DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:30:47 UTC

Analyzing DNSSEC problems for FAN.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 8825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to m.root-servers.net for FAN.GOV/A
	Received 620 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 620 octets ;; HEADER SECTION ;; id = 17913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 616 octets ;; HEADER SECTION ;; id = 59145 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 370 octets ;; HEADER SECTION ;; id = 48297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 50520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for FAN.GOV/A
	Received 409 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 409 octets ;; HEADER SECTION ;; id = 61847 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) FAN.GOV. 10800 IN NS a1-63.akam.net. FAN.GOV. 10800 IN NS a14-64.akam.net. FAN.GOV. 10800 IN NS a26-65.akam.net. FAN.GOV. 10800 IN NS a3-66.akam.net. FAN.GOV. 10800 IN NS a8-67.akam.net. FAN.GOV. 10800 IN NS a9-64.akam.net. FAN.GOV. 3600 IN DS ( 42379 8 2 04c973f078e9eda416aa4c584a1f943fadb7907bd3557fab7b8f502376700c85 ) FAN.GOV. 3600 IN DS ( 46465 8 2 a129c966d35fea007d73a6e7b57c389bd137b8695632f8356bc4881b95b010f1 ) FAN.GOV. 3600 IN DS ( 9565 8 2 fa95e87d36457fdc83b92a632bc098a816a6481c3c9d5ab0e535c663bf6ed721 ) FAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143048 20260420123048 35496 gov. q462vxzIxy5LhJHTmKeJfyJYcgBLuTCENSXlWABzEhx3FbPVJe1Fkw16orOXxoyxSJZgYKPBnYwO C5yB1uUaLw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for FAN.GOV/DNSKEY
	Received 409 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 409 octets ;; HEADER SECTION ;; id = 45803 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) FAN.GOV. 10800 IN NS a1-63.akam.net. FAN.GOV. 10800 IN NS a14-64.akam.net. FAN.GOV. 10800 IN NS a26-65.akam.net. FAN.GOV. 10800 IN NS a3-66.akam.net. FAN.GOV. 10800 IN NS a8-67.akam.net. FAN.GOV. 10800 IN NS a9-64.akam.net. FAN.GOV. 3600 IN DS ( 42379 8 2 04c973f078e9eda416aa4c584a1f943fadb7907bd3557fab7b8f502376700c85 ) FAN.GOV. 3600 IN DS ( 46465 8 2 a129c966d35fea007d73a6e7b57c389bd137b8695632f8356bc4881b95b010f1 ) FAN.GOV. 3600 IN DS ( 9565 8 2 fa95e87d36457fdc83b92a632bc098a816a6481c3c9d5ab0e535c663bf6ed721 ) FAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143048 20260420123048 35496 gov. BC2Qk8jdvzIgirjmQnYjLBZL14WKzHg7x76kcQEWzL1IZb7N2fzalWHgcIgYrdqXCL2dVLdIjq/I L8kQ9tBx7A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone FAN.GOV

FAN.GOV

	Checking DS between GOV and FAN.GOV
	Query to a.ns.gov for FAN.GOV/DS
	Received 279 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 279 octets ;; HEADER SECTION ;; id = 24610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DS ;; ANSWER SECTION (4 records) FAN.GOV. 3600 IN DS ( 42379 8 2 04c973f078e9eda416aa4c584a1f943fadb7907bd3557fab7b8f502376700c85 ) FAN.GOV. 3600 IN DS ( 46465 8 2 a129c966d35fea007d73a6e7b57c389bd137b8695632f8356bc4881b95b010f1 ) FAN.GOV. 3600 IN DS ( 9565 8 2 fa95e87d36457fdc83b92a632bc098a816a6481c3c9d5ab0e535c663bf6ed721 ) FAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143048 20260420123048 35496 gov. yioBkeszJQbr6SuMfdw9wkeQINgoAIfZwuyMOlBXbMF5WASrJbPLl3/xwONI2hct4ZeY/4+vzvN0 x9iIcFJQaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for FAN.GOV in the GOV zone
	DS=42379/SHA-256 has algorithm RSASHA256
	DS=46465/SHA-256 has algorithm RSASHA256
	DS=9565/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143048 20260420123048 35496 gov. yioBkeszJQbr6SuMfdw9wkeQINgoAIfZwuyMOlBXbMF5WASrJbPLl3/xwONI2hct4ZeY/4+vzvN0 x9iIcFJQaA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=42379/SHA-256 is now in the chain-of-trust
	DS=46465/SHA-256 is now in the chain-of-trust
	DS=9565/SHA-256 is now in the chain-of-trust
	`FAN.GOV. 3600 IN DS ( 42379 8 2 04c973f078e9eda416aa4c584a1f943fadb7907bd3557fab7b8f502376700c85 )`
	`FAN.GOV. 3600 IN DS ( 46465 8 2 a129c966d35fea007d73a6e7b57c389bd137b8695632f8356bc4881b95b010f1 )`
	`FAN.GOV. 3600 IN DS ( 9565 8 2 fa95e87d36457fdc83b92a632bc098a816a6481c3c9d5ab0e535c663bf6ed721 )`
	Query to a8-67.akam.net for FAN.GOV/DNSKEY
	Received 2301 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 2301 octets ;; HEADER SECTION ;; id = 4006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcMXJR71FOLjGMKw/dN7+JoEktFkIBQtzdLjh4jyg/pSWCoUP9fDd9TXnlDbFxUaCNvfgIOC y/EPVdzRadCIPbbs2O6Mh563/0Qvr09DrChyj1lan2ziyaGEpLrUU73ab9H2+Twngp6A0cXGUs2q LgnOvCQ/fi/4yYI2WxbKH+uinvXFaCKSf2AWwxFXLgQ4cTMOo8g+Ry1Watp+Ku/k9mmSCju5BnCS FA7l/JOORDQVl1MWUmYfHl1+8NccJaW4yHAdm12c3subxUv14wGPsIYKSxlh9mv8fCr0cAKP07fV 7zPj4780Y7GI4PWAxG2JN0Q8MJFt1fm+bFZY5xUFhkk= ) ; keytag 10521 FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAdG8vASk7q5VWsBDwKIEwa3c0jNcaB/+cquS40/zjGZy3MkUg/JVrzU1H4VgGk4ZJYLOLx5l EDSYotj7FUqcrOoC9GZs4wtHabF8AnYWFqYKE2cn0nB919xf+/LnZAH1uCT4NtB5QLjmbrURTqML p9HuwmZhsuYtE09u2+kCs2o0nOJ1ejguIBa4W3OOnzWdZJzhioyWaI/8gLfEXEO5mrzzPyUQnuYM AszQl26CFWc+T/VUY5EmebtfpsQU862iGKTS0zejJFgbffDQbJNri0+tEDB6pVeljG0UOytvz2bk iIXGEjqqHnCtagdSKeXrILQyI//K+GUtSRWLIxCY+/M= ) ; keytag 42600 FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAb897IhzyTmuCertCAeiXLIlKK+7e9vIcYcf1vYQzhpAXZoOXzXPdFwn3ymM36d0Xlhe98uo b5f6IQdrFnmOjHsOMbqC7dYS2RTjNSud/0z8f57SW3u7X9woBsqs5oT71M8+CaX1XBqRorfMA1EZ 9wBIZaop4vmwWF/iHAeAY3Fq5hxQz71na81xbj7yq6MGKSSWRuqyZo2U5Ec+Yl9WrSPMFnE0Powb vuiE1pwAvF0NYhdTGMeEc1x7fMHpKRe3SS8/SzfeI1yo7mUwIEMFUyEU7p4CQd9OaPjD5iwmxaMa 4GZ2kZjGXLHAOp/XlP5ijY1okAo9UMMzIP9OSAcnJxE= ) ; keytag 58698 FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAaLn98JwvgTswHpu1ySXignnrhE7MVwLm0QR4tYnUIHFwapa3xxhIhAyAj8lLKEtGxx2ZkcF PZEZorKiyomQzf3Dpj9PjsRfC+X0HiGiUZVGEOrhahdP3JcXw6kFiO/NJJZL+R+7bRUA9ynWTmc/ EBB4UshirJ7+vziCGeQqg8Aj4MQl4e0yqX1fBEgtbWetQ5m/IDSFR9q2cK6pptt2NILQga5qEb8W wLZwq9JtgEjOp2PrwYZHfor8ryYT07vRQYzQqkL242UnkSy++EGYV6o6PkQO/d/mxWoi+/9iNIgt x6NJqe70zmoIDRUhJfK60tWBVgJOw9Xpjbb5GcB6j70= ) ; keytag 46465 FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAczaJCeaAVQkaymEQRDHypSU50G/4vUv6uhwUbkLTQ8JT6RimHR8iEVoWPyx7ot1TfwL79gi ZJRfmvWeeIznEtUVBqgIJPU1z51NWv5AVDTUakzdLXn6uGn7WCUBfBvSbKr2d7SeRAvifVQr2R0j N/PJnj6zMF3QUq/X4yWIsr6Q42KEuh2WVoFfcI9Yva6CEloBIuCqYIgqXs3owYda76OWucUsEg6L aCC5eZDWqINC8HvJ6wOYPINjHj7W6BlRZ2Q6AzQbNzVe6I0OFXL7kGRale+gQiJpKppjbRNuLg+/ uaXODQG4Nh6ye/GgQrk1yiQpYN5JB5WTUZEDGqfhgLk= ) ; keytag 9565 FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 9565 fan.gov. lup/c0gMw06wKNhwnFxoaQ3z2RfuffsJG5ZxtMEsb2DPjefdIx7cUjG2D78K7xP2fOWZh4djkKEw qlBCxgElJebwmQHDI8l6XLePpfY8RNhMWJSovjiVpbK63ZwaV2/KngiViRqXOFnm1c38kap2lA/P 5J42a1fGv7ecLXIyf+P4KCx3sLMDZp+Io1Yvmq0bvy7o69waDrXzbPwhIDLfFjWAnci6+wcm9XK2 HcdX9WroFjZQ4jl6az+JAumUw3OkU6PVL31kNn5JQbxcnE0vv0FAxNeSYARDMIIElxFVRZMmozr0 /LnU0XRXiZvbD235lEJnDaleQdtXrTKZw4qEFg== ) FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 46465 fan.gov. d5IpaWg7zJRHzFF/ymcKDd3lB/lwcSLPv8RLw8lB/vqmnl67xKgwK8JjXHpKiUYxtrWCt6g5dnDE 0x2FDxTHnT5nVb7wpf12siiqxN2VSJcNaL9OMY6jiMJ/th71STvUnEp2c0bX+Tlij6725S4uTZAm duYTYgJiYBgzFUXNA5EkXJqAlfDMB16IQljrYUBCyc5k9meEoHaOnJtiD+6cXOfetGYvJqHwsPQn PAlr0rxHEaw4ZMR8H6H00ovJ/WpXCSdS7pPNdw2ungMokI4NiFq6gOpOdC9UdjUwuXqQJkNLvxg6 YsOCZxN2ApEGwQgOr6z2JFAD6kLaswmn9p4trw== ) FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 58698 fan.gov. UrLsP6aMti4kV1v/hNfUNk1X4Qj8EjZFqNXh1vgrxOHJKWWLoi08zoCUQJh4FZj/K+/sj3x9Pqav eFHL/WbSWUEZqd/T4UjlYrmJ8N7schmYYZ8Ltm5Mx/FCQwOV3uLjnfHuPW1OR07IHKkPR+LN6iWc Wt049CpzLAXat6CY8HaMWZJyMPy2UEVFEotFoZeMIvgdX35YlS9xbNw+FqCrsH12YGx3Xwenf9ST kmcuM0xycaFcVXDmIJ7uo1oJzPjdf6tiwvu4iyihUsqolReqRlETQcFrea24jmE3/7Gtd7NogPvw vzn1pTmGTdDgSUKsrw1tg9isNKGsOVmxnybcEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for FAN.GOV
	`FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcMXJR71FOLjGMKw/dN7+JoEktFkIBQtzdLjh4jyg/pSWCoUP9fDd9TXnlDbFxUaCNvfgIOC y/EPVdzRadCIPbbs2O6Mh563/0Qvr09DrChyj1lan2ziyaGEpLrUU73ab9H2+Twngp6A0cXGUs2q LgnOvCQ/fi/4yYI2WxbKH+uinvXFaCKSf2AWwxFXLgQ4cTMOo8g+Ry1Watp+Ku/k9mmSCju5BnCS FA7l/JOORDQVl1MWUmYfHl1+8NccJaW4yHAdm12c3subxUv14wGPsIYKSxlh9mv8fCr0cAKP07fV 7zPj4780Y7GI4PWAxG2JN0Q8MJFt1fm+bFZY5xUFhkk= ) ; keytag 10521`
	`FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAdG8vASk7q5VWsBDwKIEwa3c0jNcaB/+cquS40/zjGZy3MkUg/JVrzU1H4VgGk4ZJYLOLx5l EDSYotj7FUqcrOoC9GZs4wtHabF8AnYWFqYKE2cn0nB919xf+/LnZAH1uCT4NtB5QLjmbrURTqML p9HuwmZhsuYtE09u2+kCs2o0nOJ1ejguIBa4W3OOnzWdZJzhioyWaI/8gLfEXEO5mrzzPyUQnuYM AszQl26CFWc+T/VUY5EmebtfpsQU862iGKTS0zejJFgbffDQbJNri0+tEDB6pVeljG0UOytvz2bk iIXGEjqqHnCtagdSKeXrILQyI//K+GUtSRWLIxCY+/M= ) ; keytag 42600`
	`FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAb897IhzyTmuCertCAeiXLIlKK+7e9vIcYcf1vYQzhpAXZoOXzXPdFwn3ymM36d0Xlhe98uo b5f6IQdrFnmOjHsOMbqC7dYS2RTjNSud/0z8f57SW3u7X9woBsqs5oT71M8+CaX1XBqRorfMA1EZ 9wBIZaop4vmwWF/iHAeAY3Fq5hxQz71na81xbj7yq6MGKSSWRuqyZo2U5Ec+Yl9WrSPMFnE0Powb vuiE1pwAvF0NYhdTGMeEc1x7fMHpKRe3SS8/SzfeI1yo7mUwIEMFUyEU7p4CQd9OaPjD5iwmxaMa 4GZ2kZjGXLHAOp/XlP5ijY1okAo9UMMzIP9OSAcnJxE= ) ; keytag 58698`
	`FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAaLn98JwvgTswHpu1ySXignnrhE7MVwLm0QR4tYnUIHFwapa3xxhIhAyAj8lLKEtGxx2ZkcF PZEZorKiyomQzf3Dpj9PjsRfC+X0HiGiUZVGEOrhahdP3JcXw6kFiO/NJJZL+R+7bRUA9ynWTmc/ EBB4UshirJ7+vziCGeQqg8Aj4MQl4e0yqX1fBEgtbWetQ5m/IDSFR9q2cK6pptt2NILQga5qEb8W wLZwq9JtgEjOp2PrwYZHfor8ryYT07vRQYzQqkL242UnkSy++EGYV6o6PkQO/d/mxWoi+/9iNIgt x6NJqe70zmoIDRUhJfK60tWBVgJOw9Xpjbb5GcB6j70= ) ; keytag 46465`
	`FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAczaJCeaAVQkaymEQRDHypSU50G/4vUv6uhwUbkLTQ8JT6RimHR8iEVoWPyx7ot1TfwL79gi ZJRfmvWeeIznEtUVBqgIJPU1z51NWv5AVDTUakzdLXn6uGn7WCUBfBvSbKr2d7SeRAvifVQr2R0j N/PJnj6zMF3QUq/X4yWIsr6Q42KEuh2WVoFfcI9Yva6CEloBIuCqYIgqXs3owYda76OWucUsEg6L aCC5eZDWqINC8HvJ6wOYPINjHj7W6BlRZ2Q6AzQbNzVe6I0OFXL7kGRale+gQiJpKppjbRNuLg+/ uaXODQG4Nh6ye/GgQrk1yiQpYN5JB5WTUZEDGqfhgLk= ) ; keytag 9565`
	DNSKEY=46465/SEP is now in the chain-of-trust
	DS=46465/SHA-256 verifies DNSKEY=46465/SEP
	DNSKEY=9565/SEP is now in the chain-of-trust
	DS=9565/SHA-256 verifies DNSKEY=9565/SEP
	DS=42379/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 9565 fan.gov. lup/c0gMw06wKNhwnFxoaQ3z2RfuffsJG5ZxtMEsb2DPjefdIx7cUjG2D78K7xP2fOWZh4djkKEw qlBCxgElJebwmQHDI8l6XLePpfY8RNhMWJSovjiVpbK63ZwaV2/KngiViRqXOFnm1c38kap2lA/P 5J42a1fGv7ecLXIyf+P4KCx3sLMDZp+Io1Yvmq0bvy7o69waDrXzbPwhIDLfFjWAnci6+wcm9XK2 HcdX9WroFjZQ4jl6az+JAumUw3OkU6PVL31kNn5JQbxcnE0vv0FAxNeSYARDMIIElxFVRZMmozr0 /LnU0XRXiZvbD235lEJnDaleQdtXrTKZw4qEFg== )`
	`FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 46465 fan.gov. d5IpaWg7zJRHzFF/ymcKDd3lB/lwcSLPv8RLw8lB/vqmnl67xKgwK8JjXHpKiUYxtrWCt6g5dnDE 0x2FDxTHnT5nVb7wpf12siiqxN2VSJcNaL9OMY6jiMJ/th71STvUnEp2c0bX+Tlij6725S4uTZAm duYTYgJiYBgzFUXNA5EkXJqAlfDMB16IQljrYUBCyc5k9meEoHaOnJtiD+6cXOfetGYvJqHwsPQn PAlr0rxHEaw4ZMR8H6H00ovJ/WpXCSdS7pPNdw2ungMokI4NiFq6gOpOdC9UdjUwuXqQJkNLvxg6 YsOCZxN2ApEGwQgOr6z2JFAD6kLaswmn9p4trw== )`
	`FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20270218153148 20260218143603 58698 fan.gov. UrLsP6aMti4kV1v/hNfUNk1X4Qj8EjZFqNXh1vgrxOHJKWWLoi08zoCUQJh4FZj/K+/sj3x9Pqav eFHL/WbSWUEZqd/T4UjlYrmJ8N7schmYYZ8Ltm5Mx/FCQwOV3uLjnfHuPW1OR07IHKkPR+LN6iWc Wt049CpzLAXat6CY8HaMWZJyMPy2UEVFEotFoZeMIvgdX35YlS9xbNw+FqCrsH12YGx3Xwenf9ST kmcuM0xycaFcVXDmIJ7uo1oJzPjdf6tiwvu4iyihUsqolReqRlETQcFrea24jmE3/7Gtd7NogPvw vzn1pTmGTdDgSUKsrw1tg9isNKGsOVmxnybcEQ== )`
	RRSIG=9565 and DNSKEY=9565/SEP verifies the DNSKEY RRset
	RRSIG=46465 and DNSKEY=46465/SEP verifies the DNSKEY RRset
	RRSIG=58698 and DNSKEY=58698 verifies the DNSKEY RRset
	DNSKEY=10521 is now in the chain-of-trust
	DNSKEY=42600 is now in the chain-of-trust
	DNSKEY=58698 is now in the chain-of-trust
	Query to a1-63.akam.net for FAN.GOV/A
	Received 347 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 347 octets ;; HEADER SECTION ;; id = 43385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a9-64.akam.net for FAN.GOV/SOA
	Received 837 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 837 octets ;; HEADER SECTION ;; id = 17080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 5432 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20270402160600 20260402150600 58698 fan.gov. eOG4mX03ilPg7eqRX/2C/QMCHP2piZspbVCDG4pri7GSpbIzp4qL50ytOoSTZ+wzWC0aMZ2MGg+X i3bAYfCtcXmm4HN1M9JS5wvH2/zumCtPfFO+nE9wH+56IY9tHLraXQUwkDppLOdF0Os9gfDP4GlM PVaZmL+S49hTWdS6E17JpYi/JL9K4femH1WwpxWY0edEGNaVRqUUMBJ3mncNKkl/fruHhp29AnLN wbTPFHX/hgXyY/2ZIvvGfkJ0yzcTeub/7mKSqNppf9vblENbSL+eQYjE9u8LXoku06PPFZWZNeZc P88Pzzx7SncGad2GgkNk/LRap0OroeKrdTXuFg== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145604 20260218143603 58698 fan.gov. bhHhWOAXCUi5BSwP4E64yU7EO/hZYCJdG8irOxRhCsM62/DS1l6mu01MJ0lKPJNm1Bj4V55uR72h SV9PXUNjb7NwikZXvtiHQnceNCjXwbUwrHwzOMyVu2nMdBlRq3ftxgUYMbyH4Nl/lB1A/8djDy0j ocETojunpnIragB02IKugKHsFIbFwRtQIsy48QKdffoHx2fw5jQqg/TggHYveJywM5HTP09cot+g +JzT/1YKa9AxgrCeQxqFW5fz2uh0UD9N0j/92bP6kizQJuJESF0vT+bLViWZUgFljUy4Ut7GtIkI 62EAL6QAYXd6h9Pa58l6Xixkwy5t/HY0aXorVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-65.akam.net for FAN.GOV/SOA
	Received 837 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 837 octets ;; HEADER SECTION ;; id = 43347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 5432 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20270402160600 20260402150600 58698 fan.gov. eOG4mX03ilPg7eqRX/2C/QMCHP2piZspbVCDG4pri7GSpbIzp4qL50ytOoSTZ+wzWC0aMZ2MGg+X i3bAYfCtcXmm4HN1M9JS5wvH2/zumCtPfFO+nE9wH+56IY9tHLraXQUwkDppLOdF0Os9gfDP4GlM PVaZmL+S49hTWdS6E17JpYi/JL9K4femH1WwpxWY0edEGNaVRqUUMBJ3mncNKkl/fruHhp29AnLN wbTPFHX/hgXyY/2ZIvvGfkJ0yzcTeub/7mKSqNppf9vblENbSL+eQYjE9u8LXoku06PPFZWZNeZc P88Pzzx7SncGad2GgkNk/LRap0OroeKrdTXuFg== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145604 20260218143603 58698 fan.gov. bhHhWOAXCUi5BSwP4E64yU7EO/hZYCJdG8irOxRhCsM62/DS1l6mu01MJ0lKPJNm1Bj4V55uR72h SV9PXUNjb7NwikZXvtiHQnceNCjXwbUwrHwzOMyVu2nMdBlRq3ftxgUYMbyH4Nl/lB1A/8djDy0j ocETojunpnIragB02IKugKHsFIbFwRtQIsy48QKdffoHx2fw5jQqg/TggHYveJywM5HTP09cot+g +JzT/1YKa9AxgrCeQxqFW5fz2uh0UD9N0j/92bP6kizQJuJESF0vT+bLViWZUgFljUy4Ut7GtIkI 62EAL6QAYXd6h9Pa58l6Xixkwy5t/HY0aXorVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for FAN.GOV/SOA
	Received 837 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 837 octets ;; HEADER SECTION ;; id = 53119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 5432 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20270402160600 20260402150600 58698 fan.gov. eOG4mX03ilPg7eqRX/2C/QMCHP2piZspbVCDG4pri7GSpbIzp4qL50ytOoSTZ+wzWC0aMZ2MGg+X i3bAYfCtcXmm4HN1M9JS5wvH2/zumCtPfFO+nE9wH+56IY9tHLraXQUwkDppLOdF0Os9gfDP4GlM PVaZmL+S49hTWdS6E17JpYi/JL9K4femH1WwpxWY0edEGNaVRqUUMBJ3mncNKkl/fruHhp29AnLN wbTPFHX/hgXyY/2ZIvvGfkJ0yzcTeub/7mKSqNppf9vblENbSL+eQYjE9u8LXoku06PPFZWZNeZc P88Pzzx7SncGad2GgkNk/LRap0OroeKrdTXuFg== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145604 20260218143603 58698 fan.gov. bhHhWOAXCUi5BSwP4E64yU7EO/hZYCJdG8irOxRhCsM62/DS1l6mu01MJ0lKPJNm1Bj4V55uR72h SV9PXUNjb7NwikZXvtiHQnceNCjXwbUwrHwzOMyVu2nMdBlRq3ftxgUYMbyH4Nl/lB1A/8djDy0j ocETojunpnIragB02IKugKHsFIbFwRtQIsy48QKdffoHx2fw5jQqg/TggHYveJywM5HTP09cot+g +JzT/1YKa9AxgrCeQxqFW5fz2uh0UD9N0j/92bP6kizQJuJESF0vT+bLViWZUgFljUy4Ut7GtIkI 62EAL6QAYXd6h9Pa58l6Xixkwy5t/HY0aXorVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-66.akam.net for FAN.GOV/SOA
	Received 837 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 837 octets ;; HEADER SECTION ;; id = 22474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 5432 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20270402160600 20260402150600 58698 fan.gov. eOG4mX03ilPg7eqRX/2C/QMCHP2piZspbVCDG4pri7GSpbIzp4qL50ytOoSTZ+wzWC0aMZ2MGg+X i3bAYfCtcXmm4HN1M9JS5wvH2/zumCtPfFO+nE9wH+56IY9tHLraXQUwkDppLOdF0Os9gfDP4GlM PVaZmL+S49hTWdS6E17JpYi/JL9K4femH1WwpxWY0edEGNaVRqUUMBJ3mncNKkl/fruHhp29AnLN wbTPFHX/hgXyY/2ZIvvGfkJ0yzcTeub/7mKSqNppf9vblENbSL+eQYjE9u8LXoku06PPFZWZNeZc P88Pzzx7SncGad2GgkNk/LRap0OroeKrdTXuFg== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145604 20260218143603 58698 fan.gov. bhHhWOAXCUi5BSwP4E64yU7EO/hZYCJdG8irOxRhCsM62/DS1l6mu01MJ0lKPJNm1Bj4V55uR72h SV9PXUNjb7NwikZXvtiHQnceNCjXwbUwrHwzOMyVu2nMdBlRq3ftxgUYMbyH4Nl/lB1A/8djDy0j ocETojunpnIragB02IKugKHsFIbFwRtQIsy48QKdffoHx2fw5jQqg/TggHYveJywM5HTP09cot+g +JzT/1YKa9AxgrCeQxqFW5fz2uh0UD9N0j/92bP6kizQJuJESF0vT+bLViWZUgFljUy4Ut7GtIkI 62EAL6QAYXd6h9Pa58l6Xixkwy5t/HY0aXorVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for FAN.GOV/SOA
	Received 837 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 837 octets ;; HEADER SECTION ;; id = 22034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 5432 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20270402160600 20260402150600 58698 fan.gov. eOG4mX03ilPg7eqRX/2C/QMCHP2piZspbVCDG4pri7GSpbIzp4qL50ytOoSTZ+wzWC0aMZ2MGg+X i3bAYfCtcXmm4HN1M9JS5wvH2/zumCtPfFO+nE9wH+56IY9tHLraXQUwkDppLOdF0Os9gfDP4GlM PVaZmL+S49hTWdS6E17JpYi/JL9K4femH1WwpxWY0edEGNaVRqUUMBJ3mncNKkl/fruHhp29AnLN wbTPFHX/hgXyY/2ZIvvGfkJ0yzcTeub/7mKSqNppf9vblENbSL+eQYjE9u8LXoku06PPFZWZNeZc P88Pzzx7SncGad2GgkNk/LRap0OroeKrdTXuFg== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20270218145604 20260218143603 58698 fan.gov. bhHhWOAXCUi5BSwP4E64yU7EO/hZYCJdG8irOxRhCsM62/DS1l6mu01MJ0lKPJNm1Bj4V55uR72h SV9PXUNjb7NwikZXvtiHQnceNCjXwbUwrHwzOMyVu2nMdBlRq3ftxgUYMbyH4Nl/lB1A/8djDy0j ocETojunpnIragB02IKugKHsFIbFwRtQIsy48QKdffoHx2fw5jQqg/TggHYveJywM5HTP09cot+g +JzT/1YKa9AxgrCeQxqFW5fz2uh0UD9N0j/92bP6kizQJuJESF0vT+bLViWZUgFljUy4Ut7GtIkI 62EAL6QAYXd6h9Pa58l6Xixkwy5t/HY0aXorVw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

FAN.GOV

	Query to a26-65.akam.net for FAN.GOV/A
	Received 347 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 347 octets ;; HEADER SECTION ;; id = 34014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a26-65.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

FAN.GOV

	Query to a3-66.akam.net for FAN.GOV/A
	Received 347 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 347 octets ;; HEADER SECTION ;; id = 36136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a3-66.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

FAN.GOV

	Query to a9-64.akam.net for FAN.GOV/A
	Received 347 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 347 octets ;; HEADER SECTION ;; id = 36721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a9-64.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

FAN.GOV

	Query to a14-64.akam.net for FAN.GOV/A
	Received 347 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 347 octets ;; HEADER SECTION ;; id = 48837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a14-64.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

FAN.GOV

	Query to a8-67.akam.net for FAN.GOV/A
	Received 347 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 347 octets ;; HEADER SECTION ;; id = 25153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 44.205.213.177 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a8-67.akam.net for FAN.GOV/A
	FAN.GOV A RR has value 44.205.213.177
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20270218145604 20260218143603 58698 fan.gov. vm7RXZkx8p+5Ut5iZXYMz2nCPJBJR6fG6+EcsMQmz+FnIaP+GX21+BwSULB1zhnYsF8ef45Nl78k MY+4WgKXerC6y9pfysESBLFzHPYR/jNZ0nGF4LBSDRB5vpj9n477j58N7eBXIKK22W5ZbP8BQrcA lnsrYYssrW/M25fXPpZisITReeR7S5fXnY8ZuP8mRkWDm50BJpu5Ive6NzQ/hroNXiN4xJzTqDJP j/jIwRrxmDR8ezWke88At/RCJ2ldQUJ4P3bbbBQt0ExThvTYPOOHdc3i/Wx5WQQVVy96iKYySa6w 8V4ekhb2Pb83J6PuLGSvIIgOXUtSjzgn/o97lw== )`
	RRSIG=58698 and DNSKEY=58698 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FAN.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: