DNSSEC Debugger - validatorsearch.verisignlabs.com

Domain Name:

Time: 2024-05-10 01:06:32 UTC

Analyzing DNSSEC problems for validatorsearch.verisignlabs.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 39985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240522000000 20240501000000 20326 . awTuko2X1TeMs5PiiykeIU5gBu4OdnsQunhjJSJHIvlFHEqP9Fbxj/CFBcWky41kCmn++2hPza/7 8LDNcNv3fXt8tlg3Ul1svtt+f2dVkc8/P9S8XZiPFm3Hgjti6apgdeIxGSaL+xfVX7bM6jueDJcF 1GhxqzR+wY+9Sk6r6q4tKS+zA6ewFym/OeOiZQy2F5IrKs3BJcqq56VpaKL7zF+l5cCVUYhS/XY4 DBCln9u//jRYljzprwlkguTL7wLCJXnWsiqyKoOpeY5WPE3WU9VEWsh41aGHgE80qe8svfpRh+Xr WaQHNpWDBZf18NviSPOsbU/vk6aLq3fIfM99jA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240522000000 20240501000000 20326 . awTuko2X1TeMs5PiiykeIU5gBu4OdnsQunhjJSJHIvlFHEqP9Fbxj/CFBcWky41kCmn++2hPza/7 8LDNcNv3fXt8tlg3Ul1svtt+f2dVkc8/P9S8XZiPFm3Hgjti6apgdeIxGSaL+xfVX7bM6jueDJcF 1GhxqzR+wY+9Sk6r6q4tKS+zA6ewFym/OeOiZQy2F5IrKs3BJcqq56VpaKL7zF+l5cCVUYhS/XY4 DBCln9u//jRYljzprwlkguTL7wLCJXnWsiqyKoOpeY5WPE3WU9VEWsh41aGHgE80qe8svfpRh+Xr WaQHNpWDBZf18NviSPOsbU/vk6aLq3fIfM99jA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for validatorsearch.verisignlabs.com/A
	Received 1195 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1195 octets ;; HEADER SECTION ;; id = 37387 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; validatorsearch.verisignlabs.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240522210000 20240509200000 5613 . BOAHFQe++Yj1O7QmcKOHz2teBYSPaZ442b9PYcdYAjAEwLCdlKvBQ65QEZXuiT3ea7pRHfSN6SJq U7OeKCa9kAiDzw2QUM7cO1/v8/p3Fv1IzfbT8O7GvMG6dkWbAp2U+7Hp79fyQyw1asyRf7voO02E ZkdHK3NHcdFbGMcgD5U6drUQibv1g4Rdg5QXHarkBdUEahMschEC7FOuLa2+yceB6hcRb6CKG4IM 5pl7m9B2Ep3/julaxSHzePcLrSyav0s+V49d4Cff8RSOmlfrTqEd/sxei9bNHAM79h2g49LJ4X3U xrUr6KIDb8dZDw2sNUEVwtdJ0uY+R6j7aj3qiA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 9139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240522210000 20240509200000 5613 . BOAHFQe++Yj1O7QmcKOHz2teBYSPaZ442b9PYcdYAjAEwLCdlKvBQ65QEZXuiT3ea7pRHfSN6SJq U7OeKCa9kAiDzw2QUM7cO1/v8/p3Fv1IzfbT8O7GvMG6dkWbAp2U+7Hp79fyQyw1asyRf7voO02E ZkdHK3NHcdFbGMcgD5U6drUQibv1g4Rdg5QXHarkBdUEahMschEC7FOuLa2+yceB6hcRb6CKG4IM 5pl7m9B2Ep3/julaxSHzePcLrSyav0s+V49d4Cff8RSOmlfrTqEd/sxei9bNHAM79h2g49LJ4X3U xrUr6KIDb8dZDw2sNUEVwtdJ0uY+R6j7aj3qiA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to l.root-servers.net for com/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 21633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240522210000 20240509200000 5613 . BOAHFQe++Yj1O7QmcKOHz2teBYSPaZ442b9PYcdYAjAEwLCdlKvBQ65QEZXuiT3ea7pRHfSN6SJq U7OeKCa9kAiDzw2QUM7cO1/v8/p3Fv1IzfbT8O7GvMG6dkWbAp2U+7Hp79fyQyw1asyRf7voO02E ZkdHK3NHcdFbGMcgD5U6drUQibv1g4Rdg5QXHarkBdUEahMschEC7FOuLa2+yceB6hcRb6CKG4IM 5pl7m9B2Ep3/julaxSHzePcLrSyav0s+V49d4Cff8RSOmlfrTqEd/sxei9bNHAM79h2g49LJ4X3U xrUr6KIDb8dZDw2sNUEVwtdJ0uY+R6j7aj3qiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20240522210000 20240509200000 5613 . BOAHFQe++Yj1O7QmcKOHz2teBYSPaZ442b9PYcdYAjAEwLCdlKvBQ65QEZXuiT3ea7pRHfSN6SJq U7OeKCa9kAiDzw2QUM7cO1/v8/p3Fv1IzfbT8O7GvMG6dkWbAp2U+7Hp79fyQyw1asyRf7voO02E ZkdHK3NHcdFbGMcgD5U6drUQibv1g4Rdg5QXHarkBdUEahMschEC7FOuLa2+yceB6hcRb6CKG4IM 5pl7m9B2Ep3/julaxSHzePcLrSyav0s+V49d4Cff8RSOmlfrTqEd/sxei9bNHAM79h2g49LJ4X3U xrUr6KIDb8dZDw2sNUEVwtdJ0uY+R6j7aj3qiA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to m.gtld-servers.net for com/DNSKEY
	Received 291 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 291 octets ;; HEADER SECTION ;; id = 45147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718 com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522140235 20240507135735 19718 com. YgNCkWs27wE93RhDAyUqOoJWFMU12bbB7x7IK5KNucCQPRcpxKtG0PFJFABDCqlsqtwhoGMu3Uyy k+DBRe4MJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240522140235 20240507135735 19718 com. YgNCkWs27wE93RhDAyUqOoJWFMU12bbB7x7IK5KNucCQPRcpxKtG0PFJFABDCqlsqtwhoGMu3Uyy k+DBRe4MJA== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=956 is now in the chain-of-trust
	Query to c.gtld-servers.net for validatorsearch.verisignlabs.com/A
	Received 462 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 462 octets ;; HEADER SECTION ;; id = 59148 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; validatorsearch.verisignlabs.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) verisignlabs.com. 172800 IN NS av1.nstld.com. verisignlabs.com. 172800 IN NS av2.nstld.com. verisignlabs.com. 172800 IN NS av3.nstld.com. verisignlabs.com. 172800 IN NS av4.nstld.com. verisignlabs.com. 86400 IN DS ( 57947 8 2 64877db0ea66b229fbe8380decf40a8ba36114f5fb34b5bfaef0716d6029638d ) verisignlabs.com. 86400 IN RRSIG ( DS 13 2 86400 20240514052930 20240507041930 956 com. Y3ummiJqqki5ZARpcp2S00NkxXg7KwmYupdoz1+p0axWcVo27Mvk2D9e80m/Eq6/m7CaTi8E+Nfo d0rRVeimJQ== ) ;; ADDITIONAL SECTION (9 records) av1.nstld.com. 172800 IN A 192.42.177.30 av1.nstld.com. 172800 IN AAAA 2001:500:124::30 av2.nstld.com. 172800 IN A 192.42.178.30 av2.nstld.com. 172800 IN AAAA 2001:500:125::30 av3.nstld.com. 172800 IN A 192.82.133.30 av3.nstld.com. 172800 IN AAAA 2001:500:126::30 av4.nstld.com. 172800 IN A 192.82.134.30 av4.nstld.com. 172800 IN AAAA 2001:500:127::30 ;; { "EDNS-VERSION": 0 }
	Query to e.gtld-servers.net for verisignlabs.com/DNSKEY
	Received 446 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 446 octets ;; HEADER SECTION ;; id = 53052 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verisignlabs.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) verisignlabs.com. 172800 IN NS av1.nstld.com. verisignlabs.com. 172800 IN NS av2.nstld.com. verisignlabs.com. 172800 IN NS av3.nstld.com. verisignlabs.com. 172800 IN NS av4.nstld.com. verisignlabs.com. 86400 IN DS ( 57947 8 2 64877db0ea66b229fbe8380decf40a8ba36114f5fb34b5bfaef0716d6029638d ) verisignlabs.com. 86400 IN RRSIG ( DS 13 2 86400 20240514052930 20240507041930 956 com. Y3ummiJqqki5ZARpcp2S00NkxXg7KwmYupdoz1+p0axWcVo27Mvk2D9e80m/Eq6/m7CaTi8E+Nfo d0rRVeimJQ== ) ;; ADDITIONAL SECTION (9 records) av1.nstld.com. 172800 IN A 192.42.177.30 av1.nstld.com. 172800 IN AAAA 2001:500:124::30 av2.nstld.com. 172800 IN A 192.42.178.30 av2.nstld.com. 172800 IN AAAA 2001:500:125::30 av3.nstld.com. 172800 IN A 192.82.133.30 av3.nstld.com. 172800 IN AAAA 2001:500:126::30 av4.nstld.com. 172800 IN A 192.82.134.30 av4.nstld.com. 172800 IN AAAA 2001:500:127::30 ;; { "EDNS-VERSION": 0 }
	Found child zone verisignlabs.com

verisignlabs.com

	Checking DS between com and verisignlabs.com
	Query to c.gtld-servers.net for verisignlabs.com/DS
	Received 1087 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 1087 octets ;; HEADER SECTION ;; id = 15812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verisignlabs.com. IN DS ;; ANSWER SECTION (2 records) verisignlabs.com. 86400 IN DS ( 57947 8 2 64877db0ea66b229fbe8380decf40a8ba36114f5fb34b5bfaef0716d6029638d ) verisignlabs.com. 86400 IN RRSIG ( DS 13 2 86400 20240514052930 20240507041930 956 com. Y3ummiJqqki5ZARpcp2S00NkxXg7KwmYupdoz1+p0axWcVo27Mvk2D9e80m/Eq6/m7CaTi8E+Nfo d0rRVeimJQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20240513042510 20240506031510 956 com. w6cZv09Wyn0g40PJLmYydDKBruVxvn5WSVr8DJjlsUQQr8oSvB57vmiAS8BRCxaC2oxXO1FceCfw 4p3U/d733A== ) ;; ADDITIONAL SECTION (27 records) c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for verisignlabs.com in the com zone
	DS=57947/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`verisignlabs.com. 86400 IN RRSIG ( DS 13 2 86400 20240514052930 20240507041930 956 com. Y3ummiJqqki5ZARpcp2S00NkxXg7KwmYupdoz1+p0axWcVo27Mvk2D9e80m/Eq6/m7CaTi8E+Nfo d0rRVeimJQ== )`
	RRSIG=956 and DNSKEY=956 verifies the DS RRset
	DS=57947/SHA-256 is now in the chain-of-trust
	`verisignlabs.com. 86400 IN DS ( 57947 8 2 64877db0ea66b229fbe8380decf40a8ba36114f5fb34b5bfaef0716d6029638d )`
	Query to av1.nstld.com for verisignlabs.com/DNSKEY
	Received 773 bytes from 192.42.177.30
	;; Response received from [192.42.177.30] 773 octets ;; HEADER SECTION ;; id = 36204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verisignlabs.com. IN DNSKEY ;; ANSWER SECTION (3 records) verisignlabs.com. 3600 IN DNSKEY ( 256 3 8 AwEAAcdBNfJkfwJ2fKXOrTT15LmwXiP+qixMpLzHRCJfpBbbZhd+jTDbJhsoUEZ/zu1sclV4wlV3 Yxh6hvr8kb/zPyscSDDKeNLgx3LEhAdPiS/mnKUq4suSQatRzknGCet4SxxXj6rO3O7v7S/JF64P IdcIj/lrjK1t1HzFzf13NV+X ) ; Key ID = 16498 verisignlabs.com. 3600 IN DNSKEY ( 257 3 8 AwEAAdiAmIhpo/OUFkl4Y0Tk+cWsmZmpklKZYkgoeKJG8WbNKwEnjMMVT9xoEKFvY4UkmL0/RYE+ 16Zij9njGbDZbfuDr9GozUFCopAddvkf9Dzi2EXzN6+buiIVxN0n5Q30eZjt+1w1fYdulZIe3MN+ 96BT50jCliQ6FSZD7IGOumOKoG8mxg1WUfFVt3sMF4U+Djth4s2/ECXi5iidYcz7LxhOQ6zkiPVM XaFenSm4rBjkgICYFLI3D44XDwDbErlFloxRl6HVjPokY0zuTswie3ZENNZYSbdL70PCIBiVmWfB XmKUc9JTGZSK96ozOksWzd8+HWV2s28W+S2O1BGjdrU= ) ; Key ID = 57947 verisignlabs.com. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240608231950 20240509231950 57947 verisignlabs.com. U4Oth42gMrVVxbuL64kWgXZ9Wr9rr6USQqn21e3pWBP2a6EMpk3i9dY06Ycg7bUXsbnh6Fwck3EU uyo9aOGipsYffQlGVU7n/MpN16+X7UZp3iP9Er2oYfFm5UICZZaJU/XVH97/prcLi15gmhjFvJKs GhkclGJxpL4lVJMWxENloNK8U9iB3a85/rlUiq25rMhXRe53nLYUJuKoQlZByFFIcWklLtQZ2mEG OYRkfRRdPYg2In/b/nFRDHJXoY9IzL3vUslP0wcKAuKV4cNdYaNmyh/i2KIkTx7P2upv4RG7tlMc 0bMo30UY/3VotoLITSWXU+uO2hAbsw1iL0ieyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for verisignlabs.com
	`verisignlabs.com. 3600 IN DNSKEY ( 256 3 8 AwEAAcdBNfJkfwJ2fKXOrTT15LmwXiP+qixMpLzHRCJfpBbbZhd+jTDbJhsoUEZ/zu1sclV4wlV3 Yxh6hvr8kb/zPyscSDDKeNLgx3LEhAdPiS/mnKUq4suSQatRzknGCet4SxxXj6rO3O7v7S/JF64P IdcIj/lrjK1t1HzFzf13NV+X ) ; Key ID = 16498`
	`verisignlabs.com. 3600 IN DNSKEY ( 257 3 8 AwEAAdiAmIhpo/OUFkl4Y0Tk+cWsmZmpklKZYkgoeKJG8WbNKwEnjMMVT9xoEKFvY4UkmL0/RYE+ 16Zij9njGbDZbfuDr9GozUFCopAddvkf9Dzi2EXzN6+buiIVxN0n5Q30eZjt+1w1fYdulZIe3MN+ 96BT50jCliQ6FSZD7IGOumOKoG8mxg1WUfFVt3sMF4U+Djth4s2/ECXi5iidYcz7LxhOQ6zkiPVM XaFenSm4rBjkgICYFLI3D44XDwDbErlFloxRl6HVjPokY0zuTswie3ZENNZYSbdL70PCIBiVmWfB XmKUc9JTGZSK96ozOksWzd8+HWV2s28W+S2O1BGjdrU= ) ; Key ID = 57947`
	DNSKEY=57947/SEP is now in the chain-of-trust
	DS=57947/SHA-256 verifies DNSKEY=57947/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`verisignlabs.com. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240608231950 20240509231950 57947 verisignlabs.com. U4Oth42gMrVVxbuL64kWgXZ9Wr9rr6USQqn21e3pWBP2a6EMpk3i9dY06Ycg7bUXsbnh6Fwck3EU uyo9aOGipsYffQlGVU7n/MpN16+X7UZp3iP9Er2oYfFm5UICZZaJU/XVH97/prcLi15gmhjFvJKs GhkclGJxpL4lVJMWxENloNK8U9iB3a85/rlUiq25rMhXRe53nLYUJuKoQlZByFFIcWklLtQZ2mEG OYRkfRRdPYg2In/b/nFRDHJXoY9IzL3vUslP0wcKAuKV4cNdYaNmyh/i2KIkTx7P2upv4RG7tlMc 0bMo30UY/3VotoLITSWXU+uO2hAbsw1iL0ieyA== )`
	RRSIG=57947 and DNSKEY=57947/SEP verifies the DNSKEY RRset
	DNSKEY=16498 is now in the chain-of-trust
	Query to av2.nstld.com for validatorsearch.verisignlabs.com/A
	Received 1077 bytes from 192.42.178.30
	;; Response received from [192.42.178.30] 1077 octets ;; HEADER SECTION ;; id = 56009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; validatorsearch.verisignlabs.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) verisignlabs.com. 86400 IN SOA ( av1.nstld.com. mdnshelp.verisign.com. 1715300391 ;serial 300 ;refresh 7200 ;retry 1209600 ;expire 86400 ;minimum ) verisignlabs.com. 86400 IN RRSIG ( SOA 8 2 86400 20240608231950 20240509231950 16498 verisignlabs.com. qEUro27yOioqQ1IGCHxb4Kjy1Mf4JgefXf5LPS+FrbHW8kkXqiorIRpNC5rrcFKkbknmNK1GmXL3 I2rcJffAo3iFteVGusBuAKwh4F1suuVGoBQgeucRSYJMeKSua70uYl8hPVsRHAUs+1UBdaVDUplS 90tgo4iDtI6X8WDIyuQ= ) 1T65O517GPM3IAU8A2EOLBG6EQL05ASO.verisignlabs.com. 86400 IN NSEC3 ( 1 0 0 4c44934802d3 1vhs8erk17rrgja3eni1i3occgji90p4 A NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 1T65O517GPM3IAU8A2EOLBG6EQL05ASO.verisignlabs.com. 86400 IN RRSIG ( NSEC3 8 3 86400 20240608231950 20240509231950 16498 verisignlabs.com. oviFm5zFRO5I/DQGzydATidi9hUkfQHG4Jdaz2Q69stGqJqPRFnZm6XUQ1nx4siTKMdhI4pbtdO+ cVmyH9czt/QaZwa4O/L85B5tr0RF9Xkpe/GNYkBeVCpBX/dciqC4/18gAIx5PnAZn0UBv/wR5BHA ACvTtRXdFANLo1mvbL0= ) jgbav7efj7f6gun14hqoqbu27cjkqmov.verisignlabs.com. 86400 IN NSEC3 ( 1 0 0 4c44934802d3 joh04sd5vjsorq11h3a3kok7u37646vs CNAME RRSIG ) jgbav7efj7f6gun14hqoqbu27cjkqmov.verisignlabs.com. 86400 IN RRSIG ( NSEC3 8 3 86400 20240608231950 20240509231950 16498 verisignlabs.com. jKMRSid9Em1TVcIeZN0GlKYjUUrJbbv4P2H0/8cc3VDvClPYp+iJwUi+FvspAvEfQeuMpJ0y6vOu 3dwd+RDG8JXn87Mr106GZzALse36CowM22Ltr/vLUNmMkAwTW33q1HKLdc3sjA428hlIbpOIg3EI Lk7saIeM/B5VhjuI8FA= ) 6ujn8tticg3ngv777bh3e9jcu08fctic.verisignlabs.com. 86400 IN NSEC3 ( 1 0 0 4c44934802d3 7qs3o2pc8jed59cnofgv2h5303tmcmnv ) 6ujn8tticg3ngv777bh3e9jcu08fctic.verisignlabs.com. 86400 IN RRSIG ( NSEC3 8 3 86400 20240608231950 20240509231950 16498 verisignlabs.com. KrUhEtVFa0CKtvOnhcQgF5knz7j4oVQCazedaDsCPDFRSic7bwE4pZKPrIYeV3fK3lTyWRPoZmqb lZEIMTOt02y5+921KpnLIyKRFLd/f8ibOrmG4SRtHMKlsJ+rcczEybQPkuromvhv80CKlHjY+WeK kOUjZyIf5hCHT2aPGz8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Zone verisignlabs.com (192.42.178.30) returns NXDOMAIN for validatorsearch.verisignlabs.com
	NSEC3 validation not implemented yet

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test validatorsearch.verisignlabs.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: