--- /dev/null
+cleandig net DS dnssec
--- /dev/null
+DS query for an existing TLD should get an answer
--- /dev/null
+0 net. IN DS 86400 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee
+2 . IN OPT 32768
+Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='net.', qtype=DS
--- /dev/null
+0 net. IN DS 86400 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee
+0 net. IN RRSIG 86400 DS 13 1 86400 [expiry] [inception] [keytag] . ...
+2 . IN OPT 32768
+Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='net.', qtype=DS
-cleandig net NS
+cleandig net NS dnssec
1 net. IN NS 172800 a.gtld-servers.net.
+2 . IN OPT 32768
2 a.gtld-servers.net. IN A 172800 192.5.6.30
2 a.gtld-servers.net. IN AAAA 172800 2001:503:a83e::2:30
Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0
1 net. IN DS 86400 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee
1 net. IN NS 172800 a.gtld-servers.net.
+1 net. IN RRSIG 86400 DS 13 1 86400 [expiry] [inception] [keytag] . ...
+2 . IN OPT 32768
2 a.gtld-servers.net. IN A 172800 192.5.6.30
2 a.gtld-servers.net. IN AAAA 172800 2001:503:a83e::2:30
Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0
-cleandig some-host.domain.net A
+cleandig some-host.domain.net A dnssec
1 net. IN NS 172800 a.gtld-servers.net.
+2 . IN OPT 32768
2 a.gtld-servers.net. IN A 172800 192.5.6.30
2 a.gtld-servers.net. IN AAAA 172800 2001:503:a83e::2:30
Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0
1 net. IN DS 86400 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee
1 net. IN NS 172800 a.gtld-servers.net.
+1 net. IN RRSIG 86400 DS 13 1 86400 [expiry] [inception] [keytag] . ...
+2 . IN OPT 32768
2 a.gtld-servers.net. IN A 172800 192.5.6.30
2 a.gtld-servers.net. IN AAAA 172800 2001:503:a83e::2:30
Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0