Can`t load www.centrum.cz

JardaB · May 15, 2021, 9:05am

From the very beginning of using turris Omnia router I have trouble loading the page www.centrum.cz. The page does not load, in borwser Opera and Chrome it is empty and it does not report any error. I commonly use the Opera browser ((DNS-over-HTTPS), randomly even Chrome. I started resolver and did several reloads in different combinations of DNS forward and DNSSEC.

May 15 08:20:52 turris resolver-debug: == enable verbose logging (reboot to disable it) ==
May 15 08:20:52 turris root: Called /etc/init.d/kresd stop
May 15 08:20:52 turris root: set dhcp script
May 15 08:20:52 turris root: job 44 at Sat May 15 10:22:00 2021
May 15 08:20:52 turris root: Called /etc/init.d/kresd start

Souhrn

May 15 08:20:52 turris kresd[21258]: [system] warning: hard limit for number of file-descriptors is only 4096 but recommended value is 524288
May 15 08:20:52 turris root: set dhcp script
May 15 08:20:53 turris kresd[21258]: [ta_update] refreshing TA for .
May 15 08:20:53 turris kresd[21258]: [ta_update] next refresh for . in 1.5159722222222 hours
May 15 08:20:54 turris /dhcp_host_domain_ng.py: Refresh kresd leases
May 15 08:20:54 turris root: Called /etc/resolver/dhcp_host_domain_ng.py
May 15 08:20:57 turris kresd[21258]: verbose(true)
May 15 08:20:57 turris kresd[21258]: true
May 15 08:20:57 turris resolver-debug: resolver.common=resolver
May 15 08:20:57 turris resolver-debug: resolver.common.interface=‘0.0.0.0’ ‘::0’
May 15 08:20:57 turris resolver-debug: resolver.common.port=‘53’
May 15 08:20:57 turris resolver-debug: resolver.common.keyfile=’/etc/root.keys’
May 15 08:20:57 turris resolver-debug: resolver.common.verbose=‘0’
May 15 08:20:57 turris resolver-debug: resolver.common.msg_buffer_size=‘65552’
May 15 08:20:57 turris resolver-debug: resolver.common.msg_cache_size=‘20M’
May 15 08:20:57 turris resolver-debug: resolver.common.net_ipv6=‘1’
May 15 08:20:57 turris resolver-debug: resolver.common.net_ipv4=‘1’
May 15 08:20:57 turris resolver-debug: resolver.common.prefered_resolver=‘kresd’
May 15 08:20:57 turris resolver-debug: resolver.common.prefetch=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.common.static_domains=‘1’
May 15 08:20:57 turris resolver-debug: resolver.common.edns_buffer_size=‘1232’
May 15 08:20:57 turris resolver-debug: resolver.common.dynamic_domains=‘1’
May 15 08:20:57 turris resolver-debug: resolver.common.forward_upstream=‘1’
May 15 08:20:57 turris resolver-debug: resolver.common.ignore_root_key=‘0’
May 15 08:20:57 turris resolver-debug: resolver.common.forward_custom=‘99_quad9_unfiltered’
May 15 08:20:57 turris resolver-debug: resolver.kresd=resolver
May 15 08:20:57 turris resolver-debug: resolver.kresd.rundir=’/tmp/kresd’
May 15 08:20:57 turris resolver-debug: resolver.kresd.log_stderr=‘1’
May 15 08:20:57 turris resolver-debug: resolver.kresd.log_stdout=‘1’
May 15 08:20:57 turris resolver-debug: resolver.kresd.forks=‘1’
May 15 08:20:57 turris resolver-debug: resolver.kresd.keep_cache=‘1’
May 15 08:20:57 turris resolver-debug: resolver.kresd.rpz_file=’/etc/kresd/adb_list.overall’
May 15 08:20:57 turris resolver-debug: resolver.unbound=resolver
May 15 08:20:57 turris resolver-debug: resolver.unbound.outgoing_range=‘60’
May 15 08:20:57 turris resolver-debug: resolver.unbound.outgoing_num_tcp=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.incoming_num_tcp=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.msg_cache_slabs=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.num_queries_per_thread=‘30’
May 15 08:20:57 turris resolver-debug: resolver.unbound.rrset_cache_size=‘100K’
May 15 08:20:57 turris resolver-debug: resolver.unbound.rrset_cache_slabs=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.infra_cache_slabs=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.infra_cache_numhosts=‘200’
May 15 08:20:57 turris resolver-debug: resolver.unbound.access_control=‘0.0.0.0/0 allow’ ‘::0/0 allow’
May 15 08:20:57 turris resolver-debug: resolver.unbound.pidfile=’/var/run/unbound.pid’
May 15 08:20:57 turris resolver-debug: resolver.unbound.root_hints=’/etc/unbound/named.cache’
May 15 08:20:57 turris resolver-debug: resolver.unbound.target_fetch_policy=‘2 1 0 0 0’
May 15 08:20:57 turris resolver-debug: resolver.unbound.harden_short_bufsize=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound.harden_large_queries=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound.qname_minimisation=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound.harden_below_nxdomain=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound.key_cache_size=‘100k’
May 15 08:20:57 turris resolver-debug: resolver.unbound.key_cache_slabs=‘1’
May 15 08:20:57 turris resolver-debug: resolver.unbound.neg_cache_size=‘10k’
May 15 08:20:57 turris resolver-debug: resolver.unbound.prefetch_key=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound_remote_control=resolver
May 15 08:20:57 turris resolver-debug: resolver.unbound_remote_control.control_enable=‘yes’
May 15 08:20:57 turris resolver-debug: resolver.unbound_remote_control.control_use_cert=‘no’
May 15 08:20:57 turris resolver-debug: resolver.unbound_remote_control.control_interface=‘127.0.0.1’
May 15 08:20:57 turris resolver-debug: == resolv.conf* ==
May 15 08:20:57 turris resolver-debug: /etc/resolv.conf:search lan
May 15 08:20:57 turris resolver-debug: /etc/resolv.conf:nameserver 127.0.0.1
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf:search lan
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf:nameserver 127.0.0.1
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf.auto:# Interface wan
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf.auto:nameserver 10.255.255.20
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf.auto:nameserver 10.255.255.10
May 15 08:20:57 turris resolver-debug: /tmp/resolv.conf.auto.last.md5:43466b0382ddedabf639964753be5091
May 15 08:20:57 turris resolver-debug: == DNSSEC root key file ==
May 15 08:20:57 turris resolver-debug: cb02e46d912d6e4ab17dbc8289f4d14b /etc/root.keys
May 15 08:20:57 turris resolver-debug: /etc/root.keys:. IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
May 15 08:20:57 turris resolver-debug: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
May 15 08:20:57 turris resolver-debug: == resolver process ==
May 15 08:20:57 turris resolver-debug: == configured trust anchors ==
May 15 08:20:57 turris kresd[21258]: > trust_anchors
May 15 08:20:57 turris kresd[21258]: {
May 15 08:20:57 turris kresd[21258]: [‘add’] = function add(keystr): 0xb6907f00,
May 15 08:20:57 turris kresd[21258]: [‘add_file’] = function add_file(path, unmanaged): 0xb6907ba0,
May 15 08:20:57 turris kresd[21258]: [‘bootstrap_ca’] = ‘/etc/kresd/icann-ca.pem’,
May 15 08:20:57 turris kresd[21258]: [‘bootstrap_url’] = ‘https://data.iana.org/root-anchors/root-anchors.xml’,
May 15 08:20:57 turris kresd[21258]: [‘config’] = function config(): 0xb6907ec0,
May 15 08:20:57 turris kresd[21258]: [‘insecure’] = {
May 15 08:20:57 turris kresd[21258]: },
May 15 08:20:57 turris kresd[21258]: [‘key_state’] = {
May 15 08:20:57 turris kresd[21258]: [‘AddPend’] = ‘AddPend’,
May 15 08:20:57 turris kresd[21258]: [‘Missing’] = ‘Missing’,
May 15 08:20:57 turris kresd[21258]: [‘Removed’] = ‘Removed’,
May 15 08:20:57 turris kresd[21258]: [‘Revoked’] = ‘Revoked’,
May 15 08:20:57 turris kresd[21258]: [‘Start’] = ‘Start’,
May 15 08:20:57 turris kresd[21258]: [‘Valid’] = ‘Valid’,
May 15 08:20:57 turris kresd[21258]: },
May 15 08:20:57 turris kresd[21258]: [‘keyset_publish’] = function keyset_publish(keyset): 0xb6907b78,
May 15 08:20:57 turris kresd[21258]: [‘keyset_write’] = function keyset_write(keyset): 0xb6907a70,
May 15 08:20:57 turris kresd[21258]: [‘keysets’] = {
May 15 08:20:57 turris kresd[21258]: [’\000’] = {
May 15 08:20:57 turris kresd[21258]: {
May 15 08:20:57 turris kresd[21258]: [‘class’] = 1,
May 15 08:20:57 turris kresd[21258]: [‘key_tag’] = 20326,
May 15 08:20:57 turris kresd[21258]: [‘owner’] = ‘\000’,
May 15 08:20:57 turris kresd[21258]: [‘rdata’] = ‘\001\001\003\008\003\001\000\001\172\255\180 \188\2019\2481\247\161\229\236\136\247\165\146U\236S\004\011\2282\002s\144\164\206\137mo\144\134\243\197\225w\251\254\017\129c\170\236z\241F,G\148YD\196\226\192&\190^\152\187\205\237%\151\130r\225\227\224y\197 MW?\014\131\201/\002\179-5\019\177U\011\130i)\200\013\208\249,\172\150m\023v\159\213\134{d|?8\002\154\189\196\129R\235\143 qY\236\197\2102\199\193S|y\244\183\172(\255\017h/!h\027\246\214\171\165U\003+\246\249\2406\190\178\170\165\179w\141n\235\251\166\191\158\161\145\190J\176\202\234u\158/w:\031\144)\199>\203\141W5\1852\029\176\133\241\184\226\216\003\143\226\148\025\146T\140\238\013g\221EG\225\029\214:\249\201\252\028Tf\251hL\240 \215\025|,\247\158y*\181\001\230\168\161\202Q\154\242\203\155_cg\233L\013GP$Q5{\225\181’,
May 15 08:20:57 turris kresd[21258]: [‘state’] = ‘Valid’,
May 15 08:20:57 turris kresd[21258]: [‘ttl’] = 10915,
May 15 08:20:57 turris kresd[21258]: [‘type’] = 48,
May 15 08:20:57 turris kresd[21258]: },
May 15 08:20:57 turris kresd[21258]: [‘filename’] = ‘/etc/root.keys’,
May 15 08:20:57 turris kresd[21258]: [‘managed’] = false,
May 15 08:20:57 turris kresd[21258]: [‘owner’] = ‘\000’,
May 15 08:20:57 turris kresd[21258]: },
May 15 08:20:57 turris kresd[21258]: },
May 15 08:20:57 turris kresd[21258]: [‘remove’] = function remove(zname): 0xb6907c70,
May 15 08:20:57 turris kresd[21258]: [‘set_insecure’] = function set_insecure(list): 0xb6907f28,
May 15 08:20:57 turris kresd[21258]: [‘summary’] = function summary(single_owner): 0xb6907f50,
May 15 08:20:57 turris kresd[21258]: }
May 15 08:20:57 turris resolver-debug: > {
May 15 08:20:57 turris resolver-debug: [‘add’] = function add(keystr): 0xb6907f00,
May 15 08:20:57 turris resolver-debug: [‘add_file’] = function add_file(path, unmanaged): 0xb6907ba0,
May 15 08:20:57 turris resolver-debug: [‘bootstrap_ca’] = ‘/etc/kresd/icann-ca.pem’,
May 15 08:20:57 turris resolver-debug: [‘bootstrap_url’] = ‘https://data.iana.org/root-anchors/root-anchors.xml’,
May 15 08:20:57 turris resolver-debug: [‘config’] = function config(): 0xb6907ec0,
May 15 08:20:57 turris resolver-debug: [‘insecure’] = {
May 15 08:20:57 turris resolver-debug: },
May 15 08:20:57 turris resolver-debug: [‘key_state’] = {
May 15 08:20:57 turris resolver-debug: [‘AddPend’] = ‘AddPend’,
May 15 08:20:57 turris resolver-debug: [‘Missing’] = ‘Missing’,
May 15 08:20:57 turris resolver-debug: [‘Removed’] = ‘Removed’,
May 15 08:20:57 turris resolver-debug: [‘Revoked’] = ‘Revoked’,
May 15 08:20:57 turris resolver-debug: [‘Start’] = ‘Start’,
May 15 08:20:57 turris resolver-debug: [‘Valid’] = ‘Valid’,
May 15 08:20:57 turris resolver-debug: },
May 15 08:20:57 turris resolver-debug: [‘keyset_publish’] = function keyset_publish(keyset): 0xb6907b78,
May 15 08:20:57 turris resolver-debug: [‘keyset_write’] = function keyset_write(keyset): 0xb6907a70,
May 15 08:20:57 turris resolver-debug: [‘keysets’] = {
May 15 08:20:57 turris resolver-debug: [‘000’] = {
May 15 08:20:57 turris resolver-debug: {
May 15 08:20:57 turris resolver-debug: [‘class’] = 1,
May 15 08:20:57 turris resolver-debug: [‘key_tag’] = 20326,
May 15 08:20:57 turris resolver-debug: [‘owner’] = ‘000’,
May 15 08:20:57 turris resolver-debug: [‘rdata’] = ‘001001003008003001000001172255180 18820192481247161229236136247165146U236S0040112282002s144164206137mo144134243197225w251254017129c170236z241F,G148YD196226192&190^152187205237%151130r225227224y197 MW?014131201/002179-5019177U011130i)200013208249,172150m023v159213134{d|?8002154189196129R235143 qY2361972102199193S|y244183172(255017h/!h027246214171165U003+2462492406190178170165179w141n235251166191158161145190J176202234u158/w:031144)199>203141W51852029176133241184226216003143226148025146T140238013g221EG225029214:249201252028Tf251hL240 215025|,247158y181001230168161202Q154242203155_cg233L013GP$Q5{225181’,
May 15 08:20:57 turris resolver-debug: [‘state’] = ‘Valid’,
May 15 08:20:57 turris resolver-debug: [‘ttl’] = 10915,
May 15 08:20:57 turris resolver-debug: [‘type’] = 48,
May 15 08:20:57 turris resolver-debug: },
May 15 08:20:57 turris resolver-debug: [‘filename’] = ‘/etc/root.keys’,
May 15 08:20:57 turris resolver-debug: [‘managed’] = false,
May 15 08:20:57 turris resolver-debug: [‘owner’] = ‘000’,
May 15 08:20:57 turris resolver-debug: },
May 15 08:20:57 turris resolver-debug: },
May 15 08:20:57 turris resolver-debug: [‘remove’] = function remove(zname): 0xb6907c70,
May 15 08:20:57 turris resolver-debug: [‘set_insecure’] = function set_insecure(list): 0xb6907f28,
May 15 08:20:57 turris resolver-debug: [‘summary’] = function summary(single_owner): 0xb6907f50,
May 15 08:20:57 turris resolver-debug: }
May 15 08:20:57 turris resolver-debug: == enable verbose logging (reboot to disable it) ==
May 15 08:20:57 turris kresd[21258]: > verbose(true)
May 15 08:20:57 turris kresd[21258]: true
May 15 08:20:57 turris kresd[21258]: > [00000.00][plan] plan ‘api.turris.cz.’ type ‘A’ uid [49963.00]
May 15 08:20:57 turris kresd[21258]: [49963.00][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => skipping exact RR: rank 060 (min. 030), new TTL -8456
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => skipping unfit NS RR: rank 040, new TTL -19840
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 depth 2: hash 66l83eqvm770cmjf424upv43bol4lasl
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 encloser error for api.turris.cz.: range search found stale or insecure entry
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 depth 1: hash 27qqdm8qdrjn7u3fe3cida95pdojgba6
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 encloser error for turris.cz.: range search found stale or insecure entry
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:57 turris kresd[21258]: [49963.01][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:57 turris kresd[21258]: [49963.01][plan] plan ‘.’ type ‘DNSKEY’ uid [49963.02]
May 15 08:20:57 turris kresd[21258]: [49963.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:57 turris kresd[21258]: [49963.03][cach] => satisfied by exact RRset: rank 060, new TTL 10911
May 15 08:20:57 turris kresd[21258]: [49963.03][iter] <= answer received:
May 15 08:20:57 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 42910
May 15 08:20:57 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:57 turris kresd[21258]: . DNSKEY
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:57 turris kresd[21258]: . 10911 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:57 turris kresd[21258]: . 10911 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:57 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: [49963.03][iter] <= rcode: NOERROR
May 15 08:20:57 turris kresd[21258]: [49963.03][vldr] <= parent: updating DNSKEY
May 15 08:20:57 turris kresd[21258]: [49963.03][vldr] <= answer valid, OK
May 15 08:20:57 turris kresd[21258]: [49963.01][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:57 turris kresd[21258]: [49963.04][plan] plan ‘cz.’ type ‘DS’ uid [49963.05]
May 15 08:20:57 turris kresd[21258]: [49963.05][iter] ‘cz.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:57 turris kresd[21258]: [49963.06][cach] => satisfied by exact RRset: rank 060, new TTL 12579
May 15 08:20:57 turris kresd[21258]: [49963.06][iter] <= answer received:
May 15 08:20:57 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 48433
May 15 08:20:57 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:57 turris kresd[21258]: cz. DS
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:57 turris kresd[21258]: cz. 12579 DS 20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
May 15 08:20:57 turris kresd[21258]: cz. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . bxyZPRaWBOh605EulLjKjzRDXVxfYu5xJgmABSLQJp3bTah+s5PoVqZvY66lfNK+IBArxB9QuYJ3adrCuiKgJNaN4iVtSz3/kEKxE0CtoDtOeCD5wWmbrc3pzgy/cvPWe5XJY7RGJ86L+pi+7nVxkinTrrRA5IMN7xRvNz6MCAUdAAXuuA2bherLEfnrN9CzK0Bn74BwTpPyCcxuITfdchL3vU0xygCA3dizzut2eI7NtHtiCDE3E/7d1CsVVHi4s3GlsNNXnC0EtnEyAdUO6XzRApbG5Kvx0P9xbfxGw3HqDSiPJs08hGq6yTf/eq40hj1i9oPKs/g1X2cvMPItRA==
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: [49963.06][iter] <= rcode: NOERROR
May 15 08:20:57 turris kresd[21258]: [49963.06][vldr] <= DS: OK
May 15 08:20:57 turris kresd[21258]: [49963.06][vldr] <= parent: updating DS
May 15 08:20:57 turris kresd[21258]: [49963.06][vldr] <= answer valid, OK
May 15 08:20:57 turris kresd[21258]: [49963.04][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:57 turris kresd[21258]: [49963.07][plan] plan ‘cz.’ type ‘DNSKEY’ uid [49963.08]
May 15 08:20:57 turris kresd[21258]: [49963.08][iter] ‘cz.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:57 turris kresd[21258]: [49963.09][cach] => satisfied by exact RRset: rank 060, new TTL 1150
May 15 08:20:57 turris kresd[21258]: [49963.09][iter] <= answer received:
May 15 08:20:57 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 44984
May 15 08:20:57 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:57 turris kresd[21258]: cz. DNSKEY
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:57 turris kresd[21258]: cz. 1150 DNSKEY 256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
May 15 08:20:57 turris kresd[21258]: cz. 1150 DNSKEY 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
May 15 08:20:57 turris kresd[21258]: cz. 3600 RRSIG DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: [49963.09][iter] <= rcode: NOERROR
May 15 08:20:57 turris kresd[21258]: [49963.09][vldr] <= parent: updating DNSKEY
May 15 08:20:57 turris kresd[21258]: [49963.09][vldr] <= answer valid, OK
May 15 08:20:57 turris kresd[21258]: [49963.07][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:57 turris kresd[21258]: [49963.10][plan] plan ‘turris.cz.’ type ‘DS’ uid [49963.11]
May 15 08:20:57 turris kresd[21258]: [49963.11][iter] ‘turris.cz.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:57 turris kresd[21258]: [49963.12][cach] => satisfied by exact RRset: rank 060, new TTL 1151
May 15 08:20:57 turris kresd[21258]: [49963.12][iter] <= answer received:
May 15 08:20:57 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 54946
May 15 08:20:57 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:57 turris kresd[21258]: turris.cz. DS
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:57 turris kresd[21258]: turris.cz. 1151 DS 54959 13 2 AFDA82E687FFC58D759824274F3C3EB007EEA1E46F6108886EC0FA979BFD78C3
May 15 08:20:57 turris kresd[21258]: turris.cz. 3600 RRSIG DS 13 2 3600 20210525102134 20210511085134 26955 cz. 9klmfjVJ6MSi/pTFFlRmxTX1f0LTtZ1DGYBomivwptKg1lVwWiWK6W0OhzY69BoMDlHuPazNVVS0Jo/yveiX7A==
May 15 08:20:57 turris kresd[21258]:
May 15 08:20:57 turris kresd[21258]: [49963.12][iter] <= rcode: NOERROR
May 15 08:20:57 turris kresd[21258]: [49963.12][vldr] <= DS: OK
May 15 08:20:57 turris kresd[21258]: [49963.12][vldr] <= parent: updating DS
May 15 08:20:57 turris kresd[21258]: [49963.12][vldr] <= answer valid, OK
May 15 08:20:57 turris kresd[21258]: [49963.10][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:57 turris kresd[21258]: [49963.13][plan] plan ‘turris.cz.’ type ‘DNSKEY’ uid [49963.14]
May 15 08:20:57 turris kresd[21258]: [49963.14][iter] ‘turris.cz.’ type ‘DNSKEY’ new uid was assigned .15, parent uid .13
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => skipping exact RR: rank 060 (min. 030), new TTL -649
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => skipping unfit NS RR: rank 040, new TTL -19840
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => NSEC3 depth 1: hash 27qqdm8qdrjn7u3fe3cida95pdojgba6
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => NSEC3 encloser error for turris.cz.: range search found stale or insecure entry
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:57 turris kresd[21258]: [49963.15][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: -1
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 1 for 2620:fe::10#00853; cached RTT: 6333
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 6333 for 2620:fe::fe:10#00853; cached RTT: 6333
May 15 08:20:57 turris kresd[21258]: [49963.15][resl] => id: ‘63786’ querying: ‘2620:fe::10#00853’ score: 1 zone cut: ‘turris.cz.’ qname: ‘turrIs.Cz.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x103d400]: Allocating epoch #0
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) added 4 protocols, 29 ciphersuites, 19 sig algos and 10 groups into priority list
May 15 08:20:57 turris kresd[21258]: [tls_client] set hostname, ret = 0
May 15 08:20:57 turris kresd[21258]: [49963.15][wrkr] => connecting to: ‘2620:fe::10#00853’
May 15 08:20:57 turris kresd[21258]: [wrkr]=> connect to ‘2620:fe::10#00853’ failed (permission denied), flagged as ‘bad’
May 15 08:20:57 turris kresd[21258]: [49963.15][iter] ‘turris.cz.’ type ‘DNSKEY’ new uid was assigned .16, parent uid .13
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: -1
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 1 for 2620:fe::fe:10#00853; cached RTT: 6333
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 1 for 2620:fe::fe:10#00853; cached RTT: 6333
May 15 08:20:57 turris kresd[21258]: [49963.16][resl] => id: ‘09630’ querying: ‘2620:fe::fe:10#00853’ score: 1 zone cut: ‘turris.cz.’ qname: ‘TURRIS.CZ.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1043fb0]: Allocating epoch #0
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) added 4 protocols, 29 ciphersuites, 19 sig algos and 10 groups into priority list
May 15 08:20:57 turris kresd[21258]: [tls_client] set hostname, ret = 0
May 15 08:20:57 turris kresd[21258]: [49963.16][wrkr] => connecting to: ‘2620:fe::fe:10#00853’
May 15 08:20:57 turris kresd[21258]: [wrkr]=> connect to ‘2620:fe::fe:10#00853’ failed (permission denied), flagged as ‘bad’
May 15 08:20:57 turris kresd[21258]: [49963.16][iter] ‘turris.cz.’ type ‘DNSKEY’ new uid was assigned .17, parent uid .13
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 1 for 2620:fe::fe:10#00853; cached RTT: 9500
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: -1
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [49963.17][resl] => id: ‘06726’ querying: ‘2620:fe::fe:10#00853’ score: 1 zone cut: ‘turris.cz.’ qname: ‘TuRrIS.cz.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1071760]: Allocating epoch #0
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) added 4 protocols, 29 ciphersuites, 19 sig algos and 10 groups into priority list
May 15 08:20:57 turris kresd[21258]: [tls_client] set hostname, ret = 0
May 15 08:20:57 turris kresd[21258]: [49963.17][wrkr] => connecting to: ‘2620:fe::fe:10#00853’
May 15 08:20:57 turris kresd[21258]: [wrkr]=> connect to ‘2620:fe::fe:10#00853’ failed (permission denied), flagged as ‘bad’
May 15 08:20:57 turris kresd[21258]: [49963.17][iter] ‘turris.cz.’ type ‘DNSKEY’ new uid was assigned .18, parent uid .13
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: -1
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:57 turris kresd[21258]: [49963.18][resl] => id: ‘45007’ querying: ‘149.112.112.10#00853’ score: 21 zone cut: ‘turris.cz.’ qname: ‘TUrRiS.cZ.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Allocating epoch #0
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) added 4 protocols, 29 ciphersuites, 19 sig algos and 10 groups into priority list
May 15 08:20:57 turris kresd[21258]: [tls_client] set hostname, ret = 0
May 15 08:20:57 turris kresd[21258]: [49963.18][wrkr] => connecting to: ‘149.112.112.10#00853’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x103d400]: Start of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x103d400]: End of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x103d400]: Epoch #0 freed
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1043fb0]: Start of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1043fb0]: End of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1043fb0]: Epoch #0 freed
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1071760]: Start of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1071760]: End of epoch cleanup
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1071760]: Epoch #0 freed
May 15 08:20:57 turris kresd[21258]: [wrkr]=> connected to ‘149.112.112.10#00853’
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Allocating epoch #1
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: Adv. version: 3.3
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 13.02 (GNUTLS_AES_256_GCM_SHA384)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 13.03 (GNUTLS_CHACHA20_POLY1305_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 13.01 (GNUTLS_AES_128_GCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 13.04 (GNUTLS_AES_128_CCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.2c (GNUTLS_ECDHE_ECDSA_AES_256_GCM_SHA384)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite cc.a9 (GNUTLS_ECDHE_ECDSA_CHACHA20_POLY1305)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.ad (GNUTLS_ECDHE_ECDSA_AES_256_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.0a (GNUTLS_ECDHE_ECDSA_AES_256_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.2b (GNUTLS_ECDHE_ECDSA_AES_128_GCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.ac (GNUTLS_ECDHE_ECDSA_AES_128_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.09 (GNUTLS_ECDHE_ECDSA_AES_128_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.30 (GNUTLS_ECDHE_RSA_AES_256_GCM_SHA384)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite cc.a8 (GNUTLS_ECDHE_RSA_CHACHA20_POLY1305)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.14 (GNUTLS_ECDHE_RSA_AES_256_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.2f (GNUTLS_ECDHE_RSA_AES_128_GCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.13 (GNUTLS_ECDHE_RSA_AES_128_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.9d (GNUTLS_RSA_AES_256_GCM_SHA384)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.9d (GNUTLS_RSA_AES_256_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.35 (GNUTLS_RSA_AES_256_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.9c (GNUTLS_RSA_AES_128_GCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.9c (GNUTLS_RSA_AES_128_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.2f (GNUTLS_RSA_AES_128_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.9f (GNUTLS_DHE_RSA_AES_256_GCM_SHA384)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite cc.aa (GNUTLS_DHE_RSA_CHACHA20_POLY1305)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.9f (GNUTLS_DHE_RSA_AES_256_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.39 (GNUTLS_DHE_RSA_AES_256_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.9e (GNUTLS_DHE_RSA_AES_128_GCM_SHA256)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite c0.9e (GNUTLS_DHE_RSA_AES_128_CCM)
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Keeping ciphersuite 00.33 (GNUTLS_DHE_RSA_AES_128_CBC_SHA1)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (OCSP Status Request/5) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension OCSP Status Request/5 (5 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Client Certificate Type/19) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Server Certificate Type/20) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Supported Groups/10) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group SECP256R1 (0x17)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group SECP384R1 (0x18)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group SECP521R1 (0x19)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group X25519 (0x1d)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group X448 (0x1e)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group FFDHE2048 (0x100)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group FFDHE3072 (0x101)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group FFDHE4096 (0x102)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group FFDHE6144 (0x103)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sent group FFDHE8192 (0x104)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Supported Groups/10 (22 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Supported EC Point Formats/11) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Supported EC Point Formats/11 (2 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Signature Algorithms/13) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (4.1) RSA-SHA256
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.9) RSA-PSS-SHA256
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.4) RSA-PSS-RSAE-SHA256
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (4.3) ECDSA-SHA256
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.7) EdDSA-Ed25519
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (5.1) RSA-SHA384
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.10) RSA-PSS-SHA384
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.5) RSA-PSS-RSAE-SHA384
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (5.3) ECDSA-SHA384
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.8) EdDSA-Ed448
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (6.1) RSA-SHA512
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.11) RSA-PSS-SHA512
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (8.6) RSA-PSS-RSAE-SHA512
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (6.3) ECDSA-SHA512
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (2.1) RSA-SHA1
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sent signature algo (2.3) ECDSA-SHA1
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Signature Algorithms/13 (34 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (SRTP/14) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Heartbeat/15) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (ALPN/16) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Encrypt-then-MAC/22) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Encrypt-then-MAC/22 (0 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Extended Master Secret/23) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Extended Master Secret/23 (0 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Session Ticket/35) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Session Ticket/35 (0 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Key Share/51) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sending key share for SECP256R1
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: sending key share for X25519
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Key Share/51 (107 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Supported Versions/43) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Advertizing version 3.4
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) Advertizing version 3.3
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Supported Versions/43 (5 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Post Handshake Auth/49) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Safe Renegotiation/65281) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Safe Renegotiation/65281 (1 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Server Name Indication/0) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (2) HSK[0x1072c40]: sent server name: ‘dns.quad9.net’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Server Name Indication/0 (18 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Cookie/44) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Early Data/42) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (PSK Key Exchange Modes/45) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension PSK Key Exchange Modes/45 (3 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Record Size Limit/28) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Sending extension Record Size Limit/28 (2 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Maximum Record Size/1) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (ClientHello Padding/21) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Preparing extension (Pre Shared Key/41) for ‘client hello’
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: CLIENT HELLO was queued [354 bytes]
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Preparing Packet Handshake(22) with length: 354 and min pad: 0
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Sent Packet[1] Handshake(22) in epoch 0 and length: 359
May 15 08:20:57 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:57 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:57 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Handshake packet received. Epoch 0, length: 123
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Handshake(22) with length: 123
May 15 08:20:57 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[0] Handshake(22) with length: 123
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: SERVER HELLO (2) was received. Length 119[119], frag offset 0, frag length: 119, sequence: 0
May 15 08:20:57 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1160
May 15 08:20:57 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_handshake_io_recv_int]:1411
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: Server’s version: 3.3
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Parsing extension ‘Supported Versions/43’ (2 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Negotiated version: 3.4
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: Selected cipher suite: GNUTLS_AES_256_GCM_SHA384
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Parsing extension ‘Key Share/51’ (69 bytes)
May 15 08:20:57 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: Selected group SECP256R1 (2)
May 15 08:20:58 turris kresd[21258]: [gnutls] (2) EXT[0x1072c40]: client generated SECP256R1 shared key
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Preparing Packet ChangeCipherSpec(20) with length: 1 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Sent Packet[2] ChangeCipherSpec(20) in epoch 0 and length: 6
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) REC[0x1072c40]: Sent ChangeCipherSpec
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Initializing epoch #1
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Epoch #1 ready
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: TLS 1.3 re-key with cipher suite: GNUTLS_AES_256_GCM_SHA384
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 ChangeCipherSpec packet received. Epoch 1, length: 1
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet ChangeCipherSpec(20) with length: 1
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 1, length: 39
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 39
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[0] Handshake(22) with length: 22
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: ENCRYPTED EXTENSIONS (8) was received. Length 18[18], frag offset 0, frag length: 18, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: parsing encrypted extensions
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) EXT[0x1072c40]: Parsing extension ‘Supported Groups/10’ (12 bytes)
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 1, length: 2542
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 2542
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:617
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_in_buffers]:1324
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: tls13/certificate_request.c[_gnutls13_recv_certificate_request]:226
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 1, length: 2542
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 2542
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[1] Handshake(22) with length: 2525
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: CERTIFICATE (11) was received. Length 2521[2521], frag offset 0, frag length: 2521, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1160
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_handshake_io_recv_int]:1411
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: parsing certificate message
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 1, length: 95
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 95
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[2] Handshake(22) with length: 78
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: CERTIFICATE VERIFY (15) was received. Length 74[74], frag offset 0, frag length: 74, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: Parsing certificate verify
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: verifying TLS 1.3 handshake data using ECDSA-SECP256R1-SHA256
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: ocsp-api.c[gnutls_ocsp_status_request_get2]:99
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: ocsp-api.c[gnutls_ocsp_status_request_get2]:99
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: name_constraints.c[gnutls_x509_crt_get_name_constraints]:469
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: name_constraints.c[gnutls_x509_crt_get_name_constraints]:469
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 1, length: 69
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Handshake(22)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 69
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[3] Handshake(22) with length: 52
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: FINISHED (20) was received. Length 48[48], frag offset 0, frag length: 48, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: parsing finished
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: sending finished
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: FINISHED was queued [52 bytes]
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Preparing Packet Handshake(22) with length: 52 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Sent Packet[1] Handshake(22) in epoch 1 and length: 74
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: constate.c[_gnutls_epoch_get]:931
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Allocating epoch #2
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Initializing epoch #2
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Epoch #2 ready
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: TLS 1.3 re-key with cipher suite: GNUTLS_AES_256_GCM_SHA384
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Start of epoch cleanup
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Epoch #0 freed
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Epoch #1 freed
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: End of epoch cleanup
May 15 08:20:58 turris kresd[21258]: [tls_client] TLS handshake with 149.112.112.10#00853 has completed
May 15 08:20:58 turris kresd[21258]: [tls_client] TLS session has not resumed
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Preparing Packet Application Data(23) with length: 40 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Sent Packet[1] Application Data(23) in epoch 2 and length: 62
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 2, length: 234
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 234
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[0] Handshake(22) with length: 217
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: NEW SESSION TICKET (4) was received. Length 213[213], frag offset 0, frag length: 213, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_handshake_io_recv_int]:1429
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: parsing session ticket message
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_in_buffers]:1577
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 2, length: 234
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 234
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[1] Handshake(22) with length: 217
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[get_last_packet]:1169
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: NEW SESSION TICKET (4) was received. Length 213[213], frag offset 0, frag length: 213, sequence: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_handshake_io_recv_int]:1429
May 15 08:20:58 turris kresd[21258]: [gnutls] (4) HSK[0x1072c40]: parsing session ticket message
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_in_buffers]:1577
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 2, length: 322
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 322
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[2] Application Data(23) with length: 305
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [49963.18][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 45007
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: turris.cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: turris.cz. 224 DNSKEY 257 3 13 KDAJfPGWgvNAEHUMzmmSa+c3gHfoGIsXnhIO1iAYGTAyVBo+CLTyIk3wxDtt4Yn3eCrCiYsEAHBJgQvA3pwJ8w==
May 15 08:20:58 turris kresd[21258]: turris.cz. 224 DNSKEY 256 3 13 CAH1yUvMrTHW3F9ZbwuQ7P3zeGRpagasOyBzJhL7oY6yADz9x2ATGLml3MYQc2VOQHbb8fvVoDxtcRTOigTwlA==
May 15 08:20:58 turris kresd[21258]: turris.cz. 1800 RRSIG DNSKEY 13 2 1800 20210528064621 20210514051621 54959 turris.cz. u4f5Xeb9jZIDKVLuM1Dkr4IgJXij4jOgsVLWXqoteUPGz9xCN4RQ5VfDRUIQE6kvEQhtCpQXbsGfxC/0/N1eAA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [49963.18][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [49963.18][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [49963.18][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [49963.18][cach] => stashed turris.cz. DNSKEY, rank 060, 250 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [49963.18][resl] <= server: ‘149.112.112.10’ rtt: 57 ms
May 15 08:20:58 turris kresd[21258]: [49963.13][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .19, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 57
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 1 for 2620:fe::10#00853; cached RTT: 9500
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [49963.19][resl] => id: ‘06341’ querying: ‘2620:fe::10#00853’ score: 1 zone cut: ‘turris.cz.’ qname: ‘APi.TURRIs.cz.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1059760]: Allocating epoch #0
May 15 08:20:58 turris kresd[21258]: [gnutls] (2) added 4 protocols, 29 ciphersuites, 19 sig algos and 10 groups into priority list
May 15 08:20:58 turris kresd[21258]: [tls_client] set hostname, ret = 0
May 15 08:20:58 turris kresd[21258]: [49963.19][wrkr] => connecting to: ‘2620:fe::10#00853’
May 15 08:20:58 turris kresd[21258]: [wrkr]=> connect to ‘2620:fe::10#00853’ failed (permission denied), flagged as ‘bad’
May 15 08:20:58 turris kresd[21258]: [49963.19][iter] ‘api.turris.cz.’ type ‘A’ new uid was assigned .20, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 57
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [49963.20][resl] => id: ‘58842’ querying: ‘149.112.112.10#00853’ score: 21 zone cut: ‘turris.cz.’ qname: ‘API.tUrRIS.CZ.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Preparing Packet Application Data(23) with length: 44 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Sent Packet[2] Application Data(23) in epoch 2 and length: 66
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1059760]: Start of epoch cleanup
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1059760]: End of epoch cleanup
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1059760]: Epoch #0 freed
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: SSL 3.3 Application Data packet received. Epoch 2, length: 182
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Received Packet Application Data(23) with length: 182
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x1072c40]: Decrypted Packet[3] Application Data(23) with length: 165
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [49963.20][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 58842
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: api.turris.cz. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: api.turris.cz. 1800 A 217.31.192.101
May 15 08:20:58 turris kresd[21258]: api.turris.cz. 1800 RRSIG A 13 3 1800 20210528054621 20210514041621 1340 turris.cz. aQO4uLDnBV/7YrGKM0aSKyzM5hY/avwTGvifLndF9btiB4T4fwy0kYhQbAhWbkno+mzZNurQAlrOjDU9h/YcRQ==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [49963.20][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [49963.20][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [49963.20][cach] => stashed api.turris.cz. A, rank 060, 116 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [49963.20][resl] <= server: ‘149.112.112.10’ rtt: 41 ms
May 15 08:20:58 turris kresd[21258]: [49963.20][resl] AD: request classified as SECURE
May 15 08:20:58 turris kresd[21258]: [49963.20][resl] finished in state: 4, queries: 6, mempool: 16392 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec api.turris.cz
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49963
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;api.turris.cz. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; ANSWER SECTION:
May 15 08:20:58 turris resolver-debug: api.turris.cz. 1800 IN A 217.31.192.101
May 15 08:20:58 turris resolver-debug: api.turris.cz. 1800 IN RRSIG A 13 3 1800 20210528054621 20210514041621 1340 turris.cz. aQO4uLDnBV/7YrGKM0aSKyzM5hY/avwTGvifLndF9btiB4T4fwy0kYhQ bAhWbkno+mzZNurQAlrOjDU9h/YcRQ==
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 100 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 163
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘www.google.com.’ type ‘A’ uid [34034.00]
May 15 08:20:58 turris kresd[21258]: [34034.00][iter] ‘www.google.com.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [34034.01][cach] => satisfied by exact RRset: rank 030, new TTL 61
May 15 08:20:58 turris kresd[21258]: [34034.01][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 60461
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: www.google.com. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: www.google.com. 61 A 172.217.23.228
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [34034.01][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [34034.01][resl] AD: request NOT classified as SECURE
May 15 08:20:58 turris kresd[21258]: [34034.01][resl] finished in state: 4, queries: 1, mempool: 16392 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.google.com
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34034
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;www.google.com. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; ANSWER SECTION:
May 15 08:20:58 turris resolver-debug: www.google.com. 61 IN A 172.217.23.228
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 10 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 59
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘www.facebook.com.’ type ‘A’ uid [56780.00]
May 15 08:20:58 turris kresd[21258]: [56780.00][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.01][cach] => skipping unfit CNAME RR: rank 030, new TTL -3918
May 15 08:20:58 turris kresd[21258]: [56780.01][cach] => no NSEC cached for zone: facebook.com.
May 15 08:20:58 turris kresd[21258]: [56780.01][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.01][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.01][plan] plan ‘.’ type ‘DNSKEY’ uid [56780.02]
May 15 08:20:58 turris kresd[21258]: [56780.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:58 turris kresd[21258]: [56780.03][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [56780.03][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 16589
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.03][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.03][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56780.03][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.01][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.04][plan] plan ‘com.’ type ‘DS’ uid [56780.05]
May 15 08:20:58 turris kresd[21258]: [56780.05][iter] ‘com.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:58 turris kresd[21258]: [56780.06][cach] => satisfied by exact RRset: rank 060, new TTL 12569
May 15 08:20:58 turris kresd[21258]: [56780.06][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 61680
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 12569 DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . BaeyeDQtRZJiC486hjx/XZpwME5ElRn+LkJjWY+EtSoEhgPR4Tw/RRFoI97C2JxheHHRz29gm+UWrw4gT2kaRmkUqLW4fLU7v4NKpNdeKL4tCb9je5XkRCMt+0snJ4B+quyCg7Ar3/GwY9HIrPIoPby01fGDantU41ZOkCHxhoukhpES4sB8BEGUXb52Fo0N3nrCnuZnCBnc7sVb+lkH6Lv0kfBVfdfpZJkMcqqf8E088yIlfepb14bHC85sZlDQdnSYtx+RUqba+eoAR15eapn1BStkG3IbvM1M18weKi6/XV2Ss9QJ15eNm2JkQQKdKBQEKZHUtLCQPfdD+JXorw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.06][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.06][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [56780.06][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56780.06][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.04][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.07][plan] plan ‘com.’ type ‘DNSKEY’ uid [56780.08]
May 15 08:20:58 turris kresd[21258]: [56780.08][iter] ‘com.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:58 turris kresd[21258]: [56780.09][cach] => satisfied by exact RRset: rank 060, new TTL 15754
May 15 08:20:58 turris kresd[21258]: [56780.09][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 19261
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.09][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.09][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56780.09][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.07][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.10][plan] plan ‘facebook.com.’ type ‘DS’ uid [56780.11]
May 15 08:20:58 turris kresd[21258]: [56780.11][iter] ‘facebook.com.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:58 turris kresd[21258]: [56780.12][cach] => no NSEC* cached for zone: com.
May 15 08:20:58 turris kresd[21258]: [56780.12][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.12][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 53
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56780.12][resl] => id: ‘49877’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘FAcebOOK.COm.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 43 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[2] Application Data(23) in epoch 2 and length: 65
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 877
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 877
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[3] Application Data(23) with length: 860
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56780.12][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 49877
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; AUTHORITY SECTION
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 28535 NSEC3 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400 RRSIG NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
May 15 08:20:58 turris kresd[21258]: com. 899 SOA a.gtld-servers.net. nstld.verisign-grs.com. 1621066832 1800 900 604800 86400
May 15 08:20:58 turris kresd[21258]: com. 900 RRSIG SOA 8 1 900 20210522082032 20210515071032 54714 com. XBLbxrCdKmqXL3BgBH56wO/jbO2LL58MYANVq1GHGEOWYQxydackhxXZd2vGa6LOndGAjfVlAyCQOir80OPgIc1WxnmVUibE2VV219wjZt1QiCoBJ07DBtCPUtBOp5kh8g46R+gvsGfLVEKpzyqZ2SXuqF+pdim9SdNnnjyRL1bXDcAD2/t1rjNyBokkosGMo37MjB8zmZsdn/BsmIul/w==
May 15 08:20:58 turris kresd[21258]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 31611 NSEC3 1 1 0 - i28gltlv5d2h16bes4t7ghh4aabnfob0 NS DS RRSIG
May 15 08:20:58 turris kresd[21258]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400 RRSIG NSEC3 8 2 86400 20210519050247 20210512035247 54714 com. pkmOdKvSyf5cSK7a9HVVK0y+VdXLsUjC8eaQZtDrHH7KhN108B54Dko4YrvIi0T7H71aHDd1+kAL0oy1+XW6h2l4tCTpcRZkbVr0XJXd1P5XZYrlWw5ALRj8RN3/nsGSZst73JvnrKasPX5MiK6os6DvqeAPT3oelRKGoTekETuyAM7RTV8n+umNPueHShTFUM3k97a87bOT4YXJFxOZYw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.12][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.12][vldr] <= can’t prove NODATA due to optout, going insecure
May 15 08:20:58 turris kresd[21258]: [56780.12][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56780.12][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.12][cach] => stashed com. SOA, rank 060, 266 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56780.12][cach] => stashed packet: rank 060, TTL 899, DS facebook.com. (870 B)
May 15 08:20:58 turris kresd[21258]: [56780.12][resl] <= server: ‘9.9.9.10’ rtt: 10 ms
May 15 08:20:58 turris kresd[21258]: [56780.10][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.13][plan] plan ‘facebook.com.’ type ‘NS’ uid [56780.14]
May 15 08:20:58 turris kresd[21258]: [56780.14][iter] ‘facebook.com.’ type ‘NS’ new uid was assigned .15, parent uid .13
May 15 08:20:58 turris kresd[21258]: [56780.15][cach] => skipping exact RR: rank 010 (min. 030), new TTL 99857
May 15 08:20:58 turris kresd[21258]: [56780.15][cach] => no NSEC* cached for zone: facebook.com.
May 15 08:20:58 turris kresd[21258]: [56780.15][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.15][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 32
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56780.15][resl] => id: ‘44450’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘fAceBooK.COM.’ qtype: ‘NS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 43 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[3] Application Data(23) in epoch 2 and length: 65
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 127
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 127
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[4] Application Data(23) with length: 110
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56780.15][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 44450
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. NS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS d.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS c.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS b.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS a.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.15][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.15][cach] => stashed facebook.com. NS, rank 020, 102 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56780.15][resl] <= server: ‘9.9.9.10’ rtt: 8 ms
May 15 08:20:58 turris kresd[21258]: [56780.13][iter] ‘www.facebook.com.’ type ‘A’ new uid was assigned .16, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 21
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56780.16][resl] => id: ‘48061’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘facebook.com.’ qname: ‘Www.FaCEBOOK.cOM.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 47 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[4] Application Data(23) in epoch 2 and length: 69
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 109
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 109
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[5] Application Data(23) with length: 92
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56780.16][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 48061
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: www.facebook.com. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: www.facebook.com. 764 CNAME star-mini.c10r.facebook.com.
May 15 08:20:58 turris kresd[21258]: star-mini.c10r.facebook.com. 60 A 31.13.84.36
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.16][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.16][iter] <= cname chain, following
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘star-mini.c10r.facebook.com.’ type ‘A’ uid [56780.17]
May 15 08:20:58 turris kresd[21258]: [56780.16][cach] => stashed www.facebook.com. CNAME, rank 030, 46 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56780.16][resl] <= server: ‘9.9.9.10’ rtt: 9 ms
May 15 08:20:58 turris kresd[21258]: [56780.17][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .18, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.18][cach] => skipping exact RR: rank 030 (min. 030), new TTL -1597
May 15 08:20:58 turris kresd[21258]: [56780.18][cach] => no NSEC* cached for zone: c10r.facebook.com.
May 15 08:20:58 turris kresd[21258]: [56780.18][cach] => skipping zone: c10r.facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.18][cach] => skipping zone: c10r.facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.18][plan] plan ‘.’ type ‘DNSKEY’ uid [56780.19]
May 15 08:20:58 turris kresd[21258]: [56780.19][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .20, parent uid .18
May 15 08:20:58 turris kresd[21258]: [56780.20][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [56780.20][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 35520
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.20][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.20][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56780.20][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.18][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .21, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.21][plan] plan ‘com.’ type ‘DS’ uid [56780.22]
May 15 08:20:58 turris kresd[21258]: [56780.22][iter] ‘com.’ type ‘DS’ new uid was assigned .23, parent uid .21
May 15 08:20:58 turris kresd[21258]: [56780.23][cach] => satisfied by exact RRset: rank 060, new TTL 12569
May 15 08:20:58 turris kresd[21258]: [56780.23][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 44648
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 12569 DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . BaeyeDQtRZJiC486hjx/XZpwME5ElRn+LkJjWY+EtSoEhgPR4Tw/RRFoI97C2JxheHHRz29gm+UWrw4gT2kaRmkUqLW4fLU7v4NKpNdeKL4tCb9je5XkRCMt+0snJ4B+quyCg7Ar3/GwY9HIrPIoPby01fGDantU41ZOkCHxhoukhpES4sB8BEGUXb52Fo0N3nrCnuZnCBnc7sVb+lkH6Lv0kfBVfdfpZJkMcqqf8E088yIlfepb14bHC85sZlDQdnSYtx+RUqba+eoAR15eapn1BStkG3IbvM1M18weKi6/XV2Ss9QJ15eNm2JkQQKdKBQEKZHUtLCQPfdD+JXorw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.23][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.23][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [56780.23][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56780.23][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.21][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .24, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.24][plan] plan ‘com.’ type ‘DNSKEY’ uid [56780.25]
May 15 08:20:58 turris kresd[21258]: [56780.25][iter] ‘com.’ type ‘DNSKEY’ new uid was assigned .26, parent uid .24
May 15 08:20:58 turris kresd[21258]: [56780.26][cach] => satisfied by exact RRset: rank 060, new TTL 15754
May 15 08:20:58 turris kresd[21258]: [56780.26][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 3510
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.26][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.26][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56780.26][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.24][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .27, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.27][plan] plan ‘facebook.com.’ type ‘DS’ uid [56780.28]
May 15 08:20:58 turris kresd[21258]: [56780.28][iter] ‘facebook.com.’ type ‘DS’ new uid was assigned .29, parent uid .27
May 15 08:20:58 turris kresd[21258]: [56780.29][cach] => satisfied by exact packet: rank 060, new TTL 899
May 15 08:20:58 turris kresd[21258]: [56780.29][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 43463
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa rd ra cd QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; AUTHORITY SECTION
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 28535 NSEC3 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400 RRSIG NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
May 15 08:20:58 turris kresd[21258]: com. 899 SOA a.gtld-servers.net. nstld.verisign-grs.com. 1621066832 1800 900 604800 86400
May 15 08:20:58 turris kresd[21258]: com. 900 RRSIG SOA 8 1 900 20210522082032 20210515071032 54714 com. XBLbxrCdKmqXL3BgBH56wO/jbO2LL58MYANVq1GHGEOWYQxydackhxXZd2vGa6LOndGAjfVlAyCQOir80OPgIc1WxnmVUibE2VV219wjZt1QiCoBJ07DBtCPUtBOp5kh8g46R+gvsGfLVEKpzyqZ2SXuqF+pdim9SdNnnjyRL1bXDcAD2/t1rjNyBokkosGMo37MjB8zmZsdn/BsmIul/w==
May 15 08:20:58 turris kresd[21258]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 31611 NSEC3 1 1 0 - i28gltlv5d2h16bes4t7ghh4aabnfob0 NS DS RRSIG
May 15 08:20:58 turris kresd[21258]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400 RRSIG NSEC3 8 2 86400 20210519050247 20210512035247 54714 com. pkmOdKvSyf5cSK7a9HVVK0y+VdXLsUjC8eaQZtDrHH7KhN108B54Dko4YrvIi0T7H71aHDd1+kAL0oy1+XW6h2l4tCTpcRZkbVr0XJXd1P5XZYrlWw5ALRj8RN3/nsGSZst73JvnrKasPX5MiK6os6DvqeAPT3oelRKGoTekETuyAM7RTV8n+umNPueHShTFUM3k97a87bOT4YXJFxOZYw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.29][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.29][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56780.29][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56780.27][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .30, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56780.30][plan] plan ‘facebook.com.’ type ‘NS’ uid [56780.31]
May 15 08:20:58 turris kresd[21258]: [56780.31][iter] ‘facebook.com.’ type ‘NS’ new uid was assigned .32, parent uid .30
May 15 08:20:58 turris kresd[21258]: [56780.32][cach] => skipping exact RR: rank 020 (min. 030), new TTL 10462
May 15 08:20:58 turris kresd[21258]: [56780.32][cach] => no NSEC* cached for zone: facebook.com.
May 15 08:20:58 turris kresd[21258]: [56780.32][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56780.32][cach] => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 16
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56780.32][resl] => id: ‘02415’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘FaCebook.COm.’ qtype: ‘NS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 43 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[5] Application Data(23) in epoch 2 and length: 65
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 127
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 127
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[6] Application Data(23) with length: 110
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56780.32][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 2415
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. NS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS d.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS c.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS b.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]: facebook.com. 10462 NS a.ns.facebook.com.
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.32][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.32][cach] => not overwriting NS facebook.com.
May 15 08:20:58 turris kresd[21258]: [56780.32][resl] <= server: ‘9.9.9.10’ rtt: 12 ms
May 15 08:20:58 turris kresd[21258]: [56780.30][iter] ‘star-mini.c10r.facebook.com.’ type ‘A’ new uid was assigned .33, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 14
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56780.33][resl] => id: ‘58804’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘facebook.com.’ qname: ‘STAR-MIni.c10R.FaCeBOoK.COM.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 58 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[6] Application Data(23) in epoch 2 and length: 80
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 91
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 91
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[7] Application Data(23) with length: 74
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56780.33][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 58804
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: star-mini.c10r.facebook.com. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: star-mini.c10r.facebook.com. 60 A 31.13.84.36
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56780.33][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56780.33][cach] => stashed star-mini.c10r.facebook.com. A, rank 030, 20 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56780.33][resl] <= server: ‘9.9.9.10’ rtt: 22 ms
May 15 08:20:58 turris kresd[21258]: [56780.33][resl] AD: request NOT classified as SECURE
May 15 08:20:58 turris kresd[21258]: [56780.33][resl] finished in state: 4, queries: 12, mempool: 32784 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.facebook.com
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56780
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;www.facebook.com. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; ANSWER SECTION:
May 15 08:20:58 turris resolver-debug: www.facebook.com. 764 IN CNAME star-mini.c10r.facebook.com.
May 15 08:20:58 turris resolver-debug: star-mini.c10r.facebook.com. 60 IN A 31.13.84.36
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 60 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 90
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘www.youtube.com.’ type ‘A’ uid [24443.00]
May 15 08:20:58 turris kresd[21258]: [24443.00][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.01][cach] => skipping unfit CNAME RR: rank 030, new TTL -8502
May 15 08:20:58 turris kresd[21258]: [24443.01][cach] => skipping unfit NS RR: rank 010, new TTL -51498
May 15 08:20:58 turris kresd[21258]: [24443.01][cach] => no NSEC* cached for zone: com.
May 15 08:20:58 turris kresd[21258]: [24443.01][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.01][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.01][plan] plan ‘.’ type ‘DNSKEY’ uid [24443.02]
May 15 08:20:58 turris kresd[21258]: [24443.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:58 turris kresd[21258]: [24443.03][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [24443.03][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 16349
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.03][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.03][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [24443.03][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.01][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.04][plan] plan ‘com.’ type ‘DS’ uid [24443.05]
May 15 08:20:58 turris kresd[21258]: [24443.05][iter] ‘com.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:58 turris kresd[21258]: [24443.06][cach] => satisfied by exact RRset: rank 060, new TTL 12569
May 15 08:20:58 turris kresd[21258]: [24443.06][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 21416
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 12569 DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . BaeyeDQtRZJiC486hjx/XZpwME5ElRn+LkJjWY+EtSoEhgPR4Tw/RRFoI97C2JxheHHRz29gm+UWrw4gT2kaRmkUqLW4fLU7v4NKpNdeKL4tCb9je5XkRCMt+0snJ4B+quyCg7Ar3/GwY9HIrPIoPby01fGDantU41ZOkCHxhoukhpES4sB8BEGUXb52Fo0N3nrCnuZnCBnc7sVb+lkH6Lv0kfBVfdfpZJkMcqqf8E088yIlfepb14bHC85sZlDQdnSYtx+RUqba+eoAR15eapn1BStkG3IbvM1M18weKi6/XV2Ss9QJ15eNm2JkQQKdKBQEKZHUtLCQPfdD+JXorw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.06][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.06][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [24443.06][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [24443.06][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.04][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.07][plan] plan ‘com.’ type ‘DNSKEY’ uid [24443.08]
May 15 08:20:58 turris kresd[21258]: [24443.08][iter] ‘com.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:58 turris kresd[21258]: [24443.09][cach] => satisfied by exact RRset: rank 060, new TTL 15754
May 15 08:20:58 turris kresd[21258]: [24443.09][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 9201
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.09][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.09][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [24443.09][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.07][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.10][plan] plan ‘youtube.com.’ type ‘DS’ uid [24443.11]
May 15 08:20:58 turris kresd[21258]: [24443.11][iter] ‘youtube.com.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:58 turris kresd[21258]: [24443.12][cach] => no NSEC* cached for zone: com.
May 15 08:20:58 turris kresd[21258]: [24443.12][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.12][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 18
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [24443.12][resl] => id: ‘08305’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘yOuTuBe.cOm.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 42 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[7] Application Data(23) in epoch 2 and length: 64
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 876
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 876
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[8] Application Data(23) with length: 859
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [24443.12][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 8305
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: youtube.com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; AUTHORITY SECTION
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 28535 NSEC3 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400 RRSIG NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
May 15 08:20:58 turris kresd[21258]: com. 899 SOA a.gtld-servers.net. nstld.verisign-grs.com. 1621066832 1800 900 604800 86400
May 15 08:20:58 turris kresd[21258]: com. 900 RRSIG SOA 8 1 900 20210522082032 20210515071032 54714 com. XBLbxrCdKmqXL3BgBH56wO/jbO2LL58MYANVq1GHGEOWYQxydackhxXZd2vGa6LOndGAjfVlAyCQOir80OPgIc1WxnmVUibE2VV219wjZt1QiCoBJ07DBtCPUtBOp5kh8g46R+gvsGfLVEKpzyqZ2SXuqF+pdim9SdNnnjyRL1bXDcAD2/t1rjNyBokkosGMo37MjB8zmZsdn/BsmIul/w==
May 15 08:20:58 turris kresd[21258]: h5aj1qk46hihd9n86a92viqa2a43nhh9.com. 31361 NSEC3 1 1 0 - h5aj7qcthpguktblcko011olsfc6o1sr NS DS RRSIG
May 15 08:20:58 turris kresd[21258]: h5aj1qk46hihd9n86a92viqa2a43nhh9.com. 86400 RRSIG NSEC3 8 2 86400 20210519045608 20210512034608 54714 com. aGAKAjsAxUyjiGPEeR9zzv0IgfvtgoGzdUWJxwHmODdObPxRyQRJLUtu+zP/sw+k/b4zLn17xcwmBZNoZn3IA6qjNDfvJmABrFXox9CJFVtEq/li0gvr11NHOtAdILt6EQVHBTg7AQCY7qBjsWSlbpz4fZi2r7vICLSCuDo0pNcA65S4TvGuWJqREf3x/C+qbfIVEFXEEyEePDvd8+vSdA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.12][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.12][vldr] <= can’t prove NODATA due to optout, going insecure
May 15 08:20:58 turris kresd[21258]: [24443.12][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [24443.12][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.12][cach] => stashed com. SOA, rank 060, 266 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [24443.12][cach] => stashed packet: rank 060, TTL 899, DS youtube.com. (869 B)
May 15 08:20:58 turris kresd[21258]: [24443.12][resl] <= server: ‘9.9.9.10’ rtt: 9 ms
May 15 08:20:58 turris kresd[21258]: [24443.10][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.13][plan] plan ‘youtube.com.’ type ‘NS’ uid [24443.14]
May 15 08:20:58 turris kresd[21258]: [24443.14][iter] ‘youtube.com.’ type ‘NS’ new uid was assigned .15, parent uid .13
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => skipping exact RR: rank 010 (min. 030), new TTL -51498
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => skipping unfit NS RR: rank 010, new TTL -51498
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => no NSEC* cached for zone: com.
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => skipping zone: com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 14
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [24443.15][resl] => id: ‘00682’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘youtUbe.com.’ qtype: ‘NS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 42 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[8] Application Data(23) in epoch 2 and length: 64
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 138
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 138
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[9] Application Data(23) with length: 121
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [24443.15][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 682
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: youtube.com. NS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: youtube.com. 35195 NS ns3.google.com.
May 15 08:20:58 turris kresd[21258]: youtube.com. 35195 NS ns1.google.com.
May 15 08:20:58 turris kresd[21258]: youtube.com. 35195 NS ns4.google.com.
May 15 08:20:58 turris kresd[21258]: youtube.com. 35195 NS ns2.google.com.
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.15][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.15][cach] => stashed youtube.com. NS, rank 020, 86 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [24443.15][resl] <= server: ‘9.9.9.10’ rtt: 9 ms
May 15 08:20:58 turris kresd[21258]: [24443.13][iter] ‘www.youtube.com.’ type ‘A’ new uid was assigned .16, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 12
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [24443.16][resl] => id: ‘00604’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘youtube.com.’ qname: ‘WWW.YoUTUbe.COm.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 46 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[9] Application Data(23) in epoch 2 and length: 68
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 129
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 129
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[10] Application Data(23) with length: 112
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [24443.16][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 604
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: www.youtube.com. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: www.youtube.com. 37600 CNAME youtube-ui.l.google.com.
May 15 08:20:58 turris kresd[21258]: youtube-ui.l.google.com. 75 A 172.217.23.238
May 15 08:20:58 turris kresd[21258]: youtube-ui.l.google.com. 75 A 216.58.201.78
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.16][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.16][iter] <= cname chain, following
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘youtube-ui.l.google.com.’ type ‘A’ uid [24443.17]
May 15 08:20:58 turris kresd[21258]: [24443.16][cach] => stashed www.youtube.com. CNAME, rank 030, 42 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [24443.16][resl] <= server: ‘9.9.9.10’ rtt: 8 ms
May 15 08:20:58 turris kresd[21258]: [24443.17][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .18, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.18][cach] => skipping exact RR: rank 030 (min. 030), new TTL -92198
May 15 08:20:58 turris kresd[21258]: [24443.18][cach] => no NSEC* cached for zone: google.com.
May 15 08:20:58 turris kresd[21258]: [24443.18][cach] => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.18][cach] => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.18][plan] plan ‘.’ type ‘DNSKEY’ uid [24443.19]
May 15 08:20:58 turris kresd[21258]: [24443.19][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .20, parent uid .18
May 15 08:20:58 turris kresd[21258]: [24443.20][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [24443.20][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 16113
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.20][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.20][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [24443.20][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.18][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .21, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.21][plan] plan ‘com.’ type ‘DS’ uid [24443.22]
May 15 08:20:58 turris kresd[21258]: [24443.22][iter] ‘com.’ type ‘DS’ new uid was assigned .23, parent uid .21
May 15 08:20:58 turris kresd[21258]: [24443.23][cach] => satisfied by exact RRset: rank 060, new TTL 12569
May 15 08:20:58 turris kresd[21258]: [24443.23][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 65040
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 12569 DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . BaeyeDQtRZJiC486hjx/XZpwME5ElRn+LkJjWY+EtSoEhgPR4Tw/RRFoI97C2JxheHHRz29gm+UWrw4gT2kaRmkUqLW4fLU7v4NKpNdeKL4tCb9je5XkRCMt+0snJ4B+quyCg7Ar3/GwY9HIrPIoPby01fGDantU41ZOkCHxhoukhpES4sB8BEGUXb52Fo0N3nrCnuZnCBnc7sVb+lkH6Lv0kfBVfdfpZJkMcqqf8E088yIlfepb14bHC85sZlDQdnSYtx+RUqba+eoAR15eapn1BStkG3IbvM1M18weKi6/XV2Ss9QJ15eNm2JkQQKdKBQEKZHUtLCQPfdD+JXorw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.23][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.23][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [24443.23][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [24443.23][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.21][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .24, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.24][plan] plan ‘com.’ type ‘DNSKEY’ uid [24443.25]
May 15 08:20:58 turris kresd[21258]: [24443.25][iter] ‘com.’ type ‘DNSKEY’ new uid was assigned .26, parent uid .24
May 15 08:20:58 turris kresd[21258]: [24443.26][cach] => satisfied by exact RRset: rank 060, new TTL 15754
May 15 08:20:58 turris kresd[21258]: [24443.26][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 26091
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: com. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
May 15 08:20:58 turris kresd[21258]: com. 15754 DNSKEY 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
May 15 08:20:58 turris kresd[21258]: com. 86400 RRSIG DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.26][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.26][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [24443.26][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.24][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .27, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.27][plan] plan ‘google.com.’ type ‘DS’ uid [24443.28]
May 15 08:20:58 turris kresd[21258]: [24443.28][iter] ‘google.com.’ type ‘DS’ new uid was assigned .29, parent uid .27
May 15 08:20:58 turris kresd[21258]: [24443.29][cach] => satisfied by exact packet: rank 060, new TTL 415
May 15 08:20:58 turris kresd[21258]: [24443.29][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 36391
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa rd ra cd QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: ; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: google.com. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; AUTHORITY SECTION
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 21115 NSEC3 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
May 15 08:20:58 turris kresd[21258]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400 RRSIG NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
May 15 08:20:58 turris kresd[21258]: com. 415 SOA a.gtld-servers.net. nstld.verisign-grs.com. 1621066352 1800 900 604800 86400
May 15 08:20:58 turris kresd[21258]: com. 900 RRSIG SOA 8 1 900 20210522081232 20210515070232 54714 com. bZUUe9x5c16davYCepJSoHhKMArrPPLY1A2uYiS69O4kNwZRXa/ZHIFRPSbQ5t2bVEQN6xze98PeSMrtumLIE6X9HjOzEOmn9jKBfNChpf/F4ynkWDBUeYwnia1Zvl3dWA6O2CfahGsflABw853HLO7n2lzUi4D41BjDc3NUV+7j+7t5hRG4DKYz1IhW8qm9oQgFxEFQHnwFP5nTobJP1g==
May 15 08:20:58 turris kresd[21258]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 21115 NSEC3 1 1 0 - s84buo64gqcvn69rjfuo6lvc7fslunj5 NS DS RRSIG
May 15 08:20:58 turris kresd[21258]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 86400 RRSIG NSEC3 8 2 86400 20210521042131 20210514031131 54714 com. UnNpS1ngq1wh1n6ppGgvAfMrwbCnUyhkxqx2cOwRMPt4GG1yRoBtHs81TAfjRONF1g9D59c0eH+OH/G/+hPqkrV4XS29QFJ0JvqeUWUz3IH8nv+wqTUUU0ZC3V/spRFudaEz3FKWWISc9pt2i+o/VNh0BZU3Mzj38yX4VzWe7m5jfLEbWcLfElQ7X4loYs79/BTfbgIbArCdzTyr1elYhQ==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.29][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.29][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [24443.29][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [24443.27][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .30, parent uid .00
May 15 08:20:58 turris kresd[21258]: [24443.30][plan] plan ‘google.com.’ type ‘NS’ uid [24443.31]
May 15 08:20:58 turris kresd[21258]: [24443.31][iter] ‘google.com.’ type ‘NS’ new uid was assigned .32, parent uid .30
May 15 08:20:58 turris kresd[21258]: [24443.32][cach] => skipping exact RR: rank 020 (min. 030), new TTL 16051
May 15 08:20:58 turris kresd[21258]: [24443.32][cach] => no NSEC* cached for zone: google.com.
May 15 08:20:58 turris kresd[21258]: [24443.32][cach] => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [24443.32][cach] => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 11
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [24443.32][resl] => id: ‘32804’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘com.’ qname: ‘gOOGLe.COM.’ qtype: ‘NS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 41 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[10] Application Data(23) in epoch 2 and length: 63
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 130
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 130
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[11] Application Data(23) with length: 113
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [24443.32][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 32804
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: google.com. NS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: google.com. 30526 NS ns2.google.com.
May 15 08:20:58 turris kresd[21258]: google.com. 30526 NS ns1.google.com.
May 15 08:20:58 turris kresd[21258]: google.com. 30526 NS ns3.google.com.
May 15 08:20:58 turris kresd[21258]: google.com. 30526 NS ns4.google.com.
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.32][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.32][cach] => not overwriting NS google.com.
May 15 08:20:58 turris kresd[21258]: [24443.32][resl] <= server: ‘9.9.9.10’ rtt: 13 ms
May 15 08:20:58 turris kresd[21258]: [24443.30][iter] ‘youtube-ui.l.google.com.’ type ‘A’ new uid was assigned .33, parent uid .00
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 12
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [24443.33][resl] => id: ‘48224’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘google.com.’ qname: ‘YoUTUbe-UI.l.GOoglE.Com.’ qtype: ‘A’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 54 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[11] Application Data(23) in epoch 2 and length: 76
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 103
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 103
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[12] Application Data(23) with length: 86
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [24443.33][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 48224
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: youtube-ui.l.google.com. A
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: youtube-ui.l.google.com. 103 A 216.58.201.78
May 15 08:20:58 turris kresd[21258]: youtube-ui.l.google.com. 103 A 172.217.23.238
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [24443.33][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [24443.33][cach] => stashed youtube-ui.l.google.com. A, rank 030, 26 B total, incl. 0 RRSIGs
May 15 08:20:58 turris kresd[21258]: [24443.33][resl] <= server: ‘9.9.9.10’ rtt: 7 ms
May 15 08:20:58 turris kresd[21258]: [24443.33][resl] AD: request NOT classified as SECURE
May 15 08:20:58 turris kresd[21258]: [24443.33][resl] finished in state: 4, queries: 12, mempool: 32784 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.youtube.com
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24443
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;www.youtube.com. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; ANSWER SECTION:
May 15 08:20:58 turris resolver-debug: www.youtube.com. 37600 IN CNAME youtube-ui.l.google.com.
May 15 08:20:58 turris resolver-debug: youtube-ui.l.google.com. 103 IN A 172.217.23.238
May 15 08:20:58 turris resolver-debug: youtube-ui.l.google.com. 103 IN A 216.58.201.78
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 40 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 110
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘www.rhybar.cz.’ type ‘A’ uid [56689.00]
May 15 08:20:58 turris kresd[21258]: [56689.00][iter] ‘www.rhybar.cz.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => skipping unfit NS RR: rank 002, new TTL -397422
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 depth 2: hash 7d2i24qcikd59829i0b8e8duhpi6hllb
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 encloser error for www.rhybar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 depth 1: hash p7t8f2aeaiu0imj16o2f0edjhkn7bev6
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 encloser error for rhybar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.01][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [56689.01][plan] plan ‘.’ type ‘DNSKEY’ uid [56689.02]
May 15 08:20:58 turris kresd[21258]: [56689.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:58 turris kresd[21258]: [56689.03][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [56689.03][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 1841
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56689.03][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56689.03][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56689.03][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56689.01][iter] ‘www.rhybar.cz.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56689.04][plan] plan ‘cz.’ type ‘DS’ uid [56689.05]
May 15 08:20:58 turris kresd[21258]: [56689.05][iter] ‘cz.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:58 turris kresd[21258]: [56689.06][cach] => satisfied by exact RRset: rank 060, new TTL 12578
May 15 08:20:58 turris kresd[21258]: [56689.06][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 19412
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 12578 DS 20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
May 15 08:20:58 turris kresd[21258]: cz. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . bxyZPRaWBOh605EulLjKjzRDXVxfYu5xJgmABSLQJp3bTah+s5PoVqZvY66lfNK+IBArxB9QuYJ3adrCuiKgJNaN4iVtSz3/kEKxE0CtoDtOeCD5wWmbrc3pzgy/cvPWe5XJY7RGJ86L+pi+7nVxkinTrrRA5IMN7xRvNz6MCAUdAAXuuA2bherLEfnrN9CzK0Bn74BwTpPyCcxuITfdchL3vU0xygCA3dizzut2eI7NtHtiCDE3E/7d1CsVVHi4s3GlsNNXnC0EtnEyAdUO6XzRApbG5Kvx0P9xbfxGw3HqDSiPJs08hGq6yTf/eq40hj1i9oPKs/g1X2cvMPItRA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56689.06][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56689.06][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [56689.06][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56689.06][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56689.04][iter] ‘www.rhybar.cz.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56689.07][plan] plan ‘cz.’ type ‘DNSKEY’ uid [56689.08]
May 15 08:20:58 turris kresd[21258]: [56689.08][iter] ‘cz.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:58 turris kresd[21258]: [56689.09][cach] => satisfied by exact RRset: rank 060, new TTL 1149
May 15 08:20:58 turris kresd[21258]: [56689.09][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 33172
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
May 15 08:20:58 turris kresd[21258]: cz. 3600 RRSIG DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56689.09][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56689.09][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [56689.09][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56689.07][iter] ‘www.rhybar.cz.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56689.10][plan] plan ‘rhybar.cz.’ type ‘DS’ uid [56689.11]
May 15 08:20:58 turris kresd[21258]: [56689.11][iter] ‘rhybar.cz.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => skipping exact RR: rank 060 (min. 030), new TTL -397422
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => NSEC3 depth 1: hash p7t8f2aeaiu0imj16o2f0edjhkn7bev6
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => NSEC3 encloser error for rhybar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 11
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56689.12][resl] => id: ‘08349’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘cz.’ qname: ‘RHyBAr.cZ.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 40 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[12] Application Data(23) in epoch 2 and length: 62
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 203
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 203
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[13] Application Data(23) with length: 186
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56689.12][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 8349
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 3600 DS 61281 13 2 3651AA62843DEB5EDAA10F5055717F877E9F2657E701CAB10CF42B43EA8E047E
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 3600 RRSIG DS 13 2 3600 20210525102134 20210511085134 26955 cz. JishGjGJLj6v3SyCP284FQ+rvmFsK3O8AL3HdBX0ZpU+xi+0w4Zfppl8VR8aANQgST+sfNEUeIw+EVMsadSYDw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56689.12][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56689.12][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [56689.12][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [56689.12][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [56689.12][cach] => stashed rhybar.cz. DS, rank 060, 140 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56689.12][resl] <= server: ‘9.9.9.10’ rtt: 10 ms
May 15 08:20:58 turris kresd[21258]: [56689.10][iter] ‘www.rhybar.cz.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:58 turris kresd[21258]: [56689.13][plan] plan ‘rhybar.cz.’ type ‘DNSKEY’ uid [56689.14]
May 15 08:20:58 turris kresd[21258]: [56689.14][iter] ‘rhybar.cz.’ type ‘DNSKEY’ new uid was assigned .15, parent uid .13
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => skipping exact packet: rank 025 (min. 030), new TTL -400422
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => skipping unfit NS RR: rank 002, new TTL -397422
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => NSEC3 depth 1: hash p7t8f2aeaiu0imj16o2f0edjhkn7bev6
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => NSEC3 encloser error for rhybar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 11
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [56689.15][resl] => id: ‘23629’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘rhybar.cz.’ qname: ‘rHYbAR.cz.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 40 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[13] Application Data(23) in epoch 2 and length: 62
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 1095
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 1095
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[14] Application Data(23) with length: 1078
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [56689.15][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 23629
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 5; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 600 DNSKEY 256 3 5 AwEAAb/riVUjNfP1to3wkJyul0MjwiPojFgFmMiLj1KIKeVIYCIRNx01Q1we5M17GQFInCXXyTyjCYJfwkL0Xe7ma6m2pHfEMkOiDl42rsgrmkShxPEvZMd5vpT+RyQWQh26TJ42MRoCJSt6XNeFLXRyjfRcDt7ZxYD3bHNeyaDuUUGt
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 600 DNSKEY 256 3 5 AwEAAcrTMVXwOcFCGKtXwdt4XATP43qU96IryyqiZ0oPtuHEEBCikuQDuJhRjNAV4DYvR6fb/suAnd91EVNgHHTXUlAWwmJRrqIwZ6VuGaZqVG+NJh1Okif7CL8no2Z47j6I3HH3pyzrYH2oQVyr64O/8BV2jrk8RteeEqa7V7gcrFfJ
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 600 DNSKEY 257 3 5 AwEAAeKle4K3bxJb4k9sMhdm6BmpRK2rISAGh0egMSXgOlQnU+3TLQ0aH1th7ejZnn6Zdkeo8MRXDxLkgp1rUSsRM1Q2SmLJhaat7L15qHmj+vCk5IuSIpAdaRsqOKxHlT6a/LWGwGvDIVxY6J9sXaJ4SInflZpa5wZUCrhDKvpo0hAzNfoK/aFApzZGaAGALYx6YpbG+SBW2K+s92eyoJCCrQQ+Nata41l7K6RFAYjP+g3Kp95McNm3xlBve171u9FUZNUuN2Rn25oEtHHlK9NcHNqWvFJ3VmXcA6CkGrBPV6vOAwwUtPDSWSZbdolS69092ZWYTlOJw6g0LVI2feMMrok=
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 600 RRSIG DNSKEY 5 2 600 20081030080058 20080930080058 5172 rhybar.cz. Fh5WqcWoiywSm+t4YhGqVVTb1Revz2BvETgb1uoY9DaREJhTUIq6zTA5xGS2WpAhYmIb8OV259NxT/jEtEdFIlTIz2nDzr1I2ZrDoF/qwfJXvda8zy2wz3AHvou8uLeIBJLQKSpZx1YI3ee9YFFw25yfie9M4g1/PXuMlTHpVVY=
May 15 08:20:58 turris kresd[21258]: rhybar.cz. 600 RRSIG DNSKEY 5 2 600 20081030080058 20080930080058 44566 rhybar.cz. HkcudN72dM/HiqmKMZeOSjE8NavwtkXJ2VGCQ5/RmJphEeSd/IZ4f5I67l+LZjvy+J+fplrvXTSnAx6+y5Z1xvo9HdGhCdUXuh6rIy1OScrUwOPOFJplTqccukafWngoiQZuj9mZS41ZcQA1Js+Q5EzhnmCD/7TuIpmN6V+4eDXQcnf2uagpntWj153yjePdeb2r6NmfDDBQUu6GLIKfI6CtlmsiZWUAJvtBGLK4DxSn/5jxEA9UGHWqiRVxZKk6ssZ71Fuxc5e2D+7j0XKZrw6kA0z3F8dgFuQQxWtVC0wyycE4H+PQbD7ZVkWeCiLgURHpDlizUB+xK1nGuHuE3Q==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [56689.15][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [56689.15][vldr] >< bogus key: rhybar.cz. DNSKEY (0 matching RRSIGs, 0 expired, 0 not yet valid, 0 invalid signer, 0 invalid label count, 0 invalid key, 0 invalid crypto, 0 invalid NSEC)
May 15 08:20:58 turris kresd[21258]: [56689.15][vldr] <= bad keys, broken trust chain
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => stashed rhybar.cz. DNSKEY, rank 020, 1004 B total, incl. 2 RRSIGs
May 15 08:20:58 turris kresd[21258]: [56689.15][cach] => stashed packet: rank 025, TTL 600, DNSKEY rhybar.cz. (1088 B)
May 15 08:20:58 turris kresd[21258]: [56689.00][resl] request failed, answering with empty SERVFAIL
May 15 08:20:58 turris kresd[21258]: [56689.15][resl] finished in state: 8, queries: 4, mempool: 32784 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.rhybar.cz
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56689
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;www.rhybar.cz. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 30 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 42
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan ‘.wilda.rhybar.0skar.cz.’ type ‘A’ uid [63440.00]
May 15 08:20:58 turris kresd[21258]: [63440.00][iter] '.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.01][cach] => skipping exact packet: rank 025 (min. 030), new TTL -400720
May 15 08:20:58 turris kresd[21258]: [63440.01][cach] => trying zone: rhybar.0skar.cz., NSEC, hash 0
May 15 08:20:58 turris kresd[21258]: [63440.01][cach] => NSEC sname: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.01][cach] => skipping zone: rhybar.0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [63440.01][plan] plan ‘.’ type ‘DNSKEY’ uid [63440.02]
May 15 08:20:58 turris kresd[21258]: [63440.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:58 turris kresd[21258]: [63440.03][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [63440.03][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 16729
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.03][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.03][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [63440.03][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.01][iter] ‘.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.04][plan] plan ‘cz.’ type ‘DS’ uid [63440.05]
May 15 08:20:58 turris kresd[21258]: [63440.05][iter] ‘cz.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:58 turris kresd[21258]: [63440.06][cach] => satisfied by exact RRset: rank 060, new TTL 12578
May 15 08:20:58 turris kresd[21258]: [63440.06][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 39223
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 12578 DS 20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
May 15 08:20:58 turris kresd[21258]: cz. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . bxyZPRaWBOh605EulLjKjzRDXVxfYu5xJgmABSLQJp3bTah+s5PoVqZvY66lfNK+IBArxB9QuYJ3adrCuiKgJNaN4iVtSz3/kEKxE0CtoDtOeCD5wWmbrc3pzgy/cvPWe5XJY7RGJ86L+pi+7nVxkinTrrRA5IMN7xRvNz6MCAUdAAXuuA2bherLEfnrN9CzK0Bn74BwTpPyCcxuITfdchL3vU0xygCA3dizzut2eI7NtHtiCDE3E/7d1CsVVHi4s3GlsNNXnC0EtnEyAdUO6XzRApbG5Kvx0P9xbfxGw3HqDSiPJs08hGq6yTf/eq40hj1i9oPKs/g1X2cvMPItRA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.06][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.06][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [63440.06][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [63440.06][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.04][iter] '.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.07][plan] plan ‘cz.’ type ‘DNSKEY’ uid [63440.08]
May 15 08:20:58 turris kresd[21258]: [63440.08][iter] ‘cz.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:58 turris kresd[21258]: [63440.09][cach] => satisfied by exact RRset: rank 060, new TTL 1149
May 15 08:20:58 turris kresd[21258]: [63440.09][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 54035
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
May 15 08:20:58 turris kresd[21258]: cz. 3600 RRSIG DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.09][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.09][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [63440.09][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.07][iter] ‘.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.10][plan] plan ‘0skar.cz.’ type ‘DS’ uid [63440.11]
May 15 08:20:58 turris kresd[21258]: [63440.11][iter] ‘0skar.cz.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => skipping exact RR: rank 060 (min. 030), new TTL -252543
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => trying zone: cz., NSEC3, hash 54864baa
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => NSEC3 depth 1: hash eb6nupltgped0qpluca4u6l5869pr6an
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => NSEC3 encloser error for 0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => NSEC3 depth 0: hash bd6ubc8gcs462qusp56r5g2snc9j66vf
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => NSEC3 encloser error for cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => skipping zone: cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 11
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [63440.12][resl] => id: ‘41342’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘cz.’ qname: ‘0SkAr.Cz.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 39 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[14] Application Data(23) in epoch 2 and length: 61
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 202
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 202
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[15] Application Data(23) with length: 185
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [63440.12][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 41342
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DS 20732 13 2 BD0CD89E39BF808621DC4DE3A4FA51EC4BBA0E987BC9224C51B94A62527E83BC
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 RRSIG DS 13 2 3600 20210525102134 20210511085134 26955 cz. VYaaXlac0sWgNC742A79DVtpyVRcYOgrFaUuFuCncCeiZEtBCewFD7HGSEjjLl2ux7oZ4N6/BIm+2iQo2u0Sog==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.12][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.12][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [63440.12][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [63440.12][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.12][cach] => stashed 0skar.cz. DS, rank 060, 140 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.12][resl] <= server: ‘9.9.9.10’ rtt: 11 ms
May 15 08:20:58 turris kresd[21258]: [63440.10][iter] '.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.13][plan] plan ‘0skar.cz.’ type ‘DNSKEY’ uid [63440.14]
May 15 08:20:58 turris kresd[21258]: [63440.14][iter] ‘0skar.cz.’ type ‘DNSKEY’ new uid was assigned .15, parent uid .13
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => skipping exact RR: rank 060 (min. 030), new TTL -252543
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => trying zone: 0skar.cz., NSEC3, hash cc19ae22
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => NSEC3 depth 0: hash umpdipftsgum51ts6skvu2mkrnojbuvh
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => NSEC3 encloser error for 0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => skipping zone: 0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 11
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [63440.15][resl] => id: ‘13233’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘0skar.cz.’ qname: ‘0skar.cZ.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 39 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[15] Application Data(23) in epoch 2 and length: 61
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 320
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 320
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[16] Application Data(23) with length: 303
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [63440.15][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 13233
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DNSKEY 257 3 13 JSrbBhsD6toRTrAYQO16FlFjr5G3R8QHHjipqgXoHuk63ipIHhpliPbFzmDXw7CmCv3rTV/FWvhe27boFFJQAw==
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DNSKEY 256 3 13 fvjA/6s70GkFfDON7oDbkXhb+r5pGiYdPaQV1n4Y6AHEtTsQlE9XBG8ZBI5DXaIjWs3OurOspqdjBSLk2BcNSA==
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 RRSIG DNSKEY 13 2 3600 20210522192516 20210508175516 20732 0skar.cz. iK+MjbzE52IT5+P6pSp38i212Wz5nvwdTpPhJPdf9dzpiOY5RF+gjD8rRxPbPsV8hOrg2Mq7jl70FZ09jwnLiw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.15][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.15][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [63440.15][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.15][cach] => stashed 0skar.cz. DNSKEY, rank 060, 248 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.15][resl] <= server: ‘9.9.9.10’ rtt: 41 ms
May 15 08:20:58 turris kresd[21258]: [63440.13][iter] ‘.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .16, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.16][plan] plan ‘rhybar.0skar.cz.’ type ‘DS’ uid [63440.17]
May 15 08:20:58 turris kresd[21258]: [63440.17][iter] ‘rhybar.0skar.cz.’ type ‘DS’ new uid was assigned .18, parent uid .16
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => skipping exact RR: rank 060 (min. 030), new TTL -252542
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => trying zone: 0skar.cz., NSEC3, hash cc19ae22
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => NSEC3 depth 1: hash flu932brr0dmjcp8rhbs307d4ds66iaa
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => NSEC3 encloser error for rhybar.0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => NSEC3 depth 0: hash umpdipftsgum51ts6skvu2mkrnojbuvh
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => NSEC3 encloser error for 0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => skipping zone: 0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 26
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [63440.18][resl] => id: ‘14193’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘0skar.cz.’ qname: ‘rhYbAr.0skaR.cZ.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 46 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[16] Application Data(23) in epoch 2 and length: 68
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 215
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 215
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[17] Application Data(23) with length: 198
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [63440.18][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 14193
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 3600 DS 28887 10 2 2A5CBF17973787B57A3FB41FF5169A46CAA1E3C01EED5BD0E8799D7B36A21837
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 3600 RRSIG DS 13 3 3600 20210522172516 20210508155516 45589 0skar.cz. VjoPYSOOLz1Re0bUIWIz89fhPjy3jzSjUe6HMgElXkEO8QLEmMqOzm1S7g/jKSdDWAAUZ0n2iVe0wD2mB2nxAA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.18][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.18][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [63440.18][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [63440.18][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.18][cach] => stashed rhybar.0skar.cz. DS, rank 060, 146 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.18][resl] <= server: ‘9.9.9.10’ rtt: 20 ms
May 15 08:20:58 turris kresd[21258]: [63440.16][iter] '.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .19, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.19][plan] plan ‘rhybar.0skar.cz.’ type ‘DNSKEY’ uid [63440.20]
May 15 08:20:58 turris kresd[21258]: [63440.20][iter] ‘rhybar.0skar.cz.’ type ‘DNSKEY’ new uid was assigned .21, parent uid .19
May 15 08:20:58 turris kresd[21258]: [63440.21][cach] => skipping exact RR: rank 060 (min. 030), new TTL -255842
May 15 08:20:58 turris kresd[21258]: [63440.21][cach] => trying zone: rhybar.0skar.cz., NSEC, hash 0
May 15 08:20:58 turris kresd[21258]: [63440.21][cach] => NSEC sname: range search found inconsistent entry
May 15 08:20:58 turris kresd[21258]: [63440.21][cach] => skipping zone: rhybar.0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 23
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [63440.21][resl] => id: ‘59697’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘rhybar.0skar.cz.’ qname: ‘rhYbAr.0skAR.CZ.’ qtype: ‘DNSKEY’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 46 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[17] Application Data(23) in epoch 2 and length: 68
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 642
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 642
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[18] Application Data(23) with length: 625
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [63440.21][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59697
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra ad cd QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 1232 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 300 DNSKEY 257 3 10 AwEAAcfJERXDHOSg4JsxSO8WmFdi/PPbtgB6N6xDyyaDqRzr9QCL4LXHyLYjGmriFn7xhVDQTyQQp/nox5RK8YeAFHoiglQuwQVs2TyZTAZskTRjK4NL3+TuMxtCMObzHkAxa0rYvAV5RBh5tdLHUHJLe33xrFNcVidkHMAPF+kjY/9UNi1at2LTohE8VQD0mcv3Gvm79heIjq8Xt3SuqPpk7eQm1r8m7cIsuojbCum964/H93LeyafExa1eEMhZIIiSG+ik2jDhdeybmMyeoKsOjIL/9N/Yd6u60VkWvUMennyv9rKQTOY84yg2T9yAVjusepggcxMpCVX5HdWxakruR80=
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 300 RRSIG DNSKEY 10 3 300 19031125173144 20150718151845 28887 rhybar.0skar.cz. nIsVUh8n7XahL5ai5Pkkt1fgqQ7FbJpdgf9BWf8l/O1I1YLQXxQo4MtRluyJZ6n9gfG5PXE0SR/mFI15tnk24e3TI+x8TLTs0IifgUvfrr7cHEn5agqHQHkt2Kwf7kW4nhALE1x0ZBHalJyxsqm1HS8JyPSmJUEr57rb+0OE5MQBiztaaACND0q5PgmYtN2ipUEicYJgj73Y2ds0AVqY9f2Ln5AGxoZEvZZoXtrlSqdEfjAexWO7iiM201opkEkV48ekpmU5Lm/+f3uPd+uiKgaNgkvb/sfR3/cVksIFHgKvPv1Yvng5nCjHVRZMQ0P3muo5Zh8RC3OsZMp1z3qDLA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.21][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [63440.21][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [63440.21][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [63440.21][cach] => stashed rhybar.0skar.cz. DNSKEY, rank 060, 574 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.21][resl] <= server: ‘9.9.9.10’ rtt: 16 ms
May 15 08:20:58 turris kresd[21258]: [63440.19][iter] ‘*.wilda.rhybar.0skar.cz.’ type ‘A’ new uid was assigned .22, parent uid .00
May 15 08:20:58 turris kresd[21258]: [63440.22][plan] plan ‘wilda.rhybar.0skar.cz.’ type ‘DS’ uid [63440.23]
May 15 08:20:58 turris kresd[21258]: [63440.23][iter] ‘wilda.rhybar.0skar.cz.’ type ‘DS’ new uid was assigned .24, parent uid .22
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => trying zone: rhybar.0skar.cz., NSEC, hash 0
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => NSEC sname: range search found inconsistent entry
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => skipping zone: rhybar.0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 19
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [63440.24][resl] => id: ‘58903’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘rhybar.0skar.cz.’ qname: ‘wILdA.rhybAR.0sKAr.Cz.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 52 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[18] Application Data(23) in epoch 2 and length: 74
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 1139
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 1139
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[19] Application Data(23) with length: 1122
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775
May 15 08:20:58 turris kresd[21258]: [63440.24][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 58903
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr rd ra cd QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; EDNS PSEUDOSECTION:
May 15 08:20:58 turris kresd[21258]: ;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: wilda.rhybar.0skar.cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; AUTHORITY SECTION
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 300 SOA flexi.oskarcz.net. hostmaster.oskarcz.net. 1437236326 3600 900 1814400 3600
May 15 08:20:58 turris kresd[21258]: *.wild.rhybar.0skar.cz. 3600 NSEC .wilda.rhybar.0skar.cz. CNAME RRSIG NSEC
May 15 08:20:58 turris kresd[21258]: .wilda.rhybar.0skar.cz. 3600 NSEC .wildt.rhybar.0skar.cz. A AAAA RRSIG NSEC
May 15 08:20:58 turris kresd[21258]: rhybar.0skar.cz. 300 RRSIG SOA 10 3 300 19031125173144 20150718151845 28887 rhybar.0skar.cz. DdOSxwRBWoi7x9qEBU1vIf4/ERTJgiGmtYP26K3v0d4nTtUrTMM4jpa02DDzikNY6w5fzB1mVNjAQ9mWGVR8xq2LC1bMvPYYcT/+F024xTQ8cwoXKTX/vd2L5BGiool8WpuP1laccsQfg3m/LtrPRbGFDVPCkw8jyaxMjNVbmisjEAAd886G5YGxmeXIlAN1E069VgRUtWRNAxldhu/SJTNhvipjDH4nXY7jrLunfKw2cdufrH6b2pUywk71hYEH98kkm+FZJUSIY6YE7TdYAR7j409HHrjadNk4Nq8Tr/QAw6Go8D3dIoe8E0x0A3KQo5u+7OGEjnb4oCDzy6weog==
May 15 08:20:58 turris kresd[21258]: .wild.rhybar.0skar.cz. 3600 RRSIG NSEC 10 4 3600 19031125173144 20150718151845 28887 rhybar.0skar.cz. PEhnyTEF7jipezYH6l/6u+w14sLhrANzbbrXjiCEL/MJ0xCMfdvNwBTEifqCovA9FeEIhRXz3RuS1xNZ90ifQikK/YS6B4lrs21/LeAzwY+sVtH2nySR7WXAS3ZrgTeREKuA3pC9TMiIgph45uOEqgO115cT3HVGIIdeITJpD3pMP2QgXja9QzJJpkddjSNEIlXQufXGAl/owr3p6pJK+83hjzjM6N/YfgROPvhyFTJNHVuyp6MvBJkd68nFAxNuUpDC80NoULT38Vs+hEBpJuM4heBjmcc0Blbyqn53ICwEWLBdJSsvZAFtbPxAknb/5LyUla32xXZ2e7vBroGhCQ==
May 15 08:20:58 turris kresd[21258]: .wilda.rhybar.0skar.cz. 3600 RRSIG NSEC 10 4 3600 19031125173144 20150718151845 28887 rhybar.0skar.cz. CgS9BthZJmNXx/03y46WfK4dUqhOePxpnczGQbAfFl3473CBK73c+yoIgSqhkIAvG4O3ectEANge68bDJ05493o+3169iPUcTZkhtm/JnPiIA44ePa7CXw9qXMeF7veyHWy4I2fStTZ8CHR9Ii44GkRfdwrMM156IdHZSv8z42e3dr4rLfk8BsdYsozEJnY4MLmvfdDxUC9ze8g5q9jjJ76VY0g9s3MGFCENFauqfJCGttW/csUt2ElP99+lxgpfDtQznARCsNN/sjtEVnr2qqHeogvqOvQjtsg967mOoSPqfdWtOhqB2u7gYnJFugv9gW/9+cqtsLkWX0acGwuXGg==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ADDITIONAL SECTION
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [63440.24][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: pk.c[_wrap_nettle_pk_verify]:1479
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: pubkey.c[pubkey_verify_data]:2392
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: pubkey.c[gnutls_pubkey_verify_data2]:1942
May 15 08:20:58 turris kresd[21258]: [63440.24][vldr] >< bogus signatures: rhybar.0skar.cz. SOA (1 matching RRSIGs, 0 expired, 0 not yet valid, 0 invalid signer, 0 invalid label count, 0 invalid key, 1 invalid crypto, 0 invalid NSEC)
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => stashed .wilda.rhybar.0skar.cz. NSEC, rank 060, 344 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => stashed .wild.rhybar.0skar.cz. NSEC, rank 060, 344 B total, incl. 1 RRSIGs
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => skipping bogus RR set SOA
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => nsec_p stashed for rhybar.0skar.cz. (refresh by 256142, hash: 0)
May 15 08:20:58 turris kresd[21258]: [63440.24][cach] => stashed packet: rank 025, TTL 300, DS wilda.rhybar.0skar.cz. (1132 B)
May 15 08:20:58 turris kresd[21258]: [63440.00][resl] request failed, answering with empty SERVFAIL
May 15 08:20:58 turris kresd[21258]: [63440.24][resl] finished in state: 8, queries: 7, mempool: 32784 B
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec .wilda.rhybar.0skar.cz
May 15 08:20:58 turris resolver-debug: ; (1 server found)
May 15 08:20:58 turris resolver-debug: ;; global options: +cmd
May 15 08:20:58 turris resolver-debug: ;; Got answer:
May 15 08:20:58 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63440
May 15 08:20:58 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; OPT PSEUDOSECTION:
May 15 08:20:58 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
May 15 08:20:58 turris resolver-debug: ;; QUESTION SECTION:
May 15 08:20:58 turris resolver-debug: ;.wilda.rhybar.0skar.cz. IN A
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris resolver-debug: ;; Query time: 140 msec
May 15 08:20:58 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
May 15 08:20:58 turris resolver-debug: ;; WHEN: Sat May 15 10:20:58 CEST 2021
May 15 08:20:58 turris resolver-debug: ;; MSG SIZE rcvd: 52
May 15 08:20:58 turris resolver-debug:
May 15 08:20:58 turris kresd[21258]: [00000.00][plan] plan '.wilda.nsec.0skar.cz.’ type ‘A’ uid [38268.00]
May 15 08:20:58 turris kresd[21258]: [38268.00][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .01, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.01][cach] => skipping exact RR: rank 060 (min. 030), new TTL -255842
May 15 08:20:58 turris kresd[21258]: [38268.01][cach] => trying zone: nsec.0skar.cz., NSEC, hash 0
May 15 08:20:58 turris kresd[21258]: [38268.01][cach] => NSEC sname: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [38268.01][cach] => skipping zone: nsec.0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [38268.01][plan] plan ‘.’ type ‘DNSKEY’ uid [38268.02]
May 15 08:20:58 turris kresd[21258]: [38268.02][iter] ‘.’ type ‘DNSKEY’ new uid was assigned .03, parent uid .01
May 15 08:20:58 turris kresd[21258]: [38268.03][cach] => satisfied by exact RRset: rank 060, new TTL 10910
May 15 08:20:58 turris kresd[21258]: [38268.03][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 45933
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: . DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
May 15 08:20:58 turris kresd[21258]: . 10910 DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
May 15 08:20:58 turris kresd[21258]: . 172800 RRSIG DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [38268.03][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [38268.03][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [38268.03][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [38268.01][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .04, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.04][plan] plan ‘cz.’ type ‘DS’ uid [38268.05]
May 15 08:20:58 turris kresd[21258]: [38268.05][iter] ‘cz.’ type ‘DS’ new uid was assigned .06, parent uid .04
May 15 08:20:58 turris kresd[21258]: [38268.06][cach] => satisfied by exact RRset: rank 060, new TTL 12578
May 15 08:20:58 turris kresd[21258]: [38268.06][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 29280
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 12578 DS 20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
May 15 08:20:58 turris kresd[21258]: cz. 86400 RRSIG DS 8 1 86400 20210527050000 20210514040000 14631 . bxyZPRaWBOh605EulLjKjzRDXVxfYu5xJgmABSLQJp3bTah+s5PoVqZvY66lfNK+IBArxB9QuYJ3adrCuiKgJNaN4iVtSz3/kEKxE0CtoDtOeCD5wWmbrc3pzgy/cvPWe5XJY7RGJ86L+pi+7nVxkinTrrRA5IMN7xRvNz6MCAUdAAXuuA2bherLEfnrN9CzK0Bn74BwTpPyCcxuITfdchL3vU0xygCA3dizzut2eI7NtHtiCDE3E/7d1CsVVHi4s3GlsNNXnC0EtnEyAdUO6XzRApbG5Kvx0P9xbfxGw3HqDSiPJs08hGq6yTf/eq40hj1i9oPKs/g1X2cvMPItRA==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [38268.06][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [38268.06][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [38268.06][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [38268.06][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [38268.04][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .07, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.07][plan] plan ‘cz.’ type ‘DNSKEY’ uid [38268.08]
May 15 08:20:58 turris kresd[21258]: [38268.08][iter] ‘cz.’ type ‘DNSKEY’ new uid was assigned .09, parent uid .07
May 15 08:20:58 turris kresd[21258]: [38268.09][cach] => satisfied by exact RRset: rank 060, new TTL 1149
May 15 08:20:58 turris kresd[21258]: [38268.09][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 30952
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
May 15 08:20:58 turris kresd[21258]: cz. 1149 DNSKEY 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
May 15 08:20:58 turris kresd[21258]: cz. 3600 RRSIG DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [38268.09][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [38268.09][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [38268.09][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [38268.07][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .10, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.10][plan] plan ‘0skar.cz.’ type ‘DS’ uid [38268.11]
May 15 08:20:58 turris kresd[21258]: [38268.11][iter] ‘0skar.cz.’ type ‘DS’ new uid was assigned .12, parent uid .10
May 15 08:20:58 turris kresd[21258]: [38268.12][cach] => satisfied by exact RRset: rank 060, new TTL 3600
May 15 08:20:58 turris kresd[21258]: [38268.12][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 22910
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. DS
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DS 20732 13 2 BD0CD89E39BF808621DC4DE3A4FA51EC4BBA0E987BC9224C51B94A62527E83BC
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 RRSIG DS 13 2 3600 20210525102134 20210511085134 26955 cz. VYaaXlac0sWgNC742A79DVtpyVRcYOgrFaUuFuCncCeiZEtBCewFD7HGSEjjLl2ux7oZ4N6/BIm+2iQo2u0Sog==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [38268.12][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [38268.12][vldr] <= DS: OK
May 15 08:20:58 turris kresd[21258]: [38268.12][vldr] <= parent: updating DS
May 15 08:20:58 turris kresd[21258]: [38268.12][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [38268.10][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .13, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.13][plan] plan ‘0skar.cz.’ type ‘DNSKEY’ uid [38268.14]
May 15 08:20:58 turris kresd[21258]: [38268.14][iter] ‘0skar.cz.’ type ‘DNSKEY’ new uid was assigned .15, parent uid .13
May 15 08:20:58 turris kresd[21258]: [38268.15][cach] => satisfied by exact RRset: rank 060, new TTL 3600
May 15 08:20:58 turris kresd[21258]: [38268.15][iter] <= answer received:
May 15 08:20:58 turris kresd[21258]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 33678
May 15 08:20:58 turris kresd[21258]: ;; Flags: qr aa QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; QUESTION SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. DNSKEY
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: ;; ANSWER SECTION
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DNSKEY 256 3 13 fvjA/6s70GkFfDON7oDbkXhb+r5pGiYdPaQV1n4Y6AHEtTsQlE9XBG8ZBI5DXaIjWs3OurOspqdjBSLk2BcNSA==
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 DNSKEY 257 3 13 JSrbBhsD6toRTrAYQO16FlFjr5G3R8QHHjipqgXoHuk63ipIHhpliPbFzmDXw7CmCv3rTV/FWvhe27boFFJQAw==
May 15 08:20:58 turris kresd[21258]: 0skar.cz. 3600 RRSIG DNSKEY 13 2 3600 20210522192516 20210508175516 20732 0skar.cz. iK+MjbzE52IT5+P6pSp38i212Wz5nvwdTpPhJPdf9dzpiOY5RF+gjD8rRxPbPsV8hOrg2Mq7jl70FZ09jwnLiw==
May 15 08:20:58 turris kresd[21258]:
May 15 08:20:58 turris kresd[21258]: [38268.15][iter] <= rcode: NOERROR
May 15 08:20:58 turris kresd[21258]: [38268.15][vldr] <= parent: updating DNSKEY
May 15 08:20:58 turris kresd[21258]: [38268.15][vldr] <= answer valid, OK
May 15 08:20:58 turris kresd[21258]: [38268.13][iter] '.wilda.nsec.0skar.cz.’ type ‘A’ new uid was assigned .16, parent uid .00
May 15 08:20:58 turris kresd[21258]: [38268.16][plan] plan ‘nsec.0skar.cz.’ type ‘DS’ uid [38268.17]
May 15 08:20:58 turris kresd[21258]: [38268.17][iter] ‘nsec.0skar.cz.’ type ‘DS’ new uid was assigned .18, parent uid .16
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => skipping exact RR: rank 060 (min. 030), new TTL -252542
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => trying zone: 0skar.cz., NSEC3, hash cc19ae22
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => NSEC3 depth 1: hash b8l6bcl4cglsugqccentkm0rk85sft9i
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => NSEC3 encloser error for nsec.0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => NSEC3 depth 0: hash umpdipftsgum51ts6skvu2mkrnojbuvh
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => NSEC3 encloser error for 0skar.cz.: range search found stale or insecure entry
May 15 08:20:58 turris kresd[21258]: [38268.18][cach] => skipping zone: 0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 9.9.9.10#00853; cached RTT: 19
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 21 for 149.112.112.10#00853; cached RTT: 49
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [ ][nsre] score 40001 for 2620:fe::fe:10#00853; cached RTT: 11083
May 15 08:20:58 turris kresd[21258]: [38268.18][resl] => id: ‘44554’ querying: ‘9.9.9.10#00853’ score: 21 zone cut: ‘0skar.cz.’ qname: ‘nSEC.0SkAr.cz.’ qtype: ‘DS’ proto: ‘tcp’
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Preparing Packet Application Data(23) with length: 44 and min pad: 0
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Sent Packet[19] Application Data(23) in epoch 2 and length: 66
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: SSL 3.3 Application Data packet received. Epoch 2, length: 213
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Expected Packet Application Data(23)
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Received Packet Application Data(23) with length: 213
May 15 08:20:58 turris kresd[21258]: [gnutls] (5) REC[0x108a410]: Decrypted Packet[20] Application Data(23) with length: 196
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: buffers.c[_gnutls_io_read_buffered]:589
May 15 08:20:58 turris kresd[21258]: [gnutls] (3) ASSERT: record.c[_gnutls_recv_int]:1775

Previously, this page was read if I turned on Opera VPN, now not. Adress www.centrum.cz is not in the AdBlock domain ‘www.centrum.cz’ in active blocklist.

If I look in the source code of that blankly loaded page, I find this in Opera (Chrome’s code is only with minor differences)

<!DOCTYPE html>
<html lang="cs">
<head>
<meta name="referrer" content="unsafe-url">
<meta name="application-name" content="centrum.cz">
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1">
<meta name="description" content="Centrum.cz je český internetový portál nabízející e-mail, aktuální zpravodajství, počasí a další zajímavé služby.">

Souhrn

Centrum.cz

<link href="https://fonts.googleapis.com/css?family=Roboto:400,700,900&subset=latin-ext" rel="stylesheet">
<link href="https://hpxs.xsd.cz/1.127.1/css/bootstrap.min.css" rel="stylesheet">
<link rel="manifest" href="https://hpxs.xsd.cz/1.127.1/manifest.production.json">

<script src="https://hpxs.xsd.cz/1.127.1/js/centrum/head.js"></script>
<script src="https://hpxs.xsd.cz/1.127.1/js/prebid-ads.js"></script>
</head>
<body>
<div class="brand-a" id="brand-a">
<div class="brand-b" id="brand-b">
<div class="brand-c" id="brand-c">
<div id="app">
<script src="https://hpxs.xsd.cz/1.127.1/js/init.js"></script>

</div>
</div>
</div>
</div>
<script>var __INITIAL_STATE__={"layout":{"name":"layout","meta":{"inbox":{"requiredCookies":["uprofile"],"serviceUrlPattern":"https\\://mail.centrum.cz/free/widget.php?op=index&output=json","xhrLogoutUri":"https://user.centrum.cz/logout.php?api=true"},"sashec":{"site":"hp","template":"hp","nightly":{"ab":"zz"},"render":"postscribe","area":"centrum"},"sashecAntiAdblock":{"targets":{"ap":"bi"}}},"utmSource":"centrumHP"},"logo":{"name":"logo","meta":{"link":{"text":"Centrum.cz","src":"images/logo/centrum.png"}},"utmSource":"centrumHP"},"search":{"name":"search","autoFocus":true,"utmMedium":"searchbox","secret":"EwUyxjQ6zja%vfAL","meta":{"sections":{"internet":{"brandText":"Našeptávač Centrum.cz"}}},"utmSource":"centrumHP"},"emaillink":{"name":"emaillink","utmMedium":"stickybar","meta":{"link":{"location":"https://mail.centrum.cz"},"logout":{"text":"Odhlásit se","location":"https://user.centrum.cz/logout.php?url=https%3a%2f%2fwww.centrum.cz"},"inbox":{"text":"Přejít do e-mailu","location":"https://mail.centrum.cz"}},"utmSource":"centrumHP"},"hotsearch":{"name":"hotsearch","maxItems":3,"utmMedium":"hotsearchesbox","utmCustom":{"channel_id":"hot_searches-HPC","hot":"1","client_id":"centrum-ssfs"},"boxesConfig":[{"source":"HotSearch"}],"utmSource":"centrumHP","boxes":[{"guid":"134e0e6449fa11eba7deac1f6b220ee8","images":{},"title":"Hladiny řek","link":"//search.centrum.cz/?q=Hladiny+%C5%99ek","source":"HotSearch","forcedPosition":0,"featuredType":"link"},{"guid":"4b5a2d7e49fa11eba25cac1f6b220ee8","images":{},"title":"Slovenská strela","link":"//search.centrum.cz/?q=Slovensk%C3%A1+strela","source":"HotSearch","forcedPosition":1,"featuredType":"link"},{"guid":"f196c84c49f911ebb1110cc47ab5f122","images":{},"title":"válka Izrael","link":"//search.centrum.cz/?q=v%C3%A1lka+Izrael","source":"HotSearch","forcedPosition":2,"featuredType":"link"}]},"mobiletabs":{"name":"mobiletabs","widgets":["email","tvProgram","horoscopes","weather"],"utmSource":"centrumHP"},"dynamiclead":{"name":"dynamiclead","utmMedium":"dynamicleadbox","imageCount":6,"imageSize":"4_3","imageSkip":1,"showId":true,"ad":{"mobile":{"pos":"1"}},"boxesConfig":[{"source":"Aktualne","count":6}],"boxesOverride":"OverrideDynamiclead","utmSource":"centrumHP","boxes":[{"guid":"ced8b0fab4ba11eb99faac1f6b220ee8","images":{"1_1":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=174,832,732,732_resize=96,96_.jpg?hash=e92e88c7ed2c691247486a524a116d30","4_3":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=182,643,965,724_resize=128,96_.jpg?hash=ac54bfac54aaa88fb07f4277e18e932a","4_3L":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=182,643,965,724_resize=392,294_.jpg?hash=c5bee169322e53fa36e4b53f8db61e8d","1_1L":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=174,832,732,732_resize=340,340_.jpg?hash=12da3ed52d2d5d4620be9294ada0ccc8","16_9":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=197,361,1252,704_resize=220,124_.jpg?hash=a31356efd763b8df3f2703958864317f"},"title":"Fila: Šokující začátek a nepopsatelný konec. \"Pitomý porno\" útočí na úplně všechny","link":"//magazin.aktualne.cz/fila-smolny-pich-aneb-pitomy-porno/r~ced8b0fab4ba11eb99faac1f6b220ee8/","source":"Aktualne","forcedPosition":0,"featuredType":"article"},{"guid":"d94b7e0ab55011ebb0fa0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/81c6439a43f535dc99614a255a49a79b_extract=0,308,1700,1274_resize=128,96_.jpg?hash=25cd3b57eb7e29859231b9e604ae5e6a"},"title":"Měl jsem plnou hlavu Floyda a olympiády. Americký atlet s podivnou obhajobou neuspěl","link":"//sport.aktualne.cz/ostatni-sporty/atletika/mel-jsem-plnou-hlavu-floyda-a-olympiady-americky-atlet-s-pod/r~d94b7e0ab55011ebb0fa0cc47ab5f122/","source":"Aktualne","forcedPosition":1,"featuredType":"article"},{"guid":"af3a58d6b4d611eb8e470cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/e5589159a1c8380ca06af242aa403206_extract=0,131,1441,1080_resize=128,96_.jpg?hash=124cd2b160e9c75448c87a904bc82ded"},"title":"Legenda na ledě Romanová: Mistři světa? Štěstí a dřina. Se smrtí bratra se nevyrovnám","link":"//video.aktualne.cz/dvtv/legenda-na-lede-romanova-mistri-sveta-stesti-a-drina-se-smrt/r~af3a58d6b4d611eb8e470cc47ab5f122/","source":"Aktualne","forcedPosition":2,"featuredType":"video","duration":"22:37"},{"guid":"c32b470ab50911eba22aac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/e36fe399ebf435ddae3930d2bcf31440_extract=0,476,866,650_resize=128,96_.jpg?hash=6e9d96637e68b6126c38a6c9b3052cab"},"title":"Skromný Coufal uhranul Anglii. Hodinu trénuje hlavičky, pak jde klidně na autobus","link":"//sport.aktualne.cz/fotbal/zahranici/hodinu-v-kuse-trenuje-hlavicky-a-pak-jde-klidne-na-autobus-u/r~c32b470ab50911eba22aac1f6b220ee8/","source":"Aktualne","forcedPosition":3,"featuredType":"article"},{"guid":"3fd38ef8b4be11eb99faac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/10423faaec6e353c99d8739dabca5757_resize=128,96_.jpg?hash=19045051a894553bc957833bbc0327d2"},"title":"Hybridní Tatra o 60 let předběhla Toyotu Prius. Co je převratné na Slovenské strele?","link":"//zpravy.aktualne.cz/ekonomika/auto/hybridni-tatra-o-60-let-predbehla-toyotu-prius-slovenska-str/r~3fd38ef8b4be11eb99faac1f6b220ee8/","source":"Aktualne","forcedPosition":4,"featuredType":"gallery"},{"guid":"5d864eecb47b11ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/5c07f63f1fff323080546f950523fbea_extract=30,0,1600,1201_resize=128,96_.jpg?hash=61cdc7f8248e5956386c1f04d4a2c11b"},"title":"Nejí maso, nelétá letadlem a sprchuje se 6 minut denně: Tomáš Klus slaví 35 let","link":"//zena.aktualne.cz/celebrity/tomas-klus/r~5d864eecb47b11ebb98b0cc47ab5f122/v~sl:48e959a7a040b408f0efcc25e3e8e3a8/","source":"Aktualne","forcedPosition":5,"featuredType":"multigallery"}]},"plague":{"name":"plague","utmMedium":"banner","imageCount":4,"imageSkip":1,"imageSize":"1_1","boxesConfig":[{"source":"CovidStats","count":1},{"source":"BbxCoronavirus","count":3}],"utmSource":"centrumHP","boxes":[{"countSick":1652238,"countRecover":1592219,"countHospitalized":1500,"countDead":29886,"diffSick":1050,"diffRecover":3873,"diffHospitalized":-78,"diffDead":29,"lastUpdate":"14. 5.","vaccinatedPercentage":10.22,"vaccinationsLastUpdate":"13. 5.","source":"CovidStats"},{"guid":"676ef6f2","images":{"1_1":"//hpxs.xsd.cz/emg/5a22f586.jpg"},"title":"Očkovaní mohou snáze cestovat do okolních států. Výjimkou je zatím Slovensko","link":"//zpravy.aktualne.cz/domaci/koronavirus-online/r~dab1d2f0b48611eb8335ac1f6b220ee8/","source":"BbxCoronavirus"},{"guid":"6e32f72c","images":{"1_1":"//hpxs.xsd.cz/emg/373907c2.jpg"},"title":"Restauratéři nebudou muset kontrolovat testy či očkování zákazníků, řekl Havlíček","link":"//zpravy.aktualne.cz/domaci/koronavirus-online/r~a901d112ae3a11ebb9860cc47ab5f122/","source":"BbxCoronavirus"},{"guid":"6d74f6f3","images":{"1_1":"//hpxs.xsd.cz/emg/548fcd7b.jpg"},"title":"Přehledně: Jak budou fungovat zahrádky? Kolik lidí může být u stolu a co mít s sebou?","link":"//zpravy.aktualne.cz/domaci/zahradky-otazky-a-odpovedi/r~20cd9972b42311ebbdfd0cc47ab5f122/","source":"BbxCoronavirus"}]},"news":{"name":"news","imageCount":6,"imageSize":"4_3","utmMedium":"newsbox","showId":true,"meta":{"headline":{"text":"Zprávy","location":"https://aktualne.cz"},"more":{"text":"více zpráv","location":"https://aktualne.cz"}},"ad":{"mobile":{"pos":"2"}},"boxesConfig":[{"source":"Aktualne","count":6}],"boxesOverride":"OverrideNews","utmSource":"centrumHP","boxes":[{"guid":"dab1d2f0b48611eb8335ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/d97bbb1fafe73ae59585291288a675da_resize=128,96_.jpg?hash=bbd45cd478263600b8fd2ac47e914264"},"title":"Očkovaní mohou snáze cestovat do okolních států. Výjimkou je zatím Slovensko","link":"//zpravy.aktualne.cz/domaci/koronavirus-online/r~dab1d2f0b48611eb8335ac1f6b220ee8/","source":"Aktualne","forcedPosition":6,"featuredType":"online"},{"guid":"e030fc2aac1a11ebaedf0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/1eef05015f7430eb9e8084997dc468bc_resize=128,96_.jpg?hash=917c910b5bbf41fa05657394efa8c624"},"title":"Zámek Liběšice je na prodej za 35 milionů. Krásnou památku hyzdí barevné stěny a lino","link":"//magazin.aktualne.cz/bydleni/architektura/zamek-libesice-se-znovu-drazi-barevny-interier-a-lino-v-minu/r~e030fc2aac1a11ebaedf0cc47ab5f122/r~7a86caa2ac1b11ebb98b0cc47ab5f122/","source":"Aktualne","forcedPosition":7,"featuredType":"gallery"},{"guid":"254805e2b53a11eba22aac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/beff575f2a9630a2930dc848fa45e79b_resize=128,96_.jpg?hash=ee51e8e9e6387631d8cd6b0a8afb2926"},"title":"Na Marsu úspěšně přistál čínský modul. Robotické vozítko prozkoumá povrch","link":"//zpravy.aktualne.cz/zahranici/na-marsu-pristal-cinsky-modul-roboticke-vozitko-prozkouma-po/r~254805e2b53a11eba22aac1f6b220ee8/","source":"Aktualne","forcedPosition":8,"featuredType":"article"},{"guid":"8d3ae68eb48a11ebb9860cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/7b016f561f0b342fbd7d939d5cb2d87f_resize=128,96_.jpg?hash=42cd643c5869ec2988f39bd3dba8cef1"},"title":"Bidenovi navzdory: V USA přibývá států, které povolují zbraň bez výcviku i průkazu","link":"//zpravy.aktualne.cz/zahranici/bidenovi-navzdory-pribyva-americkych-statu-kde-je-mozne-vlas/r~8d3ae68eb48a11ebb9860cc47ab5f122/","source":"Aktualne","forcedPosition":9,"featuredType":"article"},{"guid":"20cd9972b42311ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/72eed0f624bd334caed58278ae885b42_resize=128,96_.jpg?hash=c21f689a6b81da32f3354bf6f8f1e13f"},"title":"Přehledně: Jak budou fungovat zahrádky? Kolik lidí může být u stolu a co mít s sebou?","link":"//zpravy.aktualne.cz/domaci/zahradky-otazky-a-odpovedi/r~20cd9972b42311ebbdfd0cc47ab5f122/","source":"Aktualne","forcedPosition":10,"featuredType":"graphicscoda"},{"guid":"0dfbcd70323111ea84c6ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/9925712acdc831939baf1dbddeae5c06_extract=173,123,962,722_resize=128,96_.jpg?hash=a7510ea897394fe3b0497f9522b354a3"},"title":"Češi přestávají rozumět masu. Otestujte, zda poznáte, kde je kýta, krkovice či oříšek","link":"//zpravy.aktualne.cz/ekonomika/veprove-maso-mapa-druhy-zabijacka-reznik/r~0dfbcd70323111ea84c6ac1f6b220ee8/","source":"Aktualne","forcedPosition":11,"featuredType":"graphics"}]},"video":{"name":"video","utmMedium":"videobox","imageSize":"4_3","imageCount":6,"imageSkip":6,"showId":true,"meta":{"headline":{"text":"Video","location":"https://video.aktualne.cz"},"more":{"text":"více videí","location":"https://video.aktualne.cz"}},"ad":{"mobile":{"pos":"3"}},"boxesConfig":[{"source":"Video","count":6}],"boxesOverride":"OverrideVideo","utmSource":"centrumHP","boxes":[{"guid":"7aee61e6b3fd11ebb0fa0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=246,742,538,404_resize=128,96_.jpg?hash=d7344c9e3b1cf2aef44967483d1b337f","16_9":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=236,451,1062,596_resize=220,124_.jpg?hash=ace5f465d9d40235d1e7e7164d24126a","16_9L":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=236,451,1062,596_resize=560,315_.jpg?hash=65ecd5e8e48abb50f49e153dd60ff300"},"title":"Česká reprezentantka zdolala sjezdovku jen v podprsence, reagovala i Vonnová","link":"//sport.aktualne.cz/ostatni-sporty/sjezdove-lyzovani/ceska-reprezentantka-zdolala-sjezdovku-jen-v-podprsence-reag/r~7aee61e6b3fd11ebb0fa0cc47ab5f122/","source":"Video","forcedPosition":3,"featuredType":"video","duration":"1:41","category":"Video"},{"guid":"62eb4554b3db11ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=128,96_.jpg?hash=21127422c432f7d9c387b44ffd96ad1e","16_9":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=220,124_.jpg?hash=a1962a2bc8358b07d83b0208c91e723c","16_9L":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=560,315_.jpg?hash=0f5762451719179aa5e0967fe6a69629"},"title":"Pocta, ale i nepovedený vtip. Lidé reagují na biologa Flegra v kultovním seriálu","link":"//magazin.aktualne.cz/flegr-se-objevil-v-serialu-griffinovi-jako-chlapek-ktery-zna/r~62eb4554b3db11ebbdfd0cc47ab5f122/","source":"Video","forcedPosition":4,"featuredType":"video","duration":"0:35","category":"Video"},{"guid":"172f33bab33011eb9cafac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/7aacd462fa39353ba0935df0b72dd6c8_extract=0,156,1441,1080_resize=128,96_.jpg?hash=19ab3d40ac271d7d461ab3d7adcd25e0","16_9":"//cdn.xsd.cz/resize/7aacd462fa39353ba0935df0b72dd6c8_resize=220,124_.jpg?hash=df86bd51978f713f88acb87b11926f83","16_9L":"//cdn.xsd.cz/resize/7aacd462fa39353ba0935df0b72dd6c8_resize=560,315_.jpg?hash=b0b135d06300946c4a6d1f02e53ea462"},"title":"Ženu vyhodili ze zábavního parku, měla příliš krátké šortky. Zostouzeli mě, tvrdí","link":"//magazin.aktualne.cz/zenu-vyhodili-ze-zabavniho-parku-mela-prilis-kratke-sortky-z/r~172f33bab33011eb9cafac1f6b220ee8/","source":"Video","forcedPosition":5,"featuredType":"video","duration":"0:39","category":"Video"},{"guid":"77d9df72b3cf11eb89ccac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/0bd04d2d88663eceb1c4bb0e6c50a431_resize=128,96_.jpg?hash=0adc8dbd07912fa26cf10ce160d9dea8","16_9":"//cdn.xsd.cz/resize/0bd04d2d88663eceb1c4bb0e6c50a431_resize=220,124_.jpg?hash=672a964e72c8263027c3130878c9e956","16_9L":"//cdn.xsd.cz/resize/0bd04d2d88663eceb1c4bb0e6c50a431_resize=560,315_.jpg?hash=6946c9e0f74f25d3c089897c14d888f5"},"title":"\"Musel jsem je vyhodit.\" Video lékaře, který se zbavuje vakcín, vzbudilo velký ohlas","link":"//zpravy.aktualne.cz/zahranici/musel-jsem-ji-vyhodit-ve-francii-lide-odmitaji-astrazenecu-h/r~77d9df72b3cf11eb89ccac1f6b220ee8/","source":"Video","forcedPosition":6,"featuredType":"video","duration":"0:38","category":"Video"},{"guid":"9495df34b32b11ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/e6f0e91d326e3b4788cc3838cd11532c_resize=128,96_.png?hash=041ce1e9080dc7b213485278c6cd0486","16_9":"//cdn.xsd.cz/resize/e6f0e91d326e3b4788cc3838cd11532c_extract=0,0,1919,1080_resize=220,124_.png?hash=f3373427a858218ef2560fad3d489ab6","16_9L":"//cdn.xsd.cz/resize/e6f0e91d326e3b4788cc3838cd11532c_extract=0,0,1919,1080_resize=560,315_.png?hash=905118fc46f8a0020466308831b7664e"},"title":"Ester Janečková: To je Bureš? Fuj. Vládnou nám estébáci, s komunisty bych zatočila","link":"//magazin.aktualne.cz/ester-janeckova-to-je-bures-fuj-vladnou-nam-estebaci-s-komun/r~9495df34b32b11ebb98b0cc47ab5f122/","source":"Video","forcedPosition":7,"featuredType":"video","duration":"5:40","category":"Video"},{"guid":"c4545016b33011eb9f15ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/82396af0b6033f43856ea2c858692258_resize=128,96_.jpg?hash=06ea66841f108019b45be8c99bc0d2e4","16_9":"//cdn.xsd.cz/resize/82396af0b6033f43856ea2c858692258_resize=220,124_.jpg?hash=f2eea4d3a204c953b2b75a24835b9e71","16_9L":"//cdn.xsd.cz/resize/82396af0b6033f43856ea2c858692258_resize=560,315_.jpg?hash=6a9c4155600da26c26df6fb583475502"},"title":"Američan narazil na pláži na děsivé stvoření. Vypadá jako příšera z Hledá se Nemo","link":"//magazin.aktualne.cz/american-narazil-na-plazi-na-desive-stvoreni-vypada-jako-pri/r~c4545016b33011eb9f15ac1f6b220ee8/","source":"Video","forcedPosition":8,"featuredType":"video","duration":"0:55","category":"Video"}]},"woman":{"name":"woman","imageCount":6,"imageSize":"4_3","utmMedium":"stylebox","showId":true,"meta":{"headline":{"text":"Žena","location":"https://zena.aktualne.cz/"},"more":{"text":"více stylu","location":"https://zena.aktualne.cz/"}},"ad":{"mobile":{"pos":"4"}},"boxesConfig":[{"source":"Woman","count":6}],"boxesOverride":"OverrideWoman","utmSource":"centrumHP","boxes":[{"guid":"56fde2a4b25211ebaedf0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/284d3b5244c03cf486454dda79311639_extract=89,238,1443,1082_resize=128,96_.jpg?hash=4987fade20546d545953d2b48cef809d"},"title":"První vibrátor se prodával jako masážní stroj. Erotiku v Česku mapuje pražská výstava","link":"//zena.aktualne.cz/neni-to-az-neslusne-vystava-v-praze-obnazuje-ceskou-naklonno/r~56fde2a4b25211ebaedf0cc47ab5f122/v~sl:d39dd53fce1d54d9e5245b482e1c978b/","source":"OverrideWoman","forcedPosition":0,"featuredType":"multigallery"},{"guid":"c759999ea26711eb9a61ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/ce3e84ca5c5e33729e0214330e73d9a2_resize=128,96_.jpg?hash=20ce7cd89dbfb3d4c82219004042aac8"},"title":"Nejjednodušší dort, jaký znáte. Stačí čtyři suroviny a 20 minut času","link":"//www.vareni.cz/recepty/piskotovy-dort-se-zakysanou-smetanou-a-jahodami/","source":"OverrideWoman","forcedPosition":1,"featuredType":"article"},{"guid":"ea1e8968acac11eb89ccac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/1495da6d8e14370abf1832b9e17bdea9_extract=58,0,1600,1201_resize=128,96_.jpg?hash=6d54971f8439d0b1ee880cbdbf0184b0"},"title":"Konec rozdělení na dámské a pánské? Hitem je androgynní móda, možná nadchne i vás","link":"//zena.aktualne.cz/moda/zapomente-na-muznost-ci-zenskost-slavni-podporuji-androgynni/r~ea1e8968acac11eb89ccac1f6b220ee8/v~sl:0536aa28a1cf5e755efa7608f0d0ec3b/","source":"Woman","featuredType":"multigallery"},{"guid":"2c927020b49b11ebb2f60cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/61a7a71d677d317599e8e1b628f61321_resize=128,96_.jpg?hash=96f0fb3931a711cb276602c25088153a"},"title":"Bývalá hvězda Spice Girls se objevila ve znepokojivém klipu o domácím násilí","link":"//zena.aktualne.cz/byvala-hvezda-spice-girls-se-objevila-ve-znepokojivem-klipu/r~2c927020b49b11ebb2f60cc47ab5f122/","source":"Woman","featuredType":"article"},{"guid":"9250e650b40d11ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/b81c72a82c47375abdd83ba3bc3f452b_extract=81,0,1315,987_resize=128,96_.jpg?hash=f2b35f2e3f8efe93a5133926a57dec58"},"title":"Americká komička DeGeneresová po 19 letech končí svou show. S důvody se netajila","link":"//zena.aktualne.cz/celebrity/ellen-degeneres-oznamila-ze-pristi-rok-skonci-se-svou-show/r~9250e650b40d11ebbdfd0cc47ab5f122/","source":"Woman","featuredType":"article"},{"guid":"35f3bf7eb3c511ebb234ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/4bf0e693b7de3785833975f05e077b95_extract=0,0,1600,1201_resize=128,96_.jpg?hash=6542624dd43c8ffd2cd167610a7c1d57"},"title":"Režisérka, která se nebojí svléknout do kalhotek. Coppola slaví padesátku","link":"//zena.aktualne.cz/sofia-coppola/r~35f3bf7eb3c511ebb234ac1f6b220ee8/v~sl:f65ee7f04854078921e93d64fea39536/","source":"Woman","featuredType":"multigallery"}]},"sport":{"name":"sport","imageCount":6,"imageSize":"4_3","utmMedium":"sportbox","showId":true,"meta":{"headline":{"text":"Sport","location":"https://sport.aktualne.cz"},"more":{"text":"více sportu","location":"https://sport.aktualne.cz"}},"ad":{"mobile":{"pos":"5"}},"boxesConfig":[{"source":"Sport","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"5a9c916ab16e11ebb0fa0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/b86244277a8f36f88aa1c37c1a2d56a4_resize=128,96_.png?hash=e15da72de7f68115d0c6276ce740e35b"},"title":"Vichřice ani povodeň fotbal pod lízátky nezahubily. Teď přijde velká rekonstrukce","link":"//sport.aktualne.cz/obrazem-hradecky-stadion-pod-lizatky-je-tu-s-nami-uz-55-let/r~5a9c916ab16e11ebb0fa0cc47ab5f122/r~b3a24602b18111ebb234ac1f6b220ee8/","source":"Sport","featuredType":"gallery"},{"guid":"6cdb79aeb41111eb99faac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/dfdad865e1043de8a21e1c8b310e81c6_extract=117,0,1368,1027_resize=128,96_.jpg?hash=928e7dbf4ab35123dd00e7601d1c5cd3"},"title":"Expert Sýkora se vrací do televize: Chyběl mi sociální kontakt, Vránu šetřit nebudu","link":"//sport.aktualne.cz/hokej/ms-v-hokeji/marek-sykora-ms-v-hokeji-2021/r~6cdb79aeb41111eb99faac1f6b220ee8/","source":"Sport","featuredType":"article"},{"guid":"675965aab54611ebb9860cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/4ad38a3dc1c932f9b2afb9c8c0983503_extract=99,556,937,703_resize=128,96_.jpg?hash=a5ad39fa2d36c9a990f256a4ab537ff1"},"title":"Satoranský si opět play off nezahraje, poslední šanci Bulls sfoukl Washington","link":"//sport.aktualne.cz/ostatni-sporty/basketbal/satoransky-si-opet-play-off-nezahraje-posledni-sanci-bulls-s/r~675965aab54611ebb9860cc47ab5f122/","source":"Sport","featuredType":"article"},{"guid":"e46278c6b4fa11ebb234ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/1749094ed5f430aa9ba558dab00db554_resize=128,96_.jpg?hash=53809d578bf685982b306232856a4d5a"},"title":"O výhře Manchesteru City v přestřelce s Newcastlem rozhodl hattrickem Torres","link":"//sport.aktualne.cz/fotbal/zahranici/o-vyhre-manchesteru-city-v-prestrelce-s-newcastlem-rozhodl-h/r~e46278c6b4fa11ebb234ac1f6b220ee8/","source":"Sport","featuredType":"article"},{"guid":"6f7a64f2b4ef11eb9cafac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/cf0c40a4e442310597a35d32723b1933_resize=128,96_.jpg?hash=43edd7e80df8e9c17294c289d043052b"},"title":"Zklamání pro oba. Gól v nastavení srazil šance Liberce na Evropu, Brno blízko sestupu","link":"//sport.aktualne.cz/fotbal/ceska-liga/liberec-v-boji-o-pohary-ztratil-brno-diky-golu-v-nastaveni-d/r~6f7a64f2b4ef11eb9cafac1f6b220ee8/","source":"Sport","featuredType":"article"},{"guid":"0815121eb4d911ebb2f60cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/d49449f2fc1831d9bfe32cc981d54967_resize=128,96_.jpg?hash=39bfad78af5b653f530064eb3deb112e"},"title":"Žádný respekt, Mané nepodal Kloppovi ruku. Dělal jsem šílenější věci, hájí ho trenér","link":"//sport.aktualne.cz/fotbal/zahranici/zadny-respekt-mane-nepodal-kloppovi-ruku-delal-jsem-silenejs/r~0815121eb4d911ebb2f60cc47ab5f122/","source":"Sport","featuredType":"article"}]},"finance":{"name":"finance","imageCount":6,"imageSize":"4_3","utmMedium":"financebox","showId":true,"meta":{"headline":{"text":"Finance","location":"https://zpravy.aktualne.cz/finance"},"more":{"text":"více financí","location":"https://zpravy.aktualne.cz/finance"},"link":{"location":"https://zpravy.aktualne.cz/finance"}},"ad":{"mobile":{"pos":"6"}},"boxesOverride":"OverrideFinance","boxesConfig":[{"source":"Finance","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"3686cf84b48411ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/3acfe7736c433612925a49947ba9de2a_resize=128,96_.jpg?hash=bc3150e797053054c4763bcca936824d"},"title":"Přehledně: Proč malé zásilky z čínských e-shopů zdraží a co bude nutné nově vyřídit","link":"//zpravy.aktualne.cz/finance/nakupovani/zasilky-z-ciny/r~3686cf84b48411ebbdfd0cc47ab5f122/","source":"Finance","featuredType":"graphicscoda"},{"guid":"c4f955e4b25d11eb8e470cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/7d302cbf38073fafbb960e67d68d8b6f_extract=689,0,828,622_resize=128,96_.png?hash=f5cf570108b9b20458bc6efbfd972033"},"title":"Web Ikey trápila technická chyba. O hackerský útok nešlo, tlumí strach o data mluvčí","link":"//zpravy.aktualne.cz/finance/nakupovani/ikea/r~c4f955e4b25d11eb8e470cc47ab5f122/","source":"Finance","featuredType":"article"},{"guid":"e135811cb25b11ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/e052bbcb15363b30b26001d6bb1d512c_resize=128,96_.jpg?hash=b37dca353350d06c5db670fb673387bd"},"title":"Aplikace prodejních řetězců kralují Česku. Dlouho vedoucí Lidl nyní střídá Můj Albert","link":"//zpravy.aktualne.cz/finance/nakupovani/aplikace-albertu-vevodi-zebricku-na-google-play/r~e135811cb25b11ebb98b0cc47ab5f122/","source":"Finance","featuredType":"article"},{"guid":"f71fb74eb23e11eb9cafac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/3c567d5567dc33ec9dd6e30a1871cff2_resize=128,96_.jpg?hash=e70de75cc77bbcb66631a5534fe8e577"},"title":"Svaz: Návštěvnost prodejen byla asi o 25 procent nad průměrem běžného pondělí","link":"//zpravy.aktualne.cz/ekonomika/svaz-navstevnost-prodejen-byla-asi-o-25-procent-nad-prumerem/r~f71fb74eb23e11eb9cafac1f6b220ee8/","source":"Finance","featuredType":"article"},{"guid":"821007d2b15e11eb9f15ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/6adac465e4e03f39aab5fd7516d79232_resize=128,96_.jpg?hash=983613e3a2234c82b996604c051ece93"},"title":"Británii opouští stále více firem. Papírování nutí české obchody nakupovat v Irsku","link":"//zpravy.aktualne.cz/finance/nakupovani/britske-firmy-brexit/r~821007d2b15e11eb9f15ac1f6b220ee8/","source":"Finance","featuredType":"article"},{"guid":"e5686906b18a11eba22aac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/d225c5cb7c273b6aab0b3cbec779cd7d_resize=128,96_.jpg?hash=f0e3fc24425b9f8f56b7cbab1b1ea820"},"title":"Otevřené obchody přilákaly po měsících davy. Někde se dokonce tvořily dlouhé fronty","link":"//zpravy.aktualne.cz/finance/nakupovani/kadernik-oprava-hodinek-a-nove-boty-cechum-se-po-mesicich-ot/r~e5686906b18a11eba22aac1f6b220ee8/","source":"Finance","featuredType":"article"}]},"regional":{"name":"regional","imageCount":6,"imageSize":"4_3","utmMedium":"regionalbox","showId":true,"meta":{"headline":{"text":"Regiony","location":"https://www.drbna.cz"}},"boxesConfig":[{"source":"Regional","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"88d3c92","images":{"4_3":"//hpxs.xsd.cz/emg/74bd218d.jpg"},"title":"Většina základek v kraji zůstane u antigenních testů, na PCR přechází jen škola Otokara Březiny v Jihlavě","link":"//jihlavska.drbna.cz/koronavirus/14589-vetsina-zakladek-zustane-u-antigennich-testu-k-pcr-se-na-vysocine-odhodlala-jen-skola-otokara-breziny-v-jihlave.html","source":"Regional"},{"guid":"6a87d0f5","images":{"4_3":"//hpxs.xsd.cz/emg/65820eac.jpg"},"title":"ŘSD začne opravovat hlavní tah na Šumavu. Práce potrvají do konce června","link":"//budejcka.drbna.cz/zpravy/spolecnost/31144-rsd-zacne-opravovat-hlavni-tah-na-sumavu-prace-potrvaji-do-konce-cervna.html","source":"Regional"},{"guid":"724bd2d6","images":{"4_3":"//hpxs.xsd.cz/emg/7607c8ac.jpg"},"title":"Pražští hasiči vytáhli z vody další auto. V Kyjském rybníku se potopila dodávka","link":"//prazska.drbna.cz/zpravy/5776-prazsti-hasici-vytahli-z-vody-dalsi-auto-v-kyjskem-rybniku-se-potopila-dodavka.html","source":"Regional"},{"guid":"6bbf2fb2","images":{"4_3":"//hpxs.xsd.cz/emg/64561e73.jpg"},"title":"Policie lhůtu pro Čapí hnízdo prodloužit nemusí, pokračují úkony vyšetřování","link":"//www.drbna.cz/zpravy/spolecnost/7561-policie-lhutu-pro-capi-hnizdo-prodlouzit-nemusi-pokracuji-ukony-vysetrovani.html","source":"Regional"},{"guid":"5cdad4f3","images":{"4_3":"//hpxs.xsd.cz/emg/1fc8791a.jpg"},"title":"Cizinec pochodoval po kolejích k Ejpovickému tunelu, namířeno měl do Plzně","link":"//plzenska.drbna.cz/krimi/5825-cizinec-pochodoval-po-kolejich-k-ejpovickemu-tunelu-namireno-mel-do-plzne.html","source":"Regional"},{"guid":"187829fc","images":{"4_3":"//hpxs.xsd.cz/emg/17c7282.jpg"},"title":"Od pondělí jsou opět povoleny návštěvy v krajské nemocnici","link":"//karlovarska.drbna.cz/zpravy/zdravi/4001-od-pondeli-jsou-opet-povoleny-navstevy-v-krajske-nemocnici.html","source":"Regional"}]},"celebrities":{"name":"celebrities","imageCount":6,"imageSize":"4_3","utmMedium":"celebrities","showId":true,"meta":{"headline":{"text":"Celebrity","location":"https://sip.denik.cz/"},"more":{"text":"více celebrit","location":"https://sip.denik.cz/"}},"boxesConfig":[{"source":"Celebrities","count":6}],"enhancedEcommerce":true,"isNew":true,"sendGaCategory":true,"utmSource":"centrumHP","boxes":[{"guid":"56de434","images":{"4_3":"//hpxs.xsd.cz/emg/7049c74d.jpg"},"title":"Otec Lucinky nemohl Matuše vystát! Začátky vztahu novomanželů byly bouřlivé","link":"//sip.denik.cz/celebrity/bohus-matus-lucinka-svatba-vztah-otec.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"3621e888","images":{"4_3":"//hpxs.xsd.cz/emg/653a0d08.jpg"},"title":"Vždycky tě budu milovat: Dojemné vyznání maminky Dominiky Gottové","link":"//sip.denik.cz/celebrity/antonie-zacpalova-vyznani.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"4257e507","images":{"4_3":"//hpxs.xsd.cz/emg/29bbd48.jpg"},"title":"Nejde jen o Meghan: Ani Kate prý nebyla připravena na královský život","link":"//sip.denik.cz/celebrity/meghan-markle-kate-middleton-rozdil.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"3f2a14ca","images":{"4_3":"//hpxs.xsd.cz/emg/4b53141c.jpg"},"title":"Ilona Csáková sklízí následky svých výroků o covidu: Kolegové se s ní nebaví!","link":"//sip.denik.cz/celebrity/ilona-csakova-covid.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"2221e866","images":{"4_3":"//hpxs.xsd.cz/emg/773b5b0b.jpg"},"title":"Bohuš Matuš se oženil: Co o svatbě roku prozradili hosté? Janeček byl zaskočen!","link":"//sip.denik.cz/celebrity/bohus-matus-svatba-lucinka.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"3d3ee8d7","images":{"4_3":"//hpxs.xsd.cz/emg/2285b814.jpg"},"title":"Výsměch pro Ewu Farnou: Co vše si zpěvačka zažila kvůli postavě?","link":"//sip.denik.cz/celebrity/ewa-farna-vysmech-postava.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"}]},"email":{"name":"email","utmMedium":"mailbox","showId":true,"meta":{"headline":{"text":"E-mail"},"logout":{"text":"Odhlásit","location":"https://user.centrum.cz/logout.php?url=https%3a%2f%2fwww.centrum.cz"},"inbox":{"text":"Přejít do e-mailové schránky","location":"https://mail.centrum.cz"},"registration":{"text":"Založit nový email","location":"https://reg.centrum.cz"},"form":{"action":"https://user.centrum.cz"}},"utmSource":"centrumHP"},"promolink":{"name":"promolink","utmMedium":"tip","boxesConfig":[{"source":"PromoLink"}],"utmSource":"centrumHP","boxes":[]},"promovideo":{"name":"promovideo","utmMedium":"videopodmailwidget","meta":{"playerOptions":{"site":"hp","area":"centrum"}},"boxesConfig":[{"source":"BbxVideoEmbeddableCentrum","count":1}],"utmSource":"centrumHP","boxes":[{"guid":"64bdf6cf","images":{},"title":"Sběratel vlastní prezidentskou limuzínu. Investujte do aut i s málo penězi, radí","link":"//video.aktualne.cz/embed_iframe/investice-jako-konicek/sberatel-vlastni-prezidentskou-limuzinu-chytre-investovat-lz/r~bf2d2ab21b3011e9be8b0cc47ab5f122/","source":"BbxVideoEmbeddableCentrum"}]},"dailydiscounts":{"name":"dailydiscounts","utmMedium":"slevybox","imageSize":"4_3","imageCount":6,"showId":true,"meta":{"headline":{"location":"http://amplion.centrum.cz/","text":"Slevy dne"}},"boxesConfig":[{"source":"DailyDiscountsTravel","count":2},{"source":"DailyDiscountsElectronics","count":2},{"source":"DailyDiscountsBeauty","count":2}],"utmSource":"centrumHP","boxes":[{"guid":"8197_355","images":{"4_3":"//hpxs.xsd.cz/emg/13b37352.jpg"},"title":"Krkonoše s polopenzí a saunou pro 2","link":"//amplion.centrum.cz/slevy/hotel-dvorska-bouda-krkonose?utm_content=deal-1-8197_355&utm_term=211","source":"DailyDiscountsTravel","discount":30,"price":"2 690","section":"Pobyty"},{"guid":"7946_58","images":{"4_3":"//hpxs.xsd.cz/emg/c66f83e.jpg"},"title":"Krkonoše, 4 dny s polopenzí a wellness","link":"//amplion.centrum.cz/slevy/hotel-javor?utm_content=deal-2-7946_58&utm_term=211","source":"DailyDiscountsTravel","discount":48,"price":"2 860","section":"Pobyty"},{"guid":"74753379","images":{"4_3":"//hpxs.xsd.cz/emg/6240aa79.jpg"},"title":"Stolní lampa, 3 stupně intenzity svícení","link":"//amplion.centrum.cz/detail/trio-mats-599600115-74753379?utm_content=deal-1-74753379&utm_term=211","source":"DailyDiscountsElectronics","discount":35,"price":"568","section":"Elektro"},{"guid":"74753383","images":{"4_3":"//hpxs.xsd.cz/emg/6b9a6ddc.jpg"},"title":"Noční lampa Thebes","link":"//amplion.centrum.cz/detail/trio-thebes-r50641079-74753383?utm_content=deal-2-74753383&utm_term=211","source":"DailyDiscountsElectronics","discount":35,"price":"637","section":"Elektro"},{"guid":"3627_67","images":{"4_3":"//hpxs.xsd.cz/emg/234ef439.jpg"},"title":"Parfémy a kosmetika za skvělé ceny","link":"//amplion.centrum.cz/tag/profesionalni-kosmetika?utm_content=deal-1-3627_67&utm_term=211","source":"DailyDiscountsBeauty","discount":72,"price":"59","section":"Krása"},{"guid":"74743154","images":{"4_3":"//hpxs.xsd.cz/emg/2e760e69.jpg"},"title":"Řasenka 4D","link":"//amplion.centrum.cz/detail/rasenka-4d-a-postovne-zdarma-74743154?utm_content=deal-2-74743154&utm_term=211","source":"DailyDiscountsBeauty","discount":74,"price":"129","section":"Krása"}]},"leaflets":{"name":"leaflets","utmMedium":"letakybox","imageSize":"5_7","imageCount":15,"isNew":true,"meta":{"headline":{"location":"https://letaky.promotheus.cz/","text":"Slevové letáky"}},"boxesConfig":[{"source":"Leaflets","count":15}],"utmSource":"centrumHP","boxes":[{"guid":"16e45151-7c3b-4635-a9a7-c51bad27475d","images":{"5_7":"//hpxs.xsd.cz/emg/17e99101.jpg"},"title":"Lidl - Vůně asijské kuchyně","link":"//letaky.promotheus.cz/store/85","source":"Leaflets"},{"guid":"3acf786a-3246-4cb4-aa7d-94e4d4cf625c","images":{"5_7":"//hpxs.xsd.cz/emg/21654918.jpg"},"title":"Globus - Jaro plné zábavy","link":"//letaky.promotheus.cz/store/61","source":"Leaflets"},{"guid":"3d6326ba-82b7-4402-ab61-ea2400f3538a","images":{"5_7":"//hpxs.xsd.cz/emg/72aa7fb2.jpg"},"title":"Albert Hypermarket - Zkuste naše hity na gril","link":"//letaky.promotheus.cz/store/3","source":"Leaflets"},{"guid":"c961a82f-4a94-4aa7-803c-4f5fdd16e113","images":{"5_7":"//hpxs.xsd.cz/emg/58f0755e.jpg"},"title":"TESCO - Extra porce grilování","link":"//letaky.promotheus.cz/store/140","source":"Leaflets"},{"guid":"8935388a-f6be-4bef-b2f3-0724e4b4065b","images":{"5_7":"//hpxs.xsd.cz/emg/31d67514.jpg"},"title":"BILLA - Velký leták","link":"//letaky.promotheus.cz/store/17","source":"Leaflets"},{"guid":"9cc611bd-003f-4e12-ad68-20323f0799b2","images":{"5_7":"//hpxs.xsd.cz/emg/26cb1be.jpg"},"title":"Kaufland","link":"//letaky.promotheus.cz/store/75","source":"Leaflets"},{"guid":"80bde47f-39b7-49e9-8dc0-a4aa1d8f6b74","images":{"5_7":"//hpxs.xsd.cz/emg/436a96f3.jpg"},"title":"PEPCO","link":"//letaky.promotheus.cz/store/113","source":"Leaflets"},{"guid":"3f9088be-6c83-47f6-bc66-4d82f8a7298b","images":{"5_7":"//hpxs.xsd.cz/emg/162e95c3.jpg"},"title":"PENNY MARKET","link":"//letaky.promotheus.cz/store/112","source":"Leaflets"},{"guid":"0b8aa5ee-efcc-4ab8-b030-10f1ed9699d6","images":{"5_7":"//hpxs.xsd.cz/emg/3153bd96.jpg"},"title":"dm drogerie - Journal","link":"//letaky.promotheus.cz/store/35","source":"Leaflets"},{"guid":"bfe669d1-6d96-4323-a383-698fdc79ad13","images":{"5_7":"//hpxs.xsd.cz/emg/f841867.jpg"},"title":"Lidl - XXL týden","link":"//letaky.promotheus.cz/store/85","source":"Leaflets"},{"guid":"e7c78ea9-073c-4524-b619-d8f36a377b41","images":{"5_7":"//hpxs.xsd.cz/emg/16243e19.jpg"},"title":"Globus - Zdravý svět - Ušetřete za bezlepkové potraviny s kartou Globus Bonus","link":"//letaky.promotheus.cz/store/61","source":"Leaflets"},{"guid":"28335c62-3120-4a50-a158-7105e5fa9df7","images":{"5_7":"//hpxs.xsd.cz/emg/2116a26.jpg"},"title":"Albert Supermarket - Zkuste naše hity na gril","link":"//letaky.promotheus.cz/store/3","source":"Leaflets"},{"guid":"24c1730e-2faf-4fe0-9910-3bd3bff47d86","images":{"5_7":"//hpxs.xsd.cz/emg/52675dc6.jpg"},"title":"TESCO supermarket - Extra porce grilování","link":"//letaky.promotheus.cz/store/140","source":"Leaflets"},{"guid":"25241238-815a-40af-a861-04a387cb56f4","images":{"5_7":"//hpxs.xsd.cz/emg/24a85b8b.jpg"},"title":"BILLA - Malý leták","link":"//letaky.promotheus.cz/store/17","source":"Leaflets"},{"guid":"bbe5c890-fe6e-4ae9-9db2-e64b6c82399a","images":{"5_7":"//hpxs.xsd.cz/emg/160d257a.jpg"},"title":"Kaufland","link":"//letaky.promotheus.cz/store/75","source":"Leaflets"}]},"exchange":{"name":"exchange","meta":{"headline":{"text":"Kurzy"}},"boxesConfig":[{"source":"Exchange","count":3}],"utmSource":"centrumHP","boxes":[{"guid":"EUR","images":{},"source":"Exchange","exchangeRate":25.49},{"guid":"GBP","images":{},"source":"Exchange","exchangeRate":29.61},{"guid":"USD","images":{},"source":"Exchange","exchangeRate":21.02}]},"housing":{"name":"housing","utmMedium":"bydlenibox","imageCount":4,"imageSize":"4_3","meta":{"headline":{"text":"Bydlení","location":"https://realitymix.cz/"},"more":{"text":"více bydlení","location":"https://realitymix.cz/"}},"boxesConfig":[{"source":"Housing","count":4}],"utmSource":"centrumHP","boxes":[{"guid":"7601891","images":{"4_3":"//hpxs.xsd.cz/emg/6c112b5f.jpg"},"title":"Prodej - dům/vila","link":"//realitymix.cz/detail/mlady-smolivec/rodinny-dum-chalupa-dozice-okr-plzen-jih-7601891.html","source":"Housing","annotation":"Mladý Smolivec, Dožice","price":"3 490 000 Kč"},{"guid":"7601685","images":{"4_3":"//hpxs.xsd.cz/emg/14012b67.jpg"},"title":"Pronájem bytu","link":"//realitymix.cz/detail/pardubice/pronajem-bytu-3-1-s-vlastnim-sklepem-7601685.html","source":"Housing","annotation":"Pardubice, Zelené Předměstí, Jilemnického","price":"11 000 Kč / za měsíc"},{"guid":"7562483","images":{"4_3":"//hpxs.xsd.cz/emg/3c9c9cf0.jpg"},"title":"Pronájem bytu","link":"//realitymix.cz/detail/ceske-budejovice/pronajem-bytu-3-1-51-m2-husova-tr-7562483.html","source":"Housing","annotation":"České Budějovice, Husova tř.","price":"10 500 Kč / za měsíc"},{"guid":"7513189","images":{"4_3":"//hpxs.xsd.cz/emg/236a103a.jpg"},"title":"Prodej - dům/vila","link":"//realitymix.cz/detail/prichovice/prodej-rodinneho-domu-190-m-prichovice-7513189.html","source":"Housing","annotation":"Příchovice","price":"6 480 000 Kč"}]},"games":{"name":"gamesbox","utmMedium":"gamesbox","imageSize":"4_3","imageCount":2,"meta":{"headline":{"text":"Hry","location":"http://gamescafe.centrum.cz/"}},"boxesConfig":[{"source":"Games","count":2}],"utmSource":"centrumHP","boxes":[{"guid":"games_drakensang","images":{"4_3":"images/games/drakensang.png"},"title":"Drakensang Online: Objev magický svět!","link":"http://gamescafe.centrum.cz/strategie/2011/9/5/hry/drakensang-online/?utm_content=drakensang-online","source":"Games"},{"guid":"games_grepolis","images":{"4_3":"images/games/grepolis.png"},"title":"Grepolis: Podmaň si starověké Řecko!","link":"http://gamescafe.centrum.cz/strategie/2018/7/9/hry/grepolis/","source":"Games"}]},"horoscopes":{"name":"horoscopes","utmMedium":"horoskopybox","meta":{"headline":{"text":"Můj horoskop","location":"https://zena.aktualne.cz/horoskopy/"},"detailLinkPattern":"https://zena.aktualne.cz/horoskopy/{sign}"},"boxesConfig":[{"source":"Horoscopes","count":1}],"utmSource":"centrumHP","boxes":[{"guid":"beran","images":{},"title":"Uvažujete-li o životních změnách, je na ně ta správná doba. Všechno dobře zvažte, abyste pak nelitovali, ale po rozhodnutí změny neodkládejte.","source":"Horoscopes"}]},"services":{"name":"services","utmMedium":"menu","meta":{"headline":{"text":"Služby"},"admon":{"area":"centrum","fcid":257},"metrics":{"admonId":"196_C95_226_1_257","impressionId":"196_C95_226_1_257f221"}},"utmSource":"centrumHP"},"jobs":{"name":"jobs","utmMedium":"pracebox","meta":{"headline":{"text":"Práce a kurzy","location":"http://prace.centrum.cz/"},"admon":{"area":"centrum","fcid":18372},"metrics":{"admonId":"196_C95_758_1_18372","impressionId":"196_C95_758_1_18372f13018"}},"boxesConfig":[{"source":"Jobs"},{"source":"Courses"}],"utmSource":"centrumHP","boxes":[{"guid":"cee4cdff16182d52fdaba16f1225bf9275803f9f","images":{},"title":"Gumař - operátor výroby","link":"//www.prace.cz/pd/1559205197/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"d4e1fea7624630466ef02eafd92d4b074d68a298","images":{},"title":"HR specialista - administrativní pracovník","link":"//www.prace.cz/pd/1533222460/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"f3e25831e2c72bfcb0ad2c81fde08dd26aaee268","images":{},"title":"HR specialista - náborář","link":"//www.prace.cz/pd/1533217754/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"68b64cb30d736d265d21e856144c88d14b4c17c5","images":{},"title":"FRONTMAN Supervizor","link":"//www.prace.cz/pd/1531576211/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"79ef9d1b6056383e3e1119a90af83a657a421f6a","images":{},"title":"FINANČNÍ ÚČETNÍ 1/2 ÚVAZEK","link":"//www.prace.cz/pd/1559760441/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"3198ccca1337cea596a107de97dcd1288e618611","images":{},"title":"noční recepční v hotelu v Praze 10","link":"//www.prace.cz/pd/1560946620/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"442bf296b49c11eb85ac0cc47ab5f122","images":{},"title":"Jak se dostat na schůzku pomocí telefonátu 2 - mentální příprava","link":"//www.seduo.cz/jak-se-dostat-na-schuzku-pomoci-telefonatu-2-mentalni-priprava","source":"Courses","section":"Kurzy"},{"guid":"442c138eb49c11eb85ac0cc47ab5f122","images":{},"title":"iCloud a bezpečnost na Macu","link":"//www.seduo.cz/icloud-a-bezpecnost-na-macu","source":"Courses","section":"Kurzy"},{"guid":"442c2e5ab49c11eb85ac0cc47ab5f122","images":{},"title":"Vychytávky v Excelu","link":"//www.seduo.cz/vychytavky-v-excelu","source":"Courses","section":"Kurzy"},{"guid":"442c4890b49c11eb85ac0cc47ab5f122","images":{},"title":"Myšlenkové mapy pro byznys i osobní život","link":"//www.seduo.cz/myslenkove-mapy-pro-byznys-i-osobni-zivot","source":"Courses","section":"Kurzy"},{"guid":"442c62dab49c11eb85ac0cc47ab5f122","images":{},"title":"Jak na texty, díky kterým vás najdou","link":"//www.seduo.cz/jak-na-texty-diky-kterym-vas-najdou","source":"Courses","section":"Kurzy"},{"guid":"442c7d9cb49c11eb85ac0cc47ab5f122","images":{},"title":"Prezentujte v angličtině!","link":"//www.seduo.cz/prezentujte-v-anglictine","source":"Courses","section":"Kurzy"}]},"footerlinks":{"name":"footerlinks","utmMedium":"footer","boxesConfig":[],"utmSource":"centrumHP","boxes":[]},"footerbrand":{"name":"footerbrand","utmMedium":"footer","boxesConfig":[],"meta":{"logo":{"text":"Centrum.cz","location":".","src":"images/logo/centrum.png"},"linkBrand":[{"text":"Facebook Centrum.cz","location":"https://www.facebook.com/multimail/"},{"text":"Nastavit jako domovskou stránku","location":"/nastavte-si-domovskou-stranku/"},{"text":"Napište nám","location":"http://ankety.centrum.cz/s3/napiste-nam/"}]},"utmSource":"centrumHP","boxes":[]},"footersectionnews":{"name":"footersectionnews","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionNews"}],"utmSource":"centrumHP","boxes":[{"guid":"b5dd0a2889e411e385ea002590604f2e","images":{},"title":"Zpravodajství","link":"//www.aktualne.cz/","source":"FooterSectionNews","forcedPosition":0,"featuredType":"link"},{"guid":"40413a4089e511e3a138002590604f2e","images":{},"title":"Zprávy","link":"http://ihned.cz","source":"FooterSectionNews","forcedPosition":1,"featuredType":"link"},{"guid":"507b9ac289e511e3b25d002590604f2e","images":{},"title":"Sport ","link":"//sport.aktualne.cz/","source":"FooterSectionNews","forcedPosition":2,"featuredType":"link"},{"guid":"639eeb3689e511e39b43002590604f2e","images":{},"title":"Videa","link":"//video.aktualne.cz/","source":"FooterSectionNews","forcedPosition":3,"featuredType":"link"},{"guid":"727c258889e511e3b1d7002590604f2e","images":{},"title":"Ekonomika","link":"//zpravy.aktualne.cz/ekonomika/","source":"FooterSectionNews","forcedPosition":4,"featuredType":"link"},{"guid":"9be8ebae89e511e3ad9a0025900fea04","images":{},"title":"Auto","link":"//zpravy.aktualne.cz/ekonomika/auto/","source":"FooterSectionNews","forcedPosition":5,"featuredType":"link"},{"guid":"94375bc6cbe211e48da50025900fea04","images":{},"title":"Wiki","link":"//www.aktualne.cz/wiki/","source":"FooterSectionNews","forcedPosition":6,"featuredType":"link"}]},"footersectionmagazines":{"name":"footersectionmagazines","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionMagazines"}],"utmSource":"centrumHP","boxes":[{"guid":"a3f4bc8e89e411e385ea002590604f2e","images":{},"title":"Magazíny","link":"//magazin.aktualne.cz/","source":"FooterSectionMagazines","forcedPosition":0,"featuredType":"link"},{"guid":"d11c1d6e89e511e39bd20025900fea04","images":{},"title":"Žena","link":"//www.zena.cz/","source":"FooterSectionMagazines","forcedPosition":1,"featuredType":"link"},{"guid":"d7e08f66cbe511e4994f002590604f2e","images":{},"title":"Kultura","link":"//magazin.aktualne.cz/kultura/","source":"FooterSectionMagazines","forcedPosition":2,"featuredType":"link"},{"guid":"e100363e89e511e388c60025900fea04","images":{},"title":"Zdraví","link":"//www.zena.cz/zdravi/","source":"FooterSectionMagazines","forcedPosition":3,"featuredType":"link"},{"guid":"0b2e08d289e611e385ea002590604f2e","images":{},"title":"Rodina","link":"//www.zena.cz/rodina/","source":"FooterSectionMagazines","forcedPosition":4,"featuredType":"link"},{"guid":"74e8e02ecbe611e4bc74002590604f2e","images":{},"title":"Celebrity","link":"//magazin.aktualne.cz/celebrity/","source":"FooterSectionMagazines","forcedPosition":5,"featuredType":"link"},{"guid":"fdc7720089e511e3a5c4002590604f2e","images":{},"title":"Obrazem","link":"//magazin.aktualne.cz/obrazem/","source":"FooterSectionMagazines","forcedPosition":6,"featuredType":"link"}]},"footersectionservices":{"name":"footersectionservices","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionServices"}],"utmSource":"centrumHP","boxes":[{"guid":"cf75ea0e89e411e3ad9a0025900fea04","images":{},"title":"Praktické služby","link":"http://najisto.centrum.cz/","source":"FooterSectionServices","forcedPosition":0,"featuredType":"link"},{"guid":"aea1eeac89e611e3aee20025900fea04","images":{},"title":"Televizní program","link":"http://tvprogram.centrum.cz/","source":"FooterSectionServices","forcedPosition":1,"featuredType":"link"},{"guid":"bc35d83089e611e3a5c4002590604f2e","images":{},"title":"Počasí ","link":"http://pocasi.centrum.cz","source":"FooterSectionServices","forcedPosition":2,"featuredType":"link"},{"guid":"99592fce89e611e3a5c4002590604f2e","images":{},"title":"Horoskopy","link":"http://astrocafe.centrum.cz/horoskopy/horoskop-na-dnesni-den/","source":"FooterSectionServices","forcedPosition":3,"featuredType":"link"},{"guid":"bb307772cbeb11e485d7002590604f2e","images":{},"title":"Svátky","link":"http://svatky.centrum.cz/jmenny-seznam/psijmena/","source":"FooterSectionServices","forcedPosition":4,"featuredType":"link"},{"guid":"c900ee2ccbeb11e4994f002590604f2e","images":{},"title":"Slovníky","link":"http://slovniky.centrum.cz/","source":"FooterSectionServices","forcedPosition":5,"featuredType":"link"},{"guid":"e35e3c2acbeb11e4875c002590604f2e","images":{},"title":"Zákony","link":"http://zakony.centrum.cz","source":"FooterSectionServices","forcedPosition":6,"featuredType":"link"}]},"footersectioncatalogues":{"name":"footersectioncatalogues","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionCatalogues"}],"utmSource":"centrumHP","boxes":[{"guid":"df332ace89e411e3ad9a0025900fea04","images":{},"title":"Inzerce a katalogy","link":"http://najisto.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":0,"featuredType":"link"},{"guid":"f20163b8cbed11e4ad630025900fea04","images":{},"title":"Firmy","link":"http://bazar.najisto.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":1,"featuredType":"link"},{"guid":"fe5e83accbed11e496f2002590604f2e","images":{},"title":"Autobazary","link":"http://www.cars.cz/","source":"FooterSectionCatalogues","forcedPosition":2,"featuredType":"link"},{"guid":"08ab4a0ccbee11e488b0002590604f2e","images":{},"title":"Reality","link":"http://realitymix.centrum.cz/vyhledavani/pozemky.html","source":"FooterSectionCatalogues","forcedPosition":3,"featuredType":"link"},{"guid":"29ff96aecbee11e497be0025900fea04","images":{},"title":"Dovolená","link":"http://dovolena.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":4,"featuredType":"link"},{"guid":"i:atlassecondary:jobs","images":{},"title":"Práce","link":"http://prace.centrum.cz","source":"FooterSectionCatalogues","forcedPosition":5,"featuredType":"link"},{"guid":"3f61d2d2cbee11e496f2002590604f2e","images":{},"title":"Recepty ","link":"http://www.vareni.cz/","source":"FooterSectionCatalogues","forcedPosition":6,"featuredType":"link"}]},"footersectioncommunication":{"name":"footersectioncommunication","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionCommunication"}],"utmSource":"centrumHP","boxes":[{"guid":"71786c94cbef11e49e4e002590604f2e","images":{},"title":"Komunikace ","link":"//magazin.aktualne.cz/","source":"FooterSectionCommunication","forcedPosition":0,"featuredType":"link"},{"guid":"7cea075ecbef11e494a20025900fea04","images":{},"title":"E-mail","link":"http://mail.centrum.cz/info/centrum-mail/","source":"FooterSectionCommunication","forcedPosition":1,"featuredType":"link"},{"guid":"87a4821ecbef11e497be0025900fea04","images":{},"title":"Chat","link":"http://xchat.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":2,"featuredType":"link"},{"guid":"a3799038cbef11e496f2002590604f2e","images":{},"title":"Zábava","link":"//magazin.aktualne.cz/kuriozity/","source":"FooterSectionCommunication","forcedPosition":3,"featuredType":"link"},{"guid":"afdad99acbef11e48da50025900fea04","images":{},"title":"Hry ","link":"http://gamescafe.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":4,"featuredType":"link"},{"guid":"bc146e74cbef11e4a66e0025900fea04","images":{},"title":"Svátky","link":"http://svatky.centrum.cz/jmenny-seznam/","source":"FooterSectionCommunication","forcedPosition":5,"featuredType":"link"},{"guid":"c7f8e45ecbef11e4890a0025900fea04","images":{},"title":"Fotoalba","link":"http://fotoalba.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":6,"featuredType":"link"}]},"weather":{"name":"weather","utmMedium":"pocasibox","meta":{"container":{"id":""}},"loader":{"desktop":"https://pocasi-moravio.centrum.cz/public/tiny_forecast.bundle.js"},"utmSource":"centrumHP"},"bottomscripts":{"name":"bottomscripts","sources":["https://pocasi-moravio.centrum.cz/public/widget_loader.bundle.js","https://pocasi-moravio.centrum.cz/public/share_data_storage.bundle.js","https://pocasi-moravio.centrum.cz/public/user_data_storage.bundle.js","https://pocasi-moravio.centrum.cz/public/tiny_actual.bundle.js"],"utmSource":"centrumHP"},"leaderboard":{"name":"leaderboard","group":"priority","meta":{"targetId":"reklama-leader","size":["leader","79a","91a","11a","21a"]},"utmSource":"centrumHP"},"strip":{"name":"strip","meta":{"targetId":"reklama-strip","size":["strip"]},"utmSource":"centrumHP"},"rightbanner":{"name":"rightbanner","meta":{"targetId":"reklama-mediumrectangle","pos":2,"size":["mediumrectangle","sq3","mpu"]},"utmSource":"centrumHP"},"halfpage":{"name":"halfpage","meta":{"wrapper":{"className":"pravy-banner"},"targetId":"reklama-halfpage","pos":3,"size":["halfpage","mediumrectangle","sq3","widesky"]},"utmSource":"centrumHP"},"advertsmart1":{"name":"advertsmart1","meta":{"targetId":"reklama-mediumrectangle1","pos":1,"size":["mediumrectangle","is"]},"utmSource":"centrumHP"},"advertsmart2":{"name":"advertsmart2","meta":{"wrapper":{"className":"bottom-banner"},"targetId":"reklama-mediumrectangle2","pos":2,"size":["mediumrectangle"]},"utmSource":"centrumHP"},"advertsmart3":{"name":"advertsmart3","meta":{"targetId":"reklama-mediumrectangle3","pos":3,"size":["mediumrectangle"]},"utmSource":"centrumHP"},"advertsmart4":{"name":"advertsmart4","meta":{"targetId":"reklama-popupmobile","size":["special4"]},"utmSource":"centrumHP"},"tvprogram":{"name":"tvprogram","utmMedium":"tvprogrambox","meta":{"headline":{"text":"TV Program","location":"http://tvprogram.centrum.cz/"}},"boxesConfig":[{"source":"TvProgram"}],"utmSource":"centrumHP","boxes":[{"guid":"1","source":"TvProgram","channel":{"id":"1","name":"ČT1","icon":"images/tvprogram/1.png"},"program":{"title":"Dobrodružství Sherlocka Holmese","start":"10:10","location":"http://tvprogram.centrum.cz/detail/dobrodruzstvi-sherlocka-holmese-18223740/","progress":58},"images":{}},{"guid":"2","source":"TvProgram","channel":{"id":"2","name":"ČT2","icon":"images/tvprogram/2.png"},"program":{"title":"Když se hraje o čas (5/7)","start":"10:35","location":"http://tvprogram.centrum.cz/detail/kdyz-se-hraje-o-cas-18223703/","progress":22},"images":{}},{"guid":"3","source":"TvProgram","channel":{"id":"3","name":"Nova","icon":"images/tvprogram/3.png"},"program":{"title":"Tvoje tvář má známý hlas - Šampioni","start":"08:25","location":"http://tvprogram.centrum.cz/detail/tvoje-tvar-ma-znamy-hlas-sampioni-18220725/","progress":83},"images":{}},{"guid":"78","source":"TvProgram","channel":{"id":"78","name":"Nova Cinema","icon":"images/tvprogram/78.png"},"program":{"title":"Osudové léto 2","start":"10:30","location":"http://tvprogram.centrum.cz/detail/osudove-leto-2-18220709/","progress":9},"images":{}},{"guid":"4","source":"TvProgram","channel":{"id":"4","name":"Prima","icon":"images/tvprogram/4.png"},"program":{"title":"Máme rádi Česko","start":"10:25","location":"http://tvprogram.centrum.cz/detail/mame-radi-cesko-18220576/","progress":16},"images":{}},{"guid":"92","source":"TvProgram","channel":{"id":"92","name":"Prima Cool","icon":"images/tvprogram/92.png"},"program":{"title":"Pevnost Boyard (3)","start":"08:50","location":"http://tvprogram.centrum.cz/detail/pevnost-boyard-18220520/","progress":77},"images":{}},{"guid":"89","source":"TvProgram","channel":{"id":"89","name":"Barrandov","icon":"images/tvprogram/89.png"},"program":{"title":"Babica vs. Sapík","start":"10:15","location":"http://tvprogram.centrum.cz/detail/babica-vs-sapik-18224350/","progress":48},"images":{}}]},"newsfeed":{"name":"newsfeed","imageSize":"16_9","imageCount":51,"utmMedium":"newsfeed","meta":{"headline":{"text":"Další zprávy"}},"ads":{"default":[{"idTemplate":"reklama-prannotation","config":{"position":5,"pos":"1"}},{"idTemplate":"reklama-prannotation","config":{"position":15,"pos":"2"}},{"idTemplate":"reklama-prannotation","config":{"position":25,"pos":"3"}}],"mobile":[{"idTemplate":"reklama-prannotation","config":{"position":5,"pos":"7"}},{"idTemplate":"reklama-prannotation","config":{"position":15,"pos":"8"}},{"idTemplate":"reklama-prannotation","config":{"position":25,"pos":"9"}}],"halfPageLoadMore":{"targetId":"reklama-halfpage","pos":5}},"boxesConfig":[],"boxesConfigXHR":[{"source":"Utulne","count":4},{"source":"Woman","count":3},{"source":"Vareni","count":5},{"source":"Respekt","count":2},{"source":"Video","count":1},{"source":"Magazin","count":3},{"source":"AktualneAuto","count":3},{"source":"Dotyk","count":4},{"source":"VyberMiAuto","count":2},{"source":"VitalWeb","count":3},{"source":"CzechSight","count":3},{"source":"Kinotip","count":4},{"source":"Zdrave","count":2},{"source":"Jsme","count":2},{"source":"FajntipLifestyle","count":3},{"source":"FajntipPsychologie","count":3},{"source":"Ireceptar","count":4}],"shuffleBoxes":true,"utmSource":"centrumHP","boxes":[]},"futro":{"name":"futro","utmMedium":"futro","imageSize":"7_5L","imageCount":3,"meta":{"headline":{"text":"Slevy","location":"http://amplion.centrum.cz/"}},"boxesConfig":[{"source":"Futro","count":3}],"utmSource":"centrumHP","boxes":[{"guid":"74752293","images":{"7_5L":"//hpxs.xsd.cz/emg/772440ee.jpg"},"title":"Krušné hory, 4* hotel s wellness pro 2 za {5640 Kč}","link":"//amplion.centrum.cz/detail/krusne-hory-pro-rodiny-4-pytloun-wellness-hotel-hasistejn-74752293?utm_content=deal-1-74752293&utm_term=210","source":"Futro","discount":43},{"guid":"74754781","images":{"7_5L":"//hpxs.xsd.cz/emg/15795e0.jpg"},"title":"Karlovy Vary, 5* hotel s wellness pro 2 za {6999 Kč}","link":"//amplion.centrum.cz/detail/karlovy-vary-luxusni-hotel-imperial-s-neomezenym-74754781?utm_content=deal-2-74754781&utm_term=210","source":"Futro","discount":35},{"guid":"74451869","images":{"7_5L":"//hpxs.xsd.cz/emg/5f2f05e4.jpg"},"title":"5-dílná jídelní sestava Hubert za {3499 Kč}","link":"//amplion.centrum.cz/detail/jidelni-sestava-harvey-son-74451869?utm_content=deal-3-74451869&utm_term=210","source":"Futro","discount":22}]},"tipoftheday":{"name":"tipoftheday","utmMedium":"tipdnebox","imageSize":"4_3","imageCount":1,"meta":{"headline":{"text":"Tip dne"}},"boxesConfig":[{"source":"TipOfTheDayCentrum"}],"utmSource":"centrumHP","boxes":[{"guid":"46f5cd40548e11eaaa180cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/ca09ead031c63959b0f01840c60c7302_resize=128,96_.png?hash=dc0c59aa14e6af2e8c7ab8cea9135b75"},"title":"Daňové přiznání za loňský rok: Vyřešte své daně letos snadno a rychle","link":"//dane.aktualne.cz/?utm_source=economia&utm_medium=banner_hp&utm_campaign=dane_2020","source":"TipOfTheDayCentrum","forcedPosition":0,"featuredType":"article","annotation":"Kompletní výpočet dostanete během pár minut ZDARMA. Vyplnění je jednoduché, anonymní, bez registrace a jakýchkoliv závazků.","perex":"Spočítejte si jednoduše daňové přiznání v naší on-line kalkulačce. Kompletní výpočet dostanete během pár minut ZDARMA. Vyplnění je jednoduché, anonymní, bez registrace a jakýchkoliv závazků. Kompletní daňové přiznání si pak můžete nechat za poplatek zaslat na váš mail nebo poštou. ","seoTitle":"","smallTitle":"Daňové přiznání za loňský rok vyřešte letos snadno a rychle","tags":[{"b:tag:aktualnehp":"Aktuálně.cz HP"}]}]},"nativeapppromo":{"name":"nativeapppromo","utmMedium":"promo","meta":{"Android":{"minVersion":4,"maxImpressions":1,"showAgainAfterSeconds":2678400,"storeAppId":"com.nanooqit.economiaemail","storeLink":"https://play.google.com/store/apps/details?id=com.nanooqit.economiaemail","lastUpdate":"2018-09-03T09:21:12.688Z"}},"utmSource":"centrumHP"},"pramon":{"name":"pramon","utmSource":"centrumHP"},"mobileiconpromo":{"name":"mobileiconpromo","meta":{"gaCategory":"Mobile desktop install","gaLink":"www.centrum.cz/casdgdaga/"},"utmSource":"centrumHP"},"config":{"cookies":{"abTestingDistribution":"abTest","dynamicLayout":"dlc","gaCustomDimension":"aam_uuid","antiAdblock":"fg486cy","tracking":"tracking-uid"},"proxyOptions":{"enabled":false,"route":"/services","whitelist":["radce.centrum.cz","mail.centrum.cz","amail.centrum.cz","mail.centrum.cz","vmail.centrum.cz"]},"ga":{"debug":false,"trackers":{"pageview":{"trackingId":"UA-8453291-1","gaOptions":{"name":"pageTracker"}},"ecommerce":{"trackingId":"UA-8453291-31","gaOptions":{"name":"ecommerceTracker"}},"events":{"trackingId":"UA-8453291-1","gaOptions":{"name":"eventsTracker"}}}},"sentry":{"dsn":"https://0bdab9f01ce6445a9785821fc3f21699@sentry.io/1225540","debug":false,"sampleRate":0.1,"serverName":"centrum"},"version":"1.127.1","environment":"production","searchSecret":"EwUyxjQ6zja%vfAL"}};</script>
<script src="https://hpxs.xsd.cz/1.127.1/js/centrum.min.js"></script>

<script src="[//i0.cz/sashec/js/sashec.bundle.min.js?v=75049](https://i0.cz/sashec/js/sashec.bundle.min.js?v=75049)"></script>
<script src="https://hpxs.xsd.cz/1.127.1/js/body.js"></script>

<iframe id="aab-iframe" style="display: none;" srcdoc="<script>!function(o&#x2c;a&#x2c;s&#x2c;i&#x2c;c){var n=s.querySelectorAll;s.querySelector;function l(e){var n=Object.getOwnPropertyDescriptor;t(e&#x2c;&quot;atob&quot;)&#x2c;t(e&#x2c;&quot;btoa&quot;)&#x2c;t(e&#x2c;&quot;setTimeout&quot;)&#x2c;t(e&#x2c;&quot;XMLHttpRequest&quot;)&#x2c;t(e&#x2c;&quot;Object&quot;)&#x2c;t(e&#x2c;&quot;Function&quot;)&#x2c;t(e&#x2c;&quot;String&quot;)&#x2c;t(e&#x2c;&quot;Image&quot;)&#x2c;t(e&#x2c;&quot;HTMLElement&quot;)&#x2c;t(e&#x2c;&quot;HTMLCanvasElement&quot;)&#x2c;t(e&#x2c;&quot;HTMLIFrameElement&quot;)&#x2c;t(e&#x2c;&quot;CanvasRenderingContext2D&quot;)&#x2c;t(e&#x2c;&quot;SharedWorker&quot;)&#x2c;t(e&#x2c;&quot;Blob&quot;)&#x2c;t(e&#x2c;&quot;URL&quot;)&#x2c;t(Document.prototype&#x2c;&quot;createElement&quot;)&#x2c;t(Document.prototype&#x2c;&quot;querySelector&quot;)&#x2c;t(Document.prototype&#x2c;&quot;querySelectorAll&quot;)&#x2c;t(Node.prototype&#x2c;&quot;removeChild&quot;)&#x2c;t(Node.prototype&#x2c;&quot;appendChild&quot;);try{HTMLIFrameElement.yes=1}catch(e){}function t(e&#x2c;t){try{Object.freeze(e[t])&#x2c;Object.freeze(e[t].prototype)}catch(e){}var r=n(e&#x2c;t);r.configurable=!1&#x2c;r.writable&amp;&amp;(r.writable=!1)&#x2c;Object.defineProperty(e&#x2c;t&#x2c;r)}}l(a);var u=&quot;script&quot;&#x2c;d=o.debug&#x2c;e=a.btoa&#x2c;t=a.atob&#x2c;r=h(&quot;v&quot;) &quot;.v2.1&quot;&#x2c;p=t(e(&quot;https://&quot;+(h(&quot;d&quot;) t(&quot;bXJhemEyZG9zYS5jb20=&quot;))+&quot;/gen/lite&quot;))+r+&quot;.png?r350247&quot;;if(o.lite_path){var f=(new Date).getTime();p=o.lite_path+&quot;?&quot;+f}function m(e&#x2c;t){var r=e.length;e=e.split(&quot;&quot;);for(var n=r-1;-1&lt;n;n--){var o=(t-n+n*n)%r&#x2c;a=e[n];e[n]=e[o]&#x2c;e[o]=a}return e.join(&quot;&quot;)}function h(e){var t=frameElement.getAttribute(e);if(t)return&quot;:&quot;===t[0]?t.slice(1):m(t&#x2c;c)}function g(t){var r&#x2c;n;r=function(e){e (v(t)&#x2c;o.addEventListener(&quot;load&quot;&#x2c;function(){v(t+&quot; onload&quot;)}))}&#x2c;(n=s.createElement(&quot;div&quot;)).className=m(&quot;-geaxetrls&quot;&#x2c;c)&#x2c;n.innerHTML=m(&#x27;&gt;-&lt;efafwaahoai c&quot;o/&lt;&gt;p:ap.ura&gt;&quot;=/na. aatr&quot;a&quot;dmfe&lt;z t&lt;&gt;hm=s.3s//hspt/h&quot;=&quot;ru&#x27;&#x2c;c)&#x2c;i.body.appendChild(n)&#x2c;setTimeout(function(){var e=!1&#x2c;t=n.querySelectorAll(&quot;a&quot;);n.offsetParent t[0].offsetParent t[1].offsetParent (e=!0)&#x2c;r(e)&#x2c;n.remove()}&#x2c;300)}function v(e){for(var t=n.call(i&#x2c;&quot;style&#x2c;link&quot;)&#x2c;r=0;r&lt;t.length;r++)s.removeChild.call(t[r].parentNode&#x2c;t[r])}function y(e){var t=&quot;(&quot;+l.toString()+&quot;)(window);&quot;&#x2c;r=i.createElement(&quot;iframe&quot;);r[&quot;.&quot;]=[e&#x2c;t]&#x2c;r.srcdoc=&quot;&lt;&quot;+u+&quot;&gt;a(&#x27;&#x27;);a(&#x27;&quot;+(d?&quot;module&quot;:&quot;&quot;)+&quot;&#x27;);function a(type){var sc=document.createElement(&#x27;script&#x27;);sc.type=type;sc.textContent=frameElement[&#x27;.&#x27;].pop();document.head.appendChild(sc);sc.remove();}&lt;/&quot;+u+&quot;&gt;&quot;&#x2c;r.style.display=&quot;none&quot;;var n=a.frameElement;HTMLElement.prototype.replaceChild.call(n.parentNode&#x2c;r&#x2c;n)}function b(t&#x2c;r){var e=new XMLHttpRequest;e.onload=function(){r({url:t.url&#x2c;status:e.status&#x2c;responseText:e.responseText&#x2c;responseURL:e.responseURL&#x2c;headers:e.getAllResponseHeaders()&#x2c;readyState:e.readyState})}&#x2c;e.onerror=function(e){r({error:&quot;error&quot;&#x2c;url:t.url})}&#x2c;e.onabort=function(e){r({error:&quot;abort&quot;&#x2c;url:t.url})}&#x2c;e.open(&quot;GET&quot;&#x2c;t.url)&#x2c;e.overrideMimeType(&quot;text/plain; charset=x-user-defined&quot;)&#x2c;e.send()}!function(e&#x2c;t){var r&#x2c;n=b.toString()+&quot;; (&quot;+function(){addEventListener(&quot;connect&quot;&#x2c;function(e){var t=e.ports[0];t.addEventListener(&quot;message&quot;&#x2c;function(e){b(e.data&#x2c;t.postMessage.bind(this))})&#x2c;t.start()})}.toString()+&quot;)()&quot;&#x2c;o=new Blob([n]&#x2c;{type:&quot;text/javascript&quot;})&#x2c;a=URL.createObjectURL(o);try{r=new SharedWorker(a)}catch(e){try{r=new SharedWorker(&quot;data:text/javascript;base64&#x2c;&quot;+btoa(n))}catch(e){g(&quot;shared worker&quot;)}}r.port.addEventListener(&quot;message&quot;&#x2c;function(e){t(e.data)})&#x2c;r.port.start()&#x2c;r.port.postMessage(e)}({url:p+(new Date).getHours()}&#x2c;function e(t){if(t.error&amp;&amp;/bot googlebot crawler spider robot crawling/i.test(navigator.userAgent))return b({url:t.url}&#x2c;e);if(0===t.status&amp;&amp;4===t.readyState)return g(&quot;xhr &quot;+t.url);if(t.error !/^http/.test(t.responseURL) t.responseText.length&lt;100)return g(&quot;url &quot;+t.url);if(p.includes(&quot;.js&quot;))return y(t.responseText);var r=new Image;r.onload=function(){var e&#x2c;t&#x2c;r&#x2c;n&#x2c;o&#x2c;a;e=this&#x2c;t=s.createElement(&quot;canvas&quot;)&#x2c;r=t.getContext(&quot;2d&quot;)&#x2c;n=e.width&#x2c;o=e.height&#x2c;(a=t.style).width=t.width=n&#x2c;a.height=t.height=o&#x2c;r.drawImage(e&#x2c;0&#x2c;0)&#x2c;y(function(e){for(var t=&quot;&quot;&#x2c;r=0;r&lt;e.length;r++)(r+1)%4!=0&amp;&amp;e[r]&amp;&amp;(t+=String.fromCharCode(e[r]));return t}(r.getImageData(0&#x2c;0&#x2c;n&#x2c;o).data))}&#x2c;r.onerror=function(e){}&#x2c;r.crossOrigin=&quot;Anonymous&quot;;for(var n=&quot;&quot;&#x2c;o=0;o&lt;t.responseText.length;o++)n+=String.fromCharCode(255&amp;t.responseText.charCodeAt(o));r.src=&quot;data:image/png;base64&#x2c;&quot;+btoa(n)})}(top&#x2c;window&#x2c;document&#x2c;top.document&#x2c;443);</script>" v="dm_o" d="aoczaso.czrde.mm"></iframe>
<script>
if (window.canRunAds) {
document.body.removeChild(document.getElementById('aab-iframe'))
}
</script>
<!-- GENERATED AT Sat May 15 2021 08:42:18 GMT+0000 (Coordinated Universal Time) -->
</body>
<script src="https://hpxs.xsd.cz/1.127.1/js/loadHomescreenPrompServiceWorker.js"></script>
</html>

vcunat · May 15, 2021, 9:36am

The DNS log doesn’t show any attempts asking anything under centrum.cz; I assume you were hitting browser cache at moment or something. But perhaps it’s not really DNS-related anyway when you actually get some html. (for me it all just works behind an Omnia)

JardaB · May 15, 2021, 11:36am

One more attempt dns resolver debug after restarting computer and router. Start debug, repeatedly reload www.centrum.cz with changed dns forward settings, stop and print debug. There is still no mention of this address in the log. ??

# /etc/resolver/resolver-debug.sh print-logs
Print logs
====Log====
Sat May 15 13:29:29 CEST 2021
===========

Souhrn

  May 15 13:27:35 turris syslog-ng[4736]: syslog-ng starting up; version='3.30.1'
    May 15 13:27:35 turris kernel: [    0.000000] Booting Linux on physical CPU 0x0
    May 15 13:27:35 turris kernel: [    0.000000] Linux version 4.14.222 (packaging@turris.cz) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 a5672f6)) #0 SMP Thu Mar 4 00:25:21 2021
    May 15 13:27:35 turris kernel: [    0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
    May 15 13:27:35 turris kernel: [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
    May 15 13:27:35 turris kernel: [    0.000000] OF: fdt: Machine model: Turris Omnia
    May 15 13:27:35 turris kernel: [    0.000000] Memory policy: Data cache writealloc
    May 15 13:27:35 turris kernel: [    0.000000] On node 0 totalpages: 262144
    May 15 13:27:35 turris kernel: [    0.000000] free_area_init_node: node 0, pgdat c0b3b340, node_mem_map ef6f9000
    May 15 13:27:35 turris kernel: [    0.000000]   Normal zone: 1728 pages used for memmap
    May 15 13:27:35 turris kernel: [    0.000000]   Normal zone: 0 pages reserved
    May 15 13:27:35 turris kernel: [    0.000000]   Normal zone: 196608 pages, LIFO batch:31
    May 15 13:27:35 turris kernel: [    0.000000]   HighMem zone: 65536 pages, LIFO batch:15
    May 15 13:27:35 turris kernel: [    0.000000] random: get_random_bytes called from start_kernel+0x8c/0x4cc with crng_init=0
    May 15 13:27:35 turris kernel: [    0.000000] percpu: Embedded 11 pages/cpu s15372 r8192 d21492 u45056
    May 15 13:27:35 turris kernel: [    0.000000] pcpu-alloc: s15372 r8192 d21492 u45056 alloc=11*4096
    May 15 13:27:35 turris kernel: [    0.000000] pcpu-alloc: [0] 0 [0] 1 
    May 15 13:27:35 turris kernel: [    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 260416
    May 15 13:27:35 turris kernel: [    0.000000] Kernel command line: earlyprintk rootwait  console=ttyS0,115200 rootfstype=btrfs root=PARTUUID=059bd960-01 rootflags=commit=5,subvol=@ rw cfg80211.freg=** 
    May 15 13:27:35 turris kernel: [    0.000000] Bootloader command line not present
    May 15 13:27:35 turris kernel: [    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
    May 15 13:27:35 turris kernel: [    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
    May 15 13:27:35 turris kernel: [    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
    May 15 13:27:35 turris kernel: [    0.000000] Memory: 1027604K/1048576K available (7168K kernel code, 239K rwdata, 1680K rodata, 1024K init, 257K bss, 20972K reserved, 0K cma-reserved, 262144K highmem)
    May 15 13:27:35 turris kernel: [    0.000000] Virtual kernel memory layout:
    May 15 13:27:35 turris kernel: [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    May 15 13:27:35 turris kernel: [    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
    May 15 13:27:35 turris kernel: [    0.000000]     vmalloc : 0xf0800000 - 0xff800000   ( 240 MB)
    May 15 13:27:35 turris kernel: [    0.000000]     lowmem  : 0xc0000000 - 0xf0000000   ( 768 MB)
    May 15 13:27:35 turris kernel: [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    May 15 13:27:35 turris kernel: [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    May 15 13:27:35 turris kernel: [    0.000000]       .text : 0xc0008000 - 0xc0800000   (8160 kB)
    May 15 13:27:35 turris kernel: [    0.000000]       .init : 0xc0a00000 - 0xc0b00000   (1024 kB)
    May 15 13:27:35 turris kernel: [    0.000000]       .data : 0xc0b00000 - 0xc0b3bc40   ( 240 kB)
    May 15 13:27:35 turris kernel: [    0.000000]        .bss : 0xc0b3bc40 - 0xc0b7c3d8   ( 258 kB)
    May 15 13:27:35 turris kernel: [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    May 15 13:27:35 turris kernel: [    0.000000] Hierarchical RCU implementation.
    May 15 13:27:35 turris kernel: [    0.000000] 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
    May 15 13:27:35 turris kernel: [    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
    May 15 13:27:35 turris kernel: [    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
    May 15 13:27:35 turris kernel: [    0.000000] L2C: DT/platform modifies aux control register: 0x06070000 -> 0x16070000
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 enabling early BRESP for Cortex-A9
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 D prefetch enabled, offset 1 lines
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
    May 15 13:27:35 turris kernel: [    0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
    May 15 13:27:35 turris kernel: [    0.000006] sched_clock: 64 bits at 800MHz, resolution 1ns, wraps every 4398046511103ns
    May 15 13:27:35 turris kernel: [    0.000016] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xb881274fa3, max_idle_ns: 440795210636 ns
    May 15 13:27:35 turris kernel: [    0.000029] Switching to timer-based delay loop, resolution 1ns
    May 15 13:27:35 turris kernel: [    0.000159] Ignoring duplicate/late registration of read_current_timer delay
    May 15 13:27:35 turris kernel: [    0.000166] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
    May 15 13:27:35 turris kernel: [    0.000329] Console: colour dummy device 80x30
    May 15 13:27:35 turris kernel: [    0.000347] Calibrating delay loop (skipped), value calculated using timer frequency.. 1600.00 BogoMIPS (lpj=8000000)
    May 15 13:27:35 turris kernel: [    0.000354] pid_max: default: 32768 minimum: 301
    May 15 13:27:35 turris kernel: [    0.000414] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
    May 15 13:27:35 turris kernel: [    0.000420] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
    May 15 13:27:35 turris kernel: [    0.000701] CPU: Testing write buffer coherency: ok
    May 15 13:27:35 turris kernel: [    0.000714] CPU0: Spectre v2: using BPIALL workaround
    May 15 13:27:35 turris kernel: [    0.000833] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    May 15 13:27:35 turris kernel: [    0.000959] Setting up static identity map for 0x100000 - 0x100060
    May 15 13:27:35 turris kernel: [    0.001035] mvebu-soc-id: MVEBU SoC ID=0x6820, Rev=0x4
    May 15 13:27:35 turris kernel: [    0.001112] mvebu-pmsu: Initializing Power Management Service Unit
    May 15 13:27:35 turris kernel: [    0.001162] Hierarchical SRCU implementation.
    May 15 13:27:35 turris kernel: [    0.001355] smp: Bringing up secondary CPUs ...
    May 15 13:27:35 turris kernel: [    0.001491] Booting CPU 1
    May 15 13:27:35 turris kernel: [    0.001642] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    May 15 13:27:35 turris kernel: [    0.001644] CPU1: Spectre v2: using BPIALL workaround
    May 15 13:27:35 turris kernel: [    0.001695] smp: Brought up 1 node, 2 CPUs
    May 15 13:27:35 turris kernel: [    0.001700] SMP: Total of 2 processors activated (3200.00 BogoMIPS).
    May 15 13:27:35 turris kernel: [    0.001703] CPU: All CPU(s) started in SVC mode.
    May 15 13:27:35 turris kernel: [    0.002157] devtmpfs: initialized
    May 15 13:27:35 turris kernel: [    0.003746] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
    May 15 13:27:35 turris kernel: [    0.003801] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
    May 15 13:27:35 turris kernel: [    0.003809] futex hash table entries: 512 (order: 3, 32768 bytes)
    May 15 13:27:35 turris kernel: [    0.003865] xor: measuring software checksum speed
    May 15 13:27:35 turris kernel: [    0.100066]    arm4regs  :  2366.400 MB/sec
    May 15 13:27:35 turris kernel: [    0.200067]    8regs     :  1848.400 MB/sec
    May 15 13:27:35 turris kernel: [    0.300066]    32regs    :  2031.600 MB/sec
    May 15 13:27:35 turris kernel: [    0.400065]    neon      :  1832.400 MB/sec
    May 15 13:27:35 turris kernel: [    0.400068] xor: using function: arm4regs (2366.400 MB/sec)
    May 15 13:27:35 turris kernel: [    0.400074] pinctrl core: initialized pinctrl subsystem
    May 15 13:27:35 turris kernel: [    0.400421] NET: Registered protocol family 16
    May 15 13:27:35 turris kernel: [    0.400904] DMA: preallocated 256 KiB pool for atomic coherent allocations
    May 15 13:27:35 turris kernel: [    0.401465] cpuidle: using governor ladder
    May 15 13:27:35 turris kernel: [    0.401556] hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
    May 15 13:27:35 turris kernel: [    0.401560] hw-breakpoint: maximum watchpoint size is 4 bytes.
    May 15 13:27:35 turris kernel: [    0.401679] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
    May 15 13:27:35 turris kernel: [    0.401685] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
    May 15 13:27:35 turris kernel: [    0.570278] raid6: int32x1  gen()   171 MB/s
    May 15 13:27:35 turris kernel: [    0.740178] raid6: int32x1  xor()   243 MB/s
    May 15 13:27:35 turris kernel: [    0.910166] raid6: int32x2  gen()   255 MB/s
    May 15 13:27:35 turris kernel: [    1.080074] raid6: int32x2  xor()   290 MB/s
    May 15 13:27:35 turris kernel: [    1.250244] raid6: int32x4  gen()   304 MB/s
    May 15 13:27:35 turris kernel: [    1.420107] raid6: int32x4  xor()   263 MB/s
    May 15 13:27:35 turris kernel: [    1.590155] raid6: int32x8  gen()   328 MB/s
    May 15 13:27:35 turris kernel: [    1.760131] raid6: int32x8  xor()   229 MB/s
    May 15 13:27:35 turris kernel: [    1.930092] raid6: neonx1   gen()  1111 MB/s
    May 15 13:27:35 turris kernel: [    2.100088] raid6: neonx1   xor()  1058 MB/s
    May 15 13:27:35 turris kernel: [    2.270104] raid6: neonx2   gen()  1303 MB/s
    May 15 13:27:35 turris kernel: [    2.440067] raid6: neonx2   xor()  1351 MB/s
    May 15 13:27:35 turris kernel: [    2.610103] raid6: neonx4   gen()  1070 MB/s
    May 15 13:27:35 turris kernel: [    2.780073] raid6: neonx4   xor()  1328 MB/s
    May 15 13:27:35 turris kernel: [    2.950115] raid6: neonx8   gen()  1014 MB/s
    May 15 13:27:35 turris kernel: [    3.120090] raid6: neonx8   xor()   914 MB/s
    May 15 13:27:35 turris kernel: [    3.120093] raid6: using algorithm neonx2 gen() 1303 MB/s
    May 15 13:27:35 turris kernel: [    3.120096] raid6: .... xor() 1351 MB/s, rmw enabled
    May 15 13:27:35 turris kernel: [    3.120100] raid6: using neon recovery algorithm
    May 15 13:27:35 turris kernel: [    3.120387] SCSI subsystem initialized
    May 15 13:27:35 turris kernel: [    3.120505] libata version 3.00 loaded.
    May 15 13:27:35 turris kernel: [    3.120610] usbcore: registered new interface driver usbfs
    May 15 13:27:35 turris kernel: [    3.120638] usbcore: registered new interface driver hub
    May 15 13:27:35 turris kernel: [    3.120660] usbcore: registered new device driver usb
    May 15 13:27:35 turris kernel: [    3.121325] clocksource: Switched to clocksource arm_global_timer
    May 15 13:27:35 turris kernel: [    3.125149] NET: Registered protocol family 2
    May 15 13:27:35 turris kernel: [    3.125408] TCP established hash table entries: 8192 (order: 3, 32768 bytes)
    May 15 13:27:35 turris kernel: [    3.125446] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
    May 15 13:27:35 turris kernel: [    3.125507] TCP: Hash tables configured (established 8192 bind 8192)
    May 15 13:27:35 turris kernel: [    3.125556] UDP hash table entries: 512 (order: 2, 16384 bytes)
    May 15 13:27:35 turris kernel: [    3.125581] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
    May 15 13:27:35 turris kernel: [    3.125675] NET: Registered protocol family 1
    May 15 13:27:35 turris kernel: [    3.125690] PCI: CLS 0 bytes, default 64
    May 15 13:27:35 turris kernel: [    3.125998] hw perfevents: enabled with armv7_cortex_a9 PMU driver, 7 counters available
    May 15 13:27:35 turris kernel: [    3.126952] Crashlog allocated RAM at address 0x3f00000
    May 15 13:27:35 turris kernel: [    3.127081] workingset: timestamp_bits=14 max_order=18 bucket_order=4
    May 15 13:27:35 turris kernel: [    3.129001] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    May 15 13:27:35 turris kernel: [    3.129009] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
    May 15 13:27:35 turris kernel: [    3.130686] bounce: pool size: 64 pages
    May 15 13:27:35 turris kernel: [    3.130697] io scheduler noop registered
    May 15 13:27:35 turris kernel: [    3.130701] io scheduler deadline registered (default)
    May 15 13:27:35 turris kernel: [    3.131162] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
    May 15 13:27:35 turris kernel: [    3.132656] mvebu-pcie soc:pcie: PCI host bridge to bus 0000:00
    May 15 13:27:35 turris kernel: [    3.132666] pci_bus 0000:00: root bus resource [io  0x1000-0xfffff]
    May 15 13:27:35 turris kernel: [    3.132671] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
    May 15 13:27:35 turris kernel: [    3.132676] pci_bus 0000:00: root bus resource [bus 00-ff]
    May 15 13:27:35 turris kernel: [    3.132693] pci 0000:00:01.0: [11ab:6820] type 01 class 0x060400
    May 15 13:27:35 turris kernel: [    3.132781] pci 0000:00:02.0: [11ab:6820] type 01 class 0x060400
    May 15 13:27:35 turris kernel: [    3.132849] pci 0000:00:03.0: [11ab:6820] type 01 class 0x060400
    May 15 13:27:35 turris kernel: [    3.132921] PCI: bus0: Fast back to back transfers disabled
    May 15 13:27:35 turris kernel: [    3.132927] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    May 15 13:27:35 turris kernel: [    3.132934] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    May 15 13:27:35 turris kernel: [    3.132939] pci 0000:00:03.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    May 15 13:27:35 turris kernel: [    3.132974] PCI: bus1: Fast back to back transfers enabled
    May 15 13:27:35 turris kernel: [    3.132981] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
    May 15 13:27:35 turris kernel: [    3.133032] pci 0000:02:00.0: [168c:003c] type 00 class 0x028000
    May 15 13:27:35 turris kernel: [    3.133058] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
    May 15 13:27:35 turris kernel: [    3.133083] pci 0000:02:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
    May 15 13:27:35 turris kernel: [    3.133145] pci 0000:02:00.0: supports D1 D2
    May 15 13:27:35 turris kernel: [    3.133198] PCI: bus2: Fast back to back transfers disabled
    May 15 13:27:35 turris kernel: [    3.133205] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
    May 15 13:27:35 turris kernel: [    3.133258] pci 0000:03:00.0: [168c:002e] type 00 class 0x028000
    May 15 13:27:35 turris kernel: [    3.133284] pci 0000:03:00.0: reg 0x10: [mem 0x00000000-0x0000ffff 64bit]
    May 15 13:27:35 turris kernel: [    3.133370] pci 0000:03:00.0: supports D1
    May 15 13:27:35 turris kernel: [    3.133373] pci 0000:03:00.0: PME# supported from D0 D1 D3hot
    May 15 13:27:35 turris kernel: [    3.133427] PCI: bus3: Fast back to back transfers disabled
    May 15 13:27:35 turris kernel: [    3.133434] pci_bus 0000:03: busn_res: [bus 03-ff] end is updated to 03
    May 15 13:27:35 turris kernel: [    3.133453] pci 0000:00:02.0: BAR 8: assigned [mem 0xe0000000-0xe02fffff]
    May 15 13:27:35 turris kernel: [    3.133459] pci 0000:00:03.0: BAR 8: assigned [mem 0xe0300000-0xe03fffff]
    May 15 13:27:35 turris kernel: [    3.133465] pci 0000:00:01.0: PCI bridge to [bus 01]
    May 15 13:27:35 turris kernel: [    3.133474] pci 0000:02:00.0: BAR 0: assigned [mem 0xe0000000-0xe01fffff 64bit]
    May 15 13:27:35 turris kernel: [    3.133485] pci 0000:02:00.0: BAR 6: assigned [mem 0xe0200000-0xe020ffff pref]
    May 15 13:27:35 turris kernel: [    3.133490] pci 0000:00:02.0: PCI bridge to [bus 02]
    May 15 13:27:35 turris kernel: [    3.133495] pci 0000:00:02.0:   bridge window [mem 0xe0000000-0xe02fffff]
    May 15 13:27:35 turris kernel: [    3.133502] pci 0000:03:00.0: BAR 0: assigned [mem 0xe0300000-0xe030ffff 64bit]
    May 15 13:27:35 turris kernel: [    3.133512] pci 0000:00:03.0: PCI bridge to [bus 03]
    May 15 13:27:35 turris kernel: [    3.133517] pci 0000:00:03.0:   bridge window [mem 0xe0300000-0xe03fffff]
    May 15 13:27:35 turris kernel: [    3.133741] mv_xor f1060800.xor: Marvell shared XOR driver
    May 15 13:27:35 turris kernel: [    3.191795] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
    May 15 13:27:35 turris kernel: [    3.191913] mv_xor f1060900.xor: Marvell shared XOR driver
    May 15 13:27:35 turris kernel: [    3.251767] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
    May 15 13:27:35 turris kernel: [    3.251988] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
    May 15 13:27:35 turris kernel: [    3.253119] console [ttyS0] disabled
    May 15 13:27:35 turris kernel: [    3.273194] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 22, base_baud = 15625000) is a 16550A
    May 15 13:27:35 turris kernel: [    4.159538] console [ttyS0] enabled
    May 15 13:27:35 turris kernel: [    4.183348] f1012100.serial: ttyS1 at MMIO 0xf1012100 (irq = 23, base_baud = 15625000) is a 16550A
    May 15 13:27:35 turris kernel: [    4.194125] loop: module loaded
    May 15 13:27:35 turris kernel: [    4.197574] ahci-mvebu f10a8000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
    May 15 13:27:35 turris kernel: [    4.206664] ahci-mvebu f10a8000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs 
    May 15 13:27:35 turris kernel: [    4.215825] scsi host0: ahci-mvebu
    May 15 13:27:35 turris kernel: [    4.219372] scsi host1: ahci-mvebu
    May 15 13:27:35 turris kernel: [    4.222863] ata1: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x100 irq 44
    May 15 13:27:35 turris kernel: [    4.230799] ata2: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x180 irq 44
    May 15 13:27:35 turris kernel: [    4.239529] m25p80 spi0.0: s25fl164k (8192 Kbytes)
    May 15 13:27:35 turris kernel: [    4.244413] 2 fixed-partitions partitions found on MTD device spi0.0
    May 15 13:27:35 turris kernel: [    4.250781] Creating 2 MTD partitions on "spi0.0":
    May 15 13:27:35 turris kernel: [    4.255602] 0x000000000000-0x000000100000 : "U-Boot"
    May 15 13:27:35 turris kernel: [    4.260903] 0x000000100000-0x000000800000 : "Rescue system"
    May 15 13:27:35 turris kernel: [    4.266960] libphy: Fixed MDIO Bus: probed
    May 15 13:27:35 turris kernel: [    4.271413] libphy: orion_mdio_bus: probed
    May 15 13:27:35 turris kernel: [    4.276017] mv88e6085 f1072004.mdio-mii:10: switch 0x1760 detected: Marvell 88E6176, revision 1
    May 15 13:27:35 turris kernel: [    4.430290] libphy: mv88e6xxx SMI: probed
    May 15 13:27:35 turris kernel: [    4.438076] mvneta f1070000.ethernet eth0: Using hardware mac address d8:58:d7:00:35:51
    May 15 13:27:35 turris kernel: [    4.446855] mvneta f1030000.ethernet eth1: Using hardware mac address d8:58:d7:00:35:4f
    May 15 13:27:35 turris kernel: [    4.455551] mvneta f1034000.ethernet eth2: Using hardware mac address d8:58:d7:00:35:50
    May 15 13:27:35 turris kernel: [    4.463730] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    May 15 13:27:35 turris kernel: [    4.470273] ehci-pci: EHCI PCI platform driver
    May 15 13:27:35 turris kernel: [    4.474759] ehci-platform: EHCI generic platform driver
    May 15 13:27:35 turris kernel: [    4.480057] ehci-orion: EHCI orion driver
    May 15 13:27:35 turris kernel: [    4.484171] orion-ehci f1058000.usb: EHCI Host Controller
    May 15 13:27:35 turris kernel: [    4.489592] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
    May 15 13:27:35 turris kernel: [    4.497231] orion-ehci f1058000.usb: irq 40, io mem 0xf1058000
    May 15 13:27:35 turris kernel: [    4.531328] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
    May 15 13:27:35 turris kernel: [    4.537548] hub 1-0:1.0: USB hub found
    May 15 13:27:35 turris kernel: [    4.541400] hub 1-0:1.0: 1 port detected
    May 15 13:27:35 turris kernel: [    4.545679] xhci-hcd f10f0000.usb3: xHCI Host Controller
    May 15 13:27:35 turris kernel: [    4.551011] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
    May 15 13:27:35 turris kernel: [    4.558584] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x0000000000010010
    May 15 13:27:35 turris kernel: [    4.567850] xhci-hcd f10f0000.usb3: irq 46, io mem 0xf10f0000
    May 15 13:27:35 turris kernel: [    4.572582] ata2: SATA link down (SStatus 0 SControl 300)
    May 15 13:27:35 turris kernel: [    4.579168] hub 2-0:1.0: USB hub found
    May 15 13:27:35 turris kernel: [    4.582957] hub 2-0:1.0: 1 port detected
    May 15 13:27:35 turris kernel: [    4.586997] xhci-hcd f10f0000.usb3: xHCI Host Controller
    May 15 13:27:35 turris kernel: [    4.592337] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 3
    May 15 13:27:35 turris kernel: [    4.599844] xhci-hcd f10f0000.usb3: Host supports USB 3.0  SuperSpeed
    May 15 13:27:35 turris kernel: [    4.606346] usb usb3: We don't know the algorithms for LPM for this host, disabling LPM.
    May 15 13:27:35 turris kernel: [    4.614667] hub 3-0:1.0: USB hub found
    May 15 13:27:35 turris kernel: [    4.618437] hub 3-0:1.0: 1 port detected
    May 15 13:27:35 turris kernel: [    4.622540] xhci-hcd f10f8000.usb3: xHCI Host Controller
    May 15 13:27:35 turris kernel: [    4.627871] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 4
    May 15 13:27:35 turris kernel: [    4.635431] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x0000000000010010
    May 15 13:27:35 turris kernel: [    4.644696] xhci-hcd f10f8000.usb3: irq 47, io mem 0xf10f8000
    May 15 13:27:35 turris kernel: [    4.650670] hub 4-0:1.0: USB hub found
    May 15 13:27:35 turris kernel: [    4.654470] hub 4-0:1.0: 1 port detected
    May 15 13:27:35 turris kernel: [    4.658499] xhci-hcd f10f8000.usb3: xHCI Host Controller
    May 15 13:27:35 turris kernel: [    4.663835] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 5
    May 15 13:27:35 turris kernel: [    4.671346] xhci-hcd f10f8000.usb3: Host supports USB 3.0  SuperSpeed
    May 15 13:27:35 turris kernel: [    4.677831] usb usb5: We don't know the algorithms for LPM for this host, disabling LPM.
    May 15 13:27:35 turris kernel: [    4.686145] hub 5-0:1.0: USB hub found
    May 15 13:27:35 turris kernel: [    4.689915] hub 5-0:1.0: 1 port detected
    May 15 13:27:35 turris kernel: [    4.694072] usbcore: registered new interface driver usb-storage
    May 15 13:27:35 turris kernel: [    4.700506] armada38x-rtc f10a3800.rtc: registered as rtc0
    May 15 13:27:35 turris kernel: [    4.706142] i2c /dev entries driver
    May 15 13:27:35 turris kernel: [    4.720132] (NULL device *): hwmon_device_register() is deprecated. Please convert the driver to use hwmon_device_register_with_info().
    May 15 13:27:35 turris kernel: [    4.732606] orion_wdt: Initial timeout 171 sec
    May 15 13:27:35 turris kernel: [    4.737310] sdhci: Secure Digital Host Controller Interface driver
    May 15 13:27:35 turris kernel: [    4.743516] sdhci: Copyright(c) Pierre Ossman
    May 15 13:27:35 turris kernel: [    4.751343] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
    May 15 13:27:35 turris kernel: [    4.757949] ata1.00: supports DRM functions and may not be fully accessible
    May 15 13:27:35 turris kernel: [    4.764945] ata1.00: ATA-11: KINGSTON SUV500MS120G, 003056RI, max UDMA/133
    May 15 13:27:35 turris kernel: [    4.771841] ata1.00: 234441648 sectors, multi 1: LBA48 NCQ (depth 31/32)
    May 15 13:27:35 turris kernel: [    4.779041] ata1.00: Trusted Computing capability qword not valid!
    May 15 13:27:35 turris kernel: [    4.779482] ata1.00: supports DRM functions and may not be fully accessible
    May 15 13:27:35 turris kernel: [    4.787719] ata1.00: Trusted Computing capability qword not valid!
    May 15 13:27:35 turris kernel: [    4.787725] ata1.00: configured for UDMA/133
    May 15 13:27:35 turris kernel: [    4.792195] scsi 0:0:0:0: Direct-Access     ATA      KINGSTON SUV500M 56RI PQ: 0 ANSI: 5
    May 15 13:27:35 turris kernel: [    4.800693] sd 0:0:0:0: [sda] 234441648 512-byte logical blocks: (120 GB/112 GiB)
    May 15 13:27:35 turris kernel: [    4.808212] sd 0:0:0:0: [sda] 4096-byte physical blocks
    May 15 13:27:35 turris kernel: [    4.813484] mmc0: SDHCI controller on f10d8000.sdhci [f10d8000.sdhci] using ADMA
    May 15 13:27:35 turris kernel: [    4.820995] sdhci-pltfm: SDHCI platform and OF driver helper
    May 15 13:27:35 turris kernel: [    4.826703] sd 0:0:0:0: [sda] Write Protect is off
    May 15 13:27:35 turris kernel: [    4.831524] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
    May 15 13:27:35 turris kernel: [    4.831680] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    May 15 13:27:35 turris kernel: [    4.841432]  sda: sda1
    May 15 13:27:35 turris kernel: [    4.841748] marvell-cesa f1090000.crypto: CESA device successfully registered
    May 15 13:27:35 turris kernel: [    4.844206] sd 0:0:0:0: [sda] Attached SCSI removable disk
    May 15 13:27:35 turris kernel: [    4.851388] NET: Registered protocol family 10
    May 15 13:27:35 turris kernel: [    4.861499] Segment Routing with IPv6
    May 15 13:27:35 turris kernel: [    4.865198] NET: Registered protocol family 17
    May 15 13:27:35 turris kernel: [    4.869665] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
    May 15 13:27:35 turris kernel: [    4.882821] 8021q: 802.1Q VLAN Support v1.8
    May 15 13:27:35 turris kernel: [    4.887096] Registering SWP/SWPB emulation handler
    May 15 13:27:35 turris kernel: [    4.893053] Btrfs loaded, crc32c=crc32c-generic
    May 15 13:27:35 turris kernel: [    4.898459] mv88e6085 f1072004.mdio-mii:10: switch 0x1760 detected: Marvell 88E6176, revision 1
    May 15 13:27:35 turris kernel: [    4.967977] mmc0: new high speed MMC card at address 0001
    May 15 13:27:35 turris kernel: [    4.973553] mmcblk0: mmc0:0001 H8G4a� 7.28 GiB 
    May 15 13:27:35 turris kernel: [    4.978161] mmcblk0boot0: mmc0:0001 H8G4a� partition 1 4.00 MiB
    May 15 13:27:35 turris kernel: [    4.984168] usb 2-1: new high-speed USB device number 2 using xhci-hcd
    May 15 13:27:35 turris kernel: [    4.990760] mmcblk0boot1: mmc0:0001 H8G4a� partition 2 4.00 MiB
    May 15 13:27:35 turris kernel: [    4.996774] mmcblk0rpmb: mmc0:0001 H8G4a� partition 3 4.00 MiB, chardev (250:0)
    May 15 13:27:35 turris kernel: [    5.005169]  mmcblk0: p1
    May 15 13:27:35 turris kernel: [    5.097228] libphy: mv88e6xxx SMI: probed
    May 15 13:27:35 turris kernel: [    5.101301] DSA: switch 0 0 parsed
    May 15 13:27:35 turris kernel: [    5.104725] DSA: tree 0 parsed
    May 15 13:27:35 turris kernel: [    5.182235] usb-storage 2-1:1.0: USB Mass Storage device detected
    May 15 13:27:35 turris kernel: [    5.188441] scsi host2: usb-storage 2-1:1.0
    May 15 13:27:35 turris kernel: [    5.815424] mv88e6085 f1072004.mdio-mii:10 lan0 (uninitialized): PHY [mv88e6xxx-1:00] driver [Marvell 88E1540]
    May 15 13:27:35 turris kernel: [    5.937662] mv88e6085 f1072004.mdio-mii:10 lan1 (uninitialized): PHY [mv88e6xxx-1:01] driver [Marvell 88E1540]
    May 15 13:27:35 turris kernel: [    6.055422] mv88e6085 f1072004.mdio-mii:10 lan2 (uninitialized): PHY [mv88e6xxx-1:02] driver [Marvell 88E1540]
    May 15 13:27:35 turris kernel: [    6.175421] mv88e6085 f1072004.mdio-mii:10 lan3 (uninitialized): PHY [mv88e6xxx-1:03] driver [Marvell 88E1540]
    May 15 13:27:35 turris kernel: [    6.232125] scsi 2:0:0:0: Direct-Access     SanDisk  Cruzer Fit       1.00 PQ: 0 ANSI: 6
    May 15 13:27:35 turris kernel: [    6.240672] sd 2:0:0:0: [sdb] 15232000 512-byte logical blocks: (7.80 GB/7.26 GiB)
    May 15 13:27:35 turris kernel: [    6.249610] sd 2:0:0:0: [sdb] Write Protect is off
    May 15 13:27:35 turris kernel: [    6.254424] sd 2:0:0:0: [sdb] Mode Sense: 43 00 00 00
    May 15 13:27:35 turris kernel: [    6.254691] sd 2:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
    May 15 13:27:35 turris kernel: [    6.267967] sd 2:0:0:0: [sdb] Attached SCSI removable disk
    May 15 13:27:35 turris kernel: [    6.297665] mv88e6085 f1072004.mdio-mii:10 lan4 (uninitialized): PHY [mv88e6xxx-1:04] driver [Marvell 88E1540]
    May 15 13:27:35 turris kernel: [    6.317930] armada38x-rtc f10a3800.rtc: setting system clock to 2021-05-15 11:27:15 UTC (1621078035)
    May 15 13:27:35 turris kernel: [    6.330315] F2FS-fs (mmcblk0p1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
    May 15 13:27:35 turris kernel: [    6.337572] F2FS-fs (mmcblk0p1): Can't find valid F2FS filesystem in 1th superblock
    May 15 13:27:35 turris kernel: [    6.345434] F2FS-fs (mmcblk0p1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
    May 15 13:27:35 turris kernel: [    6.352682] F2FS-fs (mmcblk0p1): Can't find valid F2FS filesystem in 2th superblock
    May 15 13:27:35 turris kernel: [    6.360361] F2FS-fs (mmcblk0p1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
    May 15 13:27:35 turris kernel: [    6.367630] F2FS-fs (mmcblk0p1): Can't find valid F2FS filesystem in 1th superblock
    May 15 13:27:35 turris kernel: [    6.375308] F2FS-fs (mmcblk0p1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
    May 15 13:27:35 turris kernel: [    6.382550] F2FS-fs (mmcblk0p1): Can't find valid F2FS filesystem in 2th superblock
    May 15 13:27:35 turris kernel: [    6.391214] BTRFS: device fsid 671e0a9d-8f21-475a-a8d9-8e89ccca7d01 devid 1 transid 3886 /dev/root
    May 15 13:27:35 turris kernel: [    6.400854] BTRFS info (device mmcblk0p1): disk space caching is enabled
    May 15 13:27:35 turris kernel: [    6.407585] BTRFS info (device mmcblk0p1): has skinny extents
    May 15 13:27:35 turris kernel: [    6.426240] BTRFS info (device mmcblk0p1): enabling ssd optimizations
    May 15 13:27:35 turris kernel: [    6.438139] VFS: Mounted root (btrfs filesystem) on device 0:12.
    May 15 13:27:35 turris kernel: [    6.444988] devtmpfs: mounted
    May 15 13:27:35 turris kernel: [    6.448522] Freeing unused kernel memory: 1024K
    May 15 13:27:35 turris kernel: [    6.500020] random: fast init done
    May 15 13:27:35 turris kernel:    6.515751] init: Console is alive
    May 15 13:27:35 turris kernel:    6.519222] init: - watchdog -
    May 15 13:27:35 turris kernel:    6.695805] kmodloader: loading kernel modules from /etc/modules-boot.d/*
    May 15 13:27:35 turris kernel: [    6.848204] usbcore: registered new interface driver uas
    May 15 13:27:35 turris kernel:    6.853669] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
    May 15 13:27:35 turris kernel:    6.866195] init: - preinit -
    May 15 13:27:35 turris kernel: [    6.976227] random: jshn: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel: [    6.993734] random: jshn: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel: [    7.026167] random: jshn: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel:   10.136113] mount_root: mounting /dev/root
    May 15 13:27:35 turris kernel: [   10.627335] BTRFS info (device mmcblk0p1): disk space caching is enabled
    May 15 13:27:35 turris kernel: [   11.394710] BTRFS: device label srv devid 1 transid 47303 /dev/sdb
    May 15 13:27:35 turris kernel: [   11.401134] BTRFS: device fsid daefbb76-c987-49a2-97ce-a6d15968459b devid 1 transid 18 /dev/sda1
    May 15 13:27:35 turris kernel:   11.418595] procd: - early -
    May 15 13:27:35 turris kernel:   11.421535] procd: - watchdog -
    May 15 13:27:35 turris kernel:   12.024876] procd: - watchdog -
    May 15 13:27:35 turris kernel:   12.028119] procd: - ubus -
    May 15 13:27:35 turris kernel: [   12.034686] urandom_read: 2 callbacks suppressed
    May 15 13:27:35 turris kernel: [   12.034689] random: ubusd: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel: [   12.082075] random: ubusd: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel: [   12.088525] random: ubusd: uninitialized urandom read (4 bytes read)
    May 15 13:27:35 turris kernel:   12.095115] procd: - init -
    May 15 13:27:35 turris kernel:   12.189600] kmodloader: loading kernel modules from /etc/modules.d/*
    May 15 13:27:35 turris kernel: [   12.201663] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
    May 15 13:27:35 turris kernel: [   12.217516] ip6_tables: (C) 2000-2006 Netfilter Core Team
    May 15 13:27:35 turris kernel: [   12.227838] Netfilter messages via NETLINK v0.30.
    May 15 13:27:35 turris kernel: [   12.234388] ip_set: protocol 6
    May 15 13:27:35 turris kernel: [   12.267989] i2c i2c-0: Added multiplexed i2c bus 1
    May 15 13:27:35 turris kernel: [   12.273145] i2c i2c-0: Added multiplexed i2c bus 2
    May 15 13:27:35 turris kernel: [   12.278327] i2c i2c-0: Added multiplexed i2c bus 3
    May 15 13:27:35 turris kernel: [   12.283498] i2c i2c-0: Added multiplexed i2c bus 4
    May 15 13:27:35 turris kernel: [   12.288621] i2c i2c-0: Added multiplexed i2c bus 5
    May 15 13:27:35 turris kernel: [   12.293835] i2c i2c-0: Added multiplexed i2c bus 6
    May 15 13:27:35 turris kernel: [   12.298958] i2c i2c-0: Added multiplexed i2c bus 7
    May 15 13:27:35 turris kernel: [   12.304490] pca953x 8-0071: 8-0071 supply vcc not found, using dummy regulator
    May 15 13:27:35 turris kernel: [   12.317107] i2c i2c-0: Added multiplexed i2c bus 8
    May 15 13:27:35 turris kernel: [   12.321937] pca954x 0-0070: registered 8 multiplexed busses for I2C mux pca9547
    May 15 13:27:35 turris kernel: [   12.330997] Mirror/redirect action on
    May 15 13:27:35 turris kernel: [   12.339646] u32 classifier
    May 15 13:27:35 turris kernel: [   12.342392]     input device check on
    May 15 13:27:35 turris kernel: [   12.346062]     Actions configured
    May 15 13:27:35 turris kernel: [   12.354273] sch_cake: Unknown symbol nf_conntrack_find_get (err 0)
    May 15 13:27:35 turris kernel: [   12.360539] sch_cake: Unknown symbol nf_ct_get_tuplepr (err 0)
    May 15 13:27:35 turris kernel: [   12.383894] Bridge firewalling registered
    May 15 13:27:35 turris kernel: [   12.390729] Loading modules backported from Linux version v4.19.161-0-gdaefdc9eb24b
    May 15 13:27:35 turris kernel: [   12.398438] Backport generated by backports.git v4.19.161-1-0-g4bb568fe
    May 15 13:27:35 turris kernel: [   12.409562] Ebtables v2.0 registered
    May 15 13:27:35 turris kernel: [   12.414909] ip_tables: (C) 2000-2006 Netfilter Core Team
    May 15 13:27:35 turris kernel: [   12.425756] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
    May 15 13:27:35 turris kernel: [   12.433896] ctnetlink v0.93: registering with nfnetlink.
    May 15 13:27:35 turris kernel: [   12.456048] usbcore: registered new interface driver ums-alauda
    May 15 13:27:35 turris kernel: [   12.466415] usbcore: registered new interface driver ums-cypress
    May 15 13:27:35 turris kernel: [   12.474150] usbcore: registered new interface driver ums-datafab
    May 15 13:27:35 turris kernel: [   12.480678] usbcore: registered new interface driver ums-freecom
    May 15 13:27:35 turris kernel: [   12.488858] usbcore: registered new interface driver ums-isd200
    May 15 13:27:35 turris kernel: [   12.495603] usbcore: registered new interface driver ums-jumpshot
    May 15 13:27:35 turris kernel: [   12.504196] usbcore: registered new interface driver ums-karma
    May 15 13:27:35 turris kernel: [   12.510679] usbcore: registered new interface driver ums-sddr09
    May 15 13:27:35 turris kernel: [   12.517947] usbcore: registered new interface driver ums-sddr55
    May 15 13:27:35 turris kernel: [   12.525160] usbcore: registered new interface driver ums-usbat
    May 15 13:27:35 turris kernel: [   12.532692] usbcore: registered new interface driver usbserial
    May 15 13:27:35 turris kernel: [   12.538575] usbcore: registered new interface driver usbserial_generic
    May 15 13:27:35 turris kernel: [   12.545187] usbserial: USB Serial support registered for generic
    May 15 13:27:35 turris kernel: [   12.558521] random: crng init done
    May 15 13:27:35 turris kernel: [   12.561966] random: 2 urandom warning(s) missed due to ratelimiting
    May 15 13:27:35 turris kernel: [   12.564301] xt_time: kernel timezone is -0000
    May 15 13:27:35 turris kernel: [   12.574476] at24 1-0054: 8192 byte 24c64 EEPROM, writable, 1 bytes/write
    May 15 13:27:35 turris kernel: [   12.614409] PPP generic driver version 2.4.2
    May 15 13:27:35 turris kernel: [   12.619701] NET: Registered protocol family 24
    May 15 13:27:35 turris kernel: [   12.637767] pci 0000:00:02.0: enabling device (0140 -> 0142)
    May 15 13:27:35 turris kernel: [   12.643521] ath10k_pci 0000:02:00.0: enabling device (0140 -> 0142)
    May 15 13:27:35 turris kernel: [   12.650027] ath10k_pci 0000:02:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
    May 15 13:27:35 turris kernel: [   12.884262] ath10k_pci 0000:02:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:02:00.0.bin failed with error -2
    May 15 13:27:35 turris kernel: [   12.895036] ath10k_pci 0000:02:00.0: Falling back to user helper
    May 15 13:27:35 turris kernel: [   13.282314] firmware ath10k!pre-cal-pci-0000:02:00.0.bin: firmware_loading_store: map pages failed
    May 15 13:27:35 turris kernel: [   13.291488] ath10k_pci 0000:02:00.0: Direct firmware load for ath10k/cal-pci-0000:02:00.0.bin failed with error -2
    May 15 13:27:35 turris kernel: [   13.301870] ath10k_pci 0000:02:00.0: Falling back to user helper
    May 15 13:27:35 turris kernel: [   13.312611] firmware ath10k!cal-pci-0000:02:00.0.bin: firmware_loading_store: map pages failed
    May 15 13:27:35 turris kernel: [   13.321467] ath10k_pci 0000:02:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-6.bin failed with error -2
    May 15 13:27:35 turris kernel: [   13.332201] ath10k_pci 0000:02:00.0: Falling back to user helper
    May 15 13:27:35 turris kernel: [   13.342652] firmware ath10k!QCA988X!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
    May 15 13:27:35 turris kernel: [   13.359738] ath10k_pci 0000:02:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
    May 15 13:27:35 turris kernel: [   13.369004] ath10k_pci 0000:02:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
    May 15 13:27:35 turris kernel: [   13.378531] ath10k_pci 0000:02:00.0: firmware ver 10.2.4-1.0-00047 api 5 features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 35bd9258
    May 15 13:27:35 turris kernel: [   13.423343] ath10k_pci 0000:02:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/board-2.bin failed with error -2
    May 15 13:27:35 turris kernel: [   13.433812] ath10k_pci 0000:02:00.0: Falling back to user helper
    May 15 13:27:35 turris kernel: [   13.444620] firmware ath10k!QCA988X!hw2.0!board-2.bin: firmware_loading_store: map pages failed
    May 15 13:27:35 turris kernel: [   13.454321] ath10k_pci 0000:02:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
    May 15 13:27:35 turris kernel: [   14.593546] ath10k_pci 0000:02:00.0: htt-ver 2.1 wmi-op 5 htt-op 2 cal otp max-sta 128 raw 0 hwcrypto 1
    May 15 13:27:35 turris kernel: [   14.711751] ath: EEPROM regdomain: 0x0
    May 15 13:27:35 turris kernel: [   14.711754] ath: EEPROM indicates default country code should be used
    May 15 13:27:35 turris kernel: [   14.711755] ath: doing EEPROM country->regdmn map search
    May 15 13:27:35 turris kernel: [   14.711759] ath: country maps to regdmn code: 0x3a
    May 15 13:27:35 turris kernel: [   14.711761] ath: Country alpha2 being used: US
    May 15 13:27:35 turris kernel: [   14.711762] ath: Regpair used: 0x3a
    May 15 13:27:35 turris kernel: [   14.720867] usbcore: registered new interface driver qcserial
    May 15 13:27:35 turris kernel: [   14.726729] usbserial: USB Serial support registered for Qualcomm USB modem
    May 15 13:27:35 turris kernel: [   14.738022] pci 0000:00:03.0: enabling device (0140 -> 0142)
    May 15 13:27:35 turris kernel: [   14.743749] ath9k 0000:03:00.0: enabling device (0140 -> 0142)
    May 15 13:27:35 turris kernel: [   14.837281] ath: EEPROM regdomain: 0x0
    May 15 13:27:35 turris kernel: [   14.837285] ath: EEPROM indicates default country code should be used
    May 15 13:27:35 turris kernel: [   14.837286] ath: doing EEPROM country->regdmn map search
    May 15 13:27:35 turris kernel: [   14.837290] ath: country maps to regdmn code: 0x3a
    May 15 13:27:35 turris kernel: [   14.837292] ath: Country alpha2 being used: US
    May 15 13:27:35 turris kernel: [   14.837296] ath: Regpair used: 0x3a
    May 15 13:27:35 turris kernel: [   14.849566] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
    May 15 13:27:35 turris kernel: [   14.850462] ieee80211 phy1: Atheros AR9287 Rev:2 mem=0xf1090000, irq=79
    May 15 13:27:35 turris kernel:   14.858330] kmodloader: done loading kernel modules from /etc/modules.d/*
    May 15 13:27:35 turris kernel: [   16.828244] IPv6: ADDRCONF(NETDEV_UP): br-guest_turris: link is not ready
    May 15 13:27:35 turris kernel: [   16.843104] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
    May 15 13:27:35 turris kernel: [   16.856202] mvneta f1030000.ethernet eth1: configuring for fixed/rgmii link mode
    May 15 13:27:35 turris kernel: [   16.864136] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
    May 15 13:27:35 turris kernel: [   16.870374] mvneta f1030000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
    May 15 13:27:35 turris kernel: [   16.882069] mv88e6085 f1072004.mdio-mii:10 lan0: configuring for phy/gmii link mode
    May 15 13:27:35 turris kernel: [   16.889885] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
    May 15 13:27:35 turris kernel: [   16.898865] br-lan: port 1(lan0) entered blocking state
    May 15 13:27:35 turris kernel: [   16.904150] br-lan: port 1(lan0) entered disabled state
    May 15 13:27:35 turris kernel: [   16.917524] device lan0 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   16.922251] device eth1 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   16.990903] mv88e6085 f1072004.mdio-mii:10 lan1: configuring for phy/gmii link mode
    May 15 13:27:35 turris kernel: [   17.010649] br-lan: port 2(lan1) entered blocking state
    May 15 13:27:35 turris kernel: [   17.015926] br-lan: port 2(lan1) entered disabled state
    May 15 13:27:35 turris kernel: [   17.030802] device lan1 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   17.079542] mv88e6085 f1072004.mdio-mii:10 lan2: configuring for phy/gmii link mode
    May 15 13:27:35 turris kernel: [   17.106570] br-lan: port 3(lan2) entered blocking state
    May 15 13:27:35 turris kernel: [   17.111849] br-lan: port 3(lan2) entered disabled state
    May 15 13:27:35 turris kernel: [   17.126334] device lan2 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   17.184451] mv88e6085 f1072004.mdio-mii:10 lan3: configuring for phy/gmii link mode
    May 15 13:27:35 turris kernel: [   17.209260] br-lan: port 4(lan3) entered blocking state
    May 15 13:27:35 turris kernel: [   17.214522] br-lan: port 4(lan3) entered disabled state
    May 15 13:27:35 turris kernel: [   17.238819] device lan3 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   17.292703] mvneta f1070000.ethernet eth0: configuring for fixed/rgmii link mode
    May 15 13:27:35 turris kernel: [   17.300555] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
    May 15 13:27:35 turris kernel: [   17.306483] mvneta f1070000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
    May 15 13:27:35 turris kernel: [   17.323796] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
    May 15 13:27:35 turris kernel: [   17.355482] mv88e6085 f1072004.mdio-mii:10 lan4: configuring for phy/gmii link mode
    May 15 13:27:35 turris kernel: [   17.363393] br-lan: port 5(lan4) entered blocking state
    May 15 13:27:35 turris kernel: [   17.368635] br-lan: port 5(lan4) entered disabled state
    May 15 13:27:35 turris kernel: [   17.383008] device lan4 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   17.387639] device eth0 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   17.542599] mvneta f1034000.ethernet eth2: PHY [f1072004.mdio-mii:01] driver [Marvell 88E1510]
    May 15 13:27:35 turris kernel: [   17.551676] mvneta f1034000.ethernet eth2: configuring for phy/sgmii link mode
    May 15 13:27:35 turris kernel: [   17.887857] BTRFS info (device sdb): disk space caching is enabled
    May 15 13:27:35 turris kernel: [   17.894080] BTRFS info (device sdb): has skinny extents
    May 15 13:27:35 turris kernel: [   18.096413] ath: EEPROM regdomain: 0x80cb
    May 15 13:27:35 turris kernel: [   18.100438] ath: EEPROM indicates we should expect a country code
    May 15 13:27:35 turris kernel: [   18.106605] ath: doing EEPROM country->regdmn map search
    May 15 13:27:35 turris kernel: [   18.111950] ath: country maps to regdmn code: 0x37
    May 15 13:27:35 turris kernel: [   18.116757] ath: Country alpha2 being used: CZ
    May 15 13:27:35 turris kernel: [   18.121220] ath: Regpair used: 0x37
    May 15 13:27:35 turris kernel: [   18.124730] ath: regdomain 0x80cb dynamically updated by user
    May 15 13:27:35 turris kernel: [   18.130541] ath: EEPROM regdomain: 0x80cb
    May 15 13:27:35 turris kernel: [   18.134562] ath: EEPROM indicates we should expect a country code
    May 15 13:27:35 turris kernel: [   18.140669] ath: doing EEPROM country->regdmn map search
    May 15 13:27:35 turris kernel: [   18.145994] ath: country maps to regdmn code: 0x37
    May 15 13:27:35 turris kernel: [   18.150793] ath: Country alpha2 being used: CZ
    May 15 13:27:35 turris kernel: [   18.155259] ath: Regpair used: 0x37
    May 15 13:27:35 turris kernel: [   18.158755] ath: regdomain 0x80cb dynamically updated by user
    May 15 13:27:35 turris kernel: [   19.378016] mv88e6085 f1072004.mdio-mii:10 lan3: Link is Up - 10Mbps/Full - flow control off
    May 15 13:27:35 turris kernel: [   19.751716] mvneta f1034000.ethernet eth2: Link is Up - 100Mbps/Full - flow control off
    May 15 13:27:35 turris kernel: [   20.491867] mv88e6085 f1072004.mdio-mii:10 lan2: Link is Up - 1Gbps/Full - flow control rx/tx
    May 15 13:27:35 turris kernel: [   20.787509] ath10k_pci 0000:02:00.0: pdev param 0 not supported by firmware
    May 15 13:27:35 turris kernel: [   20.808561] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
    May 15 13:27:35 turris kernel: [   20.815398] br-lan: port 4(lan3) entered blocking state
    May 15 13:27:35 turris kernel: [   20.820640] br-lan: port 4(lan3) entered forwarding state
    May 15 13:27:35 turris kernel: [   20.826151] br-lan: port 3(lan2) entered blocking state
    May 15 13:27:35 turris kernel: [   20.831399] br-lan: port 3(lan2) entered forwarding state
    May 15 13:27:35 turris kernel: [   20.837286] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
    May 15 13:27:35 turris kernel: [   20.843992] br-lan: port 6(wlan0) entered blocking state
    May 15 13:27:35 turris kernel: [   20.849325] br-lan: port 6(wlan0) entered disabled state
    May 15 13:27:35 turris kernel: [   20.854779] device wlan0 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   20.922058] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
    May 15 13:27:35 turris kernel: [   20.929157] br-lan: port 7(wlan1) entered blocking state
    May 15 13:27:35 turris kernel: [   20.934521] br-lan: port 7(wlan1) entered disabled state
    May 15 13:27:35 turris kernel: [   20.940017] device wlan1 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   20.944855] br-lan: port 7(wlan1) entered blocking state
    May 15 13:27:35 turris kernel: [   20.950184] br-lan: port 7(wlan1) entered forwarding state
    May 15 13:27:35 turris kernel: [   21.034863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
    May 15 13:27:35 turris kernel: [   21.043735] br-guest_turris: port 1(guest_turris_1) entered blocking state
    May 15 13:27:35 turris kernel: [   21.050724] br-guest_turris: port 1(guest_turris_1) entered disabled state
    May 15 13:27:35 turris kernel: [   21.057830] device guest_turris_1 entered promiscuous mode
    May 15 13:27:35 turris kernel: [   21.064143] IPv6: ADDRCONF(NETDEV_UP): guest_turris_1: link is not ready
    May 15 13:27:35 turris kernel: [   21.070922] br-guest_turris: port 1(guest_turris_1) entered blocking state
    May 15 13:27:35 turris kernel: [   21.077842] br-guest_turris: port 1(guest_turris_1) entered forwarding state
    May 15 13:27:35 turris kernel: [   21.085274] IPv6: ADDRCONF(NETDEV_CHANGE): br-guest_turris: link becomes ready
    May 15 13:27:35 turris kernel: [   21.151812] IPv6: ADDRCONF(NETDEV_CHANGE): guest_turris_1: link becomes ready
    May 15 11:27:35 turris procd: /etc/rc.d/S96led: setting up led wan
    May 15 11:27:35 turris procd: /etc/rc.d/S96led: setting up led pci1
    May 15 11:27:35 turris procd: /etc/rc.d/S96led: setting up led pci2
    May 15 11:27:35 turris procd: /etc/rc.d/S96led: setting up led Power
    May 15 11:27:36 turris sshd[7034]: Received disconnect from 192.168.2.120 port 58966:11: FlowSshClientSession: disconnected on user's request
    May 15 11:27:36 turris sshd[7034]: Disconnected from user root 192.168.2.120 port 58966
    May 15 11:27:36 turris turris: Router Turris successfully started.
    May 15 13:27:27 turris dnsmasq[3624]: started, version 2.80 DNS disabled
    May 15 13:27:38 turris dnsmasq[3624]: overflow: 2 log entries lost
    May 15 13:27:38 turris dnsmasq[8009]: started, version 2.80 DNS disabled
    May 15 13:27:38 turris dnsmasq[8009]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth nettlehash DNSSEC no-ID loop-detect inotify dumpfile
    May 15 13:27:38 turris dnsmasq-dhcp[8009]: DHCP, IP range 10.111.222.101 -- 10.111.222.105, lease time 1h
    May 15 13:27:38 turris dnsmasq-dhcp[8009]: DHCP, IP range 192.168.2.101 -- 192.168.2.120, lease time 6h
    May 15 13:27:38 turris dnsmasq-dhcp[8009]: read /etc/ethers - 0 addresses
    May 15 13:27:38 turris dnsmasq-dhcp[8009]: read /etc/ethers - 0 addresses
    May 15 11:27:38 turris procd: /etc/rc.d/S99start-indicator: setting up led wan
    May 15 11:27:38 turris procd: /etc/rc.d/S99start-indicator: setting up led pci1
    May 15 11:27:38 turris procd: /etc/rc.d/S99start-indicator: setting up led pci2
    May 15 11:27:38 turris procd: /etc/rc.d/S99start-indicator: setting up led Power
    May 15 11:27:38 turris procd: - init complete -
    May 15 11:27:38 turris firewall: Reloading firewall due to ifup of lan (br-lan)
    May 15 13:27:39 turris kernel: [   30.301650] device br-lan entered promiscuous mode
    May 15 11:27:39 turris adblock-4.0.7[8155]: adblock instance started ::: action: start, priority: 0, pid: 8155
    May 15 13:27:40 turris kernel: [   32.024500] mv88e6085 f1072004.mdio-mii:10 lan1: Link is Up - 100Mbps/Full - flow control rx/tx
    May 15 13:27:40 turris kernel: [   32.109488] br-lan: port 2(lan1) entered blocking state
    May 15 13:27:40 turris kernel: [   32.114735] br-lan: port 2(lan1) entered forwarding state
    May 15 11:27:40 turris netifd: Network device 'lan1' link is up
    May 15 13:27:43 turris sentinel: INFO [certgen.action_spec_init:89] Valid certificate found
    May 15 11:27:44 turris kresd[9091]: [system] warning: hard limit for number of file-descriptors is only 4096 but recommended value is 524288
    May 15 11:27:45 turris kresd[9091]: [ta_update] refreshing TA for .
    May 15 11:27:45 turris kresd[9091]: [ta_update] next refresh for . in 24 hours
    May 15 11:27:46 turris adblock-4.0.7[8155]: blocklist with overall 15393 blocked domains loaded successfully (Turris Omnia, TurrisOS 5.1.10 a5672f6b96f393145070ad17c8eb1d15ef49ad2e)
    May 15 11:27:48 turris firewall: Reloading firewall due to ifup of wan (eth2)
    May 15 11:27:50 turris firewall: Reloading firewall due to ifup of wan6 (eth2)
    May 15 11:28:01 turris crond[10386]: (root) CMD (/usr/bin/rainbow_button_sync.sh)
    May 15 11:28:01 turris resolver-debug: == enable verbose logging (reboot to disable it) ==
    May 15 11:28:01 turris root: Called /etc/init.d/kresd stop
    May 15 11:28:01 turris root: set dhcp script
    May 15 11:28:01 turris root: job 4 at Sat May 15 13:30:00 2021
    May 15 11:28:01 turris root: Called /etc/init.d/kresd start
    May 15 11:28:01 turris kresd[10469]: [system] warning: hard limit for number of file-descriptors is only 4096 but recommended value is 524288
    May 15 11:28:01 turris root: set dhcp script
    May 15 11:28:01 turris kresd[10469]: [ta_update] refreshing TA for .
    May 15 11:28:01 turris kresd[10469]: [ta_update] next refresh for . in 24 hours
    May 15 11:28:02 turris /dhcp_host_domain_ng.py: Refresh kresd leases
    May 15 11:28:02 turris root: Called /etc/resolver/dhcp_host_domain_ng.py
    May 15 11:28:06 turris kresd[10469]: verbose(true)
    May 15 11:28:06 turris kresd[10469]: true
    May 15 11:28:06 turris resolver-debug: resolver.common=resolver
    May 15 11:28:06 turris resolver-debug: resolver.common.interface='0.0.0.0' '::0'
    May 15 11:28:06 turris resolver-debug: resolver.common.port='53'
    May 15 11:28:06 turris resolver-debug: resolver.common.keyfile='/etc/root.keys'
    May 15 11:28:06 turris resolver-debug: resolver.common.verbose='0'
    May 15 11:28:06 turris resolver-debug: resolver.common.msg_buffer_size='65552'
    May 15 11:28:06 turris resolver-debug: resolver.common.msg_cache_size='20M'
    May 15 11:28:06 turris resolver-debug: resolver.common.net_ipv6='1'
    May 15 11:28:06 turris resolver-debug: resolver.common.net_ipv4='1'
    May 15 11:28:06 turris resolver-debug: resolver.common.prefered_resolver='kresd'
    May 15 11:28:06 turris resolver-debug: resolver.common.prefetch='yes'
    May 15 11:28:06 turris resolver-debug: resolver.common.static_domains='1'
    May 15 11:28:06 turris resolver-debug: resolver.common.edns_buffer_size='1232'
    May 15 11:28:06 turris resolver-debug: resolver.common.dynamic_domains='1'
    May 15 11:28:06 turris resolver-debug: resolver.common.forward_upstream='1'
    May 15 11:28:06 turris resolver-debug: resolver.common.ignore_root_key='0'
    May 15 11:28:06 turris resolver-debug: resolver.kresd=resolver
    May 15 11:28:06 turris resolver-debug: resolver.kresd.rundir='/tmp/kresd'
    May 15 11:28:06 turris resolver-debug: resolver.kresd.log_stderr='1'
    May 15 11:28:06 turris resolver-debug: resolver.kresd.log_stdout='1'
    May 15 11:28:06 turris resolver-debug: resolver.kresd.forks='1'
    May 15 11:28:06 turris resolver-debug: resolver.kresd.keep_cache='1'
    May 15 11:28:06 turris resolver-debug: resolver.kresd.rpz_file='/etc/kresd/adb_list.overall'
    May 15 11:28:06 turris resolver-debug: resolver.unbound=resolver
    May 15 11:28:06 turris resolver-debug: resolver.unbound.outgoing_range='60'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.outgoing_num_tcp='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.incoming_num_tcp='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.msg_cache_slabs='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.num_queries_per_thread='30'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.rrset_cache_size='100K'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.rrset_cache_slabs='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.infra_cache_slabs='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.infra_cache_numhosts='200'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.access_control='0.0.0.0/0 allow' '::0/0 allow'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.pidfile='/var/run/unbound.pid'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.root_hints='/etc/unbound/named.cache'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.target_fetch_policy='2 1 0 0 0'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.harden_short_bufsize='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.harden_large_queries='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.qname_minimisation='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.harden_below_nxdomain='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.key_cache_size='100k'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.key_cache_slabs='1'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.neg_cache_size='10k'
    May 15 11:28:06 turris resolver-debug: resolver.unbound.prefetch_key='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound_remote_control=resolver
    May 15 11:28:06 turris resolver-debug: resolver.unbound_remote_control.control_enable='yes'
    May 15 11:28:06 turris resolver-debug: resolver.unbound_remote_control.control_use_cert='no'
    May 15 11:28:06 turris resolver-debug: resolver.unbound_remote_control.control_interface='127.0.0.1'
    May 15 11:28:06 turris resolver-debug: == resolv.conf* ==
    May 15 11:28:06 turris resolver-debug: /etc/resolv.conf:search lan
    May 15 11:28:06 turris resolver-debug: /etc/resolv.conf:nameserver 127.0.0.1
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf:search lan
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf:nameserver 127.0.0.1
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf.auto:# Interface wan
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf.auto:nameserver 10.255.255.20
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf.auto:nameserver 10.255.255.10
    May 15 11:28:06 turris resolver-debug: /tmp/resolv.conf.auto.last.md5:43466b0382ddedabf639964753be5091
    May 15 11:28:06 turris resolver-debug: == DNSSEC root key file ==
    May 15 11:28:06 turris resolver-debug: cb02e46d912d6e4ab17dbc8289f4d14b  /etc/root.keys
    May 15 11:28:06 turris resolver-debug: /etc/root.keys:. IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
    May 15 11:28:06 turris resolver-debug: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
    May 15 11:28:06 turris resolver-debug: == resolver process ==
    May 15 11:28:06 turris resolver-debug: == configured trust anchors ==
    May 15 11:28:06 turris kresd[10469]: > trust_anchors
    May 15 11:28:06 turris kresd[10469]: {
    May 15 11:28:06 turris kresd[10469]:     ['add'] = function add(keystr): 0xb68ece58,
    May 15 11:28:06 turris kresd[10469]:     ['add_file'] = function add_file(path, unmanaged): 0xb68ecaf8,
    May 15 11:28:06 turris kresd[10469]:     ['bootstrap_ca'] = '/etc/kresd/icann-ca.pem',
    May 15 11:28:06 turris kresd[10469]:     ['bootstrap_url'] = 'https://data.iana.org/root-anchors/root-anchors.xml',
    May 15 11:28:06 turris kresd[10469]:     ['config'] = function config(): 0xb68ece18,
    May 15 11:28:06 turris kresd[10469]:     ['insecure'] = {
    May 15 11:28:06 turris kresd[10469]:     },
    May 15 11:28:06 turris kresd[10469]:     ['key_state'] = {
    May 15 11:28:06 turris kresd[10469]:         ['AddPend'] = 'AddPend',
    May 15 11:28:06 turris kresd[10469]:         ['Missing'] = 'Missing',
    May 15 11:28:06 turris kresd[10469]:         ['Removed'] = 'Removed',
    May 15 11:28:06 turris kresd[10469]:         ['Revoked'] = 'Revoked',
    May 15 11:28:06 turris kresd[10469]:         ['Start'] = 'Start',
    May 15 11:28:06 turris kresd[10469]:         ['Valid'] = 'Valid',
    May 15 11:28:06 turris kresd[10469]:     },
    May 15 11:28:06 turris kresd[10469]:     ['keyset_publish'] = function keyset_publish(keyset): 0xb68ecad0,
    May 15 11:28:06 turris kresd[10469]:     ['keyset_write'] = function keyset_write(keyset): 0xb68ec9c8,
    May 15 11:28:06 turris kresd[10469]:     ['keysets'] = {
    May 15 11:28:06 turris kresd[10469]:         ['\000'] = {
    May 15 11:28:06 turris kresd[10469]:             {
    May 15 11:28:06 turris kresd[10469]:                 ['class'] = 1,
    May 15 11:28:06 turris kresd[10469]:                 ['key_tag'] = 20326,
    May 15 11:28:06 turris kresd[10469]:                 ['owner'] = '\000',
    May 15 11:28:06 turris kresd[10469]:                 ['rdata'] = '\001\001\003\008\003\001\000\001\172\255\180	\188\2019\2481\247\161\229\236\136\247\165\146U\236S\004\011\2282\002s\144\164\206\137mo\144\134\243\197\225w\251\254\017\129c\170\236z\241F,G\148YD\196\226\192&\190^\152\187\205\237%\151\130r\225\227\224y\197	MW?\014\131\201/\002\179-5\019\177U\011\130i)\200\013\208\249,\172\150m\023v\159\213\134{d|?8\002\154\189\196\129R\235\143 qY\236\197\2102\199\193S|y\244\183\172(\255\017h/!h\027\246\214\171\165U\003+\246\249\2406\190\178\170\165\179w\141n\235\251\166\191\158\161\145\190J\176\202\234u\158/w:\031\144)\199>\203\141W5\1852\029\176\133\241\184\226\216\003\143\226\148\025\146T\140\238\013g\221EG\225\029\214:\249\201\252\028Tf\251hL\240	\215\025|,\247\158y*\181\001\230\168\161\202Q\154\242\203\155_cg\233L\013GP$Q5{\225\181',
    May 15 11:28:06 turris kresd[10469]:                 ['state'] = 'Valid',
    May 15 11:28:06 turris kresd[10469]:                 ['ttl'] = 172800,
    May 15 11:28:06 turris kresd[10469]:                 ['type'] = 48,
    May 15 11:28:06 turris kresd[10469]:             },
    May 15 11:28:06 turris kresd[10469]:             ['filename'] = '/etc/root.keys',
    May 15 11:28:06 turris kresd[10469]:             ['managed'] = false,
    May 15 11:28:06 turris kresd[10469]:             ['owner'] = '\000',
    May 15 11:28:06 turris kresd[10469]:         },
    May 15 11:28:06 turris kresd[10469]:     },
    May 15 11:28:06 turris kresd[10469]:     ['remove'] = function remove(zname): 0xb68ecbc8,
    May 15 11:28:06 turris kresd[10469]:     ['set_insecure'] = function set_insecure(list): 0xb68ece80,
    May 15 11:28:06 turris kresd[10469]:     ['summary'] = function summary(single_owner): 0xb68ecea8,
    May 15 11:28:06 turris kresd[10469]: }
    May 15 11:28:06 turris resolver-debug: > {
    May 15 11:28:06 turris resolver-debug: ['add'] = function add(keystr): 0xb68ece58,
    May 15 11:28:06 turris resolver-debug: ['add_file'] = function add_file(path, unmanaged): 0xb68ecaf8,
    May 15 11:28:06 turris resolver-debug: ['bootstrap_ca'] = '/etc/kresd/icann-ca.pem',
    May 15 11:28:06 turris resolver-debug: ['bootstrap_url'] = 'https://data.iana.org/root-anchors/root-anchors.xml',
    May 15 11:28:06 turris resolver-debug: ['config'] = function config(): 0xb68ece18,
    May 15 11:28:06 turris resolver-debug: ['insecure'] = {
    May 15 11:28:06 turris resolver-debug: },
    May 15 11:28:06 turris resolver-debug: ['key_state'] = {
    May 15 11:28:06 turris resolver-debug: ['AddPend'] = 'AddPend',
    May 15 11:28:06 turris resolver-debug: ['Missing'] = 'Missing',
    May 15 11:28:06 turris resolver-debug: ['Removed'] = 'Removed',
    May 15 11:28:06 turris resolver-debug: ['Revoked'] = 'Revoked',
    May 15 11:28:06 turris resolver-debug: ['Start'] = 'Start',
    May 15 11:28:06 turris resolver-debug: ['Valid'] = 'Valid',
    May 15 11:28:06 turris resolver-debug: },
    May 15 11:28:06 turris resolver-debug: ['keyset_publish'] = function keyset_publish(keyset): 0xb68ecad0,
    May 15 11:28:06 turris resolver-debug: ['keyset_write'] = function keyset_write(keyset): 0xb68ec9c8,
    May 15 11:28:06 turris resolver-debug: ['keysets'] = {
    May 15 11:28:06 turris resolver-debug: ['000'] = {
    May 15 11:28:06 turris resolver-debug: {
    May 15 11:28:06 turris resolver-debug: ['class'] = 1,
    May 15 11:28:06 turris resolver-debug: ['key_tag'] = 20326,
    May 15 11:28:06 turris resolver-debug: ['owner'] = '000',
    May 15 11:28:06 turris resolver-debug: ['rdata'] = '001001003008003001000001172255180	18820192481247161229236136247165146U236S0040112282002s144164206137mo144134243197225w251254017129c170236z241F,G148YD196226192&190^152187205237%151130r225227224y197	MW?014131201/002179-5019177U011130i)200013208249,172150m023v159213134{d|?8002154189196129R235143 qY2361972102199193S|y244183172(255017h/!h027246214171165U003+2462492406190178170165179w141n235251166191158161145190J176202234u158/w:031144)199>203141W51852029176133241184226216003143226148025146T140238013g221EG225029214:249201252028Tf251hL240	215025|,247158y*181001230168161202Q154242203155_cg233L013GP$Q5{225181',
    May 15 11:28:06 turris resolver-debug: ['state'] = 'Valid',
    May 15 11:28:06 turris resolver-debug: ['ttl'] = 172800,
    May 15 11:28:06 turris resolver-debug: ['type'] = 48,
    May 15 11:28:06 turris resolver-debug: },
    May 15 11:28:06 turris resolver-debug: ['filename'] = '/etc/root.keys',
    May 15 11:28:06 turris resolver-debug: ['managed'] = false,
    May 15 11:28:06 turris resolver-debug: ['owner'] = '000',
    May 15 11:28:06 turris resolver-debug: },
    May 15 11:28:06 turris resolver-debug: },
    May 15 11:28:06 turris resolver-debug: ['remove'] = function remove(zname): 0xb68ecbc8,
    May 15 11:28:06 turris resolver-debug: ['set_insecure'] = function set_insecure(list): 0xb68ece80,
    May 15 11:28:06 turris resolver-debug: ['summary'] = function summary(single_owner): 0xb68ecea8,
    May 15 11:28:06 turris resolver-debug: }
    May 15 11:28:06 turris resolver-debug: == enable verbose logging (reboot to disable it) ==
    May 15 11:28:06 turris kresd[10469]: > verbose(true)
    May 15 11:28:06 turris kresd[10469]: true
    May 15 11:28:06 turris kresd[10469]: > [00000.00][plan] plan 'api.turris.cz.' type 'A' uid [45600.00]
    May 15 11:28:06 turris kresd[10469]: [45600.00][iter]   'api.turris.cz.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [45600.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:06 turris kresd[10469]: [45600.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:06 turris kresd[10469]: [45600.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:06 turris kresd[10469]: [45600.01][plan]   plan '.' type 'DNSKEY' uid [45600.02]
    May 15 11:28:06 turris kresd[10469]: [45600.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:06 turris kresd[10469]: [45600.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172795
    May 15 11:28:06 turris kresd[10469]: [45600.03][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 12986
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: .		DNSKEY
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: .                   	172795	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:06 turris kresd[10469]: .                   	172795	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:06 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.03][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:06 turris kresd[10469]: [45600.03][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.01][iter]   'api.turris.cz.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [45600.04][plan]   plan 'cz.' type 'DS' uid [45600.05]
    May 15 11:28:06 turris kresd[10469]: [45600.05][iter]     'cz.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:06 turris kresd[10469]: [45600.06][cach]     => satisfied by exact RRset: rank 060, new TTL 32526
    May 15 11:28:06 turris kresd[10469]: [45600.06][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 10509
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: cz.		DS
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: cz.                 	32526	DS	20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
    May 15 11:28:06 turris kresd[10469]: cz.                 	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . eYou1pjuNiqGBTSPxxZ91A/ifjQ1H11IyiQOGCeo48CpigO01r0V/rJ83P3+FJreZ0cUSOjSNrgjaE8P03DdUDSv+n2b0f9D5Ld1p3Od7++nOlaAjcW2zoxdC0Zp5wH69+0kLkuvtsgSQbffq1maawrDh/VGeMvUCSlSsLqfJza+up830DyzONCGVHvp0YlcMkssWaafOMCZ99Q/3Rtv/7VK2t9L15T67Oz/k/IlyQ3byz79O99sGWbC/Lv/mMQtXTkHDpkrWdN1hUsZoDHwmtviv0gvgG92fhmOx1TFNRJl2+gRlW3kQ36ElEGZWun77uwVGBl22mO0wa+F36BIJg==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.06][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.06][vldr]     <= DS: OK
    May 15 11:28:06 turris kresd[10469]: [45600.06][vldr]     <= parent: updating DS
    May 15 11:28:06 turris kresd[10469]: [45600.06][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.04][iter]   'api.turris.cz.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [45600.07][plan]   plan 'cz.' type 'DNSKEY' uid [45600.08]
    May 15 11:28:06 turris kresd[10469]: [45600.08][iter]     'cz.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:06 turris kresd[10469]: [45600.09][cach]     => satisfied by exact RRset: rank 060, new TTL 3568
    May 15 11:28:06 turris kresd[10469]: [45600.09][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 47067
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: cz.		DNSKEY
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: cz.                 	3568	DNSKEY	256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
    May 15 11:28:06 turris kresd[10469]: cz.                 	3568	DNSKEY	257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
    May 15 11:28:06 turris kresd[10469]: cz.                 	3600	RRSIG	DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.09][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:06 turris kresd[10469]: [45600.09][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.07][iter]   'api.turris.cz.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [45600.10][plan]   plan 'turris.cz.' type 'DS' uid [45600.11]
    May 15 11:28:06 turris kresd[10469]: [45600.11][iter]     'turris.cz.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:06 turris kresd[10469]: [45600.12][cach]     => satisfied by exact RRset: rank 060, new TTL 3569
    May 15 11:28:06 turris kresd[10469]: [45600.12][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 11319
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: turris.cz.		DS
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: turris.cz.          	3569	DS	54959 13 2 AFDA82E687FFC58D759824274F3C3EB007EEA1E46F6108886EC0FA979BFD78C3
    May 15 11:28:06 turris kresd[10469]: turris.cz.          	3600	RRSIG	DS 13 2 3600 20210525102134 20210511085134 26955 cz. 9klmfjVJ6MSi/pTFFlRmxTX1f0LTtZ1DGYBomivwptKg1lVwWiWK6W0OhzY69BoMDlHuPazNVVS0Jo/yveiX7A==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.12][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.12][vldr]     <= DS: OK
    May 15 11:28:06 turris kresd[10469]: [45600.12][vldr]     <= parent: updating DS
    May 15 11:28:06 turris kresd[10469]: [45600.12][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.10][iter]   'api.turris.cz.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [45600.13][plan]   plan 'turris.cz.' type 'DNSKEY' uid [45600.14]
    May 15 11:28:06 turris kresd[10469]: [45600.14][iter]     'turris.cz.' type 'DNSKEY' new uid was assigned .15, parent uid .13
    May 15 11:28:06 turris kresd[10469]: [45600.15][cach]     => satisfied by exact RRset: rank 060, new TTL 1769
    May 15 11:28:06 turris kresd[10469]: [45600.15][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 43227
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: turris.cz.		DNSKEY
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: turris.cz.          	1769	DNSKEY	256 3 13 CAH1yUvMrTHW3F9ZbwuQ7P3zeGRpagasOyBzJhL7oY6yADz9x2ATGLml3MYQc2VOQHbb8fvVoDxtcRTOigTwlA==
    May 15 11:28:06 turris kresd[10469]: turris.cz.          	1769	DNSKEY	257 3 13 KDAJfPGWgvNAEHUMzmmSa+c3gHfoGIsXnhIO1iAYGTAyVBo+CLTyIk3wxDtt4Yn3eCrCiYsEAHBJgQvA3pwJ8w==
    May 15 11:28:06 turris kresd[10469]: turris.cz.          	1800	RRSIG	DNSKEY 13 2 1800 20210528064621 20210514051621 54959 turris.cz. u4f5Xeb9jZIDKVLuM1Dkr4IgJXij4jOgsVLWXqoteUPGz9xCN4RQ5VfDRUIQE6kvEQhtCpQXbsGfxC/0/N1eAA==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.15][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.15][vldr]     <= parent: updating DNSKEY
    May 15 11:28:06 turris kresd[10469]: [45600.15][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.13][iter]   'api.turris.cz.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 18
    May 15 11:28:06 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:06 turris kresd[10469]: [45600.16][resl]   => id: '55222' querying: '10.255.255.10#00053' score: 21 zone cut: 'turris.cz.' qname: 'Api.tuRriS.cZ.' qtype: 'A' proto: 'udp'
    May 15 11:28:06 turris kresd[10469]: [45600.16][resl]   => id: '55222' querying: '10.255.255.20#00053' score: 21 zone cut: 'turris.cz.' qname: 'Api.tuRriS.cZ.' qtype: 'A' proto: 'udp'
    May 15 11:28:06 turris kresd[10469]: [45600.16][iter]   <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 55222
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:06 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: api.turris.cz.		A
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: api.turris.cz.      	1800	A	217.31.192.101
    May 15 11:28:06 turris kresd[10469]: api.turris.cz.      	1800	RRSIG	A 13 3 1800 20210528054621 20210514041621 1340 turris.cz. aQO4uLDnBV/7YrGKM0aSKyzM5hY/avwTGvifLndF9btiB4T4fwy0kYhQbAhWbkno+mzZNurQAlrOjDU9h/YcRQ==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [45600.16][iter]   <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [45600.16][vldr]   <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [45600.16][cach]   => stashed api.turris.cz. A, rank 060, 116 B total, incl. 1 RRSIGs
    May 15 11:28:06 turris kresd[10469]: [45600.16][resl]   <= server: '10.255.255.10' rtt: >= 54 ms
    May 15 11:28:06 turris kresd[10469]: [45600.16][resl]   AD: request classified as SECURE
    May 15 11:28:06 turris kresd[10469]: [45600.16][resl]   finished in state: 4, queries: 6, mempool: 32784 B
    May 15 11:28:06 turris resolver-debug: 
    May 15 11:28:06 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec api.turris.cz
    May 15 11:28:06 turris resolver-debug: ; (1 server found)
    May 15 11:28:06 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:06 turris resolver-debug: ;; Got answer:
    May 15 11:28:06 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45600
    May 15 11:28:06 turris resolver-debug: ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:06 turris resolver-debug: 
    May 15 11:28:06 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:06 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:06 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:06 turris resolver-debug: ;api.turris.cz.			IN	A
    May 15 11:28:06 turris resolver-debug: 
    May 15 11:28:06 turris resolver-debug: ;; ANSWER SECTION:
    May 15 11:28:06 turris resolver-debug: api.turris.cz.		1800	IN	A	217.31.192.101
    May 15 11:28:06 turris resolver-debug: api.turris.cz.		1800	IN	RRSIG	A 13 3 1800 20210528054621 20210514041621 1340 turris.cz. aQO4uLDnBV/7YrGKM0aSKyzM5hY/avwTGvifLndF9btiB4T4fwy0kYhQ bAhWbkno+mzZNurQAlrOjDU9h/YcRQ==
    May 15 11:28:06 turris resolver-debug: 
    May 15 11:28:06 turris resolver-debug: ;; Query time: 50 msec
    May 15 11:28:06 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:06 turris resolver-debug: ;; WHEN: Sat May 15 13:28:06 CEST 2021
    May 15 11:28:06 turris resolver-debug: ;; MSG SIZE  rcvd: 163
    May 15 11:28:06 turris resolver-debug: 
    May 15 11:28:06 turris kresd[10469]: [00000.00][plan] plan 'www.google.com.' type 'A' uid [15670.00]
    May 15 11:28:06 turris kresd[10469]: [15670.00][iter]   'www.google.com.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [15670.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:06 turris kresd[10469]: [15670.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:06 turris kresd[10469]: [15670.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:06 turris kresd[10469]: [15670.01][plan]   plan '.' type 'DNSKEY' uid [15670.02]
    May 15 11:28:06 turris kresd[10469]: [15670.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:06 turris kresd[10469]: [15670.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172795
    May 15 11:28:06 turris kresd[10469]: [15670.03][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 48617
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: .		DNSKEY
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: .                   	172795	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:06 turris kresd[10469]: .                   	172795	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:06 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [15670.03][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [15670.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:06 turris kresd[10469]: [15670.03][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [15670.01][iter]   'www.google.com.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [15670.04][plan]   plan 'com.' type 'DS' uid [15670.05]
    May 15 11:28:06 turris kresd[10469]: [15670.05][iter]     'com.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:06 turris kresd[10469]: [15670.06][cach]     => satisfied by exact RRset: rank 060, new TTL 31755
    May 15 11:28:06 turris kresd[10469]: [15670.06][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 47127
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: com.		DS
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: com.                	31755	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
    May 15 11:28:06 turris kresd[10469]: com.                	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . Vzj+CnlrtUpgv81vi3uHcnC+QmeCyv04lIBn1N66D4oI8526bXM0bBzuIS4jfTQ2deEQjgYfDVRnkNUHATBGl/pj9iCHPgtsMbJgaeJl+dgasM5zYeFy2fCPkTzp3tgyfj+v84egGFRexs7Zm9xZrWcmW0RkqsZcfBrqKi7If/PWbbcBD7bXEsC1zoWDxIUA+5+rmYFW9Zi9dC3OTT6TvcUAMphgWxdfLm2IiC2a4oi7mt3vPG5wtUOv1Lp3SPLEOsjsRnnhFuOoyUV0l2SUSh7/GGEb8J+9LHq8Nji2ngCAqoPCzET9IsZRQaKlJL1VYzAOz1lJB8j4/0faOa3m7Q==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [15670.06][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [15670.06][vldr]     <= DS: OK
    May 15 11:28:06 turris kresd[10469]: [15670.06][vldr]     <= parent: updating DS
    May 15 11:28:06 turris kresd[10469]: [15670.06][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [15670.04][iter]   'www.google.com.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [15670.07][plan]   plan 'com.' type 'DNSKEY' uid [15670.08]
    May 15 11:28:06 turris kresd[10469]: [15670.08][iter]     'com.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:06 turris kresd[10469]: [15670.09][cach]     => satisfied by exact RRset: rank 060, new TTL 86368
    May 15 11:28:06 turris kresd[10469]: [15670.09][iter]     <= answer received: 
    May 15 11:28:06 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 52382
    May 15 11:28:06 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:06 turris kresd[10469]: com.		DNSKEY
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:06 turris kresd[10469]: com.                	86368	DNSKEY	256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
    May 15 11:28:06 turris kresd[10469]: com.                	86368	DNSKEY	257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
    May 15 11:28:06 turris kresd[10469]: com.                	86400	RRSIG	DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
    May 15 11:28:06 turris kresd[10469]: 
    May 15 11:28:06 turris kresd[10469]: [15670.09][iter]     <= rcode: NOERROR
    May 15 11:28:06 turris kresd[10469]: [15670.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:06 turris kresd[10469]: [15670.09][vldr]     <= answer valid, OK
    May 15 11:28:06 turris kresd[10469]: [15670.07][iter]   'www.google.com.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:06 turris kresd[10469]: [15670.10][plan]   plan 'google.com.' type 'DS' uid [15670.11]
    May 15 11:28:06 turris kresd[10469]: [15670.11][iter]     'google.com.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:06 turris kresd[10469]: [15670.12][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:06 turris kresd[10469]: [15670.12][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:06 turris kresd[10469]: [15670.12][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:06 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 54
    May 15 11:28:06 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:06 turris kresd[10469]: [15670.12][resl]     => id: '15518' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'GOOgle.cOM.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [15670.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 15518
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 60979	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400	RRSIG	NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
    May 15 11:28:07 turris kresd[10469]: com.                	900	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1621078067 1800 900 604800 86400
    May 15 11:28:07 turris kresd[10469]: com.                	900	RRSIG	SOA 8 1 900 20210522112747 20210515101747 54714 com. h4wVnkI4UAMKNry50D3XDwqLlhvFy+gB6AMpGyYpRY3oZwWGqFQv4t+XAH8z3NiiWuMLoYoEWUdBx4vwFphTl93i80WdUEmMQVIEkMWhTMzUZDA7QAdXrdXuim0htzkSpLh20K18XhOxtpZ/66samM+RZNkxs7OkmkqDA5jSMrmjnETIrGACDiUjRhJsGTp7p2hMgxUoKghzilx/VK/TtQ==
    May 15 11:28:07 turris kresd[10469]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 86400	NSEC3	1 1 0 - s84buo64gqcvn69rjfuo6lvc7fslunj5 NS DS RRSIG
    May 15 11:28:07 turris kresd[10469]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 86400	RRSIG	NSEC3 8 2 86400 20210521042131 20210514031131 54714 com. UnNpS1ngq1wh1n6ppGgvAfMrwbCnUyhkxqx2cOwRMPt4GG1yRoBtHs81TAfjRONF1g9D59c0eH+OH/G/+hPqkrV4XS29QFJ0JvqeUWUz3IH8nv+wqTUUU0ZC3V/spRFudaEz3FKWWISc9pt2i+o/VNh0BZU3Mzj38yX4VzWe7m5jfLEbWcLfElQ7X4loYs79/BTfbgIbArCdzTyr1elYhQ==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [15670.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [15670.12][vldr]     <= can't prove NODATA due to optout, going insecure
    May 15 11:28:07 turris kresd[10469]: [15670.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [15670.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [15670.12][cach]     => stashed com. SOA, rank 060, 266 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [15670.12][cach]     => stashed packet: rank 060, TTL 900, DS google.com. (868 B)
    May 15 11:28:07 turris kresd[10469]: [15670.12][resl]     <= server: '10.255.255.10' rtt: 8 ms
    May 15 11:28:07 turris kresd[10469]: [15670.10][iter]   'www.google.com.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [15670.13][plan]   plan 'google.com.' type 'NS' uid [15670.14]
    May 15 11:28:07 turris kresd[10469]: [15670.14][iter]     'google.com.' type 'NS' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [15670.15][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [15670.15][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [15670.15][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 32
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [15670.15][resl]     => id: '20492' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'GOoGle.coM.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [15670.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 20492
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.		NS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.         	345600	NS	ns1.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	345600	NS	ns2.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	345600	NS	ns3.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	345600	NS	ns4.google.com.
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [15670.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [15670.15][cach]     => stashed google.com. NS, rank 020, 86 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [15670.15][resl]     <= server: '10.255.255.10' rtt: 24 ms
    May 15 11:28:07 turris kresd[10469]: [15670.13][iter]   'www.google.com.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 28
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [15670.16][resl]   => id: '07343' querying: '10.255.255.10#00053' score: 21 zone cut: 'google.com.' qname: 'WwW.GoOGLE.coM.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [15670.16][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 7343
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: www.google.com.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: www.google.com.     	13	A	216.58.201.68
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [15670.16][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [15670.16][cach]   => stashed www.google.com. A, rank 030, 20 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [15670.16][resl]   <= server: '10.255.255.10' rtt: 9 ms
    May 15 11:28:07 turris kresd[10469]: [15670.16][resl]   AD: request NOT classified as SECURE
    May 15 11:28:07 turris kresd[10469]: [15670.16][resl]   finished in state: 4, queries: 6, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.google.com
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15670
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;www.google.com.			IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; ANSWER SECTION:
    May 15 11:28:07 turris resolver-debug: www.google.com.		13	IN	A	216.58.201.68
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 40 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 59
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan 'www.facebook.com.' type 'A' uid [10392.00]
    May 15 11:28:07 turris kresd[10469]: [10392.00][iter]   'www.facebook.com.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [10392.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [10392.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [10392.01][plan]   plan '.' type 'DNSKEY' uid [10392.02]
    May 15 11:28:07 turris kresd[10469]: [10392.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [10392.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [10392.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 49017
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [10392.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.01][iter]   'www.facebook.com.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.04][plan]   plan 'com.' type 'DS' uid [10392.05]
    May 15 11:28:07 turris kresd[10469]: [10392.05][iter]     'com.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [10392.06][cach]     => satisfied by exact RRset: rank 060, new TTL 31754
    May 15 11:28:07 turris kresd[10469]: [10392.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 50940
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	31754	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . Vzj+CnlrtUpgv81vi3uHcnC+QmeCyv04lIBn1N66D4oI8526bXM0bBzuIS4jfTQ2deEQjgYfDVRnkNUHATBGl/pj9iCHPgtsMbJgaeJl+dgasM5zYeFy2fCPkTzp3tgyfj+v84egGFRexs7Zm9xZrWcmW0RkqsZcfBrqKi7If/PWbbcBD7bXEsC1zoWDxIUA+5+rmYFW9Zi9dC3OTT6TvcUAMphgWxdfLm2IiC2a4oi7mt3vPG5wtUOv1Lp3SPLEOsjsRnnhFuOoyUV0l2SUSh7/GGEb8J+9LHq8Nji2ngCAqoPCzET9IsZRQaKlJL1VYzAOz1lJB8j4/0faOa3m7Q==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [10392.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [10392.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.04][iter]   'www.facebook.com.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.07][plan]   plan 'com.' type 'DNSKEY' uid [10392.08]
    May 15 11:28:07 turris kresd[10469]: [10392.08][iter]     'com.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [10392.09][cach]     => satisfied by exact RRset: rank 060, new TTL 86367
    May 15 11:28:07 turris kresd[10469]: [10392.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 12237
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [10392.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.07][iter]   'www.facebook.com.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.10][plan]   plan 'facebook.com.' type 'DS' uid [10392.11]
    May 15 11:28:07 turris kresd[10469]: [10392.11][iter]     'facebook.com.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [10392.12][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [10392.12][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [10392.12][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 19
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [10392.12][resl]     => id: '47946' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'FaCEBOOk.Com.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [10392.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 47946
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 60979	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400	RRSIG	NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
    May 15 11:28:07 turris kresd[10469]: com.                	900	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1621078067 1800 900 604800 86400
    May 15 11:28:07 turris kresd[10469]: com.                	900	RRSIG	SOA 8 1 900 20210522112747 20210515101747 54714 com. h4wVnkI4UAMKNry50D3XDwqLlhvFy+gB6AMpGyYpRY3oZwWGqFQv4t+XAH8z3NiiWuMLoYoEWUdBx4vwFphTl93i80WdUEmMQVIEkMWhTMzUZDA7QAdXrdXuim0htzkSpLh20K18XhOxtpZ/66samM+RZNkxs7OkmkqDA5jSMrmjnETIrGACDiUjRhJsGTp7p2hMgxUoKghzilx/VK/TtQ==
    May 15 11:28:07 turris kresd[10469]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400	NSEC3	1 1 0 - i28gltlv5d2h16bes4t7ghh4aabnfob0 NS DS RRSIG
    May 15 11:28:07 turris kresd[10469]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400	RRSIG	NSEC3 8 2 86400 20210519050247 20210512035247 54714 com. pkmOdKvSyf5cSK7a9HVVK0y+VdXLsUjC8eaQZtDrHH7KhN108B54Dko4YrvIi0T7H71aHDd1+kAL0oy1+XW6h2l4tCTpcRZkbVr0XJXd1P5XZYrlWw5ALRj8RN3/nsGSZst73JvnrKasPX5MiK6os6DvqeAPT3oelRKGoTekETuyAM7RTV8n+umNPueHShTFUM3k97a87bOT4YXJFxOZYw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.12][vldr]     <= can't prove NODATA due to optout, going insecure
    May 15 11:28:07 turris kresd[10469]: [10392.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [10392.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.12][cach]     => stashed com. SOA, rank 060, 266 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [10392.12][cach]     => stashed packet: rank 060, TTL 900, DS facebook.com. (870 B)
    May 15 11:28:07 turris kresd[10469]: [10392.12][resl]     <= server: '10.255.255.10' rtt: 11 ms
    May 15 11:28:07 turris kresd[10469]: [10392.10][iter]   'www.facebook.com.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.13][plan]   plan 'facebook.com.' type 'NS' uid [10392.14]
    May 15 11:28:07 turris kresd[10469]: [10392.14][iter]     'facebook.com.' type 'NS' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [10392.15][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [10392.15][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [10392.15][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 15
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [10392.15][resl]     => id: '23046' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'fACEbooK.coM.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [10392.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 23046
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.		NS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	d.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	c.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	b.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	a.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.15][cach]     => stashed facebook.com. NS, rank 020, 102 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [10392.15][resl]     <= server: '10.255.255.10' rtt: 10 ms
    May 15 11:28:07 turris kresd[10469]: [10392.13][iter]   'www.facebook.com.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 13
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [10392.16][resl]   => id: '07978' querying: '10.255.255.10#00053' score: 21 zone cut: 'facebook.com.' qname: 'www.FaceBooK.COm.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [10392.16][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 7978
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: www.facebook.com.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: www.facebook.com.   	2947	CNAME	star-mini.c10r.facebook.com.
    May 15 11:28:07 turris kresd[10469]: star-mini.c10r.facebook.com.	37	A	157.240.30.35
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.16][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.16][iter]   <= cname chain, following
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan 'star-mini.c10r.facebook.com.' type 'A' uid [10392.17]
    May 15 11:28:07 turris kresd[10469]: [10392.16][cach]   => stashed www.facebook.com. CNAME, rank 030, 46 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [10392.16][resl]   <= server: '10.255.255.10' rtt: 8 ms
    May 15 11:28:07 turris kresd[10469]: [10392.17][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .18, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.18][cach]   => no NSEC* cached for zone: facebook.com.
    May 15 11:28:07 turris kresd[10469]: [10392.18][cach]   => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [10392.18][cach]   => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [10392.18][plan]   plan '.' type 'DNSKEY' uid [10392.19]
    May 15 11:28:07 turris kresd[10469]: [10392.19][iter]     '.' type 'DNSKEY' new uid was assigned .20, parent uid .18
    May 15 11:28:07 turris kresd[10469]: [10392.20][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [10392.20][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 17446
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.20][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.20][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [10392.20][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.18][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .21, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.21][plan]   plan 'com.' type 'DS' uid [10392.22]
    May 15 11:28:07 turris kresd[10469]: [10392.22][iter]     'com.' type 'DS' new uid was assigned .23, parent uid .21
    May 15 11:28:07 turris kresd[10469]: [10392.23][cach]     => satisfied by exact RRset: rank 060, new TTL 31754
    May 15 11:28:07 turris kresd[10469]: [10392.23][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 50470
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	31754	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . Vzj+CnlrtUpgv81vi3uHcnC+QmeCyv04lIBn1N66D4oI8526bXM0bBzuIS4jfTQ2deEQjgYfDVRnkNUHATBGl/pj9iCHPgtsMbJgaeJl+dgasM5zYeFy2fCPkTzp3tgyfj+v84egGFRexs7Zm9xZrWcmW0RkqsZcfBrqKi7If/PWbbcBD7bXEsC1zoWDxIUA+5+rmYFW9Zi9dC3OTT6TvcUAMphgWxdfLm2IiC2a4oi7mt3vPG5wtUOv1Lp3SPLEOsjsRnnhFuOoyUV0l2SUSh7/GGEb8J+9LHq8Nji2ngCAqoPCzET9IsZRQaKlJL1VYzAOz1lJB8j4/0faOa3m7Q==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.23][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.23][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [10392.23][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [10392.23][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.21][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .24, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.24][plan]   plan 'com.' type 'DNSKEY' uid [10392.25]
    May 15 11:28:07 turris kresd[10469]: [10392.25][iter]     'com.' type 'DNSKEY' new uid was assigned .26, parent uid .24
    May 15 11:28:07 turris kresd[10469]: [10392.26][cach]     => satisfied by exact RRset: rank 060, new TTL 86367
    May 15 11:28:07 turris kresd[10469]: [10392.26][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 11832
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.26][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.26][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [10392.26][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.24][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .27, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.27][plan]   plan 'facebook.com.' type 'DS' uid [10392.28]
    May 15 11:28:07 turris kresd[10469]: [10392.28][iter]     'facebook.com.' type 'DS' new uid was assigned .29, parent uid .27
    May 15 11:28:07 turris kresd[10469]: [10392.29][cach]     => satisfied by exact packet: rank 060, new TTL 900
    May 15 11:28:07 turris kresd[10469]: [10392.29][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 38450
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 60979	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400	RRSIG	NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
    May 15 11:28:07 turris kresd[10469]: com.                	900	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1621078067 1800 900 604800 86400
    May 15 11:28:07 turris kresd[10469]: com.                	900	RRSIG	SOA 8 1 900 20210522112747 20210515101747 54714 com. h4wVnkI4UAMKNry50D3XDwqLlhvFy+gB6AMpGyYpRY3oZwWGqFQv4t+XAH8z3NiiWuMLoYoEWUdBx4vwFphTl93i80WdUEmMQVIEkMWhTMzUZDA7QAdXrdXuim0htzkSpLh20K18XhOxtpZ/66samM+RZNkxs7OkmkqDA5jSMrmjnETIrGACDiUjRhJsGTp7p2hMgxUoKghzilx/VK/TtQ==
    May 15 11:28:07 turris kresd[10469]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400	NSEC3	1 1 0 - i28gltlv5d2h16bes4t7ghh4aabnfob0 NS DS RRSIG
    May 15 11:28:07 turris kresd[10469]: i28g6ci6h7lilo18c929q5hcls95d2fc.com. 86400	RRSIG	NSEC3 8 2 86400 20210519050247 20210512035247 54714 com. pkmOdKvSyf5cSK7a9HVVK0y+VdXLsUjC8eaQZtDrHH7KhN108B54Dko4YrvIi0T7H71aHDd1+kAL0oy1+XW6h2l4tCTpcRZkbVr0XJXd1P5XZYrlWw5ALRj8RN3/nsGSZst73JvnrKasPX5MiK6os6DvqeAPT3oelRKGoTekETuyAM7RTV8n+umNPueHShTFUM3k97a87bOT4YXJFxOZYw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.29][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.29][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [10392.29][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [10392.27][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .30, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [10392.30][plan]   plan 'facebook.com.' type 'NS' uid [10392.31]
    May 15 11:28:07 turris kresd[10469]: [10392.31][iter]     'facebook.com.' type 'NS' new uid was assigned .32, parent uid .30
    May 15 11:28:07 turris kresd[10469]: [10392.32][cach]     => skipping exact RR: rank 020 (min. 030), new TTL 172800
    May 15 11:28:07 turris kresd[10469]: [10392.32][cach]     => no NSEC* cached for zone: facebook.com.
    May 15 11:28:07 turris kresd[10469]: [10392.32][cach]     => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [10392.32][cach]     => skipping zone: facebook.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 12
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [10392.32][resl]     => id: '02802' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'FACeboOk.Com.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [10392.32][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 2802
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.		NS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	d.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	c.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	b.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: facebook.com.       	172800	NS	a.ns.facebook.com.
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.32][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.32][cach]     => not overwriting NS facebook.com.
    May 15 11:28:07 turris kresd[10469]: [10392.32][resl]     <= server: '10.255.255.10' rtt: 9 ms
    May 15 11:28:07 turris kresd[10469]: [10392.30][iter]   'star-mini.c10r.facebook.com.' type 'A' new uid was assigned .33, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [10392.33][resl]   => id: '12701' querying: '10.255.255.10#00053' score: 21 zone cut: 'facebook.com.' qname: 'stAr-minI.c10R.FacebOOK.cOM.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [10392.33][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 12701
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: star-mini.c10r.facebook.com.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: star-mini.c10r.facebook.com.	37	A	157.240.30.35
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [10392.33][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [10392.33][cach]   => stashed star-mini.c10r.facebook.com. A, rank 030, 20 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [10392.33][resl]   <= server: '10.255.255.10' rtt: 9 ms
    May 15 11:28:07 turris kresd[10469]: [10392.33][resl]   AD: request NOT classified as SECURE
    May 15 11:28:07 turris kresd[10469]: [10392.33][resl]   finished in state: 4, queries: 12, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.facebook.com
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10392
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;www.facebook.com.		IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; ANSWER SECTION:
    May 15 11:28:07 turris resolver-debug: www.facebook.com.	2947	IN	CNAME	star-mini.c10r.facebook.com.
    May 15 11:28:07 turris resolver-debug: star-mini.c10r.facebook.com. 37	IN	A	157.240.30.35
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 50 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 90
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan 'www.youtube.com.' type 'A' uid [36400.00]
    May 15 11:28:07 turris kresd[10469]: [36400.00][iter]   'www.youtube.com.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [36400.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [36400.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [36400.01][plan]   plan '.' type 'DNSKEY' uid [36400.02]
    May 15 11:28:07 turris kresd[10469]: [36400.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [36400.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [36400.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 56771
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [36400.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.01][iter]   'www.youtube.com.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.04][plan]   plan 'com.' type 'DS' uid [36400.05]
    May 15 11:28:07 turris kresd[10469]: [36400.05][iter]     'com.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [36400.06][cach]     => satisfied by exact RRset: rank 060, new TTL 31754
    May 15 11:28:07 turris kresd[10469]: [36400.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 56965
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	31754	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . Vzj+CnlrtUpgv81vi3uHcnC+QmeCyv04lIBn1N66D4oI8526bXM0bBzuIS4jfTQ2deEQjgYfDVRnkNUHATBGl/pj9iCHPgtsMbJgaeJl+dgasM5zYeFy2fCPkTzp3tgyfj+v84egGFRexs7Zm9xZrWcmW0RkqsZcfBrqKi7If/PWbbcBD7bXEsC1zoWDxIUA+5+rmYFW9Zi9dC3OTT6TvcUAMphgWxdfLm2IiC2a4oi7mt3vPG5wtUOv1Lp3SPLEOsjsRnnhFuOoyUV0l2SUSh7/GGEb8J+9LHq8Nji2ngCAqoPCzET9IsZRQaKlJL1VYzAOz1lJB8j4/0faOa3m7Q==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [36400.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [36400.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.04][iter]   'www.youtube.com.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.07][plan]   plan 'com.' type 'DNSKEY' uid [36400.08]
    May 15 11:28:07 turris kresd[10469]: [36400.08][iter]     'com.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [36400.09][cach]     => satisfied by exact RRset: rank 060, new TTL 86367
    May 15 11:28:07 turris kresd[10469]: [36400.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 63360
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [36400.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.07][iter]   'www.youtube.com.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.10][plan]   plan 'youtube.com.' type 'DS' uid [36400.11]
    May 15 11:28:07 turris kresd[10469]: [36400.11][iter]     'youtube.com.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [36400.12][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [36400.12][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [36400.12][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [36400.12][resl]     => id: '55346' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'yoUTUbe.cOm.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 55346
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: youtube.com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 60979	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400	RRSIG	NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
    May 15 11:28:07 turris kresd[10469]: com.                	900	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1621078067 1800 900 604800 86400
    May 15 11:28:07 turris kresd[10469]: com.                	900	RRSIG	SOA 8 1 900 20210522112747 20210515101747 54714 com. h4wVnkI4UAMKNry50D3XDwqLlhvFy+gB6AMpGyYpRY3oZwWGqFQv4t+XAH8z3NiiWuMLoYoEWUdBx4vwFphTl93i80WdUEmMQVIEkMWhTMzUZDA7QAdXrdXuim0htzkSpLh20K18XhOxtpZ/66samM+RZNkxs7OkmkqDA5jSMrmjnETIrGACDiUjRhJsGTp7p2hMgxUoKghzilx/VK/TtQ==
    May 15 11:28:07 turris kresd[10469]: h5aj1qk46hihd9n86a92viqa2a43nhh9.com. 86400	NSEC3	1 1 0 - h5aj7qcthpguktblcko011olsfc6o1sr NS DS RRSIG
    May 15 11:28:07 turris kresd[10469]: h5aj1qk46hihd9n86a92viqa2a43nhh9.com. 86400	RRSIG	NSEC3 8 2 86400 20210519045608 20210512034608 54714 com. aGAKAjsAxUyjiGPEeR9zzv0IgfvtgoGzdUWJxwHmODdObPxRyQRJLUtu+zP/sw+k/b4zLn17xcwmBZNoZn3IA6qjNDfvJmABrFXox9CJFVtEq/li0gvr11NHOtAdILt6EQVHBTg7AQCY7qBjsWSlbpz4fZi2r7vICLSCuDo0pNcA65S4TvGuWJqREf3x/C+qbfIVEFXEEyEePDvd8+vSdA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.12][vldr]     <= can't prove NODATA due to optout, going insecure
    May 15 11:28:07 turris kresd[10469]: [36400.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [36400.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.12][cach]     => stashed com. SOA, rank 060, 266 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [36400.12][cach]     => stashed packet: rank 060, TTL 900, DS youtube.com. (869 B)
    May 15 11:28:07 turris kresd[10469]: [36400.12][resl]     <= server: '10.255.255.10' rtt: 8 ms
    May 15 11:28:07 turris kresd[10469]: [36400.10][iter]   'www.youtube.com.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.13][plan]   plan 'youtube.com.' type 'NS' uid [36400.14]
    May 15 11:28:07 turris kresd[10469]: [36400.14][iter]     'youtube.com.' type 'NS' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [36400.15][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [36400.15][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [36400.15][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [36400.15][resl]     => id: '51600' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'YoUtUBE.COM.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.15][resl]     => id: '51600' querying: '10.255.255.20#00053' score: 21 zone cut: 'com.' qname: 'YoUtUBE.COM.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 51600
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: youtube.com.		NS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: youtube.com.        	345600	NS	ns2.google.com.
    May 15 11:28:07 turris kresd[10469]: youtube.com.        	345600	NS	ns1.google.com.
    May 15 11:28:07 turris kresd[10469]: youtube.com.        	345600	NS	ns4.google.com.
    May 15 11:28:07 turris kresd[10469]: youtube.com.        	345600	NS	ns3.google.com.
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.15][cach]     => stashed youtube.com. NS, rank 020, 86 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [36400.15][resl]     <= server: '10.255.255.10' rtt: 40 ms
    May 15 11:28:07 turris kresd[10469]: [36400.13][iter]   'www.youtube.com.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 25
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [36400.16][resl]   => id: '32574' querying: '10.255.255.10#00053' score: 21 zone cut: 'youtube.com.' qname: 'wwW.YoUtube.COm.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.16][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 32574
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: www.youtube.com.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: www.youtube.com.    	56633	CNAME	youtube-ui.l.google.com.
    May 15 11:28:07 turris kresd[10469]: youtube-ui.l.google.com.	297	A	216.58.201.78
    May 15 11:28:07 turris kresd[10469]: youtube-ui.l.google.com.	297	A	172.217.23.238
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.16][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.16][iter]   <= cname chain, following
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan 'youtube-ui.l.google.com.' type 'A' uid [36400.17]
    May 15 11:28:07 turris kresd[10469]: [36400.16][cach]   => stashed www.youtube.com. CNAME, rank 030, 42 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [36400.16][resl]   <= server: '10.255.255.10' rtt: 8 ms
    May 15 11:28:07 turris kresd[10469]: [36400.17][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .18, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.18][cach]   => no NSEC* cached for zone: google.com.
    May 15 11:28:07 turris kresd[10469]: [36400.18][cach]   => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [36400.18][cach]   => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [36400.18][plan]   plan '.' type 'DNSKEY' uid [36400.19]
    May 15 11:28:07 turris kresd[10469]: [36400.19][iter]     '.' type 'DNSKEY' new uid was assigned .20, parent uid .18
    May 15 11:28:07 turris kresd[10469]: [36400.20][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [36400.20][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 54133
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.20][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.20][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [36400.20][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.18][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .21, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.21][plan]   plan 'com.' type 'DS' uid [36400.22]
    May 15 11:28:07 turris kresd[10469]: [36400.22][iter]     'com.' type 'DS' new uid was assigned .23, parent uid .21
    May 15 11:28:07 turris kresd[10469]: [36400.23][cach]     => satisfied by exact RRset: rank 060, new TTL 31754
    May 15 11:28:07 turris kresd[10469]: [36400.23][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 7655
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	31754	DS	30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CFC41A5766
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . Vzj+CnlrtUpgv81vi3uHcnC+QmeCyv04lIBn1N66D4oI8526bXM0bBzuIS4jfTQ2deEQjgYfDVRnkNUHATBGl/pj9iCHPgtsMbJgaeJl+dgasM5zYeFy2fCPkTzp3tgyfj+v84egGFRexs7Zm9xZrWcmW0RkqsZcfBrqKi7If/PWbbcBD7bXEsC1zoWDxIUA+5+rmYFW9Zi9dC3OTT6TvcUAMphgWxdfLm2IiC2a4oi7mt3vPG5wtUOv1Lp3SPLEOsjsRnnhFuOoyUV0l2SUSh7/GGEb8J+9LHq8Nji2ngCAqoPCzET9IsZRQaKlJL1VYzAOz1lJB8j4/0faOa3m7Q==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.23][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.23][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [36400.23][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [36400.23][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.21][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .24, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.24][plan]   plan 'com.' type 'DNSKEY' uid [36400.25]
    May 15 11:28:07 turris kresd[10469]: [36400.25][iter]     'com.' type 'DNSKEY' new uid was assigned .26, parent uid .24
    May 15 11:28:07 turris kresd[10469]: [36400.26][cach]     => satisfied by exact RRset: rank 060, new TTL 86367
    May 15 11:28:07 turris kresd[10469]: [36400.26][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 61248
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: com.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	256 3 8 AwEAAcCL5iwechKXguTeF/asc9NLHDqksbXSJ40rrh65nXVQnM5SPNkKZZGc99/8QH5g7U/L1v5cycaFn93RNxEG5Kag6p8+u0YH2aph4/SIWeFXziCzMCUp6TozEo/MWbofNw2rsu/8wiZqVPiiZDzS2GAJgbl86IIGvEmHzLSRZ9lF0vMHDJQ4udz2InbvhrNe20iV4x3d7sS0RIPa/LZssWk=
    May 15 11:28:07 turris kresd[10469]: com.                	86367	DNSKEY	257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/taggzHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZbqMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQHd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/
    May 15 11:28:07 turris kresd[10469]: com.                	86400	RRSIG	DNSKEY 8 1 86400 20210525182421 20210510181921 30909 com. Z8fpn5Ck/PErtYqymWLIZdTGc1qRiXCCnWWgJjkNcVWs+ZhKPk8PS+ntOPmW6g+J7Y2dlV+mNyYiEiAuoC0jCvy1psH+891GK7dZazLZM98eVVPQlehJR7dNXsZlCZaWPbyFqxTTRpvhVu2/D33b/Wrjb2qodYJr+p7A5UDjCvK2UUFfl9sL8eI4vn2RvSw594FDeZsfHpdkWpX/PdcsjFC8enSZ5xoEt9Ea81O9hFACtFMUWgenHajtB3wcuTXs1X8AdJO/pln1K6wCmE01qSUS48TPawvhujBgB/nHr8Xg6Mkp8GoZkVy1IliIIE4URayc+NeKpeG8Q+1kRSilIA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.26][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.26][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [36400.26][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.24][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .27, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.27][plan]   plan 'google.com.' type 'DS' uid [36400.28]
    May 15 11:28:07 turris kresd[10469]: [36400.28][iter]     'google.com.' type 'DS' new uid was assigned .29, parent uid .27
    May 15 11:28:07 turris kresd[10469]: [36400.29][cach]     => satisfied by exact packet: rank 060, new TTL 899
    May 15 11:28:07 turris kresd[10469]: [36400.29][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 31738
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: ; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 60978	NSEC3	1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM
    May 15 11:28:07 turris kresd[10469]: ck0pojmg874ljref7efn8430qvit8bsm.com. 86400	RRSIG	NSEC3 8 2 86400 20210520042404 20210513031404 54714 com. LFDlwWYBW12BlCWe+B7mN0pwNhk8DEAPoV38mDBSgDYQll+X6+uHTR8T57M12LcL4bp+U95iR1aDKXhNw79aV/jltzWifSZ72k+nN//t0Cxyq9dYZ9/NSIKBrmuS05Ncjc7oNJk2ENS66+GupbgVcJc7wjoPG0rOw4eSBjCuJCK6Kz8Wp0rRoyzCl80DQr7u0NhfNffV7lj7qZEN28NRAg==
    May 15 11:28:07 turris kresd[10469]: com.                	899	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1621078067 1800 900 604800 86400
    May 15 11:28:07 turris kresd[10469]: com.                	900	RRSIG	SOA 8 1 900 20210522112747 20210515101747 54714 com. h4wVnkI4UAMKNry50D3XDwqLlhvFy+gB6AMpGyYpRY3oZwWGqFQv4t+XAH8z3NiiWuMLoYoEWUdBx4vwFphTl93i80WdUEmMQVIEkMWhTMzUZDA7QAdXrdXuim0htzkSpLh20K18XhOxtpZ/66samM+RZNkxs7OkmkqDA5jSMrmjnETIrGACDiUjRhJsGTp7p2hMgxUoKghzilx/VK/TtQ==
    May 15 11:28:07 turris kresd[10469]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 86399	NSEC3	1 1 0 - s84buo64gqcvn69rjfuo6lvc7fslunj5 NS DS RRSIG
    May 15 11:28:07 turris kresd[10469]: s84bdvknh5agdsi7f5j0o3nprhu0g7jq.com. 86400	RRSIG	NSEC3 8 2 86400 20210521042131 20210514031131 54714 com. UnNpS1ngq1wh1n6ppGgvAfMrwbCnUyhkxqx2cOwRMPt4GG1yRoBtHs81TAfjRONF1g9D59c0eH+OH/G/+hPqkrV4XS29QFJ0JvqeUWUz3IH8nv+wqTUUU0ZC3V/spRFudaEz3FKWWISc9pt2i+o/VNh0BZU3Mzj38yX4VzWe7m5jfLEbWcLfElQ7X4loYs79/BTfbgIbArCdzTyr1elYhQ==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.29][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.29][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [36400.29][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [36400.27][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .30, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [36400.30][plan]   plan 'google.com.' type 'NS' uid [36400.31]
    May 15 11:28:07 turris kresd[10469]: [36400.31][iter]     'google.com.' type 'NS' new uid was assigned .32, parent uid .30
    May 15 11:28:07 turris kresd[10469]: [36400.32][cach]     => skipping exact RR: rank 020 (min. 030), new TTL 345600
    May 15 11:28:07 turris kresd[10469]: [36400.32][cach]     => no NSEC* cached for zone: google.com.
    May 15 11:28:07 turris kresd[10469]: [36400.32][cach]     => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [36400.32][cach]     => skipping zone: google.com., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 18
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [36400.32][resl]     => id: '12768' querying: '10.255.255.10#00053' score: 21 zone cut: 'com.' qname: 'GoOgle.com.' qtype: 'NS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.32][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 12768
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 4; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.		NS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: google.com.         	15196	NS	ns1.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	15196	NS	ns2.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	15196	NS	ns3.google.com.
    May 15 11:28:07 turris kresd[10469]: google.com.         	15196	NS	ns4.google.com.
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.32][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.32][cach]     => not overwriting NS google.com.
    May 15 11:28:07 turris kresd[10469]: [36400.32][resl]     <= server: '10.255.255.10' rtt: 10 ms
    May 15 11:28:07 turris kresd[10469]: [36400.30][iter]   'youtube-ui.l.google.com.' type 'A' new uid was assigned .33, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 14
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [36400.33][resl]   => id: '41906' querying: '10.255.255.10#00053' score: 21 zone cut: 'google.com.' qname: 'yOutUBE-ui.l.GOogLe.cOm.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [36400.33][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 41906
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: youtube-ui.l.google.com.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: youtube-ui.l.google.com.	297	A	216.58.201.78
    May 15 11:28:07 turris kresd[10469]: youtube-ui.l.google.com.	297	A	172.217.23.238
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [36400.33][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [36400.33][cach]   => stashed youtube-ui.l.google.com. A, rank 030, 26 B total, incl. 0 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [36400.33][resl]   <= server: '10.255.255.10' rtt: 8 ms
    May 15 11:28:07 turris kresd[10469]: [36400.33][resl]   AD: request NOT classified as SECURE
    May 15 11:28:07 turris kresd[10469]: [36400.33][resl]   finished in state: 4, queries: 12, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.youtube.com
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36400
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;www.youtube.com.		IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; ANSWER SECTION:
    May 15 11:28:07 turris resolver-debug: www.youtube.com.	56633	IN	CNAME	youtube-ui.l.google.com.
    May 15 11:28:07 turris resolver-debug: youtube-ui.l.google.com. 297	IN	A	172.217.23.238
    May 15 11:28:07 turris resolver-debug: youtube-ui.l.google.com. 297	IN	A	216.58.201.78
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 80 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 110
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan 'www.rhybar.cz.' type 'A' uid [01990.00]
    May 15 11:28:07 turris kresd[10469]: [01990.00][iter]   'www.rhybar.cz.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [01990.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [01990.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [01990.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [01990.01][plan]   plan '.' type 'DNSKEY' uid [01990.02]
    May 15 11:28:07 turris kresd[10469]: [01990.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [01990.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [01990.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 60764
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [01990.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [01990.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [01990.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [01990.01][iter]   'www.rhybar.cz.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [01990.04][plan]   plan 'cz.' type 'DS' uid [01990.05]
    May 15 11:28:07 turris kresd[10469]: [01990.05][iter]     'cz.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [01990.06][cach]     => satisfied by exact RRset: rank 060, new TTL 32525
    May 15 11:28:07 turris kresd[10469]: [01990.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 40227
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	32525	DS	20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
    May 15 11:28:07 turris kresd[10469]: cz.                 	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . eYou1pjuNiqGBTSPxxZ91A/ifjQ1H11IyiQOGCeo48CpigO01r0V/rJ83P3+FJreZ0cUSOjSNrgjaE8P03DdUDSv+n2b0f9D5Ld1p3Od7++nOlaAjcW2zoxdC0Zp5wH69+0kLkuvtsgSQbffq1maawrDh/VGeMvUCSlSsLqfJza+up830DyzONCGVHvp0YlcMkssWaafOMCZ99Q/3Rtv/7VK2t9L15T67Oz/k/IlyQ3byz79O99sGWbC/Lv/mMQtXTkHDpkrWdN1hUsZoDHwmtviv0gvgG92fhmOx1TFNRJl2+gRlW3kQ36ElEGZWun77uwVGBl22mO0wa+F36BIJg==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [01990.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [01990.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [01990.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [01990.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [01990.04][iter]   'www.rhybar.cz.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [01990.07][plan]   plan 'cz.' type 'DNSKEY' uid [01990.08]
    May 15 11:28:07 turris kresd[10469]: [01990.08][iter]     'cz.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [01990.09][cach]     => satisfied by exact RRset: rank 060, new TTL 3567
    May 15 11:28:07 turris kresd[10469]: [01990.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 32367
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3600	RRSIG	DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [01990.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [01990.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [01990.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [01990.07][iter]   'www.rhybar.cz.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [01990.10][plan]   plan 'rhybar.cz.' type 'DS' uid [01990.11]
    May 15 11:28:07 turris kresd[10469]: [01990.11][iter]     'rhybar.cz.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [01990.12][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [01990.12][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [01990.12][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 12
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [01990.12][resl]     => id: '06316' querying: '10.255.255.10#00053' score: 21 zone cut: 'cz.' qname: 'rhyBAR.Cz.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [01990.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 6316
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	3600	DS	61281 13 2 3651AA62843DEB5EDAA10F5055717F877E9F2657E701CAB10CF42B43EA8E047E
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	3600	RRSIG	DS 13 2 3600 20210525102134 20210511085134 26955 cz. JishGjGJLj6v3SyCP284FQ+rvmFsK3O8AL3HdBX0ZpU+xi+0w4Zfppl8VR8aANQgST+sfNEUeIw+EVMsadSYDw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [01990.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [01990.12][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [01990.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [01990.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [01990.12][cach]     => stashed rhybar.cz. DS, rank 060, 140 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [01990.12][resl]     <= server: '10.255.255.10' rtt: 10 ms
    May 15 11:28:07 turris kresd[10469]: [01990.10][iter]   'www.rhybar.cz.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [01990.13][plan]   plan 'rhybar.cz.' type 'DNSKEY' uid [01990.14]
    May 15 11:28:07 turris kresd[10469]: [01990.14][iter]     'rhybar.cz.' type 'DNSKEY' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [01990.15][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [01990.15][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [01990.15][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [01990.15][resl]     => id: '04858' querying: '10.255.255.10#00053' score: 21 zone cut: 'rhybar.cz.' qname: 'RhYBaR.cZ.' qtype: 'DNSKEY' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [01990.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 4858
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 5; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	600	DNSKEY	256 3 5 AwEAAb/riVUjNfP1to3wkJyul0MjwiPojFgFmMiLj1KIKeVIYCIRNx01Q1we5M17GQFInCXXyTyjCYJfwkL0Xe7ma6m2pHfEMkOiDl42rsgrmkShxPEvZMd5vpT+RyQWQh26TJ42MRoCJSt6XNeFLXRyjfRcDt7ZxYD3bHNeyaDuUUGt
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	600	DNSKEY	256 3 5 AwEAAcrTMVXwOcFCGKtXwdt4XATP43qU96IryyqiZ0oPtuHEEBCikuQDuJhRjNAV4DYvR6fb/suAnd91EVNgHHTXUlAWwmJRrqIwZ6VuGaZqVG+NJh1Okif7CL8no2Z47j6I3HH3pyzrYH2oQVyr64O/8BV2jrk8RteeEqa7V7gcrFfJ
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	600	DNSKEY	257 3 5 AwEAAeKle4K3bxJb4k9sMhdm6BmpRK2rISAGh0egMSXgOlQnU+3TLQ0aH1th7ejZnn6Zdkeo8MRXDxLkgp1rUSsRM1Q2SmLJhaat7L15qHmj+vCk5IuSIpAdaRsqOKxHlT6a/LWGwGvDIVxY6J9sXaJ4SInflZpa5wZUCrhDKvpo0hAzNfoK/aFApzZGaAGALYx6YpbG+SBW2K+s92eyoJCCrQQ+Nata41l7K6RFAYjP+g3Kp95McNm3xlBve171u9FUZNUuN2Rn25oEtHHlK9NcHNqWvFJ3VmXcA6CkGrBPV6vOAwwUtPDSWSZbdolS69092ZWYTlOJw6g0LVI2feMMrok=
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	600	RRSIG	DNSKEY 5 2 600 20081030080058 20080930080058 5172 rhybar.cz. Fh5WqcWoiywSm+t4YhGqVVTb1Revz2BvETgb1uoY9DaREJhTUIq6zTA5xGS2WpAhYmIb8OV259NxT/jEtEdFIlTIz2nDzr1I2ZrDoF/qwfJXvda8zy2wz3AHvou8uLeIBJLQKSpZx1YI3ee9YFFw25yfie9M4g1/PXuMlTHpVVY=
    May 15 11:28:07 turris kresd[10469]: rhybar.cz.          	600	RRSIG	DNSKEY 5 2 600 20081030080058 20080930080058 44566 rhybar.cz. HkcudN72dM/HiqmKMZeOSjE8NavwtkXJ2VGCQ5/RmJphEeSd/IZ4f5I67l+LZjvy+J+fplrvXTSnAx6+y5Z1xvo9HdGhCdUXuh6rIy1OScrUwOPOFJplTqccukafWngoiQZuj9mZS41ZcQA1Js+Q5EzhnmCD/7TuIpmN6V+4eDXQcnf2uagpntWj153yjePdeb2r6NmfDDBQUu6GLIKfI6CtlmsiZWUAJvtBGLK4DxSn/5jxEA9UGHWqiRVxZKk6ssZ71Fuxc5e2D+7j0XKZrw6kA0z3F8dgFuQQxWtVC0wyycE4H+PQbD7ZVkWeCiLgURHpDlizUB+xK1nGuHuE3Q==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [01990.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [01990.15][vldr]     >< bogus key: rhybar.cz. DNSKEY (0 matching RRSIGs, 0 expired, 0 not yet valid, 0 invalid signer, 0 invalid label count, 0 invalid key, 0 invalid crypto, 0 invalid NSEC)
    May 15 11:28:07 turris kresd[10469]: [01990.15][vldr]     <= bad keys, broken trust chain
    May 15 11:28:07 turris kresd[10469]: [01990.15][cach]     => stashed rhybar.cz. DNSKEY, rank 020, 1004 B total, incl. 2 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [01990.15][cach]     => stashed packet: rank 025, TTL 600, DNSKEY rhybar.cz. (1088 B)
    May 15 11:28:07 turris kresd[10469]: [01990.00][resl] request failed, answering with empty SERVFAIL
    May 15 11:28:07 turris kresd[10469]: [01990.15][resl]     finished in state: 8, queries: 4, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec www.rhybar.cz
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1990
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;www.rhybar.cz.			IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 40 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 42
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan '*.wilda.rhybar.0skar.cz.' type 'A' uid [48669.00]
    May 15 11:28:07 turris kresd[10469]: [48669.00][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [48669.01][plan]   plan '.' type 'DNSKEY' uid [48669.02]
    May 15 11:28:07 turris kresd[10469]: [48669.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [48669.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [48669.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 56330
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [48669.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.01][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.04][plan]   plan 'cz.' type 'DS' uid [48669.05]
    May 15 11:28:07 turris kresd[10469]: [48669.05][iter]     'cz.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [48669.06][cach]     => satisfied by exact RRset: rank 060, new TTL 32525
    May 15 11:28:07 turris kresd[10469]: [48669.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 18410
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	32525	DS	20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
    May 15 11:28:07 turris kresd[10469]: cz.                 	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . eYou1pjuNiqGBTSPxxZ91A/ifjQ1H11IyiQOGCeo48CpigO01r0V/rJ83P3+FJreZ0cUSOjSNrgjaE8P03DdUDSv+n2b0f9D5Ld1p3Od7++nOlaAjcW2zoxdC0Zp5wH69+0kLkuvtsgSQbffq1maawrDh/VGeMvUCSlSsLqfJza+up830DyzONCGVHvp0YlcMkssWaafOMCZ99Q/3Rtv/7VK2t9L15T67Oz/k/IlyQ3byz79O99sGWbC/Lv/mMQtXTkHDpkrWdN1hUsZoDHwmtviv0gvgG92fhmOx1TFNRJl2+gRlW3kQ36ElEGZWun77uwVGBl22mO0wa+F36BIJg==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [48669.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [48669.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.04][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.07][plan]   plan 'cz.' type 'DNSKEY' uid [48669.08]
    May 15 11:28:07 turris kresd[10469]: [48669.08][iter]     'cz.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [48669.09][cach]     => satisfied by exact RRset: rank 060, new TTL 3567
    May 15 11:28:07 turris kresd[10469]: [48669.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 608
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3600	RRSIG	DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [48669.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.07][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.10][plan]   plan '0skar.cz.' type 'DS' uid [48669.11]
    May 15 11:28:07 turris kresd[10469]: [48669.11][iter]     '0skar.cz.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [48669.12][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.12][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.12][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [48669.12][resl]     => id: '18010' querying: '10.255.255.10#00053' score: 21 zone cut: 'cz.' qname: '0SKAR.cz.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [48669.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 18010
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DS	20732 13 2 BD0CD89E39BF808621DC4DE3A4FA51EC4BBA0E987BC9224C51B94A62527E83BC
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	RRSIG	DS 13 2 3600 20210525102134 20210511085134 26955 cz. VYaaXlac0sWgNC742A79DVtpyVRcYOgrFaUuFuCncCeiZEtBCewFD7HGSEjjLl2ux7oZ4N6/BIm+2iQo2u0Sog==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.12][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [48669.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [48669.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.12][cach]     => stashed 0skar.cz. DS, rank 060, 140 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.12][resl]     <= server: '10.255.255.10' rtt: 10 ms
    May 15 11:28:07 turris kresd[10469]: [48669.10][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.13][plan]   plan '0skar.cz.' type 'DNSKEY' uid [48669.14]
    May 15 11:28:07 turris kresd[10469]: [48669.14][iter]     '0skar.cz.' type 'DNSKEY' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [48669.15][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.15][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.15][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [48669.15][resl]     => id: '22860' querying: '10.255.255.10#00053' score: 21 zone cut: '0skar.cz.' qname: '0skAr.CZ.' qtype: 'DNSKEY' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [48669.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 22860
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DNSKEY	256 3 13 fvjA/6s70GkFfDON7oDbkXhb+r5pGiYdPaQV1n4Y6AHEtTsQlE9XBG8ZBI5DXaIjWs3OurOspqdjBSLk2BcNSA==
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DNSKEY	257 3 13 JSrbBhsD6toRTrAYQO16FlFjr5G3R8QHHjipqgXoHuk63ipIHhpliPbFzmDXw7CmCv3rTV/FWvhe27boFFJQAw==
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	RRSIG	DNSKEY 13 2 3600 20210522192516 20210508175516 20732 0skar.cz. iK+MjbzE52IT5+P6pSp38i212Wz5nvwdTpPhJPdf9dzpiOY5RF+gjD8rRxPbPsV8hOrg2Mq7jl70FZ09jwnLiw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.15][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [48669.15][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.15][cach]     => stashed 0skar.cz. DNSKEY, rank 060, 248 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.15][resl]     <= server: '10.255.255.10' rtt: 12 ms
    May 15 11:28:07 turris kresd[10469]: [48669.13][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.16][plan]   plan 'rhybar.0skar.cz.' type 'DS' uid [48669.17]
    May 15 11:28:07 turris kresd[10469]: [48669.17][iter]     'rhybar.0skar.cz.' type 'DS' new uid was assigned .18, parent uid .16
    May 15 11:28:07 turris kresd[10469]: [48669.18][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.18][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.18][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 11
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [48669.18][resl]     => id: '60456' querying: '10.255.255.10#00053' score: 21 zone cut: '0skar.cz.' qname: 'rHYBaR.0SKaR.Cz.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [48669.18][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 60456
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	3600	DS	28887 10 2 2A5CBF17973787B57A3FB41FF5169A46CAA1E3C01EED5BD0E8799D7B36A21837
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	3600	RRSIG	DS 13 3 3600 20210522172516 20210508155516 45589 0skar.cz. VjoPYSOOLz1Re0bUIWIz89fhPjy3jzSjUe6HMgElXkEO8QLEmMqOzm1S7g/jKSdDWAAUZ0n2iVe0wD2mB2nxAA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.18][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.18][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [48669.18][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [48669.18][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.18][cach]     => stashed rhybar.0skar.cz. DS, rank 060, 146 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.18][resl]     <= server: '10.255.255.10' rtt: 32 ms
    May 15 11:28:07 turris kresd[10469]: [48669.16][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .19, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.19][plan]   plan 'rhybar.0skar.cz.' type 'DNSKEY' uid [48669.20]
    May 15 11:28:07 turris kresd[10469]: [48669.20][iter]     'rhybar.0skar.cz.' type 'DNSKEY' new uid was assigned .21, parent uid .19
    May 15 11:28:07 turris kresd[10469]: [48669.21][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.21][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.21][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 21
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [48669.21][resl]     => id: '06136' querying: '10.255.255.10#00053' score: 21 zone cut: 'rhybar.0skar.cz.' qname: 'rhYBAR.0sKAr.cz.' qtype: 'DNSKEY' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [48669.21][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 6136
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	300	DNSKEY	257 3 10 AwEAAcfJERXDHOSg4JsxSO8WmFdi/PPbtgB6N6xDyyaDqRzr9QCL4LXHyLYjGmriFn7xhVDQTyQQp/nox5RK8YeAFHoiglQuwQVs2TyZTAZskTRjK4NL3+TuMxtCMObzHkAxa0rYvAV5RBh5tdLHUHJLe33xrFNcVidkHMAPF+kjY/9UNi1at2LTohE8VQD0mcv3Gvm79heIjq8Xt3SuqPpk7eQm1r8m7cIsuojbCum964/H93LeyafExa1eEMhZIIiSG+ik2jDhdeybmMyeoKsOjIL/9N/Yd6u60VkWvUMennyv9rKQTOY84yg2T9yAVjusepggcxMpCVX5HdWxakruR80=
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	300	RRSIG	DNSKEY 10 3 300 19031125173144 20150718151845 28887 rhybar.0skar.cz. nIsVUh8n7XahL5ai5Pkkt1fgqQ7FbJpdgf9BWf8l/O1I1YLQXxQo4MtRluyJZ6n9gfG5PXE0SR/mFI15tnk24e3TI+x8TLTs0IifgUvfrr7cHEn5agqHQHkt2Kwf7kW4nhALE1x0ZBHalJyxsqm1HS8JyPSmJUEr57rb+0OE5MQBiztaaACND0q5PgmYtN2ipUEicYJgj73Y2ds0AVqY9f2Ln5AGxoZEvZZoXtrlSqdEfjAexWO7iiM201opkEkV48ekpmU5Lm/+f3uPd+uiKgaNgkvb/sfR3/cVksIFHgKvPv1Yvng5nCjHVRZMQ0P3muo5Zh8RC3OsZMp1z3qDLA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.21][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [48669.21][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [48669.21][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [48669.21][cach]     => stashed rhybar.0skar.cz. DNSKEY, rank 060, 574 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.21][resl]     <= server: '10.255.255.10' rtt: 13 ms
    May 15 11:28:07 turris kresd[10469]: [48669.19][iter]   '*.wilda.rhybar.0skar.cz.' type 'A' new uid was assigned .22, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [48669.22][plan]   plan 'wilda.rhybar.0skar.cz.' type 'DS' uid [48669.23]
    May 15 11:28:07 turris kresd[10469]: [48669.23][iter]     'wilda.rhybar.0skar.cz.' type 'DS' new uid was assigned .24, parent uid .22
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 17
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [48669.24][resl]     => id: '57434' querying: '10.255.255.10#00053' score: 21 zone cut: 'rhybar.0skar.cz.' qname: 'Wilda.RHyBAr.0SkAr.cZ.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [48669.24][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 57434
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: wilda.rhybar.0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	60	SOA	flexi.oskarcz.net. hostmaster.oskarcz.net. 1437236326 3600 900 1814400 3600
    May 15 11:28:07 turris kresd[10469]: rhybar.0skar.cz.    	300	RRSIG	SOA 10 3 300 19031125173144 20150718151845 28887 rhybar.0skar.cz. DdOSxwRBWoi7x9qEBU1vIf4/ERTJgiGmtYP26K3v0d4nTtUrTMM4jpa02DDzikNY6w5fzB1mVNjAQ9mWGVR8xq2LC1bMvPYYcT/+F024xTQ8cwoXKTX/vd2L5BGiool8WpuP1laccsQfg3m/LtrPRbGFDVPCkw8jyaxMjNVbmisjEAAd886G5YGxmeXIlAN1E069VgRUtWRNAxldhu/SJTNhvipjDH4nXY7jrLunfKw2cdufrH6b2pUywk71hYEH98kkm+FZJUSIY6YE7TdYAR7j409HHrjadNk4Nq8Tr/QAw6Go8D3dIoe8E0x0A3KQo5u+7OGEjnb4oCDzy6weog==
    May 15 11:28:07 turris kresd[10469]: *.wild.rhybar.0skar.cz.	3600	NSEC	*.wilda.rhybar.0skar.cz. CNAME RRSIG NSEC
    May 15 11:28:07 turris kresd[10469]: *.wild.rhybar.0skar.cz.	3600	RRSIG	NSEC 10 4 3600 19031125173144 20150718151845 28887 rhybar.0skar.cz. PEhnyTEF7jipezYH6l/6u+w14sLhrANzbbrXjiCEL/MJ0xCMfdvNwBTEifqCovA9FeEIhRXz3RuS1xNZ90ifQikK/YS6B4lrs21/LeAzwY+sVtH2nySR7WXAS3ZrgTeREKuA3pC9TMiIgph45uOEqgO115cT3HVGIIdeITJpD3pMP2QgXja9QzJJpkddjSNEIlXQufXGAl/owr3p6pJK+83hjzjM6N/YfgROPvhyFTJNHVuyp6MvBJkd68nFAxNuUpDC80NoULT38Vs+hEBpJuM4heBjmcc0Blbyqn53ICwEWLBdJSsvZAFtbPxAknb/5LyUla32xXZ2e7vBroGhCQ==
    May 15 11:28:07 turris kresd[10469]: *.wilda.rhybar.0skar.cz.	3600	NSEC	*.wildt.rhybar.0skar.cz. A AAAA RRSIG NSEC
    May 15 11:28:07 turris kresd[10469]: *.wilda.rhybar.0skar.cz.	3600	RRSIG	NSEC 10 4 3600 19031125173144 20150718151845 28887 rhybar.0skar.cz. CgS9BthZJmNXx/03y46WfK4dUqhOePxpnczGQbAfFl3473CBK73c+yoIgSqhkIAvG4O3ectEANge68bDJ05493o+3169iPUcTZkhtm/JnPiIA44ePa7CXw9qXMeF7veyHWy4I2fStTZ8CHR9Ii44GkRfdwrMM156IdHZSv8z42e3dr4rLfk8BsdYsozEJnY4MLmvfdDxUC9ze8g5q9jjJ76VY0g9s3MGFCENFauqfJCGttW/csUt2ElP99+lxgpfDtQznARCsNN/sjtEVnr2qqHeogvqOvQjtsg967mOoSPqfdWtOhqB2u7gYnJFugv9gW/9+cqtsLkWX0acGwuXGg==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [48669.24][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [gnutls] (3) ASSERT: pk.c[_wrap_nettle_pk_verify]:1479
    May 15 11:28:07 turris kresd[10469]: [gnutls] (3) ASSERT: pubkey.c[pubkey_verify_data]:2392
    May 15 11:28:07 turris kresd[10469]: [gnutls] (3) ASSERT: pubkey.c[gnutls_pubkey_verify_data2]:1942
    May 15 11:28:07 turris kresd[10469]: [48669.24][vldr]     >< bogus signatures: rhybar.0skar.cz. SOA (1 matching RRSIGs, 0 expired, 0 not yet valid, 0 invalid signer, 0 invalid label count, 0 invalid key, 1 invalid crypto, 0 invalid NSEC)
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => stashed *.wilda.rhybar.0skar.cz. NSEC, rank 060, 344 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => stashed *.wild.rhybar.0skar.cz. NSEC, rank 060, 344 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => skipping bogus RR set SOA
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => nsec_p stashed for rhybar.0skar.cz. (new, hash: 0)
    May 15 11:28:07 turris kresd[10469]: [48669.24][cach]     => stashed packet: rank 025, TTL 60, DS wilda.rhybar.0skar.cz. (1134 B)
    May 15 11:28:07 turris kresd[10469]: [48669.00][resl] request failed, answering with empty SERVFAIL
    May 15 11:28:07 turris kresd[10469]: [48669.24][resl]     finished in state: 8, queries: 7, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec *.wilda.rhybar.0skar.cz
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 48669
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;*.wilda.rhybar.0skar.cz.	IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 80 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 52
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan '*.wilda.nsec.0skar.cz.' type 'A' uid [45787.00]
    May 15 11:28:07 turris kresd[10469]: [45787.00][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.01][cach]   => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [45787.01][cach]   => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [45787.01][cach]   => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [45787.01][plan]   plan '.' type 'DNSKEY' uid [45787.02]
    May 15 11:28:07 turris kresd[10469]: [45787.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [45787.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [45787.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 8023
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [45787.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.01][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.04][plan]   plan 'cz.' type 'DS' uid [45787.05]
    May 15 11:28:07 turris kresd[10469]: [45787.05][iter]     'cz.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [45787.06][cach]     => satisfied by exact RRset: rank 060, new TTL 32525
    May 15 11:28:07 turris kresd[10469]: [45787.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 39310
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	32525	DS	20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
    May 15 11:28:07 turris kresd[10469]: cz.                 	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . eYou1pjuNiqGBTSPxxZ91A/ifjQ1H11IyiQOGCeo48CpigO01r0V/rJ83P3+FJreZ0cUSOjSNrgjaE8P03DdUDSv+n2b0f9D5Ld1p3Od7++nOlaAjcW2zoxdC0Zp5wH69+0kLkuvtsgSQbffq1maawrDh/VGeMvUCSlSsLqfJza+up830DyzONCGVHvp0YlcMkssWaafOMCZ99Q/3Rtv/7VK2t9L15T67Oz/k/IlyQ3byz79O99sGWbC/Lv/mMQtXTkHDpkrWdN1hUsZoDHwmtviv0gvgG92fhmOx1TFNRJl2+gRlW3kQ36ElEGZWun77uwVGBl22mO0wa+F36BIJg==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [45787.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [45787.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.04][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.07][plan]   plan 'cz.' type 'DNSKEY' uid [45787.08]
    May 15 11:28:07 turris kresd[10469]: [45787.08][iter]     'cz.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [45787.09][cach]     => satisfied by exact RRset: rank 060, new TTL 3567
    May 15 11:28:07 turris kresd[10469]: [45787.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 26494
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3600	RRSIG	DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [45787.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.07][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.10][plan]   plan '0skar.cz.' type 'DS' uid [45787.11]
    May 15 11:28:07 turris kresd[10469]: [45787.11][iter]     '0skar.cz.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [45787.12][cach]     => satisfied by exact RRset: rank 060, new TTL 3600
    May 15 11:28:07 turris kresd[10469]: [45787.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 44179
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DS	20732 13 2 BD0CD89E39BF808621DC4DE3A4FA51EC4BBA0E987BC9224C51B94A62527E83BC
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	RRSIG	DS 13 2 3600 20210525102134 20210511085134 26955 cz. VYaaXlac0sWgNC742A79DVtpyVRcYOgrFaUuFuCncCeiZEtBCewFD7HGSEjjLl2ux7oZ4N6/BIm+2iQo2u0Sog==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.12][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.12][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [45787.12][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [45787.12][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.10][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .13, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.13][plan]   plan '0skar.cz.' type 'DNSKEY' uid [45787.14]
    May 15 11:28:07 turris kresd[10469]: [45787.14][iter]     '0skar.cz.' type 'DNSKEY' new uid was assigned .15, parent uid .13
    May 15 11:28:07 turris kresd[10469]: [45787.15][cach]     => satisfied by exact RRset: rank 060, new TTL 3600
    May 15 11:28:07 turris kresd[10469]: [45787.15][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 28067
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DNSKEY	256 3 13 fvjA/6s70GkFfDON7oDbkXhb+r5pGiYdPaQV1n4Y6AHEtTsQlE9XBG8ZBI5DXaIjWs3OurOspqdjBSLk2BcNSA==
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DNSKEY	257 3 13 JSrbBhsD6toRTrAYQO16FlFjr5G3R8QHHjipqgXoHuk63ipIHhpliPbFzmDXw7CmCv3rTV/FWvhe27boFFJQAw==
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	RRSIG	DNSKEY 13 2 3600 20210522192516 20210508175516 20732 0skar.cz. iK+MjbzE52IT5+P6pSp38i212Wz5nvwdTpPhJPdf9dzpiOY5RF+gjD8rRxPbPsV8hOrg2Mq7jl70FZ09jwnLiw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.15][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.15][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [45787.15][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.13][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .16, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.16][plan]   plan 'nsec.0skar.cz.' type 'DS' uid [45787.17]
    May 15 11:28:07 turris kresd[10469]: [45787.17][iter]     'nsec.0skar.cz.' type 'DS' new uid was assigned .18, parent uid .16
    May 15 11:28:07 turris kresd[10469]: [45787.18][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [45787.18][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [45787.18][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 17
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [45787.18][resl]     => id: '27115' querying: '10.255.255.10#00053' score: 21 zone cut: '0skar.cz.' qname: 'NseC.0SKaR.CZ.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [45787.18][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 27115
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	3600	DS	28887 10 2 91EC2CE9169EEFCEF4ED611791FCA8A90D7DF02B6A48E85BE6E1B016253AEDA1
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	3600	RRSIG	DS 13 3 3600 20210522172516 20210508155516 45589 0skar.cz. ZvUfWZu7jTiLJYkHT1vqVV9LuQK+1hetmJ40ZQoMPChxRw5VA69/OszMTDqm7nk/tXiCV5IJkMFa83yKz+uJTw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.18][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.18][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [45787.18][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [45787.18][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.18][cach]     => stashed nsec.0skar.cz. DS, rank 060, 146 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.18][resl]     <= server: '10.255.255.10' rtt: 11 ms
    May 15 11:28:07 turris kresd[10469]: [45787.16][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .19, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.19][plan]   plan 'nsec.0skar.cz.' type 'DNSKEY' uid [45787.20]
    May 15 11:28:07 turris kresd[10469]: [45787.20][iter]     'nsec.0skar.cz.' type 'DNSKEY' new uid was assigned .21, parent uid .19
    May 15 11:28:07 turris kresd[10469]: [45787.21][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [45787.21][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [45787.21][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 14
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [45787.21][resl]     => id: '60827' querying: '10.255.255.10#00053' score: 21 zone cut: 'nsec.0skar.cz.' qname: 'Nsec.0skAR.cz.' qtype: 'DNSKEY' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [45787.21][resl]     => id: '60827' querying: '10.255.255.20#00053' score: 21 zone cut: 'nsec.0skar.cz.' qname: 'Nsec.0skAR.cz.' qtype: 'DNSKEY' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [45787.21][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 60827
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	300	DNSKEY	257 3 10 AwEAAcfJERXDHOSg4JsxSO8WmFdi/PPbtgB6N6xDyyaDqRzr9QCL4LXHyLYjGmriFn7xhVDQTyQQp/nox5RK8YeAFHoiglQuwQVs2TyZTAZskTRjK4NL3+TuMxtCMObzHkAxa0rYvAV5RBh5tdLHUHJLe33xrFNcVidkHMAPF+kjY/9UNi1at2LTohE8VQD0mcv3Gvm79heIjq8Xt3SuqPpk7eQm1r8m7cIsuojbCum964/H93LeyafExa1eEMhZIIiSG+ik2jDhdeybmMyeoKsOjIL/9N/Yd6u60VkWvUMennyv9rKQTOY84yg2T9yAVjusepggcxMpCVX5HdWxakruR80=
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	300	RRSIG	DNSKEY 10 3 300 19431125173144 20140130121330 28887 nsec.0skar.cz. Ef6Jmf/d9BR0VcRakUD8dEjrMmbAF6qqYRBllLOvibFvpgdEJ7egCO9td8jliD2VRXhqej2lqECNOvARJ+YyYekpniueiYZsBjleU2kJAyFAS2q37aBIii1WdM3h+noayDnjiuhEO3GLxxHWc3kyd2yDesPddiFl09fx+rcz9BwXaS9A/vdWv+92R1j4nijVI5jxZgkQ4lnD0ZtAVRdBRO7qDRpkRHDMpnaSq51B/9XCZEv2CW8UQ5dGd9D20a3uA2lAKHLgj2/Rcuar4o2Y4ERams9pyDCQDhGaveZQdx01EXX0ehe5qIKOKk7iFP95TbWPMRyk1bfKTUoTRq5rhQ==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.21][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.21][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [45787.21][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.21][cach]     => stashed nsec.0skar.cz. DNSKEY, rank 060, 572 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.21][resl]     <= server: '10.255.255.10' rtt: 50 ms
    May 15 11:28:07 turris kresd[10469]: [45787.19][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .22, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [45787.22][plan]   plan 'wilda.nsec.0skar.cz.' type 'DS' uid [45787.23]
    May 15 11:28:07 turris kresd[10469]: [45787.23][iter]     'wilda.nsec.0skar.cz.' type 'DS' new uid was assigned .24, parent uid .22
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => trying zone: ., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => NSEC sname: range search miss (!covers)
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => skipping zone: ., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 32
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [45787.24][resl]     => id: '61599' querying: '10.255.255.10#00053' score: 21 zone cut: 'nsec.0skar.cz.' qname: 'wiLdA.NseC.0SKAr.cz.' qtype: 'DS' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [45787.24][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 61599
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 0; AUTHORITY: 6; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: wilda.nsec.0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; AUTHORITY SECTION
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	300	SOA	flexi.oskarcz.net. hostmaster.oskarcz.net. 1391087610 3600 900 1814400 3600
    May 15 11:28:07 turris kresd[10469]: nsec.0skar.cz.      	300	RRSIG	SOA 10 3 300 19431125173144 20140130121330 28887 nsec.0skar.cz. GScva9Psu0QG8gDw5HMm+3jyjHVZecQQlvAQLowIuhdLHa9U1uDs64lhBjOeev44a765dje+M5ToOE+2MCR5VgfucMc1/DWi2TYEEQogH8zy2q88QxeAoveEzt9gL4RzWdRRMXA0o9RFkYk3C3wqP+WuHYR4nfdemnvGoY4RknpwGvIwW685G3U6Sd0ui7rHHXWTE5QjDkqT73W8mp2deKDIstj32j7TiEtbzqciZus23zpnp7FLyunZpPxY+V7kudY/niegOd24b5FYKxwvcLg5ORSHxDyLRMFQdveoXlR6SPHs7ZnOhuMI9Z2I7iViTYyRHYPbyC/e/3MM0hC7DA==
    May 15 11:28:07 turris kresd[10469]: *.wild.nsec.0skar.cz.	3600	NSEC	*.wilda.nsec.0skar.cz. CNAME RRSIG NSEC
    May 15 11:28:07 turris kresd[10469]: *.wild.nsec.0skar.cz.	3600	RRSIG	NSEC 10 4 3600 19431125173144 20140130121330 28887 nsec.0skar.cz. VJQslMRTGPU2yQcnIWi0AglZV/sY+lpw1O5aLwnLyKhFyBZZ4eYG68z74IfEf7DKhjw8BKNLezxD9jUpjBkF1VFU+0TuV0pBdO4tMeI3ta9vK8mb4qeIQre7Xci7TXpYEZDJq62zcZ2xMWHCtShoFsZpA5WC1Aa+kuaKaT3jZys/2tei21Rwijv+46fIgMia22pGiYNN+YGyiy6tPbIMidAOO9f+433FeT+xz1subT3LcVjzEBAmnuR+cx8hxo9TMUo7iD30iZnHkXErpTlDeIE4nkoQBpKPd/9Btk6GS4tbFlv8GK57hNycaDRhybqO4qajk7EUDAs4ThWJXGd9tQ==
    May 15 11:28:07 turris kresd[10469]: *.wilda.nsec.0skar.cz.	3600	NSEC	www.wilda.nsec.0skar.cz. A AAAA RRSIG NSEC
    May 15 11:28:07 turris kresd[10469]: *.wilda.nsec.0skar.cz.	3600	RRSIG	NSEC 10 4 3600 19431125173144 20140130121330 28887 nsec.0skar.cz. wwDV2M2xIchq845sB5nL0pJyBBVlhsJIt5w5CRai6C1X182ZU3K0c96i4cMiNbXZX4+Oa92IRTPTxnSH+Yi6qbhnqkzE1LBESyP1XP8Wq5+DCXPY/+qWN8wgqbeZoFthGd/Hk3IbeDGBX3v9er43wa2bQChyxRnRr7bpTVJUNCH4JmOP0miThjmYFU61uUy1b/C5eYgiyoeXtFjMMeikZJWTc7saqTnNf2bdzvlbGiT8wxT6cuEk0vlLqid+WOFuDzTYriRrQ7bw4WYgMjQlCXJtbbhSHflKtl1KTMylfwEGA00sTrTM4X4rapQFRQfK+agM3tTaRjOpF5xAnXVDSA==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.24][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.24][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [45787.24][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => stashed *.wilda.nsec.0skar.cz. NSEC, rank 060, 342 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => stashed *.wild.nsec.0skar.cz. NSEC, rank 060, 340 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => stashed nsec.0skar.cz. SOA, rank 060, 372 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.24][cach]     => nsec_p stashed for nsec.0skar.cz. (new, hash: 0)
    May 15 11:28:07 turris kresd[10469]: [45787.24][resl]     <= server: '10.255.255.10' rtt: 13 ms
    May 15 11:28:07 turris kresd[10469]: [45787.22][iter]   '*.wilda.nsec.0skar.cz.' type 'A' new uid was assigned .25, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.10#00053;	 cached RTT: 22
    May 15 11:28:07 turris kresd[10469]: [     ][nsre] score 21 for 10.255.255.20#00053;	 cached RTT: -1
    May 15 11:28:07 turris kresd[10469]: [45787.25][resl]   => id: '00649' querying: '10.255.255.10#00053' score: 21 zone cut: 'nsec.0skar.cz.' qname: '*.WIlDA.NseC.0SkAr.Cz.' qtype: 'A' proto: 'udp'
    May 15 11:28:07 turris kresd[10469]: [45787.25][iter]   <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 649
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr rd ra ad cd  QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; EDNS PSEUDOSECTION:
    May 15 11:28:07 turris kresd[10469]: ;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: *.wilda.nsec.0skar.cz.		A
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: *.wilda.nsec.0skar.cz.	300	A	85.239.227.179
    May 15 11:28:07 turris kresd[10469]: *.wilda.nsec.0skar.cz.	300	RRSIG	A 10 4 300 19431125173144 20140130121330 28887 nsec.0skar.cz. fJxvVUjFwkEqsDvCOrQHoyLwOQf4XKtmhMJCEZiCEy7MvxGx73uJPI1TlxFhM3PfZCsDUQukMEcGhQgKmnZbSkudE9ocSXELt9ponJHWdh0TIoFhBciCOA8UfO3K2gcYR+v0wyXlHGLHWXysPiULCk3ujDbFHTUBxQadN+9Ef0TODRF/VtPrwJFisCDGPV9SofuOChI64Xys/Ycmn6fFKp09YTDDhroIIuedqT1CgKPi0WHFLLAqkSUBzRFPYu5769xrR/ukPHBBcj/SGJWdTkcWybHSoR9rRr9JyQ2o+FrIf+nKtcY8rVQ8EUexq7CsdMcUo3ZGwgjuaR1vIUVVNw==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ADDITIONAL SECTION
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [45787.25][iter]   <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [45787.25][vldr]   <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [45787.25][cach]   => stashed *.wilda.nsec.0skar.cz. A, rank 060, 312 B total, incl. 1 RRSIGs
    May 15 11:28:07 turris kresd[10469]: [45787.25][resl]   <= server: '10.255.255.10' rtt: 19 ms
    May 15 11:28:07 turris kresd[10469]: [45787.25][resl]   AD: request classified as SECURE
    May 15 11:28:07 turris kresd[10469]: [45787.25][resl]   finished in state: 4, queries: 9, mempool: 32784 B
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ; <<>> DiG 9.16.12 <<>> @127.0.0.1 +dnssec *.wilda.nsec.0skar.cz
    May 15 11:28:07 turris resolver-debug: ; (1 server found)
    May 15 11:28:07 turris resolver-debug: ;; global options: +cmd
    May 15 11:28:07 turris resolver-debug: ;; Got answer:
    May 15 11:28:07 turris resolver-debug: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45787
    May 15 11:28:07 turris resolver-debug: ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; OPT PSEUDOSECTION:
    May 15 11:28:07 turris resolver-debug: ; EDNS: version: 0, flags: do; udp: 1232
    May 15 11:28:07 turris resolver-debug: ;; QUESTION SECTION:
    May 15 11:28:07 turris resolver-debug: ;*.wilda.nsec.0skar.cz.		IN	A
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; ANSWER SECTION:
    May 15 11:28:07 turris resolver-debug: *.wilda.nsec.0skar.cz.	300	IN	A	85.239.227.179
    May 15 11:28:07 turris resolver-debug: *.wilda.nsec.0skar.cz.	300	IN	RRSIG	A 10 4 300 20800101000000 20140130121330 28887 nsec.0skar.cz. fJxvVUjFwkEqsDvCOrQHoyLwOQf4XKtmhMJCEZiCEy7MvxGx73uJPI1T lxFhM3PfZCsDUQukMEcGhQgKmnZbSkudE9ocSXELt9ponJHWdh0TIoFh BciCOA8UfO3K2gcYR+v0wyXlHGLHWXysPiULCk3ujDbFHTUBxQadN+9E f0TODRF/VtPrwJFisCDGPV9SofuOChI64Xys/Ycmn6fFKp09YTDDhroI IuedqT1CgKPi0WHFLLAqkSUBzRFPYu5769xrR/ukPHBBcj/SGJWdTkcW ybHSoR9rRr9JyQ2o+FrIf+nKtcY8rVQ8EUexq7CsdMcUo3ZGwgjuaR1v IUVVNw==
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris resolver-debug: ;; Query time: 100 msec
    May 15 11:28:07 turris resolver-debug: ;; SERVER: 127.0.0.1#53(127.0.0.1)
    May 15 11:28:07 turris resolver-debug: ;; WHEN: Sat May 15 13:28:07 CEST 2021
    May 15 11:28:07 turris resolver-debug: ;; MSG SIZE  rcvd: 367
    May 15 11:28:07 turris resolver-debug: 
    May 15 11:28:07 turris kresd[10469]: [00000.00][plan] plan '*.wild.nsec.0skar.cz.' type 'A' uid [04426.00]
    May 15 11:28:07 turris kresd[10469]: [04426.00][iter]   '*.wild.nsec.0skar.cz.' type 'A' new uid was assigned .01, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [04426.01][cach]   => trying zone: nsec.0skar.cz., NSEC, hash 0
    May 15 11:28:07 turris kresd[10469]: [04426.01][cach]   => NSEC sname: match but failed type check
    May 15 11:28:07 turris kresd[10469]: [04426.01][cach]   => skipping zone: nsec.0skar.cz., NSEC, hash 0;new TTL -123456789, ret -2
    May 15 11:28:07 turris kresd[10469]: [04426.01][plan]   plan '.' type 'DNSKEY' uid [04426.02]
    May 15 11:28:07 turris kresd[10469]: [04426.02][iter]     '.' type 'DNSKEY' new uid was assigned .03, parent uid .01
    May 15 11:28:07 turris kresd[10469]: [04426.03][cach]     => satisfied by exact RRset: rank 060, new TTL 172794
    May 15 11:28:07 turris kresd[10469]: [04426.03][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 49916
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: .		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqAj/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDRnreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU=
    May 15 11:28:07 turris kresd[10469]: .                   	172794	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
    May 15 11:28:07 turris kresd[10469]: .                   	172800	RRSIG	DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2bJP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [04426.03][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [04426.03][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [04426.03][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [04426.01][iter]   '*.wild.nsec.0skar.cz.' type 'A' new uid was assigned .04, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [04426.04][plan]   plan 'cz.' type 'DS' uid [04426.05]
    May 15 11:28:07 turris kresd[10469]: [04426.05][iter]     'cz.' type 'DS' new uid was assigned .06, parent uid .04
    May 15 11:28:07 turris kresd[10469]: [04426.06][cach]     => satisfied by exact RRset: rank 060, new TTL 32525
    May 15 11:28:07 turris kresd[10469]: [04426.06][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 30124
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	32525	DS	20237 13 2 CFF0F3ECDBC529C1F0031BA1840BFB835853B9209ED1E508FFF48451D7B778E2
    May 15 11:28:07 turris kresd[10469]: cz.                 	86400	RRSIG	DS 8 1 86400 20210527190000 20210514180000 14631 . eYou1pjuNiqGBTSPxxZ91A/ifjQ1H11IyiQOGCeo48CpigO01r0V/rJ83P3+FJreZ0cUSOjSNrgjaE8P03DdUDSv+n2b0f9D5Ld1p3Od7++nOlaAjcW2zoxdC0Zp5wH69+0kLkuvtsgSQbffq1maawrDh/VGeMvUCSlSsLqfJza+up830DyzONCGVHvp0YlcMkssWaafOMCZ99Q/3Rtv/7VK2t9L15T67Oz/k/IlyQ3byz79O99sGWbC/Lv/mMQtXTkHDpkrWdN1hUsZoDHwmtviv0gvgG92fhmOx1TFNRJl2+gRlW3kQ36ElEGZWun77uwVGBl22mO0wa+F36BIJg==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [04426.06][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [04426.06][vldr]     <= DS: OK
    May 15 11:28:07 turris kresd[10469]: [04426.06][vldr]     <= parent: updating DS
    May 15 11:28:07 turris kresd[10469]: [04426.06][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [04426.04][iter]   '*.wild.nsec.0skar.cz.' type 'A' new uid was assigned .07, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [04426.07][plan]   plan 'cz.' type 'DNSKEY' uid [04426.08]
    May 15 11:28:07 turris kresd[10469]: [04426.08][iter]     'cz.' type 'DNSKEY' new uid was assigned .09, parent uid .07
    May 15 11:28:07 turris kresd[10469]: [04426.09][cach]     => satisfied by exact RRset: rank 060, new TTL 3567
    May 15 11:28:07 turris kresd[10469]: [04426.09][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 39416
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: cz.		DNSKEY
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	256 3 13 zVIirJeP0wos+CJiGx1EW0Djqns3C6bnSjlGB6niJ0h5seNy06OVDX/VOjzFaXLtTC9YAlgAOjtLpCee6A/nFg==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3567	DNSKEY	257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI2nxgQqhzDQ==
    May 15 11:28:07 turris kresd[10469]: cz.                 	3600	RRSIG	DNSKEY 13 1 3600 20210525122134 20210511105134 20237 cz. qGDTIMFWMvqhWj2qZ1kJjVf/5XBeNEgXhunz5yL8yyxpZ6bg1Fwe1PrCJDqI4WRcr8pYZy0AO+dyQsuE8aPq/g==
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: [04426.09][iter]     <= rcode: NOERROR
    May 15 11:28:07 turris kresd[10469]: [04426.09][vldr]     <= parent: updating DNSKEY
    May 15 11:28:07 turris kresd[10469]: [04426.09][vldr]     <= answer valid, OK
    May 15 11:28:07 turris kresd[10469]: [04426.07][iter]   '*.wild.nsec.0skar.cz.' type 'A' new uid was assigned .10, parent uid .00
    May 15 11:28:07 turris kresd[10469]: [04426.10][plan]   plan '0skar.cz.' type 'DS' uid [04426.11]
    May 15 11:28:07 turris kresd[10469]: [04426.11][iter]     '0skar.cz.' type 'DS' new uid was assigned .12, parent uid .10
    May 15 11:28:07 turris kresd[10469]: [04426.12][cach]     => satisfied by exact RRset: rank 060, new TTL 3600
    May 15 11:28:07 turris kresd[10469]: [04426.12][iter]     <= answer received: 
    May 15 11:28:07 turris kresd[10469]: ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 50336
    May 15 11:28:07 turris kresd[10469]: ;; Flags: qr aa  QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; QUESTION SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.		DS
    May 15 11:28:07 turris kresd[10469]: 
    May 15 11:28:07 turris kresd[10469]: ;; ANSWER SECTION
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	DS	20732 13 2 BD0CD89E39BF808621DC4DE3A4FA51EC4BBA0E987BC9224C51B94A62527E83BC
    May 15 11:28:07 turris kresd[10469]: 0skar.cz.           	3600	RRSIG	DS 13 2 3600 20210525102134 20210511085134 26955 cz. VYaaXlac0sWgNC742A79DVtpyVRcYOgrFaUuFuCncCeiZEtBCewFD7HGSEjjLl2ux7oZ4N6/BIm+2iQo2u0Sog==
   x
x
x
x
x

vcunat · May 15, 2021, 4:05pm

And you are not using some DNS-over-HTTPS, right? (that would bypass the Turris DNS)

JardaB · May 15, 2021, 5:02pm

When I turn off this feature, I don’t read unique other website, and Opera reports an error with me to activating DNS-over-HTTPS. If I turn it off , nothing’s going to change to Centrum. In addition, Chrome (without changing settings) also doesn’t load the Centrum page. Given the uniqueness of my problem, I’ll probably try to consult my internet provider.

xsys · May 16, 2021, 10:27am

First investigation, I would try to avoid Omnia’s and your ISP’s DNS, therefore give you clients another one, for example use DHCP option 6,1.1.1.1,1.0.0.1,8.8.8.8

it will take some clients reboots to take into effect. Also clear browser cache etc.
You can even try if you can traceroute centrum.cz and www.centrum.cz (those are different)

JardaB · May 16, 2021, 10:56am

Diagnosing in the right direction

** Traceroute www.centrum.cz is allways ready
** Traceroute centrum.cz allways Error: XHR request timed out (with different combinations of DNS forward and Opera settings DNS-over-HTTPS)

Clean page www.centrum.cz contains html code

<!DOCTYPE html>
<html lang="cs">
<head>

Souhrn

<meta name="referrer" content="unsafe-url">
<meta name="application-name" content="centrum.cz">
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1">
<meta name="description" content="Centrum.cz je český internetový portál nabízející e-mail, aktuální zpravodajství, počasí a další zajímavé služby.">
<meta name="theme-color" content="#00467f">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="cf-2fa-verify" content="CFCF1234">
<title>Centrum.cz</title>
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum.ico" type="image/x-icon">
<link rel="shortcut icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum.ico">
<link rel="preload" href="https://hpxs.xsd.cz/1.127.1/js/centrum.min.js" as="script"/>
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-16x16.png" sizes="16x16">
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-32x32.png" sizes="32x32">
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-96x96.png" sizes="96x96">
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-128x128.png" sizes="128x128">
<link rel="icon" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-196x196.png" sizes="196x196">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-57x57.png" sizes="57x57">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-60x60.png" sizes="60x60">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-76x76.png" sizes="76x76">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-114x114.png" sizes="114x114">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-120x120.png" sizes="120x120">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-144x144.png" sizes="144x144">
<link rel="apple-touch-icon-precomposed" href="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-152x152.png" sizes="152x152">
<meta name="msapplication-TileColor" content="#00467f">
<meta name="msapplication-TileImage" content="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-144x144.png">
<meta name="msapplication-square70x70logo" content="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-70x70.png">
<meta name="msapplication-square150x150logo" content="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-150x150.png">
<meta name="msapplication-wide310x150logo" content="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-310x150.png">
<meta name="msapplication-square310x310logo" content="https://hpxs.xsd.cz/1.127.1/images/favicon/centrum-310x310.png">

<link href="https://fonts.googleapis.com/css?family=Roboto:400,700,900&subset=latin-ext" rel="stylesheet">
<link href="https://hpxs.xsd.cz/1.127.1/css/bootstrap.min.css" rel="stylesheet">
<link rel="manifest" href="https://hpxs.xsd.cz/1.127.1/manifest.production.json">

<script src="https://hpxs.xsd.cz/1.127.1/js/centrum/head.js"></script>
<script src="https://hpxs.xsd.cz/1.127.1/js/prebid-ads.js"></script>
</head>
<body>
<div class="brand-a" id="brand-a">
<div class="brand-b" id="brand-b">
<div class="brand-c" id="brand-c">
<div id="app">
<script src="https://hpxs.xsd.cz/1.127.1/js/init.js"></script>

</div>
</div>
</div>
</div>
<script>var __INITIAL_STATE__={"layout":{"name":"layout","meta":{"inbox":{"requiredCookies":["uprofile"],"serviceUrlPattern":"https\\://mail.centrum.cz/free/widget.php?op=index&output=json","xhrLogoutUri":"https://user.centrum.cz/logout.php?api=true"},"sashec":{"site":"hp","template":"hp","nightly":{"ab":"zz"},"render":"postscribe","area":"centrum"},"sashecAntiAdblock":{"targets":{"ap":"bi"}}},"utmSource":"centrumHP"},"logo":{"name":"logo","meta":{"link":{"text":"Centrum.cz","src":"images/logo/centrum.png"}},"utmSource":"centrumHP"},"search":{"name":"search","autoFocus":true,"utmMedium":"searchbox","secret":"EwUyxjQ6zja%vfAL","meta":{"sections":{"internet":{"brandText":"Našeptávač Centrum.cz"}}},"utmSource":"centrumHP"},"emaillink":{"name":"emaillink","utmMedium":"stickybar","meta":{"link":{"location":"https://mail.centrum.cz"},"logout":{"text":"Odhlásit se","location":"https://user.centrum.cz/logout.php?url=https%3a%2f%2fwww.centrum.cz"},"inbox":{"text":"Přejít do e-mailu","location":"https://mail.centrum.cz"}},"utmSource":"centrumHP"},"hotsearch":{"name":"hotsearch","maxItems":3,"utmMedium":"hotsearchesbox","utmCustom":{"channel_id":"hot_searches-HPC","hot":"1","client_id":"centrum-ssfs"},"boxesConfig":[{"source":"HotSearch"}],"utmSource":"centrumHP","boxes":[{"guid":"4b5a2d7e49fa11eba25cac1f6b220ee8","images":{},"title":"Bradáčová","link":"//search.centrum.cz/?q=Bradáčová","source":"HotSearch","forcedPosition":0,"featuredType":"link"},{"guid":"f196c84c49f911ebb1110cc47ab5f122","images":{},"title":"Sparta - Plzeň","link":"//search.centrum.cz/?q=sparta+-+plzeň","source":"HotSearch","forcedPosition":1,"featuredType":"link"},{"guid":"134e0e6449fa11eba7deac1f6b220ee8","images":{},"title":"Hladiny řek","link":"//search.centrum.cz/?q=Hladiny+%C5%99ek","source":"HotSearch","forcedPosition":2,"featuredType":"link"}]},"mobiletabs":{"name":"mobiletabs","widgets":["email","tvProgram","horoscopes","weather"],"utmSource":"centrumHP"},"dynamiclead":{"name":"dynamiclead","utmMedium":"dynamicleadbox","imageCount":6,"imageSize":"4_3","imageSkip":1,"showId":true,"ad":{"mobile":{"pos":"1"}},"boxesConfig":[{"source":"Aktualne","count":6}],"boxesOverride":"OverrideDynamiclead","utmSource":"centrumHP","boxes":[{"guid":"1d2d811eb25811ebb0fa0cc47ab5f122","images":{"1_1":"//cdn.xsd.cz/resize/5f2229a59d913384bf676e77f1706c66_resize=96,96_.jpg?hash=9380a35d8f9b3618ece65a06646f5c6f","4_3":"//cdn.xsd.cz/resize/5f2229a59d913384bf676e77f1706c66_resize=128,96_.jpg?hash=b53bad8b23b1298f8dfb6f7760e34846","4_3L":"//cdn.xsd.cz/resize/5f2229a59d913384bf676e77f1706c66_resize=392,294_.jpg?hash=66ccc34e38ea6d33d5bc3d2d53700f04","1_1L":"//cdn.xsd.cz/resize/5f2229a59d913384bf676e77f1706c66_resize=340,340_.jpg?hash=33ea06839c5bb3608dab53b48e33fcad","16_9":"//cdn.xsd.cz/resize/5f2229a59d913384bf676e77f1706c66_extract=173,0,1959,1103_resize=220,124_.jpg?hash=cf806a56ada257e97292a7d968896d7b"},"title":"Zámek nad měsíční krajinou. Kastelánka ho zachránila před doly, přišla o rodný dům","link":"//magazin.aktualne.cz/obrazem/zamek-nad-mesicni-krajinou-kastelanka-ho-zachranila-pred-dol/r~1d2d811eb25811ebb0fa0cc47ab5f122/r~70c8ad96162911e794b9002590604f2e/","source":"Aktualne","forcedPosition":0,"featuredType":"gallery"},{"guid":"68d36266b4d111ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/8f0fb1cc422e34ef92d3c36b2e0bca69_resize=128,96_.jpg?hash=02f426417e4643c8836f3a954591d197"},"title":"CR7 versus tým. Hráče Juventusu vytáčí Ronaldovo papalášství, vykázali ho z šatny","link":"//sport.aktualne.cz/fotbal/zahranici/cr7-versus-tym-kabinu-juventusu-vytaci-ronaldovo-papalasstvi/r~68d36266b4d111ebbdfd0cc47ab5f122/","source":"Aktualne","forcedPosition":1,"featuredType":"article"},{"guid":"4a883f26b31811eb9cafac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/e0df38d064b63df89dda291f89894513_resize=128,96_.jpg?hash=1692ba145fd21a08bacdff034ce3d5f2"},"title":"Kam na prázdniny? Velký přehled ukazuje, co chtějí po Češích v oblíbených zemích","link":"//zpravy.aktualne.cz/zahranici/cestovani-po-evrope-jaka-plati-pravidla/r~4a883f26b31811eb9cafac1f6b220ee8/","source":"Aktualne","forcedPosition":2,"featuredType":"graphicscoda"},{"guid":"e6246566b60811eb9a61ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/3b4da44023c331e89dddc67c112943ed_resize=128,96_.jpg?hash=9e6cb2344ad2f1e04eda0c3af4c452e8"},"title":"Noční útoky izraelského letectva zabily 26 lidí včetně dětí, tvrdí Palestinci","link":"//zpravy.aktualne.cz/zahranici/izraelska-armada-zautocila-na-dum-sefa-hamasu-v-pasmu-gazy/r~e6246566b60811eb9a61ac1f6b220ee8/","source":"Aktualne","forcedPosition":3,"featuredType":"article"},{"guid":"da7fe3d8b01911eb9f15ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/d5f92c19092c3332846bccd55d9c3066_resize=128,96_.jpg?hash=7d97026c433c9b3227455f8b52109315"},"title":"Reforma penzí je hotova, bude radikální. Co konkrétně změní návrh týkající se všech","link":"//zpravy.aktualne.cz/finance/duchodova-reforma-bude-radikalni-nyni-miri-do-snemovny-ke-sc/r~da7fe3d8b01911eb9f15ac1f6b220ee8/","source":"Aktualne","forcedPosition":4,"featuredType":"graphicscoda"},{"guid":"9215fea2ac8211eab0f60cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/81607f844b083092b6ddcfb9c549a415_extract=0,26,1772,1328_resize=128,96_.jpg?hash=63eb64737aae5ef0296fb217be2c8bfa"},"title":"Kvíz: Kolik si toho pamatujete ze seriálu Přátelé? Otestujte se","link":"//zena.aktualne.cz/volny-cas/kviz-serial-pratele/r~9215fea2ac8211eab0f60cc47ab5f122/","source":"Aktualne","forcedPosition":5,"featuredType":"graphics"}]},"plague":{"name":"plague","utmMedium":"banner","imageCount":4,"imageSkip":1,"imageSize":"1_1","boxesConfig":[{"source":"CovidStats","count":1},{"source":"BbxCoronavirus","count":3}],"utmSource":"centrumHP","boxes":[{"countSick":1652840,"countRecover":1592263,"countHospitalized":1341,"countDead":29901,"diffSick":596,"diffRecover":44,"diffHospitalized":-159,"diffDead":15,"lastUpdate":"15. 5.","vaccinatedPercentage":10.29,"vaccinationsLastUpdate":"14. 5.","source":"CovidStats"},{"guid":"676ef6f2","images":{"1_1":"//hpxs.xsd.cz/emg/5878cbb2.jpg"},"title":"Vakcínu v Česku dostaly 3 miliony lidí. O půlnoci se očkování otevře pro čtyřicátníky","link":"//zpravy.aktualne.cz/domaci/koronavirus-online/r~dab1d2f0b48611eb8335ac1f6b220ee8/","source":"BbxCoronavirus"},{"guid":"6ec7f6e6","images":{"1_1":"//hpxs.xsd.cz/emg/22e8ddc0.jpg"},"title":"Kam na prázdniny? Velký přehled ukazuje, co chtějí po Češích v oblíbených zemích","link":"//zpravy.aktualne.cz/zahranici/cestovani-po-evrope-jaka-plati-pravidla/r~4a883f26b31811eb9cafac1f6b220ee8/","source":"BbxCoronavirus"},{"guid":"6641f6b9","images":{"1_1":"//hpxs.xsd.cz/emg/548fcd7b.jpg"},"title":"Opatření přehledně: Od pondělí se otevřou zahrádky, části dětí končí rotační výuka","link":"//zpravy.aktualne.cz/domaci/platna-nova-opatreni-covid-koronavirus-skoly-restaurace-rous/r~efe8232e0d2711eba6f6ac1f6b220ee8/","source":"BbxCoronavirus"}]},"news":{"name":"news","imageCount":6,"imageSize":"4_3","utmMedium":"newsbox","showId":true,"meta":{"headline":{"text":"Zprávy","location":"https://aktualne.cz"},"more":{"text":"více zpráv","location":"https://aktualne.cz"}},"ad":{"mobile":{"pos":"2"}},"boxesConfig":[{"source":"Aktualne","count":6}],"boxesOverride":"OverrideNews","utmSource":"centrumHP","boxes":[{"guid":"cc0b38f2b0f011eb89ccac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/47b59631760e37ae9ff15a784aa21f9f_resize=128,96_.jpg?hash=950193401f8c72c5498bf3b414a2e08e"},"title":"Ořechovka: Tady žili umělci, prezidenti Havel i Klaus či nacistický zločinec Eichmann","link":"//zpravy.aktualne.cz/domaci/orechovka-tady-zili-umelci-prezidenti-havel-i-klaus/r~cc0b38f2b0f011eb89ccac1f6b220ee8/r~412938a0b17311ebaedf0cc47ab5f122/","source":"Aktualne","forcedPosition":6,"featuredType":"gallery"},{"guid":"c5cdaaacacc611eb9a61ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/7736a066f71631c1a7e208b8bc7a4b2e_extract=0,217,1742,1306_resize=128,96_.jpg?hash=a06e3f4c468fce18258d664e25da7cea"},"title":"Zázračné a krásné Trojanovice. Starosta mění valašskou vesnici po vzoru Švýcarska","link":"//magazin.aktualne.cz/bydleni/architektura/trojanovice-jako-priklad-novodobe-moravske-obce-valassko-se/r~c5cdaaacacc611eb9a61ac1f6b220ee8/r~0869af66acc511eb99faac1f6b220ee8/","source":"Aktualne","forcedPosition":7,"featuredType":"gallery"},{"guid":"dab1d2f0b48611eb8335ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/09a6d94260aa3e769cb4ca3872204fd8_resize=128,96_.jpg?hash=d8be88a6d05cb821d3440ca47f0ab89d"},"title":"Vakcínu v Česku dostaly 3 miliony lidí. O půlnoci se očkování otevře pro čtyřicátníky","link":"//zpravy.aktualne.cz/domaci/koronavirus-online/r~dab1d2f0b48611eb8335ac1f6b220ee8/","source":"Aktualne","forcedPosition":8,"featuredType":"online"},{"guid":"464a55f8b59711eb8335ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/0976efc2f6b33fb59067c700932f354b_extract=0,154,1441,1080_resize=128,96_.jpg?hash=b7353c0ff5e6796f6bda3f20cb2fba25"},"title":"Dara Rolins: Nehoda mě semlela. Z bulváru mi bývalo do breku, teď mě potřebuje","link":"//video.aktualne.cz/dvtv/dara-rolins-nehoda-me-semlela-z-bulvaru-mi-byvalo-do-breku-t/r~464a55f8b59711eb8335ac1f6b220ee8/","source":"Aktualne","forcedPosition":9,"featuredType":"video","duration":"27:46"},{"guid":"340ab520b58511ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/63beee553e1e3380bc98e160756243bc_resize=128,96_.jpg?hash=7104d085dc2f799f0ad6ad4bd7297f5c"},"title":"Sovětský racek létající nad Volhou. GAZ Čajka byl pro ty, kteří nedosáhli na ZiL","link":"//zpravy.aktualne.cz/ekonomika/auto/sovetsky-automobilovy-luxus-gaz-cajka/r~340ab520b58511ebbdfd0cc47ab5f122/","source":"Aktualne","forcedPosition":10,"featuredType":"gallery"},{"guid":"e6037c36b61511ebb234ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/f88fba786e273231aac54673727300b3_resize=128,96_.jpg?hash=2b0a2e98c227b1c6566bd5a3f83811e2"},"title":"Bytů k dlouhodobému nájmu bylo v Praze nejvíce za pět let. Cena nájemného klesla","link":"//zpravy.aktualne.cz/ekonomika/bytu-k-dlouhodobemu-najmu-bylo-v-praze-nejvice-za-pet-let-ce/r~e6037c36b61511ebb234ac1f6b220ee8/","source":"Aktualne","forcedPosition":11,"featuredType":"article"}]},"video":{"name":"video","utmMedium":"videobox","imageSize":"4_3","imageCount":6,"imageSkip":6,"showId":true,"meta":{"headline":{"text":"Video","location":"https://video.aktualne.cz"},"more":{"text":"více videí","location":"https://video.aktualne.cz"}},"ad":{"mobile":{"pos":"3"}},"boxesConfig":[{"source":"Video","count":6}],"boxesOverride":"OverrideVideo","utmSource":"centrumHP","boxes":[{"guid":"558bbb1ab4b611eb9a61ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/9c347727d0a8386a879bdf6bc35c23be_resize=128,96_.png?hash=7aed780c27a584a5a590c1ff27e56b73","16_9":"//cdn.xsd.cz/resize/9c347727d0a8386a879bdf6bc35c23be_extract=1,0,637,359_resize=220,124_.png?hash=c30c10c9b172eaace898d806a7b610e4","16_9L":"//cdn.xsd.cz/resize/9c347727d0a8386a879bdf6bc35c23be_extract=1,0,637,359_resize=560,315_.png?hash=961d63cf019405cabccfb3102d1d87ee"},"title":"Známá scéna ve Válce Roseových byla tak krutá, že ji po projekcích raději zmírnili","link":"//magazin.aktualne.cz/az-spadnes-nerozbij-dlazdicky-chysta-se-vlna-rozvodu-valka-r/r~558bbb1ab4b611eb9a61ac1f6b220ee8/","source":"Video","forcedPosition":0,"featuredType":"video","duration":"2:20","category":"Video"},{"guid":"582569deb48911ebaedf0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/a9996fb469693c78b9770978dd8ecb18_resize=128,96_.png?hash=c1f148c4747fb636bb9a576f456ccf58","16_9":"//cdn.xsd.cz/resize/a9996fb469693c78b9770978dd8ecb18_resize=220,124_.png?hash=12ff8c80fbe328cae26370240e4a7c97","16_9L":"//cdn.xsd.cz/resize/a9996fb469693c78b9770978dd8ecb18_resize=560,315_.png?hash=617b75163c6b8d3b139efd2ca1e96337"},"title":"Pozoruhodný příběh první elektrické tramvaje. Úctyhodný stroj v době vzniku propadl","link":"//magazin.aktualne.cz/tv-archtect-koterova-primatorska-tramvaj/r~582569deb48911ebaedf0cc47ab5f122/","source":"Video","forcedPosition":1,"featuredType":"video","duration":"4:03","category":"Video"},{"guid":"8a36d44ab56e11eb89ccac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/f6b3b7e8f19d3017b82000551b0de5c1_extract=0,440,1011,758_resize=128,96_.jpg?hash=095c4bfe29d647f6c7525ac684d24fb3","16_9":"//cdn.xsd.cz/resize/f6b3b7e8f19d3017b82000551b0de5c1_extract=0,307,1280,719_resize=220,124_.jpg?hash=da5ad103cd464af36452aed6b7a1d37d","16_9L":"//cdn.xsd.cz/resize/f6b3b7e8f19d3017b82000551b0de5c1_extract=0,307,1280,719_resize=560,315_.jpg?hash=d9819f1d53771de15d60ebd3e1637032"},"title":"„Haló, tady Izrael.“ Židovský stát varoval muže z Gazy, že mu za chvíli zničí věžák","link":"//zpravy.aktualne.cz/zahranici/halo-tady-izrael-zidovsky-stat-varoval-muze-z-gazy-ze-mu-za/r~8a36d44ab56e11eb89ccac1f6b220ee8/","source":"Video","forcedPosition":2,"featuredType":"video","duration":"2:27","category":"Video"},{"guid":"ced8b0fab4ba11eb99faac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=182,643,965,724_resize=128,96_.jpg?hash=ac54bfac54aaa88fb07f4277e18e932a","16_9":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=197,361,1252,704_resize=220,124_.jpg?hash=a31356efd763b8df3f2703958864317f","16_9L":"//cdn.xsd.cz/resize/54c8484ae1e23e1cad37e50e643df476_extract=197,361,1252,704_resize=560,315_.jpg?hash=17a824ca4ffd795d7e3d035bfa10b271"},"title":"Fila: Šokující začátek a nepopsatelný konec. \"Pitomý porno\" útočí na úplně všechny","link":"//magazin.aktualne.cz/fila-smolny-pich-aneb-pitomy-porno/r~ced8b0fab4ba11eb99faac1f6b220ee8/","source":"Video","forcedPosition":3,"featuredType":"video","duration":"3:47","category":"Video"},{"guid":"7aee61e6b3fd11ebb0fa0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=246,742,538,404_resize=128,96_.jpg?hash=d7344c9e3b1cf2aef44967483d1b337f","16_9":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=236,451,1062,596_resize=220,124_.jpg?hash=ace5f465d9d40235d1e7e7164d24126a","16_9L":"//cdn.xsd.cz/resize/099eb26c71ca3734a90766fa08f18e9f_extract=236,451,1062,596_resize=560,315_.jpg?hash=65ecd5e8e48abb50f49e153dd60ff300"},"title":"Česká reprezentantka zdolala sjezdovku jen v podprsence, reagovala i Vonnová","link":"//sport.aktualne.cz/ostatni-sporty/sjezdove-lyzovani/ceska-reprezentantka-zdolala-sjezdovku-jen-v-podprsence-reag/r~7aee61e6b3fd11ebb0fa0cc47ab5f122/","source":"Video","forcedPosition":4,"featuredType":"video","duration":"1:41","category":"Video"},{"guid":"62eb4554b3db11ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=128,96_.jpg?hash=21127422c432f7d9c387b44ffd96ad1e","16_9":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=220,124_.jpg?hash=a1962a2bc8358b07d83b0208c91e723c","16_9L":"//cdn.xsd.cz/resize/6e1e85489a5a3ca4a9797a6c593cae10_resize=560,315_.jpg?hash=0f5762451719179aa5e0967fe6a69629"},"title":"Pocta, ale i nepovedený vtip. Lidé reagují na biologa Flegra v kultovním seriálu","link":"//magazin.aktualne.cz/flegr-se-objevil-v-serialu-griffinovi-jako-chlapek-ktery-zna/r~62eb4554b3db11ebbdfd0cc47ab5f122/","source":"Video","forcedPosition":5,"featuredType":"video","duration":"0:35","category":"Video"}]},"woman":{"name":"woman","imageCount":6,"imageSize":"4_3","utmMedium":"stylebox","showId":true,"meta":{"headline":{"text":"Žena","location":"https://zena.aktualne.cz/"},"more":{"text":"více stylu","location":"https://zena.aktualne.cz/"}},"ad":{"mobile":{"pos":"4"}},"boxesConfig":[{"source":"Woman","count":6}],"boxesOverride":"OverrideWoman","utmSource":"centrumHP","boxes":[{"guid":"20315af2dbb211eaa7deac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/5e947dbf26e935e4b51138a0df5ae59f_resize=128,96_.jpg?hash=b0597098cd6252ea6ce61cc42ec2eb2f"},"title":"Nepřehnali to s tím trochu? Nejvtipnější spálení od slunce, která jste kdy viděli","link":"//zena.aktualne.cz/volny-cas/trapne-nebo-vtipne-jak-se-dokazi-spalit-celebrity-i-obycejni/r~20315af2dbb211eaa7deac1f6b220ee8/v~sl:709efacc7d1662ffb927af8fe096cf7e/","source":"OverrideWoman","forcedPosition":0,"featuredType":"multigallery"},{"guid":"a5e04df4ae5011eb99faac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/692734374dcf3828924da779235e5f9c_extract=0,239,1601,1200_resize=128,96_.jpg?hash=4140e417af52c5bdbeba89bd6094c1de"},"title":"Opakují jim dokola \"počkej chvilku\", ale čas s nimi nakonec netráví. Výčitky přichází","link":"//zena.aktualne.cz/matka-a-druhe-dite/r~a5e04df4ae5011eb99faac1f6b220ee8/","source":"Woman","featuredType":"article"},{"guid":"ca3450d6b3fc11eb9f15ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/ed2be014bc8d307d930af5338f2c2bbb_resize=128,96_.jpg?hash=93629b5124f1d53868f6966edb641e52"},"title":"Princ Harry jako figurka v Truman Show. Opustit královskou rodinu chtěl už ve dvaceti","link":"//zena.aktualne.cz/celebrity/princ-harry-chtel-opustit-kralovskou-rodinu-uz-jako-ve-dvace/r~ca3450d6b3fc11eb9f15ac1f6b220ee8/","source":"Woman","featuredType":"article"},{"guid":"6ac8189eb49211eb8e470cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/6231b76c34763b62b4dc693fb8430185_extract=23,0,1600,1201_resize=128,96_.jpg?hash=ca221c3849d094b844cd54b72d2388d0"},"title":"Vetchý rok před šedesátkou: Herectví mě vyčerpává. Pomáhá mi těžká manuální práce","link":"//zena.aktualne.cz/celebrity/ondrej-vetchy-ma-59/r~6ac8189eb49211eb8e470cc47ab5f122/v~sl:2f984725f96a57772c6fe3be13310188/","source":"Woman","featuredType":"multigallery"},{"guid":"6a516e1eb23111ebb9860cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/665ff6411a403545ba833d44e508bc62_resize=128,96_.jpg?hash=165fe232109bde179e13a3a0a86496f8"},"title":"BLOG Olgy Poriini: Jak být dobrým člověkem ","link":"//zena.aktualne.cz/blogy/blog-olgy-poriini-jak-byt-dobrym-clovekem/r~6a516e1eb23111ebb9860cc47ab5f122/","source":"Woman","featuredType":"article"},{"guid":"5d864eecb47b11ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/5c07f63f1fff323080546f950523fbea_extract=30,0,1600,1201_resize=128,96_.jpg?hash=61cdc7f8248e5956386c1f04d4a2c11b"},"title":"Nejí maso, nelétá letadlem a sprchuje se šest minut denně: Tomáš Klus slaví 35 let","link":"//zena.aktualne.cz/celebrity/tomas-klus/r~5d864eecb47b11ebb98b0cc47ab5f122/v~sl:48e959a7a040b408f0efcc25e3e8e3a8/","source":"Woman","featuredType":"multigallery"}]},"sport":{"name":"sport","imageCount":6,"imageSize":"4_3","utmMedium":"sportbox","showId":true,"meta":{"headline":{"text":"Sport","location":"https://sport.aktualne.cz"},"more":{"text":"více sportu","location":"https://sport.aktualne.cz"}},"ad":{"mobile":{"pos":"5"}},"boxesConfig":[{"source":"Sport","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"6c85e42eb62511ebaedf0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/f4560ebf24e73ae094c0c6df8fa94aae_extract=118,0,1080,811_resize=128,96_.jpg?hash=cb537dc062cc213a53dd7451eec7cf5f"},"title":"Salač v Le Mans vybojoval životní výsledek, v závodě Moto3 byl druhý","link":"//sport.aktualne.cz/motorismus/motocykly/vc-francie-2021/r~6c85e42eb62511ebaedf0cc47ab5f122/","source":"Sport","featuredType":"article"},{"guid":"cc828a96b60511ebb9860cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/77cf6b9dcfa63f4a9bbbe57c414442fb_extract=0,149,1742,1306_resize=128,96_.jpg?hash=dfe3d6bdd1be669fcde85aa955379a4d"},"title":"Ovečkin uzemnil Krejčího, Vaněček odstoupil. Washington zkraje play off zdolal Boston","link":"//sport.aktualne.cz/hokej/nhl/washington-zdolal-v-prvnim-zapase-play-off-nhl-boston-vanece/r~cc828a96b60511ebb9860cc47ab5f122/","source":"Sport","featuredType":"article"},{"guid":"fbc785deb62011eba22aac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/3f88e196e26d379d8606922397ec7912_extract=0,40,1809,1356_resize=128,96_.jpg?hash=c4d9a46c76fb1870e2a1dc20fef15741"},"title":"\"Jsi skutečný šampion, největší všech dob.\" Bryant byl posmrtně uveden do Síně slávy","link":"//sport.aktualne.cz/ostatni-sporty/basketbal/bryant-byl-posmrtne-uveden-do-basketbalove-sine-slavy/r~fbc785deb62011eba22aac1f6b220ee8/","source":"Sport","featuredType":"article"},{"guid":"c2429a90b62211ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/102475e4bc9b34a1b85cf1f247940e07_resize=128,96_.jpg?hash=bb064c66ad89c672bea4ba297059cee9"},"title":"105 bodů v 56 zápasech. McDavid už potřetí v kariéře získal Art Ross Trophy","link":"//sport.aktualne.cz/hokej/nhl/kanadsky-utocnik-mcdavid-ziskal-potreti-art-ross-trophy/r~c2429a90b62211ebb98b0cc47ab5f122/","source":"Sport","featuredType":"article"},{"guid":"928738b4b61911eb99faac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/bc2bd2ac7d2b3556a756e7a5c594931f_extract=0,34,1742,1306_resize=128,96_.jpg?hash=91a4d8d92d06376538389fea97c8c7ef"},"title":"Lakers se budou rvát o play off NBA do posledního kola. Jsme připraveni, hlásí James","link":"//sport.aktualne.cz/ostatni-sporty/basketbal/o-postupu-lakers-do-play-off-nba-se-rozhodne-az-v-poslednim/r~928738b4b61911eb99faac1f6b220ee8/","source":"Sport","featuredType":"article"},{"guid":"40559e4ab5c011ebb9860cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/8971e6053bd33825923aff599c64aeb6_resize=128,96_.jpg?hash=9e8bf1664e1999cdf55231f17043d9b8"},"title":"Další komplikace pro West Ham, v Brightonu vydřel jen remízu","link":"//sport.aktualne.cz/fotbal/zahranici/dalsi-komplikace-pro-west-ham-v-brightonu-vydrel-jen-remizu/r~40559e4ab5c011ebb9860cc47ab5f122/","source":"Sport","featuredType":"article"}]},"finance":{"name":"finance","imageCount":6,"imageSize":"4_3","utmMedium":"financebox","showId":true,"meta":{"headline":{"text":"Finance","location":"https://zpravy.aktualne.cz/finance"},"more":{"text":"více financí","location":"https://zpravy.aktualne.cz/finance"},"link":{"location":"https://zpravy.aktualne.cz/finance"}},"ad":{"mobile":{"pos":"6"}},"boxesOverride":"OverrideFinance","boxesConfig":[{"source":"Finance","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"3686cf84b48411ebbdfd0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/3acfe7736c433612925a49947ba9de2a_resize=128,96_.jpg?hash=bc3150e797053054c4763bcca936824d"},"title":"Přehledně: Proč malé zásilky z čínských e-shopů zdraží a co bude nutné nově vyřídit","link":"//zpravy.aktualne.cz/finance/nakupovani/zasilky-z-ciny/r~3686cf84b48411ebbdfd0cc47ab5f122/","source":"Finance","featuredType":"graphicscoda"},{"guid":"c4f955e4b25d11eb8e470cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/7d302cbf38073fafbb960e67d68d8b6f_extract=689,0,828,622_resize=128,96_.png?hash=f5cf570108b9b20458bc6efbfd972033"},"title":"Web Ikey trápila technická chyba. O hackerský útok nešlo, tlumí strach o data mluvčí","link":"//zpravy.aktualne.cz/finance/nakupovani/ikea/r~c4f955e4b25d11eb8e470cc47ab5f122/","source":"Finance","featuredType":"article"},{"guid":"e135811cb25b11ebb98b0cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/e052bbcb15363b30b26001d6bb1d512c_resize=128,96_.jpg?hash=b37dca353350d06c5db670fb673387bd"},"title":"Aplikace prodejních řetězců kralují Česku. Dlouho vedoucí Lidl nyní střídá Můj Albert","link":"//zpravy.aktualne.cz/finance/nakupovani/aplikace-albertu-vevodi-zebricku-na-google-play/r~e135811cb25b11ebb98b0cc47ab5f122/","source":"Finance","featuredType":"article"},{"guid":"f71fb74eb23e11eb9cafac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/3c567d5567dc33ec9dd6e30a1871cff2_resize=128,96_.jpg?hash=e70de75cc77bbcb66631a5534fe8e577"},"title":"Svaz: Návštěvnost prodejen byla asi o 25 procent nad průměrem běžného pondělí","link":"//zpravy.aktualne.cz/ekonomika/svaz-navstevnost-prodejen-byla-asi-o-25-procent-nad-prumerem/r~f71fb74eb23e11eb9cafac1f6b220ee8/","source":"Finance","featuredType":"article"},{"guid":"821007d2b15e11eb9f15ac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/6adac465e4e03f39aab5fd7516d79232_resize=128,96_.jpg?hash=983613e3a2234c82b996604c051ece93"},"title":"Británii opouští stále více firem. Papírování nutí české obchody nakupovat v Irsku","link":"//zpravy.aktualne.cz/finance/nakupovani/britske-firmy-brexit/r~821007d2b15e11eb9f15ac1f6b220ee8/","source":"Finance","featuredType":"article"},{"guid":"e5686906b18a11eba22aac1f6b220ee8","images":{"4_3":"//cdn.xsd.cz/resize/d225c5cb7c273b6aab0b3cbec779cd7d_resize=128,96_.jpg?hash=f0e3fc24425b9f8f56b7cbab1b1ea820"},"title":"Otevřené obchody přilákaly po měsících davy. Někde se dokonce tvořily dlouhé fronty","link":"//zpravy.aktualne.cz/finance/nakupovani/kadernik-oprava-hodinek-a-nove-boty-cechum-se-po-mesicich-ot/r~e5686906b18a11eba22aac1f6b220ee8/","source":"Finance","featuredType":"article"}]},"regional":{"name":"regional","imageCount":6,"imageSize":"4_3","utmMedium":"regionalbox","showId":true,"meta":{"headline":{"text":"Regiony","location":"https://www.drbna.cz"}},"boxesConfig":[{"source":"Regional","count":6}],"utmSource":"centrumHP","boxes":[{"guid":"294fcdca","images":{"4_3":"//hpxs.xsd.cz/emg/1d163120.jpg"},"title":"Nejúspěšnějším turistickým cílem loňského roku v Karlovarském kraji byl park miniatur","link":"//karlovarska.drbna.cz/zpravy/4009-nejuspesnejsim-turistickym-cilem-lonskeho-roku-v-karlovarskem-kraji-byl-park-miniatur.html","source":"Regional"},{"guid":"7b5f3295","images":{"4_3":"//hpxs.xsd.cz/emg/68367216.jpg"},"title":"Při ranním požáru v Hostivaři hasiči zachránili 11 lidí. Jeden člověk skončil v péči záchranářů","link":"//prazska.drbna.cz/z-kraje/5784-pri-rannim-pozaru-v-hostivari-hasici-zachranili-11-lidi-jeden-clovek-skoncil-v-peci-zachranaru.html","source":"Regional"},{"guid":"75a32c50","images":{"4_3":"//hpxs.xsd.cz/emg/57b27321.jpg"},"title":"Záchytka v Plzeňském kraji funguje téměř 70 let, nocleh je tu nejdražší v republice","link":"//plzenska.drbna.cz/zpravy/5837-zachytka-v-plzenskem-kraji-funguje-temer-70-let-nocleh-je-tu-nejdrazsi-v-zemi.html","source":"Regional"},{"guid":"70ad63f","images":{"4_3":"//hpxs.xsd.cz/emg/c2cad0f.png"},"title":"Zkušený tramp se opozdil za svou skupinou, pátrali po něm horští záchranáři i policie","link":"//karlovarska.drbna.cz/zpravy/4013-ztraceny-tremp-odstartoval-velke-nocni-patrani-v-krusnych-horach.html","source":"Regional"},{"guid":"58d6d9a7","images":{"4_3":"//hpxs.xsd.cz/emg/31349d20.jpg"},"title":"Důchodce toužil vydělat na kryptoměnách, přišel o půl milionu","link":"//brnenska.drbna.cz/krimi/21032-duchodce-touzil-vydelat-na-kryptomenach-prisel-o-pul-milionu.html","source":"Regional"},{"guid":"67abd079","images":{"4_3":"//hpxs.xsd.cz/emg/74bd218d.jpg"},"title":"S dalším rozvolňováním v Hradci Králové přicházejí změny v MHD, školství i testování","link":"//hradecka.drbna.cz/zpravy/9847-s-dalsim-rozvolnovanim-v-hradci-kralove-prichazeji-zmeny-v-mhd-skolstvi-i-testovani.html","source":"Regional"}]},"celebrities":{"name":"celebrities","imageCount":6,"imageSize":"4_3","utmMedium":"celebrities","showId":true,"meta":{"headline":{"text":"Celebrity","location":"https://sip.denik.cz/"},"more":{"text":"více celebrit","location":"https://sip.denik.cz/"}},"boxesConfig":[{"source":"Celebrities","count":6}],"enhancedEcommerce":true,"isNew":true,"sendGaCategory":true,"utmSource":"centrumHP","boxes":[{"guid":"14ee404","images":{"4_3":"//hpxs.xsd.cz/emg/7a54b385.jpg"},"title":"Monika Absolonová: Horna ji po rozchodu šokoval, je ráda, že se nevzali!","link":"//sip.denik.cz/celebrity/monika-absolonova-rozchod-tomas-horna.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"3f5c192d","images":{"4_3":"//hpxs.xsd.cz/emg/57a5788f.jpg"},"title":"Ivana Gottová: Velká změna! Ukáže někdy nového přítele veřejnosti?","link":"//sip.denik.cz/celebrity/ivana-gottova-dnes-novy-pritel.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"73cc19ff","images":{"4_3":"//hpxs.xsd.cz/emg/3709201d.jpg"},"title":"Karel Šíp Všechnopárty natáčet nebude: Oblíbený pořad se dočkal velké změny","link":"//sip.denik.cz/celebrity/karel-sip-vsechnoparty-nove-dily.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"20c8e844","images":{"4_3":"//hpxs.xsd.cz/emg/352603b2.jpg"},"title":"Příběh Hedviky Kollerové: Proč nakonec opustila legendárního fotbalistu?","link":"//sip.denik.cz/celebrity/hedvika-kollerova-skandaly.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"56de434","images":{"4_3":"//hpxs.xsd.cz/emg/7049c74d.jpg"},"title":"Otec Lucinky nemohl Matuše vystát! Začátky vztahu novomanželů byly bouřlivé","link":"//sip.denik.cz/celebrity/bohus-matus-lucinka-svatba-vztah-otec.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"},{"guid":"c79e81f","images":{"4_3":"//hpxs.xsd.cz/emg/1aa87431.jpg"},"title":"Jiřina Bohdalová o Gottovi: \"Jeho maminka chtěla, aby si měl vzal!\"","link":"//sip.denik.cz/celebrity/jirina-bohdalova-karel-gott.html?utm_source=economia&utm_medium=newsfeed","source":"Celebrities"}]},"email":{"name":"email","utmMedium":"mailbox","showId":true,"meta":{"headline":{"text":"E-mail"},"logout":{"text":"Odhlásit","location":"https://user.centrum.cz/logout.php?url=https%3a%2f%2fwww.centrum.cz"},"inbox":{"text":"Přejít do e-mailové schránky","location":"https://mail.centrum.cz"},"registration":{"text":"Založit nový email","location":"https://reg.centrum.cz"},"form":{"action":"https://user.centrum.cz"}},"utmSource":"centrumHP"},"promolink":{"name":"promolink","utmMedium":"tip","boxesConfig":[{"source":"PromoLink"}],"utmSource":"centrumHP","boxes":[]},"promovideo":{"name":"promovideo","utmMedium":"videopodmailwidget","meta":{"playerOptions":{"site":"hp","area":"centrum"}},"boxesConfig":[{"source":"BbxVideoEmbeddableCentrum","count":1}],"utmSource":"centrumHP","boxes":[{"guid":"64bdf6cf","images":{},"title":"Sběratel vlastní prezidentskou limuzínu. Investujte do aut i s málo penězi, radí","link":"//video.aktualne.cz/embed_iframe/investice-jako-konicek/sberatel-vlastni-prezidentskou-limuzinu-chytre-investovat-lz/r~bf2d2ab21b3011e9be8b0cc47ab5f122/","source":"BbxVideoEmbeddableCentrum"}]},"dailydiscounts":{"name":"dailydiscounts","utmMedium":"slevybox","imageSize":"4_3","imageCount":6,"showId":true,"meta":{"headline":{"location":"http://amplion.centrum.cz/","text":"Slevy dne"}},"boxesConfig":[{"source":"DailyDiscountsTravel","count":2},{"source":"DailyDiscountsElectronics","count":2},{"source":"DailyDiscountsBeauty","count":2}],"utmSource":"centrumHP","boxes":[{"guid":"74752293","images":{"4_3":"//hpxs.xsd.cz/emg/6ec649bc.jpg"},"title":"Krušné hory, 4* hotel s wellness pro 2","link":"//amplion.centrum.cz/detail/krusne-hory-pro-rodiny-4-pytloun-wellness-hotel-hasistejn-74752293?utm_content=deal-1-74752293&utm_term=211","source":"DailyDiscountsTravel","discount":43,"price":"5 640","section":"Pobyty"},{"guid":"6287_20","images":{"4_3":"//hpxs.xsd.cz/emg/7d12b0be.jpg"},"title":"Romantické wellness pobyty","link":"//amplion.centrum.cz/tag/lazne-a-wellness?utm_content=deal-2-6287_20&utm_term=211","source":"DailyDiscountsTravel","discount":60,"price":"3 650","section":"Pobyty"},{"guid":"74753379","images":{"4_3":"//hpxs.xsd.cz/emg/6240aa79.jpg"},"title":"Stolní lampa, 3 stupně intenzity svícení","link":"//amplion.centrum.cz/detail/trio-mats-599600115-74753379?utm_content=deal-1-74753379&utm_term=211","source":"DailyDiscountsElectronics","discount":35,"price":"568","section":"Elektro"},{"guid":"74753383","images":{"4_3":"//hpxs.xsd.cz/emg/6b9a6ddc.jpg"},"title":"Noční lampa Thebes","link":"//amplion.centrum.cz/detail/trio-thebes-r50641079-74753383?utm_content=deal-2-74753383&utm_term=211","source":"DailyDiscountsElectronics","discount":35,"price":"637","section":"Elektro"},{"guid":"3627_67","images":{"4_3":"//hpxs.xsd.cz/emg/234ef439.jpg"},"title":"Parfémy a kosmetika za skvělé ceny","link":"//amplion.centrum.cz/tag/profesionalni-kosmetika?utm_content=deal-1-3627_67&utm_term=211","source":"DailyDiscountsBeauty","discount":72,"price":"59","section":"Krása"},{"guid":"74743154","images":{"4_3":"//hpxs.xsd.cz/emg/2e760e69.jpg"},"title":"Řasenka 4D","link":"//amplion.centrum.cz/detail/rasenka-4d-a-postovne-zdarma-74743154?utm_content=deal-2-74743154&utm_term=211","source":"DailyDiscountsBeauty","discount":74,"price":"129","section":"Krása"}]},"leaflets":{"name":"leaflets","utmMedium":"letakybox","imageSize":"5_7","imageCount":15,"isNew":true,"meta":{"headline":{"location":"https://letaky.promotheus.cz/","text":"Slevové letáky"}},"boxesConfig":[{"source":"Leaflets","count":15}],"utmSource":"centrumHP","boxes":[{"guid":"3d4e595b-7985-438b-bb9e-bd9c4c11f47a","images":{"5_7":"//hpxs.xsd.cz/emg/17e99101.jpg"},"title":"Lidl - Vůně asijské kuchyně","link":"//letaky.promotheus.cz/store/85","source":"Leaflets"},{"guid":"f2e18f19-fbfe-450a-9aa1-cdacd032407c","images":{"5_7":"//hpxs.xsd.cz/emg/21654918.jpg"},"title":"Globus - Jaro plné zábavy","link":"//letaky.promotheus.cz/store/61","source":"Leaflets"},{"guid":"e68820c5-a8d6-45c9-ba4d-004e00d02b03","images":{"5_7":"//hpxs.xsd.cz/emg/72aa7fb2.jpg"},"title":"Albert Hypermarket - Zkuste naše hity na gril","link":"//letaky.promotheus.cz/store/3","source":"Leaflets"},{"guid":"a2a6ac57-1862-4876-8ca9-339777a0f123","images":{"5_7":"//hpxs.xsd.cz/emg/58f0755e.jpg"},"title":"TESCO - Extra porce grilování","link":"//letaky.promotheus.cz/store/140","source":"Leaflets"},{"guid":"6e5c53a6-0099-4b48-b4a6-81641995bc4c","images":{"5_7":"//hpxs.xsd.cz/emg/31d67514.jpg"},"title":"BILLA - Velký leták","link":"//letaky.promotheus.cz/store/17","source":"Leaflets"},{"guid":"ae827824-eba2-4bef-8cd1-b20528cf79d7","images":{"5_7":"//hpxs.xsd.cz/emg/26cb1be.jpg"},"title":"Kaufland","link":"//letaky.promotheus.cz/store/75","source":"Leaflets"},{"guid":"776e3767-3467-4fda-8159-b9dffac0763e","images":{"5_7":"//hpxs.xsd.cz/emg/436a96f3.jpg"},"title":"PEPCO","link":"//letaky.promotheus.cz/store/113","source":"Leaflets"},{"guid":"710c9e2f-5342-4c70-a298-4e106e36de2f","images":{"5_7":"//hpxs.xsd.cz/emg/162e95c3.jpg"},"title":"PENNY MARKET","link":"//letaky.promotheus.cz/store/112","source":"Leaflets"},{"guid":"dd130f3a-273d-4703-a84e-ba7a8ccd1f11","images":{"5_7":"//hpxs.xsd.cz/emg/3153bd96.jpg"},"title":"dm drogerie - Journal","link":"//letaky.promotheus.cz/store/35","source":"Leaflets"},{"guid":"84dcd0d3-b99a-4b80-9e6f-e80976b2da44","images":{"5_7":"//hpxs.xsd.cz/emg/f841867.jpg"},"title":"Lidl - XXL týden","link":"//letaky.promotheus.cz/store/85","source":"Leaflets"},{"guid":"aa46dbe3-ee75-4254-9bc9-fec4025be1d3","images":{"5_7":"//hpxs.xsd.cz/emg/16243e19.jpg"},"title":"Globus - Zdravý svět - Ušetřete za bezlepkové potraviny s kartou Globus Bonus","link":"//letaky.promotheus.cz/store/61","source":"Leaflets"},{"guid":"5e460c4e-9e2f-404b-8798-b99df7cf71e7","images":{"5_7":"//hpxs.xsd.cz/emg/2116a26.jpg"},"title":"Albert Supermarket - Zkuste naše hity na gril","link":"//letaky.promotheus.cz/store/3","source":"Leaflets"},{"guid":"a78d1882-7ef8-4941-abf0-5919c0b802de","images":{"5_7":"//hpxs.xsd.cz/emg/52675dc6.jpg"},"title":"TESCO supermarket - Extra porce grilování","link":"//letaky.promotheus.cz/store/140","source":"Leaflets"},{"guid":"7e142a24-9f3d-4882-88dc-3695eda56ef3","images":{"5_7":"//hpxs.xsd.cz/emg/24a85b8b.jpg"},"title":"BILLA - Malý leták","link":"//letaky.promotheus.cz/store/17","source":"Leaflets"},{"guid":"80fa8309-a2e7-41fc-b344-068cd6b27ae1","images":{"5_7":"//hpxs.xsd.cz/emg/160d257a.jpg"},"title":"Kaufland","link":"//letaky.promotheus.cz/store/75","source":"Leaflets"}]},"exchange":{"name":"exchange","meta":{"headline":{"text":"Kurzy"}},"boxesConfig":[{"source":"Exchange","count":3}],"utmSource":"centrumHP","boxes":[{"guid":"EUR","images":{},"source":"Exchange","exchangeRate":25.49},{"guid":"GBP","images":{},"source":"Exchange","exchangeRate":29.61},{"guid":"USD","images":{},"source":"Exchange","exchangeRate":21.02}]},"housing":{"name":"housing","utmMedium":"bydlenibox","imageCount":4,"imageSize":"4_3","meta":{"headline":{"text":"Bydlení","location":"https://realitymix.cz/"},"more":{"text":"více bydlení","location":"https://realitymix.cz/"}},"boxesConfig":[{"source":"Housing","count":4}],"utmSource":"centrumHP","boxes":[{"guid":"7601685","images":{"4_3":"//hpxs.xsd.cz/emg/14012b67.jpg"},"title":"Pronájem bytu","link":"//realitymix.cz/detail/pardubice/pronajem-bytu-3-1-s-vlastnim-sklepem-7601685.html","source":"Housing","annotation":"Pardubice, Zelené Předměstí, Jilemnického","price":"11 000 Kč / za měsíc"},{"guid":"7601891","images":{"4_3":"//hpxs.xsd.cz/emg/6c112b5f.jpg"},"title":"Prodej - dům/vila","link":"//realitymix.cz/detail/mlady-smolivec/rodinny-dum-chalupa-dozice-okr-plzen-jih-7601891.html","source":"Housing","annotation":"Mladý Smolivec, Dožice","price":"3 490 000 Kč"},{"guid":"7562483","images":{"4_3":"//hpxs.xsd.cz/emg/3c9c9cf0.jpg"},"title":"Pronájem bytu","link":"//realitymix.cz/detail/ceske-budejovice/pronajem-bytu-3-1-51-m2-husova-tr-7562483.html","source":"Housing","annotation":"České Budějovice, Husova tř.","price":"10 500 Kč / za měsíc"},{"guid":"7513189","images":{"4_3":"//hpxs.xsd.cz/emg/236a103a.jpg"},"title":"Prodej - dům/vila","link":"//realitymix.cz/detail/prichovice/prodej-rodinneho-domu-190-m-prichovice-7513189.html","source":"Housing","annotation":"Příchovice","price":"6 480 000 Kč"}]},"games":{"name":"gamesbox","utmMedium":"gamesbox","imageSize":"4_3","imageCount":2,"meta":{"headline":{"text":"Hry","location":"http://gamescafe.centrum.cz/"}},"boxesConfig":[{"source":"Games","count":2}],"utmSource":"centrumHP","boxes":[{"guid":"games_conflict_of_nations","images":{"4_3":"images/games/conflict_of_nations.jpg"},"title":"Conflict of Nations: Ovládni svět!","link":"http://gamescafe.centrum.cz/strategie/2018/8/8/hry/conflict-nations/","source":"Games"},{"guid":"games_forge_of_empires","images":{"4_3":"images/games/forge_of_empires.png"},"title":"Forge of Empires: Vybuduj mocné impérium!","link":"http://gamescafe.centrum.cz/strategie/2018/7/9/hry/forge-empires/","source":"Games"}]},"horoscopes":{"name":"horoscopes","utmMedium":"horoskopybox","meta":{"headline":{"text":"Můj horoskop","location":"https://zena.aktualne.cz/horoskopy/"},"detailLinkPattern":"https://zena.aktualne.cz/horoskopy/{sign}"},"boxesConfig":[{"source":"Horoscopes","count":1}],"utmSource":"centrumHP","boxes":[{"guid":"beran","images":{},"title":"Pocítíte vztek a neovladatelnou chuť něco rozbít. Až tak vás dnes někdo vytočí. Počítejte do deseti a zkuste se na konflikt podívat cizíma očima.","source":"Horoscopes"}]},"services":{"name":"services","utmMedium":"menu","meta":{"headline":{"text":"Služby"},"admon":{"area":"centrum","fcid":257},"metrics":{"admonId":"196_C95_226_1_257","impressionId":"196_C95_226_1_257f221"}},"utmSource":"centrumHP"},"jobs":{"name":"jobs","utmMedium":"pracebox","meta":{"headline":{"text":"Práce a kurzy","location":"http://prace.centrum.cz/"},"admon":{"area":"centrum","fcid":18372},"metrics":{"admonId":"196_C95_758_1_18372","impressionId":"196_C95_758_1_18372f13018"}},"boxesConfig":[{"source":"Jobs"},{"source":"Courses"}],"utmSource":"centrumHP","boxes":[{"guid":"ca289e9fa518026bdec1dfb5bf16a60df670a1eb","images":{},"title":"Montážní technik venkovních posilovacích parků.","link":"//www.prace.cz/pd/1553063319/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"e13fe52099a7e5c6f250d8969347f553785785c5","images":{},"title":"Nejlepší brigáda pro studenty/ky? McDonald's Most Centrál","link":"//www.prace.cz/pd/1560978240/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"878d9914e576d866bb67ea1912c134075ee38be8","images":{},"title":"Projektant elektro - FVE (ž/m)","link":"//www.prace.cz/pd/1560978274/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"23245dd2cc46624fae8cdabd5c7e2b730d50c2ef","images":{},"title":"PROSTĚJOV - směnárník/směnárnice - pokladní/k","link":"//www.prace.cz/pd/1559791565/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"47d8f20fc73d408a8c803dabe36f26f8490bb56b","images":{},"title":"Chůva do dětské skupiny","link":"//www.prace.cz/pd/1560978013/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"d8a27d5f127f1dbbafaa7b89abd0d7a58710d02a","images":{},"title":"Přidej se k nám za 23.000,- měsíčně","link":"//www.prace.cz/pd/1559050167/?rps=236","source":"Jobs","section":"Práce","region":"r:lmc:jobs:czech:republic"},{"guid":"fefb8ab6b62f11eb9eb10cc47ab5f122","images":{},"title":"Trénink vyjednávání prakticky I.","link":"//www.seduo.cz/trenink-vyjednavani-prakticky-i","source":"Courses","section":"Kurzy"},{"guid":"fefbad3eb62f11eb9eb10cc47ab5f122","images":{},"title":"Obsahová strategie IV: Strategie prakticky","link":"//www.seduo.cz/obsahova-strategie-iv-strategie-prakticky","source":"Courses","section":"Kurzy"},{"guid":"fefbcb34b62f11eb9eb10cc47ab5f122","images":{},"title":"Gmail - buďte pánem své pošty","link":"//www.seduo.cz/gmail-budte-panem-sve-posty","source":"Courses","section":"Kurzy"},{"guid":"fefbe858b62f11eb9eb10cc47ab5f122","images":{},"title":"Excel pro začátečníky","link":"//www.seduo.cz/excel-pro-zacatecniky","source":"Courses","section":"Kurzy"},{"guid":"fefc02d4b62f11eb9eb10cc47ab5f122","images":{},"title":"Úvod do kritického myšlení","link":"//www.seduo.cz/uvod-do-kritickeho-mysleni","source":"Courses","section":"Kurzy"},{"guid":"fefc1ce2b62f11eb9eb10cc47ab5f122","images":{},"title":"Jak se efektivně učit online","link":"//www.seduo.cz/jak-se-efektivne-ucit-online","source":"Courses","section":"Kurzy"}]},"footerlinks":{"name":"footerlinks","utmMedium":"footer","boxesConfig":[],"utmSource":"centrumHP","boxes":[]},"footerbrand":{"name":"footerbrand","utmMedium":"footer","boxesConfig":[],"meta":{"logo":{"text":"Centrum.cz","location":".","src":"images/logo/centrum.png"},"linkBrand":[{"text":"Facebook Centrum.cz","location":"https://www.facebook.com/multimail/"},{"text":"Nastavit jako domovskou stránku","location":"/nastavte-si-domovskou-stranku/"},{"text":"Napište nám","location":"http://ankety.centrum.cz/s3/napiste-nam/"}]},"utmSource":"centrumHP","boxes":[]},"footersectionnews":{"name":"footersectionnews","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionNews"}],"utmSource":"centrumHP","boxes":[{"guid":"b5dd0a2889e411e385ea002590604f2e","images":{},"title":"Zpravodajství","link":"//www.aktualne.cz/","source":"FooterSectionNews","forcedPosition":0,"featuredType":"link"},{"guid":"40413a4089e511e3a138002590604f2e","images":{},"title":"Zprávy","link":"http://ihned.cz","source":"FooterSectionNews","forcedPosition":1,"featuredType":"link"},{"guid":"507b9ac289e511e3b25d002590604f2e","images":{},"title":"Sport ","link":"//sport.aktualne.cz/","source":"FooterSectionNews","forcedPosition":2,"featuredType":"link"},{"guid":"639eeb3689e511e39b43002590604f2e","images":{},"title":"Videa","link":"//video.aktualne.cz/","source":"FooterSectionNews","forcedPosition":3,"featuredType":"link"},{"guid":"727c258889e511e3b1d7002590604f2e","images":{},"title":"Ekonomika","link":"//zpravy.aktualne.cz/ekonomika/","source":"FooterSectionNews","forcedPosition":4,"featuredType":"link"},{"guid":"9be8ebae89e511e3ad9a0025900fea04","images":{},"title":"Auto","link":"//zpravy.aktualne.cz/ekonomika/auto/","source":"FooterSectionNews","forcedPosition":5,"featuredType":"link"},{"guid":"94375bc6cbe211e48da50025900fea04","images":{},"title":"Wiki","link":"//www.aktualne.cz/wiki/","source":"FooterSectionNews","forcedPosition":6,"featuredType":"link"}]},"footersectionmagazines":{"name":"footersectionmagazines","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionMagazines"}],"utmSource":"centrumHP","boxes":[{"guid":"a3f4bc8e89e411e385ea002590604f2e","images":{},"title":"Magazíny","link":"//magazin.aktualne.cz/","source":"FooterSectionMagazines","forcedPosition":0,"featuredType":"link"},{"guid":"d11c1d6e89e511e39bd20025900fea04","images":{},"title":"Žena","link":"//www.zena.cz/","source":"FooterSectionMagazines","forcedPosition":1,"featuredType":"link"},{"guid":"d7e08f66cbe511e4994f002590604f2e","images":{},"title":"Kultura","link":"//magazin.aktualne.cz/kultura/","source":"FooterSectionMagazines","forcedPosition":2,"featuredType":"link"},{"guid":"e100363e89e511e388c60025900fea04","images":{},"title":"Zdraví","link":"//www.zena.cz/zdravi/","source":"FooterSectionMagazines","forcedPosition":3,"featuredType":"link"},{"guid":"0b2e08d289e611e385ea002590604f2e","images":{},"title":"Rodina","link":"//www.zena.cz/rodina/","source":"FooterSectionMagazines","forcedPosition":4,"featuredType":"link"},{"guid":"74e8e02ecbe611e4bc74002590604f2e","images":{},"title":"Celebrity","link":"//magazin.aktualne.cz/celebrity/","source":"FooterSectionMagazines","forcedPosition":5,"featuredType":"link"},{"guid":"fdc7720089e511e3a5c4002590604f2e","images":{},"title":"Obrazem","link":"//magazin.aktualne.cz/obrazem/","source":"FooterSectionMagazines","forcedPosition":6,"featuredType":"link"}]},"footersectionservices":{"name":"footersectionservices","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionServices"}],"utmSource":"centrumHP","boxes":[{"guid":"cf75ea0e89e411e3ad9a0025900fea04","images":{},"title":"Praktické služby","link":"http://najisto.centrum.cz/","source":"FooterSectionServices","forcedPosition":0,"featuredType":"link"},{"guid":"aea1eeac89e611e3aee20025900fea04","images":{},"title":"Televizní program","link":"http://tvprogram.centrum.cz/","source":"FooterSectionServices","forcedPosition":1,"featuredType":"link"},{"guid":"bc35d83089e611e3a5c4002590604f2e","images":{},"title":"Počasí ","link":"http://pocasi.centrum.cz","source":"FooterSectionServices","forcedPosition":2,"featuredType":"link"},{"guid":"99592fce89e611e3a5c4002590604f2e","images":{},"title":"Horoskopy","link":"http://astrocafe.centrum.cz/horoskopy/horoskop-na-dnesni-den/","source":"FooterSectionServices","forcedPosition":3,"featuredType":"link"},{"guid":"bb307772cbeb11e485d7002590604f2e","images":{},"title":"Svátky","link":"http://svatky.centrum.cz/jmenny-seznam/psijmena/","source":"FooterSectionServices","forcedPosition":4,"featuredType":"link"},{"guid":"c900ee2ccbeb11e4994f002590604f2e","images":{},"title":"Slovníky","link":"http://slovniky.centrum.cz/","source":"FooterSectionServices","forcedPosition":5,"featuredType":"link"},{"guid":"e35e3c2acbeb11e4875c002590604f2e","images":{},"title":"Zákony","link":"http://zakony.centrum.cz","source":"FooterSectionServices","forcedPosition":6,"featuredType":"link"}]},"footersectioncatalogues":{"name":"footersectioncatalogues","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionCatalogues"}],"utmSource":"centrumHP","boxes":[{"guid":"df332ace89e411e3ad9a0025900fea04","images":{},"title":"Inzerce a katalogy","link":"http://najisto.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":0,"featuredType":"link"},{"guid":"f20163b8cbed11e4ad630025900fea04","images":{},"title":"Firmy","link":"http://bazar.najisto.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":1,"featuredType":"link"},{"guid":"fe5e83accbed11e496f2002590604f2e","images":{},"title":"Autobazary","link":"http://www.cars.cz/","source":"FooterSectionCatalogues","forcedPosition":2,"featuredType":"link"},{"guid":"08ab4a0ccbee11e488b0002590604f2e","images":{},"title":"Reality","link":"http://realitymix.centrum.cz/vyhledavani/pozemky.html","source":"FooterSectionCatalogues","forcedPosition":3,"featuredType":"link"},{"guid":"29ff96aecbee11e497be0025900fea04","images":{},"title":"Dovolená","link":"http://dovolena.centrum.cz/","source":"FooterSectionCatalogues","forcedPosition":4,"featuredType":"link"},{"guid":"i:atlassecondary:jobs","images":{},"title":"Práce","link":"http://prace.centrum.cz","source":"FooterSectionCatalogues","forcedPosition":5,"featuredType":"link"},{"guid":"3f61d2d2cbee11e496f2002590604f2e","images":{},"title":"Recepty ","link":"http://www.vareni.cz/","source":"FooterSectionCatalogues","forcedPosition":6,"featuredType":"link"}]},"footersectioncommunication":{"name":"footersectioncommunication","utmMedium":"footer","boxesConfig":[{"source":"FooterSectionCommunication"}],"utmSource":"centrumHP","boxes":[{"guid":"71786c94cbef11e49e4e002590604f2e","images":{},"title":"Komunikace ","link":"//magazin.aktualne.cz/","source":"FooterSectionCommunication","forcedPosition":0,"featuredType":"link"},{"guid":"7cea075ecbef11e494a20025900fea04","images":{},"title":"E-mail","link":"http://mail.centrum.cz/info/centrum-mail/","source":"FooterSectionCommunication","forcedPosition":1,"featuredType":"link"},{"guid":"87a4821ecbef11e497be0025900fea04","images":{},"title":"Chat","link":"http://xchat.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":2,"featuredType":"link"},{"guid":"a3799038cbef11e496f2002590604f2e","images":{},"title":"Zábava","link":"//magazin.aktualne.cz/kuriozity/","source":"FooterSectionCommunication","forcedPosition":3,"featuredType":"link"},{"guid":"afdad99acbef11e48da50025900fea04","images":{},"title":"Hry ","link":"http://gamescafe.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":4,"featuredType":"link"},{"guid":"bc146e74cbef11e4a66e0025900fea04","images":{},"title":"Svátky","link":"http://svatky.centrum.cz/jmenny-seznam/","source":"FooterSectionCommunication","forcedPosition":5,"featuredType":"link"},{"guid":"c7f8e45ecbef11e4890a0025900fea04","images":{},"title":"Fotoalba","link":"http://fotoalba.centrum.cz/","source":"FooterSectionCommunication","forcedPosition":6,"featuredType":"link"}]},"weather":{"name":"weather","utmMedium":"pocasibox","meta":{"container":{"id":""}},"loader":{"desktop":"https://pocasi-moravio.centrum.cz/public/tiny_forecast.bundle.js"},"utmSource":"centrumHP"},"bottomscripts":{"name":"bottomscripts","sources":["https://pocasi-moravio.centrum.cz/public/widget_loader.bundle.js","https://pocasi-moravio.centrum.cz/public/share_data_storage.bundle.js","https://pocasi-moravio.centrum.cz/public/user_data_storage.bundle.js","https://pocasi-moravio.centrum.cz/public/tiny_actual.bundle.js"],"utmSource":"centrumHP"},"leaderboard":{"name":"leaderboard","group":"priority","meta":{"targetId":"reklama-leader","size":["leader","79a","91a","11a","21a"]},"utmSource":"centrumHP"},"strip":{"name":"strip","meta":{"targetId":"reklama-strip","size":["strip"]},"utmSource":"centrumHP"},"rightbanner":{"name":"rightbanner","meta":{"targetId":"reklama-mediumrectangle","pos":2,"size":["mediumrectangle","sq3","mpu"]},"utmSource":"centrumHP"},"halfpage":{"name":"halfpage","meta":{"wrapper":{"className":"pravy-banner"},"targetId":"reklama-halfpage","pos":3,"size":["halfpage","mediumrectangle","sq3","widesky"]},"utmSource":"centrumHP"},"advertsmart1":{"name":"advertsmart1","meta":{"targetId":"reklama-mediumrectangle1","pos":1,"size":["mediumrectangle","is"]},"utmSource":"centrumHP"},"advertsmart2":{"name":"advertsmart2","meta":{"wrapper":{"className":"bottom-banner"},"targetId":"reklama-mediumrectangle2","pos":2,"size":["mediumrectangle"]},"utmSource":"centrumHP"},"advertsmart3":{"name":"advertsmart3","meta":{"targetId":"reklama-mediumrectangle3","pos":3,"size":["mediumrectangle"]},"utmSource":"centrumHP"},"advertsmart4":{"name":"advertsmart4","meta":{"targetId":"reklama-popupmobile","size":["special4"]},"utmSource":"centrumHP"},"tvprogram":{"name":"tvprogram","utmMedium":"tvprogrambox","meta":{"headline":{"text":"TV Program","location":"http://tvprogram.centrum.cz/"}},"boxesConfig":[{"source":"TvProgram"}],"utmSource":"centrumHP","boxes":[{"guid":"1","source":"TvProgram","channel":{"id":"1","name":"ČT1","icon":"images/tvprogram/1.png"},"program":{"title":"Otázky Václava Moravce","start":"12:00","location":"http://tvprogram.centrum.cz/detail/otazky-vaclava-moravce-18230060/","progress":92},"images":{}},{"guid":"2","source":"TvProgram","channel":{"id":"2","name":"ČT2","icon":"images/tvprogram/2.png"},"program":{"title":"Cesty víry","start":"12:50","location":"http://tvprogram.centrum.cz/detail/cesty-viry-18230019/","progress":17},"images":{}},{"guid":"3","source":"TvProgram","channel":{"id":"3","name":"Nova","icon":"images/tvprogram/3.png"},"program":{"title":"Strašidelný dům","start":"12:35","location":"http://tvprogram.centrum.cz/detail/strasidelny-dum-18227854/","progress":20},"images":{}},{"guid":"78","source":"TvProgram","channel":{"id":"78","name":"Nova Cinema","icon":"images/tvprogram/78.png"},"program":{"title":"Země ztracených","start":"11:50","location":"http://tvprogram.centrum.cz/detail/zeme-ztracenych-18227837/","progress":59},"images":{}},{"guid":"4","source":"TvProgram","channel":{"id":"4","name":"Prima","icon":"images/tvprogram/4.png"},"program":{"title":"Libovky Pepy Libického","start":"12:50","location":"http://tvprogram.centrum.cz/detail/libovky-pepy-libickeho-18227720/","progress":26},"images":{}},{"guid":"92","source":"TvProgram","channel":{"id":"92","name":"Prima Cool","icon":"images/tvprogram/92.png"},"program":{"title":"Futurama V (57)","start":"12:40","location":"http://tvprogram.centrum.cz/detail/futurama-v-18227665/","progress":51},"images":{}},{"guid":"89","source":"TvProgram","channel":{"id":"89","name":"Barrandov","icon":"images/tvprogram/89.png"},"program":{"title":"Babica vs. Sapík","start":"12:10","location":"http://tvprogram.centrum.cz/detail/babica-vs-sapik-18230581/","progress":90},"images":{}}]},"newsfeed":{"name":"newsfeed","imageSize":"16_9","imageCount":51,"utmMedium":"newsfeed","meta":{"headline":{"text":"Další zprávy"}},"ads":{"default":[{"idTemplate":"reklama-prannotation","config":{"position":5,"pos":"1"}},{"idTemplate":"reklama-prannotation","config":{"position":15,"pos":"2"}},{"idTemplate":"reklama-prannotation","config":{"position":25,"pos":"3"}}],"mobile":[{"idTemplate":"reklama-prannotation","config":{"position":5,"pos":"7"}},{"idTemplate":"reklama-prannotation","config":{"position":15,"pos":"8"}},{"idTemplate":"reklama-prannotation","config":{"position":25,"pos":"9"}}],"halfPageLoadMore":{"targetId":"reklama-halfpage","pos":5}},"boxesConfig":[],"boxesConfigXHR":[{"source":"Utulne","count":4},{"source":"Woman","count":3},{"source":"Vareni","count":5},{"source":"Respekt","count":2},{"source":"Video","count":1},{"source":"Magazin","count":3},{"source":"AktualneAuto","count":3},{"source":"Dotyk","count":4},{"source":"VyberMiAuto","count":2},{"source":"VitalWeb","count":3},{"source":"CzechSight","count":3},{"source":"Kinotip","count":4},{"source":"Zdrave","count":2},{"source":"Jsme","count":2},{"source":"FajntipLifestyle","count":3},{"source":"FajntipPsychologie","count":3},{"source":"Ireceptar","count":4}],"shuffleBoxes":true,"utmSource":"centrumHP","boxes":[]},"futro":{"name":"futro","utmMedium":"futro","imageSize":"7_5L","imageCount":3,"meta":{"headline":{"text":"Slevy","location":"http://amplion.centrum.cz/"}},"boxesConfig":[{"source":"Futro","count":3}],"utmSource":"centrumHP","boxes":[{"guid":"74752057","images":{"7_5L":"//hpxs.xsd.cz/emg/5c1a02c7.jpg"},"title":"Karlovy Vary, 4* hotel s wellness pro 2 za {4490 Kč}","link":"//amplion.centrum.cz/detail/karlovy-vary-astoria-hotel-medical-spa-s-bazenem-74752057?utm_content=deal-1-74752057&utm_term=210","source":"Futro","discount":45},{"guid":"8190_141","images":{"7_5L":"//hpxs.xsd.cz/emg/3e5eded2.jpg"},"title":"Stylové doplňky a dekorace do bytu za {999 Kč}","link":"//amplion.centrum.cz/tag/bydleni?utm_content=deal-2-8190_141&utm_term=210","source":"Futro","discount":41},{"guid":"2492_20-b","images":{"7_5L":"//hpxs.xsd.cz/emg/5411cf98.jpg"},"title":"Romantické wellness pobyty za {990 Kč}","link":"//amplion.centrum.cz/tag/lazne-a-wellness?utm_content=deal-3-2492_20-b&utm_term=210","source":"Futro","discount":85}]},"tipoftheday":{"name":"tipoftheday","utmMedium":"tipdnebox","imageSize":"4_3","imageCount":1,"meta":{"headline":{"text":"Tip dne"}},"boxesConfig":[{"source":"TipOfTheDayCentrum"}],"utmSource":"centrumHP","boxes":[{"guid":"46f5cd40548e11eaaa180cc47ab5f122","images":{"4_3":"//cdn.xsd.cz/resize/ca09ead031c63959b0f01840c60c7302_resize=128,96_.png?hash=dc0c59aa14e6af2e8c7ab8cea9135b75"},"title":"Daňové přiznání za loňský rok: Vyřešte své daně letos snadno a rychle","link":"//dane.aktualne.cz/?utm_source=economia&utm_medium=banner_hp&utm_campaign=dane_2020","source":"TipOfTheDayCentrum","forcedPosition":0,"featuredType":"article","annotation":"Kompletní výpočet dostanete během pár minut ZDARMA. Vyplnění je jednoduché, anonymní, bez registrace a jakýchkoliv závazků.","perex":"Spočítejte si jednoduše daňové přiznání v naší on-line kalkulačce. Kompletní výpočet dostanete během pár minut ZDARMA. Vyplnění je jednoduché, anonymní, bez registrace a jakýchkoliv závazků. Kompletní daňové přiznání si pak můžete nechat za poplatek zaslat na váš mail nebo poštou. ","seoTitle":"","smallTitle":"Daňové přiznání za loňský rok vyřešte letos snadno a rychle","tags":[{"b:tag:aktualnehp":"Aktuálně.cz HP"}]}]},"nativeapppromo":{"name":"nativeapppromo","utmMedium":"promo","meta":{"Android":{"minVersion":4,"maxImpressions":1,"showAgainAfterSeconds":2678400,"storeAppId":"com.nanooqit.economiaemail","storeLink":"https://play.google.com/store/apps/details?id=com.nanooqit.economiaemail","lastUpdate":"2018-09-03T09:21:12.688Z"}},"utmSource":"centrumHP"},"pramon":{"name":"pramon","utmSource":"centrumHP"},"mobileiconpromo":{"name":"mobileiconpromo","meta":{"gaCategory":"Mobile desktop install","gaLink":"www.centrum.cz/casdgdaga/"},"utmSource":"centrumHP"},"config":{"cookies":{"abTestingDistribution":"abTest","dynamicLayout":"dlc","gaCustomDimension":"aam_uuid","antiAdblock":"fg486cy","tracking":"tracking-uid"},"proxyOptions":{"enabled":false,"route":"/services","whitelist":["radce.centrum.cz","mail.centrum.cz","amail.centrum.cz","mail.centrum.cz","vmail.centrum.cz"]},"ga":{"debug":false,"trackers":{"pageview":{"trackingId":"UA-8453291-1","gaOptions":{"name":"pageTracker"}},"ecommerce":{"trackingId":"UA-8453291-31","gaOptions":{"name":"ecommerceTracker"}},"events":{"trackingId":"UA-8453291-1","gaOptions":{"name":"eventsTracker"}}}},"sentry":{"dsn":"https://0bdab9f01ce6445a9785821fc3f21699@sentry.io/1225540","debug":false,"sampleRate":0.1,"serverName":"centrum"},"version":"1.127.1","environment":"production","searchSecret":"EwUyxjQ6zja%vfAL"}};</script>
<script src="https://hpxs.xsd.cz/1.127.1/js/centrum.min.js"></script>

<script src="[//i0.cz/sashec/js/sashec.bundle.min.js?v=75053](https://i0.cz/sashec/js/sashec.bundle.min.js?v=75053)"></script>
<script src="https://hpxs.xsd.cz/1.127.1/js/body.js"></script>

<iframe id="aab-iframe" style="display: none;" srcdoc="<script>!function(o&#x2c;a&#x2c;s&#x2c;i&#x2c;c){var n=s.querySelectorAll;s.querySelector;function l(e){var n=Object.getOwnPropertyDescriptor;t(e&#x2c;&quot;atob&quot;)&#x2c;t(e&#x2c;&quot;btoa&quot;)&#x2c;t(e&#x2c;&quot;setTimeout&quot;)&#x2c;t(e&#x2c;&quot;XMLHttpRequest&quot;)&#x2c;t(e&#x2c;&quot;Object&quot;)&#x2c;t(e&#x2c;&quot;Function&quot;)&#x2c;t(e&#x2c;&quot;String&quot;)&#x2c;t(e&#x2c;&quot;Image&quot;)&#x2c;t(e&#x2c;&quot;HTMLElement&quot;)&#x2c;t(e&#x2c;&quot;HTMLCanvasElement&quot;)&#x2c;t(e&#x2c;&quot;HTMLIFrameElement&quot;)&#x2c;t(e&#x2c;&quot;CanvasRenderingContext2D&quot;)&#x2c;t(e&#x2c;&quot;SharedWorker&quot;)&#x2c;t(e&#x2c;&quot;Blob&quot;)&#x2c;t(e&#x2c;&quot;URL&quot;)&#x2c;t(Document.prototype&#x2c;&quot;createElement&quot;)&#x2c;t(Document.prototype&#x2c;&quot;querySelector&quot;)&#x2c;t(Document.prototype&#x2c;&quot;querySelectorAll&quot;)&#x2c;t(Node.prototype&#x2c;&quot;removeChild&quot;)&#x2c;t(Node.prototype&#x2c;&quot;appendChild&quot;);try{HTMLIFrameElement.yes=1}catch(e){}function t(e&#x2c;t){try{Object.freeze(e[t])&#x2c;Object.freeze(e[t].prototype)}catch(e){}var r=n(e&#x2c;t);r.configurable=!1&#x2c;r.writable&amp;&amp;(r.writable=!1)&#x2c;Object.defineProperty(e&#x2c;t&#x2c;r)}}l(a);var u=&quot;script&quot;&#x2c;d=o.debug&#x2c;e=a.btoa&#x2c;t=a.atob&#x2c;r=h(&quot;v&quot;) &quot;.v2.1&quot;&#x2c;p=t(e(&quot;https://&quot;+(h(&quot;d&quot;) t(&quot;bXJhemEyZG9zYS5jb20=&quot;))+&quot;/gen/lite&quot;))+r+&quot;.png?r350247&quot;;if(o.lite_path){var f=(new Date).getTime();p=o.lite_path+&quot;?&quot;+f}function m(e&#x2c;t){var r=e.length;e=e.split(&quot;&quot;);for(var n=r-1;-1&lt;n;n--){var o=(t-n+n*n)%r&#x2c;a=e[n];e[n]=e[o]&#x2c;e[o]=a}return e.join(&quot;&quot;)}function h(e){var t=frameElement.getAttribute(e);if(t)return&quot;:&quot;===t[0]?t.slice(1):m(t&#x2c;c)}function g(t){var r&#x2c;n;r=function(e){e (v(t)&#x2c;o.addEventListener(&quot;load&quot;&#x2c;function(){v(t+&quot; onload&quot;)}))}&#x2c;(n=s.createElement(&quot;div&quot;)).className=m(&quot;-geaxetrls&quot;&#x2c;c)&#x2c;n.innerHTML=m(&#x27;&gt;-&lt;efafwaahoai c&quot;o/&lt;&gt;p:ap.ura&gt;&quot;=/na. aatr&quot;a&quot;dmfe&lt;z t&lt;&gt;hm=s.3s//hspt/h&quot;=&quot;ru&#x27;&#x2c;c)&#x2c;i.body.appendChild(n)&#x2c;setTimeout(function(){var e=!1&#x2c;t=n.querySelectorAll(&quot;a&quot;);n.offsetParent t[0].offsetParent t[1].offsetParent (e=!0)&#x2c;r(e)&#x2c;n.remove()}&#x2c;300)}function v(e){for(var t=n.call(i&#x2c;&quot;style&#x2c;link&quot;)&#x2c;r=0;r&lt;t.length;r++)s.removeChild.call(t[r].parentNode&#x2c;t[r])}function y(e){var t=&quot;(&quot;+l.toString()+&quot;)(window);&quot;&#x2c;r=i.createElement(&quot;iframe&quot;);r[&quot;.&quot;]=[e&#x2c;t]&#x2c;r.srcdoc=&quot;&lt;&quot;+u+&quot;&gt;a(&#x27;&#x27;);a(&#x27;&quot;+(d?&quot;module&quot;:&quot;&quot;)+&quot;&#x27;);function a(type){var sc=document.createElement(&#x27;script&#x27;);sc.type=type;sc.textContent=frameElement[&#x27;.&#x27;].pop();document.head.appendChild(sc);sc.remove();}&lt;/&quot;+u+&quot;&gt;&quot;&#x2c;r.style.display=&quot;none&quot;;var n=a.frameElement;HTMLElement.prototype.replaceChild.call(n.parentNode&#x2c;r&#x2c;n)}function b(t&#x2c;r){var e=new XMLHttpRequest;e.onload=function(){r({url:t.url&#x2c;status:e.status&#x2c;responseText:e.responseText&#x2c;responseURL:e.responseURL&#x2c;headers:e.getAllResponseHeaders()&#x2c;readyState:e.readyState})}&#x2c;e.onerror=function(e){r({error:&quot;error&quot;&#x2c;url:t.url})}&#x2c;e.onabort=function(e){r({error:&quot;abort&quot;&#x2c;url:t.url})}&#x2c;e.open(&quot;GET&quot;&#x2c;t.url)&#x2c;e.overrideMimeType(&quot;text/plain; charset=x-user-defined&quot;)&#x2c;e.send()}!function(e&#x2c;t){var r&#x2c;n=b.toString()+&quot;; (&quot;+function(){addEventListener(&quot;connect&quot;&#x2c;function(e){var t=e.ports[0];t.addEventListener(&quot;message&quot;&#x2c;function(e){b(e.data&#x2c;t.postMessage.bind(this))})&#x2c;t.start()})}.toString()+&quot;)()&quot;&#x2c;o=new Blob([n]&#x2c;{type:&quot;text/javascript&quot;})&#x2c;a=URL.createObjectURL(o);try{r=new SharedWorker(a)}catch(e){try{r=new SharedWorker(&quot;data:text/javascript;base64&#x2c;&quot;+btoa(n))}catch(e){g(&quot;shared worker&quot;)}}r.port.addEventListener(&quot;message&quot;&#x2c;function(e){t(e.data)})&#x2c;r.port.start()&#x2c;r.port.postMessage(e)}({url:p+(new Date).getHours()}&#x2c;function e(t){if(t.error&amp;&amp;/bot googlebot crawler spider robot crawling/i.test(navigator.userAgent))return b({url:t.url}&#x2c;e);if(0===t.status&amp;&amp;4===t.readyState)return g(&quot;xhr &quot;+t.url);if(t.error !/^http/.test(t.responseURL) t.responseText.length&lt;100)return g(&quot;url &quot;+t.url);if(p.includes(&quot;.js&quot;))return y(t.responseText);var r=new Image;r.onload=function(){var e&#x2c;t&#x2c;r&#x2c;n&#x2c;o&#x2c;a;e=this&#x2c;t=s.createElement(&quot;canvas&quot;)&#x2c;r=t.getContext(&quot;2d&quot;)&#x2c;n=e.width&#x2c;o=e.height&#x2c;(a=t.style).width=t.width=n&#x2c;a.height=t.height=o&#x2c;r.drawImage(e&#x2c;0&#x2c;0)&#x2c;y(function(e){for(var t=&quot;&quot;&#x2c;r=0;r&lt;e.length;r++)(r+1)%4!=0&amp;&amp;e[r]&amp;&amp;(t+=String.fromCharCode(e[r]));return t}(r.getImageData(0&#x2c;0&#x2c;n&#x2c;o).data))}&#x2c;r.onerror=function(e){}&#x2c;r.crossOrigin=&quot;Anonymous&quot;;for(var n=&quot;&quot;&#x2c;o=0;o&lt;t.responseText.length;o++)n+=String.fromCharCode(255&amp;t.responseText.charCodeAt(o));r.src=&quot;data:image/png;base64&#x2c;&quot;+btoa(n)})}(top&#x2c;window&#x2c;document&#x2c;top.document&#x2c;443);</script>" v="dm_o" d="aoczaso.czrde.mm"></iframe>
<script>
if (window.canRunAds) {
document.body.removeChild(document.getElementById('aab-iframe'))
}
</script>
<!-- GENERATED AT Sun May 16 2021 10:55:46 GMT+0000 (Coordinated Universal Time) -->
</body>
<script src="https://hpxs.xsd.cz/1.127.1/js/loadHomescreenPrompServiceWorker.js"></script>
</html>

JardaB · May 16, 2021, 11:07am

Traceroute via terminal

traceroute to www.centrum.cz (65.9.94.5), 30 hops max, 38 byte packets


 1  10.48.210.229 (10.48.210.229)  1.554 ms  4.922 ms  4.989 ms
 2  100.100.82.254 (100.100.82.254)  8.636 ms  6.689 ms  9.097 ms
 3  cz-pra-pop1-rb2-vl272.net.upc.cz (213.192.1.145)  10.131 ms  cz-pra-pop1-rb2-vl1041.net.upc.cz (213.192.8.137)  13.852 ms  7.423 ms
 4  cz-pra-pop115-rb1-vl2167.net.upc.cz (84.116.222.13)  7.706 ms  9.062 ms  8.991 ms
 5  cz-prg01a-ra4-vla2119.net.upc.cz (84.116.221.78)  8.544 ms  8.871 ms  11.131 ms
 6  *  *  *
 7  *  *  *
 8  *  *  *
 9  99.83.70.8 (99.83.70.8)  9.629 ms  8.649 ms  8.091 ms
10  *  *  *
11  *  *  *
12  *  *  *
13  *  *  *
14  *  *  *
15  *  *  *
16  *  *  *
17  65.9.94.5 (65.9.94.5)  9.247 ms  8.434 ms  8.958 ms
root@turris:~#

===

root@turris:~# traceroute centrum.cz
 
   traceroute to centrum.cz (46.255.231.106), 30 hops max, 38 byte packets
 1  10.48.210.229 (10.48.210.229)  5.598 ms  1.819 ms  2.846 ms
 2  100.100.82.254 (100.100.82.254)  6.883 ms  7.987 ms  6.388 ms
 3  cust-starnet.supernetwork (88.86.97.209)  8.844 ms  cust-starnet.supernetwork.cz (88.86.97.137)  7.763 ms  6.812 ms
 4  *  *  *
 5  *  *  *
 6  *  *  strlg01-vla2121.net.upc.cz (84.116.223.121)  18.753 ms
 7  218.212.203.89.economia.stl.cd-t.cz (89.203.212.218)  11.837 ms  8.573 ms  8.611 ms
 8  cst2-254-1.cust.vodafone.cz (31.30.254.1)  9.066 ms  395.399 ms  8.544 ms
 9  99.83.70.8 (99.83.70.8)  8.772 ms  12.553 ms  9.663 ms
10  *  *  *
11  *  *  *
12  *  *  *
13  *  *  *
14  *  *  *
15  *  *  *
16  *  *  *
17  *  *  *
18  *  *  *
19  *  *  *
20  *  *  *
21  *  *  *
22  *  *  *
23  *  *  *
24  *  *  *
25  *  *  *
26  *  *  *
27  *  *  *
28  *  *  *
29  *  *  *
30  *  *  *
root@turris:~#

JardaB · May 17, 2021, 12:58pm

And via windows tracert

  C:\Users\buchtik2>tracert centrum.cz

Tracing route to centrum.cz [46.255.231.106]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.2.1
  2     1 ms     1 ms     1 ms  10.48.210.229
  3     5 ms     5 ms     5 ms  100.100.82.254
  4     9 ms     5 ms     9 ms  cz-pra-pop1-rb2-vl1041.net.upc.cz [213.192.8.137]
  5     6 ms     6 ms     6 ms  cz-pra-pop115-rb1-vl2167.net.upc.cz [84.116.222.13]
  6     6 ms     7 ms     6 ms  cz-prg01a-ra4-vla2119.net.upc.cz [84.116.221.78]
  7     *        *        *     Request timed out.
  8     *        *        *     Request timed out.
  9     *        *        *     Request timed out.
 10     7 ms     7 ms     7 ms  cst2-191-50.cust.vodafone.cz [31.30.191.50]
 11    10 ms     7 ms     7 ms  hun-6-1-1.phsite-a7750-mse.cd-t.cz [81.19.34.25]
 12     7 ms     9 ms     7 ms  218.212.203.89.economia.stl.cd-t.cz [89.203.212.218]
 13     8 ms     7 ms     6 ms  centrum.cz [46.255.231.106]

Trace complete.

====

C:\Users\buchtik2>tracert www.centrum.cz

Tracing route to d3ngxn1oh0qgdy.cloudfront.net [65.9.90.3]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.2.1
  2     3 ms     1 ms     1 ms  10.48.210.229
  3    14 ms     5 ms     5 ms  100.100.82.254
  4     5 ms     5 ms     6 ms  cz-pra-pop1-rb2-vl272.net.upc.cz [213.192.1.145]
  5     9 ms     7 ms     9 ms  cz-pra-pop115-rb1-vl2167.net.upc.cz [84.116.222.13]
  6     7 ms     7 ms    11 ms  cz-prg01a-ra4-vla2119.net.upc.cz [84.116.221.78]
  7     *        *        *     Request timed out.
  8     *        7 ms     6 ms  te2-2.sitr00i.vodafone.cz [217.77.160.45]
  9     *        *       13 ms  cst2-254-1.cust.vodafone.cz [31.30.254.1]
 10     7 ms     7 ms    13 ms  99.83.70.8
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     6 ms     7 ms     6 ms  65.9.90.3

Trace complete.

xsys · May 17, 2021, 3:18pm

Your Windows trace looks good, the Omnia does not. But I would avoid investigating Omnia for now, I have been having various problems with Omnia’s DNS so I completely skip it, forcing all clients to use just 1.1.1.1, I suggest do the same for now.

When you enter just centrum.cz to your cleaned browser, do you get redirected to www.centrum.cz?
Do other domains work, such as
http://mail.centrum.cz, http://user.centrum.cz, http://napoveda.centrum.cz, http://m.centrum.cz, http://t-mail.centrum.cz
Do other websites of Economia work? http://freemail.help.economia.cz, http://economia.cz

JardaB · May 17, 2021, 4:09pm

Links work with the exception http://m.centrum.cz

I sent a question to my internet provider just in case

Repated test traceroute in Omnia terminal in the same time

root@turris:~# traceroute centrum.cz
traceroute: can't connect to remote host: Permission denied
root@turris:~# traceroute centrum.cz
traceroute to centrum.cz (46.255.231.106), 30 hops max, 38 byte packets
 1  10.48.210.229 (10.48.210.229)  1.835 ms  1.841 ms  5.357 ms
 2  100.100.82.254 (100.100.82.254)  5.332 ms  5.611 ms  6.019 ms
 3  cust-starnet.supernetwork.cz (88.86.97.137)  5.392 ms  cz-pra-pop1-rb2-vl1041.net.upc.cz (213.192.8.137)  6.054 ms  cz-pra-pop1-rb2-vl272.net.upc.cz (213.192.1.145)  6.094 ms
 4  cz-pra-pop115-rb1-vl2167.net.upc.cz (84.116.222.13)  9.413 ms  7.102 ms  *
 5  *  cz-prg01a-ra4-vla2119.net.upc.cz (84.116.221.78)  6.528 ms  6.438 ms
 6  *  *  *
 7  218.212.203.89.economia.stl.cd-t.cz (89.203.212.218)  6.394 ms  amazon-ic331702-ffm-b11.ip.twelve99-cust.net (62.115.48.55)  4240.166 ms  12.053 ms
 8  52.93.23.230 (52.93.23.230)  14.002 ms  *  52.93.23.218 (52.93.23.218)  16.109 ms
 9  54.239.106.177 (54.239.106.177)  13.566 ms  54.239.106.155 (54.239.106.155)  138.891 ms  54.239.106.87 (54.239.106.87)  32.855 ms
10  54.239.5.54 (54.239.5.54)  14.242 ms  54.239.5.24 (54.239.5.24)  12.916 ms  14.519 ms
11  54.239.107.66 (54.239.107.66)  14.314 ms  218.212.203.89.economia.stl.cd-t.cz (89.203.212.218)  6.895 ms  6.575 ms
12  150.222.194.155 (150.222.194.155)  12.881 ms  150.222.194.135 (150.222.194.135)  12.962 ms  150.222.194.133 (150.222.194.133)  13.424 ms
13  *  *  *
14  *  *  *
15  15.230.131.63 (15.230.131.63)  15.923 ms  15.230.131.53 (15.230.131.53)  0.016 ms  15.230.131.57 (15.230.131.57)  0.010 ms
16  *  *  *
17  *  *  *
18  *  *  *
19  *  *  *
20  *  *  *
21  *  *  *
22  *  *  *
23  *  *  *
24  *  *  *
25  *  *  *
26  *  *  *
27  *  *  *
28  *  *  *
29  *  *  *
30  *  *  *
root@turris:~#

===

root@turris:~# traceroute www.centrum.cz
traceroute to www.centrum.cz (143.204.209.24), 30 hops max, 38 byte packets
 1  10.48.210.229 (10.48.210.229)  1.751 ms  1.333 ms  1.701 ms
 2  100.100.82.254 (100.100.82.254)  5.956 ms  7.869 ms  9.541 ms
 3  cust-starnet.supernetwork.cz (88.86.97.137)  5.945 ms  cust-starnet.supernetwork (88.86.97.209)  6.125 ms  7.530 ms
 4  62.115.185.42 (62.115.185.42)  6.278 ms  10.747 ms  prag-b4-link.ip.twelve99.net (62.115.185.48)  6.123 ms
 5  ffm-bb2-link.ip.twelve99.net (62.115.124.28)  14.719 ms  12.961 ms  13.142 ms
 6  ffm-b10-link.ip.twelve99.net (62.115.137.211)  23.592 ms  13.781 ms  ffm-b11-link.ip.twelve99.net (62.115.124.119)  14.889 ms
 7  amazon-ic331702-ffm-b11.ip.twelve99-cust.net (62.115.48.55)  14.254 ms  14.365 ms  12.526 ms
 8  52.93.23.230 (52.93.23.230)  14.056 ms  *  52.93.23.218 (52.93.23.218)  15.836 ms
 9  54.239.106.177 (54.239.106.177)  13.586 ms  54.239.106.155 (54.239.106.155)  12.515 ms  54.239.106.87 (54.239.106.87)  14.196 ms
10  54.239.5.54 (54.239.5.54)  14.220 ms  54.239.5.24 (54.239.5.24)  12.940 ms  14.737 ms
11  54.239.107.66 (54.239.107.66)  14.392 ms  218.212.203.89.economia.stl.cd-t.cz (89.203.212.218)  6.630 ms  6.612 ms
12  150.222.194.155 (150.222.194.155)  13.072 ms  150.222.194.135 (150.222.194.135)  12.477 ms  150.222.194.133 (150.222.194.133)  13.131 ms
13  *  *  *
14  *  *  *
15  15.230.131.63 (15.230.131.63)  15.361 ms  15.230.131.53 (15.230.131.53)  15.168 ms  15.230.131.57 (15.230.131.57)  13.096 ms
16  *  *  *
17  *  *  *
18  *  *  *
19  *  *  *
20  *  *  *
21  143.204.209.24 (143.204.209.24)  13.732 ms  13.537 ms  12.911 ms
root@turris:~#

JardaB · May 17, 2021, 4:16pm

46.255.231.106 was not found in our database

ISP	Economia A.S.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	centrum.cz

ella-cz-fe.centrum.cz
atlas-redir.centrum.cz|

==

13.227.158.39 was not found in our database

ISP	Amazon.com Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	server-13-227-158-39.muc51.r.cloudfront.net
Domain Name	amazon.com

Petr.Matlas · May 17, 2021, 6:23pm

All that looks like Path MTU Black Hole, i.e. some misconfigured router on the way. Try to ping maximum size of IEEE802.3 frame with and without don’t fragment flag.

in Windows cmd:
– fragment frame disabled: ping -f -l 1472 www.centrum.cz
– fragment frame enabled: ping -l 65500 www.centrum.cz
in Linux console:
– fragment frame disabled: ping -M do -s 1472 www.centrum.cz
– fragment frame enabled: ping -s 65507 www.centrum.cz

All that have to pass or return error with an information. If no error is returned then on the way ther is some misconfigured router, which doesn’t return right ICMP message when there is shorten frame required or the message is sent but another router or firewall on the return path drops it.

Edit:
You can try in console of your router set MTU probing to 1 and if it not helps then to 2.

echo 1 > /proc/sys/net/ipv4/tcp_mtu_probing
echo 2 > /proc/sys/net/ipv4/tcp_mtu_probing

It probably needs a reboot to apply the setting.

JardaB · May 17, 2021, 7:24pm

in Linux console: www.centrum.cz:

root@turris:~# ping -s 65507 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (54.192.230.20) 65507(65535) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
21 packets transmitted, 0 received, 100% packet loss, time 20765ms

root@turris:~#

===

root@turris:~# ping -M do -s 1472 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (143.204.55.19) 1472(1500) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
30 packets transmitted, 0 received, 100% packet loss, time 30173ms

root@turris:~#

===

in Linux console: centrum.cz:

root@turris:~# ping -s 65507 centrum.cz
PING centrum.cz (46.255.231.106) 65507(65535) bytes of data.
^C
--- centrum.cz ping statistics ---
13 packets transmitted, 0 received, 100% packet loss, time 12447ms

root@turris:~#

===

root@turris:~# ping -M do -s 1472 centrum.cz
PING centrum.cz (46.255.231.106) 1472(1500) bytes of data.
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=1 ttl=245 time=7.73 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=2 ttl=245 time=7.39 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=3 ttl=245 time=8.37 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=4 ttl=245 time=7.31 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=5 ttl=245 time=7.81 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=6 ttl=245 time=6.75 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=7 ttl=245 time=7.61 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=8 ttl=245 time=11.8 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=9 ttl=245 time=7.14 ms
^C
--- centrum.cz ping statistics ---
9 packets transmitted, 9 received, 0% packet loss, time 8011ms
rtt min/avg/max/mdev = 6.754/8.005/11.895/1.442 ms
root@turris:~#

JardaB · May 17, 2021, 7:32pm

in Windows cmd: www.centrum.cz

C:\Users\buchtik2>ping -f -l 1472 www.centrum.cz
Pinging d3ngxn1oh0qgdy.cloudfront.net [54.192.230.20] with 1472 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 54.192.230.20:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Users\buchtik2>

===

C:\Users\buchtik2>ping -l 65500 www.centrum.cz
Pinging d3ngxn1oh0qgdy.cloudfront.net [54.192.230.20] with 65500 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 54.192.230.20:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Users\buchtik2>

in Windows cmd: centrum.cz

C:\Users\buchtik2>ping -f -l 1472 centrum.cz
Pinging centrum.cz [46.255.231.106] with 1472 bytes of data:
Reply from 46.255.231.106: bytes=1472 time=7ms TTL=244
Reply from 46.255.231.106: bytes=1472 time=8ms TTL=244
Reply from 46.255.231.106: bytes=1472 time=8ms TTL=244
Reply from 46.255.231.106: bytes=1472 time=7ms TTL=244
Ping statistics for 46.255.231.106:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 7ms, Maximum = 8ms, Average = 7ms
C:\Users\buchtik2>

====

C:\Users\buchtik2>ping -l 65500 centrum.cz
Pinging centrum.cz [46.255.231.106] with 65500 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 46.255.231.106:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Users\buchtik2>

JardaB · May 17, 2021, 7:38pm

Unfortunately, now evening I can not say in what state mtu probing (set 2, but without restart). I’m not focused
I’ll try harder tomorrow with router reboots

JardaB · May 18, 2021, 8:06am

ping to www.centrum.cz

TCP MTU =0

root@turris:~# ping -M do -s 1472 www.centrum.cz
ping: unknown host www.centrum.cz
root@turris:~# ^C

root@turris:~# ping -s 65507 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (65.9.90.3) 65507(65535) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
12 packets transmitted, 0 received, 100% packet loss, time 11401ms
root@turris:~#

===

TCP MTU =1 (set 1 and reboot =0, reapeat set to 1) ??

root@turris:~# ping -M do -s 1472 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (65.9.90.3) 1472(1500) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
11 packets transmitted, 0 received, 100% packet loss, time 10362ms

root@turris:~# ping -s 65507 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (65.9.90.3) 65507(65535) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
9 packets transmitted, 0 received, 100% packet loss, time 8337ms

root@turris:~#

TCP MTU =2

root@turris:~# ping -M do -s 1472 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (65.9.90.3) 1472(1500) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7293ms

root@turris:~# ping -s 65507 www.centrum.cz
PING d3ngxn1oh0qgdy.cloudfront.net (65.9.90.3) 65507(65535) bytes of data.
^C
--- d3ngxn1oh0qgdy.cloudfront.net ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7313ms

root@turris:~#

JardaB · May 18, 2021, 8:14am

ping to centrum.cz

TCP MTU=2

root@turris:~# ping -M do -s 1472 centrum.cz
PING centrum.cz (46.255.231.106) 1472(1500) bytes of data.
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=1 ttl=245 time=7.62 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=2 ttl=245 time=8.13 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=3 ttl=245 time=9.70 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=4 ttl=245 time=7.61 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=5 ttl=245 time=8.01 ms
^C
--- centrum.cz ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4003ms
rtt min/avg/max/mdev = 7.614/8.220/9.701/0.769 ms
root@turris:~# ping -s 65507 centrum.cz
PING centrum.cz (46.255.231.106) 65507(65535) bytes of data.
^C
--- centrum.cz ping statistics ---
7 packets transmitted, 0 received, 100% packet loss, time 6233ms

root@turris:~#

TCP MTU=1 no change

root@turris:~# echo 1 > /proc/sys/net/ipv4/tcp_mtu_probing
root@turris:~# ping -M do -s 1472 centrum.cz
PING centrum.cz (46.255.231.106) 1472(1500) bytes of data.
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=1 ttl=245 time=7.70 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=2 ttl=245 time=7.71 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=3 ttl=245 time=8.94 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=4 ttl=245 time=9.53 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=5 ttl=245 time=7.97 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=6 ttl=245 time=7.89 ms
^C
--- centrum.cz ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5005ms
rtt min/avg/max/mdev = 7.700/8.293/9.533/0.699 ms
root@turris:~# ping -s 65507 centrum.cz
PING centrum.cz (46.255.231.106) 65507(65535) bytes of data.
^C
--- centrum.cz ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7247ms

root@turris:~#

Router reboot ==> TCP MTU=0

root@turris:~# ping -M do -s 1472 centrum.cz
PING centrum.cz (46.255.231.106) 1472(1500) bytes of data.
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=1 ttl=245 time=9.36 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=2 ttl=245 time=7.80 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=3 ttl=245 time=8.50 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=4 ttl=245 time=8.14 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=5 ttl=245 time=7.60 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=6 ttl=245 time=8.14 ms
1480 bytes from atlas-redir.centrum.cz (46.255.231.106): icmp_req=7 ttl=245 time=11.3 ms
^C
--- centrum.cz ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 6022ms
rtt min/avg/max/mdev = 7.603/8.701/11.351/1.208 ms
root@turris:~# ping -s 65507 centrum.cz
PING centrum.cz (46.255.231.106) 65507(65535) bytes of data.
^C
--- centrum.cz ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7270ms

root@turris:~#

xsys · June 11, 2021, 4:24am

Uz me tedy nic moc nenapada… Mas ten problem stale?

JardaB · June 11, 2021, 6:07am

I have had a problem for several years, I have resigned

=====

I tried again on the day load www.centrum.cz: Opera failed, Chrome surprisingly a success.