Apex domains cannot have CNAME records.
Question and response
Question
dig de.net. NS
Answer
de.net. 5 NS ns3.denic.de.
de.net. 5 NS ns2.denic.de.
de.net. 5 NS ns1.denic.de.
de.net. 5 NS ns4.denic.net.
Authority
The response has no authority records.
Additional
ns1.denic.de. 5 A 77.67.63.106
ns2.denic.de. 5 A 81.91.164.6
ns3.denic.de. 5 A 195.243.137.27
ns4.denic.net. 5 A 194.246.96.28
ns1.denic.de. 5 AAAA 2001:668:1f:11:0:0:0:106
ns2.denic.de. 5 AAAA 2a02:568:0:2:0:0:0:54
ns3.denic.de. 5 AAAA 2003:8:14:0:0:0:0:106
ns4.denic.net. 5 AAAA 2a02:568:fe02:0:0:0:0:1c
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0