ci zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:468:d01:20::80df:2023)
ci/SOA: The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (128.223.32.35, 196.216.168.30, 2001:43f8:120::30, UDP_-_EDNS0_4096_D_KN)
ci/SOA: The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (192.134.0.49, 196.49.0.84, 204.61.216.120, 2001:500:14:6120:ad::1, 2001:660:3006:1::1:1, UDP_-_EDNS0_4096_D_KN)
gouv.ci/NS: The response had an invalid RCODE (SERVFAIL). See RFC 1035, Sec. 4.1.1. (128.223.32.35, UDP_-_NOEDNS_)
gouv.ci/DS has errors; select the "Denial of existence" DNSSEC option to see them.