DNSSEC Debugger - genworth.com

Domain Name:

Time: 2024-04-20 12:52:12 UTC

Analyzing DNSSEC problems for genworth.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Timeout querying e.root-servers.net/2001:500:a8:0:0:0:0:e for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 41313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240502000000 20240411000000 20326 . jgdXeXOooaQq8CF7wOdxDQRw57w6PR6I+oFEpQkFukUHTLoZRKQzw81yLbwtZHOJ0hcKOG409EWl JLMg0XJtAEaugtMdpcD3lxsjuDE3IEujNgd2uPSjgapuPYWwDbMOL9LhmxAWWIvtKvR0SCGXWXhK +5UOOXOoaVJmFcYEk4jBveBIjR2Z23SMk44DwNXoTbhvUUsSRL1OEr+0OOG4ofydE7L6EqOMkApz QDCQJsTlSSWCHnYsBYMoFdKMVEyjezA5zEaIUWRsxhcbvxW7JltNO8A6lvstp5zEljYcqIo0dUFU 5TLG55RdHNtm0BJuWjCmwKy/nhXw/H2QhKibAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240502000000 20240411000000 20326 . jgdXeXOooaQq8CF7wOdxDQRw57w6PR6I+oFEpQkFukUHTLoZRKQzw81yLbwtZHOJ0hcKOG409EWl JLMg0XJtAEaugtMdpcD3lxsjuDE3IEujNgd2uPSjgapuPYWwDbMOL9LhmxAWWIvtKvR0SCGXWXhK +5UOOXOoaVJmFcYEk4jBveBIjR2Z23SMk44DwNXoTbhvUUsSRL1OEr+0OOG4ofydE7L6EqOMkApz QDCQJsTlSSWCHnYsBYMoFdKMVEyjezA5zEaIUWRsxhcbvxW7JltNO8A6lvstp5zEljYcqIo0dUFU 5TLG55RdHNtm0BJuWjCmwKy/nhXw/H2QhKibAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for genworth.com/A
	Received 1172 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1172 octets ;; HEADER SECTION ;; id = 4027 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240503050000 20240420040000 5613 . hHOdhchDJKzK4It8hJkTn+jOnGylFD6LMZW5u/4EgEadhBoQwD6NeqS3xjzAnvaY4CtipIaIhclM FUeEppCmMWBtltYWMUaSROzerxdg2vRrN/sYshsltAbbUqljqnCNmhg+bEGd4S1vSkRfzPQZvenx iJa2SSnY7dR7T2uD+xAss5S+mfkCeYNDczhrwPFiI+LM6IB5/V9sWFT9HbV19BTBlTrXBYLKaDJz nvCIw3yxbyIy5t4yFAiOJeP4oOm7fp+bNoiXnjAbNhXNaqtE5/wK+3XXy5agLEUnjThqmpe5lS31 t6v3D5py9q+kgl6ssKL8b/eD7Wk5hSBNgH7G1A== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 42819 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240503050000 20240420040000 5613 . hHOdhchDJKzK4It8hJkTn+jOnGylFD6LMZW5u/4EgEadhBoQwD6NeqS3xjzAnvaY4CtipIaIhclM FUeEppCmMWBtltYWMUaSROzerxdg2vRrN/sYshsltAbbUqljqnCNmhg+bEGd4S1vSkRfzPQZvenx iJa2SSnY7dR7T2uD+xAss5S+mfkCeYNDczhrwPFiI+LM6IB5/V9sWFT9HbV19BTBlTrXBYLKaDJz nvCIw3yxbyIy5t4yFAiOJeP4oOm7fp+bNoiXnjAbNhXNaqtE5/wK+3XXy5agLEUnjThqmpe5lS31 t6v3D5py9q+kgl6ssKL8b/eD7Wk5hSBNgH7G1A== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to l.root-servers.net for com/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 43342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240503050000 20240420040000 5613 . hHOdhchDJKzK4It8hJkTn+jOnGylFD6LMZW5u/4EgEadhBoQwD6NeqS3xjzAnvaY4CtipIaIhclM FUeEppCmMWBtltYWMUaSROzerxdg2vRrN/sYshsltAbbUqljqnCNmhg+bEGd4S1vSkRfzPQZvenx iJa2SSnY7dR7T2uD+xAss5S+mfkCeYNDczhrwPFiI+LM6IB5/V9sWFT9HbV19BTBlTrXBYLKaDJz nvCIw3yxbyIy5t4yFAiOJeP4oOm7fp+bNoiXnjAbNhXNaqtE5/wK+3XXy5agLEUnjThqmpe5lS31 t6v3D5py9q+kgl6ssKL8b/eD7Wk5hSBNgH7G1A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20240503050000 20240420040000 5613 . hHOdhchDJKzK4It8hJkTn+jOnGylFD6LMZW5u/4EgEadhBoQwD6NeqS3xjzAnvaY4CtipIaIhclM FUeEppCmMWBtltYWMUaSROzerxdg2vRrN/sYshsltAbbUqljqnCNmhg+bEGd4S1vSkRfzPQZvenx iJa2SSnY7dR7T2uD+xAss5S+mfkCeYNDczhrwPFiI+LM6IB5/V9sWFT9HbV19BTBlTrXBYLKaDJz nvCIw3yxbyIy5t4yFAiOJeP4oOm7fp+bNoiXnjAbNhXNaqtE5/wK+3XXy5agLEUnjThqmpe5lS31 t6v3D5py9q+kgl6ssKL8b/eD7Wk5hSBNgH7G1A== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to k.gtld-servers.net for com/DNSKEY
	Received 371 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 371 octets ;; HEADER SECTION ;; id = 37835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (4 records) com. 86400 IN DNSKEY ( 256 3 13 5i9qjJgyH+9MBz7VO269/srLQB/xRRllyUoVq8oLBZshPe4CGzDSFGnXAM3L/QPzB9ULpJuuy7jc xmBZ5Ebo7A== ) ; Key ID = 4534 com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718 com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240502140235 20240417135735 19718 com. 7UYLPSeTNK3am73eyiPf95VBfrV+dbX8yvYwMYZMokmUKhITXuEXVW3AFfasZ3YqMlkGmdutRnZd 2bAFnSOd4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 13 5i9qjJgyH+9MBz7VO269/srLQB/xRRllyUoVq8oLBZshPe4CGzDSFGnXAM3L/QPzB9ULpJuuy7jc xmBZ5Ebo7A== ) ; Key ID = 4534`
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240502140235 20240417135735 19718 com. 7UYLPSeTNK3am73eyiPf95VBfrV+dbX8yvYwMYZMokmUKhITXuEXVW3AFfasZ3YqMlkGmdutRnZd 2bAFnSOd4g== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=4534 is now in the chain-of-trust
	DNSKEY=956 is now in the chain-of-trust
	Query to k.gtld-servers.net for genworth.com/A
	Received 244 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 244 octets ;; HEADER SECTION ;; id = 2593 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) genworth.com. 172800 IN NS ns1.genworth.com. genworth.com. 172800 IN NS ns2.genworth.com. genworth.com. 86400 IN DS 3756 7 1 a5368cb00f8a3085945a4b22560d2ffa518a3957 genworth.com. 86400 IN RRSIG ( DS 13 2 86400 20240424052339 20240417041339 956 com. TLtDNthD31b/pbqFvgaNjRkjKpIUjC8NsI3AQM26OGAK0pzfeo7MI0DxOVh4aVpyxDAE9JnRW4yD eOjjSjm3lQ== ) ;; ADDITIONAL SECTION (3 records) ns1.genworth.com. 172800 IN A 206.83.168.21 ns2.genworth.com. 172800 IN A 206.83.160.21 ;; { "EDNS-VERSION": 0 }
	Query to f.gtld-servers.net for genworth.com/DNSKEY
	Received 244 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 244 octets ;; HEADER SECTION ;; id = 57108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) genworth.com. 172800 IN NS ns1.genworth.com. genworth.com. 172800 IN NS ns2.genworth.com. genworth.com. 86400 IN DS 3756 7 1 a5368cb00f8a3085945a4b22560d2ffa518a3957 genworth.com. 86400 IN RRSIG ( DS 13 2 86400 20240424052339 20240417041339 956 com. TLtDNthD31b/pbqFvgaNjRkjKpIUjC8NsI3AQM26OGAK0pzfeo7MI0DxOVh4aVpyxDAE9JnRW4yD eOjjSjm3lQ== ) ;; ADDITIONAL SECTION (3 records) ns1.genworth.com. 172800 IN A 206.83.168.21 ns2.genworth.com. 172800 IN A 206.83.160.21 ;; { "EDNS-VERSION": 0 }
	Found child zone genworth.com

genworth.com

	Checking DS between com and genworth.com
	Query to k.gtld-servers.net for genworth.com/DS
	Received 1071 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 1071 octets ;; HEADER SECTION ;; id = 44233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN DS ;; ANSWER SECTION (2 records) genworth.com. 86400 IN DS 3756 7 1 a5368cb00f8a3085945a4b22560d2ffa518a3957 genworth.com. 86400 IN RRSIG ( DS 13 2 86400 20240424052339 20240417041339 956 com. TLtDNthD31b/pbqFvgaNjRkjKpIUjC8NsI3AQM26OGAK0pzfeo7MI0DxOVh4aVpyxDAE9JnRW4yD eOjjSjm3lQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20240427042457 20240420031457 956 com. gVHV1O481AF9m97VPkS8ttEfbSr3Zemlf59/Nfws7Oy6Q9Zm7aOzUIV/q0N0bGQJsRQH/dEAuXAC VGg0Ft/vew== ) ;; ADDITIONAL SECTION (27 records) c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for genworth.com in the com zone
	DS=3756/SHA-1 uses a deprecated digest algorithm
	DS=3756/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`genworth.com. 86400 IN RRSIG ( DS 13 2 86400 20240424052339 20240417041339 956 com. TLtDNthD31b/pbqFvgaNjRkjKpIUjC8NsI3AQM26OGAK0pzfeo7MI0DxOVh4aVpyxDAE9JnRW4yD eOjjSjm3lQ== )`
	RRSIG=956 and DNSKEY=956 verifies the DS RRset
	DS=3756/SHA-1 is now in the chain-of-trust
	`genworth.com. 86400 IN DS 3756 7 1 a5368cb00f8a3085945a4b22560d2ffa518a3957`
	Query to ns1.genworth.com for genworth.com/DNSKEY
	Received 1001 bytes from 206.83.168.21
	;; Response received from [206.83.168.21] 1001 octets ;; HEADER SECTION ;; id = 47390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN DNSKEY ;; ANSWER SECTION (6 records) genworth.com. 86400 IN DNSKEY ( 257 3 7 AwEAAeQ6zJNb/l6XUGIQEK0nYnBR+KETl8PEmYrXa3hQyWm+NPpDudfmVaI0/D/FSlQjtZlGzkku A4HDzIzg9TCzI4vZYBQ59peyVFwvgk57cS1L37kfB07A+gbsqLEIuEesimkknIEZV551ez131tXZ j/REIexTIFUpz1twqTFy5RmP ) ; Key ID = 3756 genworth.com. 86400 IN DNSKEY ( 256 3 7 AwEAAa5C+wZO2zH2Hm9KkOuZX+M8ZX6zqXzdSticK2AW9w0fJ9GLVh1XY5hFCbMte4sD3GZAmgwA ZJVsBRkYhvk9zArbFAG/bWFcO8bid8GcB2T1eBGxmp79QKa+DOCshK4ANyYafyi8rqllybp0Zgk9 0WPmdGx7IbEmBHOGMGS2FfYf ) ; Key ID = 38447 genworth.com. 86400 IN DNSKEY ( 256 3 7 AwEAAcd0L6m51trkoh8jyULHAA1hqDODus90y+OThrzy3WadhO223s3WnuIXdszMhlonlH5t1pCG AFWR1CKNKtAsJkbXZCjuokDSfxyn5w7diB2UphS3Gy35s0ze6Fmrjyfox3KzL7lUVSoksg/UjEn2 Z13Ia0Z3qXt6kP9x59oMWggH ) ; Key ID = 53645 genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 3756 genworth.com. OLhsV791G2qHM20T8kJRNkqI0gevrg14DVkdmjmj3ipUK74qx/u0SRfNHqt8g4XqA1TACdILJtR/ RJFugib3JxZ4iG8/0kMjQdOWAQb1KSnP/9bcQTAxegXCP8AbDiLKCS4DSxxdSXQNjpcJcghJT+gv XfXKBAWm/MLyEluAkQk= ) genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 38447 genworth.com. FS1deI+Qs25paXrh+Cr3kxFzU6UId3xsHU2s2N73xnED3NVlzHMI2MZUpEGahodAaUoROAZDe5EX 6lRMZNUYnRiOTq2tcZLN8s4AmdqPTBciWgwSqF3Q1gbPaOJXA8tvUo7bcVd6mBUMiA7Qcq29he4y 9GZ5Nz3C4Qo6IWFTUUU= ) genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 53645 genworth.com. lmvnnSqaxxed2/1+q7GZUjOGta3zJs3or0LZYX5QK5wykiHZQwTQWNfTtVqScJRSmXPPK6cFilqr ms9U27YU6yBHap/J9ZNM2UDDC+L0oK3QAosyKPQeMDfAOYT63BJZBvTJrf6FOCbrblEeeRl2gXqp r/kgtGS3BYFdXwO9pi0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for genworth.com
	`genworth.com. 86400 IN DNSKEY ( 257 3 7 AwEAAeQ6zJNb/l6XUGIQEK0nYnBR+KETl8PEmYrXa3hQyWm+NPpDudfmVaI0/D/FSlQjtZlGzkku A4HDzIzg9TCzI4vZYBQ59peyVFwvgk57cS1L37kfB07A+gbsqLEIuEesimkknIEZV551ez131tXZ j/REIexTIFUpz1twqTFy5RmP ) ; Key ID = 3756`
	`genworth.com. 86400 IN DNSKEY ( 256 3 7 AwEAAa5C+wZO2zH2Hm9KkOuZX+M8ZX6zqXzdSticK2AW9w0fJ9GLVh1XY5hFCbMte4sD3GZAmgwA ZJVsBRkYhvk9zArbFAG/bWFcO8bid8GcB2T1eBGxmp79QKa+DOCshK4ANyYafyi8rqllybp0Zgk9 0WPmdGx7IbEmBHOGMGS2FfYf ) ; Key ID = 38447`
	`genworth.com. 86400 IN DNSKEY ( 256 3 7 AwEAAcd0L6m51trkoh8jyULHAA1hqDODus90y+OThrzy3WadhO223s3WnuIXdszMhlonlH5t1pCG AFWR1CKNKtAsJkbXZCjuokDSfxyn5w7diB2UphS3Gy35s0ze6Fmrjyfox3KzL7lUVSoksg/UjEn2 Z13Ia0Z3qXt6kP9x59oMWggH ) ; Key ID = 53645`
	DNSKEY=3756/SEP is now in the chain-of-trust
	DS=3756/SHA-1 verifies DNSKEY=3756/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 3756 genworth.com. OLhsV791G2qHM20T8kJRNkqI0gevrg14DVkdmjmj3ipUK74qx/u0SRfNHqt8g4XqA1TACdILJtR/ RJFugib3JxZ4iG8/0kMjQdOWAQb1KSnP/9bcQTAxegXCP8AbDiLKCS4DSxxdSXQNjpcJcghJT+gv XfXKBAWm/MLyEluAkQk= )`
	`genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 38447 genworth.com. FS1deI+Qs25paXrh+Cr3kxFzU6UId3xsHU2s2N73xnED3NVlzHMI2MZUpEGahodAaUoROAZDe5EX 6lRMZNUYnRiOTq2tcZLN8s4AmdqPTBciWgwSqF3Q1gbPaOJXA8tvUo7bcVd6mBUMiA7Qcq29he4y 9GZ5Nz3C4Qo6IWFTUUU= )`
	`genworth.com. 86400 IN RRSIG ( DNSKEY 7 2 86400 20240427003929 20240419233929 53645 genworth.com. lmvnnSqaxxed2/1+q7GZUjOGta3zJs3or0LZYX5QK5wykiHZQwTQWNfTtVqScJRSmXPPK6cFilqr ms9U27YU6yBHap/J9ZNM2UDDC+L0oK3QAosyKPQeMDfAOYT63BJZBvTJrf6FOCbrblEeeRl2gXqp r/kgtGS3BYFdXwO9pi0= )`
	RRSIG=3756 and DNSKEY=3756/SEP verifies the DNSKEY RRset
	RRSIG=38447 and DNSKEY=38447 verifies the DNSKEY RRset
	RRSIG=53645 and DNSKEY=53645 verifies the DNSKEY RRset
	DNSKEY=38447 is now in the chain-of-trust
	DNSKEY=53645 is now in the chain-of-trust
	Query to ns1.genworth.com for genworth.com/A
	Received 401 bytes from 206.83.168.21
	;; Response received from [206.83.168.21] 401 octets ;; HEADER SECTION ;; id = 38853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (3 records) genworth.com. 30 IN A 206.83.162.175 genworth.com. 30 IN RRSIG ( A 7 2 30 20240426003943 20240418233943 38447 genworth.com. ZG4NDn+W9r9mIg6Li7K7OikNpMZ131i6EX5ZO2xyWoi2l9RsHeSLPiMyC12ieM0DZUlpeq7qF6CQ JWjowsr6S+0EOUwU4sX6vy5As32Qpek14tbd7zAI/j2/AgZPSxDH+l87ZVxki6rheJAMIZd47wwh NaGh57+5hT6kyNsy+RQ= ) genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003931 20240419233931 53645 genworth.com. f2KT7Jf62mga4LZWqIzeuvxnVCqKECltkaOxhCtNPgbmV+L1X4wm/ZOS/1bMclOsLjBpyQymRgJ+ Jmh264AKxPxs+XVNrNzaaQ4Gd/8B1su24Rorc3Hx+tWoH8KhpMXKinu1jhY3IqqSpsRa2Aa/BJZg 9Omt4OTOtDD73AtXHec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.genworth.com is authoritative for genworth.com
	Found RRSIG signed by genworth.com zone
	Query to ns2.genworth.com for genworth.com/SOA
	Received 1532 bytes from 206.83.160.21
	;; Response received from [206.83.160.21] 1532 octets ;; HEADER SECTION ;; id = 22211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN SOA ;; ANSWER SECTION (3 records) genworth.com. 300 IN SOA ( ns1.genworth.com. hostmaster.genworth.com. 2024040803 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) genworth.com. 300 IN RRSIG ( SOA 7 2 300 20240424170437 20240417160437 38447 genworth.com. IOtoS9Clx6U3IwH8nSspRVY+OMbkA0n/LiTcAbgbUU+XU/ApaR0mgyE+WfU3ou3Hb1iYfhFds3nd 2CULB8XMakxG+t6cFnA0CKaCBqqFLjoFXu/SdPucxcMRTQWHLCW+Dg4d7u6yqjrtXs9zy3NOVR5o uGN8Giu0+4rBF5xuyZM= ) genworth.com. 300 IN RRSIG ( SOA 7 2 300 20240427004110 20240419234110 53645 genworth.com. T2lajanj1EBdnhVboVgF3yKtYiPuaw5cnv9PQEjmksiniji+GDSCODq5KMk96cEwsPYqMSKxyXke Df+zQbWMy9cWLICSFCRv99jY4ywaOi+gA/wU4H1Mcg7/Z3mk9Den+gr3ri1FXS0JxKR2ACZEAi5s fbGGSHk9puIDSFmpioA= ) ;; AUTHORITY SECTION (4 records) genworth.com. 300 IN NS ns1.genworth.com. genworth.com. 300 IN NS ns2.genworth.com. genworth.com. 300 IN RRSIG ( NS 7 2 300 20240426003922 20240418233922 38447 genworth.com. X5xWz6qxyTWo5gG2PU1vcHpvM6sdSreWvQxQoPknKZsexsS9cRX67ZzR5mJ+JfLKo1BaH+k4JJzc OI7PqY3Rg0hpGSWuQJ30CQyK4Jnxp7xGCTjKGsdJJhDl+T5Teb+dDj0zz7UgaJv1OUuEFWQJ7N9/ YydZfwn7EWDsjPYJiLY= ) genworth.com. 300 IN RRSIG ( NS 7 2 300 20240427003919 20240419233919 53645 genworth.com. DnUg6TWoeAJcINTni3uZkyhbj2ZNNnFE1UNR16UYYvCMhy000+edBl6RcKnCmCf9KKv+YYCafCyU izRqFoQjQrtvf+NwAYfaaRzsKt6Om1j7uOEcitjQxqmQiTY7xMWTsj0EiekQCHLhyfmQiEKTwgTa 5SaYfQ4eOI+79tT1RaM= ) ;; ADDITIONAL SECTION (7 records) ns1.genworth.com. 300 IN A 206.83.168.21 ns1.genworth.com. 300 IN RRSIG ( A 7 3 300 20240426003922 20240418233922 38447 genworth.com. Q5vaZR4aJJ006dxpb3bXXBscF8Okr7+j4Vk2woCxccy600s0VoIaQiJ5t0+kb4drdML0+0291uju qHJcJW4s6UYL6SbcdoPOr58LmrBvzv5CnaAXSmpDsDi4zoxGkGo5T2XFcPoyauzr5HqHo2BH+yon dbDPQ1SB0a6F+qLYBBQ= ) ns1.genworth.com. 300 IN RRSIG ( A 7 3 300 20240427003919 20240419233919 53645 genworth.com. SNEut05KESRDQr2wc9lyWi/E0aMnuvyuDMpyJDYUQVyTEDR3Nb5ZHAdjT0rZI33UihntPb2ah0lW cTlaaQY3hbNtKppAXAiHOAkhTu8/wdfHSfXY+3Um2gzf/VV3Bk5WhXfkPymmIQdXEYvzbKwENzeb Csz/CSWMkRReeQwrFFs= ) ns2.genworth.com. 300 IN A 206.83.160.21 ns2.genworth.com. 300 IN RRSIG ( A 7 3 300 20240426003922 20240418233922 38447 genworth.com. rH/cfkFOkNE/ZDfV0tuUbnJgqGu5AVky0oJTkTSxLiBrmtluLNRtvtgnBU52ctJdh/3oId0g0Nuq Cv5ttNM5lgfrP5qfYV5Kex3K4jjjBZWcrEpNyHv05Cqw7w8A+JuePSuNKiijQdM2zck67S4c7IqH /KbsO93o/f3SBte2vgE= ) ns2.genworth.com. 300 IN RRSIG ( A 7 3 300 20240427003919 20240419233919 53645 genworth.com. KzVbgTrGVMBFhGN86ebV9jqIat7ozeTRDt4CL2OrARcXFvGXMB2Zcti0QqjYiAsS2Bg8x3gjVQf2 DM8oDLmYN2Wp7ZmVZIK/XGesPEcni6nxGj6QyvuLdTiGEv0qFhwK4dqRL5frZZlYKrnerYWf8Nk7 L/ok7FwUYpdGX+HnHkk= ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.genworth.com for genworth.com/A
	Received 401 bytes from 206.83.168.21
	;; Response received from [206.83.168.21] 401 octets ;; HEADER SECTION ;; id = 56103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (3 records) genworth.com. 30 IN A 206.83.162.175 genworth.com. 30 IN RRSIG ( A 7 2 30 20240426003943 20240418233943 38447 genworth.com. ZG4NDn+W9r9mIg6Li7K7OikNpMZ131i6EX5ZO2xyWoi2l9RsHeSLPiMyC12ieM0DZUlpeq7qF6CQ JWjowsr6S+0EOUwU4sX6vy5As32Qpek14tbd7zAI/j2/AgZPSxDH+l87ZVxki6rheJAMIZd47wwh NaGh57+5hT6kyNsy+RQ= ) genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003931 20240419233931 53645 genworth.com. f2KT7Jf62mga4LZWqIzeuvxnVCqKECltkaOxhCtNPgbmV+L1X4wm/ZOS/1bMclOsLjBpyQymRgJ+ Jmh264AKxPxs+XVNrNzaaQ4Gd/8B1su24Rorc3Hx+tWoH8KhpMXKinu1jhY3IqqSpsRa2Aa/BJZg 9Omt4OTOtDD73AtXHec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	genworth.com A RR has value 206.83.162.175
	Found 2 RRSIGs over A RRset
	`genworth.com. 30 IN RRSIG ( A 7 2 30 20240426003943 20240418233943 38447 genworth.com. ZG4NDn+W9r9mIg6Li7K7OikNpMZ131i6EX5ZO2xyWoi2l9RsHeSLPiMyC12ieM0DZUlpeq7qF6CQ JWjowsr6S+0EOUwU4sX6vy5As32Qpek14tbd7zAI/j2/AgZPSxDH+l87ZVxki6rheJAMIZd47wwh NaGh57+5hT6kyNsy+RQ= )`
	`genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003931 20240419233931 53645 genworth.com. f2KT7Jf62mga4LZWqIzeuvxnVCqKECltkaOxhCtNPgbmV+L1X4wm/ZOS/1bMclOsLjBpyQymRgJ+ Jmh264AKxPxs+XVNrNzaaQ4Gd/8B1su24Rorc3Hx+tWoH8KhpMXKinu1jhY3IqqSpsRa2Aa/BJZg 9Omt4OTOtDD73AtXHec= )`
	RRSIG=38447 and DNSKEY=38447 verifies the A RRset
	RRSIG=53645 and DNSKEY=53645 verifies the A RRset

genworth.com

	Query to ns2.genworth.com for genworth.com/A
	Received 401 bytes from 206.83.160.21
	;; Response received from [206.83.160.21] 401 octets ;; HEADER SECTION ;; id = 55581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (3 records) genworth.com. 30 IN A 206.83.162.175 genworth.com. 30 IN RRSIG ( A 7 2 30 20240426004004 20240418234004 38447 genworth.com. Y5fQ5zmw7rz2ndRw110fnBLCY0nBtYmhKycRibX1bJDQhgqlZYPOFAKrGuAE3OtlbSEjl901xHwT x7fhA6d7cwyoDwjpp4aviVhPzyVGuzRc0Hejqe1OsERKmwnGjQ+KgDTJ4aYPSC/V0zUo5/YeL1AI 101dsb78ZNVexruKtzk= ) genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003921 20240419233921 53645 genworth.com. xVwgBfjDRpGmHOLadvZxISFyH07ZqnRjVa4bokrmNmK9CxIGMQlcUlE5IV3hgQQy5tooamt2yaPl 6VSFj4gCjPtfraU5dY0qlWhdJzczdr/EDzZeN4FqZrAvteDul2QTY35sAEUp7qVbbj1wgO15AmZa FQhcV0FwLLThmR+PnDA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.genworth.com is authoritative for genworth.com
	Found RRSIG signed by genworth.com zone
	Query to ns2.genworth.com for genworth.com/A
	Received 401 bytes from 206.83.160.21
	;; Response received from [206.83.160.21] 401 octets ;; HEADER SECTION ;; id = 38069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; genworth.com. IN A ;; ANSWER SECTION (3 records) genworth.com. 30 IN A 206.83.162.175 genworth.com. 30 IN RRSIG ( A 7 2 30 20240426004004 20240418234004 38447 genworth.com. Y5fQ5zmw7rz2ndRw110fnBLCY0nBtYmhKycRibX1bJDQhgqlZYPOFAKrGuAE3OtlbSEjl901xHwT x7fhA6d7cwyoDwjpp4aviVhPzyVGuzRc0Hejqe1OsERKmwnGjQ+KgDTJ4aYPSC/V0zUo5/YeL1AI 101dsb78ZNVexruKtzk= ) genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003921 20240419233921 53645 genworth.com. xVwgBfjDRpGmHOLadvZxISFyH07ZqnRjVa4bokrmNmK9CxIGMQlcUlE5IV3hgQQy5tooamt2yaPl 6VSFj4gCjPtfraU5dY0qlWhdJzczdr/EDzZeN4FqZrAvteDul2QTY35sAEUp7qVbbj1wgO15AmZa FQhcV0FwLLThmR+PnDA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	genworth.com A RR has value 206.83.162.175
	Found 2 RRSIGs over A RRset
	`genworth.com. 30 IN RRSIG ( A 7 2 30 20240426004004 20240418234004 38447 genworth.com. Y5fQ5zmw7rz2ndRw110fnBLCY0nBtYmhKycRibX1bJDQhgqlZYPOFAKrGuAE3OtlbSEjl901xHwT x7fhA6d7cwyoDwjpp4aviVhPzyVGuzRc0Hejqe1OsERKmwnGjQ+KgDTJ4aYPSC/V0zUo5/YeL1AI 101dsb78ZNVexruKtzk= )`
	`genworth.com. 30 IN RRSIG ( A 7 2 30 20240427003921 20240419233921 53645 genworth.com. xVwgBfjDRpGmHOLadvZxISFyH07ZqnRjVa4bokrmNmK9CxIGMQlcUlE5IV3hgQQy5tooamt2yaPl 6VSFj4gCjPtfraU5dY0qlWhdJzczdr/EDzZeN4FqZrAvteDul2QTY35sAEUp7qVbbj1wgO15AmZa FQhcV0FwLLThmR+PnDA= )`
	RRSIG=38447 and DNSKEY=38447 verifies the A RRset
	RRSIG=53645 and DNSKEY=53645 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test genworth.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: