DNSSEC Debugger - covid.cdc.gov

Domain Name:

Time: 2024-05-18 15:52:12 UTC

Analyzing DNSSEC problems for covid.cdc.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 4502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for covid.cdc.gov/A
	Received 620 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 620 octets ;; HEADER SECTION ;; id = 7921 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.cdc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 24579 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 28999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 779 octets ;; HEADER SECTION ;; id = 34833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240717141047 20240517141047 64280 gov. iD8OToTJk4eKquSvjKlWeQTBMd2B0um74COnZ8CB4OqHiG1DbyrIeMzA5grzJF4l7WZKYZBdRR5c GLKoAp0Z9IH84nMAzvBG3Ye1Op4sahloo8HfIPQuOzN5shsRmYisX7QygEtpUlZqsRzh6Drz4xbR SsZn0T2RhQiR5X2g+QT/bE4KUMbtrE7VZYvckjAx31DG+vA2jSMW03A1RsJn6ke/NKEuxt7JrSxe 5YfcqN5AHf/ioanKKswUroS0goYDc3mnajOtPeF9jiMl7DjwO3CjojDmeoDLzjzqp8PEUPSYzKfK mGHkSBZC/io5mn/vFRLl88Exi3Ptkk7ipIZ5pQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240717141047 20240517141047 64280 gov. iD8OToTJk4eKquSvjKlWeQTBMd2B0um74COnZ8CB4OqHiG1DbyrIeMzA5grzJF4l7WZKYZBdRR5c GLKoAp0Z9IH84nMAzvBG3Ye1Op4sahloo8HfIPQuOzN5shsRmYisX7QygEtpUlZqsRzh6Drz4xbR SsZn0T2RhQiR5X2g+QT/bE4KUMbtrE7VZYvckjAx31DG+vA2jSMW03A1RsJn6ke/NKEuxt7JrSxe 5YfcqN5AHf/ioanKKswUroS0goYDc3mnajOtPeF9jiMl7DjwO3CjojDmeoDLzjzqp8PEUPSYzKfK mGHkSBZC/io5mn/vFRLl88Exi3Ptkk7ipIZ5pQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.ns.gov for covid.cdc.gov/A
	Received 439 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 439 octets ;; HEADER SECTION ;; id = 8406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.cdc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cdc.gov. 10800 IN NS auth00.ns.uu.net. cdc.gov. 10800 IN NS auth100.ns.uu.net. cdc.gov. 10800 IN NS ns1.cdc.gov. cdc.gov. 10800 IN NS ns2.cdc.gov. cdc.gov. 10800 IN NS ns3.cdc.gov. cdc.gov. 3600 IN DS ( 54678 7 2 07ec5636200f4b89a3639d0c87b71ccdfd0cfd6c38a438bf603592833d3f392d ) cdc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519165212 20240517145212 10104 gov. OfVyFS7NfAgCMfUAfmoQ1Gv/z/nhFx5fOSa/HTaOULlXY8laGi9zHcC1HiXBvMlbeUJdOdNMMYPI x1yZ+Wt4VNMObUpR2k96oWrNQrhqW0K79fEEOHvvoGVMwVtmbkJv+wkXr7bW8E5U1oMxsP192Y52 CHllMbPOdvnoLZlnRHqxj4jgmQWM794Cyx2Xicc7ApdWvz2tpav4lJnxRQdG0w== ) ;; ADDITIONAL SECTION (4 records) ns1.cdc.gov. 3600 IN A 198.246.96.61 ns2.cdc.gov. 3600 IN A 198.246.96.92 ns3.cdc.gov. 3600 IN A 198.246.125.10 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for cdc.gov/DNSKEY
	Received 433 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 433 octets ;; HEADER SECTION ;; id = 4262 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cdc.gov. 10800 IN NS auth00.ns.uu.net. cdc.gov. 10800 IN NS auth100.ns.uu.net. cdc.gov. 10800 IN NS ns1.cdc.gov. cdc.gov. 10800 IN NS ns2.cdc.gov. cdc.gov. 10800 IN NS ns3.cdc.gov. cdc.gov. 3600 IN DS ( 54678 7 2 07ec5636200f4b89a3639d0c87b71ccdfd0cfd6c38a438bf603592833d3f392d ) cdc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519165212 20240517145212 10104 gov. OfVyFS7NfAgCMfUAfmoQ1Gv/z/nhFx5fOSa/HTaOULlXY8laGi9zHcC1HiXBvMlbeUJdOdNMMYPI x1yZ+Wt4VNMObUpR2k96oWrNQrhqW0K79fEEOHvvoGVMwVtmbkJv+wkXr7bW8E5U1oMxsP192Y52 CHllMbPOdvnoLZlnRHqxj4jgmQWM794Cyx2Xicc7ApdWvz2tpav4lJnxRQdG0w== ) ;; ADDITIONAL SECTION (4 records) ns1.cdc.gov. 3600 IN A 198.246.96.61 ns2.cdc.gov. 3600 IN A 198.246.96.92 ns3.cdc.gov. 3600 IN A 198.246.125.10 ;; { "EDNS-VERSION": 0 }
	Found child zone cdc.gov

cdc.gov

	Checking DS between gov and cdc.gov
	Query to b.ns.gov for cdc.gov/DS
	Received 279 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 279 octets ;; HEADER SECTION ;; id = 62154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cdc.gov. IN DS ;; ANSWER SECTION (2 records) cdc.gov. 3600 IN DS ( 54678 7 2 07ec5636200f4b89a3639d0c87b71ccdfd0cfd6c38a438bf603592833d3f392d ) cdc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519165212 20240517145212 10104 gov. OfVyFS7NfAgCMfUAfmoQ1Gv/z/nhFx5fOSa/HTaOULlXY8laGi9zHcC1HiXBvMlbeUJdOdNMMYPI x1yZ+Wt4VNMObUpR2k96oWrNQrhqW0K79fEEOHvvoGVMwVtmbkJv+wkXr7bW8E5U1oMxsP192Y52 CHllMbPOdvnoLZlnRHqxj4jgmQWM794Cyx2Xicc7ApdWvz2tpav4lJnxRQdG0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cdc.gov in the gov zone
	DS=54678/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`cdc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519165212 20240517145212 10104 gov. OfVyFS7NfAgCMfUAfmoQ1Gv/z/nhFx5fOSa/HTaOULlXY8laGi9zHcC1HiXBvMlbeUJdOdNMMYPI x1yZ+Wt4VNMObUpR2k96oWrNQrhqW0K79fEEOHvvoGVMwVtmbkJv+wkXr7bW8E5U1oMxsP192Y52 CHllMbPOdvnoLZlnRHqxj4jgmQWM794Cyx2Xicc7ApdWvz2tpav4lJnxRQdG0w== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=54678/SHA-256 is now in the chain-of-trust
	`cdc.gov. 3600 IN DS ( 54678 7 2 07ec5636200f4b89a3639d0c87b71ccdfd0cfd6c38a438bf603592833d3f392d )`
	Query to ns3.cdc.gov for cdc.gov/DNSKEY
	Received 922 bytes from 198.246.125.10
	;; Response received from [198.246.125.10] 922 octets ;; HEADER SECTION ;; id = 15527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cdc.gov. IN DNSKEY ;; ANSWER SECTION (4 records) cdc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAeBfHy8KqwWYAhD6qIYyftiC8LuFzPyqQp8Poqf72mUKsdK4/xg0kiogPcgDUOgZBAX7YhWc doERDZmPYW5C4CoQCJjvAvetXZTIZczpgXc3ElqbrWSrPYEZWQxBz3ze9PMRwoZHWARYefC+VXYE eekS+AGtr9/AsUmwWXsNSANT ) ; Key ID = 33957 cdc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAd6DF0xu23FOX5WvO4z+2FIO0tQq4rRaAejcfJSl7cQ8yMDXS7KCdujhW1xCj0H9oUu3fpnN 0+eJxDfsd2Mb41Y+FuIZMQIBGGoG1PtKFIYTEapwHCDCkYefSCb1FLlQC0oFm5+b9RnuWs0rww5z SjFMWmLyuJPUZDr6KvlhdRDIBKnDMJ66qrJl6Gex+2Y6/4vdAoP7m4u2GuDBmTi5HBFduK86DZ7i ezkd8y3g6w1h72obhmZqWNb5tFmQSrNbflr4G8gqHkpxEbLcjyGuqBMA5TqVPG04IkcHMcSmyw54 EbWFZ7h0QcAPNRPrw3s4sAE7FLZUqHv07wDTsIjbnus= ) ; Key ID = 54678 cdc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20240528032954 20240518032551 33957 cdc.gov. Ka373HizR1sFgUdpBdKdMa14YNmcXoO/FHf0H89NXkjXa/Xw0sUU4/QufXtdTyGseGthgrK19LPW 6kJsyRX/UYyhikf4ui98xT5JhnGyinbYMw79XSP5CHv2zRS9+iUNeygEEn9k0q3x9IabbW+Tvx1y XEEDoHAXzi7CMXhRx/4= ) cdc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20240528032954 20240518032551 54678 cdc.gov. XslFODT4elM9UqfMgrJmmwPDKsJvgZYfOABUzXh7bPz4tm+I1C4WC75PwW27n11A9wpsUBIVwhcS 0H43dRBSaJLpwqVQw8v7M5IINEoMQtyXcXlGznJE9Czy3bQIzLtv5jf+HUTInXxrfczcth6vNf48 C2NQMAIAHP0S4xCGEEderZZKl1hBmMsdFvPfO2AcTT2wKxyBiqw3quDxYGpO0rnaKjO/UuRxJ4lq tUI+pIgayOsiHn3GssUqXtCBwhQ2m+xOrpJ2lIsRJ1YTQV3hDkhOAqrj2+ssW/b1fLPijcXmuPOq 8rdYwh0irQFOXPyP58EU5SRggxRquCUarUoSIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cdc.gov
	`cdc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAeBfHy8KqwWYAhD6qIYyftiC8LuFzPyqQp8Poqf72mUKsdK4/xg0kiogPcgDUOgZBAX7YhWc doERDZmPYW5C4CoQCJjvAvetXZTIZczpgXc3ElqbrWSrPYEZWQxBz3ze9PMRwoZHWARYefC+VXYE eekS+AGtr9/AsUmwWXsNSANT ) ; Key ID = 33957`
	`cdc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAd6DF0xu23FOX5WvO4z+2FIO0tQq4rRaAejcfJSl7cQ8yMDXS7KCdujhW1xCj0H9oUu3fpnN 0+eJxDfsd2Mb41Y+FuIZMQIBGGoG1PtKFIYTEapwHCDCkYefSCb1FLlQC0oFm5+b9RnuWs0rww5z SjFMWmLyuJPUZDr6KvlhdRDIBKnDMJ66qrJl6Gex+2Y6/4vdAoP7m4u2GuDBmTi5HBFduK86DZ7i ezkd8y3g6w1h72obhmZqWNb5tFmQSrNbflr4G8gqHkpxEbLcjyGuqBMA5TqVPG04IkcHMcSmyw54 EbWFZ7h0QcAPNRPrw3s4sAE7FLZUqHv07wDTsIjbnus= ) ; Key ID = 54678`
	DNSKEY=54678/SEP is now in the chain-of-trust
	DS=54678/SHA-256 verifies DNSKEY=54678/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cdc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20240528032954 20240518032551 33957 cdc.gov. Ka373HizR1sFgUdpBdKdMa14YNmcXoO/FHf0H89NXkjXa/Xw0sUU4/QufXtdTyGseGthgrK19LPW 6kJsyRX/UYyhikf4ui98xT5JhnGyinbYMw79XSP5CHv2zRS9+iUNeygEEn9k0q3x9IabbW+Tvx1y XEEDoHAXzi7CMXhRx/4= )`
	`cdc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20240528032954 20240518032551 54678 cdc.gov. XslFODT4elM9UqfMgrJmmwPDKsJvgZYfOABUzXh7bPz4tm+I1C4WC75PwW27n11A9wpsUBIVwhcS 0H43dRBSaJLpwqVQw8v7M5IINEoMQtyXcXlGznJE9Czy3bQIzLtv5jf+HUTInXxrfczcth6vNf48 C2NQMAIAHP0S4xCGEEderZZKl1hBmMsdFvPfO2AcTT2wKxyBiqw3quDxYGpO0rnaKjO/UuRxJ4lq tUI+pIgayOsiHn3GssUqXtCBwhQ2m+xOrpJ2lIsRJ1YTQV3hDkhOAqrj2+ssW/b1fLPijcXmuPOq 8rdYwh0irQFOXPyP58EU5SRggxRquCUarUoSIg== )`
	RRSIG=33957 and DNSKEY=33957 verifies the DNSKEY RRset
	RRSIG=54678 and DNSKEY=54678/SEP verifies the DNSKEY RRset
	DNSKEY=33957 is now in the chain-of-trust
	Query to ns2.cdc.gov for covid.cdc.gov/A
	Received 241 bytes from 198.246.96.92
	;; Response received from [198.246.96.92] 241 octets ;; HEADER SECTION ;; id = 54993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.cdc.gov. 3600 IN CNAME covid.akam.cdc.gov. covid.cdc.gov. 3600 IN RRSIG ( CNAME 7 3 3600 20240526114424 20240516110631 33957 cdc.gov. iOx8n7THpq1P4XAvwd+WH5vhqxR0mfpUgWQpMVDoE8777jmOgnwRLlTyDMCV46Q19rmKAuAvn16v FVORyM/1XelHZwsnOATPGrRsJz4Xf5T2ywGiYdDUrCm6q8NSPB7d967uNWkXCa3SMHzII5sWeleu 9Yms+9HFOc/hYwtoMhA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.cdc.gov is authoritative for covid.cdc.gov
	Query to auth100.ns.uu.net for covid.cdc.gov/DNSKEY
	Received 633 bytes from 198.6.1.202
	;; Response received from [198.6.1.202] 633 octets ;; HEADER SECTION ;; id = 58092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.cdc.gov. IN DNSKEY ;; ANSWER SECTION (2 records) covid.cdc.gov. 3600 IN CNAME covid.akam.cdc.gov. covid.cdc.gov. 3600 IN RRSIG ( CNAME 7 3 3600 20240526114424 20240516110631 33957 cdc.gov. iOx8n7THpq1P4XAvwd+WH5vhqxR0mfpUgWQpMVDoE8777jmOgnwRLlTyDMCV46Q19rmKAuAvn16v FVORyM/1XelHZwsnOATPGrRsJz4Xf5T2ywGiYdDUrCm6q8NSPB7d967uNWkXCa3SMHzII5sWeleu 9Yms+9HFOc/hYwtoMhA= ) ;; AUTHORITY SECTION (9 records) akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 3600 IN DS ( 58588 10 2 38722fbe390f65d97a9dfed352ec01a8cb33abcbf195235572f2476191ee78e1 ) akam.cdc.gov. 3600 IN DS ( 22623 10 2 caa610278872fe62b7d8c65b000b2f192636d777385c981e002ee9b09c6449ba ) akam.cdc.gov. 3600 IN RRSIG ( DS 7 3 3600 20240526124109 20240516114316 33957 cdc.gov. dtB1T/t2Heq+sCkGztFr0KKrtZ0ZhbScjcP2t6PTuRTxgHjwA8qY861cSXBvQgxfJxmwOgL1kKrR jzmz9UAokSommNqxNbmcuWEo43DWGklqsf8ohw6c9Qar5i2be6MyHDF1y30wb8SzWjhfpVs7BE0P sgu9jwpLIC/LEgk+jyA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by cdc.gov zone
	covid.cdc.gov is a CNAME to covid.akam.cdc.gov
	Found 1 RRSIGs over CNAME RRset
	`covid.cdc.gov. 3600 IN RRSIG ( CNAME 7 3 3600 20240526114424 20240516110631 33957 cdc.gov. iOx8n7THpq1P4XAvwd+WH5vhqxR0mfpUgWQpMVDoE8777jmOgnwRLlTyDMCV46Q19rmKAuAvn16v FVORyM/1XelHZwsnOATPGrRsJz4Xf5T2ywGiYdDUrCm6q8NSPB7d967uNWkXCa3SMHzII5sWeleu 9Yms+9HFOc/hYwtoMhA= )`
	RRSIG=33957 and DNSKEY=33957 verifies the CNAME RRset
	Query to ns2.cdc.gov for covid.akam.cdc.gov/A
	ns2.cdc.gov returns REFUSED for covid.akam.cdc.gov/A
	Query to ns3.cdc.gov for covid.akam.cdc.gov/A
	ns3.cdc.gov returns REFUSED for covid.akam.cdc.gov/A
	Query to ns1.cdc.gov for covid.akam.cdc.gov/A
	ns1.cdc.gov returns REFUSED for covid.akam.cdc.gov/A
	Query to auth00.ns.uu.net for covid.akam.cdc.gov/A
	Received 439 bytes from 198.6.1.65
	;; Response received from [198.6.1.65] 439 octets ;; HEADER SECTION ;; id = 34131 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 3600 IN DS ( 22623 10 2 caa610278872fe62b7d8c65b000b2f192636d777385c981e002ee9b09c6449ba ) akam.cdc.gov. 3600 IN DS ( 58588 10 2 38722fbe390f65d97a9dfed352ec01a8cb33abcbf195235572f2476191ee78e1 ) akam.cdc.gov. 3600 IN RRSIG ( DS 7 3 3600 20240526124109 20240516114316 33957 cdc.gov. dtB1T/t2Heq+sCkGztFr0KKrtZ0ZhbScjcP2t6PTuRTxgHjwA8qY861cSXBvQgxfJxmwOgL1kKrR jzmz9UAokSommNqxNbmcuWEo43DWGklqsf8ohw6c9Qar5i2be6MyHDF1y30wb8SzWjhfpVs7BE0P sgu9jwpLIC/LEgk+jyA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth00.ns.uu.net for akam.cdc.gov/DNSKEY
	Received 433 bytes from 198.6.1.65
	;; Response received from [198.6.1.65] 433 octets ;; HEADER SECTION ;; id = 63726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 3600 IN DS ( 22623 10 2 caa610278872fe62b7d8c65b000b2f192636d777385c981e002ee9b09c6449ba ) akam.cdc.gov. 3600 IN DS ( 58588 10 2 38722fbe390f65d97a9dfed352ec01a8cb33abcbf195235572f2476191ee78e1 ) akam.cdc.gov. 3600 IN RRSIG ( DS 7 3 3600 20240526124109 20240516114316 33957 cdc.gov. dtB1T/t2Heq+sCkGztFr0KKrtZ0ZhbScjcP2t6PTuRTxgHjwA8qY861cSXBvQgxfJxmwOgL1kKrR jzmz9UAokSommNqxNbmcuWEo43DWGklqsf8ohw6c9Qar5i2be6MyHDF1y30wb8SzWjhfpVs7BE0P sgu9jwpLIC/LEgk+jyA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone akam.cdc.gov

akam.cdc.gov

	Checking DS between cdc.gov and akam.cdc.gov
	Query to ns2.cdc.gov for akam.cdc.gov/DS
	Received 304 bytes from 198.246.96.92
	;; Response received from [198.246.96.92] 304 octets ;; HEADER SECTION ;; id = 43630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN DS ;; ANSWER SECTION (3 records) akam.cdc.gov. 3600 IN DS ( 58588 10 2 38722fbe390f65d97a9dfed352ec01a8cb33abcbf195235572f2476191ee78e1 ) akam.cdc.gov. 3600 IN DS ( 22623 10 2 caa610278872fe62b7d8c65b000b2f192636d777385c981e002ee9b09c6449ba ) akam.cdc.gov. 3600 IN RRSIG ( DS 7 3 3600 20240526124109 20240516114316 33957 cdc.gov. dtB1T/t2Heq+sCkGztFr0KKrtZ0ZhbScjcP2t6PTuRTxgHjwA8qY861cSXBvQgxfJxmwOgL1kKrR jzmz9UAokSommNqxNbmcuWEo43DWGklqsf8ohw6c9Qar5i2be6MyHDF1y30wb8SzWjhfpVs7BE0P sgu9jwpLIC/LEgk+jyA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for akam.cdc.gov in the cdc.gov zone
	DS=58588/SHA-256 has algorithm RSASHA512
	DS=22623/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`akam.cdc.gov. 3600 IN RRSIG ( DS 7 3 3600 20240526124109 20240516114316 33957 cdc.gov. dtB1T/t2Heq+sCkGztFr0KKrtZ0ZhbScjcP2t6PTuRTxgHjwA8qY861cSXBvQgxfJxmwOgL1kKrR jzmz9UAokSommNqxNbmcuWEo43DWGklqsf8ohw6c9Qar5i2be6MyHDF1y30wb8SzWjhfpVs7BE0P sgu9jwpLIC/LEgk+jyA= )`
	RRSIG=33957 and DNSKEY=33957 verifies the DS RRset
	DS=58588/SHA-256 is now in the chain-of-trust
	DS=22623/SHA-256 is now in the chain-of-trust
	`akam.cdc.gov. 3600 IN DS ( 58588 10 2 38722fbe390f65d97a9dfed352ec01a8cb33abcbf195235572f2476191ee78e1 )`
	`akam.cdc.gov. 3600 IN DS ( 22623 10 2 caa610278872fe62b7d8c65b000b2f192636d777385c981e002ee9b09c6449ba )`
	Query to a8-67.akam.net for akam.cdc.gov/DNSKEY
	Received 913 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 913 octets ;; HEADER SECTION ;; id = 61598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (4 records) akam.cdc.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAcgRjYqAppxCXjD7DMJGQ3LC1KjSkvXHwOmcEg+YqnhPC8o36Ahb50wpEl5AGmhX6/CzqXzR /ZCQpG3iZo9AlBiWVy3alyMexrnDEI4KFmmBMz4GHG4ILpQuSnSRtG4CmH71Qi2HRXNALk3Irgmu ZSaYfK4sbO4lQcZz6sAgE5cbQfVb+g1yKMZA7oaDm8BE3U/Wqji6/IOvHxRal4ta6kWHdsItLqt4 6BWMtFaF3DNaHA1HyqaN26506Ud6RCwUbh3WpjSXliGwnpsX/t+nEGwaqv+0INQituXSWFfv7p60 NvF5CXlGflxtPsIUHLd/Fy2UYjpeaZ65ENhMNPjIYvE= ) ; Key ID = 58588 akam.cdc.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAdd3hzDeTGMDkHKHs2W2X+IInTY/6g4Vh5BVJIef7Fp4hGM63muKd8c9o+T98HuZFralc8eg 8eGQCTeONSiX6xYR7RInRHHqpYL+lIFd5N9etqk9xJEKjMA8PBSj3qSESEL2jjsFAdddptJch6wF pJ4ts+AIAlPyvWr1ajHldnmB ) ; Key ID = 49080 akam.cdc.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAaG2JLJrNutgFcL8MzxqY/T0ATEuIrT5bLUaYiX0T/YuQz79oWndTtnHxAcm/EQVJwx43IjY 0gwrKU7SveffU5Q0BHqcM4Q+R273wqy3zqJRPHjGH+ThfRz2xTJzTOZr2i1xvnNdLmB21Xl0/NoY PH9keL1uqPWsySAFyxQPBpIN ) ; Key ID = 64010 akam.cdc.gov. 7200 IN RRSIG ( DNSKEY 10 3 7200 20240520220441 20240517210441 58588 akam.cdc.gov. KrWPEvd/9+rxe+OfBubsD7dlnQBCYyRls546N8tz34CcXJcHr2m6Vaz69mZze+MM75Dbrnbh0+hi ZJnGRo3p2/w/EWBM3hgDDOk4cq4wKp0VLhc/0ZyhQaoDEJU+vdaYjqAqHCYAKX95XFLFNtQum6p0 30PdUYvxAgTDoivqmHUnNd8y09BLpzu2R/a/PYZYkF7QsG4KfQq64b8Lckw/lUf1YLnxyqCgnf5h Hd+oHtH+iJwpKw7Zfx5WdTr00aEvlyQfy1jrP3ddt4X7DPpvntXeG+pWk7wz02LGugB/iYEA+pAw Kz4ucd4QeYzqtSDbCqvG+KHd7OozYtFnX8CEkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for akam.cdc.gov
	`akam.cdc.gov. 7200 IN DNSKEY ( 257 3 10 AwEAAcgRjYqAppxCXjD7DMJGQ3LC1KjSkvXHwOmcEg+YqnhPC8o36Ahb50wpEl5AGmhX6/CzqXzR /ZCQpG3iZo9AlBiWVy3alyMexrnDEI4KFmmBMz4GHG4ILpQuSnSRtG4CmH71Qi2HRXNALk3Irgmu ZSaYfK4sbO4lQcZz6sAgE5cbQfVb+g1yKMZA7oaDm8BE3U/Wqji6/IOvHxRal4ta6kWHdsItLqt4 6BWMtFaF3DNaHA1HyqaN26506Ud6RCwUbh3WpjSXliGwnpsX/t+nEGwaqv+0INQituXSWFfv7p60 NvF5CXlGflxtPsIUHLd/Fy2UYjpeaZ65ENhMNPjIYvE= ) ; Key ID = 58588`
	`akam.cdc.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAdd3hzDeTGMDkHKHs2W2X+IInTY/6g4Vh5BVJIef7Fp4hGM63muKd8c9o+T98HuZFralc8eg 8eGQCTeONSiX6xYR7RInRHHqpYL+lIFd5N9etqk9xJEKjMA8PBSj3qSESEL2jjsFAdddptJch6wF pJ4ts+AIAlPyvWr1ajHldnmB ) ; Key ID = 49080`
	`akam.cdc.gov. 7200 IN DNSKEY ( 256 3 10 AwEAAaG2JLJrNutgFcL8MzxqY/T0ATEuIrT5bLUaYiX0T/YuQz79oWndTtnHxAcm/EQVJwx43IjY 0gwrKU7SveffU5Q0BHqcM4Q+R273wqy3zqJRPHjGH+ThfRz2xTJzTOZr2i1xvnNdLmB21Xl0/NoY PH9keL1uqPWsySAFyxQPBpIN ) ; Key ID = 64010`
	DNSKEY=58588/SEP is now in the chain-of-trust
	DS=58588/SHA-256 verifies DNSKEY=58588/SEP
	DS=22623/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`akam.cdc.gov. 7200 IN RRSIG ( DNSKEY 10 3 7200 20240520220441 20240517210441 58588 akam.cdc.gov. KrWPEvd/9+rxe+OfBubsD7dlnQBCYyRls546N8tz34CcXJcHr2m6Vaz69mZze+MM75Dbrnbh0+hi ZJnGRo3p2/w/EWBM3hgDDOk4cq4wKp0VLhc/0ZyhQaoDEJU+vdaYjqAqHCYAKX95XFLFNtQum6p0 30PdUYvxAgTDoivqmHUnNd8y09BLpzu2R/a/PYZYkF7QsG4KfQq64b8Lckw/lUf1YLnxyqCgnf5h Hd+oHtH+iJwpKw7Zfx5WdTr00aEvlyQfy1jrP3ddt4X7DPpvntXeG+pWk7wz02LGugB/iYEA+pAw Kz4ucd4QeYzqtSDbCqvG+KHd7OozYtFnX8CEkg== )`
	RRSIG=58588 and DNSKEY=58588/SEP verifies the DNSKEY RRset
	DNSKEY=49080 is now in the chain-of-trust
	DNSKEY=64010 is now in the chain-of-trust
	Query to a9-64.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 235 octets ;; HEADER SECTION ;; id = 15786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for covid.akam.cdc.gov
	Query to a5-66.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 538 octets ;; HEADER SECTION ;; id = 49321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a1-43.akam.net for akam.cdc.gov/SOA
	Received 560 bytes from 193.108.91.43
	;; Response received from [193.108.91.43] 560 octets ;; HEADER SECTION ;; id = 6379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN SOA ;; ANSWER SECTION (2 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; AUTHORITY SECTION (7 records) akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN RRSIG ( NS 10 3 86400 20240520220441 20240517210441 64010 akam.cdc.gov. Tk8wk+T4rNt7OywTWcrGT6IBOkrfnZGNmpUl+LunGG6k+3J+E1gqxfqeMHwDXOutGYKVX3TNqD+p /EIGdQsCf31HfnkDkTEOhQ9XgAnoy8CYX0mph6zkIZ1vYjte9lGOf1XVilG/rZvbmqkaP+abpat3 STTQlhXqlEMjp9vhrK4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for akam.cdc.gov/SOA
	Received 560 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 560 octets ;; HEADER SECTION ;; id = 7078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN SOA ;; ANSWER SECTION (2 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; AUTHORITY SECTION (7 records) akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN RRSIG ( NS 10 3 86400 20240520220441 20240517210441 64010 akam.cdc.gov. Tk8wk+T4rNt7OywTWcrGT6IBOkrfnZGNmpUl+LunGG6k+3J+E1gqxfqeMHwDXOutGYKVX3TNqD+p /EIGdQsCf31HfnkDkTEOhQ9XgAnoy8CYX0mph6zkIZ1vYjte9lGOf1XVilG/rZvbmqkaP+abpat3 STTQlhXqlEMjp9vhrK4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for akam.cdc.gov/SOA
	Received 560 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 560 octets ;; HEADER SECTION ;; id = 24583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN SOA ;; ANSWER SECTION (2 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; AUTHORITY SECTION (7 records) akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN RRSIG ( NS 10 3 86400 20240520220441 20240517210441 64010 akam.cdc.gov. Tk8wk+T4rNt7OywTWcrGT6IBOkrfnZGNmpUl+LunGG6k+3J+E1gqxfqeMHwDXOutGYKVX3TNqD+p /EIGdQsCf31HfnkDkTEOhQ9XgAnoy8CYX0mph6zkIZ1vYjte9lGOf1XVilG/rZvbmqkaP+abpat3 STTQlhXqlEMjp9vhrK4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a28-65.akam.net for akam.cdc.gov/SOA
	Received 560 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 560 octets ;; HEADER SECTION ;; id = 21840 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN SOA ;; ANSWER SECTION (2 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; AUTHORITY SECTION (7 records) akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN RRSIG ( NS 10 3 86400 20240520220441 20240517210441 64010 akam.cdc.gov. Tk8wk+T4rNt7OywTWcrGT6IBOkrfnZGNmpUl+LunGG6k+3J+E1gqxfqeMHwDXOutGYKVX3TNqD+p /EIGdQsCf31HfnkDkTEOhQ9XgAnoy8CYX0mph6zkIZ1vYjte9lGOf1XVilG/rZvbmqkaP+abpat3 STTQlhXqlEMjp9vhrK4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2-64.akam.net for akam.cdc.gov/SOA
	Received 560 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 560 octets ;; HEADER SECTION ;; id = 24202 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akam.cdc.gov. IN SOA ;; ANSWER SECTION (2 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; AUTHORITY SECTION (7 records) akam.cdc.gov. 86400 IN NS a5-66.akam.net. akam.cdc.gov. 86400 IN NS a2-64.akam.net. akam.cdc.gov. 86400 IN NS a8-67.akam.net. akam.cdc.gov. 86400 IN NS a28-65.akam.net. akam.cdc.gov. 86400 IN NS a9-64.akam.net. akam.cdc.gov. 86400 IN NS a1-43.akam.net. akam.cdc.gov. 86400 IN RRSIG ( NS 10 3 86400 20240520220441 20240517210441 64010 akam.cdc.gov. Tk8wk+T4rNt7OywTWcrGT6IBOkrfnZGNmpUl+LunGG6k+3J+E1gqxfqeMHwDXOutGYKVX3TNqD+p /EIGdQsCf31HfnkDkTEOhQ9XgAnoy8CYX0mph6zkIZ1vYjte9lGOf1XVilG/rZvbmqkaP+abpat3 STTQlhXqlEMjp9vhrK4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 235 octets ;; HEADER SECTION ;; id = 22141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

akam.cdc.gov

	Query to a1-43.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 193.108.91.43
	;; Response received from [193.108.91.43] 235 octets ;; HEADER SECTION ;; id = 64270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-43.akam.net is authoritative for covid.akam.cdc.gov
	Query to a2-64.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 538 octets ;; HEADER SECTION ;; id = 60838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a1-43.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 193.108.91.43
	;; Response received from [193.108.91.43] 235 octets ;; HEADER SECTION ;; id = 23875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

akam.cdc.gov

	Query to a5-66.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 235 octets ;; HEADER SECTION ;; id = 8435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for covid.akam.cdc.gov
	Query to a8-67.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 538 octets ;; HEADER SECTION ;; id = 3180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a5-66.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 235 octets ;; HEADER SECTION ;; id = 59047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

akam.cdc.gov

	Query to a2-64.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 235 octets ;; HEADER SECTION ;; id = 50168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a2-64.akam.net is authoritative for covid.akam.cdc.gov
	Query to a28-65.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 538 octets ;; HEADER SECTION ;; id = 31856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a2-64.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.174.64
	;; Response received from [95.100.174.64] 235 octets ;; HEADER SECTION ;; id = 11980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

akam.cdc.gov

	Query to a8-67.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 235 octets ;; HEADER SECTION ;; id = 61806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for covid.akam.cdc.gov
	Query to a8-67.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 538 octets ;; HEADER SECTION ;; id = 8100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a8-67.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 235 octets ;; HEADER SECTION ;; id = 45446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

akam.cdc.gov

	Query to a28-65.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 235 octets ;; HEADER SECTION ;; id = 46958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a28-65.akam.net is authoritative for covid.akam.cdc.gov
	Query to a28-65.akam.net for covid.akam.cdc.gov/DNSKEY
	Received 538 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 538 octets ;; HEADER SECTION ;; id = 39091 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN NSEC3 ( 1 0 1 89b35243fa596e70 87un0gkpvbu2c8stm6jonatp83ssk6hq A AAAA RRSIG ) 6tkcg27dthfi071cbov500el4nu4igm0.akam.cdc.gov. 3600 IN RRSIG ( NSEC3 10 4 3600 20240520220441 20240517210441 64010 akam.cdc.gov. d1eWiCPhNElQfw8S7JdbZyr7dj2cf3PkVMCgbJBbW8iWg1h7mt01u/iO/QUYMQlhtoH8d+bzwW8Y xtghlXLrDVqDDS/HCJD4g80vQvAvLmKJguaDuJ8O1L7i6XMwvKoZgDkGuDeGPflVYW8gizNhGcu4 bB1hFGXWlgmxhHvA2mo= ) akam.cdc.gov. 3600 IN SOA ( a1-43.akam.net. adhelpdsk.cdc.gov. 689965709 ;serial 300 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) akam.cdc.gov. 3600 IN RRSIG ( SOA 10 3 3600 20240520220441 20240517210441 64010 akam.cdc.gov. E9WhvCwxmsBTD3fkEw+qqwXlOUIEN6V8Tfmt2SytXfQb7bp/H387Xq2VL6cEG0YtMJE7OqZbpGOf AuS0rrC8SDdfoMnp/RaHYc7DiJGRvxZf7tIVg7Nf6ABb6mcDLKfajMSu/7kVauzLPR5bVl4136t4 dTlq0F2AzDyisl9RTDY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by akam.cdc.gov zone
	Query to a28-65.akam.net for covid.akam.cdc.gov/A
	Received 235 bytes from 95.100.173.65
	;; Response received from [95.100.173.65] 235 octets ;; HEADER SECTION ;; id = 52847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; covid.akam.cdc.gov. IN A ;; ANSWER SECTION (2 records) covid.akam.cdc.gov. 20 IN A 23.32.174.19 covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	covid.akam.cdc.gov A RR has value 23.32.174.19
	Found 1 RRSIGs over A RRset
	`covid.akam.cdc.gov. 20 IN RRSIG ( A 10 4 20 20240520220441 20240517210441 64010 akam.cdc.gov. F/zWvY3LrV/GIEaKB+f0DlS31m4rVfLv2XetHUHtOafawwMv8AFmdu+Ag2YR15q83P0amKHM+qEl xvM1a3dNcHJJ8mpssqFFQA+1yZGuJD+rhJkMfN+yBmROu3V2eWha9n1hRsC+yVkEyUG0HY55QHYJ dhZKUwL6Y6IIjgVu38w= )`
	RRSIG=64010 and DNSKEY=64010 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test covid.cdc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: