DNSSEC Debugger - FHFA.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:26:50 UTC

Analyzing DNSSEC problems for FHFA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 11065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to i.root-servers.net for FHFA.GOV/A
	Received 618 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 618 octets ;; HEADER SECTION ;; id = 23813 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 38810 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 370 octets ;; HEADER SECTION ;; id = 41361 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 55243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for FHFA.GOV/A
	Received 289 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 289 octets ;; HEADER SECTION ;; id = 26995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FHFA.GOV. 10800 IN NS ns01.FHFA.GOV. FHFA.GOV. 10800 IN NS ns02.FHFA.GOV. FHFA.GOV. 10800 IN NS ns03.FHFA.GOV. FHFA.GOV. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) FHFA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142650 20260420122650 35496 gov. 6t46m+Q4rwyN/Lq1t/7mH1/fWgqfr1OF28v94Z+oI4dR8/Pf2tKhqHnfEdSV+RW4RUHZsz4jQFyd w4yZzjfJ7w== ) ;; ADDITIONAL SECTION (4 records) ns01.FHFA.GOV. 3600 IN A 12.183.70.4 ns02.FHFA.GOV. 3600 IN A 12.183.70.5 ns03.FHFA.GOV. 3600 IN A 12.183.69.4 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for FHFA.GOV/DNSKEY
	Received 289 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 289 octets ;; HEADER SECTION ;; id = 15532 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 4 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FHFA.GOV. 10800 IN NS ns01.FHFA.GOV. FHFA.GOV. 10800 IN NS ns02.FHFA.GOV. FHFA.GOV. 10800 IN NS ns03.FHFA.GOV. FHFA.GOV. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) FHFA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142650 20260420122650 35496 gov. 0uVNquf8qRP8YtB56PXWSw91EUb/VqMKcIGNsBSQ1zwxxRj1uxVFasnrmlK6Xdj41/vYE3EKA87C VtJah+cz3A== ) ;; ADDITIONAL SECTION (4 records) ns01.FHFA.GOV. 3600 IN A 12.183.70.4 ns02.FHFA.GOV. 3600 IN A 12.183.70.5 ns03.FHFA.GOV. 3600 IN A 12.183.69.4 ;; { "EDNS-VERSION": 0 }
	Found child zone FHFA.GOV

FHFA.GOV

	Checking DS between GOV and FHFA.GOV
	Query to c.ns.gov for FHFA.GOV/DS
	Received 184 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 184 octets ;; HEADER SECTION ;; id = 10804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN DS ;; ANSWER SECTION (2 records) FHFA.GOV. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 ) FHFA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142650 20260420122650 35496 gov. 9EqE65pBDBk5CO1HVr6DJZpPGDaXtpVafH5N2smmSni6xddfrpMWHHJM62O1JwIQTbKOXSj0+6ON bSK2kixwSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for FHFA.GOV in the GOV zone
	DS=10999/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FHFA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422142650 20260420122650 35496 gov. 9EqE65pBDBk5CO1HVr6DJZpPGDaXtpVafH5N2smmSni6xddfrpMWHHJM62O1JwIQTbKOXSj0+6ON bSK2kixwSQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=10999/SHA-256 is now in the chain-of-trust
	`FHFA.GOV. 3600 IN DS ( 10999 8 2 10b17aa84e5d679bbd07cc9404f3e4386774df9052328565b076e88b45530761 )`
	Query to ns02.FHFA.GOV for FHFA.GOV/DNSKEY
	Received 1189 bytes from 12.183.70.5
	;; Response received from [12.183.70.5] 1189 octets ;; HEADER SECTION ;; id = 36355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) fhfa.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbJnhExQY2pE5NXKowap0tvllaGlqU3AhHaZ17s1BCiqdVnauAUF5V1IBQwvPFVs12Uoydkf A77Sr4EHJls1pomc93uKYy0r+n6ZmI5uizbjtsSTdbabtgkYniE4nsXRgiFCTPsxeXr5pG+5dxgs DHxtkCoWyHpczDenM+i/RgVet/bvsyM2Wr+IkYXrUs8ragxxf50t5Ih1aAXlGT1raFSpCN0M/9wZ iYVgbaIZfPJ4qHylAHKRmZGPb83r/nopGfrcflJfgvBc3ZZJtwfYqQl07uB7NERizF2U9h9nUglT 3DhRBLHGwKhH/qxYSZJCs7n8ejKmI5kgHCn+N9sD3Jc= ) ; keytag 34713 fhfa.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAesDy2U4vM0sS0q4FktIkHKs238ZJiGadTl0jtOJHJieXPLdx6h91WdadsR0ewL6cuGkx4uD +ez+VzBuL/LSayEY7mNhKsuBik1vx6/K/kW9D9/UhD20R9nCE0CytyvZdHRImQQnrm3oKkTdG4/9 ys2mRYO/wrnb/TEfZ5YrGT+HSTirmChGk6lVKWZSWZFic5ToBERqDhzXC/lj7NEoqIgjbAuiVJnX cQw1DWXbzEvMUOGUciBJ/wFdlrkKdAqupXs0dmPVcEwteG3sRTcAB8thcjQZyQKez112w+9ajUE8 vxGUALslspXqMdLTedGv34Zz2V/WNVSqM4aDOpy/B1U= ) ; keytag 10999 fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260520060301 20260420060301 10999 fhfa.gov. rWbRuhiHXiT10SkfFVZk2KHmJqimvnPwrcTWWPVnIEzH1dS5ldjWyNxwMYR8XROoLsYwN8yHcHY3 W1FoqDgtFXYAnbKAYFNC1iz0mYZUId0o0PLaweN7pJsgrCxw4A9K+v8jVXr4X7ss7SoEmQoVJ5qB LM/puxEO/i7NDS+5YmAVbPqDbecMDZ51LnDYwQ5GGT3Q3XWIQ9B+QwhAFahLW0f+MhtYSCQXIJ0A On+04bFWUODEf53XIjp+oPynuZYv0wCKWGjAbtq4fvm3qAqLKglTo+n0GKLLLYe9QxxTeGeCxXBr mZarSkX4HVesoAuG/7BYh0wx8TlYu/IIZvuLog== ) fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. YlGf7cewd5JqT/003bR7olu2U8vtk1bknRI8KH055PqGRD7/OaaRElSW2pAkk2m1WdcgkM1VTqcC iy42Ch4t9YDSmQXcX5KRORqhFqBH3i+whLmPCIZv6E41cLeUq15Onp/9zunDt1cH7OPo+yYwLhmo LEgdfYmu2EkcZztJqdYnbseGlrn00xUeSlrTCxc5tu1Z0SEbs2FOinP2LJA1zKK14BON9fQK/C+o NdKs9jUO9yqAr0qkCRvCHKYur1L2e+FxCRholEb9xYvZjIvsOERbTLkjIuUPPbySC2mAAsjwA0YZ h0vDX2WDadQbSTBkdtSjTKzmRHNHmbQWCvpKhw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for FHFA.GOV
	`fhfa.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbJnhExQY2pE5NXKowap0tvllaGlqU3AhHaZ17s1BCiqdVnauAUF5V1IBQwvPFVs12Uoydkf A77Sr4EHJls1pomc93uKYy0r+n6ZmI5uizbjtsSTdbabtgkYniE4nsXRgiFCTPsxeXr5pG+5dxgs DHxtkCoWyHpczDenM+i/RgVet/bvsyM2Wr+IkYXrUs8ragxxf50t5Ih1aAXlGT1raFSpCN0M/9wZ iYVgbaIZfPJ4qHylAHKRmZGPb83r/nopGfrcflJfgvBc3ZZJtwfYqQl07uB7NERizF2U9h9nUglT 3DhRBLHGwKhH/qxYSZJCs7n8ejKmI5kgHCn+N9sD3Jc= ) ; keytag 34713`
	`fhfa.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAesDy2U4vM0sS0q4FktIkHKs238ZJiGadTl0jtOJHJieXPLdx6h91WdadsR0ewL6cuGkx4uD +ez+VzBuL/LSayEY7mNhKsuBik1vx6/K/kW9D9/UhD20R9nCE0CytyvZdHRImQQnrm3oKkTdG4/9 ys2mRYO/wrnb/TEfZ5YrGT+HSTirmChGk6lVKWZSWZFic5ToBERqDhzXC/lj7NEoqIgjbAuiVJnX cQw1DWXbzEvMUOGUciBJ/wFdlrkKdAqupXs0dmPVcEwteG3sRTcAB8thcjQZyQKez112w+9ajUE8 vxGUALslspXqMdLTedGv34Zz2V/WNVSqM4aDOpy/B1U= ) ; keytag 10999`
	DNSKEY=10999/SEP is now in the chain-of-trust
	DS=10999/SHA-256 verifies DNSKEY=10999/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260520060301 20260420060301 10999 fhfa.gov. rWbRuhiHXiT10SkfFVZk2KHmJqimvnPwrcTWWPVnIEzH1dS5ldjWyNxwMYR8XROoLsYwN8yHcHY3 W1FoqDgtFXYAnbKAYFNC1iz0mYZUId0o0PLaweN7pJsgrCxw4A9K+v8jVXr4X7ss7SoEmQoVJ5qB LM/puxEO/i7NDS+5YmAVbPqDbecMDZ51LnDYwQ5GGT3Q3XWIQ9B+QwhAFahLW0f+MhtYSCQXIJ0A On+04bFWUODEf53XIjp+oPynuZYv0wCKWGjAbtq4fvm3qAqLKglTo+n0GKLLLYe9QxxTeGeCxXBr mZarSkX4HVesoAuG/7BYh0wx8TlYu/IIZvuLog== )`
	`fhfa.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. YlGf7cewd5JqT/003bR7olu2U8vtk1bknRI8KH055PqGRD7/OaaRElSW2pAkk2m1WdcgkM1VTqcC iy42Ch4t9YDSmQXcX5KRORqhFqBH3i+whLmPCIZv6E41cLeUq15Onp/9zunDt1cH7OPo+yYwLhmo LEgdfYmu2EkcZztJqdYnbseGlrn00xUeSlrTCxc5tu1Z0SEbs2FOinP2LJA1zKK14BON9fQK/C+o NdKs9jUO9yqAr0qkCRvCHKYur1L2e+FxCRholEb9xYvZjIvsOERbTLkjIuUPPbySC2mAAsjwA0YZ h0vDX2WDadQbSTBkdtSjTKzmRHNHmbQWCvpKhw== )`
	RRSIG=10999 and DNSKEY=10999/SEP verifies the DNSKEY RRset
	RRSIG=34713 and DNSKEY=34713 verifies the DNSKEY RRset
	DNSKEY=34713 is now in the chain-of-trust
	Query to ns03.FHFA.GOV for FHFA.GOV/A
	Received 1089 bytes from 12.183.69.4
	;; Response received from [12.183.69.4] 1089 octets ;; HEADER SECTION ;; id = 48682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. bOQPXBM0opzpZfOguRxDsOH15caYjShpqMhYIJheOqA4gA/iob1dCEkPDDQogcJkSYXSsVAULGJB /CE10WrQWhXK7qE2pP3XXoSKQECAPN4dL9Ha8/xQFY/3+etuk0X8mb2iBg/bWhJ96bv7A7VYAQC8 2CZDd2FnRYZGn8E8N+X5rchiB7/gJQc8P9EZzld3X4hlLYwiMUEmnKmHLVseUL17UWXHAv7e53jk manU8fZcvqB7TilccNMZMC5gZkJhptL14pvaeDdT7dkAs+CX97Ud9kY05Jl3U++NTyyL0efUv5JT ElOhdr7bDikT8VOriW+NWPMH/L4d6YXT/TmE2Q== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20260520060301 20260420060301 34713 fhfa.gov. e7SmxwPQ8NU/0dqUVB0neL7ejjUg9KlVlyBe5+qnfqE1Vn4DxukV2GXGdTK/bhTYxt6d4R55ZV/l iZJpQdzbA5V0f7iAn/Af7lyCVXrfixNLuar2pmrHKFjNYF+uwOScGfYtP6Y38foWsBPuUBpefFoX YYOIYnqKWYOmlbj8ZbqTlI5hSnRzxqT1SwYlkK5/D+PR0iwDTdn51vi+YwRdJ+X4BIamPSkRU320 m+DhOj/1VdMotnzm/p2rJm7kDaxaQ/prwkHlbStYMWc0aoPNRJ4ulNYbOmUBYWr9oj7gURNZQOfe XvpP+JdazWrD0v1IyMeA49Hl/2mw4mdvTUau9A== ) ;; { "EDNS-VERSION": 0 }
	ns03.FHFA.GOV is authoritative for FHFA.GOV
	Found RRSIG signed by fhfa.gov zone
	Query to ns04.fhfa.gov for FHFA.GOV/SOA
	Timeout querying ns04.fhfa.gov/35.171.11.110 for FHFA.GOV/SOA
	All Queries to ns04.fhfa.gov for FHFA.GOV/SOA timed out or failed
	Query to ns02.fhfa.gov for FHFA.GOV/SOA
	Received 1118 bytes from 12.183.70.5
	;; Response received from [12.183.70.5] 1118 octets ;; HEADER SECTION ;; id = 21041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN SOA ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2026042000 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) fhfa.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. EkFi3AkZZJEKrCZEH1Y3Fki97lu95M9sE2GAP2aC04fDX5cWMhluVosN3KCvzHq+VkU6Lao+xnCU R51vqR/lYJ/1N7EaYC+BGilrsgzfI9ZPms/GNc+OFeezGx+0KW8/wj67kRRlwZ6ArH+275o4CKeE NY7vEL3bODgqgmSw+LUYnpXGZmlJiyigldYmvT0ExnYYshi+UohuNCu6gpC24GQ0fpp7RpQfLIbt rq82etzosykIVWbTwaqpHKJImU0sW6umsJZMiNfqnz2Jjn6TCpn3cnxiEzBonXerue7frAMPnOCv PBdEjWHHDshcpHf4vqfB7rNkQ8owBZks8eN0Eg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. bOQPXBM0opzpZfOguRxDsOH15caYjShpqMhYIJheOqA4gA/iob1dCEkPDDQogcJkSYXSsVAULGJB /CE10WrQWhXK7qE2pP3XXoSKQECAPN4dL9Ha8/xQFY/3+etuk0X8mb2iBg/bWhJ96bv7A7VYAQC8 2CZDd2FnRYZGn8E8N+X5rchiB7/gJQc8P9EZzld3X4hlLYwiMUEmnKmHLVseUL17UWXHAv7e53jk manU8fZcvqB7TilccNMZMC5gZkJhptL14pvaeDdT7dkAs+CX97Ud9kY05Jl3U++NTyyL0efUv5JT ElOhdr7bDikT8VOriW+NWPMH/L4d6YXT/TmE2Q== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20260520060301 20260420060301 34713 fhfa.gov. e7SmxwPQ8NU/0dqUVB0neL7ejjUg9KlVlyBe5+qnfqE1Vn4DxukV2GXGdTK/bhTYxt6d4R55ZV/l iZJpQdzbA5V0f7iAn/Af7lyCVXrfixNLuar2pmrHKFjNYF+uwOScGfYtP6Y38foWsBPuUBpefFoX YYOIYnqKWYOmlbj8ZbqTlI5hSnRzxqT1SwYlkK5/D+PR0iwDTdn51vi+YwRdJ+X4BIamPSkRU320 m+DhOj/1VdMotnzm/p2rJm7kDaxaQ/prwkHlbStYMWc0aoPNRJ4ulNYbOmUBYWr9oj7gURNZQOfe XvpP+JdazWrD0v1IyMeA49Hl/2mw4mdvTUau9A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns01.fhfa.gov for FHFA.GOV/SOA
	Received 1118 bytes from 12.183.70.4
	;; Response received from [12.183.70.4] 1118 octets ;; HEADER SECTION ;; id = 22346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN SOA ;; ANSWER SECTION (2 records) fhfa.gov. 3600 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2026042000 ;serial 1800 ;refresh 600 ;retry 604800 ;expire 600 ;minimum ) fhfa.gov. 3600 IN RRSIG ( SOA 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. EkFi3AkZZJEKrCZEH1Y3Fki97lu95M9sE2GAP2aC04fDX5cWMhluVosN3KCvzHq+VkU6Lao+xnCU R51vqR/lYJ/1N7EaYC+BGilrsgzfI9ZPms/GNc+OFeezGx+0KW8/wj67kRRlwZ6ArH+275o4CKeE NY7vEL3bODgqgmSw+LUYnpXGZmlJiyigldYmvT0ExnYYshi+UohuNCu6gpC24GQ0fpp7RpQfLIbt rq82etzosykIVWbTwaqpHKJImU0sW6umsJZMiNfqnz2Jjn6TCpn3cnxiEzBonXerue7frAMPnOCv PBdEjWHHDshcpHf4vqfB7rNkQ8owBZks8eN0Eg== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. bOQPXBM0opzpZfOguRxDsOH15caYjShpqMhYIJheOqA4gA/iob1dCEkPDDQogcJkSYXSsVAULGJB /CE10WrQWhXK7qE2pP3XXoSKQECAPN4dL9Ha8/xQFY/3+etuk0X8mb2iBg/bWhJ96bv7A7VYAQC8 2CZDd2FnRYZGn8E8N+X5rchiB7/gJQc8P9EZzld3X4hlLYwiMUEmnKmHLVseUL17UWXHAv7e53jk manU8fZcvqB7TilccNMZMC5gZkJhptL14pvaeDdT7dkAs+CX97Ud9kY05Jl3U++NTyyL0efUv5JT ElOhdr7bDikT8VOriW+NWPMH/L4d6YXT/TmE2Q== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20260520060301 20260420060301 34713 fhfa.gov. e7SmxwPQ8NU/0dqUVB0neL7ejjUg9KlVlyBe5+qnfqE1Vn4DxukV2GXGdTK/bhTYxt6d4R55ZV/l iZJpQdzbA5V0f7iAn/Af7lyCVXrfixNLuar2pmrHKFjNYF+uwOScGfYtP6Y38foWsBPuUBpefFoX YYOIYnqKWYOmlbj8ZbqTlI5hSnRzxqT1SwYlkK5/D+PR0iwDTdn51vi+YwRdJ+X4BIamPSkRU320 m+DhOj/1VdMotnzm/p2rJm7kDaxaQ/prwkHlbStYMWc0aoPNRJ4ulNYbOmUBYWr9oj7gURNZQOfe XvpP+JdazWrD0v1IyMeA49Hl/2mw4mdvTUau9A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns03.FHFA.GOV for FHFA.GOV/A
	FHFA.GOV A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

FHFA.GOV

	Query to ns02.fhfa.gov for FHFA.GOV/A
	Received 1089 bytes from 12.183.70.5
	;; Response received from [12.183.70.5] 1089 octets ;; HEADER SECTION ;; id = 29623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. bOQPXBM0opzpZfOguRxDsOH15caYjShpqMhYIJheOqA4gA/iob1dCEkPDDQogcJkSYXSsVAULGJB /CE10WrQWhXK7qE2pP3XXoSKQECAPN4dL9Ha8/xQFY/3+etuk0X8mb2iBg/bWhJ96bv7A7VYAQC8 2CZDd2FnRYZGn8E8N+X5rchiB7/gJQc8P9EZzld3X4hlLYwiMUEmnKmHLVseUL17UWXHAv7e53jk manU8fZcvqB7TilccNMZMC5gZkJhptL14pvaeDdT7dkAs+CX97Ud9kY05Jl3U++NTyyL0efUv5JT ElOhdr7bDikT8VOriW+NWPMH/L4d6YXT/TmE2Q== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20260520060301 20260420060301 34713 fhfa.gov. e7SmxwPQ8NU/0dqUVB0neL7ejjUg9KlVlyBe5+qnfqE1Vn4DxukV2GXGdTK/bhTYxt6d4R55ZV/l iZJpQdzbA5V0f7iAn/Af7lyCVXrfixNLuar2pmrHKFjNYF+uwOScGfYtP6Y38foWsBPuUBpefFoX YYOIYnqKWYOmlbj8ZbqTlI5hSnRzxqT1SwYlkK5/D+PR0iwDTdn51vi+YwRdJ+X4BIamPSkRU320 m+DhOj/1VdMotnzm/p2rJm7kDaxaQ/prwkHlbStYMWc0aoPNRJ4ulNYbOmUBYWr9oj7gURNZQOfe XvpP+JdazWrD0v1IyMeA49Hl/2mw4mdvTUau9A== ) ;; { "EDNS-VERSION": 0 }
	ns02.fhfa.gov is authoritative for FHFA.GOV
	Found RRSIG signed by fhfa.gov zone
	Query to ns02.fhfa.gov for FHFA.GOV/A
	FHFA.GOV A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

FHFA.GOV

	Query to ns01.fhfa.gov for FHFA.GOV/A
	Received 1089 bytes from 12.183.70.4
	;; Response received from [12.183.70.4] 1089 octets ;; HEADER SECTION ;; id = 10818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FHFA.GOV. IN A ;; ANSWER SECTION (2 records) fhfa.gov. 60 IN A 54.92.167.213 fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== ) ;; AUTHORITY SECTION (5 records) fhfa.gov. 3600 IN NS ns03.fhfa.gov. fhfa.gov. 3600 IN NS ns04.fhfa.gov. fhfa.gov. 3600 IN NS ns01.fhfa.gov. fhfa.gov. 3600 IN NS ns02.fhfa.gov. fhfa.gov. 3600 IN RRSIG ( NS 8 2 3600 20260520060301 20260420060301 34713 fhfa.gov. bOQPXBM0opzpZfOguRxDsOH15caYjShpqMhYIJheOqA4gA/iob1dCEkPDDQogcJkSYXSsVAULGJB /CE10WrQWhXK7qE2pP3XXoSKQECAPN4dL9Ha8/xQFY/3+etuk0X8mb2iBg/bWhJ96bv7A7VYAQC8 2CZDd2FnRYZGn8E8N+X5rchiB7/gJQc8P9EZzld3X4hlLYwiMUEmnKmHLVseUL17UWXHAv7e53jk manU8fZcvqB7TilccNMZMC5gZkJhptL14pvaeDdT7dkAs+CX97Ud9kY05Jl3U++NTyyL0efUv5JT ElOhdr7bDikT8VOriW+NWPMH/L4d6YXT/TmE2Q== ) ;; ADDITIONAL SECTION (6 records) ns01.fhfa.gov. 3600 IN A 12.183.70.4 ns02.fhfa.gov. 3600 IN A 12.183.70.5 ns03.fhfa.gov. 3600 IN A 12.183.69.4 ns04.fhfa.gov. 3600 IN A 35.171.11.110 ns01.fhfa.gov. 3600 IN RRSIG ( A 8 3 3600 20260520060301 20260420060301 34713 fhfa.gov. e7SmxwPQ8NU/0dqUVB0neL7ejjUg9KlVlyBe5+qnfqE1Vn4DxukV2GXGdTK/bhTYxt6d4R55ZV/l iZJpQdzbA5V0f7iAn/Af7lyCVXrfixNLuar2pmrHKFjNYF+uwOScGfYtP6Y38foWsBPuUBpefFoX YYOIYnqKWYOmlbj8ZbqTlI5hSnRzxqT1SwYlkK5/D+PR0iwDTdn51vi+YwRdJ+X4BIamPSkRU320 m+DhOj/1VdMotnzm/p2rJm7kDaxaQ/prwkHlbStYMWc0aoPNRJ4ulNYbOmUBYWr9oj7gURNZQOfe XvpP+JdazWrD0v1IyMeA49Hl/2mw4mdvTUau9A== ) ;; { "EDNS-VERSION": 0 }
	ns01.fhfa.gov is authoritative for FHFA.GOV
	Found RRSIG signed by fhfa.gov zone
	Query to ns01.fhfa.gov for FHFA.GOV/A
	FHFA.GOV A RR has value 54.92.167.213
	Found 1 RRSIGs over A RRset
	`fhfa.gov. 60 IN RRSIG ( A 8 2 60 20260520060301 20260420060301 34713 fhfa.gov. O0JZbbl3nCIZtAhbVsK4mFm/B0WT6m0GUTNuioj3IYMZkS0UEFlbXmN7tWXB5KFd5inLOhhVcj4r a9GjLeMP6oSx7ySgPDmLe/4iC5S8fuzmkDNtjmyr00SrAz6MkZ0yepxGnXCEq3meCzqJtZ64tybC 7HL2AEcBYjqJpzZOWJNJ5CNQRT/OwVOrYpNLtyRdfA1/rhZWl4wzuoLPR6vD85dxEsUb557zBSyt WEwN2hJvsYwFGpdRK95O512iwWkUiLcVvc3EKoumYcNAZmxafQwYcAf45t24l6561vLYgiJ6TkVu ax9Uqyai0sxt7manQq9d4mIh7xaJEvuOABUqfA== )`
	RRSIG=34713 and DNSKEY=34713 verifies the A RRset

FHFA.GOV

No response from FHFA.GOV nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FHFA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: