1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 trust-anchor: "example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}" 6 trust-anchor: "example.org. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJIIs70j+sDS/UT2QRp61SE7S3EEXopNXoFE73JLRmvpi/UrOO/Vz4Se6wXv/CYCKjGw06U4WRgRYXcpEhJROyNapmdIKSxhOzfLVE1gqA0PweZR8dtY3aNQSRn3sPpwJr6Mi/PqQKAMMrZ9ckJpf1+bQMOOvxgzz2U1GS18b3yZKcgTMEaJzd/GZYzi/BN2DzQ0MsrSwYXfsNLFOBbs8PJMW4LYIxeeOe6rUgkWOF7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}" 7 val-override-date: "20070916134226" 8 target-fetch-policy: "0 0 0 0 0" 9 qname-minimisation: "no" 10 fake-sha1: yes 11 trust-anchor-signaling: no 12 13stub-zone: 14 name: "." 15 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 16CONFIG_END 17 18SCENARIO_BEGIN Test validator with cname, dname, cname, positive answer 19 20; K.ROOT-SERVERS.NET. 21RANGE_BEGIN 0 100 22 ADDRESS 193.0.14.129 23ENTRY_BEGIN 24MATCH opcode qtype qname 25ADJUST copy_id 26REPLY QR NOERROR 27SECTION QUESTION 28. IN NS 29SECTION ANSWER 30. IN NS K.ROOT-SERVERS.NET. 31SECTION ADDITIONAL 32K.ROOT-SERVERS.NET. IN A 193.0.14.129 33ENTRY_END 34 35ENTRY_BEGIN 36MATCH opcode qtype qname 37ADJUST copy_id 38REPLY QR NOERROR 39SECTION QUESTION 40www.example.com. IN A 41SECTION AUTHORITY 42com. IN NS a.gtld-servers.net. 43SECTION ADDITIONAL 44a.gtld-servers.net. IN A 192.5.6.30 45ENTRY_END 46 47ENTRY_BEGIN 48MATCH opcode qtype qname 49ADJUST copy_id 50REPLY QR NOERROR 51SECTION QUESTION 52www.sub.example.net. IN A 53SECTION AUTHORITY 54net. IN NS a.gtld-servers.net. 55SECTION ADDITIONAL 56a.gtld-servers.net. IN A 192.5.6.30 57ENTRY_END 58 59ENTRY_BEGIN 60MATCH opcode qtype qname 61ADJUST copy_id 62REPLY QR NOERROR 63SECTION QUESTION 64www.example.org. IN A 65SECTION AUTHORITY 66org. IN NS a.gtld-servers.net. 67SECTION ADDITIONAL 68a.gtld-servers.net. IN A 192.5.6.30 69ENTRY_END 70RANGE_END 71 72; a.gtld-servers.net. 73RANGE_BEGIN 0 100 74 ADDRESS 192.5.6.30 75ENTRY_BEGIN 76MATCH opcode qtype qname 77ADJUST copy_id 78REPLY QR NOERROR 79SECTION QUESTION 80com. IN NS 81SECTION ANSWER 82com. IN NS a.gtld-servers.net. 83SECTION ADDITIONAL 84a.gtld-servers.net. IN A 192.5.6.30 85ENTRY_END 86 87ENTRY_BEGIN 88MATCH opcode qtype qname 89ADJUST copy_id 90REPLY QR NOERROR 91SECTION QUESTION 92net. IN NS 93SECTION ANSWER 94net. IN NS a.gtld-servers.net. 95SECTION ADDITIONAL 96a.gtld-servers.net. IN A 192.5.6.30 97ENTRY_END 98 99ENTRY_BEGIN 100MATCH opcode qtype qname 101ADJUST copy_id 102REPLY QR NOERROR 103SECTION QUESTION 104org. IN NS 105SECTION ANSWER 106org. IN NS a.gtld-servers.net. 107SECTION ADDITIONAL 108a.gtld-servers.net. IN A 192.5.6.30 109ENTRY_END 110 111ENTRY_BEGIN 112MATCH opcode qtype qname 113ADJUST copy_id 114REPLY QR NOERROR 115SECTION QUESTION 116www.example.com. IN A 117SECTION AUTHORITY 118example.com. IN NS ns.example.com. 119SECTION ADDITIONAL 120ns.example.com. IN A 1.2.3.4 121ENTRY_END 122ENTRY_BEGIN 123MATCH opcode qtype qname 124ADJUST copy_id 125REPLY QR NOERROR 126SECTION QUESTION 127www.sub.example.net. IN A 128SECTION AUTHORITY 129example.net. IN NS ns.example.net. 130SECTION ADDITIONAL 131ns.example.net. IN A 1.2.3.5 132ENTRY_END 133ENTRY_BEGIN 134MATCH opcode qtype qname 135ADJUST copy_id 136REPLY QR NOERROR 137SECTION QUESTION 138www.example.org. IN A 139SECTION AUTHORITY 140example.org. IN NS ns.example.org. 141SECTION ADDITIONAL 142ns.example.org. IN A 1.2.3.7 143ENTRY_END 144RANGE_END 145 146; ns.example.com. 147RANGE_BEGIN 0 100 148 ADDRESS 1.2.3.4 149ENTRY_BEGIN 150MATCH opcode qtype qname 151ADJUST copy_id 152REPLY QR NOERROR 153SECTION QUESTION 154example.com. IN NS 155SECTION ANSWER 156example.com. IN NS ns.example.com. 157example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 158SECTION ADDITIONAL 159ns.example.com. IN A 1.2.3.4 160ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 161ENTRY_END 162 163; response to DNSKEY priming query 164ENTRY_BEGIN 165MATCH opcode qtype qname 166ADJUST copy_id 167REPLY QR NOERROR 168SECTION QUESTION 169example.com. IN DNSKEY 170SECTION ANSWER 171example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 172example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854} 173SECTION AUTHORITY 174example.com. IN NS ns.example.com. 175example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 176SECTION ADDITIONAL 177ns.example.com. IN A 1.2.3.4 178ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 179ENTRY_END 180 181; response to query of interest 182ENTRY_BEGIN 183MATCH opcode qtype qname 184ADJUST copy_id 185REPLY QR NOERROR 186SECTION QUESTION 187www.example.com. IN A 188SECTION ANSWER 189www.example.com. IN CNAME www.sub.example.net. 190www.example.com. 3600 IN RRSIG CNAME 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFEv1gOb7KEskzkJNtFKKVBxY+Hb2AhUAqKJDIZJvNl+AdzqAt+JgdvnYAF0= ;{id = 2854} 191SECTION AUTHORITY 192SECTION ADDITIONAL 193ENTRY_END 194 195; response for delegation to sub.example.com. 196ENTRY_BEGIN 197MATCH opcode qtype qname 198ADJUST copy_id 199REPLY QR NOERROR 200SECTION QUESTION 201www.sub.example.com. IN A 202SECTION ANSWER 203SECTION AUTHORITY 204sub.example.com. IN NS ns.sub.example.com. 205sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 206sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854} 207SECTION ADDITIONAL 208ns.sub.example.com. IN A 1.2.3.6 209ENTRY_END 210 211; response for delegation to sub.example.com. 212ENTRY_BEGIN 213MATCH opcode qtype qname 214ADJUST copy_id 215REPLY QR NOERROR 216SECTION QUESTION 217sub.example.com. IN DNSKEY 218SECTION ANSWER 219SECTION AUTHORITY 220sub.example.com. IN NS ns.sub.example.com. 221sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 222sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854} 223SECTION ADDITIONAL 224ns.sub.example.com. IN A 1.2.3.6 225ENTRY_END 226RANGE_END 227 228; ns.example.net. 229RANGE_BEGIN 0 100 230 ADDRESS 1.2.3.5 231ENTRY_BEGIN 232MATCH opcode qtype qname 233ADJUST copy_id 234REPLY QR NOERROR 235SECTION QUESTION 236example.net. IN NS 237SECTION ANSWER 238example.net. IN NS ns.example.net. 239example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 240SECTION ADDITIONAL 241ns.example.net. IN A 1.2.3.5 242ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 243ENTRY_END 244 245; response to DNSKEY priming query 246ENTRY_BEGIN 247MATCH opcode qtype qname 248ADJUST copy_id 249REPLY QR NOERROR 250SECTION QUESTION 251example.net. IN DNSKEY 252SECTION ANSWER 253example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 254example.net. 3600 IN RRSIG DNSKEY RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. hiFzlQ8VoYgCuvIsfVuxC3mfJDqsTh0yc6abs5xMx5uEcIjb0dndFQx7INOM+imlzveEN73Hqp4OLFpFhsWLlw== ;{id = 30899} 255SECTION AUTHORITY 256example.net. IN NS ns.example.net. 257example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 258SECTION ADDITIONAL 259ns.example.net. IN A 1.2.3.5 260ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 261ENTRY_END 262 263ENTRY_BEGIN 264MATCH opcode qtype qname 265ADJUST copy_id 266REPLY QR NOERROR 267SECTION QUESTION 268sub.example.net. IN DS 269SECTION ANSWER 270SECTION AUTHORITY 271sub.example.net. IN NSEC www.example.net. DNAME RRSIG NSEC 272sub.example.net. 3600 IN RRSIG NSEC 5 3 3600 20070926134150 20070829134150 30899 example.net. PsKlcOSNElUi3u7Cn6c5+Sv8CRLTqmooMbvloTwUCkM53SuAirXcCA+9Pz5y0unO9+5IxwdkwssnoCOX5FqnCQ== ;{id = 30899} 273SECTION ADDITIONAL 274ENTRY_END 275 276; response to query of interest 277ENTRY_BEGIN 278MATCH opcode qtype qname 279ADJUST copy_id 280REPLY QR NOERROR 281SECTION QUESTION 282www.sub.example.net. IN A 283SECTION ANSWER 284sub.example.net. IN DNAME sub.example.com. 285sub.example.net. 3600 IN RRSIG DNAME 5 3 3600 20070926134150 20070829134150 30899 example.net. G/UmcL1VmCF2mjB1O9IeNM2DnvayxEy6vOrvA+Ic/Gqcsgnq/f4VTCV9soQQIAWEir2v5Vt8hqPDP8rCRbMnyA== ;{id = 30899} 286www.sub.example.net. IN CNAME www.sub.example.com. 287SECTION AUTHORITY 288SECTION ADDITIONAL 289ENTRY_END 290RANGE_END 291 292; ns.sub.example.com. 293RANGE_BEGIN 0 100 294 ADDRESS 1.2.3.6 295ENTRY_BEGIN 296MATCH opcode qtype qname 297ADJUST copy_id 298REPLY QR NOERROR 299SECTION QUESTION 300sub.example.com. IN NS 301SECTION ANSWER 302sub.example.com. IN NS ns.sub.example.com. 303sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899} 304SECTION ADDITIONAL 305ns.sub.example.com. IN A 1.2.3.6 306ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899} 307ENTRY_END 308 309; response to DNSKEY priming query 310; sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 311ENTRY_BEGIN 312MATCH opcode qtype qname 313ADJUST copy_id 314REPLY QR NOERROR 315SECTION QUESTION 316sub.example.com. IN DNSKEY 317SECTION ANSWER 318sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 319sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 320SECTION AUTHORITY 321sub.example.com. IN NS ns.sub.example.com. 322sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899} 323SECTION ADDITIONAL 324ns.sub.example.com. IN A 1.2.3.6 325ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899} 326ENTRY_END 327 328; response to query of interest 329ENTRY_BEGIN 330MATCH opcode qtype qname 331ADJUST copy_id 332REPLY QR NOERROR 333SECTION QUESTION 334www.sub.example.com. IN A 335SECTION ANSWER 336www.sub.example.com. IN CNAME www.example.org. 337www.sub.example.com. 3600 IN RRSIG CNAME 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. ZE6A4pkyeUpNCscu2oeBv/3JbbirdwUaAMgmQ/ighzacUJCC6Lh8vAL5aYDEyTk7oktb8uS7gmYan171aM9/tg== ;{id = 30899} 338SECTION AUTHORITY 339SECTION ADDITIONAL 340ENTRY_END 341RANGE_END 342 343; ns.example.org. 344RANGE_BEGIN 0 100 345 ADDRESS 1.2.3.7 346ENTRY_BEGIN 347MATCH opcode qtype qname 348ADJUST copy_id 349REPLY QR NOERROR 350SECTION QUESTION 351example.org. IN NS 352SECTION ANSWER 353example.org. IN NS ns.example.org. 354example.org. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.org. MCwCFAE1sQemdwqUPt4Qo+mr59a66DlFAhRV1mftIFs2YnkmIWsGtikIOJvh5A== ;{id = 2854} 355SECTION ADDITIONAL 356ns.example.org. IN A 1.2.3.7 357ns.example.org. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.org. MC0CFQC0yXaA8ywsZF+7dHukVIBFD820wQIUONbyI+UX9SDSDFmFnr+ApuTEooY= ;{id = 2854} 358ENTRY_END 359 360; response to DNSKEY priming query 361ENTRY_BEGIN 362MATCH opcode qtype qname 363ADJUST copy_id 364REPLY QR NOERROR 365SECTION QUESTION 366example.org. IN DNSKEY 367SECTION ANSWER 368example.org. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 369example.org. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134150 20070829134150 2854 example.org. MC0CFBCSESiUl5XEht/LRecGFuX2Xad7AhUAoURP4DsIEbwMjlB955vziIB798E= ;{id = 2854} 370SECTION AUTHORITY 371example.org. IN NS ns.example.org. 372example.org. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.org. MCwCFAE1sQemdwqUPt4Qo+mr59a66DlFAhRV1mftIFs2YnkmIWsGtikIOJvh5A== ;{id = 2854} 373SECTION ADDITIONAL 374ns.example.org. IN A 1.2.3.7 375ns.example.org. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.org. MC0CFQC0yXaA8ywsZF+7dHukVIBFD820wQIUONbyI+UX9SDSDFmFnr+ApuTEooY= ;{id = 2854} 376ENTRY_END 377 378; response to query of interest 379ENTRY_BEGIN 380MATCH opcode qtype qname 381ADJUST copy_id 382REPLY QR NOERROR 383SECTION QUESTION 384www.example.org. IN A 385SECTION ANSWER 386www.example.org. IN A 11.11.11.11 387www.example.org. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.org. MC0CFB/erEAxSMqW0I51r6VQMq861B+yAhUAqJ7DPU7xHFpWJGILOQ0WW3aDGi0= ;{id = 2854} 388SECTION AUTHORITY 389SECTION ADDITIONAL 390ENTRY_END 391RANGE_END 392 393STEP 1 QUERY 394ENTRY_BEGIN 395REPLY RD DO 396SECTION QUESTION 397www.example.com. IN A 398ENTRY_END 399 400; recursion happens here. 401STEP 10 CHECK_ANSWER 402ENTRY_BEGIN 403MATCH all 404REPLY QR RD RA AD DO NOERROR 405SECTION QUESTION 406www.example.com. IN A 407SECTION ANSWER 408www.example.com. 3600 IN CNAME www.sub.example.net. 409www.example.com. 3600 IN RRSIG CNAME 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFEv1gOb7KEskzkJNtFKKVBxY+Hb2AhUAqKJDIZJvNl+AdzqAt+JgdvnYAF0= ;{id = 2854} 410sub.example.net. 3600 IN DNAME sub.example.com. 411sub.example.net. 3600 IN RRSIG DNAME 5 3 3600 20070926134150 20070829134150 30899 example.net. G/UmcL1VmCF2mjB1O9IeNM2DnvayxEy6vOrvA+Ic/Gqcsgnq/f4VTCV9soQQIAWEir2v5Vt8hqPDP8rCRbMnyA== ;{id = 30899} 412www.sub.example.net. 0 IN CNAME www.sub.example.com. 413www.sub.example.com. 3600 IN CNAME www.example.org. 414www.sub.example.com. 3600 IN RRSIG CNAME 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. ZE6A4pkyeUpNCscu2oeBv/3JbbirdwUaAMgmQ/ighzacUJCC6Lh8vAL5aYDEyTk7oktb8uS7gmYan171aM9/tg== ;{id = 30899} 415www.example.org. 3600 IN A 11.11.11.11 416www.example.org. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.org. MC0CFB/erEAxSMqW0I51r6VQMq861B+yAhUAqJ7DPU7xHFpWJGILOQ0WW3aDGi0= ;{id = 2854} 417SECTION AUTHORITY 418SECTION ADDITIONAL 419ENTRY_END 420 421SCENARIO_END 422