Error in dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr

[matsduf]

The zone dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr returns an NSEC record that does not match the A record in the answer section (jump2...). The NSEC record of jump1 points back to xx--oplk4f3fgh9lksdfhu7h--xx....

Or maybe this is on purpose. There is no specification of the test zones, or are there?

dig xx--oplk4f3fgh9lksdfhu7h--xx.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr @vps430861.ovh.net +mult +dns

(...)

;; ANSWER SECTION:
xx--oplk4f3fgh9lksdfhu7h--xx.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30	IN CNAME jump1.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
xx--oplk4f3fgh9lksdfhu7h--xx.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30	IN RRSIG CNAME 8 6 30 (
				20311205010101 20211005010101 18771 dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
				e1iISnNr7OYjilY43gb3CTfxeHbcG+Z3kmr+pYH29FMS
				K4H7yY6tECkSB4Y1+8IEjrzNLJpBJsrJJmKR0EU3KJhc
				tR1IZfA7+gAUDPH8pbeQ90df5ckaX3GUJMik8KyZE6+k
				7Y5U8JTt84auPFJomWVgfhxAu/HergnZ+NrEfyE= )
jump1.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30 IN CNAME jump2.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
jump1.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30 IN RRSIG CNAME 8 6 30 (
				20311205010101 20211005010101 18771 dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
				XNifMUH8OgCZwP0hfPhvo3kmqq1aG1Z4dPeOe8O9AQcI
				9ncPkWg4BB1DgAQkctOn3rLYEJy70QmbhTnW9+LlDyW6
				rtv75R7Zye3/P07np90exRkXkSRHPlwxZf42Xn3+MuMt
				8d9DAD/Euuam7TE620nrSs3fHP/l8Ika0rCzcKg= )
jump2.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30 IN A 1.1.1.1
jump2.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 30 IN RRSIG A 8 5 30 (
				20311205010101 20211005010101 18771 dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
				Lgcxd/6O8fA3hA4Hlrozl5ohS9Xg9tOvM/mWbh4WS1KZ
				bLZ4N+b5bufFUhpR2c3tjLGCsC1gw/PGIJmdKJDDQ6+9
				HQbe2iNO+Aa6t/9IroicJNtru5/aJ6cxHziEFlTEY3pp
				huLfPD/o+FtApGIWIBDKddAfVP3amuXV8zQKWoU= )

;; AUTHORITY SECTION:
jump1.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 5400 IN NSEC xx--oplk4f3fgh9lksdfhu7h--xx.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. CNAME RRSIG NSEC
jump1.dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr. 5400 IN RRSIG NSEC 8 6 5400 (
				20311205010101 20211005010101 18771 dnssec10-non-existent-domain-name-exists-03.zft-root.rd.nic.fr.
				Vh/3uALrUYIIhA0MuR3jNyXD1dqlhDyjkj0XzOOrMZ8Z
				Q5xKdb49yIEHj24Ar5vsQ2Igzk8lAkbHca6xLOznyh06
				SC41XLOTm5gzmj8KDlRtVdNP2aWreh7CnaKonwENy+Mo
				x/cYS6gB1q7+ccw/S4VzFUEs6AXuZMBUsGMHE1M= )

(...)