Queries/Responses to a Signed Zone (2/2)

Example response to a non-existing name
    % dig +dnssec nope.sec.jinmei.org +norec

    (ANSWER SECTION is empty)

    ;; AUTHORITY SECTION:
    sec.jinmei.org.		1200	IN	SOA	ns.sec.jinmei.org. root.jinmei.org. 1 3600 600 2419200 1200
    sec.jinmei.org.		1200	IN	RRSIG	SOA 1 3 86400...
    sec.jinmei.org.		1200	IN	NSEC	foo.sec.jinmei.org. NS SOA RRSIG NSEC DNSKEY
    sec.jinmei.org.		1200	IN	RRSIG	NSEC 1 3 1200...
    foo.sec.jinmei.org.	1200	IN	NSEC	ns.sec.jinmei.org. A AAAA RRSIG NSEC
    foo.sec.jinmei.org.	1200	IN	RRSIG	NSEC 1 4 1200 ...

    ;; ADDITIONAL SECTION:
    (similar to previous example)