ke/DNSKEY: No response was received from the server over TCP (tried 8 times). See RFC 1035, Sec. 4.2. (196.216.168.22, TCP_-_EDNS0_4096_D)
ke/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
d04cngvept.ke/A has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (2)
ke/SOA: No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (196.216.168.22, UDP_-_EDNS0_4096_D_KN_0x20)
ke/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.