DNSSEC Debugger

Domain Name:

Time: 2024-05-21 20:05:51 UTC

Analyzing DNSSEC problems for nrc.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 55427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for nrc.gov/A
	Received 617 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 617 octets ;; HEADER SECTION ;; id = 27304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 11430 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 11445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 1038 octets ;; HEADER SECTION ;; id = 63950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for nrc.gov/A
	Received 669 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 669 octets ;; HEADER SECTION ;; id = 52594 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) nrc.gov. 10800 IN NS a18-65.akam.net. nrc.gov. 10800 IN NS a3-67.akam.net. nrc.gov. 10800 IN NS a8-65.akam.net. nrc.gov. 10800 IN NS ns1.nrc.gov. nrc.gov. 10800 IN NS ns2.nrc.gov. nrc.gov. 10800 IN NS ns3.nrc.gov. nrc.gov. 3600 IN DS 17389 8 1 2b05c805293d97e445b81bdae4e7da2188e4f05d nrc.gov. 3600 IN DS ( 17389 8 2 d7bebc364dcd54941fd658440feb917b4028cb5b2d5bf3135ffd69fee25b8328 ) nrc.gov. 3600 IN DS 36277 8 1 403fe47f19c931f85926e3f322fe0f40e6a89394 nrc.gov. 3600 IN DS ( 36277 8 2 ebd0aafbd89f7ce0c2b81f2f22331ea74fa468d8b3a2eb6a4bb12d4d394c249f ) nrc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522210551 20240520190551 10104 gov. TP2/VfarV5SGtDbwlFtbKJ8yCcFV54Wdvd6qgrukyVZIc2dj5Fs/FnMDkmNf/e6lSDIS7TmH0G/k 3quHQwfkjKuOMzx5aP+bIgn51mbzs7M3XVQF94Vwavg5JpQeOD1el/IDZfGe0nBcBCVwJsBJVyh5 SspguJGuNzV47RUcB6PdTk8ukiV10uakQs5rlu1Gsr7aP9dn5S8PkfwE9GhaUw== ) nrc.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522210551 20240520190551 35496 gov. wsN+MMLROOVxD10pyq2yNFnYy3Fqf7OAKrVZzyJ/LjNyeVbWb4nVQJF82x+DBTBhkR3h1ELwxm17 fnuXR6AsJA== ) ;; ADDITIONAL SECTION (4 records) ns1.nrc.gov. 3600 IN A 65.49.37.197 ns2.nrc.gov. 3600 IN A 198.255.114.187 ns3.nrc.gov. 3600 IN A 192.198.87.246 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for nrc.gov/DNSKEY
	Received 669 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 669 octets ;; HEADER SECTION ;; id = 41905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) nrc.gov. 10800 IN NS a18-65.akam.net. nrc.gov. 10800 IN NS a3-67.akam.net. nrc.gov. 10800 IN NS a8-65.akam.net. nrc.gov. 10800 IN NS ns1.nrc.gov. nrc.gov. 10800 IN NS ns2.nrc.gov. nrc.gov. 10800 IN NS ns3.nrc.gov. nrc.gov. 3600 IN DS 17389 8 1 2b05c805293d97e445b81bdae4e7da2188e4f05d nrc.gov. 3600 IN DS ( 17389 8 2 d7bebc364dcd54941fd658440feb917b4028cb5b2d5bf3135ffd69fee25b8328 ) nrc.gov. 3600 IN DS 36277 8 1 403fe47f19c931f85926e3f322fe0f40e6a89394 nrc.gov. 3600 IN DS ( 36277 8 2 ebd0aafbd89f7ce0c2b81f2f22331ea74fa468d8b3a2eb6a4bb12d4d394c249f ) nrc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522210551 20240520190551 10104 gov. TP2/VfarV5SGtDbwlFtbKJ8yCcFV54Wdvd6qgrukyVZIc2dj5Fs/FnMDkmNf/e6lSDIS7TmH0G/k 3quHQwfkjKuOMzx5aP+bIgn51mbzs7M3XVQF94Vwavg5JpQeOD1el/IDZfGe0nBcBCVwJsBJVyh5 SspguJGuNzV47RUcB6PdTk8ukiV10uakQs5rlu1Gsr7aP9dn5S8PkfwE9GhaUw== ) nrc.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522210551 20240520190551 35496 gov. 1t2MxKkuARUMrHJqswX0AFE4LGYqW0j9w+n6EDmJX2Ufu6sSnGja+TFtFFeYHDFZNy0gmCZEUELA 59cuhMKHwA== ) ;; ADDITIONAL SECTION (4 records) ns1.nrc.gov. 3600 IN A 65.49.37.197 ns2.nrc.gov. 3600 IN A 198.255.114.187 ns3.nrc.gov. 3600 IN A 192.198.87.246 ;; { "EDNS-VERSION": 0 }
	Found child zone nrc.gov

nrc.gov

	Checking DS between gov and nrc.gov
	Query to b.ns.gov for nrc.gov/DS
	Received 498 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 498 octets ;; HEADER SECTION ;; id = 26697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN DS ;; ANSWER SECTION (6 records) nrc.gov. 3600 IN DS 17389 8 1 2b05c805293d97e445b81bdae4e7da2188e4f05d nrc.gov. 3600 IN DS ( 17389 8 2 d7bebc364dcd54941fd658440feb917b4028cb5b2d5bf3135ffd69fee25b8328 ) nrc.gov. 3600 IN DS 36277 8 1 403fe47f19c931f85926e3f322fe0f40e6a89394 nrc.gov. 3600 IN DS ( 36277 8 2 ebd0aafbd89f7ce0c2b81f2f22331ea74fa468d8b3a2eb6a4bb12d4d394c249f ) nrc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522210551 20240520190551 10104 gov. TP2/VfarV5SGtDbwlFtbKJ8yCcFV54Wdvd6qgrukyVZIc2dj5Fs/FnMDkmNf/e6lSDIS7TmH0G/k 3quHQwfkjKuOMzx5aP+bIgn51mbzs7M3XVQF94Vwavg5JpQeOD1el/IDZfGe0nBcBCVwJsBJVyh5 SspguJGuNzV47RUcB6PdTk8ukiV10uakQs5rlu1Gsr7aP9dn5S8PkfwE9GhaUw== ) nrc.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522210551 20240520190551 35496 gov. i21XKg7Dw3RquVB3Iwqq3AF0UmIyzvysDp7KAGOZbVppD5CxgC97WsvG0Q1n383Tqz36SrZvWCu9 N1pIozzcXA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for nrc.gov in the gov zone
	DS=17389/SHA-1 uses a deprecated digest algorithm
	DS=36277/SHA-1 uses a deprecated digest algorithm
	DS=17389/SHA-1 has algorithm RSASHA256
	DS=17389/SHA-256 has algorithm RSASHA256
	DS=36277/SHA-1 has algorithm RSASHA256
	DS=36277/SHA-256 has algorithm RSASHA256
	Found 2 RRSIGs over DS RRset
	`nrc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522210551 20240520190551 10104 gov. TP2/VfarV5SGtDbwlFtbKJ8yCcFV54Wdvd6qgrukyVZIc2dj5Fs/FnMDkmNf/e6lSDIS7TmH0G/k 3quHQwfkjKuOMzx5aP+bIgn51mbzs7M3XVQF94Vwavg5JpQeOD1el/IDZfGe0nBcBCVwJsBJVyh5 SspguJGuNzV47RUcB6PdTk8ukiV10uakQs5rlu1Gsr7aP9dn5S8PkfwE9GhaUw== )`
	`nrc.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522210551 20240520190551 35496 gov. i21XKg7Dw3RquVB3Iwqq3AF0UmIyzvysDp7KAGOZbVppD5CxgC97WsvG0Q1n383Tqz36SrZvWCu9 N1pIozzcXA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=17389/SHA-1 is now in the chain-of-trust
	DS=36277/SHA-1 is now in the chain-of-trust
	`nrc.gov. 3600 IN DS 17389 8 1 2b05c805293d97e445b81bdae4e7da2188e4f05d`
	`nrc.gov. 3600 IN DS ( 17389 8 2 d7bebc364dcd54941fd658440feb917b4028cb5b2d5bf3135ffd69fee25b8328 )`
	`nrc.gov. 3600 IN DS 36277 8 1 403fe47f19c931f85926e3f322fe0f40e6a89394`
	`nrc.gov. 3600 IN DS ( 36277 8 2 ebd0aafbd89f7ce0c2b81f2f22331ea74fa468d8b3a2eb6a4bb12d4d394c249f )`
	Query to ns2.nrc.gov for nrc.gov/DNSKEY
	Received 922 bytes from 198.255.114.187
	;; Response received from [198.255.114.187] 922 octets ;; HEADER SECTION ;; id = 41310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN DNSKEY ;; ANSWER SECTION (4 records) nrc.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbXJk1ypXCopQQ8DDN+HXNHLUiy2tJtsHvq89mtZMIJRGh9ewOREasfAxmmCd4i9c0BCWX4g iqoCQ/kTL1gPure/4C7xfzd171fs1+pysk4YSNBR1eW0pjN/D/4QgjEk+OUeyYHZxKSuZ/rRxImR /gXzm/1+fJPyXF8wK4QQAg5R ) ; Key ID = 38391 nrc.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbbGH/8c1apSr8S+jUMIJoOOx230f2Jc7mXYk0g1ncu6iInB1h+kFMJ9px7iaurmnlSnS54H knNnce/RpWUSZ00P3F/IjvqTKHYFhFGuEEF/hxSGkbhMitwuyiAqBmilac0ooKWtffs5c2SLE2Qu JsSKh0jlUg2AtXYzIeJrahBg1zClNd2e7RJlPd81Q7uzT1DXeEMg2VPtQ68uCl+Pql3uSFB8kwws nAnbSIqH3KCECzqFiiZp0JWsjxqjqOw4MT/nmxLO6ZfUQKzFpm63ciIL7LWVm17vpbAKAK4G7x30 b/ev9X650umavGzbqpqu6s3HzmuAQZeB2OdOFt/afFM= ) ; Key ID = 17389 nrc.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240525145244 20240521141126 17389 nrc.gov. bCWN7RztW/sAtFc5V0eK/xZnBAjc2UOD2LxlvLLNGh96LB5X+sDNA3x9V991+5K0s4jh6ygRHGG1 v6iwOCQ4TQj6XRs6uKPaPGZ57wTO7WLfbPuYep1WfsPlSiWs57yM5lBiabqB7gW05qXA1nASn6/h NpWADwEL2A1jFIdsmkkwYzJ4p9gXC9Q2zWJKjn7kOq4BTH1lHs8fWKDTUpFr0HLaMOGlfeWr7QaE aSDsaOCoEUS0EifWxkGlrHMNQHW8i71gJR+IEPl0AUE9LA6lSM9jcCWuLMqDRHY044eAszzEc2rQ 8pfhRSnNdpzbLc95zunU3EdlU8Q9bwI5MgR5bA== ) nrc.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240525145244 20240521141126 38391 nrc.gov. qurid1BgMhvU/B99GitnVJHVkXTXh/BqoN5z8R6bkUzgg7Cp/zhrO8rHXQtWEsfg8IimViZFKA3n bM8QqnjeB659w+2c3hI9m3v+FN5xMwP/zrOaLWz5OBWF5mfPALYNR4ytyxYvuw7lZbTjuMYd3aGF gkl8kmK7JV7Zunk9zm0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nrc.gov
	`nrc.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAbXJk1ypXCopQQ8DDN+HXNHLUiy2tJtsHvq89mtZMIJRGh9ewOREasfAxmmCd4i9c0BCWX4g iqoCQ/kTL1gPure/4C7xfzd171fs1+pysk4YSNBR1eW0pjN/D/4QgjEk+OUeyYHZxKSuZ/rRxImR /gXzm/1+fJPyXF8wK4QQAg5R ) ; Key ID = 38391`
	`nrc.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbbGH/8c1apSr8S+jUMIJoOOx230f2Jc7mXYk0g1ncu6iInB1h+kFMJ9px7iaurmnlSnS54H knNnce/RpWUSZ00P3F/IjvqTKHYFhFGuEEF/hxSGkbhMitwuyiAqBmilac0ooKWtffs5c2SLE2Qu JsSKh0jlUg2AtXYzIeJrahBg1zClNd2e7RJlPd81Q7uzT1DXeEMg2VPtQ68uCl+Pql3uSFB8kwws nAnbSIqH3KCECzqFiiZp0JWsjxqjqOw4MT/nmxLO6ZfUQKzFpm63ciIL7LWVm17vpbAKAK4G7x30 b/ev9X650umavGzbqpqu6s3HzmuAQZeB2OdOFt/afFM= ) ; Key ID = 17389`
	DNSKEY=17389/SEP is now in the chain-of-trust
	DS=17389/SHA-1 verifies DNSKEY=17389/SEP
	DS=17389/SHA-256 verifies DNSKEY=17389/SEP
	DS=36277/SHA-1 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nrc.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240525145244 20240521141126 17389 nrc.gov. bCWN7RztW/sAtFc5V0eK/xZnBAjc2UOD2LxlvLLNGh96LB5X+sDNA3x9V991+5K0s4jh6ygRHGG1 v6iwOCQ4TQj6XRs6uKPaPGZ57wTO7WLfbPuYep1WfsPlSiWs57yM5lBiabqB7gW05qXA1nASn6/h NpWADwEL2A1jFIdsmkkwYzJ4p9gXC9Q2zWJKjn7kOq4BTH1lHs8fWKDTUpFr0HLaMOGlfeWr7QaE aSDsaOCoEUS0EifWxkGlrHMNQHW8i71gJR+IEPl0AUE9LA6lSM9jcCWuLMqDRHY044eAszzEc2rQ 8pfhRSnNdpzbLc95zunU3EdlU8Q9bwI5MgR5bA== )`
	`nrc.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240525145244 20240521141126 38391 nrc.gov. qurid1BgMhvU/B99GitnVJHVkXTXh/BqoN5z8R6bkUzgg7Cp/zhrO8rHXQtWEsfg8IimViZFKA3n bM8QqnjeB659w+2c3hI9m3v+FN5xMwP/zrOaLWz5OBWF5mfPALYNR4ytyxYvuw7lZbTjuMYd3aGF gkl8kmK7JV7Zunk9zm0= )`
	RRSIG=17389 and DNSKEY=17389/SEP verifies the DNSKEY RRset
	RRSIG=38391 and DNSKEY=38391 verifies the DNSKEY RRset
	DNSKEY=38391 is now in the chain-of-trust
	Query to a3-67.akam.net for nrc.gov/A
	Received 219 bytes from 96.7.49.67
	;; Response received from [96.7.49.67] 219 octets ;; HEADER SECTION ;; id = 50181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-67.akam.net is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to ns2.nrc.gov for nrc.gov/SOA
	Received 1117 bytes from 198.255.114.187
	;; Response received from [198.255.114.187] 1117 octets ;; HEADER SECTION ;; id = 9300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN SOA ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN SOA ( ns1.nrc.gov. postmaster.nrc.gov. 2021154786 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240525200040 20240521190040 38391 nrc.gov. HNovqyhH+FOPGYAVtXr26Wdqn56qxWfjdBsWfZoO5xKhpqMFrIbb+4WYLXU+AZOlUn62K+YqukFZ d+29yDX+xu739F3O3QxPf6rw2HLlx2tjFocZv6tGF8J9LC3AbfylCGX4+7vmJM3yYiNv7HaPddSK QfrOZNRExfkGDfeFgQc= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	Query to a18-65.akam.net for nrc.gov/SOA
	Received 1117 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 1117 octets ;; HEADER SECTION ;; id = 10192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN SOA ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN SOA ( ns1.nrc.gov. postmaster.nrc.gov. 2021154786 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240525200040 20240521190040 38391 nrc.gov. HNovqyhH+FOPGYAVtXr26Wdqn56qxWfjdBsWfZoO5xKhpqMFrIbb+4WYLXU+AZOlUn62K+YqukFZ d+29yDX+xu739F3O3QxPf6rw2HLlx2tjFocZv6tGF8J9LC3AbfylCGX4+7vmJM3yYiNv7HaPddSK QfrOZNRExfkGDfeFgQc= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns2.nrc.gov. 28800 IN A 198.255.114.187 ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns3.nrc.gov. 28800 IN A 192.198.87.246 ns3.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525173012 20240521172846 38391 nrc.gov. U6GgD4tFReulGfdQyJUMQEU29UqVVOf94eX6U+ZNIYTZy6SZzMYWGGEBWTl2+OMjgdf1/zv4K0IH 26f9ucOx7jE8mwGVjIsLuOl5nJFeH0jwuE37zwEOCvblI0B6Pu25yCuViHZ+pTPzxLfWKfxdpEj/ 9WWSnOUr5JGBoDLwBtA= ) ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ;; { "EDNS-VERSION": 0 }
	Query to ns3.nrc.gov for nrc.gov/SOA
	Received 1117 bytes from 192.198.87.246
	;; Response received from [192.198.87.246] 1117 octets ;; HEADER SECTION ;; id = 61643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN SOA ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN SOA ( ns1.nrc.gov. postmaster.nrc.gov. 2021154786 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240525200040 20240521190040 38391 nrc.gov. HNovqyhH+FOPGYAVtXr26Wdqn56qxWfjdBsWfZoO5xKhpqMFrIbb+4WYLXU+AZOlUn62K+YqukFZ d+29yDX+xu739F3O3QxPf6rw2HLlx2tjFocZv6tGF8J9LC3AbfylCGX4+7vmJM3yYiNv7HaPddSK QfrOZNRExfkGDfeFgQc= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.nrc.gov for nrc.gov/SOA
	Received 1117 bytes from 65.49.37.197
	;; Response received from [65.49.37.197] 1117 octets ;; HEADER SECTION ;; id = 17875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN SOA ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN SOA ( ns1.nrc.gov. postmaster.nrc.gov. 2021154786 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240525200040 20240521190040 38391 nrc.gov. HNovqyhH+FOPGYAVtXr26Wdqn56qxWfjdBsWfZoO5xKhpqMFrIbb+4WYLXU+AZOlUn62K+YqukFZ d+29yDX+xu739F3O3QxPf6rw2HLlx2tjFocZv6tGF8J9LC3AbfylCGX4+7vmJM3yYiNv7HaPddSK QfrOZNRExfkGDfeFgQc= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	Query to a8-65.akam.net for nrc.gov/SOA
	Received 1117 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 1117 octets ;; HEADER SECTION ;; id = 12134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN SOA ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN SOA ( ns1.nrc.gov. postmaster.nrc.gov. 2021154786 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240525200040 20240521190040 38391 nrc.gov. HNovqyhH+FOPGYAVtXr26Wdqn56qxWfjdBsWfZoO5xKhpqMFrIbb+4WYLXU+AZOlUn62K+YqukFZ d+29yDX+xu739F3O3QxPf6rw2HLlx2tjFocZv6tGF8J9LC3AbfylCGX4+7vmJM3yYiNv7HaPddSK QfrOZNRExfkGDfeFgQc= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns3.nrc.gov. 28800 IN A 192.198.87.246 ns3.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525173012 20240521172846 38391 nrc.gov. U6GgD4tFReulGfdQyJUMQEU29UqVVOf94eX6U+ZNIYTZy6SZzMYWGGEBWTl2+OMjgdf1/zv4K0IH 26f9ucOx7jE8mwGVjIsLuOl5nJFeH0jwuE37zwEOCvblI0B6Pu25yCuViHZ+pTPzxLfWKfxdpEj/ 9WWSnOUr5JGBoDLwBtA= ) ns2.nrc.gov. 28800 IN A 198.255.114.187 ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns1.nrc.gov. 28800 IN A 65.49.37.197 ;; { "EDNS-VERSION": 0 }
	Query to a3-67.akam.net for nrc.gov/A
	Received 219 bytes from 96.7.49.67
	;; Response received from [96.7.49.67] 219 octets ;; HEADER SECTION ;; id = 47697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

nrc.gov

	Query to ns3.nrc.gov for nrc.gov/A
	Received 1086 bytes from 192.198.87.246
	;; Response received from [192.198.87.246] 1086 octets ;; HEADER SECTION ;; id = 43753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	ns3.nrc.gov is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to ns3.nrc.gov for nrc.gov/A
	Timeout querying ns3.nrc.gov/192.198.87.246 for nrc.gov/A
	All Queries to ns3.nrc.gov for nrc.gov/A timed out or failed
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

nrc.gov

	Query to ns1.nrc.gov for nrc.gov/A
	Received 1086 bytes from 65.49.37.197
	;; Response received from [65.49.37.197] 1086 octets ;; HEADER SECTION ;; id = 17769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	ns1.nrc.gov is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to ns1.nrc.gov for nrc.gov/A
	Received 1086 bytes from 65.49.37.197
	;; Response received from [65.49.37.197] 1086 octets ;; HEADER SECTION ;; id = 17480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

nrc.gov

	Query to a18-65.akam.net for nrc.gov/A
	Received 219 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 219 octets ;; HEADER SECTION ;; id = 33285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-65.akam.net is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to a18-65.akam.net for nrc.gov/A
	Received 219 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 219 octets ;; HEADER SECTION ;; id = 45007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

nrc.gov

	Query to ns2.nrc.gov for nrc.gov/A
	Received 1086 bytes from 198.255.114.187
	;; Response received from [198.255.114.187] 1086 octets ;; HEADER SECTION ;; id = 63267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	ns2.nrc.gov is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to ns2.nrc.gov for nrc.gov/A
	Received 1086 bytes from 198.255.114.187
	;; Response received from [198.255.114.187] 1086 octets ;; HEADER SECTION ;; id = 37131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (7 records) nrc.gov. 28800 IN NS a3-67.akam.net. nrc.gov. 28800 IN NS a18-65.akam.net. nrc.gov. 28800 IN NS ns1.nrc.gov. nrc.gov. 28800 IN NS a8-65.akam.net. nrc.gov. 28800 IN NS ns2.nrc.gov. nrc.gov. 28800 IN NS ns3.nrc.gov. nrc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240525190103 20240521190040 38391 nrc.gov. WQFtC9WR4x20sQtK2ODUktZKkf1+oOE7/To/vqougIleEwTEIos/yDoW1DqH/hIjLDKNcAAi2V0q rQmnvCN3e1JUdRnahi5D0YLE/oGqm3vf8seJU5a/lSaJR8CoyKnAnGqDGfsWIyVIpjo9vd5anNRj h+sXWNUsYnAAjfuO7yc= ) ;; ADDITIONAL SECTION (8 records) ns1.nrc.gov. 28800 IN A 65.49.37.197 ns1.nrc.gov. 28800 IN AAAA 2001:470:1:7a:2000::97 ns2.nrc.gov. 28800 IN A 198.255.114.187 ns3.nrc.gov. 28800 IN A 192.198.87.246 ns1.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525141938 20240521140749 38391 nrc.gov. JCKV1H752juJw/CczxBYbCV28D5kZcSYkVQiv4bWTfYZ2CDO01xcCq8V1FaqkhiWdlkYx4ddPL/b v9+mmo5/KHXEX/cLN3yQ1GBDrkr59UtakSDE7+B2TUYk6doQgI4Kop8GrpAwOSML+31tXnkYUvGR GW1P1CqXxHtuNnPV8Ok= ) ns1.nrc.gov. 28800 IN RRSIG ( AAAA 8 3 28800 20240524215104 20240520212225 38391 nrc.gov. nlYlNVHSR31HvnHwWJtxfbbGpzhAwbqzdTWPlJisBL2rlSVbb+igZ+STElny8tqBUPyawjeLRenq orLHsxQHI6ce2EqP5SKuR8XC7/W+yzYRzbhoC/nf2xe/gRqKkVMiI1C1H4Wblv140WsnwWju+xMR FUF3Y8bBRAJlIYmk15Q= ) ns2.nrc.gov. 28800 IN RRSIG ( A 8 3 28800 20240525175352 20240521173505 38391 nrc.gov. dh5T8ZvvJ5iccSRpYIfxYa+fu+saE6P6AQuuuZVM0ZZleDQtL8Q5HmugmYvb9khqg9nMjRnSYeTi 7QPcsIjIxXPy6+ufVI6rsZz1ZqMrYpH5apZPsAjLkNrnImlNeaFlNrfpAQR3Nmvb7f7pMl8YvYH9 5FhMxJrBEdREG2tM5/g= ) ;; { "EDNS-VERSION": 0 }
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

nrc.gov

	Query to a8-65.akam.net for nrc.gov/A
	Received 219 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 219 octets ;; HEADER SECTION ;; id = 15046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-65.akam.net is authoritative for nrc.gov
	Found RRSIG signed by nrc.gov zone
	Query to a8-65.akam.net for nrc.gov/A
	Received 219 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 219 octets ;; HEADER SECTION ;; id = 9179 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrc.gov. IN A ;; ANSWER SECTION (2 records) nrc.gov. 28800 IN A 148.184.180.35 nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nrc.gov A RR has value 148.184.180.35
	Found 1 RRSIGs over A RRset
	`nrc.gov. 28800 IN RRSIG ( A 8 2 28800 20240525141938 20240521140749 38391 nrc.gov. bHKyYy3+Y6hCJLBLqlok0Dxr6rLMYg3eXQOV+4tkmGCvmbumAd6TOrs9RleNu5xHUYFwLhvbBYNf I4uoIAqzTeoy3lbbYiG/OXEWAI8suPXdV1CzmhJYCa8aSffho+pEjl9Ud3OgtEJwdFgzW8F0/5Hp YS79KyzmREj2bsfYXl8= )`
	RRSIG=38391 and DNSKEY=38391 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nrc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: