DNSSEC Debugger - CENSUS.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-15 06:14:25 UTC

Analyzing DNSSEC problems for CENSUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 16543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for CENSUS.GOV/A
	Received 623 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 623 octets ;; HEADER SECTION ;; id = 4285 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260427210000 20260414200000 54393 . JwpR+HkeG0hgZsnEraPTtis8F/wXLphgVOU3uJS9sGqbv5/ElYw04tD1x8OXUN1qu6oOvg3/2Nx9 v9mcSdAqazoFwAa56shMxKE27USXWfyvVqbziqd/qpoHQUV69xLRgOsQh6JtjIrj7vB5Wvzh1t4T g46g0e7zsQowTbySWG9HQBv/GiBolYtCq+IjMdPU6bF17Qyt/+nQjKqTqF+D9cNmuDLRwstRmpa8 9dH5yraJIJXP31kkeuj1HxXBp8AZznNd4JI8gc0N6gewISJl/yLPA+ItIRKC26AvSgSrJUGlzkCr XbotOppIcDPEnj4Bym8ruTuFqF0EP4Q+nfpQ0A== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 9342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260427210000 20260414200000 54393 . JwpR+HkeG0hgZsnEraPTtis8F/wXLphgVOU3uJS9sGqbv5/ElYw04tD1x8OXUN1qu6oOvg3/2Nx9 v9mcSdAqazoFwAa56shMxKE27USXWfyvVqbziqd/qpoHQUV69xLRgOsQh6JtjIrj7vB5Wvzh1t4T g46g0e7zsQowTbySWG9HQBv/GiBolYtCq+IjMdPU6bF17Qyt/+nQjKqTqF+D9cNmuDLRwstRmpa8 9dH5yraJIJXP31kkeuj1HxXBp8AZznNd4JI8gc0N6gewISJl/yLPA+ItIRKC26AvSgSrJUGlzkCr XbotOppIcDPEnj4Bym8ruTuFqF0EP4Q+nfpQ0A== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 60231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260427210000 20260414200000 54393 . JwpR+HkeG0hgZsnEraPTtis8F/wXLphgVOU3uJS9sGqbv5/ElYw04tD1x8OXUN1qu6oOvg3/2Nx9 v9mcSdAqazoFwAa56shMxKE27USXWfyvVqbziqd/qpoHQUV69xLRgOsQh6JtjIrj7vB5Wvzh1t4T g46g0e7zsQowTbySWG9HQBv/GiBolYtCq+IjMdPU6bF17Qyt/+nQjKqTqF+D9cNmuDLRwstRmpa8 9dH5yraJIJXP31kkeuj1HxXBp8AZznNd4JI8gc0N6gewISJl/yLPA+ItIRKC26AvSgSrJUGlzkCr XbotOppIcDPEnj4Bym8ruTuFqF0EP4Q+nfpQ0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260427210000 20260414200000 54393 . JwpR+HkeG0hgZsnEraPTtis8F/wXLphgVOU3uJS9sGqbv5/ElYw04tD1x8OXUN1qu6oOvg3/2Nx9 v9mcSdAqazoFwAa56shMxKE27USXWfyvVqbziqd/qpoHQUV69xLRgOsQh6JtjIrj7vB5Wvzh1t4T g46g0e7zsQowTbySWG9HQBv/GiBolYtCq+IjMdPU6bF17Qyt/+nQjKqTqF+D9cNmuDLRwstRmpa8 9dH5yraJIJXP31kkeuj1HxXBp8AZznNd4JI8gc0N6gewISJl/yLPA+ItIRKC26AvSgSrJUGlzkCr XbotOppIcDPEnj4Bym8ruTuFqF0EP4Q+nfpQ0A== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 2278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for CENSUS.GOV/A
	Received 456 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 456 octets ;; HEADER SECTION ;; id = 65148 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CENSUS.GOV. 10800 IN NS ns1e.CENSUS.GOV. CENSUS.GOV. 10800 IN NS ns2e.CENSUS.GOV. CENSUS.GOV. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) CENSUS.GOV. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) CENSUS.GOV. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) CENSUS.GOV. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) CENSUS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260416071425 20260414051425 35496 gov. moOFUlpYk7Zxvki42xTQ/JHyAF81xQ/PPrINnkpagJ1LqFoNYam3S2v5LVWTsYgel+Ec8FKeaas0 zR6EXRMryw== ) ;; ADDITIONAL SECTION (5 records) ns1e.CENSUS.GOV. 3600 IN A 148.129.129.22 ns1e.CENSUS.GOV. 3600 IN AAAA 2610:20:2000:101::16:0 ns2e.CENSUS.GOV. 3600 IN A 148.129.75.22 ns2e.CENSUS.GOV. 3600 IN AAAA 2610:20:2010:a04::16:0 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for CENSUS.GOV/DNSKEY
	Received 456 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 456 octets ;; HEADER SECTION ;; id = 43179 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CENSUS.GOV. 10800 IN NS ns1e.CENSUS.GOV. CENSUS.GOV. 10800 IN NS ns2e.CENSUS.GOV. CENSUS.GOV. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) CENSUS.GOV. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) CENSUS.GOV. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) CENSUS.GOV. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) CENSUS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260416071425 20260414051425 35496 gov. tVFDLlB6ezSqOayZFIZcaIWvJX71OXsvVy0cpnI+rJY6GpXgjCHMtvkIM6oyuD6FhEOjVC4ZuIBi KOvLr8IFcw== ) ;; ADDITIONAL SECTION (5 records) ns1e.CENSUS.GOV. 3600 IN A 148.129.129.22 ns1e.CENSUS.GOV. 3600 IN AAAA 2610:20:2000:101::16:0 ns2e.CENSUS.GOV. 3600 IN A 148.129.75.22 ns2e.CENSUS.GOV. 3600 IN AAAA 2610:20:2010:a04::16:0 ;; { "EDNS-VERSION": 0 }
	Found child zone CENSUS.GOV

CENSUS.GOV

	Checking DS between GOV and CENSUS.GOV
	Query to c.ns.gov for CENSUS.GOV/DS
	Received 330 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 330 octets ;; HEADER SECTION ;; id = 64053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN DS ;; ANSWER SECTION (5 records) CENSUS.GOV. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 ) CENSUS.GOV. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c ) CENSUS.GOV. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 ) CENSUS.GOV. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 ) CENSUS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260416071425 20260414051425 35496 gov. ltTnSz9iyRrY3uEkJ0cx+WTkint3WzaaINVI8zNyUQAi07/w40tlbUjc0HziLQKBZ6ArK5XWd49W N2eeaHIKPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for CENSUS.GOV in the GOV zone
	DS=38584/SHA-256 has algorithm RSASHA256
	DS=54670/SHA-256 has algorithm RSASHA256
	DS=63460/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=9606/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`CENSUS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260416071425 20260414051425 35496 gov. ltTnSz9iyRrY3uEkJ0cx+WTkint3WzaaINVI8zNyUQAi07/w40tlbUjc0HziLQKBZ6ArK5XWd49W N2eeaHIKPg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=38584/SHA-256 is now in the chain-of-trust
	DS=54670/SHA-256 is now in the chain-of-trust
	DS=63460/SHA-256 is now in the chain-of-trust
	DS=9606/SHA-256 is now in the chain-of-trust
	`CENSUS.GOV. 3600 IN DS ( 38584 8 2 aecf1415107033bff6c71a71b814538f553e9fe8edb6e4cb3e0a9d8ea83e8f91 )`
	`CENSUS.GOV. 3600 IN DS ( 54670 8 2 0db62e8dad5f492adf050d2b36ba29ca1daad9c49cacf4e12c293f939b151c3c )`
	`CENSUS.GOV. 3600 IN DS ( 63460 7 2 edbed9d0f2d04bccd6beb6310eb7327469a27c024e24778ac63422f69316bfc5 )`
	`CENSUS.GOV. 3600 IN DS ( 9606 7 2 f78ac01e59776fe73bd15b7de474cac666146a45ca41b19bc47c37695ee2e8b9 )`
	Query to ns2e.CENSUS.GOV for CENSUS.GOV/DNSKEY
	Received 3563 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 3563 octets ;; HEADER SECTION ;; id = 42628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 16 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN DNSKEY ;; ANSWER SECTION (16 records) CENSUS.GOV. 302400 IN DNSKEY ( 257 3 8 AwEAAdSeHpPJfXc+H/oAgxECjmworC0XzcYMDjVfIdRqrS+5+WKtmHDjffXHYO479aGeILZm7VAH ad1ak9xqYegWgZnl0cBLOQfSII0q5/yQpKsuAv5F01r8V4p3o+sWEI8okxDkWpAuP7+M+umlPSKH AtwchXFuBty9xcg9g1y3+K0Kl1FcSE0hcktbLxbDSr8TEqBfbrnZ49Hfc9+xp42+T+xyESYvcMYY Ls3auwludpzq30XCMyVJnS8tju55WzX/iEMsoqZ8OIaydDg/bNMa3Z90BUG6Awc1qw0LdaDp4A5Z BN5+6CmuWWT5Bpq6P9lswcrdwguGg2TqGY+q7+THnzs= ) ; keytag 38584 CENSUS.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAb3ogzspZrW4dlbkJnFRwxB0LQ3vph4x4KPBxzhMEtxjwcsCT+cSX0KBFMAhwhALxli4UxOK LkhjXEiMDX4zdp8f0NuQ57fTeTLXJZa32W+Lr4o+nzy2cQ1Le5BWzSAwcE3z1uzRNQqwT+SPNFMz WM72nYVO7sSNeQvvYDSGE7bZTQEfkOA/BUgh0MpmYocNUsgn9tLc7qx2a0wfVnJAuxDLA/G1pNYy 83cReGFMHbm6gGNTTrYnD7UlYrkIGdLvPCv5uft21ZHuPtBVZj+HPSaJQss2BaScbHhROh2rEQ3Y N1hIrCJvbKkccHC/aEd8zAj4GlNRmiYtAcODc74suU0= ) ; keytag 9606 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAfwrUSMNnJ9mVXVVefDTsyqIsO+iX/E9nPtv5nxfa5uI4FXBYN0FIP25doZ8smzrboPTWBb5 NPF/HYCUp1eaMwT3d1MFmrav8unc45Stkx2mzL18amWFgEOFilx9/3nZhiQ0ONCmibPjJttPq1xW GXm2CNIR9+cgjpS/whUDTLsT ) ; keytag 13650 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAdYs+zikbGWzBhbdJmLEJIRe1xWG+Il1ftC1azHWZUOXMqMgyV17JrL+1jotv6DdmRNaxdZi aCMOnh9PTB5HbqjC3l0whCSZTQDa5Bqg3QByn8+Sy9mkteSKRfqfwK7fv0TVpe5OeR/DaTGxjRAe MFwXzKayopp5SJGHoCNDgFBX ) ; keytag 2967 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAbBniVo0IVB2Jn82Rj5VhyIXhZixYcwpzwj6I+TMaaAxVZN2LzMtkD++mtP94neKdo3DJSQl 4A+lZv/CHokmEGGMrxb+SahCu4gVeQL2VNKtC4FgF48ik8ZUG/rVjg9cFZL8qPRRDx59ngQPwNa5 d2+LQDOYGUE774XJYEYFMwMB ) ; keytag 25138 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAeadb4O9UiCUttMb8Xdggj93kIgcgR5mnaTT4FUFJhMTkbBGL1J98K4Oh34lLvO3pBHWiPng kXKMqtDKfmdZfhXUIvh0qHfofAZx0BMtcy4ySLo35yr+sZ3OgTBZJrsXhqWmjpKKOYqD3MKDHSqT XJM77qYGy23SLLdDH6DUwRdR ) ; keytag 65489 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAcb1db8fGGc7y4uAeQp/jzx/974uI/viXo4AxqwQTYzNiXx3MhDuSFGjK7yuKNCgI+RnmUCX /xBxLYFdwJ+ihkBQOjb0Za5+GwLzDmKgY7zEdGf4iHnARfFGsjUNMet3Yn0hVltvWup3v2Q3oSuW WNQ4OKTEC7k8pvW4l+s8EmtL ) ; keytag 28249 CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAaDpqYoeJBbClBCK9S1RdV29/oi3TufO7gCGzOfCzp7iiy8ieN78b1Jg0AlCJXtG1AOJ6lXF 5YkExaYzSkxCSfUoVfMSRjYgRRl4WdrsoGEZYZX9VChiduq22a0QO/0Xgwk76nhVJ0Hsequb4iQ6 fG+KohZL9Hvi6clT2VSLi7Db ) ; keytag 3075 CENSUS.GOV. 302400 IN DNSKEY ( 257 3 8 AwEAAcWeS7zKzo+EPPEGkBhrT0YLL5/g7P8rkqwx6epLvMkLd1vZj0E+etDCMFCOs/M40heiMxuR fOWiwPrD+yoHiq0JTXl/ZEuVNLkDOJTfdYOYESBRbKGa/LVOaN+WhlEojndX+oU+7JLEcdw0ZMJe DqUyJEceGWvsNiK9pS0Bp66CW5rFnHUvOA3zMCVLUZrQNvy3oAPtFik2r46ZDgbPjROTaaJ3XiQo GctnHJoBq6eN0wzCnYKOZ8a89bx6SWE22+PejbFcNMokW0KhbOwf1aNGugHxS2ohqIvVDUNDhi6N 2lGekB05CfNb+q2QrrrmDDDPHbHxYMrVQc0oX4unKxk= ) ; keytag 54670 CENSUS.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAapBQAhlwMfv/LuCwH79WkOYYat984cqvfjnrQk1FyJMyWav2u7NKgz6t9Dr3kFUEFJy2rOl AXE4NM7bAJmOTuJEul/ccCgUbIauVTedTyVcwEbM4QUKQosxjVMXqzMd8DYRf7xMA/bRdpZzpWvY uQPnSOXPu9p5nwxni463Jz6Yf44yobPCiM5xyeni7tZAuWzPUEiVgmt3IP4RocB8O+L3I12N/i2o NUNJPCYXt0zyMq8DHrwUrlvIBTUt1nsrE2qBHDseQU7/cFU32VRq1gK9SqHLFr4lqQsTCIvoo1xp 2sZTKszM2Cj5/eWEFFfzqscEAUmhRCvlOS8i3F1ZKW0= ) ; keytag 63460 CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 9606 census.gov. dE5ol0LX3faLfGwNb1BM/A+GOwpjD0+PtKdf+jojhbFa6rMN3kzD36Y0V2MNSRpnt85KwYWFGzTw DHe2fWeU6LcCSogG7Nei6vf3UCQaEU+zie4mTyYNcTW3qYrHCMwgzoyJgYVUyKhEgC7ls8wbv5ii HYp3NfjuJpg565jTQXo4Oi4+6/XDmO7j6aNZpERjGbpSI6QfgG/5oN5N4XU6jrS69ezJp9cs+k3N oO9n4cDm4pM5BzfJ8pPP9pt6WHI9PSeGQ82um2wRa/Ono/stLKcp1PdxW2Ftg9qtw9tBftrwUpJ/ Xj0gzgRfOw1ji8cUayMjlRxnNM6XL7EKXAgw/w== ) CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 63460 census.gov. KNeBo6Dp966I1COVssbwWp6vL1aNsu/hoS91tBMWD8QZ8ob4SKmMOvUBX8l1VLlFM8/NgNCMbnrz YuwxPVct7Gyx05quOM/YoBjTTPqAEadpt5luo8Q5CHKHSc+V2Q/P0cyG8q8hC5LchZ9jlZW8Ahf5 8qgunTxg8+yo/n4Uq3r4bMHcR+GUaJtE+2l7uSlxueU3bzejMTZCIxNMvHkHPLqNa6d/aoEfTqgl 8JaiF+8mV8cpFkIp4gwBqMbnJXSApCSba681+32vuS/5bocktLmhNDCXNRWotekkU5sSfFLlJVJI x6boD0kirHlNTYpAp9Ca7jCuQC8iXcchybjaLw== ) CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 65489 census.gov. 5Eve9LHwTpK4IOdrC4ObNciGk4CoWh5daLIPkJWOznU29EcgPkCJcnt7YprZPZ0V+7/uREFsBcz5 sIGvp73GC2+NfuJyXZXQL7ZqcOYhXvhmuHwkwNty4BiB8lAGeEpmaxzoYSuIEmOLWAJb51et0dFA 78XZUL6jP+AM3ebNoz0= ) CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 25138 census.gov. c6/NI8JNJuarXhZNTtnC7ChWA/0C1aLsatIHoPxeDc51H3PVTK7xruGP4Ib1tXdCk4oc4rmS+CH8 cB5ut2E1ZzZaUhdsY33nLol9+eWKHDHDxmspkeFQpnKctfNkn2JLtwBlkwTfVcae8hZ3IUGN68Xx SZtRfYlvYPOqP3qja2g= ) CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 38584 census.gov. deg8dq7A5owSqsLp/kHWxz/ON21Fi0TIaS2xXJWTQpSaYAwlnvlbvGGEBDYOsKDyi5pInRWKvcJy eRUftJmvc/cw7f/Lbzzb/3zOUI35Mb2w2cZy+rgVBOolgcA17ENoFv/WM55BsnkYx3FR/rSFP+ur LOHTmaIYNIj8SapPjcH4A6bYZLy0Sb4K4JHcQG5IBPAq7+hjMHEV2kBFKPY2KeipNrdwd58VCF1J 9U05/AZnFgyA+QjJDsYX5/07y/WqV6aIT4U5y6DSIIXPBW5zJqiySfkctKEfXTS/4yXQZHq6XKkZ KPzMKCjUexazzZZFzVfnKCdBtWbKqVCknE2sFg== ) CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 54670 census.gov. TPhi5STQKtngq+llKEt5FV+8IuowOQHOgjBg/0/erJg0hQ9WBIt3ttmD7smrQtRyfXwuW90T5XJp 0Igi1a3NSk9b3LIYUyymDWCXl66jRij+a2IOdqlvTy8CYWjA8scWUh0UmmuAbXPAeGWEyun8rXK+ gXY+SZLNaKEOqZrKX8WkYc+X14m9pl+vFDwfjiCvrNEqyRwyrpD6Paw62HJMwJ7T4HRh80eKlHm5 KvTAcSPcMVsYbX/agmIDWJN1xROIcz1+sLf9ZU4vQwxLzjmAnfvu2YSfUvq98U9J5s7QZe2HclUZ muvGBf/nHEcifPt09BR7G17eo2QNXiOstvojng== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 10 DNSKEY records for CENSUS.GOV
	`CENSUS.GOV. 302400 IN DNSKEY ( 257 3 8 AwEAAdSeHpPJfXc+H/oAgxECjmworC0XzcYMDjVfIdRqrS+5+WKtmHDjffXHYO479aGeILZm7VAH ad1ak9xqYegWgZnl0cBLOQfSII0q5/yQpKsuAv5F01r8V4p3o+sWEI8okxDkWpAuP7+M+umlPSKH AtwchXFuBty9xcg9g1y3+K0Kl1FcSE0hcktbLxbDSr8TEqBfbrnZ49Hfc9+xp42+T+xyESYvcMYY Ls3auwludpzq30XCMyVJnS8tju55WzX/iEMsoqZ8OIaydDg/bNMa3Z90BUG6Awc1qw0LdaDp4A5Z BN5+6CmuWWT5Bpq6P9lswcrdwguGg2TqGY+q7+THnzs= ) ; keytag 38584`
	`CENSUS.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAb3ogzspZrW4dlbkJnFRwxB0LQ3vph4x4KPBxzhMEtxjwcsCT+cSX0KBFMAhwhALxli4UxOK LkhjXEiMDX4zdp8f0NuQ57fTeTLXJZa32W+Lr4o+nzy2cQ1Le5BWzSAwcE3z1uzRNQqwT+SPNFMz WM72nYVO7sSNeQvvYDSGE7bZTQEfkOA/BUgh0MpmYocNUsgn9tLc7qx2a0wfVnJAuxDLA/G1pNYy 83cReGFMHbm6gGNTTrYnD7UlYrkIGdLvPCv5uft21ZHuPtBVZj+HPSaJQss2BaScbHhROh2rEQ3Y N1hIrCJvbKkccHC/aEd8zAj4GlNRmiYtAcODc74suU0= ) ; keytag 9606`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAfwrUSMNnJ9mVXVVefDTsyqIsO+iX/E9nPtv5nxfa5uI4FXBYN0FIP25doZ8smzrboPTWBb5 NPF/HYCUp1eaMwT3d1MFmrav8unc45Stkx2mzL18amWFgEOFilx9/3nZhiQ0ONCmibPjJttPq1xW GXm2CNIR9+cgjpS/whUDTLsT ) ; keytag 13650`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAdYs+zikbGWzBhbdJmLEJIRe1xWG+Il1ftC1azHWZUOXMqMgyV17JrL+1jotv6DdmRNaxdZi aCMOnh9PTB5HbqjC3l0whCSZTQDa5Bqg3QByn8+Sy9mkteSKRfqfwK7fv0TVpe5OeR/DaTGxjRAe MFwXzKayopp5SJGHoCNDgFBX ) ; keytag 2967`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAbBniVo0IVB2Jn82Rj5VhyIXhZixYcwpzwj6I+TMaaAxVZN2LzMtkD++mtP94neKdo3DJSQl 4A+lZv/CHokmEGGMrxb+SahCu4gVeQL2VNKtC4FgF48ik8ZUG/rVjg9cFZL8qPRRDx59ngQPwNa5 d2+LQDOYGUE774XJYEYFMwMB ) ; keytag 25138`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAeadb4O9UiCUttMb8Xdggj93kIgcgR5mnaTT4FUFJhMTkbBGL1J98K4Oh34lLvO3pBHWiPng kXKMqtDKfmdZfhXUIvh0qHfofAZx0BMtcy4ySLo35yr+sZ3OgTBZJrsXhqWmjpKKOYqD3MKDHSqT XJM77qYGy23SLLdDH6DUwRdR ) ; keytag 65489`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 8 AwEAAcb1db8fGGc7y4uAeQp/jzx/974uI/viXo4AxqwQTYzNiXx3MhDuSFGjK7yuKNCgI+RnmUCX /xBxLYFdwJ+ihkBQOjb0Za5+GwLzDmKgY7zEdGf4iHnARfFGsjUNMet3Yn0hVltvWup3v2Q3oSuW WNQ4OKTEC7k8pvW4l+s8EmtL ) ; keytag 28249`
	`CENSUS.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAaDpqYoeJBbClBCK9S1RdV29/oi3TufO7gCGzOfCzp7iiy8ieN78b1Jg0AlCJXtG1AOJ6lXF 5YkExaYzSkxCSfUoVfMSRjYgRRl4WdrsoGEZYZX9VChiduq22a0QO/0Xgwk76nhVJ0Hsequb4iQ6 fG+KohZL9Hvi6clT2VSLi7Db ) ; keytag 3075`
	`CENSUS.GOV. 302400 IN DNSKEY ( 257 3 8 AwEAAcWeS7zKzo+EPPEGkBhrT0YLL5/g7P8rkqwx6epLvMkLd1vZj0E+etDCMFCOs/M40heiMxuR fOWiwPrD+yoHiq0JTXl/ZEuVNLkDOJTfdYOYESBRbKGa/LVOaN+WhlEojndX+oU+7JLEcdw0ZMJe DqUyJEceGWvsNiK9pS0Bp66CW5rFnHUvOA3zMCVLUZrQNvy3oAPtFik2r46ZDgbPjROTaaJ3XiQo GctnHJoBq6eN0wzCnYKOZ8a89bx6SWE22+PejbFcNMokW0KhbOwf1aNGugHxS2ohqIvVDUNDhi6N 2lGekB05CfNb+q2QrrrmDDDPHbHxYMrVQc0oX4unKxk= ) ; keytag 54670`
	`CENSUS.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAapBQAhlwMfv/LuCwH79WkOYYat984cqvfjnrQk1FyJMyWav2u7NKgz6t9Dr3kFUEFJy2rOl AXE4NM7bAJmOTuJEul/ccCgUbIauVTedTyVcwEbM4QUKQosxjVMXqzMd8DYRf7xMA/bRdpZzpWvY uQPnSOXPu9p5nwxni463Jz6Yf44yobPCiM5xyeni7tZAuWzPUEiVgmt3IP4RocB8O+L3I12N/i2o NUNJPCYXt0zyMq8DHrwUrlvIBTUt1nsrE2qBHDseQU7/cFU32VRq1gK9SqHLFr4lqQsTCIvoo1xp 2sZTKszM2Cj5/eWEFFfzqscEAUmhRCvlOS8i3F1ZKW0= ) ; keytag 63460`
	DNSKEY=38584/SEP is now in the chain-of-trust
	DS=38584/SHA-256 verifies DNSKEY=38584/SEP
	DNSKEY=9606/SEP is now in the chain-of-trust
	DS=9606/SHA-256 verifies DNSKEY=9606/SEP
	DNSKEY=54670/SEP is now in the chain-of-trust
	DS=54670/SHA-256 verifies DNSKEY=54670/SEP
	DNSKEY=63460/SEP is now in the chain-of-trust
	DS=63460/SHA-256 verifies DNSKEY=63460/SEP
	Found 6 RRSIGs over DNSKEY RRset
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 9606 census.gov. dE5ol0LX3faLfGwNb1BM/A+GOwpjD0+PtKdf+jojhbFa6rMN3kzD36Y0V2MNSRpnt85KwYWFGzTw DHe2fWeU6LcCSogG7Nei6vf3UCQaEU+zie4mTyYNcTW3qYrHCMwgzoyJgYVUyKhEgC7ls8wbv5ii HYp3NfjuJpg565jTQXo4Oi4+6/XDmO7j6aNZpERjGbpSI6QfgG/5oN5N4XU6jrS69ezJp9cs+k3N oO9n4cDm4pM5BzfJ8pPP9pt6WHI9PSeGQ82um2wRa/Ono/stLKcp1PdxW2Ftg9qtw9tBftrwUpJ/ Xj0gzgRfOw1ji8cUayMjlRxnNM6XL7EKXAgw/w== )`
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 63460 census.gov. KNeBo6Dp966I1COVssbwWp6vL1aNsu/hoS91tBMWD8QZ8ob4SKmMOvUBX8l1VLlFM8/NgNCMbnrz YuwxPVct7Gyx05quOM/YoBjTTPqAEadpt5luo8Q5CHKHSc+V2Q/P0cyG8q8hC5LchZ9jlZW8Ahf5 8qgunTxg8+yo/n4Uq3r4bMHcR+GUaJtE+2l7uSlxueU3bzejMTZCIxNMvHkHPLqNa6d/aoEfTqgl 8JaiF+8mV8cpFkIp4gwBqMbnJXSApCSba681+32vuS/5bocktLmhNDCXNRWotekkU5sSfFLlJVJI x6boD0kirHlNTYpAp9Ca7jCuQC8iXcchybjaLw== )`
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20260420170832 20260413164444 65489 census.gov. 5Eve9LHwTpK4IOdrC4ObNciGk4CoWh5daLIPkJWOznU29EcgPkCJcnt7YprZPZ0V+7/uREFsBcz5 sIGvp73GC2+NfuJyXZXQL7ZqcOYhXvhmuHwkwNty4BiB8lAGeEpmaxzoYSuIEmOLWAJb51et0dFA 78XZUL6jP+AM3ebNoz0= )`
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 25138 census.gov. c6/NI8JNJuarXhZNTtnC7ChWA/0C1aLsatIHoPxeDc51H3PVTK7xruGP4Ib1tXdCk4oc4rmS+CH8 cB5ut2E1ZzZaUhdsY33nLol9+eWKHDHDxmspkeFQpnKctfNkn2JLtwBlkwTfVcae8hZ3IUGN68Xx SZtRfYlvYPOqP3qja2g= )`
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 38584 census.gov. deg8dq7A5owSqsLp/kHWxz/ON21Fi0TIaS2xXJWTQpSaYAwlnvlbvGGEBDYOsKDyi5pInRWKvcJy eRUftJmvc/cw7f/Lbzzb/3zOUI35Mb2w2cZy+rgVBOolgcA17ENoFv/WM55BsnkYx3FR/rSFP+ur LOHTmaIYNIj8SapPjcH4A6bYZLy0Sb4K4JHcQG5IBPAq7+hjMHEV2kBFKPY2KeipNrdwd58VCF1J 9U05/AZnFgyA+QjJDsYX5/07y/WqV6aIT4U5y6DSIIXPBW5zJqiySfkctKEfXTS/4yXQZHq6XKkZ KPzMKCjUexazzZZFzVfnKCdBtWbKqVCknE2sFg== )`
	`CENSUS.GOV. 302400 IN RRSIG ( DNSKEY 8 2 302400 20260420170832 20260413164444 54670 census.gov. TPhi5STQKtngq+llKEt5FV+8IuowOQHOgjBg/0/erJg0hQ9WBIt3ttmD7smrQtRyfXwuW90T5XJp 0Igi1a3NSk9b3LIYUyymDWCXl66jRij+a2IOdqlvTy8CYWjA8scWUh0UmmuAbXPAeGWEyun8rXK+ gXY+SZLNaKEOqZrKX8WkYc+X14m9pl+vFDwfjiCvrNEqyRwyrpD6Paw62HJMwJ7T4HRh80eKlHm5 KvTAcSPcMVsYbX/agmIDWJN1xROIcz1+sLf9ZU4vQwxLzjmAnfvu2YSfUvq98U9J5s7QZe2HclUZ muvGBf/nHEcifPt09BR7G17eo2QNXiOstvojng== )`
	RRSIG=9606 and DNSKEY=9606/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=63460 and DNSKEY=63460/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=65489 and DNSKEY=65489 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=25138 and DNSKEY=25138 verifies the DNSKEY RRset
	RRSIG=38584 and DNSKEY=38584/SEP verifies the DNSKEY RRset
	RRSIG=54670 and DNSKEY=54670/SEP verifies the DNSKEY RRset
	DNSKEY=13650 is now in the chain-of-trust
	DNSKEY=2967 is now in the chain-of-trust
	DNSKEY=25138 is now in the chain-of-trust
	DNSKEY=65489 is now in the chain-of-trust
	DNSKEY=28249 is now in the chain-of-trust
	DNSKEY=3075 is now in the chain-of-trust
	Query to ns1e.CENSUS.GOV for CENSUS.GOV/A
	Received 395 bytes from 148.129.129.22
	;; Response received from [148.129.129.22] 395 octets ;; HEADER SECTION ;; id = 20602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN A ;; ANSWER SECTION (3 records) CENSUS.GOV. 300 IN A 148.129.75.166 CENSUS.GOV. 300 IN RRSIG ( A 7 2 300 20260420171412 20260413161625 65489 census.gov. Q1kfquiQCwQLK4sLY66WgoUYVmJpNoPFsKkqOhqHUpVilxzGPWaLDHWFFIaN1IoOmar5BwFNkLoC UFkHYHDAgCpBunQndZRMrnJRau2US8XtFYqQ4zPHjj+kjGyadSScl3bzt/nYl6bC1txvbtZoxDJu dcXMUCiIp+N2Jr0buBo= ) CENSUS.GOV. 300 IN RRSIG ( A 8 2 300 20260420171412 20260413161625 25138 census.gov. FAdjV1tLC5NGT/WZTqRkge17AyL9OWtgzUXKNLhwbm93kmhjTFQjFOfYo3/btN4CDd8+0e30KK/G SfZjFgDCXA8IvCuZhN9S0HHHG+/yicIaHRy5Hlhgw8UOYAD2GJ7MGQeBWOBJGZpPwnFSDjYVtimS IOqSDpEh28P++0UWbgU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1e.CENSUS.GOV is authoritative for CENSUS.GOV
	Found RRSIG signed by census.gov zone
	Query to ns2e.CENSUS.GOV for CENSUS.GOV/SOA
	Received 425 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 425 octets ;; HEADER SECTION ;; id = 21373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN SOA ;; ANSWER SECTION (3 records) CENSUS.GOV. 900 IN SOA ( ns1e.CENSUS.GOV. bind.CENSUS.GOV. 2020174020 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) CENSUS.GOV. 900 IN RRSIG ( SOA 7 2 900 20260422012201 20260415002201 65489 census.gov. xojos12lWIJ5TkUe5X7VA6Xk3SfmOMiVbwl3GPlr2bM+yto9O2D4WbcTAJZIbU4Svb7cCIikJ6We fYSzBtKGsjjNprHaXHZhrlyWGwr7ct3NWsrTmEaRIuXW9Tm6Fp/Z9LoFXe0UCknXtmAuW3+f4cvl Bpmm5r9OPVID5eA7P/I= ) CENSUS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260422012201 20260415002201 25138 census.gov. i8za7yjvMQ2JwbkbE1Os/08fZ+uMlAjOnLa5tnVHHgCZyl1jayftH6Il35YGtNZrBoLxX+DItves vou/1I0iti3CF0h8k9p/to6utvcfMKOraqnNI/OBlcbem0TMfl/8QwGpAGsDjbwZQrk88fy5Qc7K N59VGdD6YIvVU+Y5adw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1e.CENSUS.GOV for CENSUS.GOV/A
	CENSUS.GOV A RR has value 148.129.75.166
	Found 2 RRSIGs over A RRset
	`CENSUS.GOV. 300 IN RRSIG ( A 7 2 300 20260420171412 20260413161625 65489 census.gov. Q1kfquiQCwQLK4sLY66WgoUYVmJpNoPFsKkqOhqHUpVilxzGPWaLDHWFFIaN1IoOmar5BwFNkLoC UFkHYHDAgCpBunQndZRMrnJRau2US8XtFYqQ4zPHjj+kjGyadSScl3bzt/nYl6bC1txvbtZoxDJu dcXMUCiIp+N2Jr0buBo= )`
	`CENSUS.GOV. 300 IN RRSIG ( A 8 2 300 20260420171412 20260413161625 25138 census.gov. FAdjV1tLC5NGT/WZTqRkge17AyL9OWtgzUXKNLhwbm93kmhjTFQjFOfYo3/btN4CDd8+0e30KK/G SfZjFgDCXA8IvCuZhN9S0HHHG+/yicIaHRy5Hlhgw8UOYAD2GJ7MGQeBWOBJGZpPwnFSDjYVtimS IOqSDpEh28P++0UWbgU= )`
	RRSIG=65489 and DNSKEY=65489 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=25138 and DNSKEY=25138 verifies the A RRset

CENSUS.GOV

	Query to ns2e.CENSUS.GOV for CENSUS.GOV/A
	Received 395 bytes from 148.129.75.22
	;; Response received from [148.129.75.22] 395 octets ;; HEADER SECTION ;; id = 39979 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; CENSUS.GOV. IN A ;; ANSWER SECTION (3 records) CENSUS.GOV. 300 IN A 148.129.75.166 CENSUS.GOV. 300 IN RRSIG ( A 7 2 300 20260420171412 20260413161625 65489 census.gov. Q1kfquiQCwQLK4sLY66WgoUYVmJpNoPFsKkqOhqHUpVilxzGPWaLDHWFFIaN1IoOmar5BwFNkLoC UFkHYHDAgCpBunQndZRMrnJRau2US8XtFYqQ4zPHjj+kjGyadSScl3bzt/nYl6bC1txvbtZoxDJu dcXMUCiIp+N2Jr0buBo= ) CENSUS.GOV. 300 IN RRSIG ( A 8 2 300 20260420171412 20260413161625 25138 census.gov. FAdjV1tLC5NGT/WZTqRkge17AyL9OWtgzUXKNLhwbm93kmhjTFQjFOfYo3/btN4CDd8+0e30KK/G SfZjFgDCXA8IvCuZhN9S0HHHG+/yicIaHRy5Hlhgw8UOYAD2GJ7MGQeBWOBJGZpPwnFSDjYVtimS IOqSDpEh28P++0UWbgU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2e.CENSUS.GOV is authoritative for CENSUS.GOV
	Found RRSIG signed by census.gov zone
	Query to ns2e.CENSUS.GOV for CENSUS.GOV/A
	CENSUS.GOV A RR has value 148.129.75.166
	Found 2 RRSIGs over A RRset
	`CENSUS.GOV. 300 IN RRSIG ( A 7 2 300 20260420171412 20260413161625 65489 census.gov. Q1kfquiQCwQLK4sLY66WgoUYVmJpNoPFsKkqOhqHUpVilxzGPWaLDHWFFIaN1IoOmar5BwFNkLoC UFkHYHDAgCpBunQndZRMrnJRau2US8XtFYqQ4zPHjj+kjGyadSScl3bzt/nYl6bC1txvbtZoxDJu dcXMUCiIp+N2Jr0buBo= )`
	`CENSUS.GOV. 300 IN RRSIG ( A 8 2 300 20260420171412 20260413161625 25138 census.gov. FAdjV1tLC5NGT/WZTqRkge17AyL9OWtgzUXKNLhwbm93kmhjTFQjFOfYo3/btN4CDd8+0e30KK/G SfZjFgDCXA8IvCuZhN9S0HHHG+/yicIaHRy5Hlhgw8UOYAD2GJ7MGQeBWOBJGZpPwnFSDjYVtimS IOqSDpEh28P++0UWbgU= )`
	RRSIG=65489 and DNSKEY=65489 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=25138 and DNSKEY=25138 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CENSUS.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: