Domain Data Object

Contents of the Data Object

The "Domain" data object comprises all the relevant administrative and technical data of a domain.

Processing Options

A domain can be registered and deleted or restored. Domain data can be updated.

With a TRANSIT request, you can transfer domain administration to DENIC.

Domain Data Objects: Syntax and Processing Rules

The table below informs about the syntax of the "Domain" data object.

Additionally, you will find rules you must observe when processing the "Domain" data object.

K/V Keyword XML Namespace and Element Occurrence
min - max
Type / Length Value Range Description Policy
Domain domain:handle 1 token
4 - 66
domain-rule This is the domain name. -
Domain-Ace domain:ace 0 - 1 token
4 - 66
domainace-rule This is the ACE form (ASCII Compatible Encoding) of the domain name. -
Holder domain:contact role="holder" 1 - 5 token
9 - 32
contact-rule This is the handle ID of the domain holder. Only Contacts of the PERSON or ORG type are permitted.

If several domain holders exist, all the handle IDs must be different.
GeneralRequest domain:contact role="generalrequest" 0-1 token
9 - 32
contact-rule Handle-Id of General Request Only contacts of the REQUEST types are permitted
AbuseContact domain:contact role="abusecontact" 0-1 token
9 - 32
contact-rule Handle-Id of Abuse Contact Only contacts of the REQUEST types are permitted.
Name server records
Nserver dnsentry:owner 2 - 13 token
1 - 254
nserver-rule If you use the k/v format: host name of name server

If you use the XML format: ACE form of domain
The name servers must meet the requirements of the Predelegation Checks (see DENIC-23).
- dnsentry:nameserver 0-13 token
1 - 254
nserver-rule This is the host name of the name server. For name servers whose host name is located within the domain for which they make available the DNS, you must state an IPv4 address. Indication of an IPv6 address is optional.
- dnsentry:address 0-13 token
7-39
ip-rule

IPv4 addresses according to RFC791 - INTERNET PROTOCOL DARPA INTERNET PROGRAM PROTOCOL SPECIFICATION in „dotted-quad“ format
This is the IPv4 address of the name server You must state the IPv4 address.
- dnsentry:addressV6 0-8 token
7-39
ip-rule

IPv6 addresses according to RFC4291 IP Version 6 Addressing Architectureas „preferred form“.
This is the IPv6 address of the name server You must state the IPv6 address.
Dnskey dnsentry:flags
dnsentry:protocol
dnsentry:algorithm
dnsentry:publicKey
0-20 token
30 - 999
dnskey-rule

Syntax according to RFC4034 - Resource Records for the DNS Security Extensions, DNSKEY as „presentation format“
Dnskey The following four values must be stated:
  • Flags: 256 or 257
  • Protocol: at present always 3
  • Numeric encoding of algorithm that is used:
    • 3 (DSA/SHA1)
    • 5 (RSA/SHA-1)
    • 6 (DSA-NSEC3-SHA1)
    • 7 (RSASHA1-NSEC3-SHA1)
    • 8 (RSA/SHA-256)
    • 10 (RSA/SHA-512)
    • 12 (GOST)
    • 13 (ECDSA-256)
    • 14 (ECDSA-512)
  • Public key: base64-encoded
  • You will find descriptions of the DNSSEC-specific Predelegation Checks in the documentation DENIC-23
Alternative: Nsentries
IN A record:
Nsentry dnsentry:owner 1 - 5 token
4 - 252
nsentry-rule This is a domain which shall be registered or a sub-domain of the domain to be registered, including the ".de" State in ACE form
dnsentry:address token
3 - 39
ip-rule This is the IPv4/IPv6 address of the host

Consecutive colons (::) as unspecified address are supported and resolved before starting the length check.
IPv4
addresses according to RFC791 - INTERNET PROTOCOL DARPA INTERNET PROGRAM PROTOCOL SPECIFICATION in „dotted-quad“ format

IPv6
addresses according to RFC4291 - IP Version 6 Addressing Architecture in „preferred form“
IN MX-record:
Nsentry dnsentry:owner 1 - 5 token
4 - 252
nsentry-rule This is the domain or the sub-domain: You may enter a wildcard (*.domain.de) when MX-records are used.

Length including the ".de"
State in ACE form
dnsentry:preference unsignedShort mxpref-rule This is the MX preference value. 0 = highest preference to 999 = lowest preference
dnsentry:exchange token
4 - 252
mx-rule This is the name of the relevant mail server.

Length including the ".de"
State in ACE form

. for a "Null MX" No Service Resource Record for Domains That Accept No Mail
Status domain:status 1 enumeration status-erule This is the status of the domain. Will be automatically assigned by the system.
Expire domain:expire 0 – 1 dateTime
25
date-rule This is the date, when a domain with the "failed" status is deleted. Will be automatically assigned by the system.