DNSSEC Debugger - unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-24 08:00:13 UTC

Analyzing DNSSEC problems for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 39595 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to b.root-servers.net for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 602 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 602 octets ;; HEADER SECTION ;; id = 59688 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260606050000 20260524040000 54393 . Yc1nOY3T0hFnUKzwwRVIN0bhsV1AJzOrBueQieJrsil7SDC0UNunaPjemoyuxat/mT+uaO0dC8KD 81XyhbJylRzQ89MERnqw54Wspjog/LW1h7StMIzUPexZUBYparQ4H/j9tYYjhyE8H9veDYaVxRu0 Wciy9cilmr6mGillGq/VT6XveEpdZv3h08pYf6qS/xEQvofFpnuP2WcwTUCWU3s8SkQTEOy7SNEF gn0rYqtxfjsV6VrsjCZVTTr4O7kxBRDEhepAdPYcb4RXVnHdzU2Aisvbc64Lqbr2PQB8Qe+Wr2cd +3tMg6A7wijIhbNBnF4h4UDelWH4NbazlzoF+w== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 556 octets ;; HEADER SECTION ;; id = 49384 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260606050000 20260524040000 54393 . Yc1nOY3T0hFnUKzwwRVIN0bhsV1AJzOrBueQieJrsil7SDC0UNunaPjemoyuxat/mT+uaO0dC8KD 81XyhbJylRzQ89MERnqw54Wspjog/LW1h7StMIzUPexZUBYparQ4H/j9tYYjhyE8H9veDYaVxRu0 Wciy9cilmr6mGillGq/VT6XveEpdZv3h08pYf6qS/xEQvofFpnuP2WcwTUCWU3s8SkQTEOy7SNEF gn0rYqtxfjsV6VrsjCZVTTr4O7kxBRDEhepAdPYcb4RXVnHdzU2Aisvbc64Lqbr2PQB8Qe+Wr2cd +3tMg6A7wijIhbNBnF4h4UDelWH4NbazlzoF+w== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to i.root-servers.net for nl/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 62081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260606050000 20260524040000 54393 . Yc1nOY3T0hFnUKzwwRVIN0bhsV1AJzOrBueQieJrsil7SDC0UNunaPjemoyuxat/mT+uaO0dC8KD 81XyhbJylRzQ89MERnqw54Wspjog/LW1h7StMIzUPexZUBYparQ4H/j9tYYjhyE8H9veDYaVxRu0 Wciy9cilmr6mGillGq/VT6XveEpdZv3h08pYf6qS/xEQvofFpnuP2WcwTUCWU3s8SkQTEOy7SNEF gn0rYqtxfjsV6VrsjCZVTTr4O7kxBRDEhepAdPYcb4RXVnHdzU2Aisvbc64Lqbr2PQB8Qe+Wr2cd +3tMg6A7wijIhbNBnF4h4UDelWH4NbazlzoF+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260606050000 20260524040000 54393 . Yc1nOY3T0hFnUKzwwRVIN0bhsV1AJzOrBueQieJrsil7SDC0UNunaPjemoyuxat/mT+uaO0dC8KD 81XyhbJylRzQ89MERnqw54Wspjog/LW1h7StMIzUPexZUBYparQ4H/j9tYYjhyE8H9veDYaVxRu0 Wciy9cilmr6mGillGq/VT6XveEpdZv3h08pYf6qS/xEQvofFpnuP2WcwTUCWU3s8SkQTEOy7SNEF gn0rYqtxfjsV6VrsjCZVTTr4O7kxBRDEhepAdPYcb4RXVnHdzU2Aisvbc64Lqbr2PQB8Qe+Wr2cd +3tMg6A7wijIhbNBnF4h4UDelWH4NbazlzoF+w== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 289 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 289 octets ;; HEADER SECTION ;; id = 39345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260612175348 20260516020820 17153 nl. 8DCBlw6QfDMJXdcADwJb8tqsiTibvuZhUPabpHosXoleIrXjYPaQldH29VdN4cSjabfbWeLXvAHZ OiFjEMZibg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	`nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260612175348 20260516020820 17153 nl. 8DCBlw6QfDMJXdcADwJb8tqsiTibvuZhUPabpHosXoleIrXjYPaQldH29VdN4cSjabfbWeLXvAHZ OiFjEMZibg== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=41543 is now in the chain-of-trust
	Query to ns4.dns.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 499 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 499 octets ;; HEADER SECTION ;; id = 62704 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sidnlabs.nl. 3600 IN NS ns1.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260612012410 20260514230819 41543 nl. q7wuR11lzI6Ze4hxW380ZQdQ5AqEy2iIWsc0y9ZxGKX5g18xOWE3RSebvjSF0aJOs9gLpDzMxidF 7Bz4iDKvUQ== ) ;; ADDITIONAL SECTION (9 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns1.sidn.nl. 3600 IN A 192.174.68.144 ns1.sidn.nl. 3600 IN AAAA 2001:67c:1bc::144 ns2.sidn.nl. 3600 IN A 176.97.158.144 ns2.sidn.nl. 3600 IN AAAA 2001:67c:10b8::144 ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns.nl for sidnlabs.nl/DNSKEY
	Received 462 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 462 octets ;; HEADER SECTION ;; id = 8506 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sidnlabs.nl. 3600 IN NS ns1.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260612012410 20260514230819 41543 nl. q7wuR11lzI6Ze4hxW380ZQdQ5AqEy2iIWsc0y9ZxGKX5g18xOWE3RSebvjSF0aJOs9gLpDzMxidF 7Bz4iDKvUQ== ) ;; ADDITIONAL SECTION (9 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns1.sidn.nl. 3600 IN A 192.174.68.144 ns1.sidn.nl. 3600 IN AAAA 2001:67c:1bc::144 ns2.sidn.nl. 3600 IN A 176.97.158.144 ns2.sidn.nl. 3600 IN AAAA 2001:67c:10b8::144 ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns4.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 186 octets ;; HEADER SECTION ;; id = 12742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260612012410 20260514230819 41543 nl. q7wuR11lzI6Ze4hxW380ZQdQ5AqEy2iIWsc0y9ZxGKX5g18xOWE3RSebvjSF0aJOs9gLpDzMxidF 7Bz4iDKvUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20260612012410 20260514230819 41543 nl. q7wuR11lzI6Ze4hxW380ZQdQ5AqEy2iIWsc0y9ZxGKX5g18xOWE3RSebvjSF0aJOs9gLpDzMxidF 7Bz4iDKvUQ== )`
	RRSIG=41543 and DNSKEY=41543 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns2.sidn.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 176.97.158.144
	;; Response received from [176.97.158.144] 227 octets ;; HEADER SECTION ;; id = 2194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260604100804 20260521092609 11261 sidnlabs.nl. hw4qWvQVdR/khbLbrxMTvVckP8JYFsYtobf8bM8o4eo3zVAKPDXWqkxRbY0BtD8OK3NXC3zgijKX dSLT+fbv2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260604100804 20260521092609 11261 sidnlabs.nl. hw4qWvQVdR/khbLbrxMTvVckP8JYFsYtobf8bM8o4eo3zVAKPDXWqkxRbY0BtD8OK3NXC3zgijKX dSLT+fbv2A== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns2.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 1196 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 1196 octets ;; HEADER SECTION ;; id = 52279 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260603215808 20260520212152 11261 sidnlabs.nl. M2w2LC1Wr2MqeDK6eRxr780nNm0Ed31a3r3H4zvhItpOkiEWgbtTr2E6PVnSRhQMX2xH4XlSj8SM 0pJ+bz2IhA== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260603212841 20260520205430 11261 sidnlabs.nl. hzsnhHGW0Uv2LMLUWITh3VcVbYupmV28Fb7T04IJKvlKBJj3uxQ5GExo9pDn1ytUfSAywxBzAYj2 rqvfGhZDaw== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260603212841 20260520205430 11261 sidnlabs.nl. uqJU5cHupThjfFGTUMPwEAbvvn6RlAEEvbG7Se2bBrEJLjfkc1qaxD2YbgubxuPoLe3fVCygB2wu zNueJnSzWw== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604052547 20260521050301 11261 sidnlabs.nl. g5HehjHGgGX7xL+bn8F0GXWMaqm48gWUvM327wOWwrhweJY3f+FhisT2Jg/kQq/G1rTjSDO6zj1i 1bUk2pthqg== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604052547 20260521050301 11261 sidnlabs.nl. hFOhCuA0cIB5sMOzOxc9P7ZL4AhSN9w9IGkl9/eOYcjMAzplzvvF4MK1ofp1NYc05smDri7beJN5 TGlH5etHVQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604042324 20260521042030 11261 sidnlabs.nl. zMHR0VriCp8lgbnycCmd9ZKK4emMG5EWvwHwwQ7QYhdN6ckPwQfxXxY9ARcPMtX9fXkjBFbR9WkQ TWgH4BnrjQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604042324 20260521042030 11261 sidnlabs.nl. 9Fu9CZLzsxbwu7QRFY2poBq0xmRih2HfR7bDcRXBLR0wd/UXOk9ifA4NmS+YRaNMx/RPVPsrTw+M vVkMcz8qyQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1590 bytes from 192.174.68.144
	;; Response received from [192.174.68.144] 1590 octets ;; HEADER SECTION ;; id = 60299 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 21 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260603215808 20260520212152 11261 sidnlabs.nl. M2w2LC1Wr2MqeDK6eRxr780nNm0Ed31a3r3H4zvhItpOkiEWgbtTr2E6PVnSRhQMX2xH4XlSj8SM 0pJ+bz2IhA== ) ;; ADDITIONAL SECTION (21 records) yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604080310 20260521071839 11261 sidnlabs.nl. cx9jqANR0yHbHL6A5DWRmSS1DQ5AebFdG2aTgrUuJ599tMPjetjQQKmXu71Dl+g2CoDre04jXqwE asiadPW6eA== ) bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604042324 20260521042030 11261 sidnlabs.nl. zMHR0VriCp8lgbnycCmd9ZKK4emMG5EWvwHwwQ7QYhdN6ckPwQfxXxY9ARcPMtX9fXkjBFbR9WkQ TWgH4BnrjQ== ) nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604052547 20260521050301 11261 sidnlabs.nl. g5HehjHGgGX7xL+bn8F0GXWMaqm48gWUvM327wOWwrhweJY3f+FhisT2Jg/kQq/G1rTjSDO6zj1i 1bUk2pthqg== ) powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260604022900 20260521022640 11261 sidnlabs.nl. H4pBk0N9XUglaQYcFbrbn1ycYvASSqP4I8tt/PxUt1JDeEAQig3885TtuxE1WwiM4MsdJ/RrjhM6 L1Opin2lLA== ) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20260603212841 20260520205430 11261 sidnlabs.nl. hzsnhHGW0Uv2LMLUWITh3VcVbYupmV28Fb7T04IJKvlKBJj3uxQ5GExo9pDn1ytUfSAywxBzAYj2 rqvfGhZDaw== ) yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604080310 20260521071839 11261 sidnlabs.nl. 6k4gLE0KLrirfvYwqSyHPfuHNdF0cvQXDxik5TfEBoMmIsPWPSd9qx0RTX9G2mnRc7X58WlcK1Rv MPQ/rmbUig== ) bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604042324 20260521042030 11261 sidnlabs.nl. 9Fu9CZLzsxbwu7QRFY2poBq0xmRih2HfR7bDcRXBLR0wd/UXOk9ifA4NmS+YRaNMx/RPVPsrTw+M vVkMcz8qyQ== ) nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604052547 20260521050301 11261 sidnlabs.nl. hFOhCuA0cIB5sMOzOxc9P7ZL4AhSN9w9IGkl9/eOYcjMAzplzvvF4MK1ofp1NYc05smDri7beJN5 TGlH5etHVQ== ) powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260604022900 20260521022640 11261 sidnlabs.nl. wNZaGC4D49aFmOQGTQHtJ2ePQ9caraneM9eyNR0Y2C8pMIbk7TtwYYJwWPuqun22GEKHqWgHew98 j/KXc0TJ0Q== ) knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20260603212841 20260520205430 11261 sidnlabs.nl. uqJU5cHupThjfFGTUMPwEAbvvn6RlAEEvbG7Se2bBrEJLjfkc1qaxD2YbgubxuPoLe3fVCygB2wu zNueJnSzWw== ) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns2.sidn.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 176.97.158.144
	;; Response received from [176.97.158.144] 198 octets ;; HEADER SECTION ;; id = 31999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260603215808 20260520212152 11261 sidnlabs.nl. M2w2LC1Wr2MqeDK6eRxr780nNm0Ed31a3r3H4zvhItpOkiEWgbtTr2E6PVnSRhQMX2xH4XlSj8SM 0pJ+bz2IhA== ) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20260603215808 20260520212152 11261 sidnlabs.nl. M2w2LC1Wr2MqeDK6eRxr780nNm0Ed31a3r3H4zvhItpOkiEWgbtTr2E6PVnSRhQMX2xH4XlSj8SM 0pJ+bz2IhA== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to knot.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 897 octets ;; HEADER SECTION ;; id = 33562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to powerdns.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 301 octets ;; HEADER SECTION ;; id = 143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 387 octets ;; HEADER SECTION ;; id = 51263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 341 octets ;; HEADER SECTION ;; id = 54310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bad-dnssec.wb.sidnlabs.nl nameservers: powerdns.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, knot.sidnlabs.nl, yadifa.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 534 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 534 octets ;; HEADER SECTION ;; id = 29196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. q+zoQmPpYv4ku4h+wkl13Bkw1yfdC2+sypCh28ZI4ZIcTSPGlsAkEKsAZwSsOix4MJ29v/msFMua 8iwrf/Vp/QjK8EmYF4pk8GS9F67vbcFDpDYTgtZslm/vdiFeuaCFN57uhQXYtRYAQgHTWaxy0XP0 EMlsBAJBXmo7y6V+bk8= ) bad-dnssec.wb.sidnlabs.nl. 3600 IN NSEC ( bogussig.bad-dnssec.wb.sidnlabs.nl. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NSEC 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. aOhU9YrCXNENM54FuZEGD/feYvWMwx/SqqDNJqwbDGoFF0rGamPaduaqaifr5KJmVDBE2EpuhdEH YldGhUPv+u9UNkQsweLVaep4dVrP67Rje0k3A4Az3nJvvy5x2vovQtNJyT4eIGXWvJsYuK8aoDnf vcRI2uq72GpT7NqNwtw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 387 octets ;; HEADER SECTION ;; id = 34046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185`
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 301 octets ;; HEADER SECTION ;; id = 21918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 393 octets ;; HEADER SECTION ;; id = 50034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 347 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 347 octets ;; HEADER SECTION ;; id = 40313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. iXv7hXJy+xAt6y6pJkl/pjcvP2Z6b6tlr911JPeNzX8Ez2+OEXLySaR0nG1Vt6Ob9AwbnqcZxiux kdErB+kyLUOu9roA8gNYh0w5nA5tkrlvcUbDTsZDlDuSKdCMgLzsI6AvYyTUH9P1UKKhtvAh7b54 ir3B7uGHfVxsR2PZX+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.bad-dnssec.wb.sidnlabs.nl