DNSSEC Walker

What is this?

This is a proof-of-concept of a utility to download DNS zone contents even when AXFR is disabled on the server, assuming DNSSEC is used. Optionally it can also verify all SIG RRs within a zone against the zone key. If you do not know what DNSSEC is, please refer to:

Download

This program requires the Net::DNS and Net::DNS::SEC packages.

walker-3.5.tar.gz [PGP signature]: 2004-06-03 Version 3.5. Slight bug fix. Improved output.
walker-3.4.tar.gz [PGP signature]: 2004-06-02 Version 3.4. Support RRSIG/DNSKEY (as well as old-style SIG/KEY). The -n parameter now enable non-recursiveness for everything. Improved output.
walker-3.3.tar.gz: 2004-02-27 Version 3.3. Minor feature enhancement: Support NSEC as well as NXT, see draf-ietf-dnssec-nsec-rdata.
walker-3.2.tar.gz: 2003-02-18 Version 3.2. Minor feature enhancement: New -n parameter to optimize big zone traversals. Bugfix: Prints SIG RRs even when -y isn't used. Other: Now tries to verify CERT/SRV/CNAME even though Net::DNS(::SEC) may print warnings.
walker-3.1.tar.gz: 2002-11-13 Version 3.1, bugfix: disable defnames to make TLD recursion work.
walker-3.0.tar.gz: 2002-11-13 Version 3.0, added SIG verification.
walker-2.0.tar.gz: 2001-11-28 Version 2.0, rewritten using Net::DNS.
walker-1.0.tar.gz: 2001-01-03 Version 1.0, initial release.

Earlier distribution archives doesn't mention what license it is distributed under, but to make it clear: all versions are released under the GPL. Recent releases include copying conditions.

Development

Source code is available via CVS (just press enter at the password prompt):

	$ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/cvs/public-cvs login
	Logging in to :pserver:anoncvs@yxa.extundo.com:2401/home/cvs/public-cvs
	CVS password:
	$ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/cvs/public-cvs co walker

The CVS repository can also be access by using the HTML interface.

Known problems

Does not recover for NXT/NSEC query timeouts gracefully.
Cannot handle SPC in owner names. This appears to be a bug in Net::DNS.

Please report any other problems to me.

Documentation

WALKER(1)             User Contributed Perl Documentation            WALKER(1)
                                                                                
                                                                                
                                                                                
NAME
       walker - Retrieve a DNS zone using NXT/NSEC traversal
                                                                                
SYNOPSIS
       walker [-y] [-n] [-d] [ @nameserver ] zone
                                                                                
DESCRIPTION
       walker retrieves a DNS zone from the default or supplied name server
       and prints each record to the standard output.  AXFR is not used,
       instead the DNSSEC NXT/NSEC record chain is traversed.  The zone must
       use DNSSEC.  The output should conform to the standard DNS master file
       format (but see BUGS).  Optionally, walker can also verify DNSSEC sig-
       natures on the RRsets within the zone.
                                                                                
OPTIONS
       -y  Additionally perform verification on each RRset within the zone and
           print result of verification (in a zone file comment).
                                                                                
       -n  When querying for records, ask the nameserver non-recursively,
           instead of going through the full resolver logic.  This parameter
           is useful when you know that the default name server (or the sup-
           plied specific nameserver) can respond correctly, which it typi-
           cally only would if it is responsible for the zone.
                                                                                
           The original motivation for the -n parameter was to improve speed
           when asking parents for NS records on delegated zones, which would
           make the server recursively ask the child servers.
                                                                                
       -d  Enable debugging in the resolver (this will print all DNS packets,
           just like dig).
                                                                                
       @nameserver
           Query nameserver instead of the default nameserver.
                                                                                
       zone
           Name of the zone to retrieve master file for.  For example, "com".
                                                                                
AUTHOR
       Simon Josefsson 
                                                                                
BUGS
       CNAME, CERT and/or SRV RRs is known to cause perl warnings during veri-
       fications with some versions of Net::DNS and Net::DNS::SEC.  The cause
       is belived to be in Perl, Net::DNS or Net::DNS::SEC.  The reader is
       encouraged to track down and fix these bugs.
                                                                                
SEE ALSO
       perl(1), axfr, perldig, Net::DNS, Net::DNS::SEC, resolv.conf
 
 
 
perl v5.8.3                       2004-06-03                         WALKER(1)

Example usage

Here is how you would recover the zone file for "josefsson.org". Zone transfer of the zone is disabled, but it uses DNSSEC. The -y parameter is used as well, so walker prints out verification results in comments as well.

jas@latte:~/src/walker$ ./walker -y @yxa.extundo.com josefsson.org
	;; Key used to verify signatures:
	;; josefsson.org.	3600	IN	KEY	256  3  1 ( 
	;; 			AQPFsXW3GQe5z4nvqG+V6tw3LdjDhzPXRBlI
	;; 			+Nky26gpZlbXLMJJnJsAjaSOwy0p7Cwkb8Fy
	;; 			L8QGGqrOtuDTILfr 
	;; 			) ; Key ID = 8375
josefsson.org.	36000	IN	SOA	belsebub.onkel. jas.pdc.kth.se. (
					2002110703	; Serial
					10800	; Refresh
					3600	; Retry
					604800	; Expire
					36000 )	; Minimum TTL
	;; Getting NXT for josefsson.org
josefsson.org.	36000	IN	NXT	_kerberos._tcp.josefsson.org  A KEY LOC MX NS NXT SIG SOA TXT
	;; Looking at type A for domain josefsson.org
josefsson.org.	3600	IN	A	217.13.230.178
josefsson.org.	3600	IN	SIG	A  1  2  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			oCIOA9yQVKT7JdePedPB3+0gX92BzS0Und+uH09y+TV+x
			GtoRC+a9AN3Dq3djajgAuorqDoFjTA7W9hZdAw5Yw== )
	;; verify ok
	;; Looking at type KEY for domain josefsson.org
josefsson.org.	3600	IN	KEY	256  3  1 ( 
			AQPFsXW3GQe5z4nvqG+V6tw3LdjDhzPXRBlI
			+Nky26gpZlbXLMJJnJsAjaSOwy0p7Cwkb8Fy
			L8QGGqrOtuDTILfr 
			) ; Key ID = 8375
josefsson.org.	3600	IN	SIG	KEY  1  2  3600  20021213071839 (
			20021113071839 8375  josefsson.org
			nt3bpmfdENflBcBbfZJLhMpOYDMFm3BD+Hh/aXD/GMtFI
			MOYc1k9O4H/8elzyCBUa49T5STv2mM28af/jci0vQ== )
	;; verify ok
	;; Looking at type LOC for domain josefsson.org
josefsson.org.	3600	IN	LOC	59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m
josefsson.org.	3600	IN	SIG	LOC  1  2  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			QYxhfmjGohCZPV5J7VX8cPeLleqmf/ZDHRHAht8VSsEPi
			iK+bLYhxLK7UvP+5ZR4YxVt+oKKr/iJBDiLTJ737g== )
	;; verify ok
	;; Looking at type MX for domain josefsson.org
josefsson.org.	3600	IN	MX	20 terminal.2globe.net.
josefsson.org.	3600	IN	MX	4 yxa.extundo.com.
josefsson.org.	3600	IN	MX	6 syl.extundo.com.
josefsson.org.	3600	IN	MX	10 vic20.blipp.com.
josefsson.org.	3600	IN	SIG	MX  1  2  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			s/6lwftn4j6Ie+2Iyqr8MChrgQEghvpEDlEcWYNXAlDMR
			uHF3UAefEkgtaLeIOZu6ADqMw/iGNnS4sg8t8dxuw== )
	;; verify ok
	;; Looking at type NS for domain josefsson.org
josefsson.org.	36000	IN	NS	yxa.extundo.com.
josefsson.org.	36000	IN	NS	vic20.blipp.com.
josefsson.org.	36000	IN	NS	terminal.2globe.net.
josefsson.org.	36000	IN	NS	syl.extundo.com.
josefsson.org.	36000	IN	SIG	NS  1  2  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			cNm6/SvoVkGwtkHyqzsfpLqiMiJJ2ukLtXGZsmFLEtNS+
			c6/cTcBt1Qn2qSn0M8wVmj+9n/EBs3c2Mgw6aauSw== )
	;; verify ok
	;; Looking at type NXT for domain josefsson.org
josefsson.org.	36000	IN	NXT	_kerberos._tcp.josefsson.org  A KEY LOC MX NS NXT SIG SOA TXT
josefsson.org.	36000	IN	SIG	NXT  1  2  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			Bnye5LOBl74qjaUExCQwS8OOpC5uYIWUquT183/L2CaXh
			jATdfXr3lXSnCKICd/hy5VH+Z3RTWZ8jT80sX2U4g== )
	;; verify ok
	;; Looking at type SOA for domain josefsson.org
josefsson.org.	36000	IN	SIG	SOA  1  2  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			FZdaYMSl84AHxtdH2X6DKjTyQS+HQjUhFTN/ZD+n0/Wue
			+jEwqG3ud807a1wzMcOUry1BVCNXn5Ftz9Pt9IyYw== )
	;; verify ok
	;; Looking at type TXT for domain josefsson.org
josefsson.org.	3600	IN	TXT	"JOSEFSSON.ORG"
josefsson.org.	3600	IN	SIG	TXT  1  2  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			Sxf15F412DfBH+7K0Ng18mRuabCPf1+XSdtSsMThTBdtu
			l2Vbx6d9DIkAXEvtz4Do47U2wOS9tlIXOW/KkFVFA== )
	;; verify ok
	;; Getting NXT for _kerberos._tcp.josefsson.org
_kerberos._tcp.josefsson.org.	36000	IN	NXT	_kerberos._udp.josefsson.org  NXT SIG SRV
	;; Looking at type NXT for domain _kerberos._tcp.josefsson.org
_kerberos._tcp.josefsson.org.	36000	IN	NXT	_kerberos._udp.josefsson.org  NXT SIG SRV
_kerberos._tcp.josefsson.org.	36000	IN	SIG	NXT  1  4  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			J4nAOnux4aeJlfhsJHM7KrJNkBhXu8zmOiLQvTH02cFOX
			XvUTCsO2VzExs9IJqNpnZ8k8rRFPa+KYPwUma2p8A== )
	;; verify ok
	;; Looking at type SRV for domain _kerberos._tcp.josefsson.org
_kerberos._tcp.josefsson.org.	3600	IN	SRV	0 0 88 latte.josefsson.org.
_kerberos._tcp.josefsson.org.	3600	IN	SIG	SRV  1  4  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			W9civ/AroKv91NJLWhORUUewUy0cjYLnFSOvJe7ElfRQ2
			6ZierlkozGclzBR+vtX9Ijfb1XfDVuID5llkIsdQw== )
	;; cannot verify signature on SRVs, sorry
	;; Getting NXT for _kerberos._udp.josefsson.org
_kerberos._udp.josefsson.org.	36000	IN	NXT	barbar.josefsson.org  NXT SIG SRV
	;; Looking at type NXT for domain _kerberos._udp.josefsson.org
_kerberos._udp.josefsson.org.	36000	IN	NXT	barbar.josefsson.org  NXT SIG SRV
_kerberos._udp.josefsson.org.	36000	IN	SIG	NXT  1  4  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			pCi140w/7HxKlgIeTm5xTidCYjwtv+EyOwhochMImY1Ka
			Cp0uRxIovXpGqZn1dnbgUDa+oCjb63VJAK79sNBkQ== )
	;; verify ok
	;; Looking at type SRV for domain _kerberos._udp.josefsson.org
_kerberos._udp.josefsson.org.	3600	IN	SRV	0 0 88 latte.josefsson.org.
_kerberos._udp.josefsson.org.	3600	IN	SIG	SRV  1  4  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			R+GENXYwbK3yj+IUdMKw21udDvFkPnJSyqMXHSigWhk0u
			xtykP+Wn+N5KkXywlldT7rXAy1xWZlRIpKIJ0VIcQ== )
	;; cannot verify signature on SRVs, sorry
	;; Getting NXT for barbar.josefsson.org
barbar.josefsson.org.	36000	IN	NXT	dnskeys.josefsson.org  LOC NXT SIG
	;; Looking at type LOC for domain barbar.josefsson.org
barbar.josefsson.org.	3600	IN	LOC	59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m
barbar.josefsson.org.	3600	IN	SIG	LOC  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			Z4XuTY7kgYJCibPL91OBRhhK/rtX0ezKI0+2awHFbtn76
			x88Cuzzp1PyHKlkCFeVwmmoa3evz94qqMKn3At4Jw== )
	;; verify ok
	;; Looking at type NXT for domain barbar.josefsson.org
barbar.josefsson.org.	36000	IN	NXT	dnskeys.josefsson.org  LOC NXT SIG
barbar.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			u80FzuSJdaxRV1x2g50A+tOy+BmFjSK+zlcT+HPKZ3ZGw
			3fzryv507faNDqrNkO7wiAFC8acjO8m2eIWsFP4qA== )
	;; verify ok
	;; Getting NXT for dnskeys.josefsson.org
dnskeys.josefsson.org.	36000	IN	NXT	foo bar.josefsson.org  KEY NS NXT SIG
	;; Looking at type KEY for domain dnskeys.josefsson.org
dnskeys.josefsson.org.	36000	IN	KEY	49408  3  3 ( 
			 
			) ; Key ID = 0
dnskeys.josefsson.org.	36000	IN	SIG	KEY  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			IErlqNgvm4ju5LvIGyd9BhS91zH1mlgR61oxD/LJuySL3
			6QR7TkBIxOIHtpj3zXU/LVGx1XyQavFF5qepi/SjA== )
	;; verify ok
	;; Looking at type NS for domain dnskeys.josefsson.org
dnskeys.josefsson.org.	62	IN	NS	latte.josefsson.org.
	;; no signature found
	;; Looking at type NXT for domain dnskeys.josefsson.org
dnskeys.josefsson.org.	36000	IN	NXT	foo bar.josefsson.org  KEY NS NXT SIG
dnskeys.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			GfzlMLda3+7fzIzRuXCTqKeeQQRmfMT/wgfHekWUU0j/r
			05xLdlyQU/6pwUV8DB0lMOeHhLHnxTAQpl36Ms7jQ== )
	;; verify ok
	;; Getting NXT for foo bar.josefsson.org
foo bar.josefsson.org.	36000	IN	NXT	kerberos.josefsson.org  NXT SIG TXT
	;; Looking at type NXT for domain foo bar.josefsson.org
foo bar.josefsson.org.	36000	IN	NXT	kerberos.josefsson.org  NXT SIG TXT
foo bar.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			Fa4rMkKMC+JFAHaouLjEv0WSH6ssLDKj5hZ8nnO+9HwEu
			CDNSLXy4lWy842z5AKmJ1MJoeLDYxW/XVNLRjVtaA== )
	;; verify ok
	;; Looking at type TXT for domain foo bar.josefsson.org
foo bar.josefsson.org.	3600	IN	TXT	"Med space"
foo bar.josefsson.org.	3600	IN	SIG	TXT  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			SonbI43/hZ8F5ur3c8ntGsExT6FzfHdnKlv1Ly2KBcfTB
			Dn7Cdtv8THBGkdpGYOhIkwQbgzfn2PrIFTW/SVNfA== )
	;; verify ok
	;; Getting NXT for kerberos.josefsson.org
kerberos.josefsson.org.	36000	IN	NXT	kerberos-1.josefsson.org  CNAME NXT SIG
	;; Looking at type CNAME for domain kerberos.josefsson.org
kerberos.josefsson.org.	3600	IN	CNAME	latte.josefsson.org.
kerberos.josefsson.org.	3600	IN	SIG	CNAME  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			FOtgPTICVyBx8qug1mxl1FijMmBVLf3S4bptcDSsTZjN2
			WYz7m7Y0l2TtANXqjA3NMwx8Vuxbgp/rqnFMj8rmQ== )
	;; cannot verify signature on CNAMEs, sorry
	;; Looking at type NXT for domain kerberos.josefsson.org
kerberos.josefsson.org.	36000	IN	NXT	kerberos-1.josefsson.org  CNAME NXT SIG
kerberos.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			EnJLW6I11XrpyoQ3UWuYw7T/18qK/UsWe+/mse/8Sufyx
			g+OGyEJxOZW+lwRd+ANAzXPUHyylDOcium4FP87BA== )
	;; verify ok
	;; Getting NXT for kerberos-1.josefsson.org
kerberos-1.josefsson.org.	36000	IN	NXT	krb4-realm.josefsson.org  CNAME NXT SIG
	;; Looking at type CNAME for domain kerberos-1.josefsson.org
kerberos-1.josefsson.org.	3600	IN	CNAME	latte.josefsson.org.
kerberos-1.josefsson.org.	3600	IN	SIG	CNAME  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			dDKAmhm5rh16CPfAxdSeplB06sNVZjD/gQEXBYwrMjYf6
			+uRNc/DnLL/0b/zlODULjhjWRVIMOwskysclWFeKA== )
	;; cannot verify signature on CNAMEs, sorry
	;; Looking at type NXT for domain kerberos-1.josefsson.org
kerberos-1.josefsson.org.	36000	IN	NXT	krb4-realm.josefsson.org  CNAME NXT SIG
kerberos-1.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			UlROLo/vkp1MnN7di9SFb37v1jxeusTtmAgH/vS/a/DDv
			/lKzQ/w5NAf+uDWzqWCI3ehXh9W/WTX571+uHc3nA== )
	;; verify ok
	;; Getting NXT for krb4-realm.josefsson.org
krb4-realm.josefsson.org.	36000	IN	NXT	krb5-realm.josefsson.org  NXT SIG TXT
	;; Looking at type NXT for domain krb4-realm.josefsson.org
krb4-realm.josefsson.org.	36000	IN	NXT	krb5-realm.josefsson.org  NXT SIG TXT
krb4-realm.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			skspRbvwsGl6MylTHe6xIRZQWrtb83MaKnk3blAyrlnoC
			eLKarUWRMfw6JU0CxBDLmwb7H0xiwodg8YKRn49DA== )
	;; verify ok
	;; Looking at type TXT for domain krb4-realm.josefsson.org
krb4-realm.josefsson.org.	3600	IN	TXT	"JOSEFSSON.ORG"
krb4-realm.josefsson.org.	3600	IN	SIG	TXT  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			dN6kCD5CXhYobr6bDJooNu+SHcnBF0DFLM1HaQYIB7TA4
			TCBAqmnSSS67gZWOpced2ReIsSiBK1L8Dp4GIhRVg== )
	;; verify ok
	;; Getting NXT for krb5-realm.josefsson.org
krb5-realm.josefsson.org.	36000	IN	NXT	latte.josefsson.org  NXT SIG TXT
	;; Looking at type NXT for domain krb5-realm.josefsson.org
krb5-realm.josefsson.org.	36000	IN	NXT	latte.josefsson.org  NXT SIG TXT
krb5-realm.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			ZTzIAjRUuUd5KUxuAVE+yoizGLW2Srrcz7rBV5ee480Ib
			yhbHraCtRawuF3awjd7o/wqhQsbQI8Mb61tXza9Rg== )
	;; verify ok
	;; Looking at type TXT for domain krb5-realm.josefsson.org
krb5-realm.josefsson.org.	3600	IN	TXT	"JOSEFSSON.ORG"
krb5-realm.josefsson.org.	3600	IN	SIG	TXT  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			Y8Ji4/Ev0tckf/ATs7m4Cm9PqECz+yp0iS3WnJBexFCav
			Uhfnx6ngNnbv4Hdx46WCOEUweQq3x+iaUrvo1YX5Q== )
	;; verify ok
	;; Getting NXT for latte.josefsson.org
latte.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp128.josefsson.org  A MX NXT SIG
	;; Looking at type A for domain latte.josefsson.org
latte.josefsson.org.	3600	IN	A	217.208.172.73
latte.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			JzMGcs9WARCTxVotqyfz1e59OXteCjF+jN+YG0njybAoC
			1mAOdZadTnsMKsfNPIlm07sHfPULZbz4qI2b+Phtg== )
	;; verify ok
	;; Looking at type MX for domain latte.josefsson.org
latte.josefsson.org.	3600	IN	MX	20 syl.extundo.com.
latte.josefsson.org.	3600	IN	MX	10 yxa.extundo.com.
latte.josefsson.org.	3600	IN	SIG	MX  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			HIwPhDNlRfWPH3nkxl1S3ynGfyLAEHztA3HpwchNoC6fl
			afh587OI8gb7EFJWOZs/1AS7pccM0g0EXpf8a3Aqg== )
	;; verify ok
	;; Looking at type NXT for domain latte.josefsson.org
latte.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp128.josefsson.org  A MX NXT SIG
latte.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			p8uu5VBticGJ4z9lNJIFBaJqCBxG/T1j3Idpql+G3x+gR
			k6y0TiuXAIxAGl+kjTzrZJopC+QY7sYBPpov8aY8g== )
	;; verify ok
	;; Getting NXT for latte-eth1-dhcp128.josefsson.org
latte-eth1-dhcp128.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp129.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth1-dhcp128.josefsson.org
latte-eth1-dhcp128.josefsson.org.	3600	IN	A	192.168.1.128
latte-eth1-dhcp128.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			HEDz5ali61iW3l5zvBQxq/XOjgbpnhbBGs+jqh17CufWf
			o4J0T14db/ec1k+vnIM12+kdVyuNn4H6ZjeQ+19dQ== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth1-dhcp128.josefsson.org
latte-eth1-dhcp128.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp129.josefsson.org  A NXT SIG
latte-eth1-dhcp128.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			idvefTCW1ZM/QbHJJe1fndblE+emNYBG0xFHYkUiPuaNx
			bt6hjoFTX/L5eecvifVd7N8lPTXx14wzfj/SIZuzg== )
	;; verify ok
	;; Getting NXT for latte-eth1-dhcp129.josefsson.org
latte-eth1-dhcp129.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp130.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth1-dhcp129.josefsson.org
latte-eth1-dhcp129.josefsson.org.	3600	IN	A	192.168.1.129
latte-eth1-dhcp129.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			TSp0LzjM3DUUD+VdpxfLXA7BOXBEOIIxzBkAXAWeketY0
			CZI9cd6EIco5tAl4IA4KKPMUwlH9D/1eH2p8w9IRg== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth1-dhcp129.josefsson.org
latte-eth1-dhcp129.josefsson.org.	36000	IN	NXT	latte-eth1-dhcp130.josefsson.org  A NXT SIG
latte-eth1-dhcp129.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			m5HSwgp54mv8Pufs3ggTs8fJBzNZR3lKI62YMqSGVixBB
			7pFDswSF4kh19mCP5KQd51MmW/Nywc9U4pZVWxo8g== )
	;; verify ok
	;; Getting NXT for latte-eth1-dhcp130.josefsson.org
latte-eth1-dhcp130.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp128.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth1-dhcp130.josefsson.org
latte-eth1-dhcp130.josefsson.org.	3600	IN	A	192.168.1.130
latte-eth1-dhcp130.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			BWrNQnSbakdwHP4j60eyHfDtwB/9t98QqJd4V0SOPuPdD
			3L+0tdOqYRlWRmd2sGOpgL50aLaNbXaihEz9/rSSg== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth1-dhcp130.josefsson.org
latte-eth1-dhcp130.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp128.josefsson.org  A NXT SIG
latte-eth1-dhcp130.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			gKf+9Ijzmvl47EHfgSAQ6tY17fl4JF392As3ohHuF4ugN
			F/qNQSSX1n+7DmBBaceaVZPxZFqdq4AY296ouAojA== )
	;; verify ok
	;; Getting NXT for latte-eth2-dhcp128.josefsson.org
latte-eth2-dhcp128.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp129.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth2-dhcp128.josefsson.org
latte-eth2-dhcp128.josefsson.org.	3600	IN	A	192.168.2.128
latte-eth2-dhcp128.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			NpgsZHlg7+ZU+tGaDfEGGDRYubQFw7eaFqpyoLAi2gUN9
			A9K8Jbb+CvOhFHyCRM1hVGGrJCEOwTRnDmSWziPPw== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth2-dhcp128.josefsson.org
latte-eth2-dhcp128.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp129.josefsson.org  A NXT SIG
latte-eth2-dhcp128.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			hNAP1LWw8MNAEypSTUaeN+myXBvBu23PcrA1ORPXUGlht
			7Vo1mACtnoN/c/7pkG5TF8LMrxxsr0DiDymR1LrqQ== )
	;; verify ok
	;; Getting NXT for latte-eth2-dhcp129.josefsson.org
latte-eth2-dhcp129.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp130.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth2-dhcp129.josefsson.org
latte-eth2-dhcp129.josefsson.org.	3600	IN	A	192.168.2.129
latte-eth2-dhcp129.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			FjCRQKEfew4BMLDgX0KHwBJe98+GSrkK8gGYlYMLce3Oi
			bBDxYzzPf0B2odxKIQ1+4DUKor2ueM4DP2OU4kNwQ== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth2-dhcp129.josefsson.org
latte-eth2-dhcp129.josefsson.org.	36000	IN	NXT	latte-eth2-dhcp130.josefsson.org  A NXT SIG
latte-eth2-dhcp129.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			MAXgXLEIZDmwDB3cN5SjPDEpM5+P3x9b+ozxZe73066kf
			/cp6Yvl39vuzvo0j/OzRvYt7vOtC19f3cn/F0q/0g== )
	;; verify ok
	;; Getting NXT for latte-eth2-dhcp130.josefsson.org
latte-eth2-dhcp130.josefsson.org.	36000	IN	NXT	simon.josefsson.org  A NXT SIG
	;; Looking at type A for domain latte-eth2-dhcp130.josefsson.org
latte-eth2-dhcp130.josefsson.org.	3600	IN	A	192.168.2.130
latte-eth2-dhcp130.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			lpzu4/xC39VQZNHR3XgJnxv6bAmzU2sOzauaZPTZ5nwFt
			IWgDOn6ygUdaQHhIBIKQUHBsUXz2kU9PwOEQDZXQg== )
	;; verify ok
	;; Looking at type NXT for domain latte-eth2-dhcp130.josefsson.org
latte-eth2-dhcp130.josefsson.org.	36000	IN	NXT	simon.josefsson.org  A NXT SIG
latte-eth2-dhcp130.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			NBW+3HkbtRHetO3eaerG7yhiKBLJRLZg5wFZtx4MWWAwz
			QU3fa1CUrKiBXy4cCpHCvXQTWd6K42ovyKAP+Bvnw== )
	;; verify ok
	;; Getting NXT for simon.josefsson.org
simon.josefsson.org.	36000	IN	NXT	kerberos-iv.tcp.josefsson.org  CERT NXT SIG
	;; Looking at type CERT for domain simon.josefsson.org
simon.josefsson.org.	3600	IN	CERT	PGP 0 0 mKsEPNUHKwEFALqJSBHn6Qk5ex138kwymxA3idCFoTi5Q6mVooEVVaYVfeDG+5uVT5rhTFDfDcT9SO0eIlfKOraSRnVEHyDDH2PAgJFxyneFELcmLUQ66D+m8z+ziGro6bcDSBBDMRkHIX6/kH/vnevjqivIld+j8WTcVX+SArcKyzgQ58uMTrfQdLqzh6D9sE/838+ZPZkabmKKWMVWccoaUbWGYOcNwO0ABim0IVNpbW9uIEpvc2Vmc3NvbiA8amFzQGV4dHVuZG8uY29tPojYBBMBAgAiBQI81QcrAhsDBQkB4TOABAsHAwIDFQIDAxYCAQIeAQIXgAAKCRDtoh6UtWVxb4jyBP0arTNzMTakDhO8BCE03d0iru6sCFJ2qQeh4UAFXy8KZ5ybtWJxFT/Q7xn0uXKujJ99cXhuy7icDR13wWkRKG20IjKiNv9yzQaNR36+m58mjZu1UDnGVm2PT9bELYmKTVoumi44QWgU5lgq5KZfWhsA5BQEqS5tp9k4CBBg36JCwjYxHfnWxymA1hSyMKPmgmPm6aFd+Lv9d3h5oTVs9TBOiEYEExECAAYFAj1Y8r8ACgkQV5Mp08AbKiIX9wCfR2rMiXdKzZB95acA5YSQ4MLQyygAn1Nv7M36SAofR/73WjqlPpVAQ+fRtCVTaW1vbiBKb3NlZnNzb24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+iNgEEwECACIFAj0lzz0CGwMFCQHhM4AECwcDAgMVAgMDFgIBAh4BAheAAAoJEO2iHpS1ZXFvt3ME/ijwFJCSNoY1AfCEm3AX6vRKUbjiy0MdemsqajXF6awcbIaeCwk3wVr9JOs1usu2/AQQDvz0sf/hEv6c3sMTYspD6+QzrRMUVbLm0fp+pRZKyaW1tO+/JIoOl8qsOwodkXPQ7CYFvSZhhkxdUwVOa6UtL6kOdCjQAy7DDQTzdcC/GxHQNVUNF5KcBWC7LMN6iAt0dAFEMaQz4t37CHq+DCyIRgQTEQIABgUCPVjywgAKCRBXkynTwBsqImY3AKCSCOO5LlNxmritUFY1i7VXBCUlZgCgll/6kE0G/NP3E6AdyzVwAzBPgUe4qwQ81Qd7AQUA2PTaoT8RNkFDlX7UCOB9vaRFxrX+dN7l6QO+O0Mg7dVdjItEnaaYkJ+r4LXecI47HogsUGExRdDYGT0Dq7aZ8GkC4UKPXc3q2KWQ3ib3wj3qnCGm3IX/I249ydYLAzQyWqMW09wLB5vxhPi4yjet4FTGWmtYUlGzDb7+6VZilYRTty0vhFF4cVXlO2R+vgPxFMvUc7o8WGDnQ3iyWAizkQAGKYjFBBgBAgAPBQI81Qd7AhsMBQkB4TOAAAoJEO2iHpS1ZXFvl2cE/3sB4hHGnvBI91WwHvrTJG29pgqXbZNa2FVzbwDju972kVdYT1FfVndE/bstRX3BT3/GNHXBgSXRNmZkVO7tQoqNReycUTTdExBeCsDO2p2QiQ5ijuD1HbOC2p0cptvKeNxsfKzwKP6U1CalYp6AV6DynqNqW4gpkIlHr+ZRM8/q8YfJblwCiYL8Bfh/jI/s2gI4lQimHGlBrIkG2vSgie7ADAAlAAEAAA4QBI0AAQAAADCCBIQwggPtoAMCAQICEC4QNwPfRoWdelUNpllhhTgwDQYJKoZIhvcNAQEEBQAwgcwxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMUYwRAYDVQQLEz13d3cudmVyaXNpZ24uY29tL3JlcG9zaXRvcnkvUlBBIEluY29ycC4gQnkgUmVmLixMSUFCLkxURChjKTk4MUgwRgYDVQQDEz9WZXJpU2lnbiBDbGFzcyAxIENBIEluZGl2aWR1YWwgU3Vic2NyaWJlci1QZXJzb25hIE5vdCBWYWxpZGF0ZWQwHhcNMDAwNjI2MDAwMDAwWhcNMDAwODI1MjM1OTU5WjCCAQgxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMUYwRAYDVQQLEz13d3cudmVyaXNpZ24uY29tL3JlcG9zaXRvcnkvUlBBIEluY29ycC4gYnkgUmVmLixMSUFCLkxURChjKTk4MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxJjAkBgNVBAsTHURpZ2l0YWwgSUQgQ2xhc3MgMSAtIE5ldHNjYXBlMRgwFgYDVQQDFA9TaW1vbiBKb3NlZnNzb24xIjAgBgkqhkiG9w0BCQEWE3NpbW9uQGpvc2Vmc3Nvbi5vcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMkMzor+cUabyh3lkBKlEQvGLcQzxhnoYFlOP2Q95Pd7sL75EAfpfKbGWlEzJJd7o+EItFK2BhB9Zd9uUr2BPzmts60XE4gi50OMObfCxLpKi1QVSVWkTcwAVnvIY0433vt5D0Xc6VzNcPBkQjWE2+ZZpMtL/g9HKAw1EalA/LqlAgMBAAGjggEmMIIBIjAJBgNVHRMEAjAAMEQGA1UdIAQ9MDswOQYLYIZIAYb4RQEHAQgwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYTARBglghkgBhvhCAQEEBAMCB4AwgYYGCmCGSAGG+EUBBgMEeBZ2ZDQ2NTJiZDYzZjIwNDcwMjkyOTg3NjNjOWQyZjI3NTA2OWM3MzU5YmVkMWIwNTlkYTc1YmM0YmM5NzAxNzQ3ZGE1ZDVlNDE0MWJlYWRiMmJkMmU4ODMxN2FmN2JmNWQ1MTE0OTk3YTNiZjQ1ZjhmM2VhNDUwYzAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLnZlcmlzaWduLmNvbS9jbGFzczEuY3JsMA0GCSqGSIb3DQEBBAUAA4GBAAk4L1eekaTSQtnXRMHYFxRJAGmfa+SVkzX9lnb/i7+e3QVrgrLzrw/4oC+NZQgnVNSPR3nJvtn5zq9/KgYXJvO55nS6uTU+NlZdQZzOaPzbxTFCCTI357cupMVR5f7lRVkMRMrOrXckUrR4X8xPFaePIIFWZQhQN3W8ohGCckh2wAwAGAABAAAOEABhACUBAwAADhA9+YnQPdH80CC3CWpvc2Vmc3NvbgNvcmcAvK8Nse7HtLnPNugvfZqvZ8iIuJQedC3SK/gYCji+MpVYohfG9496kyV7Jx0E9xYAMRQLrrOnb/W435PqExoczsmcAAIAAQAAjKAAFQh0ZXJtaW5hbAYyZ2xvYmUDbmV0AMmcAAIAAQAAjKAAEQNzeWwHZXh0dW5kbwNjb20AyZwAAgABAACMoAAGA3l4YcocyZwAAgABAACMoAAOBXZpYzIwBWJsaXBwyiTJnAAYAAEAAIygAGEAAgECAACMoD35idA90fzQILcJam9zZWZzc29uA29yZwBw2br9K+hWQbC2QfKrOx+kuqIyIkna6Qu1cZmyYUsS01L5zr9xNwG3VCfapKfQzzBWaP72f8QGzdzYyDDppq5LyhgAAQABAAAHCAAE1CC9Zco1AAEAAQAABwgABNkN5rLJ9wABAAEAAqCsAATDsrfmynMAGQABAAAOEABGAQADAQEDxbF1txkHuc+J76hvlercNy3Yw4cz10QZSPjZMtuoKWZW1yzCSZybAI2kjsMtKewsJG/Bci/EBhqqzrbg0yC368pzABgAAQAADhAAYQAZAQIAAA4QPfmJzz3R/M8gtwlqb3NlZnNzb24Db3JnAJ7d26Zn3RDX5QXAW32SS4TKTmAzBZtwQ/h4f2lw/xjLRSDDmHNZPTuB//Hpc8ggVGuPU+Uk79pjNvGn/43ItL0AACkQAAAAgAAAAA==
simon.josefsson.org.	3600	IN	CERT	PKIX 0 0 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
simon.josefsson.org.	3600	IN	SIG	CERT  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			vK8Nse7HtLnPNugvfZqvZ8iIuJQedC3SK/gYCji+MpVYo
			hfG9496kyV7Jx0E9xYAMRQLrrOnb/W435PqExoczg== )
	;; verify failure: RSA Verification failed
	;; Looking at type NXT for domain simon.josefsson.org
simon.josefsson.org.	36000	IN	NXT	kerberos-iv.tcp.josefsson.org  CERT NXT SIG
simon.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			sANJ4ZLKtbof9jj9EkbEosJfxrkjDUdh592kYfDuz6km6
			Xq6uujPiBnR0RgwyiIfQxrqWW4wuSHM6QDzvNp44g== )
	;; verify ok
	;; Getting NXT for kerberos-iv.tcp.josefsson.org
kerberos-iv.tcp.josefsson.org.	36000	IN	NXT	kerberos-iv.udp.josefsson.org  NXT SIG SRV
	;; Looking at type NXT for domain kerberos-iv.tcp.josefsson.org
kerberos-iv.tcp.josefsson.org.	36000	IN	NXT	kerberos-iv.udp.josefsson.org  NXT SIG SRV
kerberos-iv.tcp.josefsson.org.	36000	IN	SIG	NXT  1  4  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			C2bvQUzyC4ZQgaM7bpJv7/PLhZvFSvHPTcNXT//YJKGgN
			Sy4mYaBpq2DJhHPghRsc/ZGCRLkCz6i9QCdfNtCwA== )
	;; verify ok
	;; Looking at type SRV for domain kerberos-iv.tcp.josefsson.org
kerberos-iv.tcp.josefsson.org.	3600	IN	SRV	0 0 750 latte.josefsson.org.
kerberos-iv.tcp.josefsson.org.	3600	IN	SIG	SRV  1  4  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			Qm4uo6wcuvzIG9w9yUJto/4hpr1+UfJBMvBEyy9KYh3S0
			nwEuCxNVPrV15VEeV2LNoF0F7juCfi4zgHvC3mHpw== )
	;; cannot verify signature on SRVs, sorry
	;; Getting NXT for kerberos-iv.udp.josefsson.org
kerberos-iv.udp.josefsson.org.	36000	IN	NXT	vic20.josefsson.org  NXT SIG SRV
	;; Looking at type NXT for domain kerberos-iv.udp.josefsson.org
kerberos-iv.udp.josefsson.org.	36000	IN	NXT	vic20.josefsson.org  NXT SIG SRV
kerberos-iv.udp.josefsson.org.	36000	IN	SIG	NXT  1  4  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			SQGRiGgvCnKYOx+gU5vF/JFIMTnCuKwjaY40x2rHkK6w4
			7TqZVTAG2Cw6Yxnfpw1EJC3SHW56CyphD2vhczXNA== )
	;; verify ok
	;; Looking at type SRV for domain kerberos-iv.udp.josefsson.org
kerberos-iv.udp.josefsson.org.	3600	IN	SRV	0 0 750 latte.josefsson.org.
kerberos-iv.udp.josefsson.org.	3600	IN	SIG	SRV  1  4  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			TwcW3Yi2WK45KC8laFkzcZqtaf1FXiZbBkUyQiqPhBcCo
			V5EPdAwfViNyaD1rfNQ+PEptiW/qONdWE1vZMP9iA== )
	;; cannot verify signature on SRVs, sorry
	;; Getting NXT for vic20.josefsson.org
vic20.josefsson.org.	36000	IN	NXT	www.josefsson.org  A NXT SIG
	;; Looking at type A for domain vic20.josefsson.org
vic20.josefsson.org.	3600	IN	A	212.214.21.196
vic20.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			WD85vlSb73k6K1S2VL+LytguxNbqv094sNUL5aFsYsuHP
			+QzxckdbqGJRCBoqcG7a8PjROSCOQrSUlCZzj9snQ== )
	;; verify ok
	;; Looking at type NXT for domain vic20.josefsson.org
vic20.josefsson.org.	36000	IN	NXT	www.josefsson.org  A NXT SIG
vic20.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			M5S8/ANKRIPpk4VxhCE9rSP99jvJ8f0bOM4fv1wA1sdRY
			Ezm6WYL46tHRqqNmj/ZVuXEXwKA6ZwMxxkqYTEDZg== )
	;; verify ok
	;; Getting NXT for www.josefsson.org
www.josefsson.org.	36000	IN	NXT	wwwkeys.josefsson.org  A LOC NXT SIG
	;; Looking at type A for domain www.josefsson.org
www.josefsson.org.	3600	IN	A	217.13.230.178
www.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			RjmcK7Fg2roS6GJRCcAxRsOd0Y7cRZ/Ch6p5RBDMbCa3j
			/oVLnTqYrkW9R43HoaJClPxZAfCyem3PAlSxh0zmQ== )
	;; verify ok
	;; Looking at type LOC for domain www.josefsson.org
www.josefsson.org.	3600	IN	LOC	59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m
www.josefsson.org.	3600	IN	SIG	LOC  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			o2X4eEnJ5KKTqFlaQzCZJC782U2mnkjDJmLCJNfxMayaV
			M31Lb12wYUIyAbrfJvfwUba04wJ5WaObZD3nZrmxw== )
	;; verify ok
	;; Looking at type NXT for domain www.josefsson.org
www.josefsson.org.	36000	IN	NXT	wwwkeys.josefsson.org  A LOC NXT SIG
www.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			TJ5fB1UuKIdIsCCa84o/+NgoWkqAptuZF9cx8eBvyxrUZ
			M4/4My2gYsuGWcE6PqrVpZzFVJkeCpJ+cn0S5dkEg== )
	;; verify ok
	;; Getting NXT for wwwkeys.josefsson.org
wwwkeys.josefsson.org.	36000	IN	NXT	yxa.josefsson.org  CNAME NXT SIG
	;; Looking at type CNAME for domain wwwkeys.josefsson.org
wwwkeys.josefsson.org.	3600	IN	CNAME	latte.josefsson.org.
wwwkeys.josefsson.org.	3600	IN	SIG	CNAME  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			olnG5GudIlQJm+qOecXMl0uzfuItdWnZc94YPUAUbsKOi
			C+UxIYyq7wlFkkC502LueZ2eJg7Rq9q4L5cbkxPKA== )
	;; cannot verify signature on CNAMEs, sorry
	;; Looking at type NXT for domain wwwkeys.josefsson.org
wwwkeys.josefsson.org.	36000	IN	NXT	yxa.josefsson.org  CNAME NXT SIG
wwwkeys.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			tMmLbB5aYrCgq+ejiSH/t5wEVl/q/hPJNgJe5PW6xHkGR
			nxRUInbS0DvUoEmeGpELIo0VTbAGxDz8U/1RHoS6w== )
	;; verify ok
	;; Getting NXT for yxa.josefsson.org
yxa.josefsson.org.	36000	IN	NXT	josefsson.org  A NXT SIG
	;; Looking at type A for domain yxa.josefsson.org
yxa.josefsson.org.	3600	IN	A	217.13.230.178
yxa.josefsson.org.	3600	IN	SIG	A  1  3  3600  20021213071840 (
			20021113071840 8375  josefsson.org
			c0D4ONqQPxYCl9SNkWGOHgZhIfFb00GwvehuUUZJ5DbAu
			M3qhbr9q2uibnQOAic6U7wt7E60WCCPHSxgVlqjoA== )
	;; verify ok
	;; Looking at type NXT for domain yxa.josefsson.org
yxa.josefsson.org.	36000	IN	NXT	josefsson.org  A NXT SIG
yxa.josefsson.org.	36000	IN	SIG	NXT  1  3  36000  20021213071840 (
			20021113071840 8375  josefsson.org
			v1J/b3UhbHaXw+ZpoZ4wSZhqphDA33wdMsdGIcIkxkVGZ
			tHdAP6wL6Egqp/b5CEmcRM/b+mImJogJ0YsZjKmxg== )
	;; verify ok
josefsson.org.	36000	IN	SOA	belsebub.onkel. jas.pdc.kth.se. (
					2002110703	; Serial
					10800	; Refresh
					3600	; Retry
					604800	; Expire
					36000 )	; Minimum TTL
jas@latte:~/src/walker$

$Id: index.html,v 1.27 2004/06/03 20:23:39 jas Exp $