1 0 cname-to-insecure.example.com. IN CNAME 120 www.insecure.dnssec-parent.com.
2 0 cname-to-insecure.example.com. IN RRSIG 120 CNAME 13 3 120 [expiry] [inception] [keytag] example.com. ...
3 0 www.insecure.dnssec-parent.com. IN A 120 192.0.2.88
5 Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
6 Reply to question for qname='cname-to-insecure.example.com.', qtype=A