMFjZB4 fg3XdjAbIvBG1za8Hz0P/+jLiAcd8P5PtdXqMiRodySYFyfReFEdpyry7AB1KJeaIALuXuWIio6+ RXxEhcRns6rtx2iSFtrqXSND+VB7YJ0rdXFpHg== ) e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN NSEC3 ( 1 1 0 - eburph8bqm1t760biiq3mhg4ls5uehd5 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ZONEMD ) e3tej3mg1ojoiefiqdn1747146si7ivs.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. elZN4ZTky7Yn5PkpQdovBeAHL2xIfNunz+UxT5cOCvOvPF3Ib+aWZkQ7fPIIdAzVHO0pC6mzVV/I p3Agh8U0HWfMwY0bSQM5LJTLmVePGwZhvUjYttg+f9QMeFTX/1EtmvkT/QV90glnDzX8e3S1rLib A9TjyZDzy8pH4k4+dMBRawj7QlkdijYCkxPJSpzjpZeYuZXgD31AVtkB0UGzdHKFrNn2NSTABgDU kUrrbFlnuszC86VVdlZ9twI8skDlJs+UyLawKYsb27v8RYkwc5TqtNR7lj9Kh47Rd7sKekdFXePy vkgavc/3w8JByAhw2qONrxAs/yfnf/tN4h9ErQ== ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN NSEC3 ( 1 1 0 - h94qst835ajftakl1q4doiad5tm91eqp TXT RRSIG ) eburph8bqm1t760biiq3mhg4ls5uehd5.ms. 38400 IN RRSIG ( NSEC3 8 2 38400 20260405093811 20260316080811 30775 ms. LA/y58sKNGgWzWCq/vuFA+iGPwfgWAF0bCO27MMOfoqhGBBdanOj4yyGAjrsmLRd1vaIb4LvTV0X x0wpPFPBP2q+W7IHxgqUdzzpJMQv6S8U2fIVmDl5MJqXaeSzkGTSCd3ZcwFDLWytO2XT/R68zP7h LZhJe4gq52WQOOtLs6zgb/nfAFkCiJGDi3SKQFPf0XNxILi8smABr3/k7ozGFDj5JIoXZiZEpn/w lVVKvx4dvr67F7e4gNK2OGUtYINNsBgNL1iMPOwQmseaaizCV7U0Q9LTeocVDwnyaEEZvCZJbs8y m21BeV+fATml2+APvef0+5ziYkyyDpaa+VJXiw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for sm.ms in the ms zone
	Query to b.dns.sb for sm.ms/DNSKEY
	Received 84 bytes from 188.244.99.132
	;; Response received from [188.244.99.132] 84 octets ;; HEADER SECTION ;; id = 3745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sm.ms. 180 IN SOA ( a.dns.sb. sb.sb.sb. 2026020919 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a.dns.sb for sm.ms/A
	Received 66 bytes from 188.244.98.132
	;; Response received from [188.244.98.132] 66 octets ;; HEADER SECTION ;; id = 59243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (2 records) sm.ms. 600 IN A 172.67.213.1 sm.ms. 600 IN A 104.21.83.45 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.dns.sb is authoritative for sm.ms
	Query to b.dns.sb for sm.ms/SOA
	Received 84 bytes from 188.244.99.132
	;; Response received from [188.244.99.132] 84 octets ;; HEADER SECTION ;; id = 49767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN SOA ;; ANSWER SECTION (1 record) sm.ms. 86400 IN SOA ( a.dns.sb. sb.sb.sb. 2026020919 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 180 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.dns.sb for sm.ms/A
	Received 66 bytes from 188.244.98.132
	;; Response received from [188.244.98.132] 66 octets ;; HEADER SECTION ;; id = 49678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (2 records) sm.ms. 600 IN A 172.67.213.1 sm.ms. 600 IN A 104.21.83.45 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sm.ms A RR has value 172.67.213.1
	sm.ms A RR has value 104.21.83.45
	No RRSIGs found

sm.ms

	Query to b.dns.sb for sm.ms/A
	Received 66 bytes from 188.244.99.132
	;; Response received from [188.244.99.132] 66 octets ;; HEADER SECTION ;; id = 48374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (2 records) sm.ms. 600 IN A 172.67.213.1 sm.ms. 600 IN A 104.21.83.45 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.dns.sb is authoritative for sm.ms
	Query to b.dns.sb for sm.ms/A
	Received 66 bytes from 188.244.99.132
	;; Response received from [188.244.99.132] 66 octets ;; HEADER SECTION ;; id = 25541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sm.ms. IN A ;; ANSWER SECTION (2 records) sm.ms. 600 IN A 172.67.213.1 sm.ms. 600 IN A 104.21.83.45 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sm.ms A RR has value 172.67.213.1
	sm.ms A RR has value 104.21.83.45
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sm.ms at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: