DNSSEC Debugger - DNFSB.GOV

Domain Name:

Time: 2026-03-19 13:20:55 UTC

Analyzing DNSSEC problems for DNFSB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 20382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for DNFSB.GOV/A
	Received 616 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 616 octets ;; HEADER SECTION ;; id = 62745 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 616 octets ;; HEADER SECTION ;; id = 22880 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 5762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260401050000 20260319040000 21831 . WvSxP1tM4MVbtufkKrau7ftSbBF3mAJ5WuETNSWRaV34CaONS9ryaU+0lI/KIikeqkIygmIQAP7S osR5DoLd6M1FEKPRRR37hLLxnpFZZaOxhrAIZ2hlJ1MPA6IDcip9NpG50MYjqH78VnoGZJ6Hb98/ mCS2hwOdiKRXECWw6IaCht9ngwMKp1WdyBLKgGm3XH11Rzf6o+oa+oKBXOFTTC5KT4iponLNx7P3 DVCgn09Y29rRNOFJF84TjFTWng325aFN/56c1jzfbaZ8ZCcO/zPSr7/jcWdxVtfMB06YkyVwaxEH FOsqT+zi5KjQCiSFCL5nfFDn6v+KXmbhuGOUyw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 43364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for DNFSB.GOV/A
	Received 382 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 382 octets ;; HEADER SECTION ;; id = 9715 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) DNFSB.GOV. 10800 IN NS auth100.ns.uu.net. DNFSB.GOV. 10800 IN NS auth110.ns.uu.net. DNFSB.GOV. 3600 IN DS ( 16939 7 2 a98bdbd4dda7705cd4cfc33c0ba4f94097c8cbcb9268e655346d492bdcaf7651 ) DNFSB.GOV. 3600 IN DS ( 19248 7 2 52c3c2ef4fd49a9eb29f4a0111254f6cccf6bd293987f91259e8d28afdcb6de6 ) DNFSB.GOV. 3600 IN DS ( 33321 7 2 c697859d19d8eb5c315d027c33917542b7934cd52aab3383415d24557840f1a7 ) DNFSB.GOV. 3600 IN DS ( 59049 7 2 2e03f466ecdbb2dc15d431b9a31e80ef2c5da7ec0123820c25988f720a759295 ) DNFSB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320142055 20260318122055 35496 gov. pcVYvA04ELbqmFz6nnRwczHJade/Z6/j3OjC4d88oIQXekQXeYU9wYVq6+9mRicy6uDeeyu9ihLa uGPjgJte+A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for DNFSB.GOV/DNSKEY
	Received 382 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 382 octets ;; HEADER SECTION ;; id = 43004 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) DNFSB.GOV. 10800 IN NS auth100.ns.uu.net. DNFSB.GOV. 10800 IN NS auth110.ns.uu.net. DNFSB.GOV. 3600 IN DS ( 16939 7 2 a98bdbd4dda7705cd4cfc33c0ba4f94097c8cbcb9268e655346d492bdcaf7651 ) DNFSB.GOV. 3600 IN DS ( 19248 7 2 52c3c2ef4fd49a9eb29f4a0111254f6cccf6bd293987f91259e8d28afdcb6de6 ) DNFSB.GOV. 3600 IN DS ( 33321 7 2 c697859d19d8eb5c315d027c33917542b7934cd52aab3383415d24557840f1a7 ) DNFSB.GOV. 3600 IN DS ( 59049 7 2 2e03f466ecdbb2dc15d431b9a31e80ef2c5da7ec0123820c25988f720a759295 ) DNFSB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320142055 20260318122055 35496 gov. qp42Y+cC6hiO5ZzW6hEyZu+vuRoXgzw2t1AB+oJiUBSgCEM1bKRcr9hSF+axbHgDfLw7D/R+ZrQ3 rbrwu9eHsQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone DNFSB.GOV

DNFSB.GOV

	Checking DS between GOV and DNFSB.GOV
	Query to d.ns.gov for DNFSB.GOV/DS
	Received 329 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 329 octets ;; HEADER SECTION ;; id = 3197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN DS ;; ANSWER SECTION (5 records) DNFSB.GOV. 3600 IN DS ( 16939 7 2 a98bdbd4dda7705cd4cfc33c0ba4f94097c8cbcb9268e655346d492bdcaf7651 ) DNFSB.GOV. 3600 IN DS ( 19248 7 2 52c3c2ef4fd49a9eb29f4a0111254f6cccf6bd293987f91259e8d28afdcb6de6 ) DNFSB.GOV. 3600 IN DS ( 33321 7 2 c697859d19d8eb5c315d027c33917542b7934cd52aab3383415d24557840f1a7 ) DNFSB.GOV. 3600 IN DS ( 59049 7 2 2e03f466ecdbb2dc15d431b9a31e80ef2c5da7ec0123820c25988f720a759295 ) DNFSB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320142055 20260318122055 35496 gov. q+SO2x8vnaWm4eZrHjSfmDnLxAVpsDBfw+S1XsgH3nNUYOQdfX5/10GzISx1WaSeczrvMyoYmaxo 1xaEMaslJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for DNFSB.GOV in the GOV zone
	DS=16939/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=19248/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=33321/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=59049/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`DNFSB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260320142055 20260318122055 35496 gov. q+SO2x8vnaWm4eZrHjSfmDnLxAVpsDBfw+S1XsgH3nNUYOQdfX5/10GzISx1WaSeczrvMyoYmaxo 1xaEMaslJA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=16939/SHA-256 is now in the chain-of-trust
	DS=19248/SHA-256 is now in the chain-of-trust
	DS=33321/SHA-256 is now in the chain-of-trust
	DS=59049/SHA-256 is now in the chain-of-trust
	`DNFSB.GOV. 3600 IN DS ( 16939 7 2 a98bdbd4dda7705cd4cfc33c0ba4f94097c8cbcb9268e655346d492bdcaf7651 )`
	`DNFSB.GOV. 3600 IN DS ( 19248 7 2 52c3c2ef4fd49a9eb29f4a0111254f6cccf6bd293987f91259e8d28afdcb6de6 )`
	`DNFSB.GOV. 3600 IN DS ( 33321 7 2 c697859d19d8eb5c315d027c33917542b7934cd52aab3383415d24557840f1a7 )`
	`DNFSB.GOV. 3600 IN DS ( 59049 7 2 2e03f466ecdbb2dc15d431b9a31e80ef2c5da7ec0123820c25988f720a759295 )`
	Query to auth100.ns.uu.net for DNFSB.GOV/DNSKEY
	Received 2042 bytes from 198.6.1.202
	;; Response received from [198.6.1.202] 2042 octets ;; HEADER SECTION ;; id = 52565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) dnfsb.gov. 1800 IN DNSKEY ( 256 3 7 AwEAAcN4JdBWJcBsOtNXtxDv85oaecutmxh1ys4yWfPFpT9f/BrjUYNfLO5+yQoLOMtfpTuD20JR aNl2H1TS78lEcH5dX60n9NCjHa2ZH/3L/sehBeD+X0K6CKj8cW3nrBmdEK46mJr05ZoiH46+TInf 1jqwbcYOEeEsK2AZS+WROz98qg4Wp7PIIPm6CO6D+9l2EMzEqn3H3KpK00WiqNzfgNFOMr1BnXAs vjNQgdvu+8MSXYkh6J2+LRotGrh1gFqMyc+IeTm1TXdsm8BZmVbB8iDMk3vmPTew8AZIgv+zZkzP 14AXWpgk9FRk/zL2tFBqqv6vRX6NP4yazswqkc1UHOk= ) ; keytag 64340 dnfsb.gov. 1800 IN DNSKEY ( 257 3 7 AwEAAcYoaLoHyPvgGZPpcUyRln3nNTTLr9KCNHpy4a8FrGq7VlYl0Z6oCoSA2U/NoTcfnqSyXRu5 9AjYbrU9OwjKPoHqEmMMudmF1i33Vehbxn5AxrAxPO2dsfWa39Efayp69GdmyXlym7TCVE7dDeZF Q7ldk5KlpRXDANtK2kqN6uTOB8Fqkw2w8FJZU3SiRut6z7J3gcMUFtOp/y0qqm2D29amId+k/4sS Ez8Ub3XFxFQoKNEeapKVqtbOGUi70K90TvyJ10qriF26bLg1nuSEZqJYQ4oKKY9b0TgtUN6/y4hH 0udfAGPvJhYwbr946uVwpNGghBaYay2MW0PbHlqo6O8= ) ; keytag 8553 dnfsb.gov. 1800 IN DNSKEY ( 257 3 7 AwEAAZ5cke0qqILude4xg3N8AibP564D13LK3PO8dPSgITTa9eCO8DWDFRD4P0x0LbeIXQcJ/XHI ugLKifwvZe/Eex//n9q+N+tONNnbuBfdcbw0lzO7NboHc9yQQ6ngoXL2vD0/r/M3MtoQWuRkSKl1 UfcpysmWnczVuLSwKM3nx5QwLkO78NdrnUaxu3dfaUsrMTPgCZH5vLX4hAQR6zH0h6aIWzJD3Fiy WUqeJ/ipdlij/O54UQxxH0ijTDIPHXVGeEReYzwBnen3jRfGQjN2GuVI7P1CSAcprIxUijNW8c80 OYm1dtty+uxfIkWYkxD9u8GFZg5kGMyleVEYDKXYL1U= ) ; keytag 19248 dnfsb.gov. 1800 IN DNSKEY ( 256 3 7 AwEAAcdfG4Vl90Rnb9wuj4mnsGnVj+pCrJTo4vxGBo18CryZh0KhVEbxDCskGJcsVdSWj81cfC3b FFIeWGF17eMVqYJlMswLSV0K4Yz+2KHSxLGvK/2JNhaOgfFObog4rpXbw1oauu1puKYHp1y9vEcL 0sat/gUpdHcxX0lY78DKPUx2SL0OID6r8qyfzBZhbEJ3NE+67tZBg7dcd0DhIV8c+rBtjth/J4Oc 86OOLJ2yu5fyYhJkbUtY8zdeHWci+yal4XbX4IbMTC/JVUrg3mfSJ/VrnzBCuieNZ1cOauB1YoxQ Wwt+KSfimEETMcgMQlNT0CXZzsbpCTPlkjvFXWmxNYc= ) ; keytag 52502 dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 8553 dnfsb.gov. kzpORRIlr0pTeWoPkmRZwn+ThIwZ4jd6f+JSL+ui3TK5pa25e202V/R9U2CMBAce87hUJz7MJ7Ec eWgcrB1Zpa27+rm5NGYmzXlsgCItfCxVk3HPb6EsXkmr0STloWbYn14JqjmHXgMWYqf5vGkBnMXo wN3291/hCiF3Hqx/r5slmBRJAfXr9Dh8lYCFae9fl2NuJfTpa3cyc9LrmdKXCj85BftVS1G1t9F+ pweSfip65z83dOm7p2p2i/XYyvPLJi0mzv/FHv07dkZn4WKVXpLPmYeoV0daa+DPz99YtckgKbnc 9Y61He6MB3xEdmhIQUvWbeXveEfQR/AJj0fJaw== ) dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 19248 dnfsb.gov. RVdXfBXG8GNmYu+qvH8LLBirGn0W3B+zxd55kydIaKKbV0DMnFDL13bjefXcsns7GdBMCjt5JT0q 3Yy6pNsgV1C1hBpEMWiW8uC0+afCRRSkj97ruIQkmc5OvNu/Af/WGCozkx+k08eITuN/b2liv+24 znT9+Tk0Qvbum0eW+Kj4gA7p2vzeeyY+8q2NzTDCvH6q+BwPkdmQ6XRhmNuOpjj9Nq8G+2viYqJZ NM4Bj3Pd192JMWhSg2p0i628E4zKd+rkFDaZpB3Nxn+AQfGu78Gn2Vrq2o1VqoOCCaLNt0JT5VKo 0RE3QH8zc3DK3ARYFNKyqD+qaKlOvYrNYJvkLg== ) dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. UVZVDZpKF6Iq9HJbqQxg7ShMev9HLp4cNX4IYFW4fVLWNHf4xTg8uvhvODEtkuZrKS2yUPmEizeh iVBKuFk9kDow8kg1afihcl5eX1UNXO7J4/8O0jOPiUI1eaha9ho8/2pGkg2xDYWEN5A7E1f9SgjN jSObsvUrne00IT6jZCsPAwPZYXb7SQDarkDJNxGghWvBkGOp89Njj7UYLFXU8YuU/GjesIqsgLPe z49fkkoUv7GEpUMP9cVkay/pm3LqzkzZEOBh7A4DjtcYGWbzlp0n1tCppybTNg4oaXvkT39TESBB NSvgk3SRgbNMfJKWVkDYvZCOns/z0ORJym8MyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for DNFSB.GOV
	`dnfsb.gov. 1800 IN DNSKEY ( 256 3 7 AwEAAcN4JdBWJcBsOtNXtxDv85oaecutmxh1ys4yWfPFpT9f/BrjUYNfLO5+yQoLOMtfpTuD20JR aNl2H1TS78lEcH5dX60n9NCjHa2ZH/3L/sehBeD+X0K6CKj8cW3nrBmdEK46mJr05ZoiH46+TInf 1jqwbcYOEeEsK2AZS+WROz98qg4Wp7PIIPm6CO6D+9l2EMzEqn3H3KpK00WiqNzfgNFOMr1BnXAs vjNQgdvu+8MSXYkh6J2+LRotGrh1gFqMyc+IeTm1TXdsm8BZmVbB8iDMk3vmPTew8AZIgv+zZkzP 14AXWpgk9FRk/zL2tFBqqv6vRX6NP4yazswqkc1UHOk= ) ; keytag 64340`
	`dnfsb.gov. 1800 IN DNSKEY ( 257 3 7 AwEAAcYoaLoHyPvgGZPpcUyRln3nNTTLr9KCNHpy4a8FrGq7VlYl0Z6oCoSA2U/NoTcfnqSyXRu5 9AjYbrU9OwjKPoHqEmMMudmF1i33Vehbxn5AxrAxPO2dsfWa39Efayp69GdmyXlym7TCVE7dDeZF Q7ldk5KlpRXDANtK2kqN6uTOB8Fqkw2w8FJZU3SiRut6z7J3gcMUFtOp/y0qqm2D29amId+k/4sS Ez8Ub3XFxFQoKNEeapKVqtbOGUi70K90TvyJ10qriF26bLg1nuSEZqJYQ4oKKY9b0TgtUN6/y4hH 0udfAGPvJhYwbr946uVwpNGghBaYay2MW0PbHlqo6O8= ) ; keytag 8553`
	`dnfsb.gov. 1800 IN DNSKEY ( 257 3 7 AwEAAZ5cke0qqILude4xg3N8AibP564D13LK3PO8dPSgITTa9eCO8DWDFRD4P0x0LbeIXQcJ/XHI ugLKifwvZe/Eex//n9q+N+tONNnbuBfdcbw0lzO7NboHc9yQQ6ngoXL2vD0/r/M3MtoQWuRkSKl1 UfcpysmWnczVuLSwKM3nx5QwLkO78NdrnUaxu3dfaUsrMTPgCZH5vLX4hAQR6zH0h6aIWzJD3Fiy WUqeJ/ipdlij/O54UQxxH0ijTDIPHXVGeEReYzwBnen3jRfGQjN2GuVI7P1CSAcprIxUijNW8c80 OYm1dtty+uxfIkWYkxD9u8GFZg5kGMyleVEYDKXYL1U= ) ; keytag 19248`
	`dnfsb.gov. 1800 IN DNSKEY ( 256 3 7 AwEAAcdfG4Vl90Rnb9wuj4mnsGnVj+pCrJTo4vxGBo18CryZh0KhVEbxDCskGJcsVdSWj81cfC3b FFIeWGF17eMVqYJlMswLSV0K4Yz+2KHSxLGvK/2JNhaOgfFObog4rpXbw1oauu1puKYHp1y9vEcL 0sat/gUpdHcxX0lY78DKPUx2SL0OID6r8qyfzBZhbEJ3NE+67tZBg7dcd0DhIV8c+rBtjth/J4Oc 86OOLJ2yu5fyYhJkbUtY8zdeHWci+yal4XbX4IbMTC/JVUrg3mfSJ/VrnzBCuieNZ1cOauB1YoxQ Wwt+KSfimEETMcgMQlNT0CXZzsbpCTPlkjvFXWmxNYc= ) ; keytag 52502`
	DNSKEY=19248/SEP is now in the chain-of-trust
	DS=19248/SHA-256 verifies DNSKEY=19248/SEP
	DS=16939/SHA-256 is published, but a corresponding DNSKEY is not
	DS=33321/SHA-256 is published, but a corresponding DNSKEY is not
	DS=59049/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 8553 dnfsb.gov. kzpORRIlr0pTeWoPkmRZwn+ThIwZ4jd6f+JSL+ui3TK5pa25e202V/R9U2CMBAce87hUJz7MJ7Ec eWgcrB1Zpa27+rm5NGYmzXlsgCItfCxVk3HPb6EsXkmr0STloWbYn14JqjmHXgMWYqf5vGkBnMXo wN3291/hCiF3Hqx/r5slmBRJAfXr9Dh8lYCFae9fl2NuJfTpa3cyc9LrmdKXCj85BftVS1G1t9F+ pweSfip65z83dOm7p2p2i/XYyvPLJi0mzv/FHv07dkZn4WKVXpLPmYeoV0daa+DPz99YtckgKbnc 9Y61He6MB3xEdmhIQUvWbeXveEfQR/AJj0fJaw== )`
	`dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 19248 dnfsb.gov. RVdXfBXG8GNmYu+qvH8LLBirGn0W3B+zxd55kydIaKKbV0DMnFDL13bjefXcsns7GdBMCjt5JT0q 3Yy6pNsgV1C1hBpEMWiW8uC0+afCRRSkj97ruIQkmc5OvNu/Af/WGCozkx+k08eITuN/b2liv+24 znT9+Tk0Qvbum0eW+Kj4gA7p2vzeeyY+8q2NzTDCvH6q+BwPkdmQ6XRhmNuOpjj9Nq8G+2viYqJZ NM4Bj3Pd192JMWhSg2p0i628E4zKd+rkFDaZpB3Nxn+AQfGu78Gn2Vrq2o1VqoOCCaLNt0JT5VKo 0RE3QH8zc3DK3ARYFNKyqD+qaKlOvYrNYJvkLg== )`
	`dnfsb.gov. 1800 IN RRSIG ( DNSKEY 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. UVZVDZpKF6Iq9HJbqQxg7ShMev9HLp4cNX4IYFW4fVLWNHf4xTg8uvhvODEtkuZrKS2yUPmEizeh iVBKuFk9kDow8kg1afihcl5eX1UNXO7J4/8O0jOPiUI1eaha9ho8/2pGkg2xDYWEN5A7E1f9SgjN jSObsvUrne00IT6jZCsPAwPZYXb7SQDarkDJNxGghWvBkGOp89Njj7UYLFXU8YuU/GjesIqsgLPe z49fkkoUv7GEpUMP9cVkay/pm3LqzkzZEOBh7A4DjtcYGWbzlp0n1tCppybTNg4oaXvkT39TESBB NSvgk3SRgbNMfJKWVkDYvZCOns/z0ORJym8MyA== )`
	RRSIG=8553 and DNSKEY=8553/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=19248 and DNSKEY=19248/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	RRSIG=52502 and DNSKEY=52502 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 3 RRSIG and 4 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to auth110.ns.uu.net for DNFSB.GOV/A
	Received 795 bytes from 198.6.1.114
	;; Response received from [198.6.1.114] 795 octets ;; HEADER SECTION ;; id = 7618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnfsb.gov. 1800 IN SOA ( auth100.ns.uu.net. hostmaster.uu.net. 10338 ;serial 1800 ;refresh 600 ;retry 1728000 ;expire 1800 ;minimum ) dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN NSEC3 ( 1 0 12 aabbccdd 4dt19ibvunso0vckfvop2oisdcvqd44h NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN RRSIG ( NSEC3 7 3 1800 20260326030505 20260319020505 52502 dnfsb.gov. wegrKJwnZDhe5VpvI2hVn4cx7wz9Ram1xONcSkQPsK4DhBDrts0jkJBE7puXOQA8oCTCCyzf8r2D 5QSR3mX8z+aGqwU4d4C33aAjQB7lZyyN2BbzfUesTAzX/ssNY0g7I4mstGGOmf3Eoteg/5x8b7Vr +DAco2gLdo6DNw7qdtkygI5DxGk0vWWzY9P1wSEobsdaJfdSYqLoJRhWsu5BXW670fMdFmeajzsf DuCfNXU8V0+t3xEqVeO5R7quR8rCzBjC0+ycoJ40LsZma9iPINWu8yAdzbuup7F69Go24HtDWGKy djhbS2H0OW5xR9EfgZhYf0tkOz1MjKk0uKPAQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth110.ns.uu.net is authoritative for DNFSB.GOV
	Found RRSIG signed by dnfsb.gov zone
	Query to auth100.ns.uu.net for DNFSB.GOV/SOA
	Received 414 bytes from 198.6.1.202
	;; Response received from [198.6.1.202] 414 octets ;; HEADER SECTION ;; id = 30989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN SOA ;; ANSWER SECTION (2 records) dnfsb.gov. 1800 IN SOA ( auth100.ns.uu.net. hostmaster.uu.net. 10338 ;serial 1800 ;refresh 600 ;retry 1728000 ;expire 1800 ;minimum ) dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth110.ns.uu.net for DNFSB.GOV/A
	Received 795 bytes from 198.6.1.114
	;; Response received from [198.6.1.114] 795 octets ;; HEADER SECTION ;; id = 1422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnfsb.gov. 1800 IN SOA ( auth100.ns.uu.net. hostmaster.uu.net. 10338 ;serial 1800 ;refresh 600 ;retry 1728000 ;expire 1800 ;minimum ) dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN NSEC3 ( 1 0 12 aabbccdd 4dt19ibvunso0vckfvop2oisdcvqd44h NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN RRSIG ( NSEC3 7 3 1800 20260326030505 20260319020505 52502 dnfsb.gov. wegrKJwnZDhe5VpvI2hVn4cx7wz9Ram1xONcSkQPsK4DhBDrts0jkJBE7puXOQA8oCTCCyzf8r2D 5QSR3mX8z+aGqwU4d4C33aAjQB7lZyyN2BbzfUesTAzX/ssNY0g7I4mstGGOmf3Eoteg/5x8b7Vr +DAco2gLdo6DNw7qdtkygI5DxGk0vWWzY9P1wSEobsdaJfdSYqLoJRhWsu5BXW670fMdFmeajzsf DuCfNXU8V0+t3xEqVeO5R7quR8rCzBjC0+ycoJ40LsZma9iPINWu8yAdzbuup7F69Go24HtDWGKy djhbS2H0OW5xR9EfgZhYf0tkOz1MjKk0uKPAQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== )`
	RRSIG=52502 and DNSKEY=52502 does not verify the SOA RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the SOA RRset

DNFSB.GOV

	Query to auth100.ns.uu.net for DNFSB.GOV/A
	Received 795 bytes from 198.6.1.202
	;; Response received from [198.6.1.202] 795 octets ;; HEADER SECTION ;; id = 11673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnfsb.gov. 1800 IN SOA ( auth100.ns.uu.net. hostmaster.uu.net. 10338 ;serial 1800 ;refresh 600 ;retry 1728000 ;expire 1800 ;minimum ) dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN NSEC3 ( 1 0 12 aabbccdd 4dt19ibvunso0vckfvop2oisdcvqd44h NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN RRSIG ( NSEC3 7 3 1800 20260326030505 20260319020505 52502 dnfsb.gov. wegrKJwnZDhe5VpvI2hVn4cx7wz9Ram1xONcSkQPsK4DhBDrts0jkJBE7puXOQA8oCTCCyzf8r2D 5QSR3mX8z+aGqwU4d4C33aAjQB7lZyyN2BbzfUesTAzX/ssNY0g7I4mstGGOmf3Eoteg/5x8b7Vr +DAco2gLdo6DNw7qdtkygI5DxGk0vWWzY9P1wSEobsdaJfdSYqLoJRhWsu5BXW670fMdFmeajzsf DuCfNXU8V0+t3xEqVeO5R7quR8rCzBjC0+ycoJ40LsZma9iPINWu8yAdzbuup7F69Go24HtDWGKy djhbS2H0OW5xR9EfgZhYf0tkOz1MjKk0uKPAQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth100.ns.uu.net is authoritative for DNFSB.GOV
	Found RRSIG signed by dnfsb.gov zone
	Query to auth100.ns.uu.net for DNFSB.GOV/A
	Received 795 bytes from 198.6.1.202
	;; Response received from [198.6.1.202] 795 octets ;; HEADER SECTION ;; id = 29908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; DNFSB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnfsb.gov. 1800 IN SOA ( auth100.ns.uu.net. hostmaster.uu.net. 10338 ;serial 1800 ;refresh 600 ;retry 1728000 ;expire 1800 ;minimum ) dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN NSEC3 ( 1 0 12 aabbccdd 4dt19ibvunso0vckfvop2oisdcvqd44h NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 4a5bu3cb7ot6viq4umlmsabdu5g5ame2.dnfsb.gov. 1800 IN RRSIG ( NSEC3 7 3 1800 20260326030505 20260319020505 52502 dnfsb.gov. wegrKJwnZDhe5VpvI2hVn4cx7wz9Ram1xONcSkQPsK4DhBDrts0jkJBE7puXOQA8oCTCCyzf8r2D 5QSR3mX8z+aGqwU4d4C33aAjQB7lZyyN2BbzfUesTAzX/ssNY0g7I4mstGGOmf3Eoteg/5x8b7Vr +DAco2gLdo6DNw7qdtkygI5DxGk0vWWzY9P1wSEobsdaJfdSYqLoJRhWsu5BXW670fMdFmeajzsf DuCfNXU8V0+t3xEqVeO5R7quR8rCzBjC0+ycoJ40LsZma9iPINWu8yAdzbuup7F69Go24HtDWGKy djhbS2H0OW5xR9EfgZhYf0tkOz1MjKk0uKPAQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`dnfsb.gov. 1800 IN RRSIG ( SOA 7 2 1800 20260326030505 20260319020505 52502 dnfsb.gov. IZEfLas49snFRiTjvSnb8P1m5CTJSmN4izLvu71EeQwgPBWWaVOjl7hNW1pe3hdPpoKuYcbGMlvq K25dqlblCeNL4KbuoczD+9wcyr5yB0/fZapDWOjUmgR82FH3nsoGeRNO8G3xFAmk168i3XQ3wsA5 +F14dTbAx7TTB25MnZjqA87E/b8vHBaXS5XcxxE/CvyOSNmqgQRdyvQcqnkua3tLMa4+yQUteyZd lvTnRBEvxdOo5/n/urKtU3rHPxg/9QNk2suBckA5vTBoBODkXRvXKk0/zsvtXD+i5+rQu8WHLcrm iPKUQzilKl0KLkcl+TkakgI5ouetERLuj1TyEA== )`
	RRSIG=52502 and DNSKEY=52502 does not verify the SOA RRset (libcrypto error (SEC.xs line 223)signature verification failed)
	None of the 1 RRSIG and 4 DNSKEY records validate the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DNFSB.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: