DNSSEC Debugger - FLYHEALTHY.GOV

Domain Name:

Time: 2025-12-30 21:27:56 UTC

Analyzing DNSSEC problems for FLYHEALTHY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 26906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for FLYHEALTHY.GOV/A
	Received 621 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 621 octets ;; HEADER SECTION ;; id = 51243 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260112170000 20251230160000 61809 . 1VaZBZT9JI+JbPpvKTAlydV/SAWJhoO+P/vXuPzmesHz7vY4UeWPHMUIgxDDtAvwbIXA9oNhhVZi L2PtzU8Rg68CAIpIp54m+IvNdCsbRZ9epz2gI+3yThhw7D0SP1ZM0HA+CB50uDP1vJvUNlRhERoX 8fzormRiDkcU7TbTigd7nce9nfbvkXXgdDtrjEhC4it2/XZbkKotljqwD4WB2uWg4rW2L2cWTvhX 1rcVBVjzv2llSSKu/c0tXYccmXsJ4uGNj/HrlI2Nma1MmZyhPSCM3qbSMgaF/2sdZWf60ZcsW1Cx AasQx3ryUsWsDUHiG93vNjCbc8xUr6GOrxM8eA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 49385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260112170000 20251230160000 61809 . 1VaZBZT9JI+JbPpvKTAlydV/SAWJhoO+P/vXuPzmesHz7vY4UeWPHMUIgxDDtAvwbIXA9oNhhVZi L2PtzU8Rg68CAIpIp54m+IvNdCsbRZ9epz2gI+3yThhw7D0SP1ZM0HA+CB50uDP1vJvUNlRhERoX 8fzormRiDkcU7TbTigd7nce9nfbvkXXgdDtrjEhC4it2/XZbkKotljqwD4WB2uWg4rW2L2cWTvhX 1rcVBVjzv2llSSKu/c0tXYccmXsJ4uGNj/HrlI2Nma1MmZyhPSCM3qbSMgaF/2sdZWf60ZcsW1Cx AasQx3ryUsWsDUHiG93vNjCbc8xUr6GOrxM8eA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 51641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260112170000 20251230160000 61809 . 1VaZBZT9JI+JbPpvKTAlydV/SAWJhoO+P/vXuPzmesHz7vY4UeWPHMUIgxDDtAvwbIXA9oNhhVZi L2PtzU8Rg68CAIpIp54m+IvNdCsbRZ9epz2gI+3yThhw7D0SP1ZM0HA+CB50uDP1vJvUNlRhERoX 8fzormRiDkcU7TbTigd7nce9nfbvkXXgdDtrjEhC4it2/XZbkKotljqwD4WB2uWg4rW2L2cWTvhX 1rcVBVjzv2llSSKu/c0tXYccmXsJ4uGNj/HrlI2Nma1MmZyhPSCM3qbSMgaF/2sdZWf60ZcsW1Cx AasQx3ryUsWsDUHiG93vNjCbc8xUr6GOrxM8eA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260112170000 20251230160000 61809 . 1VaZBZT9JI+JbPpvKTAlydV/SAWJhoO+P/vXuPzmesHz7vY4UeWPHMUIgxDDtAvwbIXA9oNhhVZi L2PtzU8Rg68CAIpIp54m+IvNdCsbRZ9epz2gI+3yThhw7D0SP1ZM0HA+CB50uDP1vJvUNlRhERoX 8fzormRiDkcU7TbTigd7nce9nfbvkXXgdDtrjEhC4it2/XZbkKotljqwD4WB2uWg4rW2L2cWTvhX 1rcVBVjzv2llSSKu/c0tXYccmXsJ4uGNj/HrlI2Nma1MmZyhPSCM3qbSMgaF/2sdZWf60ZcsW1Cx AasQx3ryUsWsDUHiG93vNjCbc8xUr6GOrxM8eA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 30855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 349 octets ;; HEADER SECTION ;; id = 36037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. 8ZL6sWx2ZwXPRIfFGjT3xs0Pi2B0i5iG3Ed5cE4yYUdn5zGEbFssW0B9f1RtF3R831fkvY1YCFBh sc4FgIAasg== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. ppjl9KPr27I++Y7fYc7cAKioe6so1d+kEZl922NMwyzALvmVxh4+7bYfollAlgWTbLx4wZweosJD mAreTZbNEA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to b.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 2115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. VLVoKlTO3joHaxbL5T6QJSpzimHIBVAlQQXqIvOiiMKHtIfJtHU4DjgpjxGvGdzoIsOvhVSox7Uu aRqTFjnA6A== ) GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. WHnB68gvbV3QjHgg6XE5lPVUMxrjzYd8ZG4wcFPTZj2bef4b7NcTCggg8AqFT18ScOeMY9Up7rm/ jpFAuuF14g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to a.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 190 octets ;; HEADER SECTION ;; id = 52781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. TFE1sURTZSeq2gR/W4uqcx1O2JCNVGbdSbKZBL/pWOHVf91BUvcfl94KoTUHVGKo7PNeMXWlHuce MBX1YJSzyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 190 octets ;; HEADER SECTION ;; id = 46864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. mqg6yNKtSN/wpyjhg7fmNc0qG9cRr8oXWp3HiR2GnnK2SEGksmvWFUUoBSzIx84SRTnEtpYHXCvp 16G5ghLbYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 190 octets ;; HEADER SECTION ;; id = 3055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. 5cHI4SQ03J4JVS6hiX7wikY9sNzgwNAXbbhNGhlqhDNAY8rIOa59ym1miQwo2Vv+B0PHSR0GEOzT vX0cW8XIxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 349 octets ;; HEADER SECTION ;; id = 23103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. JBEjj3jVUZlWPLRmJ8bHeKH96AnkNHvl9xaSNUa+84RTtorLS6e7MeCmpnryeu7s6Oye5XfCcgvQ rk5hed7O8w== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. 2uQ4yTMoyd5u+/BPKjkRAT2W3gYt9O71oI5t+dgfskS8vOlMTVLpUvCb1G6I1BA7Hgm1G4CKiT1Y 1uDkAphqXQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. 2uQ4yTMoyd5u+/BPKjkRAT2W3gYt9O71oI5t+dgfskS8vOlMTVLpUvCb1G6I1BA7Hgm1G4CKiT1Y 1uDkAphqXQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. 8ZL6sWx2ZwXPRIfFGjT3xs0Pi2B0i5iG3Ed5cE4yYUdn5zGEbFssW0B9f1RtF3R831fkvY1YCFBh sc4FgIAasg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to a.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 21133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. Uk2wIBB9MrchUpbVoS6AiquI+odVY3YNtH1vvgfxHLkJumeq+fXKiz82iIUZmsOlusuPEUfiQ8MI N+iRzJZSMg== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. N72sKgH/aJFX1W8dP1pgTkh/wLppyWRUSAk4hmhSua1Y9w+Rip+zYHco8USZ60ur1RMP3xyvLJ9k mIc7L9fgGw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to c.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 349 octets ;; HEADER SECTION ;; id = 60945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. m1KfEFZbotCvEGcU6bri8G1FlzX+3QUODLaw0h2MEZydr99am6WFucto5smEQUCOWue2uStoHV6z u8D081rjzw== ) GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. jwqyfyWEnohniLCib9+LQV/2wVo6LLid2e/Q+/xznQILEBbxyrrliAvBe0K4nuazFRrLsRL2xTmE rH+Uy2//Bg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to a.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 63782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. mKH3IAcomng464NTu77eWPbLqwhnpKavIG+VaN6XyG7q4gWs9dH5RjnfO0mPhdvjS/na4kRTNanA hrIBVrWL2Q== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. XpzbArNG60DbaH7j3edrAd85jZxJAjAEZyEe76M41uAWibOgkvf+nx5fcf2MSLLb6jWp8wA5dNSk 0GX2SqOiYQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. XpzbArNG60DbaH7j3edrAd85jZxJAjAEZyEe76M41uAWibOgkvf+nx5fcf2MSLLb6jWp8wA5dNSk 0GX2SqOiYQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. Uk2wIBB9MrchUpbVoS6AiquI+odVY3YNtH1vvgfxHLkJumeq+fXKiz82iIUZmsOlusuPEUfiQ8MI N+iRzJZSMg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to c.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 349 octets ;; HEADER SECTION ;; id = 573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. +gcyfj+QyAp4htbT0TbeFHgCxK+hVCL7SoHeWsFz93nJY0oJe9YYfXTeiqXKkti0VFmndyxvYT5G n/WHcJn+4g== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. OXp9ro4v99hPGrBdZ0j82HIq1DXt/0o5Ng7Oy7/SxC0PhIvezUzNjm7FUZLiGS8IrgXiVSRkmB03 C8Waq/RwwQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to b.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 44227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. VbU+n5fzvj4dg2nGVx3UlECaPezvxe6jqLFRwcABmVIK6eTZqlSFRmx5XU6zI+5UymiD/C6zUI2W YN8sPn05dg== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. FtIOC75HcR906wMKpGePAe9DiC+UnOwlwdzSXRtuV0JOBBF39qbQnOyS8b/xDk8FLHJQbh7ilzuS 9qa4MyI6Ig== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to c.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 349 octets ;; HEADER SECTION ;; id = 46362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. f9yZbttKPeiRLUrNxaGwAXWnwkj2jsM8VL5GpWWV6Kg9iAoZB1Vv05zcHNHxbMWj9C6JAF5X9Nhf cTN688L4XA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. oDg1fG2uQ59r86BumUUFa8dYDCXqV1XFptqWH5xUPt6x94fms3V9bRYCZI4weHFobFNmwhbxKtdw j+0bgv1tRg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. oDg1fG2uQ59r86BumUUFa8dYDCXqV1XFptqWH5xUPt6x94fms3V9bRYCZI4weHFobFNmwhbxKtdw j+0bgv1tRg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. +gcyfj+QyAp4htbT0TbeFHgCxK+hVCL7SoHeWsFz93nJY0oJe9YYfXTeiqXKkti0VFmndyxvYT5G n/WHcJn+4g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to b.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 15964 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. hn8Rkoo3VgREMCp0ftxt0ucsKaJVJJGTa2DvMjpoIE5L9xKUaC+vx882EdTYGC5V0uHpQ7i6RWO9 FbRaD0wwwA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. 1aWn3HcVSzixm8uShm/PJYEzBy2FrYa5Lr8wVxerlUwrdkhJ2oWUl3RGmxq8PbPxVDLAJ5uaLguy JCN4jcNPqA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to b.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 10297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. PYmC/t1VyGbkFhb007d//o+VDpe1Q3vKsYdWRcJwZbQcKUZRzQB7MAMC6DdcC3LJgV4UPtxQUXsi RwJrDL80QA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. G66uImM/olgnk77Ol5ExKHQuQnUOLq1mEI7bEAXx9Bhj2C388rzVu+3sZGshivgIej2nJdLl+mvI m1lzyEu+Tg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to b.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 6764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1767129601 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. S5Rnqq1XvgyCRK/FpElOuCB7I+0OPj8Cl/mUQDBO9kaE5e5pJzEPlQEnOudaj6nSNiV8MOKQpnVI Zp5lr+fP0Q== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. DWqs37e5NW4yS2wNr4t6Vf2G7Qizgdt2HXv0Eol8+hSKIRCCqi22oyS1fESSLqPhpO0QjDaG3uD3 +Z1atWohqg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20251231222756 20251229202756 35496 gov. DWqs37e5NW4yS2wNr4t6Vf2G7Qizgdt2HXv0Eol8+hSKIRCCqi22oyS1fESSLqPhpO0QjDaG3uD3 +Z1atWohqg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20251231222756 20251229202756 35496 gov. hn8Rkoo3VgREMCp0ftxt0ucsKaJVJJGTa2DvMjpoIE5L9xKUaC+vx882EdTYGC5V0uHpQ7i6RWO9 FbRaD0wwwA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FLYHEALTHY.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: