The .nz DNS Network is experiencing issues with DNSSEC chain validation due to a KSK rollover event affecting multiple domains including .co.nz, .org.nz, and .parliament.nz. The issue will resolve over time, but recursive server caches may need to be flushed to ensure proper DNS resolution. The .ac.nz domain was specifically affected by the KSK rollover event, and users encountering validation issues with this domain should flush their server caches. The situation is being monitored for any further issues.
https://status.internetnz.nz/incidents/gq1c6slz3198