DNSSEC Debugger - presidio.gov

Domain Name:

Time: 2024-05-21 08:22:50 UTC

Analyzing DNSSEC problems for presidio.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 30249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for presidio.gov/A
	Received 619 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 619 octets ;; HEADER SECTION ;; id = 44856 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . dYJXY4aL39kLPN/9bJeMtSxboBM+0iOqgHcp3vDaIxbQzWzar3nRnr/BWYmoT4s0RlIJIQBSlMNO xNfWLJvtxhrNh9ZeJd6ukf1quT81r5P1OSOO9G0I12pfg2iXcrE7fgdbxWD4SVu3LXBPLI5Rl8MY TaCrOWFg1ZmvcsmzoEiJUxxTkIL2Qz/sWEQjEB7rTTXGXBLCme4sPNLry4YqQfvOvL6S0fZ4ef1J CpNuZj7PYQTaBo9BGdJhTtCG6HpQQPlWwNKK6618H2bhvzQVTE02IqMdz2+uOIUxcShtS1uAw3R2 snblBafWSM5vzU60gKOD0xxLVqNCuGgQ+/xM2Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 60939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . dYJXY4aL39kLPN/9bJeMtSxboBM+0iOqgHcp3vDaIxbQzWzar3nRnr/BWYmoT4s0RlIJIQBSlMNO xNfWLJvtxhrNh9ZeJd6ukf1quT81r5P1OSOO9G0I12pfg2iXcrE7fgdbxWD4SVu3LXBPLI5Rl8MY TaCrOWFg1ZmvcsmzoEiJUxxTkIL2Qz/sWEQjEB7rTTXGXBLCme4sPNLry4YqQfvOvL6S0fZ4ef1J CpNuZj7PYQTaBo9BGdJhTtCG6HpQQPlWwNKK6618H2bhvzQVTE02IqMdz2+uOIUxcShtS1uAw3R2 snblBafWSM5vzU60gKOD0xxLVqNCuGgQ+/xM2Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 54325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . dYJXY4aL39kLPN/9bJeMtSxboBM+0iOqgHcp3vDaIxbQzWzar3nRnr/BWYmoT4s0RlIJIQBSlMNO xNfWLJvtxhrNh9ZeJd6ukf1quT81r5P1OSOO9G0I12pfg2iXcrE7fgdbxWD4SVu3LXBPLI5Rl8MY TaCrOWFg1ZmvcsmzoEiJUxxTkIL2Qz/sWEQjEB7rTTXGXBLCme4sPNLry4YqQfvOvL6S0fZ4ef1J CpNuZj7PYQTaBo9BGdJhTtCG6HpQQPlWwNKK6618H2bhvzQVTE02IqMdz2+uOIUxcShtS1uAw3R2 snblBafWSM5vzU60gKOD0xxLVqNCuGgQ+/xM2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . dYJXY4aL39kLPN/9bJeMtSxboBM+0iOqgHcp3vDaIxbQzWzar3nRnr/BWYmoT4s0RlIJIQBSlMNO xNfWLJvtxhrNh9ZeJd6ukf1quT81r5P1OSOO9G0I12pfg2iXcrE7fgdbxWD4SVu3LXBPLI5Rl8MY TaCrOWFg1ZmvcsmzoEiJUxxTkIL2Qz/sWEQjEB7rTTXGXBLCme4sPNLry4YqQfvOvL6S0fZ4ef1J CpNuZj7PYQTaBo9BGdJhTtCG6HpQQPlWwNKK6618H2bhvzQVTE02IqMdz2+uOIUxcShtS1uAw3R2 snblBafWSM5vzU60gKOD0xxLVqNCuGgQ+/xM2Q== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 779 octets ;; HEADER SECTION ;; id = 32381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240719084940 20240519084940 64280 gov. Ze2lrjOFpX0Jf17NDWolzeRxyJQlyhuqTIBrZ0JHj8wWMOLho5MgqXKL9mtD5buxEZWUZJmvvzyH EHii547xpG/Q1GXv6XSwzKqFvuy1GpfN0044rfqSCjCEvNv2mT/tllzeTIEXLF8Kkccot4Ruc3Ii shNMdGV/ZqHIaprqP5a1y9xwDfRswNoJwAiTywjBv3uV8fMJaHm3RVeV9Y5JcYuHbUc4OdHDLjUs nSyRyi5dt6zfoEB7t2OhsTV5KD12tMgGa0RsPlux9hRUdKkuU0e+5+0uXoMZlcP4EBDeJZlbCZT0 ZCkIpcmTzJWH6QDRb9ETZssXk/a2TWAz9gSqWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240719084940 20240519084940 64280 gov. Ze2lrjOFpX0Jf17NDWolzeRxyJQlyhuqTIBrZ0JHj8wWMOLho5MgqXKL9mtD5buxEZWUZJmvvzyH EHii547xpG/Q1GXv6XSwzKqFvuy1GpfN0044rfqSCjCEvNv2mT/tllzeTIEXLF8Kkccot4Ruc3Ii shNMdGV/ZqHIaprqP5a1y9xwDfRswNoJwAiTywjBv3uV8fMJaHm3RVeV9Y5JcYuHbUc4OdHDLjUs nSyRyi5dt6zfoEB7t2OhsTV5KD12tMgGa0RsPlux9hRUdKkuU0e+5+0uXoMZlcP4EBDeJZlbCZT0 ZCkIpcmTzJWH6QDRb9ETZssXk/a2TWAz9gSqWw== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for presidio.gov/A
	Received 548 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 548 octets ;; HEADER SECTION ;; id = 62091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) presidio.gov. 10800 IN NS asia9.akam.net. presidio.gov. 10800 IN NS ns1-145.akam.net. presidio.gov. 10800 IN NS ns1-176.akam.net. presidio.gov. 10800 IN NS use6.akam.net. presidio.gov. 10800 IN NS usw1.akam.net. presidio.gov. 10800 IN NS usw5.akam.net. presidio.gov. 10800 IN NS usw6.akam.net. presidio.gov. 10800 IN NS zc.akam.net. presidio.gov. 3600 IN DS ( 11143 7 2 d8d3bc3bf14a4ffe06b3971a56f5ee30cfe7ee455a5dec289bc680426b4570a5 ) presidio.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522092250 20240520072250 10104 gov. JNT0KJA0uCrtvjPYtV6pRUysfWgq5Dt+tiL6uI9LrUrrSMwTwWaYMzeI8ZswdfZeJ8vXWuZK06I1 DUv7UzgO81e3P7N1bS6UZACH6uQuaLl1XxCpY4MrCxwTd+mkM7bSPDUUfyVz0yHMEP6ybN3GNshB LX69/Fl6IzWOtkHPN03UCugmKXKv6DKIp0D5C/dz4BoNERJ4HiIkNPUkCvbFOQ== ) presidio.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522092250 20240520072250 35496 gov. DwpWVLBvcB9y4j3X1rMxj3/EKP6WlJubINaxQhtGcayOwg4gzPwOhDsEEwFR028cgbwoYPfkbANk LdO+j79bWQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for presidio.gov/DNSKEY
	Received 548 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 548 octets ;; HEADER SECTION ;; id = 5448 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) presidio.gov. 10800 IN NS asia9.akam.net. presidio.gov. 10800 IN NS ns1-145.akam.net. presidio.gov. 10800 IN NS ns1-176.akam.net. presidio.gov. 10800 IN NS use6.akam.net. presidio.gov. 10800 IN NS usw1.akam.net. presidio.gov. 10800 IN NS usw5.akam.net. presidio.gov. 10800 IN NS usw6.akam.net. presidio.gov. 10800 IN NS zc.akam.net. presidio.gov. 3600 IN DS ( 11143 7 2 d8d3bc3bf14a4ffe06b3971a56f5ee30cfe7ee455a5dec289bc680426b4570a5 ) presidio.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522092250 20240520072250 10104 gov. JNT0KJA0uCrtvjPYtV6pRUysfWgq5Dt+tiL6uI9LrUrrSMwTwWaYMzeI8ZswdfZeJ8vXWuZK06I1 DUv7UzgO81e3P7N1bS6UZACH6uQuaLl1XxCpY4MrCxwTd+mkM7bSPDUUfyVz0yHMEP6ybN3GNshB LX69/Fl6IzWOtkHPN03UCugmKXKv6DKIp0D5C/dz4BoNERJ4HiIkNPUkCvbFOQ== ) presidio.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522092250 20240520072250 35496 gov. KicHP2NSuLb93V4LD3tR/fg1gZlpYpN8cz2LxGzt+4UU51b8rJyeZityg/pYptMZDKBskCUe+HCy N3L+XpOirw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone presidio.gov

presidio.gov

	Checking DS between gov and presidio.gov
	Query to d.ns.gov for presidio.gov/DS
	Received 383 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 383 octets ;; HEADER SECTION ;; id = 25029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN DS ;; ANSWER SECTION (3 records) presidio.gov. 3600 IN DS ( 11143 7 2 d8d3bc3bf14a4ffe06b3971a56f5ee30cfe7ee455a5dec289bc680426b4570a5 ) presidio.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522092250 20240520072250 10104 gov. JNT0KJA0uCrtvjPYtV6pRUysfWgq5Dt+tiL6uI9LrUrrSMwTwWaYMzeI8ZswdfZeJ8vXWuZK06I1 DUv7UzgO81e3P7N1bS6UZACH6uQuaLl1XxCpY4MrCxwTd+mkM7bSPDUUfyVz0yHMEP6ybN3GNshB LX69/Fl6IzWOtkHPN03UCugmKXKv6DKIp0D5C/dz4BoNERJ4HiIkNPUkCvbFOQ== ) presidio.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522092250 20240520072250 35496 gov. PAjI55WJvNxEJYy2ZBhD4h0LrhuK/3mkULyleoPXHxSbUnoxEDXhrGmGjrLCEei39dfxuQuYlk6C U0aN9wVMHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for presidio.gov in the gov zone
	DS=11143/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 2 RRSIGs over DS RRset
	`presidio.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522092250 20240520072250 10104 gov. JNT0KJA0uCrtvjPYtV6pRUysfWgq5Dt+tiL6uI9LrUrrSMwTwWaYMzeI8ZswdfZeJ8vXWuZK06I1 DUv7UzgO81e3P7N1bS6UZACH6uQuaLl1XxCpY4MrCxwTd+mkM7bSPDUUfyVz0yHMEP6ybN3GNshB LX69/Fl6IzWOtkHPN03UCugmKXKv6DKIp0D5C/dz4BoNERJ4HiIkNPUkCvbFOQ== )`
	`presidio.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522092250 20240520072250 35496 gov. PAjI55WJvNxEJYy2ZBhD4h0LrhuK/3mkULyleoPXHxSbUnoxEDXhrGmGjrLCEei39dfxuQuYlk6C U0aN9wVMHg== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=11143/SHA-256 is now in the chain-of-trust
	`presidio.gov. 3600 IN DS ( 11143 7 2 d8d3bc3bf14a4ffe06b3971a56f5ee30cfe7ee455a5dec289bc680426b4570a5 )`
	Query to usw5.akam.net for presidio.gov/DNSKEY
	Received 913 bytes from 23.211.132.64
	;; Response received from [23.211.132.64] 913 octets ;; HEADER SECTION ;; id = 56563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN DNSKEY ;; ANSWER SECTION (4 records) presidio.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAaxlBCs5S89jNt0Wgph+zueAYSwDESMJxsxJXWiHK9n6OTBWXSKhl8QBHBhXTAy11y9URE4H iord7SN9Ysfde/uCTg15lIlaQDMEhlsiW/fa0C0PP1Ze0McUBQqZjgxrjw/eiCWytHgl21UthiqK PJpUGpV7FsI7kHLSc5hPLMZl ) ; Key ID = 48288 presidio.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAao7/8Cc7vd1EUowBskbUsc7/dfyoqD1f4stn3/2Kivpq5efHRemrgZ5t42fYUuR8L2US0CE sh2wje4RQidzQvsSEeZWICNXkI5tKtw9EyspoQdtuEdIvDe1ikIZXIfz1gXT/xohKaw3t8JSKtkr b+qv+9ZwnJdFDNHu+kRXtnmv3fvHLsIzlTziTDNzJPgtX+qitsC3YLEfCYrWvYchs3Ha1VvRY1CO jBLaSk8Rq4I/zM3U8JyWgo4m14LGVF6FT3ZoF7POLzyLQABm5NGcLB0FrHI8WDVJF1f7QIZtPQsl Ni8A+S0dTvPYwbJStpxfSFzyQGqAnje1nx+vfy1mRLs= ) ; Key ID = 11143 presidio.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcKBswSA/KtffjkozZUIUzjN3o/P0rrA6ASMZm4j1sV6XV4i0oI4BrhZyWcbnP2OgA0HQL1T 2Lkiez5dnoU3rb9SQKw60CyfkuQ26626EIlX8I5M+qYp1NDTRVGelob6tMvO2JUlBmQItllApY7W GYnaJIm30rWl8Dti3gNKsUmz ) ; Key ID = 8498 presidio.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240524065354 20240521055354 11143 presidio.gov. J41ZkEbuOkbiM6XZZdoSDIQ0bRTY5QSPnKG+PS76NO6Q7+jsWCqz1SWffs9F2PYinuSKu/K4f582 9OmeK0aAs5WlX8b7nLttm8HN//m5gsSb/8zzK/y9RPAi6JZRi2DGFBRfobI4Az9JADAtxycwBJIR cZ96qpzK0uzKSGNv+j/QBNShP4tdx7zN27V7oY9lE8GDKtMwBVtrloR05IZKelAdfa3OwdJxuRLb nRz0FjH4Qzf3HRWeK7TF2CAq2wnKWK7GzomgVqsRKhPZnI8VgVKHfnqAUtbm1CKGcSRf4xpMPrJR VWCUgAjiOSLDMOh9/tAFKSRFRbYqQL2ULH9oPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for presidio.gov
	`presidio.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAaxlBCs5S89jNt0Wgph+zueAYSwDESMJxsxJXWiHK9n6OTBWXSKhl8QBHBhXTAy11y9URE4H iord7SN9Ysfde/uCTg15lIlaQDMEhlsiW/fa0C0PP1Ze0McUBQqZjgxrjw/eiCWytHgl21UthiqK PJpUGpV7FsI7kHLSc5hPLMZl ) ; Key ID = 48288`
	`presidio.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAao7/8Cc7vd1EUowBskbUsc7/dfyoqD1f4stn3/2Kivpq5efHRemrgZ5t42fYUuR8L2US0CE sh2wje4RQidzQvsSEeZWICNXkI5tKtw9EyspoQdtuEdIvDe1ikIZXIfz1gXT/xohKaw3t8JSKtkr b+qv+9ZwnJdFDNHu+kRXtnmv3fvHLsIzlTziTDNzJPgtX+qitsC3YLEfCYrWvYchs3Ha1VvRY1CO jBLaSk8Rq4I/zM3U8JyWgo4m14LGVF6FT3ZoF7POLzyLQABm5NGcLB0FrHI8WDVJF1f7QIZtPQsl Ni8A+S0dTvPYwbJStpxfSFzyQGqAnje1nx+vfy1mRLs= ) ; Key ID = 11143`
	`presidio.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcKBswSA/KtffjkozZUIUzjN3o/P0rrA6ASMZm4j1sV6XV4i0oI4BrhZyWcbnP2OgA0HQL1T 2Lkiez5dnoU3rb9SQKw60CyfkuQ26626EIlX8I5M+qYp1NDTRVGelob6tMvO2JUlBmQItllApY7W GYnaJIm30rWl8Dti3gNKsUmz ) ; Key ID = 8498`
	DNSKEY=11143/SEP is now in the chain-of-trust
	DS=11143/SHA-256 verifies DNSKEY=11143/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`presidio.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240524065354 20240521055354 11143 presidio.gov. J41ZkEbuOkbiM6XZZdoSDIQ0bRTY5QSPnKG+PS76NO6Q7+jsWCqz1SWffs9F2PYinuSKu/K4f582 9OmeK0aAs5WlX8b7nLttm8HN//m5gsSb/8zzK/y9RPAi6JZRi2DGFBRfobI4Az9JADAtxycwBJIR cZ96qpzK0uzKSGNv+j/QBNShP4tdx7zN27V7oY9lE8GDKtMwBVtrloR05IZKelAdfa3OwdJxuRLb nRz0FjH4Qzf3HRWeK7TF2CAq2wnKWK7GzomgVqsRKhPZnI8VgVKHfnqAUtbm1CKGcSRf4xpMPrJR VWCUgAjiOSLDMOh9/tAFKSRFRbYqQL2ULH9oPw== )`
	RRSIG=11143 and DNSKEY=11143/SEP verifies the DNSKEY RRset
	DNSKEY=48288 is now in the chain-of-trust
	DNSKEY=8498 is now in the chain-of-trust
	Query to usw6.akam.net for presidio.gov/A
	Received 229 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 229 octets ;; HEADER SECTION ;; id = 23697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usw6.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to asia9.akam.net for presidio.gov/SOA
	Received 630 bytes from 95.100.175.65
	;; Response received from [95.100.175.65] 630 octets ;; HEADER SECTION ;; id = 26418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to zc.akam.net for presidio.gov/SOA
	Received 630 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 630 octets ;; HEADER SECTION ;; id = 53057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use6.akam.net for presidio.gov/SOA
	Received 630 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 630 octets ;; HEADER SECTION ;; id = 57212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usw5.akam.net for presidio.gov/SOA
	Received 630 bytes from 23.211.132.64
	;; Response received from [23.211.132.64] 630 octets ;; HEADER SECTION ;; id = 1111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-176.akam.net for presidio.gov/SOA
	Received 630 bytes from 193.108.91.176
	;; Response received from [193.108.91.176] 630 octets ;; HEADER SECTION ;; id = 55953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-145.akam.net for presidio.gov/SOA
	Received 630 bytes from 193.108.91.145
	;; Response received from [193.108.91.145] 630 octets ;; HEADER SECTION ;; id = 2586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usw1.akam.net for presidio.gov/SOA
	Received 630 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 630 octets ;; HEADER SECTION ;; id = 45377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN SOA ;; ANSWER SECTION (2 records) presidio.gov. 300 IN SOA ( 399e-adcs001.ede.pitc.gov. postmaster.whitehouse.gov. 2017022274 ;serial 300 ;refresh 300 ;retry 604800 ;expire 300 ;minimum ) presidio.gov. 300 IN RRSIG ( SOA 7 2 300 20240524065354 20240521055354 48288 presidio.gov. mwpHLs3QfE7Ocq+zOy48VDpn9dd+zRm9X6zMzgO05myaN1eacBg1Cxs1lilPTPHTtiP529aNgPHt ADzCpL6jZRgRR9OYg3txyLy9YiACLxDEHfa55v9rUuj4tJU7nH49SZfXVuVtk1e2rMZ3kbo+Os3L ah/KUhsla2C9Fl9behY= ) ;; AUTHORITY SECTION (9 records) presidio.gov. 3600 IN NS usw5.akam.net. presidio.gov. 3600 IN NS ns1-145.akam.net. presidio.gov. 3600 IN NS zc.akam.net. presidio.gov. 3600 IN NS ns1-176.akam.net. presidio.gov. 3600 IN NS asia9.akam.net. presidio.gov. 3600 IN NS usw6.akam.net. presidio.gov. 3600 IN NS usw1.akam.net. presidio.gov. 3600 IN NS use6.akam.net. presidio.gov. 3600 IN RRSIG ( NS 7 2 3600 20240524065354 20240521055354 48288 presidio.gov. A3lYjPTppR3r+oGDOhjvXr/FbfDdCF7wNz231yU/yM45ZT4JQc85NXKv8X4c2Ve+WthSmQy5R4Ho 1dJuW3cHriBUtXYfMlEjhJYpr5FLI3La8IUrcqjVSjFwnhFl0AuuRqCgRNKPqPdRVEbAyj0lEnYZ digpZdEQe7c3j3qKSUI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usw6.akam.net for presidio.gov/A
	Received 229 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 229 octets ;; HEADER SECTION ;; id = 39891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to ns1-145.akam.net for presidio.gov/A
	Received 229 bytes from 193.108.91.145
	;; Response received from [193.108.91.145] 229 octets ;; HEADER SECTION ;; id = 1041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-145.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to ns1-145.akam.net for presidio.gov/A
	Received 229 bytes from 193.108.91.145
	;; Response received from [193.108.91.145] 229 octets ;; HEADER SECTION ;; id = 59558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to asia9.akam.net for presidio.gov/A
	Received 229 bytes from 95.100.175.65
	;; Response received from [95.100.175.65] 229 octets ;; HEADER SECTION ;; id = 19132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia9.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to asia9.akam.net for presidio.gov/A
	Received 229 bytes from 95.100.175.65
	;; Response received from [95.100.175.65] 229 octets ;; HEADER SECTION ;; id = 28320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to use6.akam.net for presidio.gov/A
	Received 229 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 229 octets ;; HEADER SECTION ;; id = 17347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use6.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to use6.akam.net for presidio.gov/A
	Received 229 bytes from 2.16.40.65
	;; Response received from [2.16.40.65] 229 octets ;; HEADER SECTION ;; id = 5551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to ns1-176.akam.net for presidio.gov/A
	Received 229 bytes from 193.108.91.176
	;; Response received from [193.108.91.176] 229 octets ;; HEADER SECTION ;; id = 3725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-176.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to ns1-176.akam.net for presidio.gov/A
	Received 229 bytes from 193.108.91.176
	;; Response received from [193.108.91.176] 229 octets ;; HEADER SECTION ;; id = 55149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to usw5.akam.net for presidio.gov/A
	Received 229 bytes from 23.211.132.64
	;; Response received from [23.211.132.64] 229 octets ;; HEADER SECTION ;; id = 12146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usw5.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to usw5.akam.net for presidio.gov/A
	Received 229 bytes from 23.211.132.64
	;; Response received from [23.211.132.64] 229 octets ;; HEADER SECTION ;; id = 46059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to zc.akam.net for presidio.gov/A
	Received 229 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 229 octets ;; HEADER SECTION ;; id = 35068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	zc.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to zc.akam.net for presidio.gov/A
	Received 229 bytes from 184.26.160.66
	;; Response received from [184.26.160.66] 229 octets ;; HEADER SECTION ;; id = 8921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

presidio.gov

	Query to usw1.akam.net for presidio.gov/A
	Received 229 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 229 octets ;; HEADER SECTION ;; id = 24642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usw1.akam.net is authoritative for presidio.gov
	Found RRSIG signed by presidio.gov zone
	Query to usw1.akam.net for presidio.gov/A
	Received 229 bytes from 23.61.199.66
	;; Response received from [23.61.199.66] 229 octets ;; HEADER SECTION ;; id = 42917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; presidio.gov. IN A ;; ANSWER SECTION (2 records) presidio.gov. 60 IN A 192.0.66.195 presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	presidio.gov A RR has value 192.0.66.195
	Found 1 RRSIGs over A RRset
	`presidio.gov. 60 IN RRSIG ( A 7 2 60 20240524065354 20240521055354 48288 presidio.gov. axyL2rJkxR4nPc/wKNtvpPHO3RAi2V+3qjfF+ejBWPnHGjtAcoAHIXvjqKtf7bTFDn4Au/HrHyWP ygwrme4+Ig/AqxJCN81IyijYp/B/7UyIRSY0z4G6YogmWGjmVqonRrjd/11GUEVNkeMaqkl1XW7j s+CAlBkF4uEcz1Y38/Y= )`
	RRSIG=48288 and DNSKEY=48288 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test presidio.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: