discuss AT lists.opennicproject.org
Subject: Discuss mailing list
List archive
Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers
- From: Renard Bleu <dnsadmin123456 AT proton.me>
- To: discuss AT lists.opennicproject.org
- Subject: Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers
- Date: Wed, 15 Apr 2026 14:58:44 +0000
I am not sure, but it seems that the root zone file for ICANN delegation seems not to be updated for long time.. ummm
On Wednesday, April 15th, 2026 at 08:33, Joel Strasser <strasser999 AT gmail.com> wrote:
The tld-root zone sent out by ns0 is wrong (presumably?).From InterNIC:xn--vermgensberater-ctb. 172800 IN NS a.nic.xn--vermgensberater-ctb.
xn--vermgensberater-ctb. 172800 IN NS b.nic.xn--vermgensberater-ctb.
xn--vermgensberater-ctb. 172800 IN NS c.nic.xn--vermgensberater-ctb.
xn--vermgensberater-ctb. 172800 IN NS d.nic.xn--vermgensberater-ctb.
xn--vermgensberater-ctb. 86400 IN DS 22529 8 2 [...]
xn--vermgensberater-ctb. 86400 IN DS 60320 8 2 [...]
xn--vermgensberater-ctb. 86400 IN RRSIG DS 8 1 [...]
xn--vermgensberater-ctb. 86400 IN NSEC xn--vermgensberatung-pwb. NS DS RRSIG NSEC
xn--vermgensberater-ctb. 86400 IN RRSIG NSEC 8 1 [...]
a.nic.xn--vermgensberater-ctb. 172800 IN AAAA 2001:67c:13cc:0:0:0:1:105
b.nic.xn--vermgensberater-ctb. 172800 IN A 185.24.64.105
b.nic.xn--vermgensberater-ctb. 172800 IN AAAA 2a04:2b00:13cc:0:0:0:1:105
c.nic.xn--vermgensberater-ctb. 172800 IN A 212.18.248.105
c.nic.xn--vermgensberater-ctb. 172800 IN AAAA 2a04:2b00:13ee:0:0:0:0:105
d.nic.xn--vermgensberater-ctb. 172800 IN A 212.18.249.105
d.nic.xn--vermgensberater-ctb. 172800 IN AAAA 2a04:2b00:13ff:0:0:0:0:105From the decompiled tld-root from OpenNIC:verm\195\182gensberater. 172800 IN NS a.nic.verm\195\182gensberater.
verm\195\182gensberater. 172800 IN NS b.nic.verm\195\182gensberater.
verm\195\182gensberater. 172800 IN NS c.nic.verm\195\182gensberater.
verm\195\182gensberater. 172800 IN NS d.nic.verm\195\182gensberater.
verm\195\182gensberater. 86400 IN DS 22529 8 2 [...]
verm\195\182gensberater. 86400 IN DS 60320 8 2 [...]
verm\195\182gensberater. 86400 IN RRSIG DS [...]
verm\195\182gensberater. 3600 IN NSEC verm\195\182gensberatung. NS DS RRSIG NSEC
verm\195\182gensberater. 3600 IN RRSIG NSEC [...]
a.nic.verm\195\182gensberater. 172800 IN A 194.169.218.105
a.nic.verm\195\182gensberater. 172800 IN AAAA 2001:67c:13cc::1:105
b.nic.verm\195\182gensberater. 172800 IN A 185.24.64.105
b.nic.verm\195\182gensberater. 172800 IN AAAA 2a04:2b00:13cc::1:105
c.nic.verm\195\182gensberater. 172800 IN A 212.18.248.105
c.nic.verm\195\182gensberater. 172800 IN AAAA 2a04:2b00:13ee::105
d.nic.verm\195\182gensberater. 172800 IN A 212.18.249.105
d.nic.verm\195\182gensberater. 172800 IN AAAA 2a04:2b00:13ff::105On Fri, 20 Mar 2026 at 15:33, Renard Bleu <dnsadmin123456 AT proton.me> wrote:I just tried the punycode for Chinese TLD, and it does not work either.
I tried to dig using my own Tier-2 server:
root@ns1:/var/log# dig 中国. NS @127.0.0.1
; <<>> DiG 9.21.12 <<>> 中国. NS @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27307
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 2881db411d4cdd4c0100000069bd5961f8c9540f3e09ec67 (good)
;; QUESTION SECTION:
;中国. IN NS
;; AUTHORITY SECTION:
. 3600 IN SOA ns0.opennic.glue. hostmaster.opennic.glue. 2026032013 1800 900 604800 3600
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Fri Mar 20 10:27:45 EDT 2026
;; MSG SIZE rcvd: 129
root@ns1:/var/log# dig 中国. NS @8.8.8.8
; <<>> DiG 9.21.12 <<>> 中国. NS @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39006
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;中国. IN NS
;; ANSWER SECTION:
中国. 21600 IN NS k.dns.cn.
中国. 21600 IN NS l.dns.cn.
中国. 21600 IN NS h.dns.cn.
中国. 21600 IN NS i.dns.cn.
中国. 21600 IN NS j.dns.cn.
;; Query time: 231 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Fri Mar 20 10:28:11 EDT 2026
;; MSG SIZE rcvd: 125
root@ns1:/var/log# dig xn--fiqs8s. NS @127.0.0.1
; <<>> DiG 9.21.12 <<>> xn--fiqs8s. NS @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3671
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 68bfca3c0ef366d90100000069bd59bdf30a14406efffaf8 (good)
;; QUESTION SECTION:
;中国. IN NS
;; AUTHORITY SECTION:
. 3600 IN SOA ns0.opennic.glue. hostmaster.opennic.glue. 2026032013 1800 900 604800 3600
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Fri Mar 20 10:29:17 EDT 2026
;; MSG SIZE rcvd: 129
root@ns1:/var/log# dig xn--fiqs8s. NS @8.8.8.8
; <<>> DiG 9.21.12 <<>> xn--fiqs8s. NS @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35620
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;中国. IN NS
;; ANSWER SECTION:
中国. 21600 IN NS h.dns.cn.
中国. 21600 IN NS l.dns.cn.
中国. 21600 IN NS j.dns.cn.
中国. 21600 IN NS k.dns.cn.
中国. 21600 IN NS i.dns.cn.
;; Query time: 1231 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Fri Mar 20 10:29:27 EDT 2026
;; MSG SIZE rcvd: 125
Sent with Proton Mail secure email.
On Sunday, March 15th, 2026 at 09:25, Joel Strasser <strasser999 AT gmail.com> wrote:
> Can confirm. .eu in Cyrillic and Greek don't work.
>
> $ dig NS ею. @ns0.opennic.glue
>
> ; <<>> DiG 9.20.15-1~deb13u1-Debian <<>> NS ею. @ns0.opennic.glue
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6706
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 8d90b4599c0939680100000069b6b2b1aa08cdfec41fb4db (good)
> ;; QUESTION SECTION:
> ;ею. IN NS
>
> ;; AUTHORITY SECTION:
> . 3600 IN SOA ns0.opennic.glue. hostmaster.opennic.glue. 2026031512
> 1800 900 604800 3600
>
> ;; Query time: 40 msec
> ;; SERVER: 2a01:4f8:c2c:e789::#53(ns0.opennic.glue) (UDP)
> ;; WHEN: Sun Mar 15 14:22:57 CET 2026
> ;; MSG SIZE rcvd: 128
>
> $ dig NS ευ. @ns0.opennic.glue
>
> ; <<>> DiG 9.20.15-1~deb13u1-Debian <<>> NS ευ. @ns0.opennic.glue
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8591
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 4e67ed170970c0780100000069b6b2c071084b5fae86ee49 (good)
> ;; QUESTION SECTION:
> ;ευ. IN NS
>
> ;; AUTHORITY SECTION:
> . 3600 IN SOA ns0.opennic.glue. hostmaster.opennic.glue. 2026031512
> 1800 900 604800 3600
>
> ;; Query time: 56 msec
> ;; SERVER: 2a01:4f8:c2c:e789::#53(ns0.opennic.glue) (UDP)
> ;; WHEN: Sun Mar 15 14:23:12 CET 2026
> ;; MSG SIZE rcvd: 128
>
>
> On 15/03/2026 13:00, R4SAS wrote:
> > May be, but I can see that punycode didn't work too:
> >
> > ; <<>> DiG 9.18.44-1~deb12u1-Debian <<>> +nocomments NS xn--90ae.
> > @ns0.opennic.glue
> > ;; global options: +cmd
> > ;бг. IN NS
> > . 3600 IN SOA ns0.opennic.glue.
> > hostmaster.opennic.glue. 2026031510 1800 900 604800 3600
> > ;; Query time: 24 msec
> > ;; SERVER: 2a01:4f8:c17:fa94::#53(ns0.opennic.glue) (UDP)
> > ;; WHEN: Sun Mar 15 11:57:11 UTC 2026
> > ;; MSG SIZE rcvd: 127
> >
> > ; <<>> DiG 9.18.44-1~deb12u1-Debian <<>> +nocomments NS xn--90ae. @8.8.8.8
> > ;; global options: +cmd
> > ;бг. IN NS
> > бг. 21600 IN NS c.nic.bg.
> > бг. 21600 IN NS b.nic.bg.
> > бг. 21600 IN NS a.nic.bg.
> > бг. 21600 IN NS d.nic.bg.
> > бг. 21600 IN NS e.nic.bg.
> > бг. 21600 IN NS p.nic.bg.
> > ;; Query time: 168 msec
> > ;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
> > ;; WHEN: Sun Mar 15 11:57:05 UTC 2026
> > ;; MSG SIZE rcvd: 139
> >
> > "jose morales jr" djem AT hotmail.com – March 15, 2026 2:28 PM
> >
> > If not mistaken the dns holds the punycode version, the registry
> > holds both versions of and translates it, registry must have support
> > for the language encoding to translate on their root dns resolver.
> >
> >
> > Get Outlook for Android <https://aka.ms/AAb9ysg>
> >
> > *From:* discuss-request AT lists.opennicproject.org <discuss-
> > request AT lists.opennicproject.org> on behalf of R4SAS <r4sas AT i2pd.xyz>
> > *Sent:* Sunday, March 15, 2026 6:10:44 PM
> > *To:* discuss AT lists.opennicproject.org
> > <discuss AT lists.opennicproject.org>
> > *Subject:* [opennic-discuss] Punycode TLDs not works on OpenNIC root
> > servers
> >
> > Hello. I got message from one of users that all OpenNIC servers do
> > not work with ccTLDs, which must itself written with punycode.
> >
> > For example: I trying to use Bulgarian zone бг. with TIER0 and TIER1
> > servers and no one responds correctly.
> > Here you can see bg. SOA:
> > ; <<>> DiG 9.18.44-1~deb12u1-Debian <<>> +nocomments NS bg.
> > @ns2.opennic.glue
> > ;; global options: +cmd
> > ;bg. IN NS
> > bg. 172800 IN NS b.nic.bg.
> > bg. 172800 IN NS p.nic.bg.
> > bg. 172800 IN NS d.nic.bg.
> > bg. 172800 IN NS a.nic.bg.
> > bg. 172800 IN NS e.nic.bg.
> > bg. 172800 IN NS c.nic.bg.
> > a.nic.bg. 172800 IN A 192.92.129.99
> > a.nic.bg. 172800 IN AAAA 2a02:6a80::192:92:129:99
> > b.nic.bg. 172800 IN A 193.68.3.232
> > b.nic.bg. 172800 IN AAAA 2a02:6a80::193:68:3:232
> > c.nic.bg. 172800 IN A 193.68.99.99
> > c.nic.bg. 172800 IN AAAA 2a02:6a80::193:68:99:99
> > d.nic.bg. 172800 IN A 194.0.32.1
> > d.nic.bg. 172800 IN AAAA 2001:678:3c::1
> > e.nic.bg. 172800 IN A 185.143.80.1
> > e.nic.bg. 172800 IN AAAA 2a02:6a80:530e::1
> > p.nic.bg. 172800 IN A 204.61.216.110
> > p.nic.bg. 172800 IN AAAA 2001:500:14:6110:ad::1
> > ;; Query time: 148 msec
> > ;; SERVER: 2001:470:4212:10:0:100:53:10#53(ns2.opennic.glue) (UDP)
> > ;; WHEN: Sun Mar 15 11:02:17 UTC 2026
> > ;; MSG SIZE rcvd: 395
> >
> > and at same time бг.:
> > ; <<>> DiG 9.18.44-1~deb12u1-Debian <<>> +nocomments NS бг.
> > @ns0.opennic.glue
> > ;; global options: +cmd
> > ;бг. IN NS
> > . 3600 IN SOA ns0.opennic.glue.
> > hostmaster.opennic.glue. 2026031510 1800 900 604800 3600
> > ;; Query time: 32 msec
> > ;; SERVER: 2a01:4f8:c2c:e789::#53(ns0.opennic.glue) (UDP)
> > ;; WHEN: Sun Mar 15 11:02:39 UTC 2026
> > ;; MSG SIZE rcvd: 127
> > And here correct response from Google:
> > ; <<>> DiG 9.18.44-1~deb12u1-Debian <<>> +nocomments NS бг. @8.8.8.8
> > ;; global options: +cmd
> > ;бг. IN NS
> > бг. 21600 IN NS d.nic.bg.
> > бг. 21600 IN NS p.nic.bg.
> > бг. 21600 IN NS e.nic.bg.
> > бг. 21600 IN NS c.nic.bg.
> > бг. 21600 IN NS b.nic.bg.
> > бг. 21600 IN NS a.nic.bg.
> > ;; Query time: 124 msec
> > ;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
> > ;; WHEN: Sun Mar 15 11:08:09 UTC 2026
> > ;; MSG SIZE rcvd: 139
> >
> > Jeff, can you check what's going on with them?
> >
> >
> >
> >
> > --------
> > You are a member of the OpenNIC Discuss list.
> > You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org
>
>
>
> --------
> You are a member of the OpenNIC Discuss list.
> You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org
>
--------
You are a member of the OpenNIC Discuss list.
You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org
-
Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers,
Joel Strasser, 04/15/2026
-
Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers,
Renard Bleu, 04/15/2026
- Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers, Joel Strasser, 04/17/2026
-
Re: [opennic-discuss] Punycode TLDs not works on OpenNIC root servers,
Renard Bleu, 04/15/2026
Archive powered by MHonArc 2.6.24.