d2a12n3.rootcanary.net/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (7)
RRSIG bogus.d2a12n3.rootcanary.net/A alg 12, id 31898: DNSSEC implementers are prohibited from implementing signing with DNSSEC algorithm 12 (12). See RFC 8624, Sec. 3.1.
RRSIG bogus.d2a12n3.rootcanary.net/A alg 12, id 31898: Validation of DNSSEC algorithm 12 (12) is not supported by this code, so the cryptographic status of this RRSIG is unknown. See RFC 4035, Sec. 5.2.
RRSIG bogus.d2a12n3.rootcanary.net/AAAA alg 12, id 31898: DNSSEC implementers are prohibited from implementing signing with DNSSEC algorithm 12 (12). See RFC 8624, Sec. 3.1.
RRSIG bogus.d2a12n3.rootcanary.net/AAAA alg 12, id 31898: Validation of DNSSEC algorithm 12 (12) is not supported by this code, so the cryptographic status of this RRSIG is unknown. See RFC 4035, Sec. 5.2.
RRSIG d2a12n3.rootcanary.net/DNSKEY alg 12, id 31898: DNSSEC implementers are prohibited from implementing signing with DNSSEC algorithm 12 (12). See RFC 8624, Sec. 3.1.
RRSIG d2a12n3.rootcanary.net/DNSKEY alg 12, id 31898: Validation of DNSSEC algorithm 12 (12) is not supported by this code, so the cryptographic status of this RRSIG is unknown. See RFC 4035, Sec. 5.2.
d2a12n3.rootcanary.net/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.