DNSSEC Debugger - FEDCENTER.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-04 12:16:02 UTC

Analyzing DNSSEC problems for FEDCENTER.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1414 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1414 octets ;; HEADER SECTION ;; id = 56821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to j.root-servers.net for FEDCENTER.GOV/A
	Received 620 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 620 octets ;; HEADER SECTION ;; id = 59787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260717050000 20260704040000 57780 . ghFQZWGcxrIUyPneb5Qlgtx7bq3Bhj2VrefnNHjfv36gIbsoHaNPIgaOOwZjhPtFFiMloZ2RwirA SuCNTLk5+3Nhkd6STqnWLP/nMdzWcGs8BBbqxrzXR1iqHhnKd4BafNGrHIxWkaR1+kqbUamqXHrr KHBMB3feweCH4rHPreqq14QTwxPJQ8+bmB1Em4ZdARSddmT+4179/0HulFcKKyzaC+b5Pvz0WVDc vKCofwRrxi63j5qkASQjm8LAf8NyAtOy4RuW2vSRdC7q+KtMneahOHJSIOkzi92fwahknRoAQVO3 AoOW/HvANFNIwaONBnPcutfeqQw2FYNPp7b4hQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 64917 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260717050000 20260704040000 57780 . ghFQZWGcxrIUyPneb5Qlgtx7bq3Bhj2VrefnNHjfv36gIbsoHaNPIgaOOwZjhPtFFiMloZ2RwirA SuCNTLk5+3Nhkd6STqnWLP/nMdzWcGs8BBbqxrzXR1iqHhnKd4BafNGrHIxWkaR1+kqbUamqXHrr KHBMB3feweCH4rHPreqq14QTwxPJQ8+bmB1Em4ZdARSddmT+4179/0HulFcKKyzaC+b5Pvz0WVDc vKCofwRrxi63j5qkASQjm8LAf8NyAtOy4RuW2vSRdC7q+KtMneahOHJSIOkzi92fwahknRoAQVO3 AoOW/HvANFNIwaONBnPcutfeqQw2FYNPp7b4hQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 370 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 370 octets ;; HEADER SECTION ;; id = 64798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260717050000 20260704040000 57780 . ghFQZWGcxrIUyPneb5Qlgtx7bq3Bhj2VrefnNHjfv36gIbsoHaNPIgaOOwZjhPtFFiMloZ2RwirA SuCNTLk5+3Nhkd6STqnWLP/nMdzWcGs8BBbqxrzXR1iqHhnKd4BafNGrHIxWkaR1+kqbUamqXHrr KHBMB3feweCH4rHPreqq14QTwxPJQ8+bmB1Em4ZdARSddmT+4179/0HulFcKKyzaC+b5Pvz0WVDc vKCofwRrxi63j5qkASQjm8LAf8NyAtOy4RuW2vSRdC7q+KtMneahOHJSIOkzi92fwahknRoAQVO3 AoOW/HvANFNIwaONBnPcutfeqQw2FYNPp7b4hQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260717050000 20260704040000 57780 . ghFQZWGcxrIUyPneb5Qlgtx7bq3Bhj2VrefnNHjfv36gIbsoHaNPIgaOOwZjhPtFFiMloZ2RwirA SuCNTLk5+3Nhkd6STqnWLP/nMdzWcGs8BBbqxrzXR1iqHhnKd4BafNGrHIxWkaR1+kqbUamqXHrr KHBMB3feweCH4rHPreqq14QTwxPJQ8+bmB1Em4ZdARSddmT+4179/0HulFcKKyzaC+b5Pvz0WVDc vKCofwRrxi63j5qkASQjm8LAf8NyAtOy4RuW2vSRdC7q+KtMneahOHJSIOkzi92fwahknRoAQVO3 AoOW/HvANFNIwaONBnPcutfeqQw2FYNPp7b4hQ== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 52586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260816110634 20260616110634 2536 gov. peNjLt/c3zelH9h+BNYXhVTX2LpAqyXVaFVDsClR79rXmibtW598Pp4/p5HOw52ivT3eg4RxSevJ E3g32Fcq6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260816110634 20260616110634 2536 gov. peNjLt/c3zelH9h+BNYXhVTX2LpAqyXVaFVDsClR79rXmibtW598Pp4/p5HOw52ivT3eg4RxSevJ E3g32Fcq6g== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for FEDCENTER.GOV/A
	Received 499 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 499 octets ;; HEADER SECTION ;; id = 5992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FEDCENTER.GOV. 10800 IN NS dcns1.epa.GOV. FEDCENTER.GOV. 10800 IN NS dcns2.epa.GOV. FEDCENTER.GOV. 10800 IN NS nccns1.epa.GOV. FEDCENTER.GOV. 10800 IN NS nccns2.epa.GOV. FEDCENTER.GOV. 3600 IN DS ( 61147 8 2 6b073951a694633a6de6724408da8e4efa45fb220a5b77bfc097fff886e8697d ) FEDCENTER.GOV. 3600 IN DS ( 8836 8 2 264419f7bbd2719ad5b50bf697638de4e8221e74978ef0d6185a212da043388d ) FEDCENTER.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260705131602 20260703111602 35496 gov. Tevuq65k/1xoSf4njuoN8JjfYkwetB1m7JaPuUvSvfLRrEuuz5qI42sXmUcnF/+WwstqiXRcw2PP Eh0YaReSFw== ) ;; ADDITIONAL SECTION (9 records) dcns1.epa.GOV. 3600 IN A 161.80.212.5 dcns1.epa.GOV. 3600 IN AAAA 2620:117:5071:d4::f005 dcns2.epa.GOV. 3600 IN A 161.80.212.15 dcns2.epa.GOV. 3600 IN AAAA 2620:117:5071:d4::f00f nccns1.epa.GOV. 3600 IN A 134.67.12.5 nccns1.epa.GOV. 3600 IN AAAA 2620:117:506f:c::f005 nccns2.epa.GOV. 3600 IN A 134.67.12.15 nccns2.epa.GOV. 3600 IN AAAA 2620:117:506f:c::f00f ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for FEDCENTER.GOV/DNSKEY
	Received 499 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 499 octets ;; HEADER SECTION ;; id = 57783 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FEDCENTER.GOV. 10800 IN NS dcns1.epa.GOV. FEDCENTER.GOV. 10800 IN NS dcns2.epa.GOV. FEDCENTER.GOV. 10800 IN NS nccns1.epa.GOV. FEDCENTER.GOV. 10800 IN NS nccns2.epa.GOV. FEDCENTER.GOV. 3600 IN DS ( 61147 8 2 6b073951a694633a6de6724408da8e4efa45fb220a5b77bfc097fff886e8697d ) FEDCENTER.GOV. 3600 IN DS ( 8836 8 2 264419f7bbd2719ad5b50bf697638de4e8221e74978ef0d6185a212da043388d ) FEDCENTER.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260705131602 20260703111602 35496 gov. AsfOAswqp49hhEjmFimTjI9peHDbk+Bg/QAirwC5fG99inIKlFWFKdZVwNQTzPA+FBXX8vspQd0Z jiwqYZT8Vw== ) ;; ADDITIONAL SECTION (9 records) dcns1.epa.GOV. 3600 IN A 161.80.212.5 dcns1.epa.GOV. 3600 IN AAAA 2620:117:5071:d4::f005 dcns2.epa.GOV. 3600 IN A 161.80.212.15 dcns2.epa.GOV. 3600 IN AAAA 2620:117:5071:d4::f00f nccns1.epa.GOV. 3600 IN A 134.67.12.5 nccns1.epa.GOV. 3600 IN AAAA 2620:117:506f:c::f005 nccns2.epa.GOV. 3600 IN A 134.67.12.15 nccns2.epa.GOV. 3600 IN AAAA 2620:117:506f:c::f00f ;; { "EDNS-VERSION": 0 }
	Found child zone FEDCENTER.GOV

FEDCENTER.GOV

	Checking DS between GOV and FEDCENTER.GOV
	Query to c.ns.GOV for FEDCENTER.GOV/DS
	Received 237 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 237 octets ;; HEADER SECTION ;; id = 47930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN DS ;; ANSWER SECTION (3 records) FEDCENTER.GOV. 3600 IN DS ( 61147 8 2 6b073951a694633a6de6724408da8e4efa45fb220a5b77bfc097fff886e8697d ) FEDCENTER.GOV. 3600 IN DS ( 8836 8 2 264419f7bbd2719ad5b50bf697638de4e8221e74978ef0d6185a212da043388d ) FEDCENTER.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260705131602 20260703111602 35496 gov. zKD9y+lqB3vjEs95NYT3l1DscqHU37zbqVXCrlS803b83gc/TPl7GsOp31SLdX7xQqgHNwyCsE2b X8d0M54wrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for FEDCENTER.GOV in the GOV zone
	DS=61147/SHA-256 has algorithm RSASHA256
	DS=8836/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FEDCENTER.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260705131602 20260703111602 35496 gov. zKD9y+lqB3vjEs95NYT3l1DscqHU37zbqVXCrlS803b83gc/TPl7GsOp31SLdX7xQqgHNwyCsE2b X8d0M54wrg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=61147/SHA-256 is now in the chain-of-trust
	DS=8836/SHA-256 is now in the chain-of-trust
	`FEDCENTER.GOV. 3600 IN DS ( 61147 8 2 6b073951a694633a6de6724408da8e4efa45fb220a5b77bfc097fff886e8697d )`
	`FEDCENTER.GOV. 3600 IN DS ( 8836 8 2 264419f7bbd2719ad5b50bf697638de4e8221e74978ef0d6185a212da043388d )`
	Query to dcns2.epa.GOV for FEDCENTER.GOV/DNSKEY
	Received 1813 bytes from 161.80.212.15
	;; Response received from [161.80.212.15] 1813 octets ;; HEADER SECTION ;; id = 26828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAZ3ZUcPy9zW3m/u0CBaoJ3Ps6tMh6bqiED99m2QP7TTxpDCNUYwQTpWzQvMnorPqWNmRjE+u 1WqBG7ip2g9/yFvK+l2UolqxooaE6C64LwuIgshN5MdbkOA3X+3QSUiNkk8jlQXDiVgSISaOfEse rrhU/LFmI+bhvCzA7H8vp8Gb ) ; keytag 2311 FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAZFzH7Etx3XtJpPmbNILPw1YM1pceJfcSoS0cESTM6FW+Jb89oQNegc3vXrEAzpkk78F/Dmo 5DiD5aYADDdl6VXxZHDtRb7Yv/WMznSTtPJrrcI/I2bhsi/7sStqEuWaRsRc7ZoF7SCVp7g+1kOv ownWOGbzjf++23n2hHcJTDAZ ) ; keytag 26823 FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAeDIpOYC6zX0fH24CQx/p+3XUKxpJNNrmbcFSPTHxS9TG8TNkpOrC3VO71cELfiTFUK85uIk hQsAr5UCh6PZF4T3n2L/rXBgZURuQgotO7EzNwVdE0t4rdT86c/P7+EWxQpYXaIz5a6ZjTujwniO lrtU0LJyn7fcvLDDgLx4liix ) ; keytag 32578 FEDCENTER.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAdg9sd/T3Eh/HAYZ5ATuB9zcgPJ/HIO7NYF9xHfZWZLaDsepbj0639latZCGpkOQdUA9VkK2 XEgbmZqBuUbzggxbmhl8GNG6sBXXpdGXMmhTrkQ4N7Qxy0DxM2FvQWMowNoNDqYV4MK1ZRQGb2ax MEOwl+pwK/L02zApR51ySM1rWgK1hCHyNyV6lhsg1efAFvGnjpAjDhQA6jr/npQWK7UB64td2qmX QxTY23OoBunqvBeFEkWTQxq2644mkBSOzaD0wIDV7ZtLMw7tHQnp3cmNc3wnkGfon5pYyLk7/lkk rs++CuXrmnQXz4roedt3CJI/aatzGZGUcsfPM/IWKD8= ) ; keytag 61147 FEDCENTER.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAatct7dMHSWZhDxjNxa9CIs7L21/36vPERrJ9iQyCEZmgvv5DCsjqLFg5AtofZ9AuTJeguf1 qN/nD0c/lQOclRL5RNgaN3z1ZyG1PpbRpv9w7jydgD6ctHQVER0Pt+lvTIHDY0p7XNGS5Et0kyzw 8CwwXwkIH2P2Y+dBrYAT5Ynsh5erYT/XJtMYAWx0iSHdi86+9w9HGGGJ63i8FGcF7jpy1DYvlTxJ o5zLqEx7zvF05s7rXV2H4C9Z5mYd1nUcOBqWytMReeb2BJMGhRPHgWduc8SNcdioqj6A0ucBYCVX F41tPqXL0gTmE2wFy9EkLedkHSHY+NaU3qI/nN3UYUM= ) ; keytag 8836 FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 8836 fedcenter.gov. MNdq0/knl+6fWFUWp+dcZyC2Kk1+a8iyjOWcxAt9qnSujXCKenYPejnkXFL/7j5vB45yfiioxwFc rHEtIQcN1fChvZkEUB8MsZ4kHrTJvXWt9x3EcbpLD03yyJIO5GdnSS9ww3emR/jQnUtcrRwJsYE1 VQYbmv3ByRZFnQYyot5YzYjMYweeVNVSryKf3xuwRTwgzyAbkobQlNh/O7r78jAS3OKshD1PL2FR MaLUkzfA6XoPcl/yItXNPOEx8ZGPN6yjPjhK3I1PVqNtphZC/F7Vytd2NBGFqliMExG4EdmQBfX4 yGut+O8jvvxXfSTzIZkaXuiwFt4CV10HDrrgKw== ) FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 26823 fedcenter.gov. cMdU7V005VKYts69jMowSd6ttOg6RNru4R7qhWyhoA90DvfB6bHNFB16cwhpRKFv8L+R1BnIvXAU IqwBMzEDxJVm5dJDD+K0utgZgjJDTxEalCQ8jKjZXmCJGV6UD5YAoJVJjk1puJ4WOsFusUvX/r0x o5hmyvA3+R5VQKrosNs= ) FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 61147 fedcenter.gov. rYFOEVlj3433HdQMFjCox+lqHX4Haj3+VlIlvmIdXuZmu+sEjBBduR0FFhmljCFAlakCIe2abQ3X NNhd8za5ZZzZowghoF00+zEpJr35R8uI/Snzh08i9sKx6OVIc0g6LuHsJo3l/ADs9Ynd/QttEApI MfIxh5bZVb6pckLPfBcliTN81HKhBfqEBWlthWYxrPk6wMWPEDKA7AR3ECA5LjwdHsFSzLBZ5u2R QFXd/UWNSN/QK29KuyKd/oPWlj0XQSzFuTI+pwaRJVtluV4YV+A7n0Jvn1LEI7zwaxksHOhBy41/ rYmL3d7oe/5eTM/tG+eqU5hIHN/ifR+rfrTWBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for FEDCENTER.GOV
	`FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAZ3ZUcPy9zW3m/u0CBaoJ3Ps6tMh6bqiED99m2QP7TTxpDCNUYwQTpWzQvMnorPqWNmRjE+u 1WqBG7ip2g9/yFvK+l2UolqxooaE6C64LwuIgshN5MdbkOA3X+3QSUiNkk8jlQXDiVgSISaOfEse rrhU/LFmI+bhvCzA7H8vp8Gb ) ; keytag 2311`
	`FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAZFzH7Etx3XtJpPmbNILPw1YM1pceJfcSoS0cESTM6FW+Jb89oQNegc3vXrEAzpkk78F/Dmo 5DiD5aYADDdl6VXxZHDtRb7Yv/WMznSTtPJrrcI/I2bhsi/7sStqEuWaRsRc7ZoF7SCVp7g+1kOv ownWOGbzjf++23n2hHcJTDAZ ) ; keytag 26823`
	`FEDCENTER.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAeDIpOYC6zX0fH24CQx/p+3XUKxpJNNrmbcFSPTHxS9TG8TNkpOrC3VO71cELfiTFUK85uIk hQsAr5UCh6PZF4T3n2L/rXBgZURuQgotO7EzNwVdE0t4rdT86c/P7+EWxQpYXaIz5a6ZjTujwniO lrtU0LJyn7fcvLDDgLx4liix ) ; keytag 32578`
	`FEDCENTER.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAdg9sd/T3Eh/HAYZ5ATuB9zcgPJ/HIO7NYF9xHfZWZLaDsepbj0639latZCGpkOQdUA9VkK2 XEgbmZqBuUbzggxbmhl8GNG6sBXXpdGXMmhTrkQ4N7Qxy0DxM2FvQWMowNoNDqYV4MK1ZRQGb2ax MEOwl+pwK/L02zApR51ySM1rWgK1hCHyNyV6lhsg1efAFvGnjpAjDhQA6jr/npQWK7UB64td2qmX QxTY23OoBunqvBeFEkWTQxq2644mkBSOzaD0wIDV7ZtLMw7tHQnp3cmNc3wnkGfon5pYyLk7/lkk rs++CuXrmnQXz4roedt3CJI/aatzGZGUcsfPM/IWKD8= ) ; keytag 61147`
	`FEDCENTER.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAatct7dMHSWZhDxjNxa9CIs7L21/36vPERrJ9iQyCEZmgvv5DCsjqLFg5AtofZ9AuTJeguf1 qN/nD0c/lQOclRL5RNgaN3z1ZyG1PpbRpv9w7jydgD6ctHQVER0Pt+lvTIHDY0p7XNGS5Et0kyzw 8CwwXwkIH2P2Y+dBrYAT5Ynsh5erYT/XJtMYAWx0iSHdi86+9w9HGGGJ63i8FGcF7jpy1DYvlTxJ o5zLqEx7zvF05s7rXV2H4C9Z5mYd1nUcOBqWytMReeb2BJMGhRPHgWduc8SNcdioqj6A0ucBYCVX F41tPqXL0gTmE2wFy9EkLedkHSHY+NaU3qI/nN3UYUM= ) ; keytag 8836`
	DNSKEY=61147/SEP is now in the chain-of-trust
	DS=61147/SHA-256 verifies DNSKEY=61147/SEP
	DNSKEY=8836/SEP is now in the chain-of-trust
	DS=8836/SHA-256 verifies DNSKEY=8836/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 8836 fedcenter.gov. MNdq0/knl+6fWFUWp+dcZyC2Kk1+a8iyjOWcxAt9qnSujXCKenYPejnkXFL/7j5vB45yfiioxwFc rHEtIQcN1fChvZkEUB8MsZ4kHrTJvXWt9x3EcbpLD03yyJIO5GdnSS9ww3emR/jQnUtcrRwJsYE1 VQYbmv3ByRZFnQYyot5YzYjMYweeVNVSryKf3xuwRTwgzyAbkobQlNh/O7r78jAS3OKshD1PL2FR MaLUkzfA6XoPcl/yItXNPOEx8ZGPN6yjPjhK3I1PVqNtphZC/F7Vytd2NBGFqliMExG4EdmQBfX4 yGut+O8jvvxXfSTzIZkaXuiwFt4CV10HDrrgKw== )`
	`FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 26823 fedcenter.gov. cMdU7V005VKYts69jMowSd6ttOg6RNru4R7qhWyhoA90DvfB6bHNFB16cwhpRKFv8L+R1BnIvXAU IqwBMzEDxJVm5dJDD+K0utgZgjJDTxEalCQ8jKjZXmCJGV6UD5YAoJVJjk1puJ4WOsFusUvX/r0x o5hmyvA3+R5VQKrosNs= )`
	`FEDCENTER.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260708051328 20260704045115 61147 fedcenter.gov. rYFOEVlj3433HdQMFjCox+lqHX4Haj3+VlIlvmIdXuZmu+sEjBBduR0FFhmljCFAlakCIe2abQ3X NNhd8za5ZZzZowghoF00+zEpJr35R8uI/Snzh08i9sKx6OVIc0g6LuHsJo3l/ADs9Ynd/QttEApI MfIxh5bZVb6pckLPfBcliTN81HKhBfqEBWlthWYxrPk6wMWPEDKA7AR3ECA5LjwdHsFSzLBZ5u2R QFXd/UWNSN/QK29KuyKd/oPWlj0XQSzFuTI+pwaRJVtluV4YV+A7n0Jvn1LEI7zwaxksHOhBy41/ rYmL3d7oe/5eTM/tG+eqU5hIHN/ifR+rfrTWBw== )`
	RRSIG=8836 and DNSKEY=8836/SEP verifies the DNSKEY RRset
	RRSIG=26823 and DNSKEY=26823 verifies the DNSKEY RRset
	RRSIG=61147 and DNSKEY=61147/SEP verifies the DNSKEY RRset
	DNSKEY=2311 is now in the chain-of-trust
	DNSKEY=26823 is now in the chain-of-trust
	DNSKEY=32578 is now in the chain-of-trust
	Query to nccns1.epa.GOV for FEDCENTER.GOV/A
	Received 231 bytes from 134.67.12.5
	;; Response received from [134.67.12.5] 231 octets ;; HEADER SECTION ;; id = 50022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN A 134.67.100.62 FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nccns1.epa.GOV is authoritative for FEDCENTER.GOV
	Found RRSIG signed by fedcenter.gov zone
	Query to dcns1.epa.GOV for FEDCENTER.GOV/SOA
	Received 284 bytes from 161.80.212.5
	;; Response received from [161.80.212.5] 284 octets ;; HEADER SECTION ;; id = 48388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN SOA ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN SOA ( rtpgm.ddi.epa.gov. dnsadmin.epa.gov. 2021125796 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FEDCENTER.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260708055713 20260704045713 26823 fedcenter.gov. QMJ1x1PIcdfX62QWa/iNodYsGXen3krtFGyJtwDy5S6S+VN48JGdqu6dTFcG3CZ1f2qT+uUddxvO Vk5Evww487+wnSHnYRvhagtImGdrGJ3faCeEBtSmOh8QQJfVr1Cqj8oXaj6s3LQJj5yXIIS3DkAi FJUJ48QvLizbGEPnR4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dcns2.epa.GOV for FEDCENTER.GOV/SOA
	Received 284 bytes from 161.80.212.15
	;; Response received from [161.80.212.15] 284 octets ;; HEADER SECTION ;; id = 29662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN SOA ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN SOA ( rtpgm.ddi.epa.gov. dnsadmin.epa.gov. 2021125796 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FEDCENTER.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260708055713 20260704045713 26823 fedcenter.gov. QMJ1x1PIcdfX62QWa/iNodYsGXen3krtFGyJtwDy5S6S+VN48JGdqu6dTFcG3CZ1f2qT+uUddxvO Vk5Evww487+wnSHnYRvhagtImGdrGJ3faCeEBtSmOh8QQJfVr1Cqj8oXaj6s3LQJj5yXIIS3DkAi FJUJ48QvLizbGEPnR4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nccns2.epa.GOV for FEDCENTER.GOV/SOA
	Received 284 bytes from 134.67.12.15
	;; Response received from [134.67.12.15] 284 octets ;; HEADER SECTION ;; id = 41958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN SOA ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN SOA ( rtpgm.ddi.epa.gov. dnsadmin.epa.gov. 2021125796 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FEDCENTER.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260708055713 20260704045713 26823 fedcenter.gov. QMJ1x1PIcdfX62QWa/iNodYsGXen3krtFGyJtwDy5S6S+VN48JGdqu6dTFcG3CZ1f2qT+uUddxvO Vk5Evww487+wnSHnYRvhagtImGdrGJ3faCeEBtSmOh8QQJfVr1Cqj8oXaj6s3LQJj5yXIIS3DkAi FJUJ48QvLizbGEPnR4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nccns1.epa.GOV for FEDCENTER.GOV/A
	FEDCENTER.GOV A RR has value 134.67.100.62
	Found 1 RRSIGs over A RRset
	`FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= )`
	RRSIG=26823 and DNSKEY=26823 verifies the A RRset

FEDCENTER.GOV

	Query to nccns2.epa.GOV for FEDCENTER.GOV/A
	Received 231 bytes from 134.67.12.15
	;; Response received from [134.67.12.15] 231 octets ;; HEADER SECTION ;; id = 32989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN A 134.67.100.62 FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nccns2.epa.GOV is authoritative for FEDCENTER.GOV
	Found RRSIG signed by fedcenter.gov zone
	Query to nccns2.epa.GOV for FEDCENTER.GOV/A
	FEDCENTER.GOV A RR has value 134.67.100.62
	Found 1 RRSIGs over A RRset
	`FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= )`
	RRSIG=26823 and DNSKEY=26823 verifies the A RRset

FEDCENTER.GOV

	Query to dcns1.epa.GOV for FEDCENTER.GOV/A
	Received 231 bytes from 161.80.212.5
	;; Response received from [161.80.212.5] 231 octets ;; HEADER SECTION ;; id = 38333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN A 134.67.100.62 FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dcns1.epa.GOV is authoritative for FEDCENTER.GOV
	Found RRSIG signed by fedcenter.gov zone
	Query to dcns1.epa.GOV for FEDCENTER.GOV/A
	FEDCENTER.GOV A RR has value 134.67.100.62
	Found 1 RRSIGs over A RRset
	`FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= )`
	RRSIG=26823 and DNSKEY=26823 verifies the A RRset

FEDCENTER.GOV

	Query to dcns2.epa.GOV for FEDCENTER.GOV/A
	Received 231 bytes from 161.80.212.15
	;; Response received from [161.80.212.15] 231 octets ;; HEADER SECTION ;; id = 10088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FEDCENTER.GOV. IN A ;; ANSWER SECTION (2 records) FEDCENTER.GOV. 3600 IN A 134.67.100.62 FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dcns2.epa.GOV is authoritative for FEDCENTER.GOV
	Found RRSIG signed by fedcenter.gov zone
	Query to dcns2.epa.GOV for FEDCENTER.GOV/A
	FEDCENTER.GOV A RR has value 134.67.100.62
	Found 1 RRSIGs over A RRset
	`FEDCENTER.GOV. 3600 IN RRSIG ( A 8 2 3600 20260708053300 20260704045713 26823 fedcenter.gov. GHWT6YsazmP1Yj0QT+0LbrgfW/Pq6GaIROf7hq0L1jGrvg2I6UufEQ2+reqpWCcbQHNubp0Bozs4 gRO3DP4ntY8CyDJcbQWrSmP8KRylbFNjyc4qnzZ5ZR9qdTGPcUYgFKJlujBKmcVMEsmn0m6G66ju 3vdAr6eTL6UWkSF6P3A= )`
	RRSIG=26823 and DNSKEY=26823 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FEDCENTER.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: