DNSSEC Debugger - xn--12cl1ckad1fac9eda5wta9a5j.world

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-13 07:14:41 UTC

Analyzing DNSSEC problems for xn--12cl1ckad1fac9eda5wta9a5j.world

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 60441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to k.root-servers.net for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	Received 781 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 781 octets ;; HEADER SECTION ;; id = 52202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) world. 172800 IN NS v0n0.nic.world. world. 172800 IN NS v0n1.nic.world. world. 172800 IN NS v0n2.nic.world. world. 172800 IN NS v0n3.nic.world. world. 172800 IN NS v2n0.nic.world. world. 172800 IN NS v2n1.nic.world. world. 86400 IN DS ( 13081 8 2 84c4ee9b8cec0c7eb9c2c892a07df5513897f91c5b3bc80410ebb062e86eac21 ) world. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . O1H6LlUz5dpzFoHQUUXFSBUwk2gVrQWPOgehDw+hUJj+zTLhYIBUBEvAuX/hZo6jGms83Z2KyuDG 6gMxeM6VUrc9S+Ghtd5By83Io3tmqTTF8h7Ae4CO1HFRaly+qXCZX68SrN1cphSGPc+dblIcP7Pz fZN0uuJCTQ6hUvYThbKSwZ/pD4SkWvtUjWbHfww/u19caT7fSSKCEDFFTJMXnZQjozz5DhYjf3mG hUZdlWtvYsxGxoOd5sNWsVoct6sHa9xYS6ixy0GYGY+rTXJzUEA3AesPlaZGOmzFa6ybDn34y2oD O4KpXIVagzMrwGvC/3ww51YzErYrybIohXdTrw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.world. 172800 IN A 65.22.24.1 v0n1.nic.world. 172800 IN A 65.22.25.1 v0n2.nic.world. 172800 IN A 65.22.26.1 v0n3.nic.world. 172800 IN A 161.232.12.1 v2n0.nic.world. 172800 IN A 65.22.27.1 v2n1.nic.world. 172800 IN A 161.232.13.1 v0n0.nic.world. 172800 IN AAAA 2a01:8840:1a::1 v0n1.nic.world. 172800 IN AAAA 2a01:8840:1b::1 v0n2.nic.world. 172800 IN AAAA 2a01:8840:1c::1 v0n3.nic.world. 172800 IN AAAA 2a01:8840:f6::1 v2n0.nic.world. 172800 IN AAAA 2a01:8840:1d::1 v2n1.nic.world. 172800 IN AAAA 2a01:8840:f7::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for world/DNSKEY
	Received 751 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 751 octets ;; HEADER SECTION ;; id = 60693 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; world. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) world. 172800 IN NS v0n0.nic.world. world. 172800 IN NS v0n1.nic.world. world. 172800 IN NS v0n2.nic.world. world. 172800 IN NS v0n3.nic.world. world. 172800 IN NS v2n0.nic.world. world. 172800 IN NS v2n1.nic.world. world. 86400 IN DS ( 13081 8 2 84c4ee9b8cec0c7eb9c2c892a07df5513897f91c5b3bc80410ebb062e86eac21 ) world. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . O1H6LlUz5dpzFoHQUUXFSBUwk2gVrQWPOgehDw+hUJj+zTLhYIBUBEvAuX/hZo6jGms83Z2KyuDG 6gMxeM6VUrc9S+Ghtd5By83Io3tmqTTF8h7Ae4CO1HFRaly+qXCZX68SrN1cphSGPc+dblIcP7Pz fZN0uuJCTQ6hUvYThbKSwZ/pD4SkWvtUjWbHfww/u19caT7fSSKCEDFFTJMXnZQjozz5DhYjf3mG hUZdlWtvYsxGxoOd5sNWsVoct6sHa9xYS6ixy0GYGY+rTXJzUEA3AesPlaZGOmzFa6ybDn34y2oD O4KpXIVagzMrwGvC/3ww51YzErYrybIohXdTrw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.world. 172800 IN A 65.22.24.1 v0n1.nic.world. 172800 IN A 65.22.25.1 v0n2.nic.world. 172800 IN A 65.22.26.1 v0n3.nic.world. 172800 IN A 161.232.12.1 v2n0.nic.world. 172800 IN A 65.22.27.1 v2n1.nic.world. 172800 IN A 161.232.13.1 v0n0.nic.world. 172800 IN AAAA 2a01:8840:1a::1 v0n1.nic.world. 172800 IN AAAA 2a01:8840:1b::1 v0n2.nic.world. 172800 IN AAAA 2a01:8840:1c::1 v0n3.nic.world. 172800 IN AAAA 2a01:8840:f6::1 v2n0.nic.world. 172800 IN AAAA 2a01:8840:1d::1 v2n1.nic.world. 172800 IN AAAA 2a01:8840:f7::1 ;; { "EDNS-VERSION": 0 }
	Found child zone world

world

	Checking DS between . and world
	Query to b.root-servers.net for world/DS
	Received 369 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 369 octets ;; HEADER SECTION ;; id = 56094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; world. IN DS ;; ANSWER SECTION (2 records) world. 86400 IN DS ( 13081 8 2 84c4ee9b8cec0c7eb9c2c892a07df5513897f91c5b3bc80410ebb062e86eac21 ) world. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . O1H6LlUz5dpzFoHQUUXFSBUwk2gVrQWPOgehDw+hUJj+zTLhYIBUBEvAuX/hZo6jGms83Z2KyuDG 6gMxeM6VUrc9S+Ghtd5By83Io3tmqTTF8h7Ae4CO1HFRaly+qXCZX68SrN1cphSGPc+dblIcP7Pz fZN0uuJCTQ6hUvYThbKSwZ/pD4SkWvtUjWbHfww/u19caT7fSSKCEDFFTJMXnZQjozz5DhYjf3mG hUZdlWtvYsxGxoOd5sNWsVoct6sHa9xYS6ixy0GYGY+rTXJzUEA3AesPlaZGOmzFa6ybDn34y2oD O4KpXIVagzMrwGvC/3ww51YzErYrybIohXdTrw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for world in the . zone
	DS=13081/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`world. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . O1H6LlUz5dpzFoHQUUXFSBUwk2gVrQWPOgehDw+hUJj+zTLhYIBUBEvAuX/hZo6jGms83Z2KyuDG 6gMxeM6VUrc9S+Ghtd5By83Io3tmqTTF8h7Ae4CO1HFRaly+qXCZX68SrN1cphSGPc+dblIcP7Pz fZN0uuJCTQ6hUvYThbKSwZ/pD4SkWvtUjWbHfww/u19caT7fSSKCEDFFTJMXnZQjozz5DhYjf3mG hUZdlWtvYsxGxoOd5sNWsVoct6sHa9xYS6ixy0GYGY+rTXJzUEA3AesPlaZGOmzFa6ybDn34y2oD O4KpXIVagzMrwGvC/3ww51YzErYrybIohXdTrw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=13081/SHA-256 is now in the chain-of-trust
	`world. 86400 IN DS ( 13081 8 2 84c4ee9b8cec0c7eb9c2c892a07df5513897f91c5b3bc80410ebb062e86eac21 )`
	Query to v2n1.nic.world for world/DNSKEY
	Received 899 bytes from 161.232.13.1
	;; Response received from [161.232.13.1] 899 octets ;; HEADER SECTION ;; id = 60075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; world. IN DNSKEY ;; ANSWER SECTION (4 records) world. 3600 IN DNSKEY ( 256 3 8 AwEAAZS41B7bl4IkS8PnqZO4hCzoliyvptAnae3DZesM5k5kOnkQCZsAJV/DczfvEuAJf2wPZh56 i7KTy/TRYr1sxlqcUVKdsI2pLEE5S5xHqOWzf5uAXWuxuqmxo3UnkbPXBvkWtKCCt4/1VmqQf0Lo URjIjYsuOCUE3Zxk4sep5aQ3 ) ; keytag 16518 world. 3600 IN DNSKEY ( 256 3 8 AwEAAaQdZ5n5uIRHkVvL17mffI07s4NKGw0YCizojZSjyMmP5YhvAuaBZ4vKCRzoHZxgRJ8CCj24 BybC1rYLXmUhUai+z4K3AVG8AYO5KeZ573xAtWYr04GIYyUZTVQ+i04YkFGTA+O7/2YAs0oTEbMT l+0257rnJOjDfgwFjXLOsdZr ) ; keytag 33273 world. 3600 IN DNSKEY ( 257 3 8 AwEAAa9Cn1Pe7s+NExk4msOZ/NGMixXroCcSdpyXJrdHawrQf537jqQiR3Ehvy0AzAyD2rKtsijV o+6ILgIX5blzR+mOUKjlA0CTsWyck9q89dj1U9BiIT/h3DZs9u8BzVpS4DgObo9clpPoABiDqNAR hv0t+TcDxEUYRvB85huwlUQtm+xS0Va48130UQfll5Mv2Etqb7NAiXZqLynijdYs5FGQ27dUqvjP Dy30pffK1O8rUpCd2zA1/6PPiish4vRBryF7p5pZ3UBL87e6CSYD2rEMEkzXq4rGYNKa5voE6ds5 FdSCxVXDbnOTJc+BLS+afkv4LP2vfNzLmri9G7G+OkU= ) ; keytag 13081 world. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260630161027 20260609151027 13081 world. ElD4j0UnLtxPYsPnGoGKuagRFwuJHRMqC5QyhK97/7eLP6bxck24eeREuCcAeDztBeKu8dM2Narz 9o2E0aEKlmyBJurijPa82cKfehD1KsNXj7jw5dH33353OrJWvbvPRVMKy4CelJQ/Xngc+yrboOyL bfRR1/pU6CSpqUwJOexcZ89JFemeO3dxYO+04M92ehVk/Ac+KKOWcA+Cv0Tmx6kZ6RmKgEPWKUQF hISihOsGyb8b5QgiFEGAfGN3Rk4BmOQGZorVQu1i69HUl9HeBEqjYCw9OFbyxDzfm3WJGCbTJi20 ptCl0U8QeLbXT8+uyxYf5sy+wFyrYVUDuL6V1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for world
	`world. 3600 IN DNSKEY ( 256 3 8 AwEAAZS41B7bl4IkS8PnqZO4hCzoliyvptAnae3DZesM5k5kOnkQCZsAJV/DczfvEuAJf2wPZh56 i7KTy/TRYr1sxlqcUVKdsI2pLEE5S5xHqOWzf5uAXWuxuqmxo3UnkbPXBvkWtKCCt4/1VmqQf0Lo URjIjYsuOCUE3Zxk4sep5aQ3 ) ; keytag 16518`
	`world. 3600 IN DNSKEY ( 256 3 8 AwEAAaQdZ5n5uIRHkVvL17mffI07s4NKGw0YCizojZSjyMmP5YhvAuaBZ4vKCRzoHZxgRJ8CCj24 BybC1rYLXmUhUai+z4K3AVG8AYO5KeZ573xAtWYr04GIYyUZTVQ+i04YkFGTA+O7/2YAs0oTEbMT l+0257rnJOjDfgwFjXLOsdZr ) ; keytag 33273`
	`world. 3600 IN DNSKEY ( 257 3 8 AwEAAa9Cn1Pe7s+NExk4msOZ/NGMixXroCcSdpyXJrdHawrQf537jqQiR3Ehvy0AzAyD2rKtsijV o+6ILgIX5blzR+mOUKjlA0CTsWyck9q89dj1U9BiIT/h3DZs9u8BzVpS4DgObo9clpPoABiDqNAR hv0t+TcDxEUYRvB85huwlUQtm+xS0Va48130UQfll5Mv2Etqb7NAiXZqLynijdYs5FGQ27dUqvjP Dy30pffK1O8rUpCd2zA1/6PPiish4vRBryF7p5pZ3UBL87e6CSYD2rEMEkzXq4rGYNKa5voE6ds5 FdSCxVXDbnOTJc+BLS+afkv4LP2vfNzLmri9G7G+OkU= ) ; keytag 13081`
	DNSKEY=13081/SEP is now in the chain-of-trust
	DS=13081/SHA-256 verifies DNSKEY=13081/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`world. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260630161027 20260609151027 13081 world. ElD4j0UnLtxPYsPnGoGKuagRFwuJHRMqC5QyhK97/7eLP6bxck24eeREuCcAeDztBeKu8dM2Narz 9o2E0aEKlmyBJurijPa82cKfehD1KsNXj7jw5dH33353OrJWvbvPRVMKy4CelJQ/Xngc+yrboOyL bfRR1/pU6CSpqUwJOexcZ89JFemeO3dxYO+04M92ehVk/Ac+KKOWcA+Cv0Tmx6kZ6RmKgEPWKUQF hISihOsGyb8b5QgiFEGAfGN3Rk4BmOQGZorVQu1i69HUl9HeBEqjYCw9OFbyxDzfm3WJGCbTJi20 ptCl0U8QeLbXT8+uyxYf5sy+wFyrYVUDuL6V1w== )`
	RRSIG=13081 and DNSKEY=13081/SEP verifies the DNSKEY RRset
	DNSKEY=16518 is now in the chain-of-trust
	DNSKEY=33273 is now in the chain-of-trust
	Query to v0n1.nic.world for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	Received 611 bytes from 65.22.25.1
	;; Response received from [65.22.25.1] 611 octets ;; HEADER SECTION ;; id = 48288 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) xn--12cl1ckad1fac9eda5wta9a5j.world. 3600 IN NS ivy.ns.cloudflare.com. xn--12cl1ckad1fac9eda5wta9a5j.world. 3600 IN NS jaziel.ns.cloudflare.com. 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN NSEC3 ( 1 1 0 73 3hepmc28plt7n8nt4p019ov8srhfh8uv NS SOA RRSIG DNSKEY NSEC3PARAM ) 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260704071143 20260613061143 33273 world. jtsfcR2DrtySO1lBd5PBATftZ58/ANI1jXHoP+hS2kDr67q1mJMgwSWZqG5/d7OiSRISw9k1RX3J 9/du6KxLP1Zp2Y6XZhtCJIkD1T+8832tqah+0ytxRqLV3pR/s5t5C9AQK1MKPUErpFuaLePLIQUO LjNud2nzJB7FZRZBg1A= ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN NSEC3 ( 1 1 0 73 dh0ftrr632t3o2abo37r5s81nsfcgiou NS DS RRSIG ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260630161027 20260609151027 33273 world. YazCMhZbu+Qf3NqUKcBGEt2oks0wpIvKzxWue8WZ2Qf4c0xYRTfVpa3YFz5oAOGrNbVEzV23kCCV vvo3L6870mbR43OiKBUyM6QGqLUrlksXHgGhsQgS2FMW4REbqdJjAu8harQanr6sSpddleGBaE3L yr5hMHev84nWSS4GAFA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n0.nic.world for xn--12cl1ckad1fac9eda5wta9a5j.world/DNSKEY
	Received 611 bytes from 65.22.24.1
	;; Response received from [65.22.24.1] 611 octets ;; HEADER SECTION ;; id = 57061 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) xn--12cl1ckad1fac9eda5wta9a5j.world. 3600 IN NS jaziel.ns.cloudflare.com. xn--12cl1ckad1fac9eda5wta9a5j.world. 3600 IN NS ivy.ns.cloudflare.com. 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN NSEC3 ( 1 1 0 73 3hepmc28plt7n8nt4p019ov8srhfh8uv NS SOA RRSIG DNSKEY NSEC3PARAM ) 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260704071143 20260613061143 33273 world. jtsfcR2DrtySO1lBd5PBATftZ58/ANI1jXHoP+hS2kDr67q1mJMgwSWZqG5/d7OiSRISw9k1RX3J 9/du6KxLP1Zp2Y6XZhtCJIkD1T+8832tqah+0ytxRqLV3pR/s5t5C9AQK1MKPUErpFuaLePLIQUO LjNud2nzJB7FZRZBg1A= ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN NSEC3 ( 1 1 0 73 dh0ftrr632t3o2abo37r5s81nsfcgiou NS DS RRSIG ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260630161027 20260609151027 33273 world. YazCMhZbu+Qf3NqUKcBGEt2oks0wpIvKzxWue8WZ2Qf4c0xYRTfVpa3YFz5oAOGrNbVEzV23kCCV vvo3L6870mbR43OiKBUyM6QGqLUrlksXHgGhsQgS2FMW4REbqdJjAu8harQanr6sSpddleGBaE3L yr5hMHev84nWSS4GAFA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone xn--12cl1ckad1fac9eda5wta9a5j.world

xn--12cl1ckad1fac9eda5wta9a5j.world

	Checking DS between world and xn--12cl1ckad1fac9eda5wta9a5j.world
	Query to v0n0.nic.world for xn--12cl1ckad1fac9eda5wta9a5j.world/DS
	Received 788 bytes from 65.22.24.1
	;; Response received from [65.22.24.1] 788 octets ;; HEADER SECTION ;; id = 58589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN NSEC3 ( 1 1 0 73 3hepmc28plt7n8nt4p019ov8srhfh8uv NS SOA RRSIG DNSKEY NSEC3PARAM ) 3hecjdu26vt8bv899u7eka3nedi99oqb.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260704071143 20260613061143 33273 world. jtsfcR2DrtySO1lBd5PBATftZ58/ANI1jXHoP+hS2kDr67q1mJMgwSWZqG5/d7OiSRISw9k1RX3J 9/du6KxLP1Zp2Y6XZhtCJIkD1T+8832tqah+0ytxRqLV3pR/s5t5C9AQK1MKPUErpFuaLePLIQUO LjNud2nzJB7FZRZBg1A= ) world. 3600 IN SOA ( v0n0.nic.world. hostmaster.donuts.email. 1781334355 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) world. 3600 IN RRSIG ( SOA 8 1 3600 20260704071143 20260613061143 33273 world. O2rEurO2ZvNrLa1RXLjzmyB/B2ruIZgJT09o1v2gh493z2jrnf1lAt3bdpfvGDHTv8YSY09Z/CKY 9wZn/r+hYlsQI0iY/keKAzHQ9NFOcsDdxqvxT1b77fkt4p3RFvJWFnfFOfp5jJbcOV+M3Wcg9qoa LUyIAulM1TLdexSB/Nw= ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN NSEC3 ( 1 1 0 73 dh0ftrr632t3o2abo37r5s81nsfcgiou NS DS RRSIG ) dgs80v2sfu0e2ka7ipd9trtlhiseqanh.world. 3600 IN RRSIG ( NSEC3 8 2 3600 20260630161027 20260609151027 33273 world. YazCMhZbu+Qf3NqUKcBGEt2oks0wpIvKzxWue8WZ2Qf4c0xYRTfVpa3YFz5oAOGrNbVEzV23kCCV vvo3L6870mbR43OiKBUyM6QGqLUrlksXHgGhsQgS2FMW4REbqdJjAu8harQanr6sSpddleGBaE3L yr5hMHev84nWSS4GAFA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for xn--12cl1ckad1fac9eda5wta9a5j.world in the world zone
	Query to ivy.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/DNSKEY
	Received 125 bytes from 108.162.192.120
	;; Response received from [108.162.192.120] 125 octets ;; HEADER SECTION ;; id = 17359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) xn--12cl1ckad1fac9eda5wta9a5j.world. 1800 IN SOA ( ivy.ns.cloudflare.com. dns.cloudflare.com. 2406741925 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to jaziel.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	Received 96 bytes from 108.162.195.55
	;; Response received from [108.162.195.55] 96 octets ;; HEADER SECTION ;; id = 8598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN A ;; ANSWER SECTION (2 records) xn--12cl1ckad1fac9eda5wta9a5j.world. 300 IN A 104.21.85.128 xn--12cl1ckad1fac9eda5wta9a5j.world. 300 IN A 172.67.205.186 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jaziel.ns.cloudflare.com is authoritative for xn--12cl1ckad1fac9eda5wta9a5j.world
	Query to ivy.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/SOA
	Received 125 bytes from 173.245.58.120
	;; Response received from [173.245.58.120] 125 octets ;; HEADER SECTION ;; id = 30346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN SOA ;; ANSWER SECTION (1 record) xn--12cl1ckad1fac9eda5wta9a5j.world. 1800 IN SOA ( ivy.ns.cloudflare.com. dns.cloudflare.com. 2406741925 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to jaziel.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	xn--12cl1ckad1fac9eda5wta9a5j.world A RR has value 104.21.85.128
	xn--12cl1ckad1fac9eda5wta9a5j.world A RR has value 172.67.205.186
	No RRSIGs found

xn--12cl1ckad1fac9eda5wta9a5j.world

	Query to ivy.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	Received 96 bytes from 172.64.32.120
	;; Response received from [172.64.32.120] 96 octets ;; HEADER SECTION ;; id = 57874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--12cl1ckad1fac9eda5wta9a5j.world. IN A ;; ANSWER SECTION (2 records) xn--12cl1ckad1fac9eda5wta9a5j.world. 300 IN A 172.67.205.186 xn--12cl1ckad1fac9eda5wta9a5j.world. 300 IN A 104.21.85.128 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ivy.ns.cloudflare.com is authoritative for xn--12cl1ckad1fac9eda5wta9a5j.world
	Query to ivy.ns.cloudflare.com for xn--12cl1ckad1fac9eda5wta9a5j.world/A
	xn--12cl1ckad1fac9eda5wta9a5j.world A RR has value 172.67.205.186
	xn--12cl1ckad1fac9eda5wta9a5j.world A RR has value 104.21.85.128
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test xn--12cl1ckad1fac9eda5wta9a5j.world at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: