On Jun 4 2014, I wrote: [...]
This prompted me to wonder whether reverse lookups of other #.root-servers.net addresses work correctly. Alas, 2001:500:1::803f:235 for h.root-servers.net also gives SERVFAIL, but for a different reason. There is a DNSKEY/DS mismatch between 1.0.0.0.0.0.5.0.1.0.0.2.ip6.arpa and 5.0.1.0.0.2.ip6.arpa. See
http://dnssec-debugger.verisignlabs.com/1.0.0.0.0.0.5.0.1.0.0.2.ip6.arpa
Now fixed (by update of DS record in parent zone). E-mail to the SOA.rname address got a quick and accurate response. Back to waiting for reverse lookup of 2001:500:84::b to work... -- Chris Thompson University of Cambridge Information Services, Email: cet1@uis.cam.ac.uk Roger Needham Building, 7 JJ Thomson Avenue, Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom.