DNSSEC Debugger - FLYHEALTHY.GOV

Domain Name:

Time: 2026-03-31 01:29:38 UTC

Analyzing DNSSEC problems for FLYHEALTHY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 26263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	Query to a.root-servers.net for FLYHEALTHY.GOV/A
	Received 621 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 621 octets ;; HEADER SECTION ;; id = 59905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . fPMV1AfTpaGjGFgGB7PJ7sfpQgyWvxx26Mhp2xvoRibk+gPyeRv+p3DBdMSca1uGZgExq+F6eP8s q8IBnvKeltlHXoRY423gEtTVQOjGiGU71xvvpKYOkEVvKmIG3AkNAH5CxP5oOfXsXRTmh27ZfAEc zBqvl1H5tFAsAvxFhn9FZmcjWxdvetVExeiEvTP6RWLsb/AQodAZwJUVEZD3Sr/Dox0Nh6HrTmLu mPazH+oZbb2MRKYXiQ5tY3kx0DqEWyv7HYQ3580cqVtdaDGCMBdJpS0c2uGLNwwoqLz+h/H/xax5 ckUnuLds8U9M3C54itsndi++ynF9rmgGfXXIZQ== ) ;; ADDITIONAL SECTION (9 records) c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 34910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . fPMV1AfTpaGjGFgGB7PJ7sfpQgyWvxx26Mhp2xvoRibk+gPyeRv+p3DBdMSca1uGZgExq+F6eP8s q8IBnvKeltlHXoRY423gEtTVQOjGiGU71xvvpKYOkEVvKmIG3AkNAH5CxP5oOfXsXRTmh27ZfAEc zBqvl1H5tFAsAvxFhn9FZmcjWxdvetVExeiEvTP6RWLsb/AQodAZwJUVEZD3Sr/Dox0Nh6HrTmLu mPazH+oZbb2MRKYXiQ5tY3kx0DqEWyv7HYQ3580cqVtdaDGCMBdJpS0c2uGLNwwoqLz+h/H/xax5 ckUnuLds8U9M3C54itsndi++ynF9rmgGfXXIZQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 370 octets ;; HEADER SECTION ;; id = 22121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . fPMV1AfTpaGjGFgGB7PJ7sfpQgyWvxx26Mhp2xvoRibk+gPyeRv+p3DBdMSca1uGZgExq+F6eP8s q8IBnvKeltlHXoRY423gEtTVQOjGiGU71xvvpKYOkEVvKmIG3AkNAH5CxP5oOfXsXRTmh27ZfAEc zBqvl1H5tFAsAvxFhn9FZmcjWxdvetVExeiEvTP6RWLsb/AQodAZwJUVEZD3Sr/Dox0Nh6HrTmLu mPazH+oZbb2MRKYXiQ5tY3kx0DqEWyv7HYQ3580cqVtdaDGCMBdJpS0c2uGLNwwoqLz+h/H/xax5 ckUnuLds8U9M3C54itsndi++ynF9rmgGfXXIZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260412200000 20260330190000 21831 . fPMV1AfTpaGjGFgGB7PJ7sfpQgyWvxx26Mhp2xvoRibk+gPyeRv+p3DBdMSca1uGZgExq+F6eP8s q8IBnvKeltlHXoRY423gEtTVQOjGiGU71xvvpKYOkEVvKmIG3AkNAH5CxP5oOfXsXRTmh27ZfAEc zBqvl1H5tFAsAvxFhn9FZmcjWxdvetVExeiEvTP6RWLsb/AQodAZwJUVEZD3Sr/Dox0Nh6HrTmLu mPazH+oZbb2MRKYXiQ5tY3kx0DqEWyv7HYQ3580cqVtdaDGCMBdJpS0c2uGLNwwoqLz+h/H/xax5 ckUnuLds8U9M3C54itsndi++ynF9rmgGfXXIZQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 40178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 349 octets ;; HEADER SECTION ;; id = 24687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. g7rRs29P3rvAE4SCttrxEF7ygWrPDTM7ds1H2JrQ7cmISFZVhLzaPvZJ3wPc3hCELNMJnbmd0Cyu QDYuD7h8dg== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. 4lnPfW1mGVTDpMyh2Yzx4ltdMt8bDgQWiBB0XoIGlCpyS1xxscIWiSdolCk5AR4HpgZTMVGy5Hsd JgS5zgc3tA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to a.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 26815 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. ePp7S73zOmYPhc4T96Vy1eBPhfiy8SSUApqrZ/gt67p82gEpYYyoonod1FNgDocqSaTdU/ahQh7a DdcUPDurFA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. UXGJBDgArclfrF546I3SrvG/QPJ22qySndaqjPmovKaCeLFaKr4Vv1TFa4vnpwVkhASxUSqWxh8V txg4i8NyQg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to b.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 190 octets ;; HEADER SECTION ;; id = 44623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. GW/Gj8Cp0IfC7KMBpcOqE0VbXVRW8pzOgpS8Q1sBFR3qH4+ZwG4XOurp37Gb1IA5EwhHd9aUYBVR eBx51sZoZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 190 octets ;; HEADER SECTION ;; id = 60144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. yHa/exCKURSiyyGmDL2ILIyOrhQ6OJfgQEAUy9VPFqj1Y47xb7uMhk7monGZCbIhr2AGACisuPRs 2edFIvB3SA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for GOV/SOA
	Received 190 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 190 octets ;; HEADER SECTION ;; id = 24914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN SOA ;; ANSWER SECTION (2 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. nNRz+KUuFHFfL6VSCvQAdr6eHs8BzlkR7Y2cskrera4OQqFZpIXKZ3aut5PuXsUle7yyVVcnKVrm N+yAhriaAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 349 octets ;; HEADER SECTION ;; id = 10784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. yBNqBpRAZqQLArEd11EY1Ff5cppBiApoK63UnYqEi3vFCYE9sb0L1ESBlQNlYSru4X6XrhExmj6x 9Fy8xOtLYA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. r4a+vFJP9EnueCV9pKyK4P9SblfwHxfh9rVD/5VKNmt7chhId6MMGul+u6819saegzGPsmwlP205 f6zK3rpgdg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. r4a+vFJP9EnueCV9pKyK4P9SblfwHxfh9rVD/5VKNmt7chhId6MMGul+u6819saegzGPsmwlP205 f6zK3rpgdg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. g7rRs29P3rvAE4SCttrxEF7ygWrPDTM7ds1H2JrQ7cmISFZVhLzaPvZJ3wPc3hCELNMJnbmd0Cyu QDYuD7h8dg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to c.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 349 octets ;; HEADER SECTION ;; id = 36557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. 0rxaCmKkjv/JIozZCAAynI9Zx54Yjzt0jJp+LuGBhJILAbLhXCVa8U0PawmoVhip8EvLuZ/a2DGk i//UwthpoQ== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. PyD2TTy1C1Bc/iDb6fvSf0vi9Lsc4k0QNV3Swd/Y0IrqDwz6jZkHlVVFwwcb0nvjLkpbtz3BX3Ew vC/KEn1RBw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to a.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 31300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. FEnqfREv9wEffNk8EE3iQIYqW4QbUhJoewz3UE7+IJEjldviYvNYyzCuZNLijA45KsyPQTT25EmQ RZkySDwfkQ== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. SvCFfhBtHgSrJkly3GUo5oU/2BqOM3Etemkrp+zaTskqsceJN9prPn0u5G9StsnYzgACqH/z3iA7 ELymcKf+sA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to c.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 349 octets ;; HEADER SECTION ;; id = 47383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. yc8ZA/Qj7Zc8BrzkrkasxteQ8qf/MMCKVVFUzT2pTy4u0sC5KJSdChZyCAtQqObKSAnYH1GMKTfu YPoRqSXtrw== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. NxWGokt2jh9wVnwicQe2rUNy0wKpNF04SP5pJgZZnV1kXamO1EiLKoAvhT+iNPa/B5dJO1SifK8Q CWesJWMZLg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. NxWGokt2jh9wVnwicQe2rUNy0wKpNF04SP5pJgZZnV1kXamO1EiLKoAvhT+iNPa/B5dJO1SifK8Q CWesJWMZLg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. 0rxaCmKkjv/JIozZCAAynI9Zx54Yjzt0jJp+LuGBhJILAbLhXCVa8U0PawmoVhip8EvLuZ/a2DGk i//UwthpoQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to a.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 33587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. FYDJvEMQa5N9ZgNtYuBBbnSeIC02I/whtpz1UuJibDn8Pu5aQ05KpOyoD5aoBHweoYykalmxN/BS 5FzL7U+IvA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. hlIBpS/k3kao0bj40M9RwFTJnDQ/7noPJBmI0eXm6FUmcgoRonbJYaIy1c/TEH2oXLWJGIOW0RGj FNfxd5pucg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to a.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 60613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. S5sMAjGhXpIZUtR6xqizwBy18at/DsFmrv+CjibLP3zG4If+KocbWojjZL0WpqJVnpkhltXbt4W4 035ot2qowg== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022938 20260330002938 35496 gov. etnldtvCt2X6S1saUv+Qnk3DxhjYCo69DKv9E2iAFtce5/mlB5QEOj6Z7lbdum/TETofbF9kDI4X CjUa+LclUQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to a.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 349 octets ;; HEADER SECTION ;; id = 14706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. 2A/j/hptrDrm7vBvcDemg3TspH28aBGEfpOtdF9/S+QHwtViZmc3e0+WqhHwZO5sIdXveYadG7Kg YEaSHHva+g== ) GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022939 20260330002939 35496 gov. N8wTY9jh6dKrvpgL+cWz28/HqXB5JGNyIkOcqyf4bX0U6mSOJ3Eh5OrxPIonj7Nb73EplP/nF0v6 tqUlRzV68A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. 2A/j/hptrDrm7vBvcDemg3TspH28aBGEfpOtdF9/S+QHwtViZmc3e0+WqhHwZO5sIdXveYadG7Kg YEaSHHva+g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022938 20260330002938 35496 gov. FYDJvEMQa5N9ZgNtYuBBbnSeIC02I/whtpz1UuJibDn8Pu5aQ05KpOyoD5aoBHweoYykalmxN/BS 5FzL7U+IvA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

GOV

	Query to b.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 22440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022939 20260330002939 35496 gov. 9rzsaMr6zeoe6UU5jcCHlvw1NhuiIta1HEIgr/+W45wh9lFKEsYB5b6kx9ZqLmwaSTd/dN92ANH9 gbMSkwNaoA== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. j3WsCojldNBr7SlFTT87RXoQCyPBqrm7gkWJU8oYWgcq+vU8pGgwNUqIEvL8tAXDsYZePVor1XHC HQSxLMuU8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.ns.GOV is authoritative for FLYHEALTHY.GOV
	Query to b.ns.GOV for FLYHEALTHY.GOV/DNSKEY
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 63090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022939 20260330002939 35496 gov. BoxmmmulOFRpExY+mPkIXKa/X1VOvx33a3GWGLPxYLGAmfjd/02reOY4VAAETggoYUu4gI58J+WK svuCmmwmqQ== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. Gn78J8evhLIBR+gXZAbUA3/wVWZTHectDPeVYdW9VUpK1fHLxjIw5E4v7KPSXBDnBsb8jeiX0usI kFUzeAB7Pg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by gov zone
	Query to b.ns.GOV for FLYHEALTHY.GOV/A
	Received 349 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 349 octets ;; HEADER SECTION ;; id = 54058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FLYHEALTHY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 300 IN SOA ( a.ns.GOV. dns.cloudflare.com. 1774920006 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) FLYHEALTHY.GOV. 300 IN NSEC \000.flyhealthy.gov. RRSIG NSEC NXNAME GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022939 20260330002939 35496 gov. luYJHG0b1Szv1uQVGM1QxL+rfSVfyrMTG3bZ0fNJM2s2Ko4ba1iZc6oXTgCQuQkC0dXAcLaEAprI 2UPmciOb5w== ) FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. fpIJH26N1dxZLK8cIEdRzeITuEUrdKjlnBe22Mkqvcx/KW79Msgo1z9yU4tge88WkZiQi3uadxoV s7rNkdzr6Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`FLYHEALTHY.GOV. 300 IN RRSIG ( NSEC 13 2 300 20260401022939 20260330002939 35496 gov. fpIJH26N1dxZLK8cIEdRzeITuEUrdKjlnBe22Mkqvcx/KW79Msgo1z9yU4tge88WkZiQi3uadxoV s7rNkdzr6Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the NSEC RRset
	NSEC proves no records of type A exist for FLYHEALTHY.GOV
	Found 1 RRSIGs over SOA RRset
	`GOV. 300 IN RRSIG ( SOA 13 1 300 20260401022939 20260330002939 35496 gov. 9rzsaMr6zeoe6UU5jcCHlvw1NhuiIta1HEIgr/+W45wh9lFKEsYB5b6kx9ZqLmwaSTd/dN92ANH9 gbMSkwNaoA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FLYHEALTHY.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: