DNSSEC Analyzer - FINCEN.GOV

Domain Name:

Time: 2020-10-26 13:19:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for FINCEN.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 54381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to m.root-servers.net for FINCEN.GOV/A
	Received 668 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (668 bytes) ;; HEADER SECTION ;; id = 41173 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (661 bytes) ;; HEADER SECTION ;; id = 36886 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 37382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 38876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for FINCEN.GOV/A
	Received 451 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (451 bytes) ;; HEADER SECTION ;; id = 38765 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FINCEN.GOV. 86400 IN NS ns3.treasury.GOV. FINCEN.GOV. 86400 IN NS ns1.treasury.GOV. FINCEN.GOV. 3600 IN DS ( 13690 8 2 8dc05e06c8206a191e3b1d221beaf753f2743e09b2e03c8835df67f476235486 ) FINCEN.GOV. 3600 IN DS 13690 8 1 119037f6385f6606fc668b2c2153007c240b19a6 FINCEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. 14QKJFyMqXxwA/cAUcYYWVjo9/7WaEAhGkcKVfs7v2VuTHKaEonN0eDSHEZ5j0vjR2rTIcP3Uovj R0ry/GQL5MPCzqkPR0N9w+dX8KjgF5cQyATHIjAi0KtJKemEDZUOGtktL7aDFSaO5Zrg6Q7nNm9s Vs6Dq/I4t+NdCKVCh25ikSx6YLRB5jk8Q9IoRy4DpmeWCGfRt+nIf/HjrXQ9jg== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FINCEN.GOV/DNSKEY
	Received 451 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (451 bytes) ;; HEADER SECTION ;; id = 12456 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FINCEN.GOV. 86400 IN NS ns3.treasury.GOV. FINCEN.GOV. 86400 IN NS ns1.treasury.GOV. FINCEN.GOV. 3600 IN DS ( 13690 8 2 8dc05e06c8206a191e3b1d221beaf753f2743e09b2e03c8835df67f476235486 ) FINCEN.GOV. 3600 IN DS 13690 8 1 119037f6385f6606fc668b2c2153007c240b19a6 FINCEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. 14QKJFyMqXxwA/cAUcYYWVjo9/7WaEAhGkcKVfs7v2VuTHKaEonN0eDSHEZ5j0vjR2rTIcP3Uovj R0ry/GQL5MPCzqkPR0N9w+dX8KjgF5cQyATHIjAi0KtJKemEDZUOGtktL7aDFSaO5Zrg6Q7nNm9s Vs6Dq/I4t+NdCKVCh25ikSx6YLRB5jk8Q9IoRy4DpmeWCGfRt+nIf/HjrXQ9jg== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FINCEN.GOV

FINCEN.GOV

	Checking DS between GOV and FINCEN.GOV
	Query to a.gov-servers.net for FINCEN.GOV/DS
	Received 318 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (318 bytes) ;; HEADER SECTION ;; id = 59230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN DS ;; ANSWER SECTION (3 records) FINCEN.GOV. 3600 IN DS ( 13690 8 2 8dc05e06c8206a191e3b1d221beaf753f2743e09b2e03c8835df67f476235486 ) FINCEN.GOV. 3600 IN DS 13690 8 1 119037f6385f6606fc668b2c2153007c240b19a6 FINCEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. 14QKJFyMqXxwA/cAUcYYWVjo9/7WaEAhGkcKVfs7v2VuTHKaEonN0eDSHEZ5j0vjR2rTIcP3Uovj R0ry/GQL5MPCzqkPR0N9w+dX8KjgF5cQyATHIjAi0KtJKemEDZUOGtktL7aDFSaO5Zrg6Q7nNm9s Vs6Dq/I4t+NdCKVCh25ikSx6YLRB5jk8Q9IoRy4DpmeWCGfRt+nIf/HjrXQ9jg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for FINCEN.GOV in the GOV zone
	DS=13690/SHA-256 has algorithm RSASHA256
	DS=13690/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FINCEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. 14QKJFyMqXxwA/cAUcYYWVjo9/7WaEAhGkcKVfs7v2VuTHKaEonN0eDSHEZ5j0vjR2rTIcP3Uovj R0ry/GQL5MPCzqkPR0N9w+dX8KjgF5cQyATHIjAi0KtJKemEDZUOGtktL7aDFSaO5Zrg6Q7nNm9s Vs6Dq/I4t+NdCKVCh25ikSx6YLRB5jk8Q9IoRy4DpmeWCGfRt+nIf/HjrXQ9jg== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=13690/SHA-256 is now in the chain-of-trust
	`FINCEN.GOV. 3600 IN DS ( 13690 8 2 8dc05e06c8206a191e3b1d221beaf753f2743e09b2e03c8835df67f476235486 )`
	`FINCEN.GOV. 3600 IN DS 13690 8 1 119037f6385f6606fc668b2c2153007c240b19a6`
	Query to ns1.treasury.GOV for FINCEN.GOV/DNSKEY
	Received 675 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (675 bytes) ;; HEADER SECTION ;; id = 2715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) FINCEN.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAZCooLpUeN/zxq0KQ1bF/oNhXlNPk153XlNZ/H5TRk0dVeIYKsd1e4BF2pFqUySIKV6R2VUR HFNXemceEpM2fNy19cUNssFg4tQ4RP08zAh7T/eWjNehYSpavkNecYRQWt862sNiFSUHFYilWZRs Ow3sq8oLDqZykVV7GUVijac9 ) ; Key ID = 54168 FINCEN.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAck03mb81VSUs0BKe54G4gOqhE7u1OblCTctRyhvkmOTyxOtysiiDnJe/VHUCHD3m4Jyry06 lE6SOsEt5xMiKgapdOC0eRolPVPwZGg8uacRkIxAaWebwc1xHFVjbYORDS8B7LI6xjfCjIuztZbW PGPGHR1v9MJJNT0FqKdJA9tZ ) ; Key ID = 13690 FINCEN.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101171335 20201025171335 54168 fincen.gov. YznUXnNgmzYKTv5LOPZmbE8UsTcIVwkwq6Ni3+Xr7Wkq8PSTwAWZAOjI9FirBTtgv5XZvPJ1XL6t 3rlsZDOBrXS5o0cDzgIqv2CY/ohcF8GFYp/MUe/oYb1rry8a9Vpbw4PcivU88GMu+qAnbaUYDcft OkKPJx/YFkL6S3YvvNY= ) FINCEN.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101171335 20201025171335 13690 fincen.gov. CwiQfLeq2s9pwEDuKFBayZ+FcUG4IsrwMG45GcvT33UyOaTQHiwYz5wdJ/Bp+HG+Vd5vnW/Q8Nzx sJAK9dIUrJaU6sjEx96Vcum8/lj6dpZ1+pSWoO2+It5oz4zMOuT/swKWGabPY4azjryq01+IFiSG Or/A+CNBJx+yRrFBXXo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for FINCEN.GOV
	`FINCEN.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAZCooLpUeN/zxq0KQ1bF/oNhXlNPk153XlNZ/H5TRk0dVeIYKsd1e4BF2pFqUySIKV6R2VUR HFNXemceEpM2fNy19cUNssFg4tQ4RP08zAh7T/eWjNehYSpavkNecYRQWt862sNiFSUHFYilWZRs Ow3sq8oLDqZykVV7GUVijac9 ) ; Key ID = 54168`
	`FINCEN.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAck03mb81VSUs0BKe54G4gOqhE7u1OblCTctRyhvkmOTyxOtysiiDnJe/VHUCHD3m4Jyry06 lE6SOsEt5xMiKgapdOC0eRolPVPwZGg8uacRkIxAaWebwc1xHFVjbYORDS8B7LI6xjfCjIuztZbW PGPGHR1v9MJJNT0FqKdJA9tZ ) ; Key ID = 13690`
	DNSKEY=13690/SEP is now in the chain-of-trust
	DS=13690/SHA-256 verifies DNSKEY=13690/SEP
	DS=13690/SHA-1 verifies DNSKEY=13690/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`FINCEN.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101171335 20201025171335 54168 fincen.gov. YznUXnNgmzYKTv5LOPZmbE8UsTcIVwkwq6Ni3+Xr7Wkq8PSTwAWZAOjI9FirBTtgv5XZvPJ1XL6t 3rlsZDOBrXS5o0cDzgIqv2CY/ohcF8GFYp/MUe/oYb1rry8a9Vpbw4PcivU88GMu+qAnbaUYDcft OkKPJx/YFkL6S3YvvNY= )`
	`FINCEN.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201101171335 20201025171335 13690 fincen.gov. CwiQfLeq2s9pwEDuKFBayZ+FcUG4IsrwMG45GcvT33UyOaTQHiwYz5wdJ/Bp+HG+Vd5vnW/Q8Nzx sJAK9dIUrJaU6sjEx96Vcum8/lj6dpZ1+pSWoO2+It5oz4zMOuT/swKWGabPY4azjryq01+IFiSG Or/A+CNBJx+yRrFBXXo= )`
	RRSIG=54168 and DNSKEY=54168 verifies the DNSKEY RRset
	RRSIG=13690 and DNSKEY=13690/SEP verifies the DNSKEY RRset
	DNSKEY=54168 is now in the chain-of-trust
	Query to ns1.treasury.GOV for FINCEN.GOV/A
	Received 1216 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1216 bytes) ;; HEADER SECTION ;; id = 51059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN A ;; ANSWER SECTION (2 records) FINCEN.GOV. 18000 IN A 166.123.218.116 FINCEN.GOV. 18000 IN RRSIG ( A 8 2 18000 20201101165440 20201025165440 54168 fincen.gov. QALPWkcBxN10tibl7bus5lbGVGeyz6Y7aMW/D4tzmbLaT3jdORGrkh6zwWqhonke3BL9vHixD+DO vKQQHc552w5Ss3oQ9zvGeWcP4/8wzrWxPokZW+6VMRoSlozXl1xM3fnSYmmoICfpKmy+alcFVoU0 uzrtlm/OSF+PH4BF/EA= ) ;; AUTHORITY SECTION (3 records) FINCEN.GOV. 18000 IN NS ns3.treasury.GOV. FINCEN.GOV. 18000 IN NS ns1.treasury.GOV. FINCEN.GOV. 18000 IN RRSIG ( NS 8 2 18000 20201101164820 20201025164820 54168 fincen.gov. PbZZiJARK/mzOkskJ5ug1izI5GcK+9ngwtroKjJoE2+2AFnYd/xrQZGX7JRAY8ocF3MVAP5axV6K IUkTEPdE+EzqUEc8sIAuQNoBzxHCnePjPgIqL4RbcZA8LimOHEaUkFYj++iiRmdVwga2NZJUpsN0 fZSl4488JrnVpqBGzWY= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101171529 20201025171529 13 treasury.gov. Xl7BHN20EigUTYVa7ejAiCNUvLIWy3g8RMIn3KYOg7X1KCjNiyO0ZG1RxTiBkqPo03SxrAoh1Rw3 bIcmcCac1Xo6NKdx3UAMdOqZXHqkAbjwBeMIugl2wnIsEjy1lf8XDdGdCf4HwQgCFneYZGGgkctW JRxoW7qjXJQMwimtnfY= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101171650 20201025171650 13 treasury.gov. Lq3p3FfOT0j+keoL66VjYRy8dYoT7N9sHTIyi7kX3cExBNm02K0ahkvGeowuPE5J7SyIHsLjdR86 6QFbYgSVqJNAx5WCg+zw51a7IuRu1mHJiR0kSmcmHDPH9TFfKl6ORwRl9i7z5r6izbivfJQkRIAe I6bKBWwBR2B5G8EyThM= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101172845 20201025172845 13 treasury.gov. O6JBV9CEwLgF+fvTaI5gDp8Gh1sixiweJO0efsWngYApc3yoVfhcZirApdPCovbSTJaTqAyQJADO YxBEAz7F357jv+ctM727uad9ZPKRM/IAcL0WwX1Qfkz0HAj6V3a/8NLihsKK0KUa+TxfMc+1KirX pPa4QnPFuN3aCGaFOkk= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172033 20201025172033 13 treasury.gov. JZyzzeOopppC/l+kR5UadyP2FUVDVYhRscSrOWMXJyYRB+qD3E8n+ojYnf1IQHaAwBhV8DlZZzxi iBFgK5ZYIN/n2m8xeOYbq4VYXfq7rHOYrIaE/H0IIuLOHpeqNoe8iQjzP/iANoP/qOK1PYlvjnYG yxl7rWVH6bmx8/5MGSA= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FINCEN.GOV is authoritative for FINCEN.GOV
	Found RRSIG signed by fincen.gov zone
	Query to ns3.treasury.GOV for FINCEN.GOV/SOA
	Received 1255 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1255 bytes) ;; HEADER SECTION ;; id = 63028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN SOA ;; ANSWER SECTION (2 records) FINCEN.GOV. 18000 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 106248 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) FINCEN.GOV. 18000 IN RRSIG ( SOA 8 2 18000 20201101183339 20201025183339 54168 fincen.gov. CWfjgA9nWYbhaz3UdzYfx+Yyh1q01UP4ocQs0UlfjXF6+4fOn8qdxup95VV8Ksu9J4Fptrr20CUv EEJQ6iE+Gj4XiEiznik3R0b3dJEMZzQ94u+HXe3w6ei1E9W8RVbYqx8LTNdTCcwhKpdeTTkdlvI3 uS6U4Iq20T6W9YATV44= ) ;; AUTHORITY SECTION (3 records) FINCEN.GOV. 18000 IN NS ns3.treasury.GOV. FINCEN.GOV. 18000 IN NS ns1.treasury.GOV. FINCEN.GOV. 18000 IN RRSIG ( NS 8 2 18000 20201101201514 20201025201514 54168 fincen.gov. VycuDfPoI/pvJQg0sa8x623YONeym/15LEK5PxHscKjxbLJv62vb7HlP6jDi0sD/il0wnN1mf/49 wmo1u/3mmEYmHDtEOW0aXRq+SAOTstlgh38JZ2uN93NfaDoP9JG57QJX4S1aSUtw7MOoMqteK1u0 plllOa/9GLYBeCAwrvg= ) ;; ADDITIONAL SECTION (9 records) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. PhkXA0pnk5sLg8NAVu/SIeaDqOELN6/Vp2qmkwME4dgCOdIwJjn/j8sY7O8ZmXAqTpRz3gKvcp2J Gb688I8LHLz9bzOa+7m88O9axvtflujkpOzl7Jj6TP0muHp76QBRKoPh4c8nO8P32Cm6EHUTlojo L87FgTnnZ9t/yFsUNFY= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. F6Njj6l+SHzOzrPguR6gGw2GS8Rey+T8y3QP45CmqUUngB4ynt1/qSrHwvTVVs/xggc+BMnvVHXk evS+XLK6rJ4sm+R25e5n2GspnN39ycLO2kl7XCFAOxAAHW1jahXYkBN7ciHWXI6s826ZFPi7mhtT GUQPd4U19euylmWEacU= ) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. XSakiVUAb8VJPPsy9/nwe1K0XlMG1xyyIAct1UEgyXYiVGx9LaaGVt6Rclct+Ku7ANJRtm8jT8dS 2XsvMDnwxkXqqkDsH+CdIwNcEGyhqtvQQ4evsAtE+ob0LphsM0bhJo+ItvpJhumouBMQI468UlFl EdubgvVY+znvfoKazl4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. VDldIoxOJKlEBL0dSKK1w6xEPszXp8QG7aZfnGg1l7n+MtZobyX8+X1fZD8+bzJUeF7Kh5uEma+S ls9VGU9YyKWAPfH4aU2/bry2EKjkVpq9o1kWWtJ4NQqLEdw6dGWo2fWqyp1VKu37MHrP4K3ru+Ub DupqruNU5yx3yAj5dKs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for FINCEN.GOV/SOA
	Received 1255 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1255 bytes) ;; HEADER SECTION ;; id = 64788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN SOA ;; ANSWER SECTION (2 records) FINCEN.GOV. 18000 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 106248 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) FINCEN.GOV. 18000 IN RRSIG ( SOA 8 2 18000 20201101101220 20201025101220 54168 fincen.gov. QF2o6Fy3iqE35IKBU+BRRBx1aYp38/R0aN/GS8OO8S2OwnR/1+4+w4+Jct66lqX7dElpkd/mMOck Y9amdJVZDqIls4RvlHO6fuTrisubQ+pUaZp2H2ngjBjwl8tZlKg6ZocB2pr4xP6iate8yKpO7t8D 8RAYJDHuBd2DE72hPlw= ) ;; AUTHORITY SECTION (3 records) FINCEN.GOV. 18000 IN NS ns3.treasury.GOV. FINCEN.GOV. 18000 IN NS ns1.treasury.GOV. FINCEN.GOV. 18000 IN RRSIG ( NS 8 2 18000 20201101170237 20201025170237 54168 fincen.gov. AKpcjUi8MKtClerqAoYnHVyBGBm0xlWIimWWJ16r+g+xTRX+jYl9TeIF/FJKxbneMkHDKLeC7cyu Cp29GDsp0psHkbl0s25dYPJUi9pAx3l+z3P/19jjeywiJDR7DDG/ezoI71WyJkS6jkOfnAm1vihU Yx0XVuDCH7GNCXe9mzo= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101174205 20201025174205 13 treasury.gov. TEeNRJ+ethG+J2XTC+olNu71F0u7TMEN9N8YHHXhQzwPStusxCai6TkvEMeAsP0rSmfcV1sQJXAs kKLmFQq+W2DP00KNsCds0VR18FPf502rtMgSBTATaRVT0+16QpXaBha7qTh+2mxMSNMtmROewcio v3d9/nqFqqZ1kkfmSr4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101174535 20201025174535 13 treasury.gov. a+sCwJoHfDPXPLw/RxOg2IsB16gofNDZckanmyl33srFSWHgPWOWTkv+f3lqsDJe8B57LcG1nlND V3QfuxsqNdd5ck9GFcHlbF2wOiwvBpWTCqh13t7Ny0F2a90gnwk5apDUtr4QI/LfL8A07GYHvXkw I7IzD08y/Um69qvIsGg= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101173331 20201025173331 13 treasury.gov. bjuDexkMsl7sYt49kvqojzViZ/RGL20LG66h3qYw6r/9TKjAb9eaNACVYUKd4z2D0UIaSYMDZ3IJ qZXuiWEMX/avj9ut97N5CV48s0FJmwxqVRCe8uQ6PPEurRkajlrWiKpi9fwKuc+Gg/lZ9EszN1BC oZqMbVKfzhiugegtHoE= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101173247 20201025173247 13 treasury.gov. FKF9ht5q3aX4z0buzb2BCECIP0VMy7k9vyIAQnU+Z8hE6Nr9jGdJs+3Y0DdsQ6mqN+kFfm5ZQI3+ 73jt8iO7dhe+wlArVF7kpLv6YTFXCU5riT2dKTkaJSyv4ImS8UpbkzHl5JcSfMRROFLPov14aryN 5QCT1Fc8pasKPyDkcu8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for FINCEN.GOV/A
	Received 1216 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1216 bytes) ;; HEADER SECTION ;; id = 23842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FINCEN.GOV. IN A ;; ANSWER SECTION (2 records) FINCEN.GOV. 18000 IN A 166.123.218.116 FINCEN.GOV. 18000 IN RRSIG ( A 8 2 18000 20201101165602 20201025165602 54168 fincen.gov. Ro2w1EK1g6DXT9V8X8Zkskh1Yzp8ToD5rc9TmndeuIAuB0ju2UvqC40TBGnbFIk5AcDmJWViv2QT zLwBUXdlKaHjxbnuRUqavdKzd4HtcVaBVGc8OYqbOIpz01ce25tZ9qIn61it8QLnbbSBTNSsgEoq 5MJdNxvm7Z2OmaS1BbM= ) ;; AUTHORITY SECTION (3 records) FINCEN.GOV. 18000 IN NS ns1.treasury.GOV. FINCEN.GOV. 18000 IN NS ns3.treasury.GOV. FINCEN.GOV. 18000 IN RRSIG ( NS 8 2 18000 20201101164829 20201025164829 54168 fincen.gov. guSqhDWDEmGl0ag79Bfh70o+QGyICzxsQLLUDZwoei+sLyFnzmYLEguI/RsbE7L3d9P11athoZSE 0LCNk7tw0rF4HfT5OFVXV6U2l9M5z/6eD6PNYMCw3V7OMJf8yMppzc+sBZzuKvz3RLA9kK4pQ6Br jir7zUqyrUk9mBEyKzM= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101172257 20201025172257 13 treasury.gov. eNHdSkN5CJ5VvDhf1DdH4hi5YS+/erYo9MxoejG80VrxaEV4oDsfifG5SL/W5JqUtbvkOcVe1oXe s7mKKfgAkBETzPMNI1zFNIGKP1G5O60ksGasLSD/CAB3FPdZfldpGgZGC2wwID1nF5teaB5def4H mitSHASKdUnmsIYw/UA= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172242 20201025172242 13 treasury.gov. Uf6b7zyxHKe/XIGLsEfm8R6Kx5c1g0LnHfC9f4eqD172rD2vnQI+NRcl/bmdlldt7wMmQlhj1qLR Z9npEzCuKn/ZU9KGP/MmFig65x1VjNDNyHaDrQScIQ7nkT0cBBYxBFkQno4NG/ZAd5bCV6oWOqZ9 yG8YPv2wpwnmMTR6lGA= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101173125 20201025173125 13 treasury.gov. SAYYOdXZRt5md+wYgGGwvG63WnZrI+eujLTi+GfU66tYRhoPyVz+rL/LtDxybNSFU8dr5uX7MOgf fXDNW1BQzWOe1Ql1oqzYq/QBRkOYNvAz5SUrVJh7H77ixVqYS0gOXfCOxG6088rpI+iMsH+9AVia EP8uNDhNOxAQ3BUqIuM= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172905 20201025172905 13 treasury.gov. L4AmBjdUiR5+A97rVXICQL7TG6GF4opWc7/WSGj4giSoYoDduQSywcgeEFGLLOSaw8QJd2bYPeUI N03LRzfp3hcEY7fDSllvxX7gPPp+NeNtVyMzBL3D5gnLxNY+zF26EX/dWn2n6ZI7DS0NXrzRqdGN 8sFrI8bCQJZpVHD7x+8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FINCEN.GOV A RR has value 166.123.218.116
	Found 1 RRSIGs over A RRset
	`FINCEN.GOV. 18000 IN RRSIG ( A 8 2 18000 20201101165602 20201025165602 54168 fincen.gov. Ro2w1EK1g6DXT9V8X8Zkskh1Yzp8ToD5rc9TmndeuIAuB0ju2UvqC40TBGnbFIk5AcDmJWViv2QT zLwBUXdlKaHjxbnuRUqavdKzd4HtcVaBVGc8OYqbOIpz01ce25tZ9qIn61it8QLnbbSBTNSsgEoq 5MJdNxvm7Z2OmaS1BbM= )`
	RRSIG=54168 and DNSKEY=54168 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FINCEN.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: