Servfail on Bind -9.16.1

[upen]

Hello,
Thank you.

1. DS record for com
#dig DS com +dnssec

; <<>> DiG 9.16.1-Ubuntu <<>> DS com +dnssec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14029
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: fdfd77fc04700d72010000005fbb323fa7e65af53e803915 (good)
;; QUESTION SECTION:
;com.                           IN      DS

;; ANSWER SECTION:
com.                    80472   IN      DS      30909 8 2
E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766
com.                    80472   IN      RRSIG   DS 8 1 86400 20201205170000
20201122160000 26116 .
fu2mVhKX9+oDAx9T8LrIyli5yTBk28mCDw8SbAuIFKuRhGI8QiOgchEZ
0KzSaSpfBHpgVoq6mN8WFHeSPhPeZ5EOMbXvMjv9nvHNVKylu4C5mSRt
nWuoVXU531uYFEtuqJgcCoNBsiIznbq/3GkAZeYkc8pj/Hkma/p0/QYh
Lb1Mz/lW4SJNc03Kw0jDNw6Z2C1XGvDG3iHeJ6CFrZrvp7U41qDNqZEm
NT7T7/JXoUdy6evi6LCLXtZ4QAqKv5HReDRlVTkmAWVnQw+PtJ75nvCV
4pP3jp5ih70OSCQx3iB7xJ/8GtWiI5DvD9fmlbX8CRNu12sKX1/e/Lxd Ph1JXw==

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Nov 22 21:53:35 CST 2020
;; MSG SIZE  rcvd: 395



2. DNSSEC KEY for com
#dig DNSKEY com +dnssec

; <<>> DiG 9.16.1-Ubuntu <<>> DNSKEY com +dnssec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4992
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: dc1c3f1a640d17b0010000005fbb32a0c7fadb271d47476e (good)
;; QUESTION SECTION:
;com.                           IN      DNSKEY

;; ANSWER SECTION:
com.                    80375   IN      DNSKEY  257 3 8
AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsB
fKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEm
u/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPN
IwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0H
XvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh
2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpK Nnv4oPo/
com.                    80375   IN      DNSKEY  256 3 8
AwEAAadfNlrLwDe1W0klTRoNDeeEfZAop76YMUvOtl2pu0lXE5Fzj1sD
ROflxnOGTI9RfwrA0rD0ixBkW32Pu1nheytLBrPZ32hva+iY8jYQ/TPi
Msbc/soa8KHQ77eaJtJAImc+VLuXrI1QmRyrywJWU1fkZ9GyPP5YAhgn
ttH6ZDXgMeJYjzs5CLfMiV9vAWFgJvy98bG97JP3PpHL9/8BTGM=
com.                    80375   IN      RRSIG   DNSKEY 8 1 86400
20201206192421 20201121191921 30909 com.
K3w8cixeKqKbELJMyFynhuA+1oQYbLNSZhZ1NcSofx+ND3ImYoQ4rodY
uZokFmKvJkZvrBMSF0tfwWLYbyX+Xw2Fb//KKDD6gluN/evmoH3xv/XC
j4WFRUwF1L5jPjeylY233GzQN2RVHDFFpsdczcGwNp2BqyBMXHe2Lv+1
kOeTfEoA/XJdZSEMlo3V0xq6sxB9747wRfHm17ockLIHtWMI8eSyIO92
nTQj2WZninySf6N8yb5tGUu0ABoXlVF6fc9INybFNTZg7gF85hfCtjK4
Ko6W97d1CW5AyvGprYtJgNQDqzqoP7qkvFI4oSRDZJITwamhci90hBMv cXZDWA==

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Nov 22 21:55:12 CST 2020
;; MSG SIZE  rcvd: 805



3. DS Record for facebook.com

#dig @127.0.0.1 DS facebook.com +dnssec

; <<>> DiG 9.16.1-Ubuntu <<>> @127.0.0.1 DS facebook.com +dnssec
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: ccfca253df729ea8010000005fbb331e11884fb6d63208e5 (good)
;; QUESTION SECTION:
;facebook.com.                  IN      DS

;; AUTHORITY SECTION:
com.                    882     IN      SOA     a.gtld-servers.net.
nstld.verisign-grs.com. 1606103797 1800 900 604800 86400
com.                    882     IN      RRSIG   SOA 8 1 900 20201130035637
20201123024637 31510 com.
CGHfYUjxwqYzK47ZkmMbdc7EVOnRYIjznaXmlMUphkxmWaw94HPio88H
U8kUx3H1wd3h9Ahtgsk74ctwILFBiUH2SHtQZ7HYJvRAZBv5+JvxSH54
aKLMOJWBoeS2M9UFeUcoC/IAkgyOG/4sfkz0W4hdV6vsgZsTLCoGjXnj
kQu1W/d6b7SttLX0pMg6OIwEXJbGlWnRIycaBt19tFmm6A==
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 882 IN RRSIG NSEC3 8 2 86400
20201129054027 20201122043027 31510 com.
kZw7h9mbKgXQ2YhIp+jKmg5xOUmZq7HPGRTZ2ERwIA5FjOBIkEWqWHga
SZhV/78SqH26QbwCXQnf0Hv7xzMdVwYOr7FwDE+7a//cL8yRe5pBd5Bb
y1QORmqRT8kTshhedhwyxjzk4TxcN8M0/JqiDUhb6iHacDFqqwIhm13l
Wy0xjM5nojLmY/fYuH/mKSsz5XlfEKGqG5q1FbZUZWhj3Q==
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 882 IN NSEC3 1 1 0 -
CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM
I28FT380NFMJ3TJ970NBAD0HSSK1LEOK.com. 882 IN RRSIG NSEC3 8 2 86400
20201127071904 20201120060904 31510 com.
VuV00I8jZMAbQmVLBub0Yfk5eEng8NkCFrPCvK/19YpzEzkWKPpOVcya
xZqYZzAVBhSP/n2/kcC8tkDMFZHL8rbGAg/jPpJCAhp2Tszhc8pzqKtZ
CmFMZtO8HQGx1ZjCGpzHZ+6/5irvE7NJrkndTmoOd/1RfS/WeZseAkCb
204Td7fE0C5D/8oGRb81vFICH2IjnykeoEguPvWLXnWfqw==
I28FT380NFMJ3TJ970NBAD0HSSK1LEOK.com. 882 IN NSEC3 1 1 0 -
I28GLTLV5D2H16BES4T7GHH4AABNFOB0 NS DS RRSIG

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Nov 22 21:57:18 CST 2020
;; MSG SIZE  rcvd: 889


Thank you for that information Mark. I appreciate it. It looks like it's
working now. Steps provided will help debug issues in future. :-)

Best,
Upen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201122/78ff689f/attachment-0003.htm>