On Wed, Jun 12, 2024 at 07:38:26AM +0000, ISOC Liberia <liberiai...@gmail.com> wrote a message of 91 lines which said:
> I am reaching out because the Liberia country-code-top-level-domain > that is the .lr is not resolving due to DNSSEC, Despite having the same serial number in the SOA, not all authoritative name servers for .lr return the same thing. For instance, a query for lr/DNSKEY to 77.72.229.254 returns one signature while the same query to 2a01:3f0:0:306::53 returns two signatures (same keytag), with probably one invalid, according to the reports from Zonemaster <https://zonemaster.fr/en/result/77c33ec33e528a59> and DNSviz <https://dnsviz.net/d/lr/ZmqhSQ/dnssec/>. Advice: publish a new zone, with an updated serial number to force refreshing. _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations