[gmarzot@alvin validator]$ apps/validate -o7:stderr good-A.good-ns.test.dnssec-tools.org Reading root hints from /usr/local/etc/dnssec-tools/root.hints Done reading root hints Reading resolver policy from /usr/local/etc/dnssec-tools/resolv.conf Done reading resolver configuration Reading validator policy from /usr/local/etc/dnssec-tools/dnsval.conf Reading next policy fragment Done reading validator configuration Context created with /usr/local/etc/dnssec-tools/dnsval.conf /usr/local/etc/dnssec-tools/resolv.conf /usr/local/etc/dnssec-tools/root.hints Result: ****START**** val_resolve_and_check(): looking for {good-A.good-ns.test.dnssec-tools.org 1 1} ask_cache(): looking for {good-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.good-ns.test.dnssec-tools.org 1 1} good-A.good-ns.test.dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.good-ns.test.dnssec-tools.org to: 63.195.146.66 End of Sending query for good-A.good-ns.test.dnssec-tools.org good-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.good-ns.test.dnssec-tools.org 1 1} good-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 48} good-ns.test.dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 63.195.146.66 End of Sending query for good-ns.test.dnssec-tools.org ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 63.195.146.66 End of Sending query for good-ns.test.dnssec-tools.org good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 6} ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 43} good-ns.test.dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 63.195.146.66 End of Sending query for good-ns.test.dnssec-tools.org good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 43} good-ns.test.dnssec-tools.org requires DNSSEC ask_cache(): looking for {test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {test.dnssec-tools.org 1 48} test.dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for test.dnssec-tools.org to: 63.195.146.66 End of Sending query for test.dnssec-tools.org Cannot show that good-ns.test.dnssec-tools.org is provably unsecure. Cannot show that good-A.good-ns.test.dnssec-tools.org is provably unsecure. Result: FAILED: Some results were not validated successfully Result: VAL_BOGUS:2 name=good-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=63.195.146.66 status=VAL_AC_DNSKEY_MISSING:16 Result: ****END****