DNSSEC Analyzer - CFTC.GOV

Domain Name:

Time: 2020-04-10 09:50:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for CFTC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 11618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to b.root-servers.net for CFTC.GOV/A
	Received 666 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (666 bytes) ;; HEADER SECTION ;; id = 24421 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 15518 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 35331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 44388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200424190254 20200409185754 7698 gov. N8tXGEMHVb0KW3Olwh0MVkm/mWYKJNavMwOyC7RDK3hNR3xMP8JowTkv+0CW8+6kqSG4mZesgrmy Jh/276tjvYtFJ67XdYVWw76XJEiQPS+ZzG3a2cHzOHEh1CZomrx8UDozYRR2k2JLPsrKHcfqLydN YkmEa/ehwjQtwsAN0gHNwwTYOs33gQ39z/qv5hpUe+hsqLy7gYEGQg4+X9X9txVla3de8rm+v37t mDZ0hBO8IANDN6moefu8EeR6lvhqIfdwsmm4fb2h1+KlQEn0GEGl84DZovLNQuQ64v31Ez3UGekS VwZfhkMUBnZfUuzhEBnojHRjYAxZwlEqFnkV9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200424190254 20200409185754 7698 gov. N8tXGEMHVb0KW3Olwh0MVkm/mWYKJNavMwOyC7RDK3hNR3xMP8JowTkv+0CW8+6kqSG4mZesgrmy Jh/276tjvYtFJ67XdYVWw76XJEiQPS+ZzG3a2cHzOHEh1CZomrx8UDozYRR2k2JLPsrKHcfqLydN YkmEa/ehwjQtwsAN0gHNwwTYOs33gQ39z/qv5hpUe+hsqLy7gYEGQg4+X9X9txVla3de8rm+v37t mDZ0hBO8IANDN6moefu8EeR6lvhqIfdwsmm4fb2h1+KlQEn0GEGl84DZovLNQuQ64v31Ez3UGekS VwZfhkMUBnZfUuzhEBnojHRjYAxZwlEqFnkV9w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to b.gov-servers.net for CFTC.GOV/A
	Received 451 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (451 bytes) ;; HEADER SECTION ;; id = 23224 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CFTC.GOV. 86400 IN NS auth62.ns.uu.net. CFTC.GOV. 86400 IN NS auth40.ns.uu.net. CFTC.GOV. 3600 IN DS 10390 7 1 15fc3f1ba1ead2f556c10212784a047928d90eb4 CFTC.GOV. 3600 IN DS 33933 7 1 d695d5516cd9d27b527c3724d8bcc19dc785cc54 CFTC.GOV. 3600 IN DS ( 10390 7 2 c4c2e1f3fe1c2d4da533e7d2545ffcbe30c7edbb91bc6b24e89d860830e352f0 ) CFTC.GOV. 3600 IN DS ( 33933 7 2 9391d9d0d03fe65052a1da02072d4845b1750ec49294ba29e36d50f3193f72ad ) CFTC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. wRja3t5dV5YA65DjFjPqlX8q/0lpokEW4GCV4x2VjVmsxkSlnqOwgEariY6gwGTPfUyagU9YapN3 Tg07i9dmlUPvDA1eLBHJZADwbzDlEY7PjEat6iUCah2e4AjgO3HXkREpisPWB+QyyhS1FyOH+E/h ipBE1sGzFW3LZVuPxE8lYnHfhd2YJklX29aTZ5TnlnaCx3eF9W7nNpjpX8dKpw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for CFTC.GOV/DNSKEY
	Received 451 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (451 bytes) ;; HEADER SECTION ;; id = 6783 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CFTC.GOV. 86400 IN NS auth62.ns.uu.net. CFTC.GOV. 86400 IN NS auth40.ns.uu.net. CFTC.GOV. 3600 IN DS 10390 7 1 15fc3f1ba1ead2f556c10212784a047928d90eb4 CFTC.GOV. 3600 IN DS 33933 7 1 d695d5516cd9d27b527c3724d8bcc19dc785cc54 CFTC.GOV. 3600 IN DS ( 10390 7 2 c4c2e1f3fe1c2d4da533e7d2545ffcbe30c7edbb91bc6b24e89d860830e352f0 ) CFTC.GOV. 3600 IN DS ( 33933 7 2 9391d9d0d03fe65052a1da02072d4845b1750ec49294ba29e36d50f3193f72ad ) CFTC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. wRja3t5dV5YA65DjFjPqlX8q/0lpokEW4GCV4x2VjVmsxkSlnqOwgEariY6gwGTPfUyagU9YapN3 Tg07i9dmlUPvDA1eLBHJZADwbzDlEY7PjEat6iUCah2e4AjgO3HXkREpisPWB+QyyhS1FyOH+E/h ipBE1sGzFW3LZVuPxE8lYnHfhd2YJklX29aTZ5TnlnaCx3eF9W7nNpjpX8dKpw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CFTC.GOV

CFTC.GOV

	Checking DS between GOV and CFTC.GOV
	Query to c.gov-servers.net for CFTC.GOV/DS
	Received 400 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (400 bytes) ;; HEADER SECTION ;; id = 21524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN DS ;; ANSWER SECTION (5 records) CFTC.GOV. 3600 IN DS 10390 7 1 15fc3f1ba1ead2f556c10212784a047928d90eb4 CFTC.GOV. 3600 IN DS 33933 7 1 d695d5516cd9d27b527c3724d8bcc19dc785cc54 CFTC.GOV. 3600 IN DS ( 10390 7 2 c4c2e1f3fe1c2d4da533e7d2545ffcbe30c7edbb91bc6b24e89d860830e352f0 ) CFTC.GOV. 3600 IN DS ( 33933 7 2 9391d9d0d03fe65052a1da02072d4845b1750ec49294ba29e36d50f3193f72ad ) CFTC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. wRja3t5dV5YA65DjFjPqlX8q/0lpokEW4GCV4x2VjVmsxkSlnqOwgEariY6gwGTPfUyagU9YapN3 Tg07i9dmlUPvDA1eLBHJZADwbzDlEY7PjEat6iUCah2e4AjgO3HXkREpisPWB+QyyhS1FyOH+E/h ipBE1sGzFW3LZVuPxE8lYnHfhd2YJklX29aTZ5TnlnaCx3eF9W7nNpjpX8dKpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for CFTC.GOV in the GOV zone
	DS=10390/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=33933/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=10390/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=33933/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`CFTC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. wRja3t5dV5YA65DjFjPqlX8q/0lpokEW4GCV4x2VjVmsxkSlnqOwgEariY6gwGTPfUyagU9YapN3 Tg07i9dmlUPvDA1eLBHJZADwbzDlEY7PjEat6iUCah2e4AjgO3HXkREpisPWB+QyyhS1FyOH+E/h ipBE1sGzFW3LZVuPxE8lYnHfhd2YJklX29aTZ5TnlnaCx3eF9W7nNpjpX8dKpw== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=10390/SHA-1 is now in the chain-of-trust
	DS=33933/SHA-1 is now in the chain-of-trust
	`CFTC.GOV. 3600 IN DS 10390 7 1 15fc3f1ba1ead2f556c10212784a047928d90eb4`
	`CFTC.GOV. 3600 IN DS 33933 7 1 d695d5516cd9d27b527c3724d8bcc19dc785cc54`
	`CFTC.GOV. 3600 IN DS ( 10390 7 2 c4c2e1f3fe1c2d4da533e7d2545ffcbe30c7edbb91bc6b24e89d860830e352f0 )`
	`CFTC.GOV. 3600 IN DS ( 33933 7 2 9391d9d0d03fe65052a1da02072d4845b1750ec49294ba29e36d50f3193f72ad )`
	Query to auth40.ns.uu.net for CFTC.GOV/DNSKEY
	Received 1741 bytes from 198.6.1.18
	;; Answer received from 198.6.1.18 (1741 bytes) ;; HEADER SECTION ;; id = 62118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) cftc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAXY7809trZ0m/c3vCghT5mcyNo+GDLdr9S/EvWGVk95vaSTKXv8Ghini1fEpMYOiYQwnsjDo noRVT7GJmaeUTk2rtXNBXVC1kmlvbfKeBSrGEwWOKBSb80bqu+axieRO0o/CjibCW0t8oeMeoWux KHYMPURJ9KRRtpmv6PjeXp+oRk50fz6tHhwo7VLoa2/S8bxBK1OITfpHe53gWskkKoPuC85tBZic pLUR4JVPrDtaIRStKzKrkhNL+NsXEa16vIMlTxVkmjG+vhlNk7nQWgaI009Hrp0e5A/oAKwz+y8X VAmrt4xXCPQIsFOLwDhsOILLjxLG+dpY+u9BDvZSXJk= ) ; Key ID = 56703 cftc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAdV5Ghnx5JuJz4VhaVeTr+lX/iWXcLEkH4NdXyO/EEZOdBqhvamw4v7OujHnK3B9w6J4G5OS yEJYuYlSsXEhBpFrU+xzzlETtEwH4nS2HcyZvRxb3tprvX9Ddajg/+QUY7dpB45vYvHWWxyDvu4o gqSolksIiP4DgnhCCC1RiYyqLMU3qgy4t5Wwyf0zYDMFMbPJwTrjzDDvYCUxJYsSbsMkb8MhuK0i L/aW28LBNy4wX6U9TCe9Zpm6LEemIy1X2eqIk2v2bUdEhGFOVkrbeJ4skpa3DP0rE6guFkESnZZi 71nEcv5LGwh1SU+813z2ORwzszqZ9/iuUQlPChVWYvc= ) ; Key ID = 4508 cftc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAXd/uuNftcC+kYUbBe6EQiUrzh9mXG5GM/8ZXSRhG9qQP7HYUjCoo4IC7gBIk9uAW+uEwwZF +zyj9TcB/0KGh3kG4ddJ5fOZOpFaLjq4rJuuMxY1d0AIgrJkINZGlQLEM+wd+UJLituWWvtS1AMx Pit6q3R5nJGAIjFv2CQNzSnfu4HJQK/LzlsRM4hN3i7kfThouRzw4PJLRq8sp5kZR3AeepOMjg20 u/8ypZlRSO/RovKbtg8wOfTxbKjA/xShJfSRB7eFkk6tpXkT+KiCGZI5qx2MZWR0tKamckTgg9kz 22QmnwApVeDgAv5X2oRq211m0xrLTTx7lfGw8+xPoOs= ) ; Key ID = 10390 cftc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAW2chSyZRnBkb7yR2innnUlDWkih55gGzck6fLHNgvArwogcmTladVfUfbzPPtlw3HuROoIY YmqmvygXxgvQoM9r/L3lx674xQlWIIaJA5tI6yD/TeFpczv8Ah4IMdtvAbr5x1cEU6lL8/vEwyQB BaZsj29MtCDwL8JXBAM5u2KT19w6vXdtP87+ti01FVrZbIY4zNcQcY0D+UlEosUh1qxEDp8RTHJ/ 6unw17B4HIfOXPgB8WqTMGIthQtYR3w9AyB+eixsj+juEOVIRttY+d1h7KnRl+ohDHr1TzQoKr0Q VvGYSYlqIpckRVd7EmBpVM4k4UTntEH9wKu2kF1b3Qk= ) ; Key ID = 33933 cftc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200417030235 20200410020235 10390 cftc.gov. LZD8bCorU4uZXSvyrTzDNBjQYiOOvO7ot6B9+w0EY/31GDNJJwUTQpu8/wHaYu4tlT4CXrQw1ehP O68965fMB47HmnId4ZYssvG4ZhDd2+s85sZLS5Y3YjwqahY6YITz50ZRO8tMMqo18XO6jReW8Sri Fiw9804IwnjpBHU8wzaRJdsvB9wL+JOs2UQeHkK2wm0sgHVY4hC7Is7iG0DkeWvfRl8M2jkoGJfx p4X/UPe/Lcdhn+3liTlcMLNxZ9YrywVqreAvudiwDUKY3W60coVdnOh6kl2A4O+34WV8V4KwDI18 Ih94YhfLzZIXXtpXLB8eVYT3Hm3e1GVSLkDblA== ) cftc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. B3LIjtuzlTEq6ERFulgR4OtQSyY4mRb9EuPd4ueT4dkBdO64jkQlELhiedAYzJJe+fWq7/PQA1ib E3+w/a3OyNaBE3ZEUpCRt4vfHulIZogmioVgfBl0P/BtWvOJTGxTYMpdMu2Hqwa68LuAXp0jSgnv XTkODh4arg/kR4zrAAmQUmT/pZxdsGm9+tuL/RlfNUC+JgQgsQZJxd9sUczJvVf6AYS8GI/cRivx 24aNOR7uuLPIvA02wv0n5FLa9k7ScN/iDaBpqLqG47jvDPO2mChEO9q6sUnOPQmgzHJhqHM/QJpp fElPCH4BWEPGdMTDOfdwxwepA325KyWhzgJO0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for CFTC.GOV
	`cftc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAXY7809trZ0m/c3vCghT5mcyNo+GDLdr9S/EvWGVk95vaSTKXv8Ghini1fEpMYOiYQwnsjDo noRVT7GJmaeUTk2rtXNBXVC1kmlvbfKeBSrGEwWOKBSb80bqu+axieRO0o/CjibCW0t8oeMeoWux KHYMPURJ9KRRtpmv6PjeXp+oRk50fz6tHhwo7VLoa2/S8bxBK1OITfpHe53gWskkKoPuC85tBZic pLUR4JVPrDtaIRStKzKrkhNL+NsXEa16vIMlTxVkmjG+vhlNk7nQWgaI009Hrp0e5A/oAKwz+y8X VAmrt4xXCPQIsFOLwDhsOILLjxLG+dpY+u9BDvZSXJk= ) ; Key ID = 56703`
	`cftc.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAdV5Ghnx5JuJz4VhaVeTr+lX/iWXcLEkH4NdXyO/EEZOdBqhvamw4v7OujHnK3B9w6J4G5OS yEJYuYlSsXEhBpFrU+xzzlETtEwH4nS2HcyZvRxb3tprvX9Ddajg/+QUY7dpB45vYvHWWxyDvu4o gqSolksIiP4DgnhCCC1RiYyqLMU3qgy4t5Wwyf0zYDMFMbPJwTrjzDDvYCUxJYsSbsMkb8MhuK0i L/aW28LBNy4wX6U9TCe9Zpm6LEemIy1X2eqIk2v2bUdEhGFOVkrbeJ4skpa3DP0rE6guFkESnZZi 71nEcv5LGwh1SU+813z2ORwzszqZ9/iuUQlPChVWYvc= ) ; Key ID = 4508`
	`cftc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAXd/uuNftcC+kYUbBe6EQiUrzh9mXG5GM/8ZXSRhG9qQP7HYUjCoo4IC7gBIk9uAW+uEwwZF +zyj9TcB/0KGh3kG4ddJ5fOZOpFaLjq4rJuuMxY1d0AIgrJkINZGlQLEM+wd+UJLituWWvtS1AMx Pit6q3R5nJGAIjFv2CQNzSnfu4HJQK/LzlsRM4hN3i7kfThouRzw4PJLRq8sp5kZR3AeepOMjg20 u/8ypZlRSO/RovKbtg8wOfTxbKjA/xShJfSRB7eFkk6tpXkT+KiCGZI5qx2MZWR0tKamckTgg9kz 22QmnwApVeDgAv5X2oRq211m0xrLTTx7lfGw8+xPoOs= ) ; Key ID = 10390`
	`cftc.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAW2chSyZRnBkb7yR2innnUlDWkih55gGzck6fLHNgvArwogcmTladVfUfbzPPtlw3HuROoIY YmqmvygXxgvQoM9r/L3lx674xQlWIIaJA5tI6yD/TeFpczv8Ah4IMdtvAbr5x1cEU6lL8/vEwyQB BaZsj29MtCDwL8JXBAM5u2KT19w6vXdtP87+ti01FVrZbIY4zNcQcY0D+UlEosUh1qxEDp8RTHJ/ 6unw17B4HIfOXPgB8WqTMGIthQtYR3w9AyB+eixsj+juEOVIRttY+d1h7KnRl+ohDHr1TzQoKr0Q VvGYSYlqIpckRVd7EmBpVM4k4UTntEH9wKu2kF1b3Qk= ) ; Key ID = 33933`
	DNSKEY=10390/SEP is now in the chain-of-trust
	DS=10390/SHA-1 verifies DNSKEY=10390/SEP
	DS=10390/SHA-256 verifies DNSKEY=10390/SEP
	DNSKEY=33933/SEP is now in the chain-of-trust
	DS=33933/SHA-1 verifies DNSKEY=33933/SEP
	DS=33933/SHA-256 verifies DNSKEY=33933/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cftc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200417030235 20200410020235 10390 cftc.gov. LZD8bCorU4uZXSvyrTzDNBjQYiOOvO7ot6B9+w0EY/31GDNJJwUTQpu8/wHaYu4tlT4CXrQw1ehP O68965fMB47HmnId4ZYssvG4ZhDd2+s85sZLS5Y3YjwqahY6YITz50ZRO8tMMqo18XO6jReW8Sri Fiw9804IwnjpBHU8wzaRJdsvB9wL+JOs2UQeHkK2wm0sgHVY4hC7Is7iG0DkeWvfRl8M2jkoGJfx p4X/UPe/Lcdhn+3liTlcMLNxZ9YrywVqreAvudiwDUKY3W60coVdnOh6kl2A4O+34WV8V4KwDI18 Ih94YhfLzZIXXtpXLB8eVYT3Hm3e1GVSLkDblA== )`
	`cftc.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. B3LIjtuzlTEq6ERFulgR4OtQSyY4mRb9EuPd4ueT4dkBdO64jkQlELhiedAYzJJe+fWq7/PQA1ib E3+w/a3OyNaBE3ZEUpCRt4vfHulIZogmioVgfBl0P/BtWvOJTGxTYMpdMu2Hqwa68LuAXp0jSgnv XTkODh4arg/kR4zrAAmQUmT/pZxdsGm9+tuL/RlfNUC+JgQgsQZJxd9sUczJvVf6AYS8GI/cRivx 24aNOR7uuLPIvA02wv0n5FLa9k7ScN/iDaBpqLqG47jvDPO2mChEO9q6sUnOPQmgzHJhqHM/QJpp fElPCH4BWEPGdMTDOfdwxwepA325KyWhzgJO0Q== )`
	RRSIG=10390 and DNSKEY=10390/SEP verifies the DNSKEY RRset
	RRSIG=56703 and DNSKEY=56703 verifies the DNSKEY RRset
	DNSKEY=56703 is now in the chain-of-trust
	DNSKEY=4508 is now in the chain-of-trust
	Query to auth62.ns.uu.net for CFTC.GOV/A
	Received 357 bytes from 198.6.1.19
	;; Answer received from 198.6.1.19 (357 bytes) ;; HEADER SECTION ;; id = 2711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN A ;; ANSWER SECTION (2 records) cftc.gov. 3600 IN A 54.156.221.157 cftc.gov. 3600 IN RRSIG ( A 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. MvjAtWHowIsGiXFxrVIPFxPggVdYWLwyqleE9EFrHz0glOE6KOcaElXuE2Dks5sNEPGjk0TxZDSn cBhk0aEBKS0iWC7zYaLLdlFIDsIdNIVumN1y4sKKjO/cCHJJImLuQThNRVeM2xrjxxSHJNrPOEXB /nSz2nFZRyngsPdAdhqPrMstCg7zryV+bZaW9dvGeVu9LCCuFuzMlzdMVpuyIile2mDJ20RKCrKi uEd+Kd4Z/h6L20Ig/i+fncx41ZaE0f1Kyo0htALYYyiezI6KWiSql1yJaywjUzTc2IjyLq/k/1fX UO8n73PyrDI58rkCHNme+tSdPRZRVCE040l2qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CFTC.GOV is authoritative for CFTC.GOV
	Found RRSIG signed by cftc.gov zone
	Query to auth62.ns.uu.net for CFTC.GOV/SOA
	Received 404 bytes from 198.6.1.19
	;; Answer received from 198.6.1.19 (404 bytes) ;; HEADER SECTION ;; id = 12020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN SOA ;; ANSWER SECTION (2 records) cftc.gov. 3600 IN SOA ( auth40.ns.uu.net. hostmaster.uu.net. 7454 ;serial 21600 ;refresh 3600 ;retry 1728000 ;expire 3600 ;minimum ) cftc.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. aygcUoMc/KjeIB6jcntoYx6FzNpujSzkCfv3U0JZQXuTdQ/MaYrZfGzG8Bp9ZKWuizDTJA5wEr1e OIzlbLc56U5gERhucOdq2yXCHB9MBXogduehqDDpNGXpQtWuPWfG5QvCiZVPQT/qr7XszftZbN80 9LGxKITDQXeVAvzqhafogg+bMefpq3PUNiceCh7W/4PYkIjtc79wiMNkmPQbOFYjIAybxPy96bUQ /S6KJ6/TMOtjMq89tuqrIJ3lVc+AmZQQ2X5rFyookwrUknthxLOfJHvScpAXm2CIXF5X8oIj6oHb ldTqjBEMrleEplK1p4AoHm0UVqv+OrcWWI6UMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth40.ns.uu.net for CFTC.GOV/SOA
	Received 404 bytes from 198.6.1.18
	;; Answer received from 198.6.1.18 (404 bytes) ;; HEADER SECTION ;; id = 24929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN SOA ;; ANSWER SECTION (2 records) cftc.gov. 3600 IN SOA ( auth40.ns.uu.net. hostmaster.uu.net. 7454 ;serial 21600 ;refresh 3600 ;retry 1728000 ;expire 3600 ;minimum ) cftc.gov. 3600 IN RRSIG ( SOA 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. aygcUoMc/KjeIB6jcntoYx6FzNpujSzkCfv3U0JZQXuTdQ/MaYrZfGzG8Bp9ZKWuizDTJA5wEr1e OIzlbLc56U5gERhucOdq2yXCHB9MBXogduehqDDpNGXpQtWuPWfG5QvCiZVPQT/qr7XszftZbN80 9LGxKITDQXeVAvzqhafogg+bMefpq3PUNiceCh7W/4PYkIjtc79wiMNkmPQbOFYjIAybxPy96bUQ /S6KJ6/TMOtjMq89tuqrIJ3lVc+AmZQQ2X5rFyookwrUknthxLOfJHvScpAXm2CIXF5X8oIj6oHb ldTqjBEMrleEplK1p4AoHm0UVqv+OrcWWI6UMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth62.ns.uu.net for CFTC.GOV/A
	Received 357 bytes from 198.6.1.19
	;; Answer received from 198.6.1.19 (357 bytes) ;; HEADER SECTION ;; id = 7339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CFTC.GOV. IN A ;; ANSWER SECTION (2 records) cftc.gov. 3600 IN A 54.156.221.157 cftc.gov. 3600 IN RRSIG ( A 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. MvjAtWHowIsGiXFxrVIPFxPggVdYWLwyqleE9EFrHz0glOE6KOcaElXuE2Dks5sNEPGjk0TxZDSn cBhk0aEBKS0iWC7zYaLLdlFIDsIdNIVumN1y4sKKjO/cCHJJImLuQThNRVeM2xrjxxSHJNrPOEXB /nSz2nFZRyngsPdAdhqPrMstCg7zryV+bZaW9dvGeVu9LCCuFuzMlzdMVpuyIile2mDJ20RKCrKi uEd+Kd4Z/h6L20Ig/i+fncx41ZaE0f1Kyo0htALYYyiezI6KWiSql1yJaywjUzTc2IjyLq/k/1fX UO8n73PyrDI58rkCHNme+tSdPRZRVCE040l2qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CFTC.GOV A RR has value 54.156.221.157
	Found 1 RRSIGs over A RRset
	`cftc.gov. 3600 IN RRSIG ( A 7 2 3600 20200417030235 20200410020235 56703 cftc.gov. MvjAtWHowIsGiXFxrVIPFxPggVdYWLwyqleE9EFrHz0glOE6KOcaElXuE2Dks5sNEPGjk0TxZDSn cBhk0aEBKS0iWC7zYaLLdlFIDsIdNIVumN1y4sKKjO/cCHJJImLuQThNRVeM2xrjxxSHJNrPOEXB /nSz2nFZRyngsPdAdhqPrMstCg7zryV+bZaW9dvGeVu9LCCuFuzMlzdMVpuyIile2mDJ20RKCrKi uEd+Kd4Z/h6L20Ig/i+fncx41ZaE0f1Kyo0htALYYyiezI6KWiSql1yJaywjUzTc2IjyLq/k/1fX UO8n73PyrDI58rkCHNme+tSdPRZRVCE040l2qw== )`
	RRSIG=56703 and DNSKEY=56703 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CFTC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: