dnssec10.xa:53 {
    bind 127.15.10.21               # ns1
    bind fda1:b2:c3:0:127:15:10:21  # ns1
    bind 127.15.10.22               # ns2
    bind fda1:b2:c3:0:127:15:10:22  # ns2
    log
    file DNSSEC-TP/dnssec10/dnssec10.xa.zone dnssec10.xa
}

### ==== Scenarios DNSSEC10 ====

# template CLASS TYPE [ZONE...] {
#     match REGEX...
#     answer RR
#     additional RR
#     authority RR
#     rcode CODE
#     ederror EXTENDED_ERROR_CODE [EXTRA_REASON]
#     fallthrough [FALLTHROUGH-ZONE...]
# }

good-nsec-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY good-nsec-1.dnssec10.xa {
       answer "good-nsec-1.dnssec10.xa. 86400	IN	DNSKEY	257 3 13 Nv1c9Fla+4lTobc6bMwnbyfZbTwkdnpFr2mS8fCSMl+SvWD75GM1+iVf Nqc/MjmqEynVAnhvBKmLW8uZKkepHg=="
       answer "good-nsec-1.dnssec10.xa. 86400	IN	DNSKEY	256 3 13 4VHj0VIC9ulmZLUk6oHS0sH0Rbyb0WWINrVH3Lq1nRH2eyjUdR2aMU9J KIFvPoLVWi6+ASclaTK68EvzNfREtw=="
       answer "good-nsec-1.dnssec10.xa. 86400	IN	RRSIG	DNSKEY 13 3 86400 20290923095225 20240924085225 38835 good-nsec-1.dnssec10.xa. c+2L+IsgW4ichLnl6Jcm7YqBFKMpgxUq8qp6Uo/YgrkdkcFvIFj7FgAc lKperjlJ0ELKOdM5yMGfoRqMlnVXzw=="
    }
    template IN NSEC good-nsec-1.dnssec10.xa {
       answer "good-nsec-1.dnssec10.xa. 86400	IN	NSEC	ns1.good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       answer "good-nsec-1.dnssec10.xa. 86400	IN	RRSIG	NSEC 13 3 86400 20320922003648 20240924104824 36083 good-nsec-1.dnssec10.xa. V7RKNsdvv5maExVCKacY9fp74KeUa8OJz282g7N7xFG7wTc5iHPmemM3 O74J3pjfUPxKSLN41DIbB9rtOoLF+Q=="
    }
    template IN NSEC3PARAM good-nsec-1.dnssec10.xa {
       authority "good-nsec-1.dnssec10.xa. 86400	IN	SOA	localhost. root.localhost. 11 3600 1200 2419200 604800"
       authority "good-nsec-1.dnssec10.xa. 86400	IN	RRSIG	SOA 13 3 86400 20320922114824 20240924104824 36083 good-nsec-1.dnssec10.xa. yNuulu1OqJ4ECU6GvZar4XRtzMK2evNvfMK0mUY8nC6EWqfDIWw3YGg2 pEOFniM8xXwukOopzTtlPvO6qS10kg=="
       authority "good-nsec-1.dnssec10.xa. 86400	IN	NSEC	ns1.good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       authority "good-nsec-1.dnssec10.xa. 86400	IN	RRSIG	NSEC 13 3 86400 20320922003648 20240924104824 36083 good-nsec-1.dnssec10.xa. V7RKNsdvv5maExVCKacY9fp74KeUa8OJz282g7N7xFG7wTc5iHPmemM3 O74J3pjfUPxKSLN41DIbB9rtOoLF+Q=="
   }
}

good-nsec-2.dnssec10.xa {
    bind 127.15.10.31               # ns1a, ns1b, ns1c
    bind fda1:b2:c3:0:127:15:10:31  # ns1a, ns1b, ns1c
    log

    template IN DNSKEY good-nsec-2.dnssec10.xa {
       answer "good-nsec-2.dnssec10.xa. 86400  IN      DNSKEY  256 3 13 85peyjECAAxsbLpd9RqW7fmIu3xrrcuKlqKKMJMVeoOW/4nnL38hKr8G Vo1o50aKePk/hs373u4RjHiykXzh3g=="
       answer "good-nsec-2.dnssec10.xa. 86400  IN      DNSKEY  257 3 13 /Ln0GfgACyPExzbNtqj+ojguXpij18gdhY7f9cK2TlhuGDI2Xo4xUkzt 874xIUkXCu6dN38UTN4T23HKtru5Mw=="
       answer "good-nsec-2.dnssec10.xa. 86400  IN      RRSIG   DNSKEY 13 3 86400 20330513205450 20250515195450 30455 good-nsec-2.dnssec10.xa. e19sYpBO8/+CZ7icyrNqApCPiUV/Y3JLaBllfv/Ei3EV5Ptvy3LmP4LY R7IR827pT3ocfl6by9e5SSS8GtAfMA=="
    }
    template IN NSEC good-nsec-2.dnssec10.xa {
       answer "good-nsec-2.dnssec10.xa. 86400  IN      NSEC    ns1a.good-nsec-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       answer "good-nsec-2.dnssec10.xa. 86400  IN      RRSIG   NSEC 13 3 86400 20330513203706 20250515195955 61079 good-nsec-2.dnssec10.xa. gKsmec04jaH6SKFs6xxCRjrVNpRJqwv70jpnu4+fbdMyw+mzhoZVMIN4 7nPPtm47Tp9BmhlOj2DP8dV0WC6KNw=="
    }
    template IN NSEC3PARAM good-nsec-2.dnssec10.xa {
       authority "good-nsec-2.dnssec10.xa. 86400  IN      SOA     localhost. root.localhost. 15 3600 1200 2419200 604800"
       authority "good-nsec-2.dnssec10.xa. 86400  IN      RRSIG   SOA 13 3 86400 20330513205955 20250515195955 61079 good-nsec-2.dnssec10.xa. MhpIvLQhichjdFoT35yF8cT19O51rPwTCdeEmpWv2Zc0cFukynu241nI wQecORH3/Gw8gEs2Kgp0ttXRovUq2Q=="
       authority "good-nsec-2.dnssec10.xa. 86400  IN      NSEC    ns1a.good-nsec-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       authority "good-nsec-2.dnssec10.xa. 86400  IN      RRSIG   NSEC 13 3 86400 20330513203706 20250515195955 61079 good-nsec-2.dnssec10.xa. gKsmec04jaH6SKFs6xxCRjrVNpRJqwv70jpnu4+fbdMyw+mzhoZVMIN4 7nPPtm47Tp9BmhlOj2DP8dV0WC6KNw=="
   }
}

good-nsec-3.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log
    file DNSSEC-TP/dnssec10/Bind/zones/good-nsec-3.dnssec10.xa.zone good-nsec-3.dnssec10.xa

    template IN DNSKEY good-nsec-3.dnssec10.xa {
       answer "good-nsec-3.dnssec10.xa. 86400  IN      DNSKEY  257 3 13 zNruXoHhBCWZG7C5FdYY+7BwOTXX8QuiMd2z8/7yojB6JKsR2qiIiPS/ 9+8O61Stdr2A1qSH48p3qYBMvZLIsw=="
       answer "good-nsec-3.dnssec10.xa. 86400  IN      DNSKEY  256 3 13 pVa9OKuU4FmGUYIZdX5DJclqh8ddcNEYYqDdVj03j7wvSWzQRzdVvLHU LzAOK2JOTlYigjLKTDQ2SObk95Irqw=="
       answer "good-nsec-3.dnssec10.xa. 86400  IN      RRSIG   DNSKEY 13 3 86400 20330526084058 20250528074058 59637 good-nsec-3.dnssec10.xa. jvcHF3XC5+fSaCE0HRteQrrg99jLTBgwNrA22i2ZeBB5RP4fBsJXUuR6 zH0ExAAqjlJHbWvmHsPRTIr0xmsi1w=="
    }
    template IN NSEC good-nsec-3.dnssec10.xa {
       answer "good-nsec-3.dnssec10.xa. 86400  IN      NSEC    dns1.good-nsec-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "good-nsec-3.dnssec10.xa. 86400  IN      RRSIG   NSEC 13 3 86400 20330526072806 20250528074058 64269 good-nsec-3.dnssec10.xa. kbThb7bVYI+jldCXL384hCJxc1C/Q/o/wNysJSVYvp03xCiOwR0/Fwfe ArN0P9NWOeNAYzBewaO/D15I7A1wcQ=="
    }
    template IN NSEC3PARAM good-nsec-3.dnssec10.xa {
       authority "good-nsec-3.dnssec10.xa. 86400  IN      SOA     localhost. root.localhost. 13 3600 1200 2419200 604800"
       authority "good-nsec-3.dnssec10.xa. 86400  IN      RRSIG   SOA 13 3 86400 20330526084058 20250528074058 64269 good-nsec-3.dnssec10.xa. Op3WXw9Ahs1zY3+B+nIsOpnX7aDlRh+BruAngseas23jDAt0oSAjG8ys oGCM9qP57nU37QzgPU+ZeCxpZQWTxA=="
       authority "good-nsec-3.dnssec10.xa. 86400  IN      NSEC    dns1.good-nsec-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "good-nsec-3.dnssec10.xa. 86400  IN      RRSIG   NSEC 13 3 86400 20330526072806 20250528074058 64269 good-nsec-3.dnssec10.xa. kbThb7bVYI+jldCXL384hCJxc1C/Q/o/wNysJSVYvp03xCiOwR0/Fwfe ArN0P9NWOeNAYzBewaO/D15I7A1wcQ=="
   }
}

good-nsec3-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY good-nsec3-1.dnssec10.xa {
       answer "good-nsec3-1.dnssec10.xa. 86400	IN	DNSKEY	257 3 13 mzPJ/wnKEkwpAXrDKO/T4uzmWTqxECI8r2nocObV6/Mj49g5UKWK/jMF Om6jgU0ORXFCAtr4vjM3zmWprYriTw=="
       answer "good-nsec3-1.dnssec10.xa. 86400	IN	DNSKEY	256 3 13 V/QvTQYPk4MPHm+syRmwT8tn5lhJIqkoBvzljrnIrGURnXvontjauYhm FTDD7gM3HwxDuvU5kYCF8Bzd/gu0sw=="
       answer "good-nsec3-1.dnssec10.xa. 86400	IN	RRSIG	DNSKEY 13 3 86400 20320923093144 20240925083144 11703 good-nsec3-1.dnssec10.xa. 3RiEV+2qc6Se60JaiPA7HkzhCVLwwUNF5UsqjsDVd9CShA1POqeSsH1g naGaUrijEIgpU1fhEwW3HRAcRYC+Uw=="
    }
    template IN NSEC good-nsec3-1.dnssec10.xa {
       authority "good-nsec3-1.dnssec10.xa. 86400	IN	SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "good-nsec3-1.dnssec10.xa. 86400	IN	RRSIG	SOA 13 3 86400 20320923093144 20240925083144 48828 good-nsec3-1.dnssec10.xa. HJWz+zcOXMhkxFEa00h2FMIDDVAalYr9aA1yHKfMfoNIx17csKdALp+F goU3Q2i6slZAcpfYojrW5+QJapTDUg=="
       authority "9E52TCGESF3T1VHIBHKJJ40DQDAL0BQG.good-nsec3-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - L4G3RD7CT6M33R8RQ51MGM4OENEGS3D3 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "9E52TCGESF3T1VHIBHKJJ40DQDAL0BQG.good-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320922230219 20240925083144 48828 good-nsec3-1.dnssec10.xa. OSyOIu8gCnNOb3WuSXBbvhGvRFEF/bNZoESHRtxZ2ajzoHpwlBlW463o /3NbPUxM1HiLcH7w2840CQ5HCzvqrg=="
    }
    template IN NSEC3PARAM good-nsec3-1.dnssec10.xa {
       answer "good-nsec3-1.dnssec10.xa. 0	IN	NSEC3PARAM 1 0 0 -"
       answer "good-nsec3-1.dnssec10.xa. 0	IN	RRSIG	NSEC3PARAM 13 3 0 20320922230219 20240925083144 48828 good-nsec3-1.dnssec10.xa. bacu99mgRxK5alOvgkcR0B+yI3K6GQj+Er+agYpWEomjRXtMAuMl6/RT Us2V4ZBrfdTv/JSx3Tu8Gx6fLmUy5A=="
    }
}

good-nsec3-2.dnssec10.xa {
    bind 127.15.10.31               # ns1a, ns1b, ns1c
    bind fda1:b2:c3:0:127:15:10:31  # ns1a, ns1b, ns1c
    log

    template IN DNSKEY good-nsec3-2.dnssec10.xa {
       answer "good-nsec3-2.dnssec10.xa. 86400 IN      DNSKEY  257 3 13 EZJE8qfsYzE/MZrouNtGAERKIdVR/vxwQcEu+bGuyvf19Jb/UB2rN0PR eOSPkgkOxkuGv4SBpkGJnaVpEoi0BQ=="
       answer "good-nsec3-2.dnssec10.xa. 86400 IN      DNSKEY  256 3 13 STiG+O1EgiJ7a7796alQAgjQYs2jMQS8YYs6rWjj7yyRNffij9ssoAFX zIU/Uw7Hdd2PI1Hgx8/Ag5dwn5nmAA=="
       answer "good-nsec3-2.dnssec10.xa. 86400 IN      RRSIG   DNSKEY 13 3 86400 20330513205450 20250515195450 11161 good-nsec3-2.dnssec10.xa. /ml1aZ0f5vEIyGNXAwHzum/MGAXy0VvXQyratKHofI/K12ekJ4VmhvFa W9fqZo6FT9cYBiaoD1HBDTsc3TSugQ=="
    }
    template IN NSEC good-nsec3-2.dnssec10.xa {
       authority "good-nsec3-2.dnssec10.xa. 86400 IN      SOA     localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "good-nsec3-2.dnssec10.xa. 86400 IN      RRSIG   SOA 13 3 86400 20330513205955 20250515195955 7514 good-nsec3-2.dnssec10.xa. FHPIw2Zku8i330m//tp8EG7MLBLaxulNh2DSp/BdNkvqm+KbIh31wPHf 0Yqx4gilxTAtFzEODcQEKFaei2sv0g=="
       authority "U8J9N5GLAT1L1B9OOC8JB5FSLBCNJRD3.good-nsec3-2.dnssec10.xa. 86400 IN NSEC3 1 0 0 - HBGOD945U0SLK6R7J9NVCR8U3B2BQH08 NS SOA RRSIG DNSKEY NSEC3PARAM"
       authority "U8J9N5GLAT1L1B9OOC8JB5FSLBCNJRD3.good-nsec3-2.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20330513150707 20250515195955 7514 good-nsec3-2.dnssec10.xa. t9EPNUl49p/hOATILBOsK9Wy1Hp96UN9ACyCZ2wtC+fEwS7Ke4u9Dtyn NlGPSA5tV3k8DavEsvaHUfvkAoTrYA=="
    }
    template IN NSEC3PARAM good-nsec3-2.dnssec10.xa {
       answer "good-nsec3-2.dnssec10.xa. 0     IN      NSEC3PARAM 1 0 0 -"
       answer "good-nsec3-2.dnssec10.xa. 0     IN      RRSIG   NSEC3PARAM 13 3 0 20330513181031 20250515195450 7514 good-nsec3-2.dnssec10.xa. J/kQkAy2bSSO/HRjAS3u2xIYwoeHAHUGFozfHQB3aFZOVRdnGPefe/cK FJ85oArObPIBMIqu0FUQYLx3O30JQA=="

    }
}

good-nsec3-3.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log
    file DNSSEC-TP/dnssec10/Bind/zones/good-nsec3-3.dnssec10.xa.zone good-nsec3-3.dnssec10.xa

    template IN DNSKEY good-nsec3-3.dnssec10.xa {
       answer "good-nsec3-3.dnssec10.xa. 86400 IN      DNSKEY  256 3 13 dEas7FPJJ8ltcevgddCYPkzXxtto0xmR5QynpxhMjSsaKhQLdFeeTs09 BUxWDT/KjR9J0RyW7UmLNkV6dFSkXQ=="
       answer "good-nsec3-3.dnssec10.xa. 86400 IN      DNSKEY  257 3 13 pPkWBYtKok3W27mXbXR9j+1yrp1gUk/DlNyi0Zhx+PzI4nEOzMEqzlY+ NGU3jdrnNgDOgA90A3NXzKe65AGqvg=="
       answer "good-nsec3-3.dnssec10.xa. 86400 IN      RRSIG   DNSKEY 13 3 86400 20330526084058 20250528074058 61864 good-nsec3-3.dnssec10.xa. nJLLy3VAGhD+KySf4bn5n8PP9y6e7o3l2dRN6mhOnNvKK4g6/wHL1tzC exUV25vh3/4MD4+zwgv/P4WWIFpGCw=="
    }
    template IN NSEC good-nsec3-3.dnssec10.xa {
       authority "good-nsec3-3.dnssec10.xa. 86400 IN      SOA     localhost. root.localhost. 16 3600 1200 2419200 604800"
       authority "good-nsec3-3.dnssec10.xa. 86400 IN      RRSIG   SOA 13 3 86400 20330526084058 20250528074058 17384 good-nsec3-3.dnssec10.xa. YbUy5fxQNtAK9U6SPEDrE2/8ebRPNeMdd9rYTtGgQdzWB5TatBU7zvy1 qalt2PJoFZREXFEGntoB5QIE49M7og=="
       authority "5C4IFVU5RCFBP5PJLE9GKE6CECMBB9FS.good-nsec3-3.dnssec10.xa. 86400 IN NSEC3 1 0 0 - 8D0HN42LNVTHF3G0R2785AJIS6QJ94SP NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "5C4IFVU5RCFBP5PJLE9GKE6CECMBB9FS.good-nsec3-3.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20330526010143 20250528074058 17384 good-nsec3-3.dnssec10.xa. 3T/KlR9BEz3QgHzdl0Fq9WOcuNbq7goFCSK6RIGhN+wpsj29VJ939W5c nm6sr376bk5mnEL/mBCKlqZGlXgXIA=="
    }
    template IN NSEC3PARAM good-nsec3-3.dnssec10.xa {
       answer "good-nsec3-3.dnssec10.xa. 0     IN      NSEC3PARAM 1 0 0 -"
       answer "good-nsec3-3.dnssec10.xa. 0     IN      RRSIG   NSEC3PARAM 13 3 0 20330526010143 20250528074058 17384 good-nsec3-3.dnssec10.xa. AU9IOs37yMWWDGJ8lHOhCknS279RHcVjEQPy8ckdIATWZc7LbJ8qGW6T 5NGwf2GuZx/qTpx7boNCLYOlaHoTrQ=="
   }
}


algo-not-supp-by-zm-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY algo-not-supp-by-zm-1.dnssec10.xa {
       # The third DNSKEY has been added. RRSIG has been calculated by sign-rrset.pl()
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 JwBUSANDTzXZcADMLC10dIcqhiLTnUHUWy3MoTgutHcH3KgBq/YYBGTk 62vEoVJ/k4lNUX0tS3BqzLfoNcG11Q=="
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 cMbGp3t5H5fx5cV9kA+SDbH/yS9RtbdZr+bssWaT5HzAdZcKoXFurO3I EBsjAPMBuWnabtxeZcmo4KYeXxT2bw=="
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN DNSKEY 257 3 255 cMbGp3t5H5fx5cV9kA+SDbH/yS9RtbdZr+bssWaT5HzAdZcKoXFurO3I EBsjAPMBuWnabtxeZcmo4KYeXxT2bw=="
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320923122409 20240925112409 4606 algo-not-supp-by-zm-1.dnssec10.xa. Sl6fvugqWEO6fGxBY71ArSd4Bh0pfPNNfsHAfr6lZqsaosxKySRKnOdFpB9c2X0QXHOsfV1ZOb9/TehU4dpAeA=="

    }
    template IN NSEC algo-not-supp-by-zm-1.dnssec10.xa {
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN NSEC ns1.algo-not-supp-by-zm-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       answer "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320923040459 20240925114704 5871 algo-not-supp-by-zm-1.dnssec10.xa. jr3Y0jw2O52MWKuQOmgKVSqcFUNh12OrqrlaRl8teZ4JRYXdVYfbDrkA UnWKFZRGi7nrlx8IV7LuOYpHUkAr6g=="
    }
    template IN NSEC3PARAM algo-not-supp-by-zm-1.dnssec10.xa {
       # The second RRSIG(NSEC) is invalid and points at an invalid key with an unknown algorithm
       authority "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 13 3600 1200 2419200 604800"
       authority "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320923124704 20240925114704 5871 algo-not-supp-by-zm-1.dnssec10.xa. Hi+tdBlBV2lihANQGvCNmRgo1Zd6rSsdbSILh7F76nMHap/NBjC0P1t6 i+3a96ZiZ35g2UUAs+vL0spD2M4KIg=="
       authority "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN NSEC ns1.algo-not-supp-by-zm-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       authority "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320923040459 20240925114704 5871 algo-not-supp-by-zm-1.dnssec10.xa. jr3Y0jw2O52MWKuQOmgKVSqcFUNh12OrqrlaRl8teZ4JRYXdVYfbDrkA UnWKFZRGi7nrlx8IV7LuOYpHUkAr6g=="
       # Refer to invalid DNSKEY:
       authority "algo-not-supp-by-zm-1.dnssec10.xa. 86400 IN RRSIG NSEC 255 3 86400 20320923040459 20240925114704 4848 algo-not-supp-by-zm-1.dnssec10.xa. jr3Y0jw2O52MWKuQOmgKVSqcFUNh12OrqrlaRl8teZ4JRYXdVYfbDrkA UnWKFZRGi7nrlx8IV7LuOYpHUkAr6g=="
    }
}

algo-not-supp-by-zm-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY algo-not-supp-by-zm-2.dnssec10.xa {
       # The third DNSKEY has been added. RRSIG has been calculated by sign-rrset.pl()
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 4acKqGU5vhh9i4AVR7OfV1QPUe/zPePFAF+hjpIGwlC+zs0zAHaraz80VKF8XKdEJsqQNL3tS5Iso873eO30QA=="
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 Da3bqXpVriF2irM+63Vkit4a7JXDyFjCRagptK+lLayo4ctM8UxINZ0NsK140zYQnv6T+EJCOvh+lf2OHYgRHA=="
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN DNSKEY 257 3 255 cMbGp3t5H5fx5cV9kA+SDbH/yS9RtbdZr+bssWaT5HzAdZcKoXFurO3IEBsjAPMBuWnabtxeZcmo4KYeXxT2bw=="
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320923134833 20240925124833 33862 algo-not-supp-by-zm-2.dnssec10.xa. Qgum/oUE6UDd7hmUwNNZIrPRwAkp9kUKCXoHej11+3tRV/h9HI8oaJStdLfqNk/HhzWsJFEYKd+cpU4ZRhH/Dw=="
    }
    template IN NSEC algo-not-supp-by-zm-2.dnssec10.xa {
       # The second RRSIG(NSEC3) is invalid and points at an invalid key with an unknown algorithm
       authority "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 16 3600 1200 2419200 604800"
       authority "algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320923134833 20240925124833 51416 algo-not-supp-by-zm-2.dnssec10.xa. br7B+Jt8pZck0t7bErRDDg4+/vVbFvonp6DMT3T9SjZN6a3titfTTbSF ol86EM5taXYRz+U/tMrIut8KddP1mg=="
       authority "5J9LHC2R2KTH6ETMCRQRTNLP3A1HSADV.algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN NSEC3 1 0 0 - D2JIRT1DF5D7DRR0PLDDKREBP16T8R1P NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "5J9LHC2R2KTH6ETMCRQRTNLP3A1HSADV.algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320923073042 20240925124833 51416 algo-not-supp-by-zm-2.dnssec10.xa. eE0K96Zcwu71REkCQdoBR8+GGqKJqpkYzpakVwSWADxTSX6plfk1Bj3DA2+j0OE6H57Bd1yHai63nDWd8vkEoA=="
       authority "5J9LHC2R2KTH6ETMCRQRTNLP3A1HSADV.algo-not-supp-by-zm-2.dnssec10.xa. 86400 IN RRSIG NSEC3 255 4 86400 20320923073042 20240925124833 4848 algo-not-supp-by-zm-2.dnssec10.xa. eE0K96Zcwu71REkCQdoBR8+GGqKJqpkYzpakVwSWADxTSX6plfk1Bj3DA2+j0OE6H57Bd1yHai63nDWd8vkEoA=="
    }
    template IN NSEC3PARAM algo-not-supp-by-zm-2.dnssec10.xa {
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "algo-not-supp-by-zm-2.dnssec10.xa. 0 IN	RRSIG	NSEC3PARAM 13 3 0 20320923073042 20240925124833 51416 algo-not-supp-by-zm-2.dnssec10.xa. xg+ukdf7fRstdg0RJqLCPsZiAsgXeTqpxXusoR/pK6r9Ctl9NS4MsJUbQXolkbaPZV8zjdXJxjUB1Sy187ketA=="
    }
}

bad-servers-but-good-nsec-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log
    template IN DNSKEY bad-servers-but-good-nsec-1.dnssec10.xa {
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 Qac3Hxbu5/cA4WakyR9uVv0DA+lVjv8nYkDtvkWIPwRFgp0W6miJSVAR niah4zUxg/f6qL1DLYa9j1FIQviL/g=="
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 eQ+LlK8U1G5xz17axFx6EMAuCg6pDmezc/7KEIj1cUiRcMjTx4HcQzw3 jTZ9IDN0Q1F7udaygkoQOig6Hc0cQQ=="
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20321215150225 20241217140225 45359 bad-servers-but-good-nsec-1.dnssec10.xa. NYcWDnLMa3aCgHq3MzHEDZNn99FCemDKOnwohlE2T3bI23+C1tn+memK TZSDV7aLT5ZImROZlNRD8ZgItfipWg=="
     }
    template IN NSEC bad-servers-but-good-nsec-1.dnssec10.xa {
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN NSEC ns1.bad-servers-but-good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20321215123614 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. sfcp2MG+7ghzwXxOeUew7jSa87CJR65+L1MwuKG9piCphDyc1zytSPGz 26vrbMVRkXx2zbH3MJJeArGPHG7MwQ=="
    }
    template IN NSEC3PARAM bad-servers-but-good-nsec-1.dnssec10.xa {
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 21 3600 1200 2419200 604800"
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20321215150825 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. 9zLwmkrTs2dtwbdNyV3qxwnS2TM0Vkwj+DRmMsLz9O1TktMpvY8MHujo OLJWyNnDZ3tf8zZU6ALqi21kdu6bYQ=="
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN NSEC ns1.bad-servers-but-good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20321215123614 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. sfcp2MG+7ghzwXxOeUew7jSa87CJR65+L1MwuKG9piCphDyc1zytSPGz 26vrbMVRkXx2zbH3MJJeArGPHG7MwQ=="
   }
}
bad-servers-but-good-nsec-1.dnssec10.xa {
    bind 127.15.10.33               # ns3
    bind fda1:b2:c3:0:127:15:10:33  # ns3
    acl bad-servers-but-good-nsec-1.dnssec10.xa {
        drop type *
    }
}
bad-servers-but-good-nsec-1.dnssec10.xa {
    bind 127.15.10.34               # ns4
    bind fda1:b2:c3:0:127:15:10:34  # ns4
    template IN DNSKEY bad-servers-but-good-nsec-1.dnssec10.xa {
       rcode "REFUSED"
     }
    template IN NSEC bad-servers-but-good-nsec-1.dnssec10.xa {
       rcode "REFUSED"
    }
    template IN NSEC3PARAM bad-servers-but-good-nsec-1.dnssec10.xa {
       rcode "REFUSED"
   }
}
bad-servers-but-good-nsec-1.dnssec10.xa {
    bind 127.15.10.35               # ns5
    bind fda1:b2:c3:0:127:15:10:35  # ns5
    header {
        response clear aa
    }
    template IN DNSKEY bad-servers-but-good-nsec-1.dnssec10.xa {
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 Qac3Hxbu5/cA4WakyR9uVv0DA+lVjv8nYkDtvkWIPwRFgp0W6miJSVAR niah4zUxg/f6qL1DLYa9j1FIQviL/g=="
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 eQ+LlK8U1G5xz17axFx6EMAuCg6pDmezc/7KEIj1cUiRcMjTx4HcQzw3 jTZ9IDN0Q1F7udaygkoQOig6Hc0cQQ=="
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20321215150225 20241217140225 45359 bad-servers-but-good-nsec-1.dnssec10.xa. NYcWDnLMa3aCgHq3MzHEDZNn99FCemDKOnwohlE2T3bI23+C1tn+memK TZSDV7aLT5ZImROZlNRD8ZgItfipWg=="
     }
    template IN NSEC bad-servers-but-good-nsec-1.dnssec10.xa {
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN NSEC ns1.bad-servers-but-good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20321215123614 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. sfcp2MG+7ghzwXxOeUew7jSa87CJR65+L1MwuKG9piCphDyc1zytSPGz 26vrbMVRkXx2zbH3MJJeArGPHG7MwQ=="
    }
    template IN NSEC3PARAM bad-servers-but-good-nsec-1.dnssec10.xa {
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 21 3600 1200 2419200 604800"
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20321215150825 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. 9zLwmkrTs2dtwbdNyV3qxwnS2TM0Vkwj+DRmMsLz9O1TktMpvY8MHujo OLJWyNnDZ3tf8zZU6ALqi21kdu6bYQ=="
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN NSEC ns1.bad-servers-but-good-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "bad-servers-but-good-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20321215123614 20241217140825 42933 bad-servers-but-good-nsec-1.dnssec10.xa. sfcp2MG+7ghzwXxOeUew7jSa87CJR65+L1MwuKG9piCphDyc1zytSPGz 26vrbMVRkXx2zbH3MJJeArGPHG7MwQ=="
   }
}

err-mult-nsec-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY err-mult-nsec-1.dnssec10.xa {
       answer "err-mult-nsec-1.dnssec10.xa. 86400 IN	DNSKEY	257 3 13 rTGAac84bcl0iIfWqv8W5rgrUe7UEEqCbNt1F2BgruEk5bcXk4Bldo40 Fj+nYD/erquXIyPP2BbsQmdEvTmh4A=="
       answer "err-mult-nsec-1.dnssec10.xa. 86400 IN	DNSKEY	256 3 13 5H2z0t6sesAGCzY5ayLWpN5s2y7HUq/TWFeZ4tAEvAPhmX6rtM5AkEAm G3QnVSfQN3u5wirEC9/JDqm2G3wJkA=="
       answer "err-mult-nsec-1.dnssec10.xa. 86400 IN	RRSIG	DNSKEY 13 3 86400 20320923145938 20240925135938 39887 err-mult-nsec-1.dnssec10.xa. JSaZGBx7MRR095a4tzkGms0rPnZu2mW9xSCNSlzSKfUKsmKFbcQkIT8d D50VNhvqke4zJmx5yTwQXhrqeEHP8A=="
    }
    template IN NSEC err-mult-nsec-1.dnssec10.xa {
       answer "err-mult-nsec-1.dnssec10.xa. 86400 IN	NSEC	ns1.err-mult-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "err-mult-nsec-1.dnssec10.xa. 86400 IN	RRSIG	NSEC 13 3 86400 20320923032719 20240925135938 58097 err-mult-nsec-1.dnssec10.xa. U2+map1XquUjrO08as/95998vUopjsZhNcRL03R01FMW/eHM3i824vuR 8g9RWeBqcxYs4WxJKWBOlzBJLZZDww=="
    }
    template IN NSEC3PARAM err-mult-nsec-1.dnssec10.xa {
       # Extra fake NSEC record. RRSIG has been calculated by sign-rrset.pl().
       authority "err-mult-nsec-1.dnssec10.xa. 86400 IN	SOA	localhost. root.localhost. 13 3600 1200 2419200 604800"
       authority "err-mult-nsec-1.dnssec10.xa. 86400 IN	RRSIG	SOA 13 3 86400 20320923145938 20240925135938 58097 err-mult-nsec-1.dnssec10.xa. LtPMU/2tGPfVHkmdvjKcmoPjePKo60QpSCxGKUKTD1AET0dOBSWxIJc5 A83NH1S9s8nUMEOEMOb3iQ7W7I/exw=="
       authority "err-mult-nsec-1.dnssec10.xa. 86400 IN	NSEC	ns1.err-mult-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "err-mult-nsec-1.dnssec10.xa. 86400 IN	NSEC	www.err-mult-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "err-mult-nsec-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320923032719 20240925135938 58097 err-mult-nsec-1.dnssec10.xa. loXyRdLZF9LWOOMLBl9Y8O4lRjoCiZVnnczuvlPxblX34Jy3tM+6IFmtHAUyU/6hLuoZ1H2BwYjN MSx2n95/lg=="
    }
}

err-mult-nsec-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY err-mult-nsec-2.dnssec10.xa {
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN	DNSKEY	256 3 13 qIm9bFRpmmURkh7DrMv0x3JCtaXafSOq2tT38m59uiQCTm9GJadBP920 Knl/4wQsweOFpgpl8ZfA8PdJ8r9AUQ=="
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN	DNSKEY	257 3 13 q3+cthKOZN3udlXAh29AVybUhotQLFn1inRbWGI3v9Rdayn6V+wY2fkF 7AvJe5ROrrLVX85wvnOu1HsF0X8qnw=="
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN	RRSIG	DNSKEY 13 3 86400 20321104185241 20241106175241 41215 err-mult-nsec-2.dnssec10.xa. d6NmoneH0Ec4UU0hK2RVPE2G7utT6GW3uyVYyILc42aEqCxbDXj7AZdK BGWeOJ7rA0xdyUiTDXkaYxGjgNmUOA=="
    }
    template IN NSEC err-mult-nsec-2.dnssec10.xa {
       # Extra fake NSEC record. RRSIG has been calculated by sign-rrset.pl().
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN	NSEC	ns1.err-mult-nsec-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN	NSEC	ns1.err-mult-nsec-2.dnssec10.xa. A NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "err-mult-nsec-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321104171821 20241106175241 57280 err-mult-nsec-2.dnssec10.xa. MIQioY2WJSlChcxnZPYfhVPDBUNt/xHziw9Dsg2qfNy5lCQxp1mLjyVAUwAvI/L0u7TeEkuhm9M6 GPtgVdRt7g=="
    }
    template IN NSEC3PARAM err-mult-nsec-2.dnssec10.xa {
       authority "err-mult-nsec-2.dnssec10.xa. 86400 IN	SOA	localhost. root.localhost. 15 3600 1200 2419200 604800"
       authority "err-mult-nsec-2.dnssec10.xa. 86400 IN	RRSIG	SOA 13 3 86400 20321104185241 20241106175241 57280 err-mult-nsec-2.dnssec10.xa. WbbM0CrbD7kGu2eBZRIQ0HAe98fK9g1x+5gEphfs1Jnl1wZodwPmrP+J /63fTaAMzoWeiMkFMGXnBAMnQ4H2Rg=="
       authority "err-mult-nsec-2.dnssec10.xa. 86400 IN	NSEC	ns1.err-mult-nsec-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "err-mult-nsec-2.dnssec10.xa. 86400 IN	RRSIG	NSEC 13 3 86400 20321104171821 20241106175241 57280 err-mult-nsec-2.dnssec10.xa. pM1Paak0G7QM1UF6L1/ew8ba1OghrqZ5yFbtlu8bETajArlNlREFsceD TA5MmG/p/dyP4F/3voNAVJgalCehfA=="
    }
}

err-mult-nsec3-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY err-mult-nsec3-1.dnssec10.xa {
       answer "err-mult-nsec3-1.dnssec10.xa. 86400 IN	DNSKEY	256 3 13 /q6XPIw/r92j0JTxgYaXpM8kf5r+0pPe+9Vq1TmmWEpWVU17Oo7CRLkw luw3an/zC+9oUlmAQpNnq1icacgDBA=="
       answer "err-mult-nsec3-1.dnssec10.xa. 86400 IN	DNSKEY	257 3 13 ge69kG7w2JGo+FCumOZB1lqpaFyBPFR0IeRifI26fEP4zKHizLUhjt5P AXN0dl8Zu+Ir6H+ryNmPGuSChgGhjA=="
       answer "err-mult-nsec3-1.dnssec10.xa. 86400 IN	RRSIG	DNSKEY 13 3 86400 20320923152328 20240925142328 36426 err-mult-nsec3-1.dnssec10.xa. 9gjUewcCXMpLwHhwh8XDHjYb9D/QIsbJcw2Ye+wsBtry1+sK11LgGeox V9w6WL9Qp1gRuNIrZFzQGGn+hs2+vQ=="
    }
    template IN NSEC err-mult-nsec3-1.dnssec10.xa {
       authority "err-mult-nsec3-1.dnssec10.xa. 86400 IN	SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "err-mult-nsec3-1.dnssec10.xa. 86400 IN	RRSIG	SOA 13 3 86400 20320923152329 20240925142329 59287 err-mult-nsec3-1.dnssec10.xa. Z4p0B8ZDMffvXXJ8wxXsZHe5Uky60GCZ1I6OCpQMvSquX4+s8iblnnqS gHQADhle92AUrGwIkO5ezPdSlNymEg=="
       # Extra fake NSEC3 record. RRSIG has been calculated by sign-rrset.pl().
       authority "BA8NTIOJE12BOFT236U2QH7A34MLN31B.err-mult-nsec3-1.dnssec10.xa. 86400 IN	NSEC3 1 0 0 - LNVJTA1J0UV50V41586BHTDBOBOBNASC NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "BA8NTIOJE12BOFT236U2QH7A34MLN31B.err-mult-nsec3-1.dnssec10.xa. 86400 IN	NSEC3 1 0 0 - LNVJTA1J0UV50V41586BHTDBOBOBNAAA NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "BA8NTIOJE12BOFT236U2QH7A34MLN31B.err-mult-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320923092019 20240925142329 59287 err-mult-nsec3-1.dnssec10.xa. 7Q+bmeuZYyO7oPHJpLfH6OX4VoNZCf7RNBrLm0p8ex1apu5RaZNjImtb0X9hEivQYPeMctyfeP9GY1gd5v8avg=="
    }
    template IN NSEC3PARAM err-mult-nsec3-1.dnssec10.xa {
       answer "err-mult-nsec3-1.dnssec10.xa. 0	IN	NSEC3PARAM 1 0 0 -"
       answer "err-mult-nsec3-1.dnssec10.xa. 0	IN	RRSIG	NSEC3PARAM 13 3 0 20320923092019 20240925142329 59287 err-mult-nsec3-1.dnssec10.xa. +zA2fMgizzguU6brq/kOBGFoypNzUMGKRM8VDV1M1Bck3H+YG33vbm4k K52Umhd2e+1IOTBk5xds3NTlMJwofw=="
    }
}

err-mult-nsec3param-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY err-mult-nsec3param-1.dnssec10.xa {
       answer "err-mult-nsec3param-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 mggKmL/FH5hQwFxKfgHIcVkoAbNja/KHj4kc6qPpT6FA4FxI6Jn19zP2 1TARk7795hL+BL/340E+9uP1q/OsSQ=="
       answer "err-mult-nsec3param-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 EWibS0XDkGdP4tzEwUkBRtkmo98YdHi5CEej3jXPcPDuA3hWDbbkEn7h qci7lr8sZYfhcHjpJjHP3YxqHQFaNQ=="
       answer "err-mult-nsec3param-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321118155321 20241120145321 35935 err-mult-nsec3param-1.dnssec10.xa. kk+MnWlxZlICWYRTdEIW51rdCV4xazrop/VyfjC8UxntthulMC6ZQQSU 15jj/4P/kgiBAccE317hwzGWurGawA=="
    }
    template IN NSEC err-mult-nsec3param-1.dnssec10.xa {
       authority "err-mult-nsec3param-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 19 3600 1200 2419200 604800"
       authority "err-mult-nsec3param-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321118155321 20241120145321 9284 err-mult-nsec3param-1.dnssec10.xa. VFdo5K0Myw2aXLFfyhtOYm9Fqxku3A5hD4aeypgBfGchMwEoXMCSwtzf 71gnw+Ooec55U6uHJGFeXckQjQaFog=="
       authority "NLDQU7N4C58B6QOVOPHV9L657RMVOUMD.err-mult-nsec3param-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - QGCDLRL1UF6JNOQAH6BA2GO645MSQOHH NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "NLDQU7N4C58B6QOVOPHV9L657RMVOUMD.err-mult-nsec3param-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321118124828 20241120145321 9284 err-mult-nsec3param-1.dnssec10.xa. tlQrq3wDEchyGGs8Ymv7Dla61pmIkfLiP5Dq2JeZctZLfwzvZ0apmZn/ KmDvqg0MoQ3ApEwi0+n4FVjF6k97tg=="
    }
    template IN NSEC3PARAM err-mult-nsec3param-1.dnssec10.xa {
       # Extra fake NSEC3PARAM record. RRSIG has been calculated by sign-rrset.pl().
       answer "err-mult-nsec3param-1.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "err-mult-nsec3param-1.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 1 -"
       answer "err-mult-nsec3param-1.dnssec10.xa. 0 IN RRSIG NSEC3PARAM 13 3 0 20321118124828 20241120145321 9284 err-mult-nsec3param-1.dnssec10.xa. QMjgIFvsCRjb5vEp1nkcr6lp5JoUPtRu3grWQJ9GSGXQABklDhsE3ZTCXhzOyaSPS1kDgGumcrBr xg1fF3h7/Q=="
    }
}


exp-nsec-nsec3-miss-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY exp-nsec-nsec3-miss-1.dnssec10.xa {
       answer "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 wAKdikuOILT6blpU01QGaMWykNdlnDBz/pBMR/J8w3cmEtobQgnGwya/ jBEmL/c5Fyvbmduf2p3Im86ZYTFWug=="
       answer "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 MY0UP6KZjIZ/WnIM4ZS5FJg+PXPgj/3+ypFzjTXdCbt1SkfQ4BKDi49c C8TFMee/z59I1VpfYAxLa4GM0u6xHg=="
       answer "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320923162451 20240925152451 47901 exp-nsec-nsec3-miss-1.dnssec10.xa. iP7aof7wANSYMBUWa3dMnuWHA7urXZXXF/DRhpaMR8VNlfbEiChqJ8Oe iolHI662gfy9tEVziox6Id5VhgiP/Q=="
    }
    template IN NSEC exp-nsec-nsec3-miss-1.dnssec10.xa {
       authority "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320923162451 20240925152451 50099 exp-nsec-nsec3-miss-1.dnssec10.xa. 0V6vFHW9MqK8FcuXHJ8KtIEMtxODXrx+SgQP4S9ppPnOM6EiAChOmnjc 1RY5B4TDu/NgLf2ypsmR2/lpHIuUHg=="
    }
    template IN NSEC3PARAM exp-nsec-nsec3-miss-1.dnssec10.xa {
       authority "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "exp-nsec-nsec3-miss-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320923162451 20240925152451 50099 exp-nsec-nsec3-miss-1.dnssec10.xa. 0V6vFHW9MqK8FcuXHJ8KtIEMtxODXrx+SgQP4S9ppPnOM6EiAChOmnjc 1RY5B4TDu/NgLf2ypsmR2/lpHIuUHg=="
    }    
}


inconsistent-nsec-1.dnssec10.xa  { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY inconsistent-nsec-1.dnssec10.xa {
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 oDaAcrYP5AU37UnWG5Nlfo1rt1BXx5G1uJL/0kbHSuyerJ7mXWdrOIyh WClQte70Ffwz/Jmj9A/ou+VFyaTnZQ=="
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 1kzkiRRT7SxtUcYXH7n8yv4JqOMefx/EExy/UsMPOf9DXPnqWi7Nlysh YLFEzlX6+xuP1NkvdIxfPunC3mGroA=="
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320923181140 20240925171140 47956 inconsistent-nsec-1.dnssec10.xa. +8qy/xseh+Xf8mZzWiC0uLQeRwZXenK5Ib15PnHFOYrrNUIPzwQQj4bT ebZaAiycn5pPQTyhkH2C8TAmHzXY0Q=="
    }
    template IN NSEC inconsistent-nsec-1.dnssec10.xa {
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN NSEC	ns1.inconsistent-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20320923073427 20240925171140 64600 inconsistent-nsec-1.dnssec10.xa. wPNSV/WwAqKohPFZMGSqsNcvuHRKrkhrh1K5PaXrPe1o85sjGW7qbIvU QeAR7QRn8f7gv8Y+lADCSkLRpkunng=="
    }
    template IN NSEC3PARAM inconsistent-nsec-1.dnssec10.xa {
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320923181140 20240925171140 64600 inconsistent-nsec-1.dnssec10.xa. XNcn00D3Zn+vMqNwwTmndvtgvdmnsqBT5V6sNX/9F0/zGLqIGniVvD/u 1Ejb6/rEyusz8SVWJQgLcjgMYwc+BA=="
   }
}
inconsistent-nsec-1.dnssec10.xa  { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY inconsistent-nsec-1.dnssec10.xa {
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 oDaAcrYP5AU37UnWG5Nlfo1rt1BXx5G1uJL/0kbHSuyerJ7mXWdrOIyh WClQte70Ffwz/Jmj9A/ou+VFyaTnZQ=="
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 1kzkiRRT7SxtUcYXH7n8yv4JqOMefx/EExy/UsMPOf9DXPnqWi7Nlysh YLFEzlX6+xuP1NkvdIxfPunC3mGroA=="
       answer "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320923181140 20240925171140 47956 inconsistent-nsec-1.dnssec10.xa. +8qy/xseh+Xf8mZzWiC0uLQeRwZXenK5Ib15PnHFOYrrNUIPzwQQj4bT ebZaAiycn5pPQTyhkH2C8TAmHzXY0Q=="
    }
    template IN NSEC inconsistent-nsec-1.dnssec10.xa {
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320923181140 20240925171140 64600 inconsistent-nsec-1.dnssec10.xa. XNcn00D3Zn+vMqNwwTmndvtgvdmnsqBT5V6sNX/9F0/zGLqIGniVvD/u 1Ejb6/rEyusz8SVWJQgLcjgMYwc+BA=="
    }
    template IN NSEC3PARAM inconsistent-nsec-1.dnssec10.xa {
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320923181140 20240925171140 64600 inconsistent-nsec-1.dnssec10.xa. XNcn00D3Zn+vMqNwwTmndvtgvdmnsqBT5V6sNX/9F0/zGLqIGniVvD/u 1Ejb6/rEyusz8SVWJQgLcjgMYwc+BA=="
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN NSEC	ns1.inconsistent-nsec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "inconsistent-nsec-1.dnssec10.xa. 86400 IN RRSIG	NSEC 13 3 86400 20320923073427 20240925171140 64600 inconsistent-nsec-1.dnssec10.xa. wPNSV/WwAqKohPFZMGSqsNcvuHRKrkhrh1K5PaXrPe1o85sjGW7qbIvU QeAR7QRn8f7gv8Y+lADCSkLRpkunng=="
   }
}


inconsistent-nsec3-1.dnssec10.xa  { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY inconsistent-nsec3-1.dnssec10.xa {
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN DNSKEY 256 3 13 WoHevJpXEHv6+WYNp4PrlG1YLbcWqas3hdC1Gv/Zd82T46vhi1ixAU8n 31yns+LzowzJE1v2FAXgLNgm/8b15A=="
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN DNSKEY 257 3 13 6WKFohHcVEn97ULT5osqwaiAureIe7KdCkKtuWWHzngv1SlHr0lPH0xK I3Wwmtz0SRbCjQGhgLcuwTZvtvYtBw=="
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20320924074118 20240926064118 57747 inconsistent-nsec3-1.dnssec10.xa. XS6HptqNJdgxZJ10a5hpDicXyOe2uWi2QfV9UU3CGBpGEwD+OBgepLvJ U8n4oGWhjE0R25w3xcgf+WhyHKKILg=="
    }
    template IN NSEC inconsistent-nsec3-1.dnssec10.xa {    
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20320924074427 20240926064427 43815 inconsistent-nsec3-1.dnssec10.xa. 34uBchb8c8/Af3WbLIUUJIyJ+64QGvU7k1Kh7u4liHSSGBBoLYk2PVLQ /KQ+xtXhm0vnbsMEYvTX5tbT2YLolw=="
    }
    template IN NSEC3PARAM inconsistent-nsec3-1.dnssec10.xa {    
       answer "inconsistent-nsec3-1.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "inconsistent-nsec3-1.dnssec10.xa. 0 IN	RRSIG	NSEC3PARAM 13 3 0 20320924072258 20240926064427 43815 inconsistent-nsec3-1.dnssec10.xa. Z0/ZMk8dpq5IDKJMQf2JvMvvgi64lhoTfoRT6nAEESvy9/0WjTtZeEOV qI/6BvHz3MSeFo+VTD60w6aUHcWcNA=="
    }
}
inconsistent-nsec3-1.dnssec10.xa  { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY inconsistent-nsec3-1.dnssec10.xa {
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN DNSKEY 256 3 13 WoHevJpXEHv6+WYNp4PrlG1YLbcWqas3hdC1Gv/Zd82T46vhi1ixAU8n 31yns+LzowzJE1v2FAXgLNgm/8b15A=="
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN DNSKEY 257 3 13 6WKFohHcVEn97ULT5osqwaiAureIe7KdCkKtuWWHzngv1SlHr0lPH0xK I3Wwmtz0SRbCjQGhgLcuwTZvtvYtBw=="
       answer "inconsistent-nsec3-1.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20320924074118 20240926064118 57747 inconsistent-nsec3-1.dnssec10.xa. XS6HptqNJdgxZJ10a5hpDicXyOe2uWi2QfV9UU3CGBpGEwD+OBgepLvJ U8n4oGWhjE0R25w3xcgf+WhyHKKILg=="
    }
    template IN NSEC inconsistent-nsec3-1.dnssec10.xa {    
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20320924074427 20240926064427 43815 inconsistent-nsec3-1.dnssec10.xa. 34uBchb8c8/Af3WbLIUUJIyJ+64QGvU7k1Kh7u4liHSSGBBoLYk2PVLQ /KQ+xtXhm0vnbsMEYvTX5tbT2YLolw=="
       authority "VEB4EJ3EUJCU3D3NE6K0FVU3830C29G9.inconsistent-nsec3-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - 7R818V84NA4FTHP2T56AFSI9KFTKCO0B NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "VEB4EJ3EUJCU3D3NE6K0FVU3830C29G9.inconsistent-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320924072258 20240926064427 43815 inconsistent-nsec3-1.dnssec10.xa. 76gt5/AmOXI+GdmrikTFbXXGAC/Rsox/cSezgMtOHK8ErrLFV5mI/Xfc 3mhiduW0x/zkEoDquBrqGz6E7EiO1w=="
    }
    template IN NSEC3PARAM inconsistent-nsec3-1.dnssec10.xa {    
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "inconsistent-nsec3-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20320924074427 20240926064427 43815 inconsistent-nsec3-1.dnssec10.xa. 34uBchb8c8/Af3WbLIUUJIyJ+64QGvU7k1Kh7u4liHSSGBBoLYk2PVLQ /KQ+xtXhm0vnbsMEYvTX5tbT2YLolw=="
    }
}


inconsist-nsec-nsec3-1.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY inconsist-nsec-nsec3-1.dnssec10.xa {
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 Kutm8WD0xqgW15BQ/8KGX1JM1BbRkKk+Hyr82HhToq2r1nbsFvpsK1ke ffuhvQ7Wh1aAnxGVs8y1a01ogB+edw=="
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 dIAJf1MADSDxW0dz18+o0x0xUzXeWV0zfp92BeMH8uyfM/AD9FXcMDcg 28Mwp75S3Mw4a6BVhBUEz/HlIbNvWw=="
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320924115842 20240926105842 57185 inconsist-nsec-nsec3-1.dnssec10.xa. bNbHHROD5m1qkx1tuDea+A6+ELAfnBWnsIez5bFUcqK0Db1xvjIftZaH 9v/r/mCz2iANMvd8MsnsTg9PtTBB4Q=="
    }
    template IN NSEC inconsist-nsec-nsec3-1.dnssec10.xa {
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN NSEC ns1.inconsist-nsec-nsec3-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320924055403 20240926105842 13616 inconsist-nsec-nsec3-1.dnssec10.xa. wz+p5QsuHL94REz+h7pBxFgAVIvcP6EwE5ombObxCKIlDYOnGQ5FLV+f 3xWBwnbWuR1iNRXVSZE9FKDqCzgH/g=="
    }
    template IN NSEC3PARAM inconsist-nsec-nsec3-1.dnssec10.xa {
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 15 3600 1200 2419200 604800"
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320924115842 20240926105842 13616 inconsist-nsec-nsec3-1.dnssec10.xa. hcAqCHuo44XbduR2qP8AiZFrxLoJE+z4jHkhQI3AJMFCdNzDvYyvbLDo x1JrruTA+O1c5xGmkbUfFD1bUaWcLw=="
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN NSEC ns1.inconsist-nsec-nsec3-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320924055403 20240926105842 13616 inconsist-nsec-nsec3-1.dnssec10.xa. wz+p5QsuHL94REz+h7pBxFgAVIvcP6EwE5ombObxCKIlDYOnGQ5FLV+f 3xWBwnbWuR1iNRXVSZE9FKDqCzgH/g=="
   }
}
inconsist-nsec-nsec3-1.dnssec10.xa { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY inconsist-nsec-nsec3-1.dnssec10.xa {
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 Kutm8WD0xqgW15BQ/8KGX1JM1BbRkKk+Hyr82HhToq2r1nbsFvpsK1ke ffuhvQ7Wh1aAnxGVs8y1a01ogB+edw=="
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 dIAJf1MADSDxW0dz18+o0x0xUzXeWV0zfp92BeMH8uyfM/AD9FXcMDcg 28Mwp75S3Mw4a6BVhBUEz/HlIbNvWw=="
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320924115842 20240926105842 57185 inconsist-nsec-nsec3-1.dnssec10.xa. jb3M1XzXwvhGeaWtfejmmql4gUh0eKKeGIEMmUqFy9rHj0dfbzHE/rad ywBa2wKzI/yIzJD3+1Vwu1oY3g4y4w=="
    }
    template IN NSEC inconsist-nsec-nsec3-1.dnssec10.xa {
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 19 3600 1200 2419200 604800"
       authority "inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320924133259 20240926123259 13616 inconsist-nsec-nsec3-1.dnssec10.xa. xtAtTdkKaOmqt/7djOnWvI2QWqlUYMIfsCcsV0U5FJzpaic0diQ0TW1+ vgRHEvnnLvZpKHTnfJOBjUuVhmkoHw=="
       authority "0A7T26O9S3MFCVA33DFMHN99DDB65Q24.inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - 36N2V8D78GHSVMG41NFLDIQNQHNBND2N NS SOA RRSIG DNSKEY NSEC3PARAM"
       authority "0A7T26O9S3MFCVA33DFMHN99DDB65Q24.inconsist-nsec-nsec3-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320924025217 20240926123259 13616 inconsist-nsec-nsec3-1.dnssec10.xa. 0sETyQ2R+Wud3Tnuz9qgVE/oheQoXFhSyVUq1Zn4Jqkk4M0PnUMA2Zcj D8bY8QZm32eItV3t+VHyfXM+VYRkzw=="
    }
    template IN NSEC3PARAM inconsist-nsec-nsec3-1.dnssec10.xa {
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "inconsist-nsec-nsec3-1.dnssec10.xa. 0 IN RRSIG	NSEC3PARAM 13 3 0 20320924082830 20240926122712 13616 inconsist-nsec-nsec3-1.dnssec10.xa. yf7TkgYo39HuL2EvuptHyaush6P76QbtJ/F6oVNukktph8D1Q2VHnOrq v5YMGRjqA86LY549gOm7uNjlBpp+0Q=="
    }
}


inconsist-nsec-nsec3-2.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY inconsist-nsec-nsec3-2.dnssec10.xa {
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 oKicTgtEkDTUJJC3qtui/HW3H9knmGjefk6+ewhtseCpoHmyeO3ZvtEs SzQVE8cyIBJX5XjmEYm3ZBcnvvpVZQ=="
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 JQ0kOEi9dtJTmOfHeBJNN/fAhHomEj2W1J8d+fqBrjCEA3xgchq232SZ WaRfOyYBIUHX6NPzQ94qds29CLZxJQ=="
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320924135349 20240926125349 30880 inconsist-nsec-nsec3-2.dnssec10.xa. ai9L64VkrEmU+7YYU4X21aeC+gZusH5SjzoA/tjBCSDWwcm82l2G0Syc a/vFTyKpz3PVuLaVcx8JTWz+L1V2Tw=="
    }
    template IN NSEC inconsist-nsec-nsec3-2.dnssec10.xa {
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN NSEC ns1.inconsist-nsec-nsec3-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY"
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20320924035411 20240926125619 74 inconsist-nsec-nsec3-2.dnssec10.xa. m+HTZG4YaVN4YKLb0WcnZ1Xgas1w0ndM5EQ3A35zjzdbbdB52aSWjQYJ 36fEv33BbWtgaMAhzOK0CZ+uSj/hdw=="
    }
    template IN NSEC3PARAM inconsist-nsec-nsec3-2.dnssec10.xa {
       authority "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 17 3600 1200 2419200 604800"
       authority "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320924135619 20240926125619 74 inconsist-nsec-nsec3-2.dnssec10.xa. ey5KIc+QkjCYxFWkvpWIZBw8/CwLy5qtIwR+8nGs4D4GjkOIc4l5SunC hgCsUV0PEPAF5Js6E11180VKBEVPpw=="
   }
}
inconsist-nsec-nsec3-2.dnssec10.xa { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY inconsist-nsec-nsec3-2.dnssec10.xa {
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 JQ0kOEi9dtJTmOfHeBJNN/fAhHomEj2W1J8d+fqBrjCEA3xgchq232SZ WaRfOyYBIUHX6NPzQ94qds29CLZxJQ=="
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 oKicTgtEkDTUJJC3qtui/HW3H9knmGjefk6+ewhtseCpoHmyeO3ZvtEs SzQVE8cyIBJX5XjmEYm3ZBcnvvpVZQ=="
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320924135619 20240926125619 30880 inconsist-nsec-nsec3-2.dnssec10.xa. AkPh0Nc8keyRKMSyL7ImwpCGEJUoFVPEia3/usrmiVteWj+yRDZ99+Rh +VusnnKUfXhp7/oRRr2+CV8VKCnllg=="
    }
    template IN NSEC inconsist-nsec-nsec3-2.dnssec10.xa {
       authority "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 19 3600 1200 2419200 604800"
       authority "inconsist-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320924135619 20240926125619 74 inconsist-nsec-nsec3-2.dnssec10.xa. 7xoVDmQzKAzegcTg9EUS9H1O/0/piBdtIzzNGvzySWGy4eEXXtSA3dyR XYDzQLLmrLXPxEw/EcUuxsK4EY9gkA=="
    }
    template IN NSEC3PARAM inconsist-nsec-nsec3-2.dnssec10.xa {
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "inconsist-nsec-nsec3-2.dnssec10.xa. 0 IN RRSIG	NSEC3PARAM 13 3 0 20320924052953 20240926125619 74 inconsist-nsec-nsec3-2.dnssec10.xa. s/feSuPiUKe8T6FsGLiNh2Jl8+5VQo5bsuhRVSk5G5mPSZMCnBhQpOHU /LORZkpb09ofPTFwp1G9dYSvXVlytg=="
    }
}

mixed-nsec-nsec3-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY mixed-nsec-nsec3-1.dnssec10.xa {
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	86400 IN DNSKEY	257 3 13 uQ4lCY2hJsO9TPGGYS3sr6VptHFVFkK5p2qgd6IikbLzeTWTLDngaxdK aTlvoPZVCit643BTTEMSl6tjem5C8Q=="
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	86400 IN DNSKEY	256 3 13 zP8gvYS3tjcjkB+xpxohk1eBi48YSj91l5TGfQA2uophkuZfGCyf695O I9dILjft3TUe7FO4Hk+db0oQHuJVGQ=="
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	86400 IN RRSIG	DNSKEY 13 3 86400 20320925083340 20240927073340 55753 mixed-nsec-nsec3-1.dnssec10.xa. zUX7PbAaj+8yl30BlPg83pE+aF/wF4rUvenTBLzuRLcEC1igOEn0rqHp nIbNUqF3IIwwPov1TxmJs+aL86LLRg=="
    }
    template IN NSEC mixed-nsec-nsec3-1.dnssec10.xa {
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	86400 IN NSEC	ns1.mixed-nsec-nsec3-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	86400 IN RRSIG	NSEC 13 3 86400 20320925065033 20240927073340 55355 mixed-nsec-nsec3-1.dnssec10.xa. 83MuehpKN1+FJoffV6Z5TzYE9i1Rllqvmh7MNt1yz/Vgr79WVEB3mYnp GABsXkjI1v+UpiW0uv2xv19Vp6t5ow=="
    }
    template IN NSEC3PARAM mixed-nsec-nsec3-1.dnssec10.xa {
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	0 IN	NSEC3PARAM 1 0 0 -"
       answer "mixed-nsec-nsec3-1.dnssec10.xa.	0 IN	RRSIG	NSEC3PARAM 13 3 0 20320925071100 20240927073914 55355 mixed-nsec-nsec3-1.dnssec10.xa. o1sHzND99vcQ6FidTV7AM5AH8jOAnTtDafrCsUkWJeWlbof6DhWKNdll K6k7eHTGSyvRN9F+61uTtqkcDB+UVg=="
    }
}

mixed-nsec-nsec3-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY mixed-nsec-nsec3-2.dnssec10.xa {
       answer "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN DNSKEY	256 3 13 OBZB2NP91/vLrNuZkE8o5xH2mzVVtLPWaCaQsZEkYUQLUox2De5so2LK 2I8NZNduM2pN7RDIZ7xmFrvv47FLCw=="
       answer "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN DNSKEY	257 3 13 l+K8qHceJ9eqiR/Cy+fgSRaiseY+oNERWF3Nczn+XxiRc4/nJra96LvF JhuaZaVG0VWbxzVnXnWkekUa6GL6GA=="
       answer "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN RRSIG	DNSKEY 13 3 86400 20320925085034 20240927075034 63936 mixed-nsec-nsec3-2.dnssec10.xa. BNRzC9jgAiXWsR3cA5OI/c0f1WzNnY4oZkhGFLaoisDGmwXzZ5TZPnZU QADf2oitkaZL8quzk/cWA4jvPzi7Ig=="
    }
    template IN NSEC mixed-nsec-nsec3-2.dnssec10.xa {
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 22 3600 1200 2419200 604800"
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN RRSIG	SOA 13 3 86400 20320925085303 20240927075303 43408 mixed-nsec-nsec3-2.dnssec10.xa. eKtQeKaWcZWp82zzZhLISMVveKbReXPCFny5FhssD9F2BgtS530Rwwt9 nkOgJcrMLs3U0HZ1TcFTTsbm1UNOZQ=="
       authority "FIFQOSODKLAESHCU1MV73JLD7FGAJ0NP.mixed-nsec-nsec3-2.dnssec10.xa. 86400 IN NSEC3	1 0 0 - H8VR8UV3M4QUKF4LQIV4OA9NLR4TSDKQ NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "FIFQOSODKLAESHCU1MV73JLD7FGAJ0NP.mixed-nsec-nsec3-2.dnssec10.xa. 86400 IN RRSIG	NSEC3 13 4 86400 20320925082000 20240927075303 43408 mixed-nsec-nsec3-2.dnssec10.xa. 5HCpIuahvMffObv6CFqBergPA8lfPgdN3oDpZtRhTZmTCtjmLcZTsqdi payG8tXtCqlx9GbLI0q4BW4zJmVfNw=="
    }
    template IN NSEC3PARAM mixed-nsec-nsec3-2.dnssec10.xa {
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN RRSIG	SOA 13 3 86400 20320925085034 20240927075034 43408 mixed-nsec-nsec3-2.dnssec10.xa. 86MG9SzeEro8/Cgn0EXDvGCljj3kWvgzIhr3z8eMtluN+HZlgmENq1qn YOe/62rsV2sk/oflgUFwpuSYBdxd6A=="
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN NSEC	ns1.mixed-nsec-nsec3-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "mixed-nsec-nsec3-2.dnssec10.xa.	86400 IN RRSIG	NSEC 13 3 86400 20320925083226 20240927075034 43408 mixed-nsec-nsec3-2.dnssec10.xa. VeaQLcyRP+PWm4fCHPSz89DniXWMKanODTtqijOEWiAIOXizf5PRZlMM U9ChP9YnjH2wyN42nEAB0B3SxuicyA=="
    }
}


nsec3param-gives-err-answer-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3param-gives-err-answer-1.dnssec10.xa {
       answer "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 9r4KTVc97kcMFPo3d0hTfPOYm3haE73r5Mx73CZVnjVDbbpzjxL1vHyE Fuw1KPLWYSQYWlUXV++7xLC94jHNCg=="
       answer "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 mxMgLzgMv3CoEjjJ6St8pMCllOtx9HHc9q6LQ8am1sGbEb1ictqcgk7N r2j/U5NgABIgGoc2n9VViN60nlv9bA=="
       answer "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320925093202 20240927083202 26161 nsec3param-gives-err-answer-1.dnssec10.xa. A1igFZilRltk83um47keL6VcPSR8skILDELhtzCJf1jbBDWvsPIFKlgJ +mWJZMi1PNdc6hzlAPX0ik7iHTlKjA=="
    }
    template IN NSEC nsec3param-gives-err-answer-1.dnssec10.xa {    
       authority "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 21 3600 1200 2419200 604800"
       authority "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320925093621 20240927083621 26712 nsec3param-gives-err-answer-1.dnssec10.xa. 6DsmYL78Atayu2rS2pHW1lgZnb5sRNHan2heLVXV+eJ2EQMoaT79CKVT rzV09MdBSlB2KSyWoZ3eLZAxPe6TBg=="
       authority "DBR7BI7MUGLQ4951QUKIB9A32JA8D8A6.nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - T5346EFT891ONN1EO5NPFN5HDRCOPH6T NS SOA TXT RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "DBR7BI7MUGLQ4951QUKIB9A32JA8D8A6.nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320925014649 20240927083621 26712 nsec3param-gives-err-answer-1.dnssec10.xa. K/6VmtBK1t14FgXiBqcGyYlgpTYeVq4Z7uHJGtTEOxgRhv0Ii1AiqE0l 9GuLUa/r5Wf8dHj+6RHdweYL7e5a7Q=="
    }
    template IN NSEC3PARAM nsec3param-gives-err-answer-1.dnssec10.xa {    
       answer "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN TXT	Text-string"
       answer "nsec3param-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG TXT 13 3 86400 20320925074619 20240927091016 26712 nsec3param-gives-err-answer-1.dnssec10.xa. Ors81V7AprLFy1jKcFXKePhXIh1d9ISD9KCGZPit+kyjeomukjIm4cP1 OM0dTM5EUTT2Vsy+Z66PAOTADqJ62A=="
    }
}

nsec3param-gives-err-answer-2.dnssec10.xa { #ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY nsec3param-gives-err-answer-2.dnssec10.xa {
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 zj47m2IOoUf9gFjqDywMThb+GfJCrgnsLn0JHAmjqaL4uOuu7KpaSNuf 0q7qjeZSzho+255HM2mmeaSm+rOc5g=="
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 7mHAo/cBxAduYZ55eEQLFyZ3eF2K6CYjiVfoTRb5gf+xeN/Ty/LrBCgs 9Qp5m6NMzSgyOOhl9zX89kjBAv9ikg=="
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320925110804 20240927100804 22393 nsec3param-gives-err-answer-2.dnssec10.xa. aSMPLPcjc+Z4gGNtVceQgG8jHR/WvsdhvQgJR/1X5dU62a4aRESe6tPW Ar/Wua2pssgkce17SyxLnJh09a1EwQ=="
    }
    template IN NSEC nsec3param-gives-err-answer-2.dnssec10.xa {    
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 23 3600 1200 2419200 604800"
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320925110804 20240927100804 25979 nsec3param-gives-err-answer-2.dnssec10.xa. 9fU/UzvL1EfTCpm75sy3AknjLnZB6u8VNyc1kf2lLc2MCkJ5VEzYRb1L usla9VR/3zavZrAXLHpcVQeo2PL+PQ=="
       authority "23EULAI4R5HG2V2FUIBP9FTQMEISESH3.nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN NSEC3 1 0 0 - L4UTFAI5GU5OKQDP4NV9IM1GONP1MTH9 NS SOA TXT RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "23EULAI4R5HG2V2FUIBP9FTQMEISESH3.nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320925050519 20240927100804 25979 nsec3param-gives-err-answer-2.dnssec10.xa. jS5WtslEkAge862kButlSs+XPkutwF6zeoNGV/aaKySU4Z3DkiLTNySB OTJZDDVkmHkHToPV43vrq8VIytLuQQ=="
    }
    template IN NSEC3PARAM nsec3param-gives-err-answer-2.dnssec10.xa {    
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN TXT	Text-string"
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG TXT 13 3 86400 20320925062325 20240927100804 25979 nsec3param-gives-err-answer-2.dnssec10.xa. EUXzVUP2NHFFBU7+CsqS9bTCHs9c8G59hIqSuHvF9kZ4A8Q+ZNezc/2e sQ6lcLiEOAUdSxKrakfBeEAp5lzOOg=="
    }
}
nsec3param-gives-err-answer-2.dnssec10.xa { #ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3param-gives-err-answer-2.dnssec10.xa {
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 zj47m2IOoUf9gFjqDywMThb+GfJCrgnsLn0JHAmjqaL4uOuu7KpaSNuf 0q7qjeZSzho+255HM2mmeaSm+rOc5g=="
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 7mHAo/cBxAduYZ55eEQLFyZ3eF2K6CYjiVfoTRb5gf+xeN/Ty/LrBCgs 9Qp5m6NMzSgyOOhl9zX89kjBAv9ikg=="
       answer "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320925110804 20240927100804 22393 nsec3param-gives-err-answer-2.dnssec10.xa. aSMPLPcjc+Z4gGNtVceQgG8jHR/WvsdhvQgJR/1X5dU62a4aRESe6tPW Ar/Wua2pssgkce17SyxLnJh09a1EwQ=="
    }
    template IN NSEC nsec3param-gives-err-answer-2.dnssec10.xa {    
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 23 3600 1200 2419200 604800"
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320925110804 20240927100804 25979 nsec3param-gives-err-answer-2.dnssec10.xa. 9fU/UzvL1EfTCpm75sy3AknjLnZB6u8VNyc1kf2lLc2MCkJ5VEzYRb1L usla9VR/3zavZrAXLHpcVQeo2PL+PQ=="
    }
    template IN NSEC3PARAM nsec3param-gives-err-answer-2.dnssec10.xa {    
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 23 3600 1200 2419200 604800"
       authority "nsec3param-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320925110804 20240927100804 25979 nsec3param-gives-err-answer-2.dnssec10.xa. 9fU/UzvL1EfTCpm75sy3AknjLnZB6u8VNyc1kf2lLc2MCkJ5VEzYRb1L usla9VR/3zavZrAXLHpcVQeo2PL+PQ=="
    }
}


nsec3param-mismatches-apex-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3param-mismatches-apex-1.dnssec10.xa {
       answer "nsec3param-mismatches-apex-1.dnssec10.xa. 86400	IN DNSKEY 257 3 13 dstQS00BwMa9Du+BHAaHMS2syXrlfNVivOO+PRGn4yjteMBYhj5Xhb41 CPPdCEKp9uTjbm0dAKsZVir+5xYXJA=="
       answer "nsec3param-mismatches-apex-1.dnssec10.xa. 86400	IN DNSKEY 256 3 13 q2VHaQbqK/BSJtbn3dpK/nG9DqRpqMq48RPOdZfX6t/WU4GmLpLtZ1oe 257kAsCUoSSgG7GW0cXB6yaJVmUdiw=="
       answer "nsec3param-mismatches-apex-1.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321118162223 20241120152223 18377 nsec3param-mismatches-apex-1.dnssec10.xa. 9TL7QSBmylip6MTNwODaOfq2/Nkatj2O+pBA83S+vJ65UD0LJN26YdOI C6EKK8lkXEkLprpbOboGPN1lQ14gHw=="
    }
    template IN NSEC nsec3param-mismatches-apex-1.dnssec10.xa {
       authority "nsec3param-mismatches-apex-1.dnssec10.xa. 86400	IN SOA localhost. root.localhost. 29 3600 1200 2419200 604800"
       authority "nsec3param-mismatches-apex-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321118162223 20241120152223 57836 nsec3param-mismatches-apex-1.dnssec10.xa. 1o4XmbN1Z+c02+1Pb51ddsyPPGmHokne6UErwODDwW4KYODveCtSI8B+ jZIXTh1FuTY0ktHad09N4iNsu12Xqw=="
       authority "T588CF77PGKSGPHEE2QV0A474KCV1D20.nsec3param-mismatches-apex-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - DSCTEBB1TIVCV3OVR4LMT16R8CIB3OJO NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "T588CF77PGKSGPHEE2QV0A474KCV1D20.nsec3param-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321118134136 20241120152223 57836 nsec3param-mismatches-apex-1.dnssec10.xa. 8HzSmpruEQVPtawA3xTdeo2e6+VHCdTPY0Q6C0iEJHm5m5B4NG+fD2Qp sP2iILW3qwAAWtZjS9PTmJmXX59TXg=="
   }
    template IN NSEC3PARAM nsec3param-mismatches-apex-1.dnssec10.xa {
       # The NSEC3PARAM record has been manually created. The RRSIG has been generated
       # by sign-rrset.pl()
       answer "sub.nsec3param-mismatches-apex-1.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "sub.nsec3param-mismatches-apex-1.dnssec10.xa. 0 IN RRSIG NSEC3PARAM 13 4 0 20321118134136 20241120152223 57836 nsec3param-mismatches-apex-1.dnssec10.xa. mWKKw8NAU8GbyOO4nRupmO8KVuvUBsqh9hVAJODyK5Wz18Q3MQ2EOdWr4SCrDYJUl4qs56ymqOQq sKDH2BXkWQ=="
    }
}


nsec3param-q-response-err-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3param-q-response-err-1.dnssec10.xa {
       answer "nsec3param-q-response-err-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 KPpyJgcMIibxA3c4cmXhtKPlqaqKdF66wtRkLkBHY3RHNgeqvQC09Lhg nmyWpF3PPtcuDSQBSkAar+xRgUFyVA=="
       answer "nsec3param-q-response-err-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 AMNVDI9izjmyr7u0Z/gP/jXARBqXC9fB12TvB+hwuOrsHDn6pe6BDPHw NJYvoMFHCEVkqOS3sjMIMPvWpICPYA=="
       answer "nsec3param-q-response-err-1.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320925135823 20240927125823 36487 nsec3param-q-response-err-1.dnssec10.xa. Lk9fm5BExxcXYZMepwWW6eCB8evIwGUOzq33GGPdaNdf9iPCS9Uh41gZ PspIYPudrzcbTG+2ghu5jbBCPkSVLg=="
    }
    template IN NSEC nsec3param-q-response-err-1.dnssec10.xa {
       authority "nsec3param-q-response-err-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 29 3600 1200 2419200 604800"
       authority "nsec3param-q-response-err-1.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320925135823 20240927125823 26632 nsec3param-q-response-err-1.dnssec10.xa. Qa8w8nM4TNU+CbQhBHpY50gYKSKUlZZoj6SyXpf+iood8+JoPApHN0Ks RqZQ1y0sb+6BQIwJYn8e67kR1rwMEw=="
       authority "4SB804H46CLI14UMJ0J2ULOQ83RONT8O.nsec3param-q-response-err-1.dnssec10.xa. 86400	IN NSEC3 1 0 0 - 5RGB2GGKO6J60AB6SEHSBDH1G5MRJVNU NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "4SB804H46CLI14UMJ0J2ULOQ83RONT8O.nsec3param-q-response-err-1.dnssec10.xa. 86400	IN RRSIG NSEC3 13 4 86400 20320925045111 20240927125823 26632 nsec3param-q-response-err-1.dnssec10.xa. LirlMLNnle11CU/vPta7KlE5x4LSQsWxh1nZAJEwGG/OhicoP7OdKHQC bP0CulEH3/UcM14KbG5V97hk7y4RJw=="
    }
    acl nsec3param-q-response-err-1.dnssec10.xa {
        drop type NSEC3PARAM
    }
}

nsec3param-q-response-err-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3param-q-response-err-2.dnssec10.xa {
       answer "nsec3param-q-response-err-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 ZKXqWaHBBJxIxBMxMbgzTOA5xouzmo6NzoQP6I2TtqQqvrveJtfYLibs 7XIkcKkxPv61EjnMT061kK3GKAl1Ng=="
       answer "nsec3param-q-response-err-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 nRcmtaVdI6K1d8y7pSOr7F+dzZIqotHKKAXpIbYZji+IsFPpG9TxaBM9 6LJCAiOAkk0yecHYyzmZC9aZasTvHg=="
       answer "nsec3param-q-response-err-2.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320925141740 20240927131740 18903 nsec3param-q-response-err-2.dnssec10.xa. 7PovDUxhsXKVCQZ7DJXtlfK8zx6b6HKheJsGR/Qf/BbXLajcFINWrdXq mlmDDMZwhzNSMA4Qu9al+2VjGcwBCg=="
    }    
    template IN NSEC nsec3param-q-response-err-2.dnssec10.xa {
       authority "nsec3param-q-response-err-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 31 3600 1200 2419200 604800"
       authority "nsec3param-q-response-err-2.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320925141740 20240927131740 2909 nsec3param-q-response-err-2.dnssec10.xa. GHFezaKRqlFVNy5czcWuX4gLzIbCsAIBbTdUm+s0kCbtjE4DULYrfvKN LRBef/1FQ1f3k/nFhZsRDG4OrlXFMQ=="
       authority "OI0MTM0SA4OU46GTKQ31C69AAGVG979N.nsec3param-q-response-err-2.dnssec10.xa. 86400	IN NSEC3 1 0 0 - APNSON5NRODKA6KQCITKBSG62PL95TJ6 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "OI0MTM0SA4OU46GTKQ31C69AAGVG979N.nsec3param-q-response-err-2.dnssec10.xa. 86400	IN RRSIG NSEC3 13 4 86400 20320925023518 20240927131740 2909 nsec3param-q-response-err-2.dnssec10.xa. d1iFTKii5OpdCTE3XoaFeJim2IzizweWbaE1/Ig15woMAoxCfaRip7f1 kLth/xm+AwS4u0mvEAtT1YYTwNAUIw=="
    }
    template IN NSEC3PARAM nsec3param-q-response-err-2.dnssec10.xa {
       rcode "REFUSED"
    }
}

nsec3param-q-response-err-3.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY nsec3param-q-response-err-3.dnssec10.xa {
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN DNSKEY 256 3 13 RwSYhL1BhqS1JAB+I6qmMGNwjAGf2/NYPSFmrmcuEDBFDJd7C5kEf9PC KZOZVQV6yn7X9oPQ41ppYDbruTe7pA=="
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN DNSKEY 257 3 13 zx6BDAHI+q0PkrBEVmcTHweyznEZce2LLHO+fG6UTRrXGj1D0Lbx0iqq XPABgRUjCoR+0pfnuQc1nB2VUNn5GA=="
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320925143049 20240927133049 59995 nsec3param-q-response-err-3.dnssec10.xa. 6VJ2A5O/RM7i/bUeMIf7gXbqe8NOatheLHqb7pwS2Y1xmZawj7kPstu5 lhwspmAhXL5bWHksxfjYSme0NdcCRw=="
   }
    template IN NSEC nsec3param-q-response-err-3.dnssec10.xa {
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 33 3600 1200 2419200 604800"
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320925143050 20240927133050 60508 nsec3param-q-response-err-3.dnssec10.xa. ZKDGHwqG9SV51QymDaRZ93N6V5yEQwJFgu8NiH2qN5CczrJO6c5ajfVe xL/1dwf3kzaxjonBGuWqYMyLJAY8IA=="
       authority "3KNE2R8PGIV9MDU113T5EO75IQET378U.nsec3param-q-response-err-3.dnssec10.xa. 86400	IN NSEC3 1 0 0 - HVK2KAMQI7CH4DLPL8V5LS88KOQ1O5AM NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "3KNE2R8PGIV9MDU113T5EO75IQET378U.nsec3param-q-response-err-3.dnssec10.xa. 86400	IN RRSIG NSEC3 13 4 86400 20320925090512 20240927133049 60508 nsec3param-q-response-err-3.dnssec10.xa. 5X0NvskLBmqwm6+gba7yjqY2VQ9tgr2awDdxbk7U3YF0z08wdyYkYlQA 44gMxoDBO8wpfxYG9F/ffmZvEdAFTg=="
   }
    template IN NSEC3PARAM nsec3param-q-response-err-3.dnssec10.xa {
       answer "nsec3param-q-response-err-3.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "nsec3param-q-response-err-3.dnssec10.xa. 0 IN RRSIG NSEC3PARAM 13 3 0 20320925090512 20240927133049 60508 nsec3param-q-response-err-3.dnssec10.xa. 0dXvYsZm8wg3y4Y8x01SIZxwceKtJSRlTourotDPTEGqiTdHkdU8BSVN qAE28Goi5m/kabuUEoDhnhToD62wTA=="
       #
       # The AA bit should be disabled, but how?
       #
    }
}
nsec3param-q-response-err-3.dnssec10.xa { # ns2
    bind 127.15.10.32                     # ns2
    bind fda1:b2:c3:0:127:15:10:32        # ns2
    log

    template IN DNSKEY nsec3param-q-response-err-3.dnssec10.xa {
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN DNSKEY 256 3 13 RwSYhL1BhqS1JAB+I6qmMGNwjAGf2/NYPSFmrmcuEDBFDJd7C5kEf9PC KZOZVQV6yn7X9oPQ41ppYDbruTe7pA=="
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN DNSKEY 257 3 13 zx6BDAHI+q0PkrBEVmcTHweyznEZce2LLHO+fG6UTRrXGj1D0Lbx0iqq XPABgRUjCoR+0pfnuQc1nB2VUNn5GA=="
       answer "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN RRSIG	DNSKEY 13 3 86400 20320925143049 20240927133049 59995 nsec3param-q-response-err-3.dnssec10.xa. 6VJ2A5O/RM7i/bUeMIf7gXbqe8NOatheLHqb7pwS2Y1xmZawj7kPstu5 lhwspmAhXL5bWHksxfjYSme0NdcCRw=="
   }
    template IN NSEC nsec3param-q-response-err-3.dnssec10.xa {
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 33 3600 1200 2419200 604800"
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320925143050 20240927133050 60508 nsec3param-q-response-err-3.dnssec10.xa. ZKDGHwqG9SV51QymDaRZ93N6V5yEQwJFgu8NiH2qN5CczrJO6c5ajfVe xL/1dwf3kzaxjonBGuWqYMyLJAY8IA=="
   }
    template IN NSEC3PARAM nsec3param-q-response-err-3.dnssec10.xa {
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 33 3600 1200 2419200 604800"
       authority "nsec3param-q-response-err-3.dnssec10.xa. 86400 IN RRSIG	SOA 13 3 86400 20320925143050 20240927133050 60508 nsec3param-q-response-err-3.dnssec10.xa. ZKDGHwqG9SV51QymDaRZ93N6V5yEQwJFgu8NiH2qN5CczrJO6c5ajfVe xL/1dwf3kzaxjonBGuWqYMyLJAY8IA=="
    }
}


nsec3-err-type-list-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-err-type-list-1.dnssec10.xa {
       answer "nsec3-err-type-list-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 04MOU0GJo4ifwpX4+ycwKq3ybnW2YlJA56J6AsMs08lAr1QgIoDcew2L 5/W0xci3/7CeiZ/X8arS72HzFbVpyw=="
       answer "nsec3-err-type-list-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 Rk7JIFGP3YQmiSs4yI0+zomSWQ6GADe6T5+mGLyo+4oVRHzdF/LVqvUu Ptrkw9ZKOBQR/bJyYzokjUNLIyKzvQ=="
       answer "nsec3-err-type-list-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320925160834 20240927150834 63298 nsec3-err-type-list-1.dnssec10.xa. Bu6Xfqdn0OXIYnsS1r78FqJNTYl9BSiFIoLXWkbopqPytmBm3g07oNnE F3ZvrThN68Dn3iI+/5bbfe9nY7ZfSA=="
    }
    template IN NSEC nsec3-err-type-list-1.dnssec10.xa {
       authority "nsec3-err-type-list-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 7 3600 1200 2419200 604800"
       authority "nsec3-err-type-list-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320925160834 20240927150834 13461 nsec3-err-type-list-1.dnssec10.xa. abI9FC9bchpGv1+8BROglwoBbtHyl01KFI+lWpLdhk31u9VN7VnlxzyK /c36O6Qll5OGcS4o3YUodhTeL7Jkxg=="
       # NSEC3 manually updated and RRSIG generated by sign-rrset.pl
       authority "MOLD72KD8BKT2SPKPVD3S70OCV5P07NG.nsec3-err-type-list-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - BNS1A1MJOFEFLN5O4IABTKPCKNRPPJJR NS SOA RRSIG NSEC DNSKEY NSEC3PARAM TYPE65534"
       authority "MOLD72KD8BKT2SPKPVD3S70OCV5P07NG.nsec3-err-type-list-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320925044749 20240927150834 13461 nsec3-err-type-list-1.dnssec10.xa. lzK/s9SpScG7zGDON9ssRqTQ2+qnhfrg9Dwr4c7QRc80HpsuSZ7++C0WR0E2OiQOQhulUtICosI9 Thitk2G7EQ=="
    }
    template IN NSEC3PARAM nsec3-err-type-list-1.dnssec10.xa {
       answer "nsec3-err-type-list-1.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-err-type-list-1.dnssec10.xa. 0 IN	RRSIG	NSEC3PARAM 13 3 0 20320925044749 20240927150834 13461 nsec3-err-type-list-1.dnssec10.xa. EoOO7mHOM1W00XwJmc8ZGElOTVQuh3/o7kVutjsdm2OtrbpuprUwpqOU /cGQYXBK2YDtrXLVgJ082sAYwOIEdg=="
    }
}


nsec3-err-type-list-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-err-type-list-2.dnssec10.xa {
       answer "nsec3-err-type-list-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 SDgs1gQNhDke+LDI7jbM9qD/rdOVSeL6v8DvTe/QnGYAD3KIX0n8Ae4F cH9kOjnBqxy3o5pzi3SZgLVkx5SB9g=="
       answer "nsec3-err-type-list-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 ASO4HPqJNkrWI/i/K82sdPuOvGemKcFuPrlUYnw+bKIZSqLl0qy5cynC IADFRk91Lr+MsSPsr42hTx9HwyKLVw=="
       answer "nsec3-err-type-list-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320930154326 20241002144326 31276 nsec3-err-type-list-2.dnssec10.xa. M70qQIMP+xubi84VqfOjTRSOdu4EvhWPe2CxANhNNTUZSsFbSIb+g+Dt Y9MojbYTUSj5nc/C1Yzdgl4G7kDpFQ=="
    }
    template IN NSEC nsec3-err-type-list-2.dnssec10.xa {
       authority "nsec3-err-type-list-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 8 3600 1200 2419200 604800"
       authority "nsec3-err-type-list-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320930154326 20241002144326 30108 nsec3-err-type-list-2.dnssec10.xa. UnGcA84PGbmOC+JbiJrswm/tylGXHGKvMlGjJbiujNDGVkjULRoHlqFo WMxNHDGPWDIEVXi71Qo3AwdNPuP91A=="
       authority "AATE32209QBQNI609V14DBJPA5V1E6PP.nsec3-err-type-list-2.dnssec10.xa. 86400 IN NSEC3 1 0 0 - RVPRJM7D8G32IT2BA6QNF3822DG8EH54 NS SOA DNSKEY NSEC3PARAM TYPE65534"
       authority "AATE32209QBQNI609V14DBJPA5V1E6PP.nsec3-err-type-list-2.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320930110523 20241002144326 30108 nsec3-err-type-list-2.dnssec10.xa. aIU2zO2yA0oC7jZ9HWdRF4r1MhpjMfrM5eIb5IAXgi5wB19gtlP2YUbfYIZBtO3eUX4RDH2FNcmS n/9ekCJKew=="
    }
    template IN NSEC3PARAM nsec3-err-type-list-2.dnssec10.xa {
       answer "nsec3-err-type-list-2.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-err-type-list-2.dnssec10.xa. 0 IN	RRSIG	NSEC3PARAM 13 3 0 20320930110523 20241002144326 30108 nsec3-err-type-list-2.dnssec10.xa. wA7ZpoDnxnwvAFxkanfyQG4FMD2Xt4Igf/bMGAzwOpDFH9qAsCbmzpg0 9JyTdoGGuUmqH8ovQw4zrS1EGD/30Q=="
    }
}


nsec3-mismatches-apex-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-mismatches-apex-1.dnssec10.xa {
       answer "nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 CDbePCCpx1LjshDp/vlr9WZIYOAOCM+tkosnCtuvRmNM841yBk37Y75M HJPj0anD0sEZVCmC+pJdDc0/C49Ppw=="
       answer "nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 E/mtPaVNf4IZ5m5Mruv2yFxGls1Vcwmc6qOUNUNUThtj7fxrzo9qexGq N1ossS9LsWJvc3Txk5wYkIvK0jSLew=="
       answer "nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20320930160817 20241002150817 36042 nsec3-mismatches-apex-1.dnssec10.xa. AZZZiHXmoAiU/1d2E3n3bxjeXZZzJFRoho9zl3G252DU52w/pGTEHU8E MjWT8a6GBm5iYO8Nkc/LgcqxLSYW4Q=="
    }
    template IN NSEC nsec3-mismatches-apex-1.dnssec10.xa {
       authority "nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 8 3600 1200 2419200 604800"
       authority "nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20320930160817 20241002150817 58427 nsec3-mismatches-apex-1.dnssec10.xa. xwN7/8gfqNtdGMFqJyxiqwq2gIDgSHwzeyBN5prSHYXmntaNnR9sfpiJ hcnRTE+IhBOAbd4lSGhzzPch6LeDqg=="
       # NSEC3 is manually updated. RRSIG has been generated by sign-rrset.pl().
       authority "G4CPF6T01H8B5U5O996K8HI4OTEE12AA.nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - UP848IGD2MT1JGD0ISJEB6LAS1DCB11R NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "G4CPF6T01H8B5U5O996K8HI4OTEE12AA.nsec3-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20320930042027 20241002150817 58427 nsec3-mismatches-apex-1.dnssec10.xa. 9F15k5kjy5IKezZOnoEwl49C9nb06IddDeMZ2vcJPYrqV21pDfvorcx90OUdwEygjn5A70wG00xJ gsZEAPGQxA=="
    }
    template IN NSEC3PARAM nsec3-mismatches-apex-1.dnssec10.xa {
       answer "nsec3-mismatches-apex-1.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "nsec3-mismatches-apex-1.dnssec10.xa. 0 IN RRSIG	NSEC3PARAM 13 3 0 20320930042027 20241002150817 58427 nsec3-mismatches-apex-1.dnssec10.xa. jI796aklICR6qc8ZxlmTpJrIvsAMCQMvLPHhczZKY80G6TrjTyFo/566 MvXk0FnlR6mvMyHNQpTfHCjaXeQqKw=="
    }
}


nsec3-missing-signature-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-missing-signature-1.dnssec10.xa {
       answer "nsec3-missing-signature-1.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 4FGij4Lf67Dr3lJfMvGpAS0wtGU/mAhP1yEXUcYDuzeFMVaI5ZOG7aFE QR6//1b+BBqsmeNpzn22BmiGRahN8w=="
       answer "nsec3-missing-signature-1.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 DGoBPhPsmiep7zyDGEV3r0odevsoFoe4mmyX8xnTx6hKTnN/8PDo6mgm qB0NjVpq9TDX1MMeR/C/X1uV7zojCg=="
       answer "nsec3-missing-signature-1.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20320930163009 20241002153009 65340 nsec3-missing-signature-1.dnssec10.xa. mH08S+Q0yBZ9LoEKgQmzpayH5/RGjf6uddI2UBHisCW7Z6tQtzQT11d7 D1ZFyUB1t6UQrtEJNq6AWKr6aXw3ZA=="
    }
    template IN NSEC nsec3-missing-signature-1.dnssec10.xa {
       authority "nsec3-missing-signature-1.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 10 3600 1200 2419200 604800"
       authority "nsec3-missing-signature-1.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20320930163009 20241002153009 54311 nsec3-missing-signature-1.dnssec10.xa. jXHkH9/aLgnC9KkfW+pNIWjbTW/Gl8OmxfVWEakRIlWFWfbGI/8k4ItP AwTtp2mM4ZEBTWyZgQzmlwXtjHpjJA=="
       # There is no RRSIG for the NSEC3 record
       authority "NI65L6CAH0S6U8HNF1I958ANRIK29QRA.nsec3-missing-signature-1.dnssec10.xa.	86400 IN NSEC3 1 0 0 - O64IFEMAN58VLA23AUOMO4OFLC60DE15 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
    }
    template IN NSEC3PARAM nsec3-missing-signature-1.dnssec10.xa {
       answer "nsec3-missing-signature-1.dnssec10.xa. 0 IN NSEC3PARAM 1 0 0 -"
       answer "nsec3-missing-signature-1.dnssec10.xa. 0 IN RRSIG NSEC3PARAM 13 3 0 20320930142144 20241002153009 54311 nsec3-missing-signature-1.dnssec10.xa. Lpt5HeMkcU259nS1fxpK3TLHaKNktOkziYygfqT9fEbbAsEuylei35+2 Ap1B3FcBI9WKqI+TnuTGCI73uJ6eZw=="
    }
}


nsec3-nodata-missing-soa-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-nodata-missing-soa-1.dnssec10.xa {
       answer "nsec3-nodata-missing-soa-1.dnssec10.xa.	86400 IN DNSKEY	257 3 13 2WNTg518FYvoS+z1975+VslncFZRfSrd6nX+mQXOT1fycnoa7OU0RURW 846oEfXCdBzfIGwiemQZm4S3kxMrsA=="
       answer "nsec3-nodata-missing-soa-1.dnssec10.xa.	86400 IN DNSKEY	256 3 13 UXX/6XrJ3E9AX9X+4wAYzSJYLzvndC8Ga6EtZ3uRT2VDBM5fcWwXK4Sj TEpCSIjSo5Vd3PwxLDOfd6KQXDxsTA=="
       answer "nsec3-nodata-missing-soa-1.dnssec10.xa.	86400 IN RRSIG DNSKEY 13 3 86400 20320930164636 20241002154636 7663 nsec3-nodata-missing-soa-1.dnssec10.xa. 6XqWF0jk8FXOAe1DNLs68j5KPTp2HGD8qpBJVj3PSCXRMFMvnmEAHknj hKRuoZJEVmdQuOsM+uHwFg0RESmFTw=="
    }
    template IN NSEC nsec3-nodata-missing-soa-1.dnssec10.xa {
       authority "S1TPGAPRPG36C9D5GG9Q9DMV5VS9GB8R.nsec3-nodata-missing-soa-1.dnssec10.xa. 86400 IN NSEC3	1 0 0 - AOA8MA3FGFEBG6OTG81SFPO3R2GABSQ6 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "S1TPGAPRPG36C9D5GG9Q9DMV5VS9GB8R.nsec3-nodata-missing-soa-1.dnssec10.xa. 86400 IN RRSIG	NSEC3 13 4 86400 20320930102047 20241002154636 62763 nsec3-nodata-missing-soa-1.dnssec10.xa. ijMAYYrfLaRoHG3TQrzXnSG7PtRrrQvNFEKhkyaDmgLTpDZMGXnLguCx HdcFZ/I2Sto9G38gJ0/Mpu/lkYKUgw=="
    }
    template IN NSEC3PARAM nsec3-nodata-missing-soa-1.dnssec10.xa {
       answer "nsec3-nodata-missing-soa-1.dnssec10.xa.	0 IN NSEC3PARAM	1 0 0 -"
       answer "nsec3-nodata-missing-soa-1.dnssec10.xa.	0 IN RRSIG NSEC3PARAM 13 3 0 20320930102047 20241002154636 62763 nsec3-nodata-missing-soa-1.dnssec10.xa. N1Ov7eaVTkXZM72fwFuduz9duyqE2MUKIuMbcFOOCAmQ3lv2qWxQa44H q/lGRhCQ75gMC6J5Kb08n+xIHCz8tQ=="
    }
}

nsec3-nodata-wrong-soa-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-nodata-wrong-soa-1.dnssec10.xa {
       answer "nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 K3yDsyoQcrVkAZPxiLPyT9lPlelFuUeVjvl2o1a4gjbrmGfr+5fcpIHV p0zbuMp9x3ZBwFLeYPFhcmV2AfqhLQ=="
       answer "nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 Vz/CS5m9i354JRlnhJQQQ/rRKhRb519j+SQKcyd50PHM88LYiny81q3R DNSRfyTPS7CCfBQp1qc9Cu36aT92IA=="
       answer "nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002071027 20241004061027 20708 nsec3-nodata-wrong-soa-1.dnssec10.xa. DZA6MU7oUFPnMKoMR59JITNYnkt7xFUCUcUlHxMI8F8Ephgz9JzV8kcg Y3HAvIGHG+I6bPXeqitGIEKZn6zmZA=="
    }
    template IN NSEC nsec3-nodata-wrong-soa-1.dnssec10.xa {
       # Manipulated SOA owner name. RRSIG created by sign-rrset.pl().
       # authority "nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "sub.nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "sub.nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG SOA 13 4 86400 20321002071027 20241004061027 49213 nsec3-nodata-wrong-soa-1.dnssec10.xa. bf1vM4UJiLmHXRnGaVYYU3UT7UwijrURzJn6x1VemTROXX3Su9E4A4iQXDamrKZqsOvkogDAxnC/ EB6bDkKJtA=="
       authority "0PKBV1C85ACUJDUVACMUK7DVUH0VPJJ4.nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN	NSEC3 1 0 0 - FB014H7OD5HUR714CTPSG5LUPO4QAFRE NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "0PKBV1C85ACUJDUVACMUK7DVUH0VPJJ4.nsec3-nodata-wrong-soa-1.dnssec10.xa. 86400 IN	RRSIG NSEC3 13 4 86400 20321002060734 20241004061027 49213 nsec3-nodata-wrong-soa-1.dnssec10.xa. 1oJhxhSM+kG8Vk7C75fLms9r/nXGTxKfAaPpHXctus/PZ6Xb8t6ig026 Y17OPN+xbCcDK/Hcf/FhGey8iCAKxw=="
    }
    template IN NSEC3PARAM nsec3-nodata-wrong-soa-1.dnssec10.xa {
       answer "nsec3-nodata-wrong-soa-1.dnssec10.xa. 0	IN NSEC3PARAM 1 0 0 -"
       answer "nsec3-nodata-wrong-soa-1.dnssec10.xa. 0	IN RRSIG NSEC3PARAM 13 3 0 20321002060734 20241004061027 49213 nsec3-nodata-wrong-soa-1.dnssec10.xa. f1QM/SA9tMFJ52RvNC9uhu1U3AfL4JZrGAGsaeB+aYOiPlElm6h8MfdV m4sGCpZxULYJnFJW8pxRUuWiEugoKQ=="
    }
}


nsec3-no-verified-signature-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-no-verified-signature-1.dnssec10.xa {
       answer "nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 wkctUylNjxgKdazjFlWKdqrYpOrcjVXibWb118xWdavf3LjodrBt+jXb 7gA3zXXVgH9eWW52p5ZvBYSh0SMIhQ=="
       answer "nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 QhVlxkOwzSpeQUFH7MkX+DtxrV8/rEHcVZbsSOdsZ/ypDRR3XXyfRJF0 YdQSXE9S3fkvzs29F2cOrZfdTSA6aQ=="
       answer "nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002091906 20241004081906 36079 nsec3-no-verified-signature-1.dnssec10.xa. 1xruaGMGrVUUYn7qguS1H9l6fwtgQ7F7CCxkZzFNfvbyEDvyJ9hMjw7t /So8f/Cg/uAVcGY49HVqFO2DLPP3pw=="
    }
    template IN NSEC nsec3-no-verified-signature-1.dnssec10.xa {
       authority "nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 16 3600 1200 2419200 604800"
       authority "nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002091906 20241004081906 15563 nsec3-no-verified-signature-1.dnssec10.xa. s2/jDevm8sn1mqP03mJpCI9UTYd8MVRq1Pa5Lt5XZDxEsExhxTpJ/wii jMShWWe8+jwaPHvUja5mefdFuOQ1XQ=="
       authority "GEBBOFBQ1JIP91UKK47DVV8KU0A9ECJG.nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN NSEC3 1 0 0 - K2EH5O68SQMKRMVLI2MSKOIFN443OO17 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       # Key ID of the RRSIG has been manipulated not to match any DNSKEY
       authority "GEBBOFBQ1JIP91UKK47DVV8KU0A9ECJG.nsec3-no-verified-signature-1.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321001223645 20241004081906 15463 nsec3-no-verified-signature-1.dnssec10.xa. xc88H7QTLjpdnW9ZY/qcwfLIO0WxDQ4RS1WT8wUL8vAeNXwRXBigaKgT i6I+0djwcBo/EAJ/Z8s7WcSulWkkmg=="
    }
    template IN NSEC3PARAM nsec3-no-verified-signature-1.dnssec10.xa {
       answer "nsec3-no-verified-signature-1.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-no-verified-signature-1.dnssec10.xa. 0 IN	RRSIG NSEC3PARAM 13 3 0 20321001223645 20241004081906 15563 nsec3-no-verified-signature-1.dnssec10.xa. GTinqcFXSUSMmSow7eUFEypnmhFbbBObY1BEn/UolYRoVt02ZIS2lDBh MHtzaivBQDruPHJyrnb46nFnJWmKGg=="
    }
}


nsec3-no-verified-signature-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-no-verified-signature-2.dnssec10.xa {
       answer "nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 4Y3MAMDWeGhlNdEe2oTTcx4CDeMf3IYvTsVOpaI2Mc7sp/+sUbgksG5H DmCMYCSVddwAqQ8gsSbg2Qc5H/+Uvw=="
       answer "nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 d5aqqk6gCdusklEXiBbLMWEaNm19OjL51PHX1yIM0aK8aOjsP9PV4JII pt+9h/CG7qn7GGJPUc/AbxL1jPgNcg=="
       answer "nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002093336 20241004083336 26018 nsec3-no-verified-signature-2.dnssec10.xa. nU682ddxLy+CJZCWTQnjMuCt9WO/LgpyW3FpMIqyG/5opsqf0JG2qeyh /3oR6wQ5Hz3NRYnyxD948P3xrKUeXw=="
    }
    template IN NSEC nsec3-no-verified-signature-2.dnssec10.xa {
       authority "nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 18 3600 1200 2419200 604800"
       authority "nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002093336 20241004083336 30336 nsec3-no-verified-signature-2.dnssec10.xa. 411FatviDVbPqjCGsaaCIRzpOo8nFQbtm20ufeVmevJPa6yUW5WEMy99 E5Earv9tbXzawkdjIlSul61PMJhRcQ=="
       authority "U812OO5MDPEOV2P9KMMALV8QO3P251LP.nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN NSEC3 1 0 0 - 3CLFDSJJE311886OTTG1019TPTQR66G6 NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       # RRSIG created by sign-rrset.pl(). No longer valid.
       authority "U812OO5MDPEOV2P9KMMALV8QO3P251LP.nsec3-no-verified-signature-2.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20241001010101 20240901010101 30336 nsec3-no-verified-signature-2.dnssec10.xa. 0XGpwiSxJPecOgVTPhIJyNE57J+DeZn/vWJ1TrlQ0+0HR89H/oUi5jYDkjaPDcvEVcJG90Fn2qQT bsyCZ/mk8Q=="
    }
    template IN NSEC3PARAM nsec3-no-verified-signature-2.dnssec10.xa {
       answer "nsec3-no-verified-signature-2.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-no-verified-signature-2.dnssec10.xa. 0 IN	RRSIG NSEC3PARAM 13 3 0 20321002043819 20241004083336 30336 nsec3-no-verified-signature-2.dnssec10.xa. jmO9lmzfdnuRKSN8L7pXEUEapLLiDHbuOFzHeKkD4WKk1MdY5hOiONv5 EwwDDTr4hXsSuQfLmkapj0Bl9BPdaQ=="
    }
}


nsec3-no-verified-signature-3.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-no-verified-signature-3.dnssec10.xa {
       answer "nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN DNSKEY 256 3 13 6nlS0JgXIP8b5+jZe7TXnKNuASsVk1sYePwkaIG+Cabo50IAatFo80FZ EDG657Fb60CPsFo9j7aki+kuJVGTBg=="
       answer "nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN DNSKEY 257 3 13 KNT2Xif138lKsI/2n1nlxBOCkm48UJuKiWXW2yIQZy1aHGPyP6u8xaEs yM4ryKSZBKfFAQ3a3Kqzl5XXgPWi8w=="
       answer "nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002095212 20241004085212 2163 nsec3-no-verified-signature-3.dnssec10.xa. roGohUn9lCQKGCVqKEA+4X8Nop1A4Ss4VVJgAxIbevlkxU9IizQrtkWa UUoPei951xTKXG20Ar8PtP31aAuCtQ=="
    }
    template IN NSEC nsec3-no-verified-signature-3.dnssec10.xa {
       authority "nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 20 3600 1200 2419200 604800"
       authority "nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002095212 20241004085212 63488 nsec3-no-verified-signature-3.dnssec10.xa. 1XW3n1ey2pGFWD6x+wTbdTrCj5XQV12Evl51ccd/C73i7cSB6Vx/XCrn j911QbrYHv+D7JwKolUF5Rix9DO8PA=="
       authority "9L47P0C4IQAQHFS6TIH8QH72R44A5JO7.nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN NSEC3 1 0 0 - R028R53I6RM6ROM0J1TODPSCU680GRKS NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       # RRSIG created by sign-rrset.pl(). Not yes valid.
       authority "9L47P0C4IQAQHFS6TIH8QH72R44A5JO7.nsec3-no-verified-signature-3.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321001010101 20310901010101 63488 nsec3-no-verified-signature-3.dnssec10.xa. 8gClJzQ2aHLvRBV/IDdevyIqpuMTXXXoS5D+hmothQxa2uqSdBzyCuBXRPc8KNnwG+EktUwZ/wba rfGNVvYOjw=="
    }
    template IN NSEC3PARAM nsec3-no-verified-signature-3.dnssec10.xa {
       answer "nsec3-no-verified-signature-3.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-no-verified-signature-3.dnssec10.xa. 0 IN	RRSIG NSEC3PARAM 13 3 0 20321002003127 20241004085212 63488 nsec3-no-verified-signature-3.dnssec10.xa. spzeExp6hkOLwH/PNyOP39yOnphtJoUh+Rl1XzW8RwCABzHsbimmBhmm DZaLNpX1IO8FBOmDnkhkDqHj8/VtrQ=="
    }
}


nsec3-no-verified-signature-4.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec3-no-verified-signature-4.dnssec10.xa {
       answer "nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN DNSKEY 257 3 13 iMK0nhaEiievZSI+KxhsV58orh2WLRq2Kt4o6+MYwEQ1ROssAs6DNF5m ZX4TZS7NiOi4bFe4Jinu+zC9CRhmvg=="
       answer "nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN DNSKEY 256 3 13 hMJ2V6UE3py8lmB9EFptc64YP0VzW7bCGoRI6bKMw7SH5oDcSJjO5OEw OwpXOoHi9QtKp97eBmePDiuTDkLPFw=="
       answer "nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002125445 20241004115445 15312 nsec3-no-verified-signature-4.dnssec10.xa. L8ynebgayRDH+QSZCLKNNqTjD8szDjT5ffA2WhAq5H0BhJhjCItuQH/p Gq64R1rjjrJH6RQXHKIlC4TN85FUHQ=="
    }
    template IN NSEC nsec3-no-verified-signature-4.dnssec10.xa {
       authority "nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN SOA	localhost. root.localhost. 22 3600 1200 2419200 604800"
       authority "nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002125445 20241004115445 57697 nsec3-no-verified-signature-4.dnssec10.xa. sknhl3RmbtW9ms/vuOXovUIJwifQcss+UK6a36fbzDECfPKgjExgxIrO TNlL0e7ec918ENWMkzF3EXGbtIzs3A=="
       authority "VB3PBHGUUQCU7C41NHL7SV9IK2FOMHP6.nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN NSEC3 1 0 0 - VPDB433CLAII3U6HL5772OB8SVSGRNJU NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       # The RRSIG has been manipulated in the signature not to match DNSKEY and RRset. First unmanipulted and then manipulated
       # authority "VB3PBHGUUQCU7C41NHL7SV9IK2FOMHP6.nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321002031513 20241004115445 57697 nsec3-no-verified-signature-4.dnssec10.xa. 39uQEVZkyJseklAU3mmtBI+ZBgC6lKFYa+hB551oZj15S7HHBomLZYfT 6CN2koUW1aUHLiBGT3Xjb/f6ayLO7Q=="
       authority "VB3PBHGUUQCU7C41NHL7SV9IK2FOMHP6.nsec3-no-verified-signature-4.dnssec10.xa. 86400 IN RRSIG NSEC3 13 4 86400 20321002031513 20241004115445 57697 nsec3-no-verified-signature-4.dnssec10.xa. 39uQEVZkyJseklAU3mmtBI+ZBgC7lKFYa+hB551oZj15S7HHBomLZYfT 6CN2koUW1aUHLiBGT3Xjb/f6ayLO7Q=="
    }
    template IN NSEC3PARAM nsec3-no-verified-signature-4.dnssec10.xa {
       answer "nsec3-no-verified-signature-4.dnssec10.xa. 0 IN	NSEC3PARAM 1 0 0 -"
       answer "nsec3-no-verified-signature-4.dnssec10.xa. 0 IN	RRSIG NSEC3PARAM 13 3 0 20321002031513 20241004115445 57697 nsec3-no-verified-signature-4.dnssec10.xa. lHfAfyoIBcOEKD8roqMmACrPc8i1B/S6HuPoqgxFc2/6KO4DqfdvaeJJ Lt0mj/bcDsplSUtg0rzPqAvSBiVkTg=="
    }
}


nsec-err-type-list-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-err-type-list-1.dnssec10.xa {
       answer "nsec-err-type-list-1.dnssec10.xa. 86400	IN DNSKEY 257 3 13 fZWRGw+XBmoCKIUvPHXyd5W3P9xWKHwdWegJ7Q9MaDovZaNvMz4f79JG LzhHdmiWdhvbKpKRPoqdn9Y1iB3r2g=="
       answer "nsec-err-type-list-1.dnssec10.xa. 86400	IN DNSKEY 256 3 13 Y8NfbYFQfV/QW93Qe7zI5Aix9JBPBpS6P6VQQARXxs9pQfKFwttJ+0i/ GGTqYOLrzAXcg7y6vFQSeUCV+tKGNw=="
       answer "nsec-err-type-list-1.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321002131815 20241004121815 17400 nsec-err-type-list-1.dnssec10.xa. pvbHvFRWVuasRGYbzueT2KkGkbSwcCAnWQlz84iP/nNh56kT25iRbRW3 Q/izoBMHsO4aVZDgpehY4IPC+YD04g=="
    }
    template IN NSEC nsec-err-type-list-1.dnssec10.xa {
       # The NSEC record has been manipulated. First unmanipulated, and then manipulated. The RRsig has been recalculated.
       # answer "nsec-err-type-list-1.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-err-type-list-1.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY NSEC3PARAM TYPE65534"
       answer "nsec-err-type-list-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002042442 20241004121815 33163 nsec-err-type-list-1.dnssec10.xa. 4gpxk0PYHhircPNAFa9gCkwjgQU1v/CcezKjeU6jTVLYz3XfudguAgFWgNxCZXc1QIfEFCCbDiWA lOy2Q4VztQ=="
    }
    template IN NSEC3PARAM nsec-err-type-list-1.dnssec10.xa {
       authority "nsec-err-type-list-1.dnssec10.xa. 86400	IN SOA	localhost. root.localhost. 6 3600 1200 2419200 604800"
       authority "nsec-err-type-list-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321002131815 20241004121815 33163 nsec-err-type-list-1.dnssec10.xa. 72VuOviiNt8X5vu/JiNXqJqXNRKD7nPmvOcX6j9IoUNkH6jF81AdxOLs lR92PpX3egL3J5wZMk1wDj95QtaN4g=="
       # Same NSEC + RRSIG as above.
       authority "nsec-err-type-list-1.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY NSEC3PARAM TYPE65534"
       authority "nsec-err-type-list-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002042442 20241004121815 33163 nsec-err-type-list-1.dnssec10.xa. 4gpxk0PYHhircPNAFa9gCkwjgQU1v/CcezKjeU6jTVLYz3XfudguAgFWgNxCZXc1QIfEFCCbDiWA lOy2Q4VztQ=="
    }
}


nsec-err-type-list-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-err-type-list-2.dnssec10.xa {
       answer "nsec-err-type-list-2.dnssec10.xa. 86400	IN DNSKEY 256 3 13 07POUHHsdxnXVZH4oLfW09l2vrkSSlYxzVEHTeIzkmTfoj/zBftwcnIe LC2Uwh0Koy9jRWiuXcbsnnuTUqKg4Q=="
       answer "nsec-err-type-list-2.dnssec10.xa. 86400	IN DNSKEY 257 3 13 qBlI0QbqR/g0RFH3WwjzTTxfLyB/0UGcBqCEUZJ7CuCWCfXy5VSTei6y 0cwDjDobtDh7Y7JcwgJjpywHTEWh5Q=="
       answer "nsec-err-type-list-2.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321002133942 20241004123942 53870 nsec-err-type-list-2.dnssec10.xa. QOZ5dfTvlYJySJ9hRSkHiFpIfcEo7GIenGQUUqnhc9oKO0oiLtKVtWiH NvADiQ6PLhkAI0dMB2U/O4ZRxImJHw=="
    }
    template IN NSEC nsec-err-type-list-2.dnssec10.xa {
       # The NSEC record has been manipulated. First unmanipulated, and then manipulated. The RRsig has been recalculated.
       # nsec-err-type-list-2.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534
       answer "nsec-err-type-list-2.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-2.dnssec10.xa. NS SOA NSEC DNSKEY TYPE65534"
       answer "nsec-err-type-list-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002132704 20241004123943 51344 nsec-err-type-list-2.dnssec10.xa. Xt5yyA1R6W4UT6uEAA8aESroj5dLv6L6aZpdDgivNr3EIYTAQXKwdIIF9iB7jVwLNoNFsn/gciDO Zt9Sp3kE4Q=="
   }
    template IN NSEC3PARAM nsec-err-type-list-2.dnssec10.xa {
       authority "nsec-err-type-list-2.dnssec10.xa. 86400	IN SOA	localhost. root.localhost. 7 3600 1200 2419200 604800"
       authority "nsec-err-type-list-2.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321002133943 20241004123943 51344 nsec-err-type-list-2.dnssec10.xa. 1zVz5P0+xPp9Q1dVCrYZXJMnlgjxu3S67hAnlchQj4bYIctPxNoQkDR2 TpOzQe2PMpKdHICuNSLXg0a/7J6D6g=="
       # Same NSEC + RRSIG as above.
       authority "nsec-err-type-list-2.dnssec10.xa. 86400	IN NSEC	ns1.nsec-err-type-list-2.dnssec10.xa. NS SOA NSEC DNSKEY TYPE65534"
       authority "nsec-err-type-list-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002132704 20241004123943 51344 nsec-err-type-list-2.dnssec10.xa. Xt5yyA1R6W4UT6uEAA8aESroj5dLv6L6aZpdDgivNr3EIYTAQXKwdIIF9iB7jVwLNoNFsn/gciDO Zt9Sp3kE4Q=="
    }
}


nsec-gives-err-answer-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-gives-err-answer-1.dnssec10.xa {
       answer "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 Ox0s/bFixvanDLvBsjnSN+hVDikqe+4z1ZDh0RXAYZELoulxMB+I/hUw vubNP6t8SFHCOARhKhmr7l0U1QwvxA=="
       answer "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 rk+f9tWXK9OabqFuWrF8Jm8/B1dBup5ZkQqTQ/pdEEwWa7JQNGgF2m2b p0tbQObSMB7lZJOuzcZ5Ft8IIj8a0g=="
       answer "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002141642 20241004131642 21048 nsec-gives-err-answer-1.dnssec10.xa. aphwQx+S+gB1y4tUxX423UVk9LzaV3v7Hv/Tt8ouyVu0z9OVOVn6xDLC JQglcPaKIbioSVZcA8VOREHtlGZehQ=="
    }
    template IN NSEC nsec-gives-err-answer-1.dnssec10.xa {
       answer "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN TXT Text-string"
       answer "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG TXT 13 3 86400 20321002140436 20241004132441 19328 nsec-gives-err-answer-1.dnssec10.xa. M+FSQ6JIkY53XDq4cGTixqnzkN32nMkb+xzCkHoTsUsnR7vzp1blJpCR EmSm/l5rHbf2inrVbel+yWY1i9XeLA=="
    }
    template IN NSEC3PARAM nsec-gives-err-answer-1.dnssec10.xa {
       authority "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 10 3600 1200 2419200 604800"
       authority "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002142441 20241004132441 19328 nsec-gives-err-answer-1.dnssec10.xa. JxA0Ki/FbGmLevGXjEWVY5ORSYXn9Q+FJgtANmwlRRUxETFIgvnCZadZ R61AJeHgQ65SVfgAz6VZx7IZpIai0g=="
       authority "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-gives-err-answer-1.dnssec10.xa. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-gives-err-answer-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002140436 20241004132441 19328 nsec-gives-err-answer-1.dnssec10.xa. WWyhCPDsyyVBVFrhelo0e8xHLD+Zqzt+UQcRJ042b9QRSXtJoYA+6w2N uaFaEBxhpO2z36q1Jfj+z7WcO9OIDg=="
    }
}


nsec-gives-err-answer-2.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY nsec-gives-err-answer-2.dnssec10.xa {
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 b7e3Zbac5fVtp179EqTCPc88v5zG2Sze7vrJdMjCsYBotDS+jrki4GoU D6DKXzn0hBw1YpenxzyezhXwC7dddQ=="
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 WwlfDxg0hKkg3hFj5tQWmKzY2yD/UJUdoHFAS1+sUnYJzhRVBmI0ruN7 XfD0u/4kdL5f2SdSP4OfJLq+f9PZ0Q=="
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002144227 20241004134227 8684 nsec-gives-err-answer-2.dnssec10.xa. QWWamj+FEjrJHsBcRAqPcX8jzZeCEjW1t0U96KE/h78LwL12JHK6FqLZ 1X/Knjw0g/mcF01OZnn5oWFFaUecNQ=="
    }
    template IN NSEC nsec-gives-err-answer-2.dnssec10.xa {
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN TXT Text-string"
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG TXT 13 3 86400 20321002054605 20241004134227 46703 nsec-gives-err-answer-2.dnssec10.xa. 2yT+keG5BMxoaTon1dCGWDiQROt0GEsyBUFMFirSzZWSagOv8lkSWWCF JvMny4YLGH5ydctnuE9x8gS1po5KJA=="
    }
    template IN NSEC3PARAM nsec-gives-err-answer-2.dnssec10.xa {
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 12 3600 1200 2419200 604800"
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002144227 20241004134227 46703 nsec-gives-err-answer-2.dnssec10.xa. ww2rPfBIO3cVuoYUFC7qPj9Bs75dXuWEKoJ0laCHNRgPWbn9B6qsZASy HuJM2wjJN0Pskixe7lcBhOsswrZ+iQ=="
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN NSEC ns1.nsec-gives-err-answer-2.dnssec10.xa. NS SOA TXT RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002054605 20241004134227 46703 nsec-gives-err-answer-2.dnssec10.xa. rpv7ZeSGVk8jZQGe5GzzK/dN2aZujcwzDbpK8+5wOqEBQsZFiPKKAVlO MM+U2G5NkQphd2hm94EzxBo/uFAamA=="
    }
}

nsec-gives-err-answer-2.dnssec10.xa { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-gives-err-answer-2.dnssec10.xa {
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 b7e3Zbac5fVtp179EqTCPc88v5zG2Sze7vrJdMjCsYBotDS+jrki4GoU D6DKXzn0hBw1YpenxzyezhXwC7dddQ=="
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 WwlfDxg0hKkg3hFj5tQWmKzY2yD/UJUdoHFAS1+sUnYJzhRVBmI0ruN7 XfD0u/4kdL5f2SdSP4OfJLq+f9PZ0Q=="
       answer "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002144227 20241004134227 8684 nsec-gives-err-answer-2.dnssec10.xa. QWWamj+FEjrJHsBcRAqPcX8jzZeCEjW1t0U96KE/h78LwL12JHK6FqLZ 1X/Knjw0g/mcF01OZnn5oWFFaUecNQ=="
    }
    template IN NSEC nsec-gives-err-answer-2.dnssec10.xa {
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 12 3600 1200 2419200 604800"
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002144227 20241004134227 46703 nsec-gives-err-answer-2.dnssec10.xa. ww2rPfBIO3cVuoYUFC7qPj9Bs75dXuWEKoJ0laCHNRgPWbn9B6qsZASy HuJM2wjJN0Pskixe7lcBhOsswrZ+iQ=="
    }
    template IN NSEC3PARAM nsec-gives-err-answer-2.dnssec10.xa {
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 12 3600 1200 2419200 604800"
       authority "nsec-gives-err-answer-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002144227 20241004134227 46703 nsec-gives-err-answer-2.dnssec10.xa. ww2rPfBIO3cVuoYUFC7qPj9Bs75dXuWEKoJ0laCHNRgPWbn9B6qsZASy HuJM2wjJN0Pskixe7lcBhOsswrZ+iQ=="
    }
}


nsec-mismatches-apex-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-mismatches-apex-1.dnssec10.xa {
       answer "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 N+gSua9Vipa30CH9qw625H23DBBv33KVV3yZ6M652O8EIZjQBtI/wqYy D6/mrDzKpMCs0dEgn4NL1/lwageWeA=="
       answer "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 148Y+9HdBmYPw/u+V9Nb/Pw6MDgASEm5Pdv9BwMrLEnsXUIkNKPLhNeC hFWg1cTS8Edp585uWoYZQooW7A29gQ=="
       answer "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321002160412 20241004150412 36485 nsec-mismatches-apex-1.dnssec10.xa. zVTiincjOlpLERDE0I56KpAajG0Y417kzh5w8gXiyztrM1Ky74xHE0YX vn6mHf+xokXIyXdrJbdjWxG9NCfITA=="
    }
    template IN NSEC nsec-mismatches-apex-1.dnssec10.xa {
       answer "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321002064548 20241004150412 11569 nsec-mismatches-apex-1.dnssec10.xa. jhircGskytPMprU2P9sZgIznMnMKe9YpkpvyeM2Q4rTKU/8MJsC66F1N 6uJPc+z+NED69J2bawB/LhUN6WAvYQ=="
    }
    template IN NSEC3PARAM nsec-mismatches-apex-1.dnssec10.xa {
       authority "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321002160412 20241004150412 11569 nsec-mismatches-apex-1.dnssec10.xa. UEyz/M9/fzFqNNNNuZuewDxgmUWqqx+Rlz9Oh+kzXM8NKqRNK/rWPadB sB5yo7vHI+kkOe7Zb6g1kgzQ+cKepQ=="
       # NSEC owner name has been manipulated and RRSIG has been regenerated by sign-rrset.pl. Original NSEC commented.
       # authority "nsec-mismatches-apex-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534
       authority "sub.nsec-mismatches-apex-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "sub.nsec-mismatches-apex-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 4 86400 20321002064548 20241004150412 11569 nsec-mismatches-apex-1.dnssec10.xa. LXtYFvX81Vbxy+CCE8UKIpfjCHrFwxoWqC5tn4B96XP89ICf94dNAn64BOGeirQHNTxMzYL1k92p aM9VKoNsgg=="
    }
}


nsec-mismatches-apex-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-mismatches-apex-2.dnssec10.xa {
       answer "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN DNSKEY 256 3 13 qgybGbgijekKRDB/jK8zprCPw7lwESGnSu0vzMT0kIiU7Fbxv5DuB9+f nt/5ThXigSp22HmOWiaYdnu+WIBZZQ=="
       answer "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN DNSKEY 257 3 13 8h+KdHRxIz5sddtqrmPVQqb3Kt9j8qGrNTRONNsuEgfexnjbeypXB/QL 8qGd59hICK9APUP9TMLGCEdbBGfs5g=="
       answer "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321003162812 20241005152812 35580 nsec-mismatches-apex-2.dnssec10.xa. IJyyrpPYOeWeRFf8TmvZ/0gcCTQH4aDHK4VGITul5ewz5gQgtQxrfRZm lzzCrXK8KkJy+TF5ePEKOki5KNprKg=="
    }
    template IN NSEC nsec-mismatches-apex-2.dnssec10.xa {
       # answer "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "sub.nsec-mismatches-apex-2.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "sub.nsec-mismatches-apex-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 4 86400 20321003143022 20241005152812 6539 nsec-mismatches-apex-2.dnssec10.xa. ToDlfY4UezoWu8VcK+zJIAPisLikJLeNrlDin6cq27qcHCAFRglywvYOL4N3xuDm5gSHwmv6CkBG h0iok4XQrA=="
    }
    template IN NSEC3PARAM nsec-mismatches-apex-2.dnssec10.xa {
       authority "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 15 3600 1200 2419200 604800"
       authority "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321003162812 20241005152812 6539 nsec-mismatches-apex-2.dnssec10.xa. sImOuzuH4OYZyQc+JLlZ9J02oSWR7gBOrjYjiInl1Ie//V8BNkfc8GOp SYQqTDyuprpPWc9cCVEjY7yeVGB/Eg=="
       authority "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN NSEC ns1.nsec-mismatches-apex-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-mismatches-apex-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321003143022 20241005152812 6539 nsec-mismatches-apex-2.dnssec10.xa. UB+fo1VnzRZ4+umdzjXT16ZjzWMYcwctDzkfoNDKu7KVo/MYGnns61P2 ne30bYC7j2sfv3la0XRNsYdqnickng=="
    }
}

nsec-missing-signature-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-missing-signature-1.dnssec10.xa {
       answer "nsec-missing-signature-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 tnroa/v9020cD+8U3MhDmu4solgZnpNpppr1Qmmn3wURrCC5n76TDyLI Bc+G1e63pxFkRXZHeCR3LWNsENSybw=="
       answer "nsec-missing-signature-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 GHNCT7/2oscB6OAEIXfGDEuTI39wP0SJx3THuvz1Nnj7qP8EOiMqLjK7 AdmDJ1KMJ3EZmx50JTwFKsU6pBwYPA=="
       answer "nsec-missing-signature-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321005063631 20241007053631 58937 nsec-missing-signature-1.dnssec10.xa. slAe0hZT6bturzQHROLWhCus6IrY5KagfNbSLuyGD/2PENh6kgOxeENI 8pOrpUbYolIKvy81GgXMYVRvRh85qg=="
    }
    template IN NSEC nsec-missing-signature-1.dnssec10.xa {
       answer "nsec-missing-signature-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-missing-signature-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-missing-signature-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321005060539 20241007053631 23287 nsec-missing-signature-1.dnssec10.xa. lLKVqXyvXdy5Yhzy8qZXV/+lKLISdXhW+ChvjBTrWbJdk6Qug49yZQc1 mw8zv6fVK111iaYbeqdEMnvmm8DcMQ=="
    }
    template IN NSEC3PARAM nsec-missing-signature-1.dnssec10.xa {
       authority "nsec-missing-signature-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 16 3600 1200 2419200 604800"
       authority "nsec-missing-signature-1.dnssec10.xa. 86400 IN RRSIG SOA 13 3 86400 20321005063631 20241007053631 23287 nsec-missing-signature-1.dnssec10.xa. vzz00SEAZYkFWDXVn+uAQW1rkNGZxEU5l5KvhKlTWm6/iGAmUqUdIuBv wV0lGfm+AE84d5wKmZlmR8VDR6m2bg=="
       authority "nsec-missing-signature-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-missing-signature-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
    }
}


nsec-nodata-missing-soa-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-nodata-missing-soa-1.dnssec10.xa {
       answer "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 bQQvDBrT1gt4elpBqNH7RqCApfEp0X+Ii9YFL5ReERJqwgAUU8Qv8Onj gByEW/GiAimCpws6dL5UXTf+276sKg=="
       answer "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 TaHSQZ0F7iDM6C9pfihMBuICn3Egsl/uq7ebcGU/4DnRb3StJ2DQcvNK M+Go9+yBud8BHHZ7KjNd1wqRkTmdfg=="
       answer "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20321005092712 20241007082712 5548 nsec-nodata-missing-soa-1.dnssec10.xa. avHYEiHgP/WKq5OKp0ztHIVYv4vwc2TPbYOTZG85+U7sKIk+/m3R5lAe 4MyYBK3xSBWq1hi0zoP410S7VbQuEQ=="
    }
    template IN NSEC nsec-nodata-missing-soa-1.dnssec10.xa {
       answer "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	NSEC ns1.nsec-nodata-missing-soa-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005041213 20241007082712 61870 nsec-nodata-missing-soa-1.dnssec10.xa. DZuTvmNB1AMDM7U9sRWRPVHA+uyLHHVCOVCT4Pruc116qPJ/ivz6DI28 0k0jbar8rzbWLYx8HfYP49RfJbj+Xw=="
    }
    template IN NSEC3PARAM nsec-nodata-missing-soa-1.dnssec10.xa {
       authority "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	NSEC ns1.nsec-nodata-missing-soa-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-nodata-missing-soa-1.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005041213 20241007082712 61870 nsec-nodata-missing-soa-1.dnssec10.xa. DZuTvmNB1AMDM7U9sRWRPVHA+uyLHHVCOVCT4Pruc116qPJ/ivz6DI28 0k0jbar8rzbWLYx8HfYP49RfJbj+Xw=="
    }
}


nsec-nodata-wrong-soa-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-nodata-wrong-soa-1.dnssec10.xa {
       answer "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN DNSKEY 256 3 13 9xKtlwi8WPw/Yzk32Hyk5GiAgroG9JSWfwjnI1Ox28mozRUqbEw8PoSX HpXrAzRalFktalKymZdvGwCp1+82Hw=="
       answer "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN DNSKEY 257 3 13 W04pn7yHRUZe7TsB9GFIGP7e/MFz1vyCLLvapjcTlNpWZBQxgjBzE70T jRH1vEJyvnitNvPwzwZ6GqhTZp/eWg=="
       answer "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG DNSKEY 13 3 86400 20321005100025 20241007090025 6330 nsec-nodata-wrong-soa-1.dnssec10.xa. z+4NmIZOpF+ivtk13MGIW3LaAE614spuhslkFHfMoS/oWNUqazb3OuCH a3EVqwfb6BwgmvUeDgnMG4FkoVlTvg=="
    }
    template IN NSEC nsec-nodata-wrong-soa-1.dnssec10.xa {
       answer "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-nodata-wrong-soa-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321004235209 20241007090025 29127 nsec-nodata-wrong-soa-1.dnssec10.xa. chVZlQOyi3iZop9ID4z+fNH3fSquJ6ZN1IedNhcFDT6TfFOeQkcIkhlo rA0foUCrfW6ch+Dfj7EWQUe+lPi80A=="
    }
    template IN NSEC3PARAM nsec-nodata-wrong-soa-1.dnssec10.xa {
       # SOA owner name has been manipulated and RRSIG has been regenerated by sign-rrset.pl. Original NSEC commented.
       # nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 6 3600 1200 2419200 604800
       authority "sub.nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN SOA localhost. root.localhost. 6 3600 1200 2419200 604800"
       authority "sub.nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG SOA 13 4 86400 20321005100025 20241007090025 29127 nsec-nodata-wrong-soa-1.dnssec10.xa. R5akN4Vnu4gnqDRgywKiACRKewAwpJoQVj3CKW0PnsJW6a8ugx5LKIezTJV3DCnS7pfOccp/nXQE c2/tC6LtPw=="
       authority "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN NSEC ns1.nsec-nodata-wrong-soa-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-nodata-wrong-soa-1.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321004235209 20241007090025 29127 nsec-nodata-wrong-soa-1.dnssec10.xa. chVZlQOyi3iZop9ID4z+fNH3fSquJ6ZN1IedNhcFDT6TfFOeQkcIkhlo rA0foUCrfW6ch+Dfj7EWQUe+lPi80A=="
    }
}

nsec-no-verified-signature-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-no-verified-signature-1.dnssec10.xa {
       answer "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN DNSKEY 257 3 13 77c6JcU2rseuYl7LcZ/CvvowKxobncd/u1RW9UG9GEz34Yf3ejtEgIX9 YNM4KDYVaXKGNHwR8y/JlOyjs4aXqQ=="
       answer "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN DNSKEY 256 3 13 ZOEQ7joftaqrZvFPvv6JPEh5oa94EYZ2p7YSeIqt2ORzN1ZynSZOPD9H 2yAM1tu0C2SdTYB0FF40dfgQpLQcmQ=="
       answer "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321005114805 20241007104805 19494 nsec-no-verified-signature-1.dnssec10.xa. R0OgiJq190nbO0QfALThoJe7RuQ4/7pObnPsQqhWf5U3g/k6TG4fZF73 H6oxcfapx9cCv+hQHfP6P4Ppe0b/lw=="
    }
    template IN NSEC nsec-no-verified-signature-1.dnssec10.xa {
       answer "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005085920 20241007104805 14434 nsec-no-verified-signature-1.dnssec10.xa. gyeIyEbWP1jnoIh+Uo8h/Y6mdnr0zADcjHv8Pqtkr8/6stRz0J0xTyxD VwOFwJOfMDN2v29ZTHoiTMfkljs/wQ=="
    }
    template IN NSEC3PARAM nsec-no-verified-signature-1.dnssec10.xa {
       authority "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN SOA localhost. root.localhost. 8 3600 1200 2419200 604800"
       authority "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321005114805 20241007104805 14434 nsec-no-verified-signature-1.dnssec10.xa. 7NoLdCEoEgF5S+mRmZZDUyGKK0aoqXum2yEPipqXM/V2D+UBQKkyKRTt 158bqOY/3zFiTguC1TEkv+JA+EB5rg=="
       authority "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       # The RRSIG has been manipulated. The unminipulated RRSIG is included as a comment.
       # nsec-no-verified-signature-1.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005085920 20241007104805 14434 nsec-no-verified-signature-1.dnssec10.xa. gyeIyEbWP1jnoIh+Uo8h/Y6mdnr0zADcjHv8Pqtkr8/6stRz0J0xTyxD VwOFwJOfMDN2v29ZTHoiTMfkljs/wQ==
       authority "nsec-no-verified-signature-1.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005085920 20241007104805 15434 nsec-no-verified-signature-1.dnssec10.xa. gyeIyEbWP1jnoIh+Uo8h/Y6mdnr0zADcjHv8Pqtkr8/6stRz0J0xTyxD VwOFwJOfMDN2v29ZTHoiTMfkljs/wQ=="
    }
}


nsec-no-verified-signature-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-no-verified-signature-2.dnssec10.xa {
       answer "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN DNSKEY 257 3 13 LmrafqqMlB0hsi1hUOS0phAzRwuYeqall2eK5N+jpldkH4jhn75Qda/O maP5ZtEg5B/rM40bnblP0RVRc/Al3g=="
       answer "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN DNSKEY 256 3 13 h77nV/lq86o0m9/6z6JZGDGpuOWdXRJLNxKLGU0kHrlQiBfWQ8bjREAv Fy3ptaNxYX7bddISOSQFCPWohU2Zog=="
       answer "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321005122800 20241007112800 51502 nsec-no-verified-signature-2.dnssec10.xa. 6dy6OxYaDsCtmP79oZVm7bdFzFnEj6dxv2cwMciXo0sph0mq9Rq3SwVk 8iZQab6LtxywDO/DmZj0szmNzaC8gQ=="
    }
    template IN NSEC nsec-no-verified-signature-2.dnssec10.xa {
       answer "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005022439 20241007112800 15237 nsec-no-verified-signature-2.dnssec10.xa. W7Eh0eVGD0BE+pMCA1v3nVZlVpfVXBA326QuGEQ+eHac62DCbhSftKBL CLWJ8/a4QVnOP5uD3oH5tvu9yaJgsg=="
    }
    template IN NSEC3PARAM nsec-no-verified-signature-2.dnssec10.xa {
       authority "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN SOA localhost. root.localhost. 9 3600 1200 2419200 604800"
       authority "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321005122800 20241007112800 15237 nsec-no-verified-signature-2.dnssec10.xa. swAyAuoMN3Y9sg5QISpwYPOqlTfzA/nLNG9/D3pUyKB1nTLaW/PK2Wfo DIM0loqSfOHleZ8fLrqyJYKzWVHAhw=="
       authority "nsec-no-verified-signature-2.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       # RRSIG created by sign-rrset.pl(). No longer valid.
       authority "nsec-no-verified-signature-2.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20241001010101 20240901010101 15237 nsec-no-verified-signature-2.dnssec10.xa. fEQJvFp7OuGwfu4mvaEWeeT3eVJEQjm4nFKsDTigi2y+nvDsF1Wzku7/JbPhw5P6sWlY5riWanUy Oe/Pq6SdVA=="
    }
}

nsec-no-verified-signature-3.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-no-verified-signature-3.dnssec10.xa {
       answer "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN DNSKEY 257 3 13 dTDVT8ogZDQVQZ8J6Pu04k7Jil9v7q++kBLcduyjcutZJGMOz4Eh7Bff ueGkJVS1XXacUxFR4WEswDdyNJuZGg=="
       answer "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN DNSKEY 256 3 13 dm0GzXUSuffrIT88ckMWXo82UXEW/sGZ7tGYL2YuJjOxfhQCk00as4zh hRO+tgHe4gH1hAZygFC7+f3KgqcTfQ=="
       answer "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321005130856 20241007120856 10909 nsec-no-verified-signature-3.dnssec10.xa. fhlUJWeVyV27KnMEDWqn8cdwIK4Km4I+V/3kSTkyuK+Wd2bRst6HUY48 qi/D5vxfL952vSrXKySMKAAczP7XwQ=="
    }
    template IN NSEC nsec-no-verified-signature-3.dnssec10.xa {
       answer "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005015412 20241007120856 9266 nsec-no-verified-signature-3.dnssec10.xa. uI1N+XMEpHsu2xvahsaglNELMzHIip/UFLxVuVhwC0uEWtlZFGm66dIn eTi5L4OHmrRmhCvQjH51hNbjtLQLpg=="
    }
    template IN NSEC3PARAM nsec-no-verified-signature-3.dnssec10.xa {
       authority "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN SOA localhost. root.localhost. 9 3600 1200 2419200 604800"
       authority "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321005130856 20241007120856 9266 nsec-no-verified-signature-3.dnssec10.xa. Jta9/8+SnRm+8QxGc4XG7FSIASEwGnfGo+ZGNr2WRxU/9XP/j7qBE6/w xMYFIUUaoL+WolNmVNBQiMkNtIBL2A=="
       authority "nsec-no-verified-signature-3.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       # RRSIG created by sign-rrset.pl(). No longer valid.
       authority "nsec-no-verified-signature-3.dnssec10.xa. 86400 IN RRSIG NSEC 13 3 86400 20321001010101 20310901010101 9266 nsec-no-verified-signature-3.dnssec10.xa. 7nftlul6zew24CyW99FO1WD/PmZfNbzMbD0JSn4J4MhIfyj9I/AHfP7FneTvkdS2SBhmZf8pa42z cyptCHdxmg=="
   }
}


nsec-no-verified-signature-4.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-no-verified-signature-4.dnssec10.xa {
       answer "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN DNSKEY 257 3 13 HsrOy4O/No8tlo+SJG3QdBgOL87LUCpJFNBpk07OM/nlbzjuFhOox5cx iV1zfmak/mD1A9nNFfdn4GsW+Zt0NQ=="
       answer "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN DNSKEY 256 3 13 CJoRRPxOJzi3QyX3aHMWQGnpuQNAoM5Yx9H1zqI9sdlA+qkkxilm2yif xI4zrQoXOz6hTlwT2vdsQXiLohzVAA=="
       answer "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN RRSIG DNSKEY 13 3 86400 20321005140842 20241007130842 39035 nsec-no-verified-signature-4.dnssec10.xa. Ulwp2T/mwaEIqUDThDIxfvSrwgiRUFH+XCPLFymGk75gdKmqq9oc4VAG Jbkr0gRQ5rkU0aMPtb2KxdqVzymueQ=="
   }
    template IN NSEC nsec-no-verified-signature-4.dnssec10.xa {
       answer "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-4.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005134653 20241007130842 37527 nsec-no-verified-signature-4.dnssec10.xa. rSJu27vumGMuRr/7PKgqF8t4vzYVORtWEc+5WKtn072zGvhObZF4tfbf 7zztvYsQvrMx62ywK838oIKJNdJMPQ=="
    }
    template IN NSEC3PARAM nsec-no-verified-signature-4.dnssec10.xa {
       authority "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN SOA localhost. root.localhost. 11 3600 1200 2419200 604800"
       authority "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN RRSIG SOA 13 3 86400 20321005140842 20241007130842 37527 nsec-no-verified-signature-4.dnssec10.xa. jazQAVsCz1bYhGEI5XTifGdMvGA7LiD7PHD2a9tF8AUpHuQCWdS8XzuT 58X1MGHRUntpzO/PdGr8dTsr885g6Q=="
       authority "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN NSEC	ns1.nsec-no-verified-signature-4.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       # The RRSIG has been manipulated in the signature not to match DNSKEY and RRset. First unmanipulted and then manipulated
       # nsec-no-verified-signature-4.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005134653 20241007130842 37527 nsec-no-verified-signature-4.dnssec10.xa. rSJu27vumGMuRr/7PKgqF8t4vzYVORtWEc+5WKtn072zGvhObZF4tfbf 7zztvYsQvrMx62ywK838oIKJNdJMPQ==
       authority "nsec-no-verified-signature-4.dnssec10.xa. 86400	IN RRSIG NSEC 13 3 86400 20321005134653 20241007130842 37527 nsec-no-verified-signature-4.dnssec10.xa. rSJu27vumGMuRr/8PKgqF8t4vzYVORtWEc+5WKtn072zGvhObZF4tfbf 7zztvYsQvrMx62ywK838oIKJNdJMPQ=="
    }
}


nsec-query-response-err-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-query-response-err-1.dnssec10.xa {
       answer "nsec-query-response-err-1.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 78X2KhvM5xgzwPo58Wt+CfZxtbNwnmz9A//rj8gNJiSL+TJ4eQ0KwiNy 5L3MEye9Hi4ly3jf0hd33/ble5Llbg=="
       answer "nsec-query-response-err-1.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 CbHjEca83uwzaAyoomA2RHBgmKw3hGN8iu3zQdQVeXB4B5RpSNr6zDSE ZPKcan84an2y1zOf71bTGk5Nte3iHg=="
       answer "nsec-query-response-err-1.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20321005142459 20241007132459 36559 nsec-query-response-err-1.dnssec10.xa. VA8lmIDR5gQbmC1MvSkcsA/yI/SXOrv09x9y3dE1lXBYle+irL518knp uZob1TQYKNM/BBP5LZbqCHq7gW+uaA=="
    }
    acl nsec-query-response-err-1.dnssec10.xa {
        drop type NSEC
    }
    template IN NSEC3PARAM nsec-query-response-err-1.dnssec10.xa {
       authority "nsec-query-response-err-1.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 4 3600 1200 2419200 604800"
       authority "nsec-query-response-err-1.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20321005142459 20241007132459 7652 nsec-query-response-err-1.dnssec10.xa. nXOPuV2sNmjK91naKPybuwzMYz9KBWx8OdP1VPksJJncU2vRw3Z8b0W2 Suwp3Xx1GEib3/U/x5tVdtulYym+Xg=="
       authority "nsec-query-response-err-1.dnssec10.xa. 86400 IN	NSEC ns1.nsec-query-response-err-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "nsec-query-response-err-1.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005102653 20241007132459 7652 nsec-query-response-err-1.dnssec10.xa. cifX1/exwwiwbQ9Qy7U8nh4NBPt6XGWN+bArPj9aPXlaWNe8ayrQnQG9 ov95+KkKpTMRqB/iPDO0e6BhTUuvvg=="
    }
}

nsec-query-response-err-2.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-query-response-err-2.dnssec10.xa {
       answer "nsec-query-response-err-2.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 iAoa5B6VbdZjUThWxi+C9mef5As/PJGS4G+2tlNV2P0OGLZG6TVuCucy PxO9DEW0Qki+QWoVcXh3T8aqJD68SA=="
       answer "nsec-query-response-err-2.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 BJ0fApl972Fs/kPG9AToMdq1bkdY4V1VM+ILMiNoYSgqU/ScSOUaeaOT O3fw7CwKiafBtSWa2AXN2bzL33fpCA=="
       answer "nsec-query-response-err-2.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20321005143815 20241007133815 14185 nsec-query-response-err-2.dnssec10.xa. a3qfsOliiau2V2oH878FPXIYfhKVRXwP5+DhRr4Own893AfdGrJSk6G3 S+viFcaGEKgMZqkZGgbHUxz27cmZaw=="
    }
    template IN NSEC nsec-query-response-err-2.dnssec10.xa {
       rcode "REFUSED"
    }
    template IN NSEC3PARAM nsec-query-response-err-2.dnssec10.xa {
        authority "nsec-query-response-err-2.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 5 3600 1200 2419200 604800"
        authority "nsec-query-response-err-2.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20321005143815 20241007133815 6868 nsec-query-response-err-2.dnssec10.xa. DbiMr3p7b51+hxhunqhbEg1/BMTi6oBZ4wU0Qo5MlkdNaGsx41SqXf0P SCY5WwxlFUkHWib9Ppc+QwKLlM7qbw=="
        authority "nsec-query-response-err-2.dnssec10.xa. 86400 IN	NSEC ns1.nsec-query-response-err-2.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
        authority "nsec-query-response-err-2.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005035418 20241007133815 6868 nsec-query-response-err-2.dnssec10.xa. dhikP/dgjCk9388KusOcm622DcAUWGi1YmVES29DIabBXHi/8Qdh1ue3 oSXRG++d9Ch+aumiWj6AdIshFxk1EQ=="
    }
}


nsec-query-response-err-3.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY nsec-query-response-err-3.dnssec10.xa {
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 5ntrbfNXjeGT5QYDbKTwpEwFgO78RmeP6cw5oBt+WLxIw/JmgUKKJRh8 1CKQUldjQe/r04jHrqVeuyS4U3MCOw=="
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 O6TQs01mfKwHBqhMbdagChvbBLzY0+W3axw5TZU+NLc4OLs0dHXvEtAf sVSQwqqx2IbTaSGR7C0z7LEw6ZFjXg=="
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20321005145821 20241007135821 58569 nsec-query-response-err-3.dnssec10.xa. 9Te90FOdO9btW2VQUIJe/+bkO1aLgh7dulhzkef/4RlBTLclI9tsqBJu eXKg+JWOiWZn+yfT9/pJakC2Zd4GHA=="
    }
    template IN NSEC nsec-query-response-err-3.dnssec10.xa {
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	NSEC ns1.nsec-query-response-err-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005093903 20241007135821 61452 nsec-query-response-err-3.dnssec10.xa. JI0ZkbywQ0DG41UjlHWvzrwZqw4ZSIsYtIh/vq5mNf3BwjKQ0KA1eLOv vF5HYRvDF7NgNjn70ox5HUXRFwN4ZQ=="
       #
       # The AA bit should be disabled, but how?
       #
    }
    template IN NSEC3PARAM nsec-query-response-err-3.dnssec10.xa {
        authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 7 3600 1200 2419200 604800"
        authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20321005145821 20241007135821 61452 nsec-query-response-err-3.dnssec10.xa. LfTHHK9XnKBPhkQ7za8K2YoHowgloPZlHx69etw4HSX4eWpOfYWUHYE3 c4RtWoIH3pPgVKRjasPdAp3hk779oQ=="
        authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	NSEC ns1.nsec-query-response-err-3.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
        authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG NSEC 13 3 86400 20321005093903 20241007135821 61452 nsec-query-response-err-3.dnssec10.xa. JI0ZkbywQ0DG41UjlHWvzrwZqw4ZSIsYtIh/vq5mNf3BwjKQ0KA1eLOv vF5HYRvDF7NgNjn70ox5HUXRFwN4ZQ=="
    }
}
nsec-query-response-err-3.dnssec10.xa { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY nsec-query-response-err-3.dnssec10.xa {
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	DNSKEY 256 3 13 5ntrbfNXjeGT5QYDbKTwpEwFgO78RmeP6cw5oBt+WLxIw/JmgUKKJRh8 1CKQUldjQe/r04jHrqVeuyS4U3MCOw=="
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	DNSKEY 257 3 13 O6TQs01mfKwHBqhMbdagChvbBLzY0+W3axw5TZU+NLc4OLs0dHXvEtAf sVSQwqqx2IbTaSGR7C0z7LEw6ZFjXg=="
       answer "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG DNSKEY 13 3 86400 20321005145821 20241007135821 58569 nsec-query-response-err-3.dnssec10.xa. 9Te90FOdO9btW2VQUIJe/+bkO1aLgh7dulhzkef/4RlBTLclI9tsqBJu eXKg+JWOiWZn+yfT9/pJakC2Zd4GHA=="
    }
    template IN NSEC nsec-query-response-err-3.dnssec10.xa {
       authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 7 3600 1200 2419200 604800"
       authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20321005145821 20241007135821 61452 nsec-query-response-err-3.dnssec10.xa. LfTHHK9XnKBPhkQ7za8K2YoHowgloPZlHx69etw4HSX4eWpOfYWUHYE3 c4RtWoIH3pPgVKRjasPdAp3hk779oQ=="
    }
    template IN NSEC3PARAM nsec-query-response-err-3.dnssec10.xa {
       authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	SOA localhost. root.localhost. 7 3600 1200 2419200 604800"
       authority "nsec-query-response-err-3.dnssec10.xa. 86400 IN	RRSIG SOA 13 3 86400 20321005145821 20241007135821 61452 nsec-query-response-err-3.dnssec10.xa. LfTHHK9XnKBPhkQ7za8K2YoHowgloPZlHx69etw4HSX4eWpOfYWUHYE3 c4RtWoIH3pPgVKRjasPdAp3hk779oQ=="
    }
}


server-no-dnssec-1.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY server-no-dnssec-1.dnssec10.xa {
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 9 3600 1200 2419200 604800"
    }
    template IN NSEC server-no-dnssec-1.dnssec10.xa {
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 9 3600 1200 2419200 604800"
    }
    template IN NSEC3PARAM server-no-dnssec-1.dnssec10.xa {
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 9 3600 1200 2419200 604800"
    }
}
server-no-dnssec-1.dnssec10.xa { # ns2
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY server-no-dnssec-1.dnssec10.xa {
       answer "server-no-dnssec-1.dnssec10.xa.	86400 IN DNSKEY	256 3 13 LOxRS5BDJ37nTSTdg16pw43oXEHydZdEK//ubIa6FlQO2Wm6x05fu0ow g/JWCwFri134JEUyn76F2wKZS4YSVg=="
       answer "server-no-dnssec-1.dnssec10.xa.	86400 IN DNSKEY	257 3 13 74WzXtgoPiiQW3p2RLgpor2Zvdt0aOh42dHz4QkNoqleeIIHDHP8QEhx P+dHkCnVMt3uChO7Qup4xvvPXzZ9uQ=="
       answer "server-no-dnssec-1.dnssec10.xa.	86400 IN RRSIG	DNSKEY 13 3 86400 20321005153839 20241007143839 13367 server-no-dnssec-1.dnssec10.xa. Tfn9DH+aLjQg3b4U/lz77eTJsOW+KwYl0x6ZrHNiGa4nQ0hF67s9woHo iOgRYgaRHY0GMbvrQmR1ny/80WGhbw=="
    }
    template IN NSEC server-no-dnssec-1.dnssec10.xa {
       answer "server-no-dnssec-1.dnssec10.xa.	86400 IN NSEC	ns1.server-no-dnssec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       answer "server-no-dnssec-1.dnssec10.xa.	86400 IN RRSIG	NSEC 13 3 86400 20321005152937 20241007143839 45741 server-no-dnssec-1.dnssec10.xa. 8CvJRZjU+BdPBV44pJSIQ+7NTodMsW8sOoaE73ZPrT0VEfxxvdhv8Nfm 006hxbUM0pcrWG9GHLzf5zJizi2XXg=="
    }
    template IN NSEC3PARAM server-no-dnssec-1.dnssec10.xa {
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 9 3600 1200 2419200 604800"
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN RRSIG	SOA 13 3 86400 20321005153839 20241007143839 45741 server-no-dnssec-1.dnssec10.xa. IN5LRfEO/Hc+GIyDrZybvVGq/7BgdwZe14LrTXJ8hp4VNYdCEXW4XE67 azbpfu52hLTCiSmgR/Uug/SZUr7zaQ=="
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN NSEC	ns1.server-no-dnssec-1.dnssec10.xa. NS SOA RRSIG NSEC DNSKEY TYPE65534"
       authority "server-no-dnssec-1.dnssec10.xa.	86400 IN RRSIG	NSEC 13 3 86400 20321005152937 20241007143839 45741 server-no-dnssec-1.dnssec10.xa. 8CvJRZjU+BdPBV44pJSIQ+7NTodMsW8sOoaE73ZPrT0VEfxxvdhv8Nfm 006hxbUM0pcrWG9GHLzf5zJizi2XXg=="
    }
}

server-no-dnssec-2.dnssec10.xa { # ns1
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    log

    template IN DNSKEY server-no-dnssec-2.dnssec10.xa {
       authority "server-no-dnssec-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
    template IN NSEC server-no-dnssec-2.dnssec10.xa {
       authority "server-no-dnssec-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
    template IN NSEC3PARAM server-no-dnssec-2.dnssec10.xa {
       authority "server-no-dnssec-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
}
server-no-dnssec-2.dnssec10.xa {
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY server-no-dnssec-2.dnssec10.xa {
       answer "server-no-dnssec-2.dnssec10.xa.	86400 IN DNSKEY	257 3 13 ylQaxpnZeSdPuSXLXL6d9n2NqQz+zDonHcY84zQlCq6adRjhOqwJPjMb lUp2gu4Qt1SEItv9o4ZCCBo5riYUXQ=="
       answer "server-no-dnssec-2.dnssec10.xa.	86400 IN DNSKEY	256 3 13 s0XdD3A6Nm1658TqYZh78DXu4isZupvERMMEyowI75vBCRtBuG0blHw8 aMR7P1aEr8gyBEYKP6PE9VF6WLMgmw=="
       answer "server-no-dnssec-2.dnssec10.xa.	86400 IN RRSIG	DNSKEY 13 3 86400 20321005155513 20241007145513 25449 server-no-dnssec-2.dnssec10.xa. qwgu2DyHdCtzdMMtKl7jgRAO++NEXmOdF88k+VuAVERNBs50GaB+jRhr /ETHyoKx9bBY701M72h3JQZnVYm12Q=="
    }
    template IN NSEC server-no-dnssec-2.dnssec10.xa {
       authority "server-no-dnssec-2.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
       authority "server-no-dnssec-2.dnssec10.xa.	86400 IN RRSIG	SOA 13 3 86400 20321005155513 20241007145513 18810 server-no-dnssec-2.dnssec10.xa. TX713p7Gw9yuwkHe7u2LRwwsngAKjpa0lLHp6xpXUayKd+lk2ojhClnl VN5MfJAN7Il3Fr78cL8pPVkiASQb0A=="
       authority "36V6C1EM8HK0RIT6IDPGUMTG1N12708P.server-no-dnssec-2.dnssec10.xa. 86400 IN NSEC3	1 0 0 - KB54GH956BU56D9R8L3UC1PC2TR0KOMM NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534"
       authority "36V6C1EM8HK0RIT6IDPGUMTG1N12708P.server-no-dnssec-2.dnssec10.xa. 86400 IN RRSIG	NSEC3 13 4 86400 20321005072538 20241007145513 18810 server-no-dnssec-2.dnssec10.xa. f2TwKfCy24QUU3bVvDGdfiFt1WjNybpl6kz60vSV6bnEXLHsbe2Zv1Hu sN2ONhd8DxT7k3yItiVvqSTwAm8ZUw=="
    }
    template IN NSEC3PARAM server-no-dnssec-2.dnssec10.xa {
       answer "server-no-dnssec-2.dnssec10.xa.	0 IN	NSEC3PARAM 1 0 0 -"
       answer "server-no-dnssec-2.dnssec10.xa.	0 IN	RRSIG	NSEC3PARAM 13 3 0 20321005072538 20241007145513 18810 server-no-dnssec-2.dnssec10.xa. F0fJdg6WGkGNxVhUZ17VHLz85NVvcdMkwhL7hGagmTwyfP7c6hZ29fsv f6IDOkzViX8repHciIdq53z/liKjWg=="
    }
}


zone-no-dnssec-1.dnssec10.xa {
    bind 127.15.10.31               # ns1
    bind fda1:b2:c3:0:127:15:10:31  # ns1
    bind 127.15.10.32               # ns2
    bind fda1:b2:c3:0:127:15:10:32  # ns2
    log

    template IN DNSKEY zone-no-dnssec-1.dnssec10.xa {
       authority "zone-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
    template IN NSEC zone-no-dnssec-1.dnssec10.xa {
       authority "zone-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
    template IN NSEC3PARAM zone-no-dnssec-1.dnssec10.xa {
       authority "zone-no-dnssec-1.dnssec10.xa.	86400 IN SOA	localhost. root.localhost. 14 3600 1200 2419200 604800"
    }
}
