ccTLD/fr/DNSSECについて、ここに記述してください。 $ dig -t ns +dnssec fr @a.root-servers.net {{{ ; <<>> DiG 9.9.5-3-Ubuntu <<>> -t ns +dnssec fr @a.root-servers.net ;; global options: +cmd ;; connection timed out; no servers could be reached tmaeno@tmaeno:~$ dig -t ns +dnssec fr @a.root-servers.net ; <<>> DiG 9.9.5-3-Ubuntu <<>> -t ns +dnssec fr @a.root-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42524 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 11 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1472 ;; QUESTION SECTION: ;fr. IN NS ;; AUTHORITY SECTION: fr. 172800 IN NS d.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS 20122 8 2 A4208B55FFB352EDC816D9329283DD8BBDDE44C585395AF9AA7275AB E3CF6795 fr. 86400 IN DS 35095 8 2 23C6CAADC9927EE98061F2B52C9B8DA6B53F3F648F814A4A86A0FAF9 843E2C4E fr. 86400 IN RRSIG DS 8 1 86400 20141207170000 20141130160000 22603 . h2tn34cVhC3DEAnEWCa9d7x81eSElHzyRUXcI/KYuyW3sRaWaYP2M1hG rMfG9RGkkJseAa+Ahc/oslb8x2gWsV+5FRsA08ZOM0LG5sb3J2xe7XoG hIouy8E+RXhMVJ7fNz+JDjUoYFXnoRh6hsqc/n0DPPd45d7/0akyTKkX g/Q= ;; ADDITIONAL SECTION: d.ext.nic.fr. 172800 IN A 192.5.4.2 d.nic.fr. 172800 IN A 194.0.9.1 e.ext.nic.fr. 172800 IN A 193.176.144.22 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.ext.nic.fr. 172800 IN AAAA 2001:500:2e::2 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; Query time: 209 msec ;; SERVER: 198.41.0.4#53(198.41.0.4) ;; WHEN: Mon Dec 01 09:47:03 JST 2014 ;; MSG SIZE rcvd: 594 }}} root servers が署名するのは DS レコードだけ。　（偽delegation を送りつけても、区別はできない） == nic.fr == %dig -t any nic.fr @194.0.9.1 +dnssec {{{ ; <<>> DiG 9.9.0 <<>> -t any nic.fr @194.0.9.1 +dnssec ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53681 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 12 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;nic.fr. IN ANY ;; AUTHORITY SECTION: nic.fr. 172800 IN NS ns1.ext.nic.fr. nic.fr. 172800 IN NS ns1.nic.fr. nic.fr. 172800 IN NS ns2.nic.fr. nic.fr. 172800 IN NS ns3.nic.fr. nic.fr. 172800 IN NS ns4.ext.nic.fr. nic.fr. 172800 IN NS ns6.ext.nic.fr. nic.fr. 172800 IN DS 11627 8 2 84103C835179A682C25C9647D8C962AB183EB44C80E12E9542C4AE32 A2E80B76 nic.fr. 172800 IN RRSIG DS 8 2 172800 20150117120925 20141118120925 52591 fr. RGktvPqdIqQnvZZHpZCzUqsIAlJ/I9PN4xOQxOu7nD5MucWtbnlxwkot MT0yYOgTgJIWac/dTXtfvUcUn6/0NjKHe1oxT312Lc5OnZwlFSHWUFaA D2DA0YZRO0jjXkXfBXo6T6frcjXrefLIRYX9MVSb3Y2Sks61mFXYr3cm Q8E= ;; ADDITIONAL SECTION: ns1.ext.nic.fr. 172800 IN A 193.51.208.13 ns1.nic.fr. 172800 IN A 192.134.4.1 ns2.nic.fr. 172800 IN A 192.93.0.4 ns3.nic.fr. 172800 IN A 192.134.0.49 ns4.ext.nic.fr. 172800 IN A 193.0.9.4 ns6.ext.nic.fr. 172800 IN A 130.59.138.49 ns1.nic.fr. 172800 IN AAAA 2001:660:3003:2::4:1 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 ns3.nic.fr. 172800 IN AAAA 2001:660:3006:1::1:1 ns4.ext.nic.fr. 172800 IN AAAA 2001:67c:e0::4 ns6.ext.nic.fr. 172800 IN AAAA 2001:620:0:1b:5054:ff:fe74:8780 ;; Query time: 264 msec ;; SERVER: 194.0.9.1#53(194.0.9.1) ;; WHEN: Sun Nov 30 14:34:05 2014 ;; MSG SIZE rcvd: 593 }}} == nic.fr answer == {{{ $ dig -t ns +dnssec nic.fr @192.134.4.1 ; <<>> DiG 9.9.5-3-Ubuntu <<>> -t ns +dnssec nic.fr @192.134.4.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37472 ;; flags: qr aa rd; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 23 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;nic.fr. IN NS ;; ANSWER SECTION: nic.fr. 172800 IN NS ns4.ext.nic.fr. nic.fr. 172800 IN NS ns1.ext.nic.fr. nic.fr. 172800 IN NS ns6.ext.nic.fr. nic.fr. 172800 IN NS ns3.nic.fr. nic.fr. 172800 IN NS ns2.nic.fr. nic.fr. 172800 IN NS ns1.nic.fr. nic.fr. 172800 IN RRSIG NS 8 2 172800 20141207224140 20141130112624 43854 nic.fr. U9raPGaGek93w6lgV9ZP/QFCLnL6X+EGGtOw+ZWJi2K5QBKj/CVdaNHg x4j3bMKobUlLwhz0Wten+8AGQR0Yaj3MmqPIFZlPF9osjef4cMvK6hLM HEpZOGESLpFjZ14XmHsA4LNORgGQFNl8L68rFuyY9HmUIC3aq460G739 yyw= ;; ADDITIONAL SECTION: ns1.ext.nic.fr. 172800 IN A 193.51.208.13 ns1.nic.fr. 172800 IN A 192.134.4.1 ns1.nic.fr. 172800 IN AAAA 2001:660:3003:2::4:1 ns2.nic.fr. 172800 IN A 192.93.0.4 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 ns3.nic.fr. 172800 IN A 192.134.0.49 ns3.nic.fr. 172800 IN AAAA 2001:660:3006:1::1:1 ns4.ext.nic.fr. 172800 IN A 193.0.9.4 ns4.ext.nic.fr. 172800 IN AAAA 2001:67c:e0::4 ns6.ext.nic.fr. 172800 IN A 130.59.138.49 ns6.ext.nic.fr. 172800 IN AAAA 2001:620:0:1b:5054:ff:fe74:8780 ns1.ext.nic.fr. 172800 IN RRSIG A 8 4 172800 20141205003502 20141128032212 43854 nic.fr. lBIL2/MTSSrSo5YCfukWdMgSbYe/CZxB3AIaCoIfmnCIBu5pUZxJQfeM RGNFK8AzgywPIGJTEk1bboNkx+f59xa/gla6sWtKn0+vrsX3aegfk9kz fsAuI6o2oZeZWIVdY0nJxtet0M738kG5uytRHFGaTKvs33xTaX780AMx ulw= ns1.nic.fr. 172800 IN RRSIG A 8 3 172800 20141206160518 20141129232530 43854 nic.fr. RXViUymRurgInbZQ/vWl9LAIRuu4O0mtq9KRagEwDrZ07+EiHFgrMdKn 3eFr5PN31IMaprrh6PV1IqX8CjvhFLxPYMevo88CJcT/NR0go3AfH4Wr 5DRmKPmzrrFbhUVzCFb5EQid3b2qg5OTNG+xupyJ21XAWkE7FYwl8pEx HIM= ns1.nic.fr. 172800 IN RRSIG AAAA 8 3 172800 20141204222732 20141127103724 43854 nic.fr. nFutvauNDeR1PyUu1Yx7NJSQdmgyctEPLU+1AlJfR0ondFCyoX89A4hm OTnpF483kMra7tbda6/aixH+UPjl4X0QpCebeC+LEE7GrLbX/t5G8879 bIKMJSfO7DhVaIo+3WPeGlLmwh6DV8jQgA35OUP6X+aW+GGXQFy4IoJD 2Y8= ns2.nic.fr. 172800 IN RRSIG A 8 3 172800 20141206080733 20141128232342 43854 nic.fr. gaiyHc+NagA1e6RB+y4DExSp6OD0CYi0awrSUg60H0V7gDMN2yjaaSzN KR9S4FWF+e7Z6+Amk+eCRMCJdOo4Y7ORF8A+36LR/x9suaB9ovACyUVA xX+peSbwE6cVI+HFFFKBjx2LAqhZKfMaMw7GtQWHRCj8TmxKdXVhBVXU w10= ns2.nic.fr. 172800 IN RRSIG AAAA 8 3 172800 20141207164131 20141130112624 43854 nic.fr. CSlQIXj5lcttyHqN/rxR+/FpSut7BeafiCgcM9lj3AlR7E/zF3mAv7dL zG0ZEyqKHsRbHw0Zrwf2u76e4AESD5/n5QofAOi9YeZT2+KF97TcHxFw l52u5zqns14IWZTgEOnX441UbNzTEORgeRMIz9Bo/RlC2YU6bX5RJmt+ PwU= ns3.nic.fr. 172800 IN RRSIG A 8 3 172800 20141207170232 20141130212715 43854 nic.fr. XVb62Rjen0JxQNoJQmvABhSxpi0l+bg+Y7wzAXMLNFhFOhmpmirNJEaw 6Dgw+cRuvGYsFQX1U+BgxSsfFqrAnt+LHs1o6i3wEwtdKzLsykCtVO3Z m9h5YyGDpwfkbPtQraQ485MRLR9xBRi9ucZtOivcwWWmPt13XEc9bZYw zHg= ns3.nic.fr. 172800 IN RRSIG AAAA 8 3 172800 20141205041306 20141127152118 43854 nic.fr. GHtyLmAYt7ncfsimrKkaHRBa+5nLgRK/ay6m1fo4v2EQXfu4eJlQGILC tAdbo3MKoc6phBtzBwSPnZ00Al+Flxk6pmLXGe2eDivYskSXAM15xgKi T6uvXDrgWtoRw+wEBjuo1DNiCIvLLa+M4Q9cz9eSy+sEvPm7sYOLMwEc W1E= ns4.ext.nic.fr. 172800 IN RRSIG A 8 4 172800 20141205003219 20141127123733 43854 nic.fr. KK9dVAIv3W80URC64d39FSKkzZrqDyoomd/I9e7q+H+8M4qrHFi/HfVS TpmlpGQ9e59gbhx9QAQ9DaEFMQWkY948PFNgPstuC+GUk1Bl3RPyUdjA p5OQ0ilXS4gouNpEhuxRBk8K9Xpf9J5S3QWUswZ/GhWuv1WzA4V6kNeK XrE= ns4.ext.nic.fr. 172800 IN RRSIG AAAA 8 4 172800 20141205234434 20141128172315 43854 nic.fr. qGkSCTFdog8u52XGlNmIO4X9lhxgGfCqv5j4HYJvD5wUF5d/mBVZ6onp sWJr+ML1PBY+UjHFdvnA7uDKWi2nC4Vc/YRO/uIwQRhIJx6NpcOe/lzi uQRGXs3ahu5PX74l5oOvmESflg7Oz7NAkYpOEdAa5rdsRjeAaBaCxrQK IqU= ns6.ext.nic.fr. 172800 IN RRSIG A 8 4 172800 20141206015942 20141128192324 43854 nic.fr. NWdvelfF5mQkMSKeK4TglkQaJmDbXzOdRIx0ozShUZ+2vhCjnDQX4iXf nlupV8xcHbjqmpv1wN1ZzmYttvxPq3LIy+qXtVHZoZkQ3LLfrE1mtvvU LLLiQzdxH8bzJXOx0/aCwxyLTtNAwAXZKn+Z82bc9mEFCq6JAEyFw1rX WbY= ns6.ext.nic.fr. 172800 IN RRSIG AAAA 8 4 172800 20141207184634 20141130192706 43854 nic.fr. TOaLKTIW+FWwwUXgvop8wyonUbjNixOpUWcGC1E1DTJ5Jd78t9Vi/kAP GtxZu30Xi1z717JWujgQJW3/CHOTpfSgaZFipvPCsbUPJaI7PVy5KVcf u7p4sP6Xg8CSNwV85gFDQ9v+Ni54ui9fKHNcRCrDvylUmOFU/GG5CUvt GR4= ;; Query time: 273 msec ;; SERVER: 192.134.4.1#53(192.134.4.1) ;; WHEN: Mon Dec 01 09:52:58 JST 2014 ;; MSG SIZE rcvd: 2375 }}}