RDAP registration card (dates, registrar, statuses, nameservers, DNSSEC) + derived flags + inline DNS summary — cached ≤24h