Blog article

“SOA serial number format is invalid” error overview:
The “SOA serial number format is invalid” error is a DNS issue.
It means the serial value in your SOA record doesn’t meet the format rules expected by your DNS provider. When that happens, DNS updates can fail to propagate.
If the serial number is wrong, secondary servers may keep serving stale data. That creates inconsistent DNS answers, delayed record changes, and more troubleshooting work.
Check your domain’s DNS posture with Sendmarc’s DNS lookup tool.
The SOA record stores important information about a DNS zone. One of its fields is the serial number.
The serial number acts as the zone’s version number. Secondary DNS servers check that value to decide whether they need to pull updates.
The SOA serial controls zone synchronization. If the value increases correctly, secondaries can detect the changes made and update accordingly.
If the serial value is invalid, some secondaries may keep serving the last correct version until the problem is fixed.
That can leave misconfigured records in place, creating operational issues such as email delivery failures.
There are multiple valid formats for an SOA serial number, although some DNS providers require a specific numbering convention.
The official SOA serial number formats include:
Date-based serials are easy to review during routine checks. Timestamps are common in automated environments. Simple incrementing integers work well when updates are manual and infrequent.
Note: The value must stay numeric, fit your provider’s rules, and always move forward.
Formatting problems are the most common cause of a “SOA serial number format is invalid” error. The serial number may contain letters, spaces, slashes, hyphens, or other separators.
A date-based value can also fail even when it looks numeric. The structure might not match the format your provider expects, or the date portion may be invalid.
Your SOA serial must stay within the size limits your DNS provider accepts. Problems usually happen when a date-based serial exceeds the allowed length, a Unix timestamp is too long, or a simple incrementing number passes the maximum supported value.
A serial number can also be operationally wrong even when the format looks clean. If the new value is lower than the previous one, secondaries won’t update.
Serial numbers are often auto-generated. A misconfigured or outdated DNS panel may generate an incorrect serial number, causing the update to fail.
Start by reviewing your provider’s dashboard or documentation to confirm whether it expects a date-based serial, a Unix timestamp, or a simple incrementing integer.
Do not assume that a format accepted by one platform will be accepted by another.
Query the current SOA record before you make a change. Then choose a new serial that’s higher than the current value and still matches your format.
If you use a date-based pattern such as 2026030601, increment the suffix when you make multiple changes on the same day.
Remove non-numeric characters. Fix malformed date values. Replace unusual custom formats with a clean numeric value your platform accepts.
Valid example:
2026030601
Invalid example:
2026-03-06-01 2026/03/06 v103
Keep the format simple and accurate.
After you publish the corrected value, query the DNS. You want to see the updated serial number. If a server still returns the old serial, the change may not have been completed.
Keep in mind that DNS propagation can take 24 to 48 hours, so some servers may continue returning the previous serial during that window.
If the serial history is inconsistent, reset it to a clean numeric value, then republish the zone and check the DNS again.
Sendmarc gives teams better visibility into the DNS records that affect email security, trust, and delivery.
That includes insight into SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT configurations across domains, senders, and subsidiaries. Better visibility helps teams spot risk sooner and reduce configuration drift.
This matters in larger environments. Multiple teams often touch the same domains, and small DNS mistakes can create bigger issues later.
Sendmarc helps reduce the manual effort required to monitor email-related DNS changes. It helps teams maintain stronger governance over DNS-based email authentication.
Get better visibility into your DNS-based email configuration, reduce manual troubleshooting, and keep critical email flowing.