DNSSEC Debugger - xn--otu796d

Domain Name:

Time: 2026-02-27 03:10:02 UTC

Analyzing DNSSEC problems for xn--otu796d

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 46392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for xn--otu796d/A
	Received 680 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 680 octets ;; HEADER SECTION ;; id = 1210 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) xn--otu796d. 172800 IN NS d.zdnscloud.com. xn--otu796d. 172800 IN NS j.zdnscloud.com. xn--otu796d. 172800 IN NS a.zdnscloud.cn. xn--otu796d. 172800 IN NS g.zdnscloud.com. xn--otu796d. 172800 IN NS b.zdnscloud.cn. xn--otu796d. 172800 IN NS i.zdnscloud.cn. xn--otu796d. 172800 IN NS f.zdnscloud.cn. xn--otu796d. 172800 IN NS c.zdnscloud.com. xn--otu796d. 86400 IN DS ( 47587 8 2 c25353ef849dce2b94e77b4a8997a7ea66d3a8614ec62493a18f072df66de9a6 ) xn--otu796d. 86400 IN RRSIG ( DS 8 1 86400 20260311170000 20260226160000 21831 . SY0wKiW3shnjEARuyDo93i20+Z5rCWllcV1RJYv0eAfuHrKiR8JTLfwHggxYPJfGW9slt+l7lDmi coA/+o5N6btqP1FaymF4UnkiQ/NTMb+DT2OfeuDYDW5o4WlhvIYdwobarJ01RegdLlRJS3AZwkGU bHi3EvR0+ImySnqHm5r5vSVyiTMZHIIv0+9zS163Ww2sVJ+R6N1Dhsy3eH+mDmpqFqEX2gvYMokE 9IS1UkMryr/hvaPFjM4KCBxIWbrewqVnH2wZpNnuPcUSt6eHparK6olPm9aJiJDtdqcRkN1P4hZa Fmndvq9g5PL0f/wkgkJkhUvioNbBRjtMtsR8eg== ) ;; ADDITIONAL SECTION (9 records) g.zdnscloud.com. 172800 IN A 223.72.199.37 f.zdnscloud.cn. 172800 IN A 116.169.54.111 d.zdnscloud.com. 172800 IN A 203.99.27.1 c.zdnscloud.com. 172800 IN A 203.99.26.1 b.zdnscloud.cn. 172800 IN A 203.99.25.1 a.zdnscloud.cn. 172800 IN A 203.99.24.1 j.zdnscloud.com. 172800 IN AAAA 2401:8d00:2::1 i.zdnscloud.cn. 172800 IN AAAA 2401:8d00:1::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for xn--otu796d/DNSKEY
	Received 730 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 730 octets ;; HEADER SECTION ;; id = 19884 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) xn--otu796d. 172800 IN NS a.zdnscloud.cn. xn--otu796d. 172800 IN NS b.zdnscloud.cn. xn--otu796d. 172800 IN NS c.zdnscloud.com. xn--otu796d. 172800 IN NS d.zdnscloud.com. xn--otu796d. 172800 IN NS f.zdnscloud.cn. xn--otu796d. 172800 IN NS g.zdnscloud.com. xn--otu796d. 172800 IN NS i.zdnscloud.cn. xn--otu796d. 172800 IN NS j.zdnscloud.com. xn--otu796d. 86400 IN DS ( 47587 8 2 c25353ef849dce2b94e77b4a8997a7ea66d3a8614ec62493a18f072df66de9a6 ) xn--otu796d. 86400 IN RRSIG ( DS 8 1 86400 20260311170000 20260226160000 21831 . SY0wKiW3shnjEARuyDo93i20+Z5rCWllcV1RJYv0eAfuHrKiR8JTLfwHggxYPJfGW9slt+l7lDmi coA/+o5N6btqP1FaymF4UnkiQ/NTMb+DT2OfeuDYDW5o4WlhvIYdwobarJ01RegdLlRJS3AZwkGU bHi3EvR0+ImySnqHm5r5vSVyiTMZHIIv0+9zS163Ww2sVJ+R6N1Dhsy3eH+mDmpqFqEX2gvYMokE 9IS1UkMryr/hvaPFjM4KCBxIWbrewqVnH2wZpNnuPcUSt6eHparK6olPm9aJiJDtdqcRkN1P4hZa Fmndvq9g5PL0f/wkgkJkhUvioNbBRjtMtsR8eg== ) ;; ADDITIONAL SECTION (9 records) a.zdnscloud.cn. 172800 IN A 203.99.24.1 b.zdnscloud.cn. 172800 IN A 203.99.25.1 c.zdnscloud.com. 172800 IN A 203.99.26.1 d.zdnscloud.com. 172800 IN A 203.99.27.1 f.zdnscloud.cn. 172800 IN A 116.169.54.111 g.zdnscloud.com. 172800 IN A 223.72.199.37 i.zdnscloud.cn. 172800 IN AAAA 2401:8d00:1::1 j.zdnscloud.com. 172800 IN AAAA 2401:8d00:2::1 ;; { "EDNS-VERSION": 0 }
	Found child zone xn--otu796d

xn--otu796d

	Checking DS between . and xn--otu796d
	Query to j.root-servers.net for xn--otu796d/DS
	Received 375 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 375 octets ;; HEADER SECTION ;; id = 41513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN DS ;; ANSWER SECTION (2 records) xn--otu796d. 86400 IN DS ( 47587 8 2 c25353ef849dce2b94e77b4a8997a7ea66d3a8614ec62493a18f072df66de9a6 ) xn--otu796d. 86400 IN RRSIG ( DS 8 1 86400 20260311170000 20260226160000 21831 . SY0wKiW3shnjEARuyDo93i20+Z5rCWllcV1RJYv0eAfuHrKiR8JTLfwHggxYPJfGW9slt+l7lDmi coA/+o5N6btqP1FaymF4UnkiQ/NTMb+DT2OfeuDYDW5o4WlhvIYdwobarJ01RegdLlRJS3AZwkGU bHi3EvR0+ImySnqHm5r5vSVyiTMZHIIv0+9zS163Ww2sVJ+R6N1Dhsy3eH+mDmpqFqEX2gvYMokE 9IS1UkMryr/hvaPFjM4KCBxIWbrewqVnH2wZpNnuPcUSt6eHparK6olPm9aJiJDtdqcRkN1P4hZa Fmndvq9g5PL0f/wkgkJkhUvioNbBRjtMtsR8eg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for xn--otu796d in the . zone
	DS=47587/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`xn--otu796d. 86400 IN RRSIG ( DS 8 1 86400 20260311170000 20260226160000 21831 . SY0wKiW3shnjEARuyDo93i20+Z5rCWllcV1RJYv0eAfuHrKiR8JTLfwHggxYPJfGW9slt+l7lDmi coA/+o5N6btqP1FaymF4UnkiQ/NTMb+DT2OfeuDYDW5o4WlhvIYdwobarJ01RegdLlRJS3AZwkGU bHi3EvR0+ImySnqHm5r5vSVyiTMZHIIv0+9zS163Ww2sVJ+R6N1Dhsy3eH+mDmpqFqEX2gvYMokE 9IS1UkMryr/hvaPFjM4KCBxIWbrewqVnH2wZpNnuPcUSt6eHparK6olPm9aJiJDtdqcRkN1P4hZa Fmndvq9g5PL0f/wkgkJkhUvioNbBRjtMtsR8eg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=47587/SHA-256 is now in the chain-of-trust
	`xn--otu796d. 86400 IN DS ( 47587 8 2 c25353ef849dce2b94e77b4a8997a7ea66d3a8614ec62493a18f072df66de9a6 )`
	Query to j.zdnscloud.com for xn--otu796d/DNSKEY
	Cannot reach IPv6-only name server j.zdnscloud.com
	Query to d.zdnscloud.com for xn--otu796d/DNSKEY
	Received 763 bytes from 203.99.27.1
	;; Response received from [203.99.27.1] 763 octets ;; HEADER SECTION ;; id = 32001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN DNSKEY ;; ANSWER SECTION (3 records) xn--otu796d. 3600 IN DNSKEY ( 256 3 8 AwEAAaCkxKip7aqI5lQHiOKglpTIJ/HMyU5HkD4pBesw/yEJ42zUJTaPyZYjBAz3NObTcJ6sumxA QDc3RCz0G0Lnskf51v27RVcP88jdh88rP/ogRuKXe1QzRs6EPsIqQg6yrSpl5wyqqhcoPjIQ9Qgt pJcHkg1YnX0UPYOdJZWmNPZR ) ; keytag 51681 xn--otu796d. 3600 IN DNSKEY ( 257 3 8 AwEAAciUjru/iBfAxete98TgK9NzEyArosMNJrbDtTFP7NeW3OZ4stE3v81rmsHlVsieWcgjSNgH wlcO9MYNAbrNJRITl3gyGm74tx1arsMXFwYHUrB3rG1SY6dGS8+IVJ4hLu1H+vxqfs9b/z0OV6pZ 0P4h1SP1RLsM/mmwQ8a/XriDPeMG+5VpTQu8bHHC8MwF2KR7Qgz7JqNSrnpLZfq6ba8cX3VbB2jd vVjux+HlU0tVKnmHR2GcB+o0TKMd+N/tRHaygYzP61G/lGrlXee8zME6e1aPBWnNg57pYapS4/0h LbCah8ouewpz284X0G01se+ikG0jGyX/LOlsr0ZNVk0= ) ; keytag 47587 xn--otu796d. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260312011516 20260225234516 47587 xn--otu796d. wRET4kCOwPC8T+Vq7OTUoimavYNxjPUOjS/aEZd5MipHs/MKdIJWWvWJVG68Y4ZBiuYMgo39vU8Y Ce/mfRWmgMRJ1bJia9GUyQmYvBeA0NOCH14ABpOLSFPgyZ6ItyiLFm+P1GbH3pR6eGXaAgVN86vS S9rqYzjVDTC2ieRnIUxqpdZQk9N/Wmsa+WT36RkW6VQeVRYOQ0ttutz2b4lGvjdcxpptJF5x3rgs QsAXGov+jiOJ5LbE3t4kDgKgK/6yh1YT7ALxgiuHzNsCgH/FvScRLxHA3xI77S4CcgXCLbolci1Q mIaSh1G6BqYBRUDFg4b6iQwf5F2UtzAoOgzo2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for xn--otu796d
	`xn--otu796d. 3600 IN DNSKEY ( 256 3 8 AwEAAaCkxKip7aqI5lQHiOKglpTIJ/HMyU5HkD4pBesw/yEJ42zUJTaPyZYjBAz3NObTcJ6sumxA QDc3RCz0G0Lnskf51v27RVcP88jdh88rP/ogRuKXe1QzRs6EPsIqQg6yrSpl5wyqqhcoPjIQ9Qgt pJcHkg1YnX0UPYOdJZWmNPZR ) ; keytag 51681`
	`xn--otu796d. 3600 IN DNSKEY ( 257 3 8 AwEAAciUjru/iBfAxete98TgK9NzEyArosMNJrbDtTFP7NeW3OZ4stE3v81rmsHlVsieWcgjSNgH wlcO9MYNAbrNJRITl3gyGm74tx1arsMXFwYHUrB3rG1SY6dGS8+IVJ4hLu1H+vxqfs9b/z0OV6pZ 0P4h1SP1RLsM/mmwQ8a/XriDPeMG+5VpTQu8bHHC8MwF2KR7Qgz7JqNSrnpLZfq6ba8cX3VbB2jd vVjux+HlU0tVKnmHR2GcB+o0TKMd+N/tRHaygYzP61G/lGrlXee8zME6e1aPBWnNg57pYapS4/0h LbCah8ouewpz284X0G01se+ikG0jGyX/LOlsr0ZNVk0= ) ; keytag 47587`
	DNSKEY=47587/SEP is now in the chain-of-trust
	DS=47587/SHA-256 verifies DNSKEY=47587/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xn--otu796d. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260312011516 20260225234516 47587 xn--otu796d. wRET4kCOwPC8T+Vq7OTUoimavYNxjPUOjS/aEZd5MipHs/MKdIJWWvWJVG68Y4ZBiuYMgo39vU8Y Ce/mfRWmgMRJ1bJia9GUyQmYvBeA0NOCH14ABpOLSFPgyZ6ItyiLFm+P1GbH3pR6eGXaAgVN86vS S9rqYzjVDTC2ieRnIUxqpdZQk9N/Wmsa+WT36RkW6VQeVRYOQ0ttutz2b4lGvjdcxpptJF5x3rgs QsAXGov+jiOJ5LbE3t4kDgKgK/6yh1YT7ALxgiuHzNsCgH/FvScRLxHA3xI77S4CcgXCLbolci1Q mIaSh1G6BqYBRUDFg4b6iQwf5F2UtzAoOgzo2A== )`
	RRSIG=47587 and DNSKEY=47587/SEP verifies the DNSKEY RRset
	DNSKEY=51681 is now in the chain-of-trust
	Query to c.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 203.99.26.1
	;; Response received from [203.99.26.1] 532 octets ;; HEADER SECTION ;; id = 55243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.zdnscloud.com is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to d.zdnscloud.com for xn--otu796d/SOA
	Received 281 bytes from 203.99.27.1
	;; Response received from [203.99.27.1] 281 octets ;; HEADER SECTION ;; id = 24129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN SOA ;; ANSWER SECTION (2 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to i.zdnscloud.cn for xn--otu796d/SOA
	Cannot reach IPv6-only name server i.zdnscloud.cn
	Query to a.zdnscloud.cn for xn--otu796d/SOA
	Received 281 bytes from 203.99.24.1
	;; Response received from [203.99.24.1] 281 octets ;; HEADER SECTION ;; id = 10761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN SOA ;; ANSWER SECTION (2 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to g.zdnscloud.com for xn--otu796d/SOA
	Received 281 bytes from 223.72.199.37
	;; Response received from [223.72.199.37] 281 octets ;; HEADER SECTION ;; id = 7298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN SOA ;; ANSWER SECTION (2 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to j.zdnscloud.com for xn--otu796d/SOA
	Cannot reach IPv6-only name server j.zdnscloud.com
	Query to b.zdnscloud.cn for xn--otu796d/SOA
	Received 590 bytes from 203.99.25.1
	;; Response received from [203.99.25.1] 590 octets ;; HEADER SECTION ;; id = 14977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN SOA ;; ANSWER SECTION (2 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) ;; AUTHORITY SECTION (9 records) xn--otu796d. 3600 IN NS a.zdnscloud.cn. xn--otu796d. 3600 IN NS f.zdnscloud.cn. xn--otu796d. 3600 IN NS i.zdnscloud.cn. xn--otu796d. 3600 IN NS b.zdnscloud.cn. xn--otu796d. 3600 IN NS d.zdnscloud.com. xn--otu796d. 3600 IN NS c.zdnscloud.com. xn--otu796d. 3600 IN NS g.zdnscloud.com. xn--otu796d. 3600 IN NS j.zdnscloud.com. xn--otu796d. 3600 IN RRSIG ( NS 8 1 3600 20260310221516 20260224204516 51681 xn--otu796d. Awg3cPZXhC5gkpPEG193YF/S34Lb5NNfK9SBBG/cPRY0Alz2P8Gabq619CD2Ls2fj58mtoEzpVGm BTJJah4+9uBOBjUJi3OCsULN8j+lY/fjG0jTpbzlUsUHgeOGH64rPR5S60utahBOWnStaHeV7ax3 7Z4F6CC8mk7/28htPPc= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.zdnscloud.cn for xn--otu796d/SOA
	Received 281 bytes from 116.169.54.111
	;; Response received from [116.169.54.111] 281 octets ;; HEADER SECTION ;; id = 22348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN SOA ;; ANSWER SECTION (2 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 203.99.26.1
	;; Response received from [203.99.26.1] 532 octets ;; HEADER SECTION ;; id = 31002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to a.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 203.99.24.1
	;; Response received from [203.99.24.1] 532 octets ;; HEADER SECTION ;; id = 59402 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.zdnscloud.cn is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to a.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 203.99.24.1
	;; Response received from [203.99.24.1] 532 octets ;; HEADER SECTION ;; id = 44096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to d.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 203.99.27.1
	;; Response received from [203.99.27.1] 532 octets ;; HEADER SECTION ;; id = 45708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.zdnscloud.com is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to d.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 203.99.27.1
	;; Response received from [203.99.27.1] 532 octets ;; HEADER SECTION ;; id = 42833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to f.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 116.169.54.111
	;; Response received from [116.169.54.111] 532 octets ;; HEADER SECTION ;; id = 23305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f.zdnscloud.cn is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to f.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 116.169.54.111
	;; Response received from [116.169.54.111] 532 octets ;; HEADER SECTION ;; id = 19008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to g.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 223.72.199.37
	;; Response received from [223.72.199.37] 532 octets ;; HEADER SECTION ;; id = 43734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	g.zdnscloud.com is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to g.zdnscloud.com for xn--otu796d/A
	Received 532 bytes from 223.72.199.37
	;; Response received from [223.72.199.37] 532 octets ;; HEADER SECTION ;; id = 51499 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to b.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 203.99.25.1
	;; Response received from [203.99.25.1] 532 octets ;; HEADER SECTION ;; id = 60224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.zdnscloud.cn is authoritative for xn--otu796d
	Found RRSIG signed by xn--otu796d zone
	Query to b.zdnscloud.cn for xn--otu796d/A
	Received 532 bytes from 203.99.25.1
	;; Response received from [203.99.25.1] 532 octets ;; HEADER SECTION ;; id = 49121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xn--otu796d. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) xn--otu796d. 3600 IN SOA ( a.zdnscloud.com. td_dns_gtld.knet.cn. 1369972445 ;serial 600 ;refresh 200 ;retry 2491200 ;expire 3600 ;minimum ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN NSEC3 ( 1 0 0 - r17qcrrg6259vlj358sj5b8m61upia2i NS SOA RRSIG DNSKEY NSEC3PARAM ) xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= ) qam8k7jdq99g5toput59frolegms951p.xn--otu796d. 3600 IN RRSIG ( NSEC3 8 2 3600 20260310221516 20260224204516 51681 xn--otu796d. cTooMsIL/GrXbMTehmvu+0qmjPgFrd2BomXuFGrE86ihs5X2duScdC3gttE4ppjBlv9B7hjSKfG+ N9jeEoVqx9iArsZY2ZlV8Y81oCepUh5oHTpJeKG6SSa52ro5s5M7ASZgQVjRiKZfhxRHfCk60HqZ hOcTgTIkaq0NKKgTnNw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`xn--otu796d. 3600 IN RRSIG ( SOA 8 1 3600 20260312011516 20260225234516 51681 xn--otu796d. jMudh+xyReoqGXfUkinx8A3nbX6a2Frxj+wzu0nLFqY4YDUM1jqJtnDgaT2/6Q+nt3eKY+N1QHFD Qg/jeQij0g7ZlmYWAH3A9tmEZgXI00+vyG+n47HR0bsSisTFHjrBCsg5aaj//EEyYyAasUM9HJIW +2pAf3KwBqt/t8zRDd4= )`
	RRSIG=51681 and DNSKEY=51681 verifies the SOA RRset

xn--otu796d

	Query to i.zdnscloud.cn for xn--otu796d/A
	Cannot reach IPv6-only name server i.zdnscloud.cn
	Query to j.zdnscloud.com for xn--otu796d/A
	Cannot reach IPv6-only name server j.zdnscloud.com
	No response from xn--otu796d nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test xn--otu796d at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: