➜  ~ dig f.nic.de @8.8.8.8

; <<>> DiG 9.20.22 <<>> f.nic.de @8.8.8.8
...
; EDE: 6 (DNSSEC Bogus): (RRSIG with malformed signature found for f.nic.de/a (keytag=43203))
;; QUESTION SECTION:
;f.nic.de.			IN	A

;; Query time: 21 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
...