DNSSEC Debugger - sftool.gov

Domain Name:

Time: 2024-05-17 15:57:37 UTC

Analyzing DNSSEC problems for sftool.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 58223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for sftool.gov/A
	Received 617 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 617 octets ;; HEADER SECTION ;; id = 51050 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 36923 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to m.root-servers.net for gov/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 24657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 779 octets ;; HEADER SECTION ;; id = 47633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for sftool.gov/A
	Received 612 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 612 octets ;; HEADER SECTION ;; id = 34987 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sftool.gov. 10800 IN NS dns.gsa.gov. sftool.gov. 10800 IN NS dns2.gsa.gov. sftool.gov. 10800 IN NS dns3.gsa.gov. sftool.gov. 10800 IN NS dns4.gsa.gov. sftool.gov. 10800 IN NS dns5.gsa.gov. sftool.gov. 3600 IN DS ( 2446 8 2 519ef64bef39138f3067729bbc4b100a1321b7302550a98309e358b4ca2f4cc8 ) sftool.gov. 3600 IN DS ( 40337 8 2 c4d899aff894ddb95ef46319d60391c907c3519b049f77f91156aad1cb9dcf02 ) sftool.gov. 3600 IN DS ( 7732 8 2 5d613e28e451b3109ef69b943d3aa8c74d13340ee628cd229fb07bd791b7e0bb ) sftool.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518165737 20240516145737 10104 gov. SHEPuSXvsqHCWFVtYW5VxgIh4wN+vnzHx/kpNbsyeci2wwAbrqNFRIKzR6LjzbUUYpsqVG4eUJdb y8TI+G+CQ+38YXx3cFYRwS69WrxZyF4bR78QVOp69+nodD2SYvGUX3zrWVomQt7HBs+TTlC9pGX8 BVr5WqNvx5ckcp48JdbqwZtU82yBK+iyXbObKKLWh/V15LW7hfrODuPMwW8yaA== ) ;; ADDITIONAL SECTION (8 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for sftool.gov/DNSKEY
	Received 612 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 612 octets ;; HEADER SECTION ;; id = 38607 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 8 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sftool.gov. 10800 IN NS dns.gsa.gov. sftool.gov. 10800 IN NS dns2.gsa.gov. sftool.gov. 10800 IN NS dns3.gsa.gov. sftool.gov. 10800 IN NS dns4.gsa.gov. sftool.gov. 10800 IN NS dns5.gsa.gov. sftool.gov. 3600 IN DS ( 2446 8 2 519ef64bef39138f3067729bbc4b100a1321b7302550a98309e358b4ca2f4cc8 ) sftool.gov. 3600 IN DS ( 40337 8 2 c4d899aff894ddb95ef46319d60391c907c3519b049f77f91156aad1cb9dcf02 ) sftool.gov. 3600 IN DS ( 7732 8 2 5d613e28e451b3109ef69b943d3aa8c74d13340ee628cd229fb07bd791b7e0bb ) sftool.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518165737 20240516145737 10104 gov. SHEPuSXvsqHCWFVtYW5VxgIh4wN+vnzHx/kpNbsyeci2wwAbrqNFRIKzR6LjzbUUYpsqVG4eUJdb y8TI+G+CQ+38YXx3cFYRwS69WrxZyF4bR78QVOp69+nodD2SYvGUX3zrWVomQt7HBs+TTlC9pGX8 BVr5WqNvx5ckcp48JdbqwZtU82yBK+iyXbObKKLWh/V15LW7hfrODuPMwW8yaA== ) ;; ADDITIONAL SECTION (8 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 ;; { "EDNS-VERSION": 0 }
	Found child zone sftool.gov

sftool.gov

	Checking DS between gov and sftool.gov
	Query to a.ns.gov for sftool.gov/DS
	Received 378 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 378 octets ;; HEADER SECTION ;; id = 14471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN DS ;; ANSWER SECTION (4 records) sftool.gov. 3600 IN DS ( 2446 8 2 519ef64bef39138f3067729bbc4b100a1321b7302550a98309e358b4ca2f4cc8 ) sftool.gov. 3600 IN DS ( 40337 8 2 c4d899aff894ddb95ef46319d60391c907c3519b049f77f91156aad1cb9dcf02 ) sftool.gov. 3600 IN DS ( 7732 8 2 5d613e28e451b3109ef69b943d3aa8c74d13340ee628cd229fb07bd791b7e0bb ) sftool.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518165737 20240516145737 10104 gov. SHEPuSXvsqHCWFVtYW5VxgIh4wN+vnzHx/kpNbsyeci2wwAbrqNFRIKzR6LjzbUUYpsqVG4eUJdb y8TI+G+CQ+38YXx3cFYRwS69WrxZyF4bR78QVOp69+nodD2SYvGUX3zrWVomQt7HBs+TTlC9pGX8 BVr5WqNvx5ckcp48JdbqwZtU82yBK+iyXbObKKLWh/V15LW7hfrODuPMwW8yaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for sftool.gov in the gov zone
	DS=2446/SHA-256 has algorithm RSASHA256
	DS=40337/SHA-256 has algorithm RSASHA256
	DS=7732/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sftool.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518165737 20240516145737 10104 gov. SHEPuSXvsqHCWFVtYW5VxgIh4wN+vnzHx/kpNbsyeci2wwAbrqNFRIKzR6LjzbUUYpsqVG4eUJdb y8TI+G+CQ+38YXx3cFYRwS69WrxZyF4bR78QVOp69+nodD2SYvGUX3zrWVomQt7HBs+TTlC9pGX8 BVr5WqNvx5ckcp48JdbqwZtU82yBK+iyXbObKKLWh/V15LW7hfrODuPMwW8yaA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=2446/SHA-256 is now in the chain-of-trust
	DS=40337/SHA-256 is now in the chain-of-trust
	DS=7732/SHA-256 is now in the chain-of-trust
	`sftool.gov. 3600 IN DS ( 2446 8 2 519ef64bef39138f3067729bbc4b100a1321b7302550a98309e358b4ca2f4cc8 )`
	`sftool.gov. 3600 IN DS ( 40337 8 2 c4d899aff894ddb95ef46319d60391c907c3519b049f77f91156aad1cb9dcf02 )`
	`sftool.gov. 3600 IN DS ( 7732 8 2 5d613e28e451b3109ef69b943d3aa8c74d13340ee628cd229fb07bd791b7e0bb )`
	Query to dns3.gsa.gov for sftool.gov/DNSKEY
	Received 993 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 993 octets ;; HEADER SECTION ;; id = 49672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN DNSKEY ;; ANSWER SECTION (6 records) sftool.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAbLvlhEhI4FWvIZySzEbltM5C8C0hpkA9z+ek7XrbSS3SD2NqD+TNPkAfd0NS3H7BeYcAgf0 NGYCgBUwbEF7GuGnG1FrAMAwqaDZBZrUv98M5nnk9Zlz//gatyz/+9ASzOcKcDG3wMZPQ4nJWdcB Mk1rAXM3AC4tZb1RnB2P85gp ) ; Key ID = 50164 sftool.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdFRRS+oOneFTxo14iBMYXYo37U+h6cQFQ5otVNAjgTbAYjjaGAErm0nBQ2XaCR5BPJc0hTR umYDEgKEuaddfLLWnhRHi4JeN4uYoVEscqCOz7EtdfP/lXmWVHgEjV7STRjgiq33CkhphAvRCaxw 46PuRMVy8HPASj8cO5/iCTnH ) ; Key ID = 2446 sftool.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaVcQqXg7gh95pbjPSaPfP/dP4f9x2Hv7n9EuyMoMFsDh5S92LanierRCqHg2IKW19NR/edA 3D5cVd8Tbt4EQsESF22MSuaxs9ie5oolbfd+ewHH1PoA1T5Q+r1BucHtkhWzzIv/uGd0mt58LYxS sZa6CBu1YXJ2+H0WDhyypCRb ) ; Key ID = 12679 sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 2446 sftool.gov. qaSPMLOi5Q34aFGmtm5mtjSKEQ4sK+A/dcT/Q1mSz2nRHhWxRoXvMYkoqqejGR07iU3IlVHe5r34 QyKaC4VUCaQo2Xkg5jD9KXzdZTAfAg+BFEUnXg6QFGqU9r6m7z72O4uUGKrAq8vbpBDcTBrEhaRn /LkgRoqHq/bT3tScFNY= ) sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. Nw96j5NCxa4B/es7wXpblcStS4/bB84TT7w0oY2HMDUA3jAsJHFQFSJFPCX2Dbp/y1MZnpE7V3Vb fnf3rC/bkl588r/KwL+96wQYgcpjJDfyaIbBEFY7appNeVd9zBUYisfODF8rRUJ7Kq5ky6hzFU+U rqpqze0XWmcWG3EdQks= ) sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. jp7pVdF0Rm9TWLoJ4V+WtSQlWzERn9JCRCMpm7Qdj8aaMQTW857ZzpwSHx34kOsghkFK9BKLU2Ta 1Mz7cOByxQ3a82e8uGvfHy10Ot3zqL+NX+imIDcdpAs+puOE+THJWgdXLlu8+ke12iExpPKpiRZm dMkiIBDFj1ajz1PZE9A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for sftool.gov
	`sftool.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAbLvlhEhI4FWvIZySzEbltM5C8C0hpkA9z+ek7XrbSS3SD2NqD+TNPkAfd0NS3H7BeYcAgf0 NGYCgBUwbEF7GuGnG1FrAMAwqaDZBZrUv98M5nnk9Zlz//gatyz/+9ASzOcKcDG3wMZPQ4nJWdcB Mk1rAXM3AC4tZb1RnB2P85gp ) ; Key ID = 50164`
	`sftool.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAdFRRS+oOneFTxo14iBMYXYo37U+h6cQFQ5otVNAjgTbAYjjaGAErm0nBQ2XaCR5BPJc0hTR umYDEgKEuaddfLLWnhRHi4JeN4uYoVEscqCOz7EtdfP/lXmWVHgEjV7STRjgiq33CkhphAvRCaxw 46PuRMVy8HPASj8cO5/iCTnH ) ; Key ID = 2446`
	`sftool.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaVcQqXg7gh95pbjPSaPfP/dP4f9x2Hv7n9EuyMoMFsDh5S92LanierRCqHg2IKW19NR/edA 3D5cVd8Tbt4EQsESF22MSuaxs9ie5oolbfd+ewHH1PoA1T5Q+r1BucHtkhWzzIv/uGd0mt58LYxS sZa6CBu1YXJ2+H0WDhyypCRb ) ; Key ID = 12679`
	DNSKEY=2446/SEP is now in the chain-of-trust
	DS=2446/SHA-256 verifies DNSKEY=2446/SEP
	DS=40337/SHA-256 is published, but a corresponding DNSKEY is not
	DS=7732/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 2446 sftool.gov. qaSPMLOi5Q34aFGmtm5mtjSKEQ4sK+A/dcT/Q1mSz2nRHhWxRoXvMYkoqqejGR07iU3IlVHe5r34 QyKaC4VUCaQo2Xkg5jD9KXzdZTAfAg+BFEUnXg6QFGqU9r6m7z72O4uUGKrAq8vbpBDcTBrEhaRn /LkgRoqHq/bT3tScFNY= )`
	`sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. Nw96j5NCxa4B/es7wXpblcStS4/bB84TT7w0oY2HMDUA3jAsJHFQFSJFPCX2Dbp/y1MZnpE7V3Vb fnf3rC/bkl588r/KwL+96wQYgcpjJDfyaIbBEFY7appNeVd9zBUYisfODF8rRUJ7Kq5ky6hzFU+U rqpqze0XWmcWG3EdQks= )`
	`sftool.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. jp7pVdF0Rm9TWLoJ4V+WtSQlWzERn9JCRCMpm7Qdj8aaMQTW857ZzpwSHx34kOsghkFK9BKLU2Ta 1Mz7cOByxQ3a82e8uGvfHy10Ot3zqL+NX+imIDcdpAs+puOE+THJWgdXLlu8+ke12iExpPKpiRZm dMkiIBDFj1ajz1PZE9A= )`
	RRSIG=2446 and DNSKEY=2446/SEP verifies the DNSKEY RRset
	RRSIG=12679 and DNSKEY=12679 verifies the DNSKEY RRset
	RRSIG=50164 and DNSKEY=50164 verifies the DNSKEY RRset
	DNSKEY=50164 is now in the chain-of-trust
	DNSKEY=12679 is now in the chain-of-trust
	Query to dns5.gsa.gov for sftool.gov/A
	Received 395 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 395 octets ;; HEADER SECTION ;; id = 53443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns5.gsa.gov is authoritative for sftool.gov
	Found RRSIG signed by sftool.gov zone
	Query to dns.gsa.gov for sftool.gov/SOA
	Received 437 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 437 octets ;; HEADER SECTION ;; id = 5073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN SOA ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 734900090 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. GRmGegz1gwywxpDGSfY5G56iut7T5Lxhkzct0GZdR0Cjx3NAoBC8z4moNNQ7gj/j63VxxpEPlPMP CR8zs0MQeL2SGgN4NsXTj6Vnk/6TuuvV9Y9Ir1vyWUJBo86Me9NUs8ykFO24XkXTSLCMSRiW2yco GE0NkiKeUZLC9gqnuG4= ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. ERpRTJg0WxHBd3dIZSX6EkDrBuW2T4xfv226g2x7K1mpzgWkolvcW/8CvyCXSINewe/t4TX/4llf rfU+3D0quKcdjrAjvLx4YhnYXNfoyZLeTzi30a+033N0JImGujZryKxU3OYHNSxtOPeqJz0gtOYA I224VgcXoB5RMfq7iPQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.gsa.gov for sftool.gov/SOA
	Received 437 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 437 octets ;; HEADER SECTION ;; id = 27184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN SOA ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 734900090 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. GRmGegz1gwywxpDGSfY5G56iut7T5Lxhkzct0GZdR0Cjx3NAoBC8z4moNNQ7gj/j63VxxpEPlPMP CR8zs0MQeL2SGgN4NsXTj6Vnk/6TuuvV9Y9Ir1vyWUJBo86Me9NUs8ykFO24XkXTSLCMSRiW2yco GE0NkiKeUZLC9gqnuG4= ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. ERpRTJg0WxHBd3dIZSX6EkDrBuW2T4xfv226g2x7K1mpzgWkolvcW/8CvyCXSINewe/t4TX/4llf rfU+3D0quKcdjrAjvLx4YhnYXNfoyZLeTzi30a+033N0JImGujZryKxU3OYHNSxtOPeqJz0gtOYA I224VgcXoB5RMfq7iPQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.gsa.gov for sftool.gov/SOA
	Received 437 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 437 octets ;; HEADER SECTION ;; id = 23654 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN SOA ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 734900090 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. GRmGegz1gwywxpDGSfY5G56iut7T5Lxhkzct0GZdR0Cjx3NAoBC8z4moNNQ7gj/j63VxxpEPlPMP CR8zs0MQeL2SGgN4NsXTj6Vnk/6TuuvV9Y9Ir1vyWUJBo86Me9NUs8ykFO24XkXTSLCMSRiW2yco GE0NkiKeUZLC9gqnuG4= ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. ERpRTJg0WxHBd3dIZSX6EkDrBuW2T4xfv226g2x7K1mpzgWkolvcW/8CvyCXSINewe/t4TX/4llf rfU+3D0quKcdjrAjvLx4YhnYXNfoyZLeTzi30a+033N0JImGujZryKxU3OYHNSxtOPeqJz0gtOYA I224VgcXoB5RMfq7iPQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.gsa.gov for sftool.gov/SOA
	Received 437 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 437 octets ;; HEADER SECTION ;; id = 5184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN SOA ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 734900090 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. GRmGegz1gwywxpDGSfY5G56iut7T5Lxhkzct0GZdR0Cjx3NAoBC8z4moNNQ7gj/j63VxxpEPlPMP CR8zs0MQeL2SGgN4NsXTj6Vnk/6TuuvV9Y9Ir1vyWUJBo86Me9NUs8ykFO24XkXTSLCMSRiW2yco GE0NkiKeUZLC9gqnuG4= ) sftool.gov. 10800 IN RRSIG ( SOA 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. ERpRTJg0WxHBd3dIZSX6EkDrBuW2T4xfv226g2x7K1mpzgWkolvcW/8CvyCXSINewe/t4TX/4llf rfU+3D0quKcdjrAjvLx4YhnYXNfoyZLeTzi30a+033N0JImGujZryKxU3OYHNSxtOPeqJz0gtOYA I224VgcXoB5RMfq7iPQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns5.gsa.gov for sftool.gov/A
	Received 395 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 395 octets ;; HEADER SECTION ;; id = 12021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sftool.gov A RR has value 159.142.81.215
	Found 2 RRSIGs over A RRset
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= )`
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= )`
	RRSIG=12679 and DNSKEY=12679 verifies the A RRset
	RRSIG=50164 and DNSKEY=50164 verifies the A RRset

sftool.gov

	Query to dns2.gsa.gov for sftool.gov/A
	Received 395 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 395 octets ;; HEADER SECTION ;; id = 47042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.gsa.gov is authoritative for sftool.gov
	Found RRSIG signed by sftool.gov zone
	Query to dns2.gsa.gov for sftool.gov/A
	Received 395 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 395 octets ;; HEADER SECTION ;; id = 60470 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sftool.gov A RR has value 159.142.81.215
	Found 2 RRSIGs over A RRset
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= )`
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= )`
	RRSIG=12679 and DNSKEY=12679 verifies the A RRset
	RRSIG=50164 and DNSKEY=50164 verifies the A RRset

sftool.gov

	Query to dns3.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 395 octets ;; HEADER SECTION ;; id = 33548 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.gsa.gov is authoritative for sftool.gov
	Found RRSIG signed by sftool.gov zone
	Query to dns3.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 395 octets ;; HEADER SECTION ;; id = 56914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sftool.gov A RR has value 159.142.81.215
	Found 2 RRSIGs over A RRset
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= )`
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= )`
	RRSIG=12679 and DNSKEY=12679 verifies the A RRset
	RRSIG=50164 and DNSKEY=50164 verifies the A RRset

sftool.gov

	Query to dns.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 395 octets ;; HEADER SECTION ;; id = 62972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.gsa.gov is authoritative for sftool.gov
	Found RRSIG signed by sftool.gov zone
	Query to dns.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 395 octets ;; HEADER SECTION ;; id = 19834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sftool.gov A RR has value 159.142.81.215
	Found 2 RRSIGs over A RRset
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= )`
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= )`
	RRSIG=12679 and DNSKEY=12679 verifies the A RRset
	RRSIG=50164 and DNSKEY=50164 verifies the A RRset

sftool.gov

	Query to dns4.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 395 octets ;; HEADER SECTION ;; id = 62785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.gsa.gov is authoritative for sftool.gov
	Found RRSIG signed by sftool.gov zone
	Query to dns4.gsa.gov for sftool.gov/A
	Received 395 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 395 octets ;; HEADER SECTION ;; id = 64247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sftool.gov. IN A ;; ANSWER SECTION (3 records) sftool.gov. 10800 IN A 159.142.81.215 sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= ) sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sftool.gov A RR has value 159.142.81.215
	Found 2 RRSIGs over A RRset
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 12679 sftool.gov. BlnV/Xs8uUhjrSKC39112xtrpNBpFywvtxKAM7XyGUrhBi5+LCaePOjzO/IRjBX3YUnuEHwtDCfr F3AXIqxFM5QzwoP8xKPqI1mdlqmwnhJ+Stpw7Ozr5YzpljScXbSPYSvi72wBlx9x8bm5QLkLoCpe zSUTAanwsEsa9aEnt5A= )`
	`sftool.gov. 10800 IN RRSIG ( A 8 2 10800 20240615185449 20240516184949 50164 sftool.gov. RdvMaNGRp9VBgsSObFH05nE092rZCxTr+2ke1vIvEY73EGq7mDZEgVFpBnJvH36UUWblTZ285+qN RfhKSwhFqc2fihgi2SlT/LCA9JQZhh7O9+nsY2IAT+jzq0WdGqu6e9YLG2VElEtfhoU2xCxiP3Be 6316bTPpx22QnsHfNwI= )`
	RRSIG=12679 and DNSKEY=12679 verifies the A RRset
	RRSIG=50164 and DNSKEY=50164 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sftool.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: