DNSSEC EARLY WARNING SYSTEM (DEWS) - Wed Dec 13 09:07:06 UTC 2017

(ns-my.nic.fr.)
FAILED VALIDATION Broken chain of trust (no AD bit). Missing DS?
RR        Tag   Domain Name: xn--mgbx4cd0ab.  One tick = 1.0 days
SOA       60206-------------------------|+++++++++++++++++++++++++++++++++++++++
NS        60206-------------------------|+++++++++++++++++++++++++++++++++++++++
DNSKEY    46104-------------------------|+++++++++++++++++++++++++++++++++++++++
DNSKEY    60206-------------------------|+++++++++++++++++++++++++++++++++++++++
NSEC3PARA 60206-------------------------|+++++++++++++++++++++++++++++++++++++++
RR        Tag   Domain Name: xn--mgbx4cd0ab.  One tick = 7.0 days
SOA       60206-------------------------|++++++++++++---------------------------
NS        60206-------------------------|++++++++++++---------------------------
DNSKEY    46104-------------------------|++++++++++++---------------------------
DNSKEY    60206-------------------------|++++++++++++---------------------------
NSEC3PARA 60206-------------------------|++++++++++++---------------------------
Some signatures at 90 percent. 89 out of 90 days left.
KSK 46104 RRSIG validated alg:8
ZSK 60206 RRSIG validated alg:8
Related Links:

Copyright (c) 2011-2013 DC Communications, Inc. (DCI)
THE SERVICE IS PROVIDED "AS IS" AND DCI DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SERVICE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DCI BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SERVICE. "DNSSEC/DNS/TLD Early Warning System (DEWS, DNEWS, TEWS)"