Unbound verifies expired DNSSEC signature on gajim.org

Julian Brost julian at 0x4a42.net
Wed May 18 00:07:28 UTC 2016


Hi,

my unbound 1.5.8 currently (as of 2016-05-17 23:43:16 UTC) successfully
verifies the DNSSEC signatures for gajim.org/A where the corresponding
RRSIG record currently looks like this (for full data see attached file
dig.txt):

gajim.org.		86398 IN RRSIG A 8 2 86400 20160517181943 [...]

So in my understanding that signature expired at 2016-05-17 18:19:43 UTC
which is a few hours ago and thus the query should result in a SERVFAIL.
unbound still returns that response, even with the AD flag set. Is that
supposed to happen?

Bind 9.9 in contrast refuses to verify the signature with the following
log messages:

validating @0x7fa464325070: gajim.org DNSKEY: verify failed due to bad
signature (keyid=16786): RRSIG has expired
validating @0x7fa464325070: gajim.org DNSKEY: verify failed due to bad
signature (keyid=42429): RRSIG has expired
validating @0x7fa464325070: gajim.org DNSKEY: no valid signature found (DS)

DNSViz.net also doesn't seem to be too happy with it:
<http://dnsviz.net/d/gajim.org/Vzuwgw/dnssec/>

I've also attached the output of 'unbound-control dump_cache' to ease
debugging, if there's anything else that might be helpful, tell me.

Regards,
Julian

-------------- next part --------------

; <<>> DiG 9.10.4 <<>> gajim.org +dnssec +multiline
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20383
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 5

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;gajim.org.		IN A

;; ANSWER SECTION:
gajim.org.		86398 IN A 212.129.3.231
gajim.org.		86398 IN RRSIG A 8 2 86400 (
				20160517181943 20160417171943 42429 gajim.org.
				Czz3zOwvHbT82pTfk0GU8IbI4X1Ql1zGR1RKzCXDxtGX
				XEETixD4Sicz5k6PZeLw5N+qWiMQJq7q/2IPPgiRwd9M
				RWjyXhtBNQmhAoBpOaHrcy14pe4Det48zkcTR2n2A4ly
				inoyi2If1r9bgZY5JFfylhXnfmlckOLqvBv27rQ= )

;; AUTHORITY SECTION:
gajim.org.		86398 IN NS ns3.gajim.org.
gajim.org.		86398 IN NS ns6.gandi.net.
gajim.org.		86398 IN RRSIG NS 8 2 86400 (
				20160517181943 20160417171943 42429 gajim.org.
				qa+phybVpbvzDzu1FIwTQNplOFo38L3juFZzgtV7ifQ4
				TFfgB1aKlPMElyV+JrCYhoCfNPatljZLda3LIaXjFNh6
				s2FKFtS0R/VCszNniE/0/T5+5pJk5a81XHK1aubzNNmy
				PXuMysIs212WDFmScz6qonPestuLxykmrpf1P2Y= )

;; ADDITIONAL SECTION:
ns3.gajim.org.		86398 IN A 212.129.3.231
ns3.gajim.org.		86398 IN AAAA 2001:bc8:342f:101::1
ns3.gajim.org.		86398 IN RRSIG A 8 3 86400 (
				20160517181943 20160417171943 42429 gajim.org.
				reNyX43VWU1ncSyxh6FmNvmN+beSVncZjPC0Ed/L/U61
				PMJON2Ia62b+8mxkfef4BC4cFpCTnqnh//NhbrbFAvS/
				u9HZpa/jMKouxkamQX9Bz/WQ9Q5+GPDAstGArApQ04io
				priVFpdfeh9gYvmfiRp6eVvaI9Z2FDQlKgrF7PY= )
ns3.gajim.org.		86398 IN RRSIG AAAA 8 3 86400 (
				20160517181943 20160417171943 42429 gajim.org.
				LEByyU1lYFhWXDeYITlzBH20lEJIF8E9fidpY7ri2U3E
				qesKmgZJMJIuRdwaVddynjoorIdefOC97HCHt0KcV8wm
				CC9GIgZwXqPOGmPu2omwIYssJIpuM+EiaHJclsSmi9Kg
				jswjcKfXHrfyRKtV92uZj447M30uWx3zhLAWESc= )

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mi Mai 18 01:43:16 CEST 2016
;; MSG SIZE  rcvd: 819

-------------- next part --------------
START_RRSET_CACHE
;rrset 86395 1 1 11 4
gajim.org.	86395	IN	A	212.129.3.231
gajim.org.	86395	IN	RRSIG	A 8 2 86400 20160517181943 20160417171943 42429 gajim.org. Czz3zOwvHbT82pTfk0GU8IbI4X1Ql1zGR1RKzCXDxtGXXEETixD4Sicz5k6PZeLw5N+qWiMQJq7q/2IPPgiRwd9MRWjyXhtBNQmhAoBpOaHrcy14pe4Det48zkcTR2n2A4lyinoyi2If1r9bgZY5JFfylhXnfmlckOLqvBv27rQ= ;{id = 42429}
;rrset 86395 3 2 8 0
gajim.org.	86395	IN	DNSKEY	256 3 8 AwEAAcQhCh+yhLUbdIHwy55laMvLoHHK3YoVq99P5yISzMGylLmK+UBXxY7vBT8PPFvM8sQg4zYwfDbZHKDtw3BJihhXVpZ4idYGBH2uB2jcAjw0sbyDe6OLwK8/TbeOMDFpSRxgppJkAivzaypXiXxaJ0LRjisZtR7F41cwyqC4wnAZ ;{id = 42429 (zsk), size = 1024b}
gajim.org.	86395	IN	DNSKEY	256 3 8 AwEAAdC0V6bdl/BwH5FjFRzwjJ2iIXZRP/lNmsc5a5rJ91WqLdHCmniHoSgS0cGtAzepVV0TklaUEReNioEVhYculef/FdiBCJ/eOilRFkmJf6MdefthAIhCHjx/y+qzP/jM2ujCbzzQiWkVdlTUfJeAKciTSzHOF4UycIIUPXCLLMMz ;{id = 58254 (zsk), size = 1024b}
gajim.org.	86395	IN	DNSKEY	257 3 8 AwEAAbSkkJkJZ1IMbRWNA4y0mPFcRUd1HPcjkHtm3BFWJEeWcrCToGFBbuQwFalLXMLBisWE/+8m6/NvFPODAcWe6kpXwPa1DDoe0wkgMrTs7mX7zJipHqCdb3GIuW7DLeHGcuasoRufvVk3Ny/j4ROHUaulHAuoOjaWX4pFLfhg7joh8ARLhivJYmiFEFEUiyM7uJp1CGL3zfEKo7cPfvQx+ZgtgKCbvuEQQ+9iWq5jg0mFbPTAjw8842mWQpPiizI00cGkk1/ugedFwsHGNKpIIIvMgxyLdkK25ASm0qBZRa2QyNg8jc/m2TmzVwufmbjCEr2KYKuUMQnwzY2ZJcv6/fc= ;{id = 16786 (ksk), size = 2048b}
gajim.org.	86395	IN	RRSIG	DNSKEY 8 2 86400 20160517181943 20160417171943 16786 gajim.org. JiVJg5EczlKZ2ivopw3lQtjofgSWxg8hbjNTYc1QwaScRdR0PszK3hxORacFp2qg3GF87Hercd+jJ2+oUGbjNHTnoXyQXb5Aqcki80TrVuERse1Ey8h0jFWFIN6Hpp3Vv/3sfzHMsttpPL3c912ymqptEZhaJ3bPvFrZmGMWDOpzxCMjd2Fy/tTMr58SElLYIsWPWuCUyozkiQeFTPeCsWka41YcFNP/i4xvytv6JPc/F+w8vDBZ3L8RzVQcrOs+pgXSIgATXQVIQcoqbxfKhmQVNQzmrKe/UJI2n/QNaS0bykVbhuZdxBj8oHg/yrtHjZxq19zpGbwDnsxZNtGr5A== ;{id = 16786}
gajim.org.	86395	IN	RRSIG	DNSKEY 8 2 86400 20160517181943 20160417171943 42429 gajim.org. gCtUWqV7CwaEctaj3EkWIiBEG9B+GFDZftNcHRnVkjQLlRgteoHjbKxsE6ZSglfA/ObiJb9nJnc647wu9yYXTDMv2tW/zNRVMZIFvft21FETJjuK3V5qC8aapdK8JXD04reAezDNqxj7Y/nq8oHSikUmn5vph3Umri2P9z9TgUg= ;{id = 42429}
;rrset 295 1 0 8 0
av3.nstld.com.	295	IN	A	192.82.133.30
;rrset 295 1 0 8 0
av2.nstld.com.	295	IN	AAAA	2001:500:125::30
;rrset 3595 1 0 7 0
gtld-servers.net.	3595	IN	SOA	av4.nstld.com. nstld.verisign-grs.com. 2016010700 3600 900 1209600 86400
;rrset 1195 1 0 7 0
gandi.net.	1195	IN	SOA	dns0.gandi.net. hostmaster.gandi.net. 2016051200 900 900 1209600 1200
;rrset 86395 1 0 3 0
dns0.gandi.net.	86395	IN	AAAA	2001:4b98:d:1::39
;rrset 86395 1 0 3 0
dns0.gandi.net.	86395	IN	A	217.70.177.39
;rrset 86395 1 0 3 0
dns2.gandi.net.	86395	IN	A	217.70.183.211
;rrset 86395 5 0 7 0
gandi.net.	86395	IN	NS	dns2.gandi.net.
gandi.net.	86395	IN	NS	dns3.gandi.net.
gandi.net.	86395	IN	NS	dns1.gandi.net.
gandi.net.	86395	IN	NS	dns4.gandi.net.
gandi.net.	86395	IN	NS	dns0.gandi.net.
;rrset 86395 4 0 2 0
gtld-servers.net.	172795	IN	NS	av1.nstld.com.
gtld-servers.net.	172795	IN	NS	av2.nstld.com.
gtld-servers.net.	172795	IN	NS	av3.nstld.com.
gtld-servers.net.	172795	IN	NS	av4.nstld.com.
;rrset 86395 1 0 1 0
a.gtld-servers.net.	172795	IN	A	192.5.6.30
;rrset 86395 1 0 1 0
h.gtld-servers.net.	172795	IN	A	192.54.112.30
;rrset 86395 1 0 1 0
j.gtld-servers.net.	172795	IN	A	192.48.79.30
;rrset 86395 1 0 1 0
k.gtld-servers.net.	172795	IN	A	192.52.178.30
;rrset 86395 1 0 1 0
m.gtld-servers.net.	172795	IN	A	192.55.83.30
;rrset 86395 1 0 1 0
c0.org.afilias-nst.info.	172795	IN	AAAA	2001:500:b::1
;rrset 86395 1 0 1 0
a2.org.afilias-nst.info.	172795	IN	A	199.249.112.1
;rrset 86395 1 0 1 0
a0.org.afilias-nst.info.	172795	IN	A	199.19.56.1
;rrset 86395 2 1 11 4
org.	86395	IN	DS	9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891BFE7FF8E5
org.	86395	IN	DS	9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982
org.	86395	IN	RRSIG	DS 8 1 86400 20160527170000 20160517160000 60615 . c4o2tL4Sp/7DOCcVMtUqNSwP8HXCveY//JcF+B+xBdGmAQhKATGPG/MEyF5BSTaElG1KHgaHIsdEDihbT/kRF2g3vf39qhlmUl3VjhuN4enFiydusixpOb/442Gd5qFXl4Im235NxnX0aAw4yhEEI0OnXz2RWai0b5eDMdYn3/Q= ;{id = 60615}
;rrset 86395 2 1 8 0
.	172795	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
.	172795	IN	DNSKEY	256 3 8 AwEAAarQO0FTE/l6LEKFlZllJIwXuLGd3q5d8S8NH+ntOeIMN81A5wAI18g3u9w/esNkThwgXTEa2mX1iOPdTcl3yRleAExxF22lEU2E0GKY2XdYr/BxP5fojJAPRgtEGDl72NSwSnD2/a8uPNirAJZoab36Hlw41QxEl7bmCo0280mt ;{id = 60615 (zsk), size = 1024b}
.	172795	IN	RRSIG	DNSKEY 8 0 172800 20160525235959 20160511000000 19036 . eiTD0OB7H67EpFOVWtRl60LC+i48VxxXBdFvdyEORO49OskLCI434ki6RayGPLgSBYDxWLpHNx8EEbRIxEYgYP8ck4hmgTcax6qk5zhwKCAL8I0mOBeZJddIE+fKXFtA0+/ESzszlHfchI1z/RLuxGCkmkBAQto2cqhUbFsmTwOnJ6uu4bkSRYUw1YYOF1LHnieN9IJ5S/5r1T79cIiR2reGQN00nNCiHmKAItpU4WnWO3NYsJxfA8iMI6H9GT5yVSW7VnK8l24crKQcC51MjuZnPB1eGdXHh/HM3OKJ2aaa5jwRIb5jOltEOz7mhZfMDGTWbHqp1nQpt34QJBuhng== ;{id = 19036}
;rrset 86395 1 0 3 0
d.root-servers.net.	518395	IN	A	199.7.91.13
;rrset 86395 1 0 3 0
f.root-servers.net.	518395	IN	A	192.5.5.241
;rrset 86395 1 0 3 0
i.root-servers.net.	518395	IN	AAAA	2001:7fe::53
;rrset 86395 1 0 3 0
k.root-servers.net.	518395	IN	AAAA	2001:7fd::1
;rrset 86395 1 0 3 0
l.root-servers.net.	518395	IN	AAAA	2001:500:9f::42
;rrset 86395 1 0 3 0
l.root-servers.net.	518395	IN	A	199.7.83.42
;rrset 86395 1 0 3 0
m.root-servers.net.	518395	IN	AAAA	2001:dc3::35
;rrset 295 1 0 8 0
av4.nstld.com.	295	IN	AAAA	2001:500:127::30
;rrset 295 1 0 8 0
av4.nstld.com.	295	IN	A	192.82.134.30
;rrset 86395 3 1 11 4
gajim.org.	86395	IN	DS	42429 8 2 494F92A962FFD0899829D36ACD9608A9E4CA5624631DA3E543FE85C673D58342
gajim.org.	86395	IN	DS	58254 8 2 86010DFC70D9C43A44A14F05F816B4E1043528AAF4B50B8AEFFCE1B56B0A279E
gajim.org.	86395	IN	DS	16786 8 2 F7F8116BFAB9B3B3DDBD862F5753BFBDC31F763CCF6CDE5180B9D3CF24283F5C
gajim.org.	86395	IN	RRSIG	DS 7 2 86400 20160607150640 20160517140640 52860 org. c8RTJEghMN89yC0PWwQR0vU8RTa2UGv16dp/Poygm8xvw89anRDGFq6AyxAEJrwf+lX+WyNu8FhLNnrJZowSJH0OlJqLhTj5UGT2jzmsHx2o8Di81XVf7IGtQ9Sg7Ons6OCqpGE1LLIbRa0I1b27c6m7/ZoDrBLGLvRU7ZIfMJ4= ;{id = 52860}
;rrset 895 4 3 8 0
org.	895	IN	DNSKEY	257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ;{id = 9795 (ksk), size = 2048b}
org.	895	IN	DNSKEY	256 3 7 AwEAAebZOMc2aV6wi03zOgdiQhZqTbD043sXt5xRsTPn9vxukojZcsa6cOIrfqPb3l57m7u5H3r8inU8QbsC/aAYV7EOeSGNcK/lQepKSR+rlvq+7iMXoXVa9dL1tRpHDjNLp6QW+ly/jbfe5nzhptfbiiq3o/uSICf7SxF+Ho+vp4MD ;{id = 52860 (zsk), size = 1024b}
org.	895	IN	DNSKEY	256 3 7 AwEAAZ+JwpM2QvhT/1EXUPyoiythOolQZGOkjyBZs95c0nXZkz4pcah/s8WWkRgyrr+peLc1P5yoBwWR10/avmNIPfgeRuwKROdCtt+pe0DME9aZIpRGA7CJY18pJR94Zb+sB5ms4CQsOE67wSZZYZt7FSVNmmVHju8vTCDlqWh22m// ;{id = 12510 (zsk), size = 1024b}
org.	895	IN	DNSKEY	257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ;{id = 17883 (ksk), size = 2048b}
org.	895	IN	RRSIG	DNSKEY 7 1 900 20160607150640 20160517140640 9795 org. I36WRvFbDltNq8dZtBUW1+WIlZwHDqmlUeh2ib5use7FT+IZGr3t2s8bvvTlzbYxaKcaTpp6Xl0LawQCAqpUsLvAtzPFdpGSaeV49n8AvU+d7d350Ri5fPXzr4sO2iuflpZB1sCMsjNvM2rBJ/Cc6A4dbMX7HVC4k8jFHC6abUFv7xmcnyteKzrNXyUcV8K8uTnl4+f/0wu9wGaIJhPNga+YpeMaoDaE0yIuR1HcsUBFJyd57t9LB54/dDZRQjoXP/DCFQ/ViHDed/VXJReYBpPg9sG8ObHB6UKYu2oOB9hwmELauFRqzAFNBhHE48ZNF6/qFVbuVP1xX/WxLw95dg== ;{id = 9795}
org.	895	IN	RRSIG	DNSKEY 7 1 900 20160607150640 20160517140640 17883 org. t+RKppqRAvieTn0/+zn1mOqDRzY4M9aY85hAN1HOhhTiS8hEgJziLqwyXRCM7Cf3ISnHXdIHik+7N521bqTyp+gQGa3jhXtCY6/1M567UKjR355KDEeCjp66U2EfLDIZESGDWmqdDdD7CDrG1YWuPTugJpg5qa3CwRN1MxLDyMAlrEQIWYeQRFOxTaHnDeaLIhpEdjdVJecL93D+qIP8mx/xhN8JTcILTpsvL++SBhmyUaWGySZ12cQR8LfiGr5IZffJIKvpQ/xIXBLWFaIPRA4fizxWHcnoBBnO8t2/kh27oQeauIO0GHRWeL135MrhLznmHoNdNyZizq08r1r0NA== ;{id = 17883}
org.	895	IN	RRSIG	DNSKEY 7 1 900 20160607150640 20160517140640 52860 org. IZlqTLv8ovmu3vBWtQRcpD4Mmy6O/TdvzVfDbP9LTDcSx0qPGow5K5jJ2xVwg7/lpyxUxQBbqjdRX8HlKswGm1bm6O1MWGuvxPbDABEcv7GcuqCemTo4dRZitXl9xBPl0ETIy13KlURSbgEbOvcCzZoeUKxDYfV7v+euuONhSmw= ;{id = 52860}
;rrset 86395 1 1 2 0
5V0U2ND2MBGDSV04FL1E0L7PAPHVKFHQ.com.	86395	IN	NSEC3	1 1 0 - 5v14c9nnj6dm67ejje086417vg0m6ksd NS DS RRSIG ;{flags: optout}
5V0U2ND2MBGDSV04FL1E0L7PAPHVKFHQ.com.	86395	IN	RRSIG	NSEC3 8 2 86400 20160523044612 20160516033612 34745 com. wendzw+QWNTcazaVsa2ANDM+a/BjSuFjCVGa1POZE8DPXKXwu4jfW+zr7UGPC+kn5som8QQ3Xhq5jE7HqPs0fjgBkg2ub9UD7xzw/5rA3XghPfPgSY4vOoxTx4N22NXX1xvnc+pWGWHkINd4BkiFm8TK7bP1gyFkJ27P1jkE0Kc= ;{id = 34745}
;rrset 86395 1 0 3 0
dns4.gandi.net.	86395	IN	A	217.70.186.184
;rrset 86395 1 1 2 0
J8K4E5FLVSD8630RLMF25QQ6VDM2RC8C.net.	86395	IN	NSEC3	1 1 0 - j8lnmutbehtnodlf50d03meua0ijnh9c NS DS RRSIG ;{flags: optout}
J8K4E5FLVSD8630RLMF25QQ6VDM2RC8C.net.	86395	IN	RRSIG	NSEC3 8 2 86400 20160524051556 20160517040556 50762 net. CX75Ifm8zw17v8UdMdL1NxXgw4iA9VWvg50ErVsqdCzni3kOpFWjeZYRW8BxHxDwS4ApgdwC5WhvjtEb2SEZrGLZKhBJttxBPTU5ROO2BYOTBFpLKbA11klEH1tjp6N1zqiNzO3ZmU1ShtvfYQ1t9Ra5a1qOMSbcVMbRRg0IRu8= ;{id = 50762}
;rrset 86395 1 1 2 0
A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net.	86395	IN	NSEC3	1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ;{flags: optout}
A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net.	86395	IN	RRSIG	NSEC3 8 2 86400 20160522053945 20160515042945 50762 net. VK5DTxXk1JD9/WlplsMJMM8x2/q6pyJEzJ0ltKp9cnUabqiLzi0lJmFF/JFOgtY8+DuSlRiyrusP6V2KnSAcYyhJd5qKpJ9E+ERrvPyRTLFzRgi1WRcln72PJEZ+4dnk2SVj2aDBoWYWlfjh43WS8guk4kBtG/rhA0dOs6uMIig= ;{id = 50762}
;rrset 86395 1 0 1 0
b.gtld-servers.net.	172795	IN	AAAA	2001:503:231d::2:30
;rrset 86395 1 0 1 0
g.gtld-servers.net.	172795	IN	A	192.42.93.30
;rrset 86395 1 0 1 0
i.gtld-servers.net.	172795	IN	A	192.43.172.30
;rrset 86395 1 0 1 0
a0.org.afilias-nst.info.	172795	IN	AAAA	2001:500:e::1
;rrset 86395 1 0 1 0
b2.org.afilias-nst.org.	172795	IN	AAAA	2001:500:48::1
;rrset 86395 1 1 2 0
net.	86395	IN	DS	35886 8 2 7862B27F5F516EBE19680444D4CE5E762981931842C465F00236401D8BD973EE
net.	86395	IN	RRSIG	DS 8 1 86400 20160527170000 20160517160000 60615 . cJbrtKHlaMXmqcQprCDs5Xc6wmSJIA9s3gfnao/wompoomoEaDMTPoJIHIxLz1ML05L6G4vEBLmNMcbiZi0xDQd+2Ul6lduF4gRz9Flw597gGKVr06BFErzAKdV9YuCoDu0gnTlKYmcrXchbqrbazhVgtaVyYVoRg2AFEz0nrH8= ;{id = 60615}
;rrset 86395 13 0 2 0
net.	86395	IN	NS	k.gtld-servers.net.
net.	86395	IN	NS	i.gtld-servers.net.
net.	86395	IN	NS	e.gtld-servers.net.
net.	86395	IN	NS	l.gtld-servers.net.
net.	86395	IN	NS	j.gtld-servers.net.
net.	86395	IN	NS	h.gtld-servers.net.
net.	86395	IN	NS	b.gtld-servers.net.
net.	86395	IN	NS	f.gtld-servers.net.
net.	86395	IN	NS	a.gtld-servers.net.
net.	86395	IN	NS	c.gtld-servers.net.
net.	86395	IN	NS	m.gtld-servers.net.
net.	86395	IN	NS	d.gtld-servers.net.
net.	86395	IN	NS	g.gtld-servers.net.
;rrset 86395 1 0 3 0
a.root-servers.net.	518395	IN	AAAA	2001:503:ba3e::2:30
;rrset 86395 1 0 3 0
a.root-servers.net.	518395	IN	A	198.41.0.4
;rrset 86395 1 0 3 0
b.root-servers.net.	518395	IN	AAAA	2001:500:84::b
;rrset 86395 1 0 3 0
i.root-servers.net.	518395	IN	A	192.36.148.17
;rrset 86395 1 0 3 0
j.root-servers.net.	518395	IN	AAAA	2001:503:c27::2:30
;rrset 86395 1 0 3 0
j.root-servers.net.	518395	IN	A	192.58.128.30
;rrset 86395 1 0 3 0
k.root-servers.net.	518395	IN	A	193.0.14.129
;rrset 86395 1 1 11 4
ns3.gajim.org.	86395	IN	A	212.129.3.231
ns3.gajim.org.	86395	IN	RRSIG	A 8 3 86400 20160517181943 20160417171943 42429 gajim.org. reNyX43VWU1ncSyxh6FmNvmN+beSVncZjPC0Ed/L/U61PMJON2Ia62b+8mxkfef4BC4cFpCTnqnh//NhbrbFAvS/u9HZpa/jMKouxkamQX9Bz/WQ9Q5+GPDAstGArApQ04iopriVFpdfeh9gYvmfiRp6eVvaI9Z2FDQlKgrF7PY= ;{id = 42429}
;rrset 295 1 0 8 0
av2.nstld.com.	295	IN	A	192.42.178.30
;rrset 295 1 0 8 0
av3.nstld.com.	295	IN	AAAA	2001:500:126::30
;rrset 86395 1 0 3 0
dns1.gandi.net.	86395	IN	AAAA	2001:4b98:d:1::45
;rrset 86395 1 0 3 0
dns2.gandi.net.	86395	IN	AAAA	2001:4b98:d:589::211
;rrset 86395 1 0 3 0
dns3.gandi.net.	86395	IN	A	217.70.184.14
;rrset 86395 1 0 8 0
dns4.gandi.net.	86395	IN	AAAA	2001:4b98:dc2:90:217:70:186:184
;rrset 86395 1 1 2 0
5QD8VL68T2I9KOBD32KJ8LJVH5OH2PQ0.net.	86395	IN	NSEC3	1 1 0 - 5qdppotuk27kkp9ligtrb0k1cbvm9cim NS DS RRSIG ;{flags: optout}
5QD8VL68T2I9KOBD32KJ8LJVH5OH2PQ0.net.	86395	IN	RRSIG	NSEC3 8 2 86400 20160522052828 20160515041828 50762 net. eUwachWcfrO/V84ihHAjHtsh39s+5BBLGId+Q7IfWIItS90uPa9B2+EPQwT+AlRxAq/7bpDZwZWAbj2uBhjHA70HUtVZ4+33hlCc01f/EW9nHfCaKzNMaANzzdTGLP07Auv9FpmQ7wnMnUVujlGdDmuhnjbkQD37WTcQduwS9xs= ;{id = 50762}
;rrset 86395 1 0 1 0
b.gtld-servers.net.	172795	IN	A	192.33.14.30
;rrset 86395 1 0 1 0
c.gtld-servers.net.	172795	IN	A	192.26.92.30
;rrset 86395 1 0 1 0
e.gtld-servers.net.	172795	IN	A	192.12.94.30
;rrset 86395 13 0 2 0
com.	172795	IN	NS	a.gtld-servers.net.
com.	172795	IN	NS	b.gtld-servers.net.
com.	172795	IN	NS	c.gtld-servers.net.
com.	172795	IN	NS	d.gtld-servers.net.
com.	172795	IN	NS	e.gtld-servers.net.
com.	172795	IN	NS	f.gtld-servers.net.
com.	172795	IN	NS	g.gtld-servers.net.
com.	172795	IN	NS	h.gtld-servers.net.
com.	172795	IN	NS	i.gtld-servers.net.
com.	172795	IN	NS	j.gtld-servers.net.
com.	172795	IN	NS	k.gtld-servers.net.
com.	172795	IN	NS	l.gtld-servers.net.
com.	172795	IN	NS	m.gtld-servers.net.
;rrset 86395 1 0 1 0
b0.org.afilias-nst.org.	172795	IN	A	199.19.54.1
;rrset 86395 1 0 1 0
d0.org.afilias-nst.org.	172795	IN	AAAA	2001:500:f::1
;rrset 86395 1 0 1 0
d0.org.afilias-nst.org.	172795	IN	A	199.19.57.1
;rrset 86395 1 0 1 0
b2.org.afilias-nst.org.	172795	IN	A	199.249.120.1
;rrset 86395 1 0 3 0
b.root-servers.net.	518395	IN	A	192.228.79.201
;rrset 86395 1 0 3 0
c.root-servers.net.	518395	IN	AAAA	2001:500:2::c
;rrset 86395 1 0 3 0
c.root-servers.net.	518395	IN	A	192.33.4.12
;rrset 86395 1 0 3 0
g.root-servers.net.	518395	IN	A	192.112.36.4
;rrset 86395 1 0 3 0
h.root-servers.net.	518395	IN	AAAA	2001:500:1::53
;rrset 86395 2 1 11 4
gajim.org.	86395	IN	NS	ns6.gandi.net.
gajim.org.	86395	IN	NS	ns3.gajim.org.
gajim.org.	86395	IN	RRSIG	NS 8 2 86400 20160517181943 20160417171943 42429 gajim.org. qa+phybVpbvzDzu1FIwTQNplOFo38L3juFZzgtV7ifQ4TFfgB1aKlPMElyV+JrCYhoCfNPatljZLda3LIaXjFNh6s2FKFtS0R/VCszNniE/0/T5+5pJk5a81XHK1aubzNNmyPXuMysIs212WDFmScz6qonPestuLxykmrpf1P2Y= ;{id = 42429}
;rrset 86395 1 1 11 4
ns3.gajim.org.	86395	IN	AAAA	2001:bc8:342f:101::1
ns3.gajim.org.	86395	IN	RRSIG	AAAA 8 3 86400 20160517181943 20160417171943 42429 gajim.org. LEByyU1lYFhWXDeYITlzBH20lEJIF8E9fidpY7ri2U3EqesKmgZJMJIuRdwaVddynjoorIdefOC97HCHt0KcV8wmCC9GIgZwXqPOGmPu2omwIYssJIpuM+EiaHJclsSmi9KgjswjcKfXHrfyRKtV92uZj447M30uWx3zhLAWESc= ;{id = 42429}
;rrset 295 1 0 3 0
av1.nstld.com.	295	IN	AAAA	2001:500:124::30
;rrset 295 1 0 3 0
av1.nstld.com.	295	IN	A	192.42.177.30
;rrset 86395 4 0 7 0
nstld.com.	86395	IN	NS	av3.nstld.com.
nstld.com.	86395	IN	NS	av4.nstld.com.
nstld.com.	86395	IN	NS	av2.nstld.com.
nstld.com.	86395	IN	NS	av1.nstld.com.
;rrset 86395 1 0 8 0
ns6.gandi.net.	86395	IN	A	217.70.177.40
;rrset 86395 1 1 2 0
CK0POJMG874LJREF7EFN8430QVIT8BSM.com.	86395	IN	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM ;{flags: optout}
CK0POJMG874LJREF7EFN8430QVIT8BSM.com.	86395	IN	RRSIG	NSEC3 8 2 86400 20160522050725 20160515035725 34745 com. Og2nR0w6gJppWGoguvWKWs1ckF70tAhGyMOfzy4n+ihqvEtVB8DtBsqjGyLPnDA1DOtjiWsBq/qLa1DVsQ9Z6G74yj6n4GnXtfFcKl13rEX2NMALC6RADMyoyh2N7yGqQYNAnT8l2ZWRE03m48+6cbz/C3ejFiCe9KyhlrZX6/Y= ;{id = 34745}
;rrset 86395 1 0 3 0
dns1.gandi.net.	86395	IN	A	217.70.177.45
;rrset 86395 1 0 1 0
a.gtld-servers.net.	172795	IN	AAAA	2001:503:a83e::2:30
;rrset 86395 1 0 1 0
d.gtld-servers.net.	172795	IN	A	192.31.80.30
;rrset 86395 1 0 1 0
f.gtld-servers.net.	172795	IN	A	192.35.51.30
;rrset 86395 1 0 1 0
l.gtld-servers.net.	172795	IN	A	192.41.162.30
;rrset 86395 1 1 2 0
com.	86395	IN	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
com.	86395	IN	RRSIG	DS 8 1 86400 20160527170000 20160517160000 60615 . kNN7xRYwU3xMbOOF2tvga9dvMYg8wUfSuYk3kEvoeqOJ/6qKVdblj1DdE0UPcNxINOVjDnP9Bcet8Swz0mge7h43InJwHsKE2oYwUn/nbsYzTN+/1hYxM+MYbhhGGCC5NeXJ8gOdE113bD1PAP3KjbT7k0p49PScFWt6c51ir1g= ;{id = 60615}
;rrset 86395 1 0 1 0
b0.org.afilias-nst.org.	172795	IN	AAAA	2001:500:c::1
;rrset 86395 1 0 1 0
c0.org.afilias-nst.info.	172795	IN	A	199.19.53.1
;rrset 86395 1 0 1 0
a2.org.afilias-nst.info.	172795	IN	AAAA	2001:500:40::1
;rrset 86395 6 0 2 0
org.	172795	IN	NS	b0.org.afilias-nst.org.
org.	172795	IN	NS	d0.org.afilias-nst.org.
org.	172795	IN	NS	c0.org.afilias-nst.info.
org.	172795	IN	NS	a2.org.afilias-nst.info.
org.	172795	IN	NS	a0.org.afilias-nst.info.
org.	172795	IN	NS	b2.org.afilias-nst.org.
;rrset 86395 1 0 3 0
d.root-servers.net.	518395	IN	AAAA	2001:500:2d::d
;rrset 86395 1 0 3 0
e.root-servers.net.	518395	IN	A	192.203.230.10
;rrset 86395 1 0 3 0
f.root-servers.net.	518395	IN	AAAA	2001:500:2f::f
;rrset 86395 1 0 3 0
h.root-servers.net.	518395	IN	A	198.97.190.53
;rrset 86395 1 0 3 0
m.root-servers.net.	518395	IN	A	202.12.27.33
;rrset 86395 13 1 8 0
.	518395	IN	NS	a.root-servers.net.
.	518395	IN	NS	b.root-servers.net.
.	518395	IN	NS	c.root-servers.net.
.	518395	IN	NS	d.root-servers.net.
.	518395	IN	NS	e.root-servers.net.
.	518395	IN	NS	f.root-servers.net.
.	518395	IN	NS	g.root-servers.net.
.	518395	IN	NS	h.root-servers.net.
.	518395	IN	NS	i.root-servers.net.
.	518395	IN	NS	j.root-servers.net.
.	518395	IN	NS	k.root-servers.net.
.	518395	IN	NS	l.root-servers.net.
.	518395	IN	NS	m.root-servers.net.
.	518395	IN	RRSIG	NS 8 0 518400 20160527170000 20160517160000 60615 . bfYnR0XRZ2GDQIp+6X4vFlDzicKd/GDt2pr6rFK4VA4fG0wCnidP3YQp9ujWhWrBCTVHux9J+hJWBA4546beDqGGkpOaG8QX3paRF7rVoRGYkX+CqWuiIfI0DThKyJBQYYyWs2lLqZU9o7aDe8HJLaZbme+cVtuB4q7S0z4OUhY= ;{id = 60615}
END_RRSET_CACHE
START_MSG_CACHE
msg ns6.gandi.net. IN AAAA 32896 1 1195 0 0 1 0
gandi.net. IN SOA 4
msg org. IN DNSKEY 32896 1 895 0 1 0 0
org. IN DNSKEY 0
msg j.gtld-servers.net. IN AAAA 32896 1 3595 0 0 1 0
gtld-servers.net. IN SOA 4
msg g.gtld-servers.net. IN AAAA 32896 1 3595 0 0 1 0
gtld-servers.net. IN SOA 4
msg . IN NS 32896 1 86395 0 1 0 24
. IN NS 0
a.root-servers.net. IN A 0
b.root-servers.net. IN A 0
c.root-servers.net. IN A 0
d.root-servers.net. IN A 0
e.root-servers.net. IN A 0
f.root-servers.net. IN A 0
g.root-servers.net. IN A 0
h.root-servers.net. IN A 0
i.root-servers.net. IN A 0
j.root-servers.net. IN A 0
k.root-servers.net. IN A 0
l.root-servers.net. IN A 0
m.root-servers.net. IN A 0
a.root-servers.net. IN AAAA 0
b.root-servers.net. IN AAAA 0
c.root-servers.net. IN AAAA 0
d.root-servers.net. IN AAAA 0
f.root-servers.net. IN AAAA 0
h.root-servers.net. IN AAAA 0
i.root-servers.net. IN AAAA 0
j.root-servers.net. IN AAAA 0
k.root-servers.net. IN AAAA 0
l.root-servers.net. IN AAAA 0
m.root-servers.net. IN AAAA 0
msg gajim.org. IN DNSKEY 32896 1 86395 0 1 0 0
gajim.org. IN DNSKEY 0
msg av4.nstld.com. IN AAAA 32896 1 295 0 1 1 7
av4.nstld.com. IN AAAA 0
nstld.com. IN NS 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
av2.nstld.com. IN A 0
av2.nstld.com. IN AAAA 0
av4.nstld.com. IN A 0
av3.nstld.com. IN A 0
av3.nstld.com. IN AAAA 0
msg av2.nstld.com. IN A 32896 1 295 0 1 1 7
av2.nstld.com. IN A 0
nstld.com. IN NS 0
av3.nstld.com. IN A 0
av3.nstld.com. IN AAAA 0
av4.nstld.com. IN A 0
av4.nstld.com. IN AAAA 0
av2.nstld.com. IN AAAA 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
msg dns4.gandi.net. IN AAAA 32896 1 86395 0 1 1 8
dns4.gandi.net. IN AAAA 0
gandi.net. IN NS 0
dns0.gandi.net. IN A 0
dns0.gandi.net. IN AAAA 0
dns1.gandi.net. IN A 0
dns1.gandi.net. IN AAAA 0
dns2.gandi.net. IN A 0
dns2.gandi.net. IN AAAA 0
dns3.gandi.net. IN A 0
dns4.gandi.net. IN A 0
msg f.gtld-servers.net. IN AAAA 32896 1 3595 0 0 1 0
gtld-servers.net. IN SOA 4
msg av4.nstld.com. IN A 32896 1 295 0 1 1 7
av4.nstld.com. IN A 0
nstld.com. IN NS 0
av3.nstld.com. IN A 0
av3.nstld.com. IN AAAA 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
av4.nstld.com. IN AAAA 0
av2.nstld.com. IN A 0
av2.nstld.com. IN AAAA 0
msg av3.nstld.com. IN A 32896 1 295 0 1 1 7
av3.nstld.com. IN A 0
nstld.com. IN NS 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
av2.nstld.com. IN A 0
av2.nstld.com. IN AAAA 0
av4.nstld.com. IN A 0
av4.nstld.com. IN AAAA 0
av3.nstld.com. IN AAAA 0
msg ns6.gandi.net. IN A 32896 1 86395 0 1 1 9
ns6.gandi.net. IN A 0
gandi.net. IN NS 0
dns0.gandi.net. IN A 0
dns0.gandi.net. IN AAAA 0
dns1.gandi.net. IN A 0
dns1.gandi.net. IN AAAA 0
dns2.gandi.net. IN A 0
dns2.gandi.net. IN AAAA 0
dns3.gandi.net. IN A 0
dns4.gandi.net. IN A 0
dns4.gandi.net. IN AAAA 0
msg gajim.org. IN A 32896 1 86395 4 1 1 2
gajim.org. IN A 0
gajim.org. IN NS 0
ns3.gajim.org. IN A 0
ns3.gajim.org. IN AAAA 0
msg av2.nstld.com. IN AAAA 32896 1 295 0 1 1 7
av2.nstld.com. IN AAAA 0
nstld.com. IN NS 0
av3.nstld.com. IN A 0
av3.nstld.com. IN AAAA 0
av4.nstld.com. IN A 0
av4.nstld.com. IN AAAA 0
av2.nstld.com. IN A 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
msg av3.nstld.com. IN AAAA 32896 1 295 0 1 1 7
av3.nstld.com. IN AAAA 0
nstld.com. IN NS 0
av3.nstld.com. IN A 0
av1.nstld.com. IN A 0
av1.nstld.com. IN AAAA 0
av4.nstld.com. IN A 0
av4.nstld.com. IN AAAA 0
av2.nstld.com. IN A 0
av2.nstld.com. IN AAAA 0
msg e.gtld-servers.net. IN AAAA 32896 1 3595 0 0 1 0
gtld-servers.net. IN SOA 4
msg dns3.gandi.net. IN AAAA 32896 1 1195 0 0 1 0
gandi.net. IN SOA 4
msg . IN DNSKEY 32896 1 86395 0 1 0 0
. IN DNSKEY 0
END_MSG_CACHE
EOF
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20160518/670893c5/attachment.bin>


More information about the Unbound-users mailing list