DNSSEC Analyzer - test.00001.y.dotnxdomain.net

Domain Name:

Time: 2023-04-20 08:42:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for test.00001.y.dotnxdomain.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 43117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230502000000 20230411000000 20326 . ID/zjsZ8MPaJMm4Ilw9PESU92a/MvPFKlKkE8d2qAbDVfMGYQikmls8z0fIorVfoGECgiEey42+Y 4Bk99qTEFxPrCml12/xyJcmzQICQcr28djuMMA+yY7w57GuRLkE+LTnl5IdlucNf52gS/eKSBIjK H3hNYElH6BwIbTHKV5Jh1ZJgFTo+FRtrniR4HlhhHaydDVLc2A8FG3Whl1kyATDlqcLrF6yqbjAh NR0+Ak26gd5BkY9kwOYCMZ2KQ1RBKRmG3DbktohYVHbH2j6B6kfIjooRwY5hWyNQnBZP6LOHQLyf YrUTR3EK438G9VW0tXvNqL3ssDhuxhbFy7x3hw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230502000000 20230411000000 20326 . ID/zjsZ8MPaJMm4Ilw9PESU92a/MvPFKlKkE8d2qAbDVfMGYQikmls8z0fIorVfoGECgiEey42+Y 4Bk99qTEFxPrCml12/xyJcmzQICQcr28djuMMA+yY7w57GuRLkE+LTnl5IdlucNf52gS/eKSBIjK H3hNYElH6BwIbTHKV5Jh1ZJgFTo+FRtrniR4HlhhHaydDVLc2A8FG3Whl1kyATDlqcLrF6yqbjAh NR0+Ak26gd5BkY9kwOYCMZ2KQ1RBKRmG3DbktohYVHbH2j6B6kfIjooRwY5hWyNQnBZP6LOHQLyf YrUTR3EK438G9VW0tXvNqL3ssDhuxhbFy7x3hw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to h.root-servers.net for test.00001.y.dotnxdomain.net/A
	Received 1185 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1185 octets) ;; HEADER SECTION ;; id = 59477 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; test.00001.y.dotnxdomain.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230503050000 20230420040000 60955 . rHY07WvOKt3j9jWQgkwhjFKykuXDffiry4MOEptMuH9AHf8kGm4e1szB0uALy4uX4d13J27hDwsH NW0GzaTqagTuCze5DEzuI5x55/9ZM70ipqskpMgdcFNccHgVziD/wXnVXkEnpSMlk1ZB+x2Q+WnV xizaU5b1ih5r/XT+QO0KZ+l0NOn+LHlW6cQKPjuHTwhiJibcXBEgBHdy+YsDzc7+0f9wBP6MGDYL xQFmzoGUJHbmahp726e5tInLpQPsaIAY4lpsmtTUDYtS+85ENQbpTRHtSUqsyFMxcRl7JlYqF2BO yx2DFpoXtBa7Yh8Q6fcX9SBK3BUcdhu/hvJXzQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1160 octets) ;; HEADER SECTION ;; id = 34724 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230503050000 20230420040000 60955 . rHY07WvOKt3j9jWQgkwhjFKykuXDffiry4MOEptMuH9AHf8kGm4e1szB0uALy4uX4d13J27hDwsH NW0GzaTqagTuCze5DEzuI5x55/9ZM70ipqskpMgdcFNccHgVziD/wXnVXkEnpSMlk1ZB+x2Q+WnV xizaU5b1ih5r/XT+QO0KZ+l0NOn+LHlW6cQKPjuHTwhiJibcXBEgBHdy+YsDzc7+0f9wBP6MGDYL xQFmzoGUJHbmahp726e5tInLpQPsaIAY4lpsmtTUDYtS+85ENQbpTRHtSUqsyFMxcRl7JlYqF2BO yx2DFpoXtBa7Yh8Q6fcX9SBK3BUcdhu/hvJXzQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 43541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230503050000 20230420040000 60955 . rHY07WvOKt3j9jWQgkwhjFKykuXDffiry4MOEptMuH9AHf8kGm4e1szB0uALy4uX4d13J27hDwsH NW0GzaTqagTuCze5DEzuI5x55/9ZM70ipqskpMgdcFNccHgVziD/wXnVXkEnpSMlk1ZB+x2Q+WnV xizaU5b1ih5r/XT+QO0KZ+l0NOn+LHlW6cQKPjuHTwhiJibcXBEgBHdy+YsDzc7+0f9wBP6MGDYL xQFmzoGUJHbmahp726e5tInLpQPsaIAY4lpsmtTUDYtS+85ENQbpTRHtSUqsyFMxcRl7JlYqF2BO yx2DFpoXtBa7Yh8Q6fcX9SBK3BUcdhu/hvJXzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20230503050000 20230420040000 60955 . rHY07WvOKt3j9jWQgkwhjFKykuXDffiry4MOEptMuH9AHf8kGm4e1szB0uALy4uX4d13J27hDwsH NW0GzaTqagTuCze5DEzuI5x55/9ZM70ipqskpMgdcFNccHgVziD/wXnVXkEnpSMlk1ZB+x2Q+WnV xizaU5b1ih5r/XT+QO0KZ+l0NOn+LHlW6cQKPjuHTwhiJibcXBEgBHdy+YsDzc7+0f9wBP6MGDYL xQFmzoGUJHbmahp726e5tInLpQPsaIAY4lpsmtTUDYtS+85ENQbpTRHtSUqsyFMxcRl7JlYqF2BO yx2DFpoXtBa7Yh8Q6fcX9SBK3BUcdhu/hvJXzQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to l.gtld-servers.net for net/DNSKEY
	Received 953 bytes from 192.41.162.30
	;; Response received from 192.41.162.30 (953 octets) ;; HEADER SECTION ;; id = 10545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPf7vsAfzjJD1aeWaC0Ax5NDw2Fdlyje7LENBYOvy22ufgtlBlKIUsbWCZapHJtKXTLUTOv3ylo wY0+5cD6+mGEJ1JF56SCIX00U7w2S77Qx4Oa/I4hCKQTvI7Kk6/klrTvbIDEdDZB/t62DprcXhLc o3o2NQ746bAdzZvoRQtKYekgb4a6BjDxBi11bN/qoA1zFfl23Gmu6LTlt4Hnj39F ) ; Key ID = 27254 net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230504162830 20230419162330 35886 net. JF/AnEjXcjWYVls7B1I07dWHiSsz7r3RQSHfQzqTQSGA095vsTPzvwoggCe3HXSEFYBqSvQbifxI xyDvoG91pA9MzWO9MoQGTglA965I3F/adJeJvFw2XTiNKojb+lO88h4RDFBGQEn8M4CAsNL4tt1l gTwHVeRerHha0he/nsIHu8I7kpMhwbyrMaLWcDAtraHQaXcY7wMKZ5iNWsnv1a/WoovECMvwCcqo b2Aeld3VpWiTStLQGqiKVc5Yv5PkHXrQgC1jTGSHQoHaqVdKQXFSkvS2D7jmHKdKCK2HLeUvjOlo tlpPnxwExQn2it0/4r8BU+rwVUKNHqfLR+Mv8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPf7vsAfzjJD1aeWaC0Ax5NDw2Fdlyje7LENBYOvy22ufgtlBlKIUsbWCZapHJtKXTLUTOv3ylo wY0+5cD6+mGEJ1JF56SCIX00U7w2S77Qx4Oa/I4hCKQTvI7Kk6/klrTvbIDEdDZB/t62DprcXhLc o3o2NQ746bAdzZvoRQtKYekgb4a6BjDxBi11bN/qoA1zFfl23Gmu6LTlt4Hnj39F ) ; Key ID = 27254`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230504162830 20230419162330 35886 net. JF/AnEjXcjWYVls7B1I07dWHiSsz7r3RQSHfQzqTQSGA095vsTPzvwoggCe3HXSEFYBqSvQbifxI xyDvoG91pA9MzWO9MoQGTglA965I3F/adJeJvFw2XTiNKojb+lO88h4RDFBGQEn8M4CAsNL4tt1l gTwHVeRerHha0he/nsIHu8I7kpMhwbyrMaLWcDAtraHQaXcY7wMKZ5iNWsnv1a/WoovECMvwCcqo b2Aeld3VpWiTStLQGqiKVc5Yv5PkHXrQgC1jTGSHQoHaqVdKQXFSkvS2D7jmHKdKCK2HLeUvjOlo tlpPnxwExQn2it0/4r8BU+rwVUKNHqfLR+Mv8g== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=27254 is now in the chain-of-trust
	DNSKEY=27554 is now in the chain-of-trust
	Query to b.gtld-servers.net for test.00001.y.dotnxdomain.net/A
	Received 460 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (460 octets) ;; HEADER SECTION ;; id = 58198 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; test.00001.y.dotnxdomain.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dotnxdomain.net. 172800 IN NS ns1.dotnxdomain.net. dotnxdomain.net. 172800 IN NS ns2.dotnxdomain.net. dotnxdomain.net. 86400 IN DS ( 18553 5 2 fb4622d8f3ec109b3ebd469ab324f1749431edcafb0e8ef78b7a7e4deab0ed4d ) dotnxdomain.net. 86400 IN DS ( 18553 5 1 5dfbc42464a6e9917efe1ad4c5ec0c1872f6e2f8 ) dotnxdomain.net. 86400 IN RRSIG ( DS 8 2 86400 20230427061629 20230420050629 27554 net. r1RnD/UN5IInsAJRsEWpEZiASMfymavuQROZT+JtmFcgdupyPl8EuSQ5oqFKt072bQ4fHRcWoSm5 gDpWmIRfCI4K0QVg+x/FvXPRsLr+8cat6dKNWpRfXktqYj1rovKYXRvU4rBtcU02f1H/NCpg85Cs W0YkisKif9nnKGSGFoW/Ak+WTbky5TpQsJnGi+WKNrQT5LPd5saoC6oaBAHDfw== ) ;; ADDITIONAL SECTION (5 records) ns1.dotnxdomain.net. 172800 IN A 203.133.248.6 ns1.dotnxdomain.net. 172800 IN AAAA 2401:2000:6660::6 ns2.dotnxdomain.net. 172800 IN A 203.133.248.110 ns2.dotnxdomain.net. 172800 IN AAAA 2401:2000:6660::110 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.gtld-servers.net for dotnxdomain.net/DNSKEY
	Received 447 bytes from 192.42.93.30
	;; Response received from 192.42.93.30 (447 octets) ;; HEADER SECTION ;; id = 51244 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dotnxdomain.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dotnxdomain.net. 172800 IN NS ns1.dotnxdomain.net. dotnxdomain.net. 172800 IN NS ns2.dotnxdomain.net. dotnxdomain.net. 86400 IN DS ( 18553 5 2 fb4622d8f3ec109b3ebd469ab324f1749431edcafb0e8ef78b7a7e4deab0ed4d ) dotnxdomain.net. 86400 IN DS ( 18553 5 1 5dfbc42464a6e9917efe1ad4c5ec0c1872f6e2f8 ) dotnxdomain.net. 86400 IN RRSIG ( DS 8 2 86400 20230427061629 20230420050629 27554 net. r1RnD/UN5IInsAJRsEWpEZiASMfymavuQROZT+JtmFcgdupyPl8EuSQ5oqFKt072bQ4fHRcWoSm5 gDpWmIRfCI4K0QVg+x/FvXPRsLr+8cat6dKNWpRfXktqYj1rovKYXRvU4rBtcU02f1H/NCpg85Cs W0YkisKif9nnKGSGFoW/Ak+WTbky5TpQsJnGi+WKNrQT5LPd5saoC6oaBAHDfw== ) ;; ADDITIONAL SECTION (5 records) ns1.dotnxdomain.net. 172800 IN A 203.133.248.6 ns1.dotnxdomain.net. 172800 IN AAAA 2401:2000:6660::6 ns2.dotnxdomain.net. 172800 IN A 203.133.248.110 ns2.dotnxdomain.net. 172800 IN AAAA 2401:2000:6660::110 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dotnxdomain.net

dotnxdomain.net

	Checking DS between net and dotnxdomain.net
	Query to f.gtld-servers.net for dotnxdomain.net/DS
	Received 1195 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (1195 octets) ;; HEADER SECTION ;; id = 60309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 22 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dotnxdomain.net. IN DS ;; ANSWER SECTION (3 records) dotnxdomain.net. 86400 IN DS ( 18553 5 2 fb4622d8f3ec109b3ebd469ab324f1749431edcafb0e8ef78b7a7e4deab0ed4d ) dotnxdomain.net. 86400 IN DS ( 18553 5 1 5dfbc42464a6e9917efe1ad4c5ec0c1872f6e2f8 ) dotnxdomain.net. 86400 IN RRSIG ( DS 8 2 86400 20230427061629 20230420050629 27554 net. r1RnD/UN5IInsAJRsEWpEZiASMfymavuQROZT+JtmFcgdupyPl8EuSQ5oqFKt072bQ4fHRcWoSm5 gDpWmIRfCI4K0QVg+x/FvXPRsLr+8cat6dKNWpRfXktqYj1rovKYXRvU4rBtcU02f1H/NCpg85Cs W0YkisKif9nnKGSGFoW/Ak+WTbky5TpQsJnGi+WKNrQT5LPd5saoC6oaBAHDfw== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20230426062155 20230419051155 27554 net. PPiswMgGDB3jaGAVZKlfi3cWGi3Zf+f9BW59yAwziYyXNgmJ59ZKsd7eJstbJDf76ObuazwBUiGj CyUbrFKhdHcWQJ/8Yo/0hueC7FjGvlR8c8aC6OdcMG6rFiUsEC5HwsfGPchS1aI+svzqPp40+Ejv CnF1B5PuTcEkmdpFVdOkLh2L4o/zFZjzEa/iegCn/p0QX/yomD+iPB+d1n3v3w== ) ;; ADDITIONAL SECTION (22 records) k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for dotnxdomain.net in the net zone
	DS=18553/SHA-256 has algorithm RSASHA1
	DS=18553/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`dotnxdomain.net. 86400 IN RRSIG ( DS 8 2 86400 20230427061629 20230420050629 27554 net. r1RnD/UN5IInsAJRsEWpEZiASMfymavuQROZT+JtmFcgdupyPl8EuSQ5oqFKt072bQ4fHRcWoSm5 gDpWmIRfCI4K0QVg+x/FvXPRsLr+8cat6dKNWpRfXktqYj1rovKYXRvU4rBtcU02f1H/NCpg85Cs W0YkisKif9nnKGSGFoW/Ak+WTbky5TpQsJnGi+WKNrQT5LPd5saoC6oaBAHDfw== )`
	RRSIG=27554 and DNSKEY=27554 verifies the DS RRset
	DS=18553/SHA-256 is now in the chain-of-trust
	`dotnxdomain.net. 86400 IN DS ( 18553 5 2 fb4622d8f3ec109b3ebd469ab324f1749431edcafb0e8ef78b7a7e4deab0ed4d )`
	`dotnxdomain.net. 86400 IN DS ( 18553 5 1 5dfbc42464a6e9917efe1ad4c5ec0c1872f6e2f8 )`
	Query to ns1.dotnxdomain.net for dotnxdomain.net/DNSKEY
	Received 690 bytes from 203.133.248.6
	;; Response received from 203.133.248.6 (690 octets) ;; HEADER SECTION ;; id = 5369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dotnxdomain.net. IN DNSKEY ;; ANSWER SECTION (4 records) dotnxdomain.net. 3600 IN DNSKEY ( 257 3 5 AwEAAddYqEdxprI1Xs228pMbyDU9T6pgRu0VZ/4SbaEGw/SZGPiHL77i0ftONsdBuoI8SeyqDKnS ZD7wmPZQ363ALTtRLbiKXpnQAwD6a5iJCW8OIR4l4Z+Rj5nbQCJejQjaEriRi7wcQvYZ+csqPQ62 BHWt+xdfTH34Q+iF0pyY3xEn ) ; Key ID = 18553 dotnxdomain.net. 3600 IN DNSKEY ( 256 3 5 AwEAAd75F3xMFwRRHvEMMcyfcrLkL8AyA3pcugDmkAsmYtEg4c0R8MqdP4pOozh/tCHcjP5B2ybP mnl1Alcjb/vnYH30/ElBNb56DEHfzvPiRT9aP0DXf93CKvCxCbbQ6JcNYfnh9onQkmnWd9CrNzW4 2gQO8v3aiuwPQHHKAfXQ2lRt ) ; Key ID = 15135 dotnxdomain.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20330416133029 20230419123029 15135 dotnxdomain.net. rWuyYpZ6637Fbx+E2yZEFEn1FwPSnoZQ+ShE43W/Zd2HFQqmTPPsfD9/bxnKc1CQJZS2Sox9HVPC +cA9XPNrdj7SuZwjpSBDG/6XFvr2ZvMVKd2TcbHX0U4cSKa6UfXwk3cGRtbMAVsGJq7I6ZuexEoP RPN5TL2gyjdBAkN6+jY= ) dotnxdomain.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20330416133029 20230419123029 18553 dotnxdomain.net. e8z5QkpE+IlpUAfTEaL/OXC7Uzdp1IwzcYiQHgV0k5kV5Z5OR5HQ3FMeepahCFDHPyiP5eLFmlxv BEnrzv3R1qCxhYwx+dRT9PfQ3ey1gVhxFZahB1gq7D+WyVM4F6EzfMEkgUC5O4XR/cw2CVQEPLBj Y7GJLLX9SKVPZMdT9x0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dotnxdomain.net
	`dotnxdomain.net. 3600 IN DNSKEY ( 257 3 5 AwEAAddYqEdxprI1Xs228pMbyDU9T6pgRu0VZ/4SbaEGw/SZGPiHL77i0ftONsdBuoI8SeyqDKnS ZD7wmPZQ363ALTtRLbiKXpnQAwD6a5iJCW8OIR4l4Z+Rj5nbQCJejQjaEriRi7wcQvYZ+csqPQ62 BHWt+xdfTH34Q+iF0pyY3xEn ) ; Key ID = 18553`
	`dotnxdomain.net. 3600 IN DNSKEY ( 256 3 5 AwEAAd75F3xMFwRRHvEMMcyfcrLkL8AyA3pcugDmkAsmYtEg4c0R8MqdP4pOozh/tCHcjP5B2ybP mnl1Alcjb/vnYH30/ElBNb56DEHfzvPiRT9aP0DXf93CKvCxCbbQ6JcNYfnh9onQkmnWd9CrNzW4 2gQO8v3aiuwPQHHKAfXQ2lRt ) ; Key ID = 15135`
	DNSKEY=18553/SEP is now in the chain-of-trust
	DS=18553/SHA-256 verifies DNSKEY=18553/SEP
	DS=18553/SHA-1 verifies DNSKEY=18553/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dotnxdomain.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20330416133029 20230419123029 15135 dotnxdomain.net. rWuyYpZ6637Fbx+E2yZEFEn1FwPSnoZQ+ShE43W/Zd2HFQqmTPPsfD9/bxnKc1CQJZS2Sox9HVPC +cA9XPNrdj7SuZwjpSBDG/6XFvr2ZvMVKd2TcbHX0U4cSKa6UfXwk3cGRtbMAVsGJq7I6ZuexEoP RPN5TL2gyjdBAkN6+jY= )`
	`dotnxdomain.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20330416133029 20230419123029 18553 dotnxdomain.net. e8z5QkpE+IlpUAfTEaL/OXC7Uzdp1IwzcYiQHgV0k5kV5Z5OR5HQ3FMeepahCFDHPyiP5eLFmlxv BEnrzv3R1qCxhYwx+dRT9PfQ3ey1gVhxFZahB1gq7D+WyVM4F6EzfMEkgUC5O4XR/cw2CVQEPLBj Y7GJLLX9SKVPZMdT9x0= )`
	RRSIG=15135 and DNSKEY=15135 verifies the DNSKEY RRset
	RRSIG=18553 and DNSKEY=18553/SEP verifies the DNSKEY RRset
	DNSKEY=15135 is now in the chain-of-trust
	Query to ns1.dotnxdomain.net for test.00001.y.dotnxdomain.net/A
	Received 728 bytes from 203.133.248.6
	;; Response received from 203.133.248.6 (728 octets) ;; HEADER SECTION ;; id = 33957 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; test.00001.y.dotnxdomain.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) y.dotnxdomain.net. 3600 IN NS nsy.dotnxdomain.net. y.dotnxdomain.net. 3600 IN DS ( 29911 5 2 23b73ec6f5e0547729e56fc86140e64b1bf4eabb72f5d4ff22f05379620939d3 ) y.dotnxdomain.net. 3600 IN DS ( 29911 5 1 4dc2b484870570c974911b9ae9564065d59fe629 ) y.dotnxdomain.net. 3600 IN RRSIG ( DS 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. uuqCPA3DwE0DFdistsZMojD5mw5Wtg76f6sJwvwQReqJkmDHGlydvqB/j/YTjGDw+gq1zCFDbz5r PQQi7ilaDM14BLfucE58ao39d7FTNR7mAn2ziDEnOMcAzwkhcBumwVidsVlPPucyswSYNaVYboSC YSZSjLyt0fUuI/WjLu4= ) ;; ADDITIONAL SECTION (5 records) nsy.dotnxdomain.net. 3600 IN A 162.223.8.90 nsy.dotnxdomain.net. 3600 IN AAAA 2607:fc50:1001:9500::2 nsy.dotnxdomain.net. 3600 IN RRSIG ( A 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. J2vHFOaLR2rikkBveIuw1dseDXbVi/XrY5zEwZ358jHFJGiSQo63YyTM3SSJ2zMQq7ML5UzWnD7B Nc8GhQbPzWfQric6HtbC4ERrNgFQ6mokwbDzf87YMwOz+7Bc12sfdSrNVXf/tV5NtfZ8h0yAw75A FMAEiaWSWStLtY7SsP8= ) nsy.dotnxdomain.net. 3600 IN RRSIG ( AAAA 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. xh278KzwM4qYoyGpOznkJXpO+ICgFy5crPzcYoD7LGZSpZSBLi9qkTgCBnvuWBGWU0NNX0shK1i0 iL1bdY77uEFNrZw9Xur7inzLTurtLdQBGK5K7ehh+qnbNUZWTW9R9gn8y2qo6m4FynX/PRvAgyCi d6f574oQys7mMiC3N64= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.dotnxdomain.net for y.dotnxdomain.net/DNSKEY
	Received 717 bytes from 203.133.248.6
	;; Response received from 203.133.248.6 (717 octets) ;; HEADER SECTION ;; id = 40682 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; y.dotnxdomain.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) y.dotnxdomain.net. 3600 IN NS nsy.dotnxdomain.net. y.dotnxdomain.net. 3600 IN DS ( 29911 5 1 4dc2b484870570c974911b9ae9564065d59fe629 ) y.dotnxdomain.net. 3600 IN DS ( 29911 5 2 23b73ec6f5e0547729e56fc86140e64b1bf4eabb72f5d4ff22f05379620939d3 ) y.dotnxdomain.net. 3600 IN RRSIG ( DS 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. uuqCPA3DwE0DFdistsZMojD5mw5Wtg76f6sJwvwQReqJkmDHGlydvqB/j/YTjGDw+gq1zCFDbz5r PQQi7ilaDM14BLfucE58ao39d7FTNR7mAn2ziDEnOMcAzwkhcBumwVidsVlPPucyswSYNaVYboSC YSZSjLyt0fUuI/WjLu4= ) ;; ADDITIONAL SECTION (5 records) nsy.dotnxdomain.net. 3600 IN A 162.223.8.90 nsy.dotnxdomain.net. 3600 IN AAAA 2607:fc50:1001:9500::2 nsy.dotnxdomain.net. 3600 IN RRSIG ( A 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. J2vHFOaLR2rikkBveIuw1dseDXbVi/XrY5zEwZ358jHFJGiSQo63YyTM3SSJ2zMQq7ML5UzWnD7B Nc8GhQbPzWfQric6HtbC4ERrNgFQ6mokwbDzf87YMwOz+7Bc12sfdSrNVXf/tV5NtfZ8h0yAw75A FMAEiaWSWStLtY7SsP8= ) nsy.dotnxdomain.net. 3600 IN RRSIG ( AAAA 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. xh278KzwM4qYoyGpOznkJXpO+ICgFy5crPzcYoD7LGZSpZSBLi9qkTgCBnvuWBGWU0NNX0shK1i0 iL1bdY77uEFNrZw9Xur7inzLTurtLdQBGK5K7ehh+qnbNUZWTW9R9gn8y2qo6m4FynX/PRvAgyCi d6f574oQys7mMiC3N64= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone y.dotnxdomain.net

y.dotnxdomain.net

	Checking DS between dotnxdomain.net and y.dotnxdomain.net
	Query to ns1.dotnxdomain.net for y.dotnxdomain.net/DS
	Received 305 bytes from 203.133.248.6
	;; Response received from 203.133.248.6 (305 octets) ;; HEADER SECTION ;; id = 54871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; y.dotnxdomain.net. IN DS ;; ANSWER SECTION (3 records) y.dotnxdomain.net. 3600 IN DS ( 29911 5 1 4dc2b484870570c974911b9ae9564065d59fe629 ) y.dotnxdomain.net. 3600 IN DS ( 29911 5 2 23b73ec6f5e0547729e56fc86140e64b1bf4eabb72f5d4ff22f05379620939d3 ) y.dotnxdomain.net. 3600 IN RRSIG ( DS 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. uuqCPA3DwE0DFdistsZMojD5mw5Wtg76f6sJwvwQReqJkmDHGlydvqB/j/YTjGDw+gq1zCFDbz5r PQQi7ilaDM14BLfucE58ao39d7FTNR7mAn2ziDEnOMcAzwkhcBumwVidsVlPPucyswSYNaVYboSC YSZSjLyt0fUuI/WjLu4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for y.dotnxdomain.net in the dotnxdomain.net zone
	DS=29911/SHA-1 has algorithm RSASHA1
	DS=29911/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`y.dotnxdomain.net. 3600 IN RRSIG ( DS 5 3 3600 20330416133029 20230419123029 15135 dotnxdomain.net. uuqCPA3DwE0DFdistsZMojD5mw5Wtg76f6sJwvwQReqJkmDHGlydvqB/j/YTjGDw+gq1zCFDbz5r PQQi7ilaDM14BLfucE58ao39d7FTNR7mAn2ziDEnOMcAzwkhcBumwVidsVlPPucyswSYNaVYboSC YSZSjLyt0fUuI/WjLu4= )`
	RRSIG=15135 and DNSKEY=15135 verifies the DS RRset
	DS=29911/SHA-1 is now in the chain-of-trust
	`y.dotnxdomain.net. 3600 IN DS ( 29911 5 1 4dc2b484870570c974911b9ae9564065d59fe629 )`
	`y.dotnxdomain.net. 3600 IN DS ( 29911 5 2 23b73ec6f5e0547729e56fc86140e64b1bf4eabb72f5d4ff22f05379620939d3 )`
	Query to nsy.dotnxdomain.net for y.dotnxdomain.net/DNSKEY
	Timeout querying nsy.dotnxdomain.net/162.223.8.90 for y.dotnxdomain.net/DNSKEY
	All Queries to nsy.dotnxdomain.net for y.dotnxdomain.net/DNSKEY timed out or failed
	Failed to get DNSKEY RR set for zone y.dotnxdomain.net
	Query to nsy.dotnxdomain.net for test.00001.y.dotnxdomain.net/A
	Timeout querying nsy.dotnxdomain.net/162.223.8.90 for test.00001.y.dotnxdomain.net/A
	All Queries to nsy.dotnxdomain.net for test.00001.y.dotnxdomain.net/A timed out or failed
	No response from y.dotnxdomain.net nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test test.00001.y.dotnxdomain.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: