RRSIG d1a1n1.rootcanary.net/DNSKEY alg 1, id 18698: DNSSEC specification prohibits signing with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
RRSIG secure.d1a1n1.rootcanary.net/A alg 1, id 18698: DNSSEC specification prohibits signing with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
RRSIG secure.d1a1n1.rootcanary.net/AAAA alg 1, id 18698: DNSSEC specification prohibits signing with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
d1a1n1.rootcanary.net/DS (alg 1, id 18698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
d1a1n1.rootcanary.net/DS (alg 1, id 18698): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
d1a1n1.rootcanary.net/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (4)
RRSIG d1a1n1.rootcanary.net/DNSKEY alg 1, id 18698: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
RRSIG secure.d1a1n1.rootcanary.net/A alg 1, id 18698: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
RRSIG secure.d1a1n1.rootcanary.net/AAAA alg 1, id 18698: DNSSEC specification prohibits validation of RRSIGs with DNSSEC algorithm 1 (RSAMD5). See RFC 8624, Sec. 3.1.
d1a1n1.rootcanary.net/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.