DNSSEC EARLY WARNING SYSTEM (DEWS) - Thu Dec 14 08:46:12 UTC 2017

(ns30.cdns.net.)
FAILED VALIDATION Broken chain of trust (no AD bit). Missing DS?
RR        Tag   Domain Name: xn--mgbx4cd0ab.  One tick = 1.0 days
NSEC3PARA 60206-------------------------|+++++++++++++++++++++++++++++++++++++++
DNSKEY    46104-------------------------|+++++++++++++++++++++++++++++++++++++++
DNSKEY    60206-------------------------|+++++++++++++++++++++++++++++++++++++++
NS        60206-------------------------|+++++++++++++++++++++++++++++++++++++++
SOA       60206-------------------------|+++++++++++++++++++++++++++++++++++++++
RR        Tag   Domain Name: xn--mgbx4cd0ab.  One tick = 7.0 days
NSEC3PARA 60206-------------------------|++++++++++++---------------------------
DNSKEY    46104-------------------------|++++++++++++---------------------------
DNSKEY    60206-------------------------|++++++++++++---------------------------
NS        60206-------------------------|++++++++++++---------------------------
SOA       60206-------------------------|++++++++++++---------------------------
Some signatures will expire in 89 days out of 90 day validity period.
KSK 46104 RRSIG validated alg:8
ZSK 60206 RRSIG validated alg:8

Copyright (c) 2010-2014 DC Communications, Inc. (DCI)
THE SERVICE IS PROVIDED "AS IS" AND DCI DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SERVICE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DCI BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SERVICE. "DNSSEC/DNS/TLD Early Warning System (DEWS, DNEWS, TEWS)"