DNSSEC Analyzer - FPKI-LAB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 15:47:20 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1139 bytes) ;; HEADER SECTION ;; id = 11826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to l.root-servers.net for FPKI-LAB.GOV/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 667 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (667 bytes) ;; HEADER SECTION ;; id = 42280 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 21672 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 26555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 16912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to c.gov-servers.net for FPKI-LAB.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 498 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (498 bytes) ;; HEADER SECTION ;; id = 14935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. E9DbO55kevZeHBAgR4eP+4xtO8himePcC5OlN3sbv54wLqnULeb0dahV7Evhr0vStPQxmGXqjxG/ /cfRx38I3AgQYOx0pXIhY/Ra2HX7Fr73irHWWaU6ooYmThHRdgghuzMWyJjcQfixQCtouBsGnlxH ECHEfLQpADqMqDljlYk= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FPKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 498 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (498 bytes) ;; HEADER SECTION ;; id = 56380 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. E9DbO55kevZeHBAgR4eP+4xtO8himePcC5OlN3sbv54wLqnULeb0dahV7Evhr0vStPQxmGXqjxG/ /cfRx38I3AgQYOx0pXIhY/Ra2HX7Fr73irHWWaU6ooYmThHRdgghuzMWyJjcQfixQCtouBsGnlxH ECHEfLQpADqMqDljlYk= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to c.gov-servers.net for FPKI-LAB.GOV/DS
	Received 372 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (372 bytes) ;; HEADER SECTION ;; id = 21875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. E9DbO55kevZeHBAgR4eP+4xtO8himePcC5OlN3sbv54wLqnULeb0dahV7Evhr0vStPQxmGXqjxG/ /cfRx38I3AgQYOx0pXIhY/Ra2HX7Fr73irHWWaU6ooYmThHRdgghuzMWyJjcQfixQCtouBsGnlxH ECHEfLQpADqMqDljlYk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=5320/SHA-1 has algorithm RSASHA256
	DS=5320/SHA-256 has algorithm RSASHA256
	DS=52519/SHA-1 has algorithm RSASHA256
	DS=52519/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. E9DbO55kevZeHBAgR4eP+4xtO8himePcC5OlN3sbv54wLqnULeb0dahV7Evhr0vStPQxmGXqjxG/ /cfRx38I3AgQYOx0pXIhY/Ra2HX7Fr73irHWWaU6ooYmThHRdgghuzMWyJjcQfixQCtouBsGnlxH ECHEfLQpADqMqDljlYk= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=5320/SHA-1 is now in the chain-of-trust
	DS=52519/SHA-1 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b`
	`FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 )`
	`FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87`
	`FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 )`
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 41146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbFMFX0IMHBXuy7vND6JEDzjR25K72AVILlMahHLmfqEUeONwz7kGBpR+xbc/0PTAldO3pqe 1ULDUtWDZupLnXhJgL+0/8MjiHUYV9ev5gG1u0QF0f3oIs1hAAAp6ZmWYxsYYQiTA2v39TWEXRRV pPwBFKH5ED2etj5bkylHgTX5W+BJebLlDgyTrThyJJCsJSVGrzCsU5Up5wElXqdsZvVqqCEy9uLN CeDY/D5tu+4Xsk1AYNPdoxA2ndsegnmWp1g+cJAFh3tXleN7nHL+cq5RpbiUqGJc9lW5y+L2yUUX 1qU5Kk2tYSydGXES7Q4iiE120evSLgl2Mita/AN1YUU= ) ; Key ID = 60318 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaaNSEKW9rIB/EzqP8R4dn7BqfgGwBkCPYRMWTmqJqbHxVgyXhKUoCX62Zr9oCtaDvwEtPjs 1hif56dufQmaCTo8Tc2myZc3uOgmI5Muw0Kwoq+26Vgl4Id2XL5O6wo+8MCZEiLLoR6rsGXZQiri YJtiTT0X+hikzPKVaHeOtUMojsrF7tqpjoanCQsdpJhw/xqhwIaA/3BSnXx24uW3PSxljZVGtZtn 9c3LYLhWBoeeHbo4aK5GLYIVYV3p42TZvVFkTm3jRmshy1FgQPJsWIYojrPouNOvLJ9ggR+Ot+gz Bc+Fc6UNMjmLY3ODgFVdZhVef3ZKtefujb8XzkY4D2k= ) ; Key ID = 28230 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ/axMAxCnqd50sRSnP6ICXUcFmU1vIELhfNekffZ7wfwRFYRVUKq4k7uStFaQcvSiO3gbE5 6S2l63r2fAQ2WEvwKDfuPLG6NRHrIpbJ0y7g9mCVUAQ263XQ7VyzYqv7qgwPrHX6+TFx0TPak53f sTdVWEAdUFuLoHyN47/ULNUWagv+X4YjEEUYSANYRaqPx+TfaEnwUkdB4ST2aP/uIQFqtfTIs/kd aa0gexzNY5nr1uwmOQ6HGC/LBwAOa5HpYiGEKLgBiDHjighg3xN7AiTsObhxpFrW6/yaCBEP7ONj ZODcg02T6O8l1x4khIYHYbEDAPcYBvn0zFChIOIFfJM= ) ; Key ID = 52519 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 60318 fpki-lab.gov. aTsVDToqDZGu1j9PKArUR6FBVBNDB9cwVpaPXWsCaHyGtx3auqUDjbf71vjBJpY+1V0PWBvYAhyS NHCWm58ulb9GO1S/U5YxyNBPfik9W0vBJ8Fp0yo2IZ1q2wTV28KdDX0JPXyl/QmmhImDuAdfd9U2 bei0RQKpFE5qNjkQ0uQfn1uL2BEqqmc6LbLllngx6j1W9dsB0UaBbjS3YbJYBBtJKG1FwaCSPn4r rXtvMm1WHxnYzLCrBl31dWfwijfQ8RzHPE80faK29FRQXMI71swVIzFHlHpohq5RR1X+Kwlyhr8B 3Fc6wFHiVzPduSX2PR4uv0Ikd7vfEBBJOr5KjA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 28230 fpki-lab.gov. G7HAd/0uzfxi7vbNUbCGkW12q3Brl+2hAFO/lFUrabnHB8Dyg6RxOnIiJWwCzrfyvLARlCzaiTRl DXlyNcllkME7gS0M8VaunSYo0vJNDpxYq8HZ68GJTaJtFXiUnQsbkNddHj1yUKvKlXEiwsUG2Qjs JNhAqBvQWOTPRtf3pQC4scwJQWadQ8Bth+eWUTYhqJPy2DIWIBFNCI6rlvgX+XxXAB3g6x6C+cQ6 uQ60cHVaaF8W5Nix6YsfXd7W/avHH7dn3OaiDJlgv6c6VMTyZ+yVbM7FUWfslmF4Lzfylh3z/DB0 oX+nUGuc5WZ8x0FiBYWB3XfH9vs0ITzc03My+w== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 52519 fpki-lab.gov. ZwKiPJRxhFGj3rPpBcOMjjNR9jL2/I8q1+2PKogdF+sMVpN2QDZVrGialjSWZzz4++E68dg10+pn 8MCQf/XGp0oz4UnmIbFD0TcT5wOPhkdcbTjvtfeNHsZaZbGW3zgdHe3Cn1HW++fNNYMayaHshtVd yMSR8wZYytSR/mADfdNYOJ8HcyNEI98awfZO3pqC3Ofkn1+wQVkws/5u8ydE+3FK6WhANDBdd+Vy w39+TUR6H0/M1v/HrGlvX1XqWe/dJhlX1uggWDw7Z41mmdcOkgshyURTi2aEcWYcV6j4RDs7NQto ldXKfYo05elcAKj5rD8YM6yrQoKd7rTFK9hh9g== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 5320 fpki-lab.gov. Ws6EVa+D7xNsgdzr9GlKDZrMMinlW5rX8xKhDcHj6vJ/mjgaV4I3mMq/IinQIUhR2He1OQKy7VkD yyQAXiEDUE8zzKWt/EJ095ddkZqZPpLib9uhT27d2DPFTsjng+uNxQTgNGAqnul3iSBgicjXrdjd FCMTFv0UpWyTK2rwWTg0NdrBzzTguEV8MPjZNkgCpniQZT1ow2IiKexrT5Vhoxjep6KX0KPXwF6w sY5iNsuTNWJpFpCY93lcSQ1qX94pHgs0MWB+fuHIRe9/3X/RnGlLc4W/Yw8qCxXV1GHxFu/RnI8x Pf3NzYr0h8UFy5YB5ikj+HlF90cT/j4g+dqsxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbFMFX0IMHBXuy7vND6JEDzjR25K72AVILlMahHLmfqEUeONwz7kGBpR+xbc/0PTAldO3pqe 1ULDUtWDZupLnXhJgL+0/8MjiHUYV9ev5gG1u0QF0f3oIs1hAAAp6ZmWYxsYYQiTA2v39TWEXRRV pPwBFKH5ED2etj5bkylHgTX5W+BJebLlDgyTrThyJJCsJSVGrzCsU5Up5wElXqdsZvVqqCEy9uLN CeDY/D5tu+4Xsk1AYNPdoxA2ndsegnmWp1g+cJAFh3tXleN7nHL+cq5RpbiUqGJc9lW5y+L2yUUX 1qU5Kk2tYSydGXES7Q4iiE120evSLgl2Mita/AN1YUU= ) ; Key ID = 60318`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaaNSEKW9rIB/EzqP8R4dn7BqfgGwBkCPYRMWTmqJqbHxVgyXhKUoCX62Zr9oCtaDvwEtPjs 1hif56dufQmaCTo8Tc2myZc3uOgmI5Muw0Kwoq+26Vgl4Id2XL5O6wo+8MCZEiLLoR6rsGXZQiri YJtiTT0X+hikzPKVaHeOtUMojsrF7tqpjoanCQsdpJhw/xqhwIaA/3BSnXx24uW3PSxljZVGtZtn 9c3LYLhWBoeeHbo4aK5GLYIVYV3p42TZvVFkTm3jRmshy1FgQPJsWIYojrPouNOvLJ9ggR+Ot+gz Bc+Fc6UNMjmLY3ODgFVdZhVef3ZKtefujb8XzkY4D2k= ) ; Key ID = 28230`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ/axMAxCnqd50sRSnP6ICXUcFmU1vIELhfNekffZ7wfwRFYRVUKq4k7uStFaQcvSiO3gbE5 6S2l63r2fAQ2WEvwKDfuPLG6NRHrIpbJ0y7g9mCVUAQ263XQ7VyzYqv7qgwPrHX6+TFx0TPak53f sTdVWEAdUFuLoHyN47/ULNUWagv+X4YjEEUYSANYRaqPx+TfaEnwUkdB4ST2aP/uIQFqtfTIs/kd aa0gexzNY5nr1uwmOQ6HGC/LBwAOa5HpYiGEKLgBiDHjighg3xN7AiTsObhxpFrW6/yaCBEP7ONj ZODcg02T6O8l1x4khIYHYbEDAPcYBvn0zFChIOIFfJM= ) ; Key ID = 52519`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320`
	DNSKEY=52519/SEP is now in the chain-of-trust
	DS=52519/SHA-1 verifies DNSKEY=52519/SEP
	DS=52519/SHA-256 verifies DNSKEY=52519/SEP
	DNSKEY=5320/SEP is now in the chain-of-trust
	DS=5320/SHA-1 verifies DNSKEY=5320/SEP
	DS=5320/SHA-256 verifies DNSKEY=5320/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 60318 fpki-lab.gov. aTsVDToqDZGu1j9PKArUR6FBVBNDB9cwVpaPXWsCaHyGtx3auqUDjbf71vjBJpY+1V0PWBvYAhyS NHCWm58ulb9GO1S/U5YxyNBPfik9W0vBJ8Fp0yo2IZ1q2wTV28KdDX0JPXyl/QmmhImDuAdfd9U2 bei0RQKpFE5qNjkQ0uQfn1uL2BEqqmc6LbLllngx6j1W9dsB0UaBbjS3YbJYBBtJKG1FwaCSPn4r rXtvMm1WHxnYzLCrBl31dWfwijfQ8RzHPE80faK29FRQXMI71swVIzFHlHpohq5RR1X+Kwlyhr8B 3Fc6wFHiVzPduSX2PR4uv0Ikd7vfEBBJOr5KjA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 28230 fpki-lab.gov. G7HAd/0uzfxi7vbNUbCGkW12q3Brl+2hAFO/lFUrabnHB8Dyg6RxOnIiJWwCzrfyvLARlCzaiTRl DXlyNcllkME7gS0M8VaunSYo0vJNDpxYq8HZ68GJTaJtFXiUnQsbkNddHj1yUKvKlXEiwsUG2Qjs JNhAqBvQWOTPRtf3pQC4scwJQWadQ8Bth+eWUTYhqJPy2DIWIBFNCI6rlvgX+XxXAB3g6x6C+cQ6 uQ60cHVaaF8W5Nix6YsfXd7W/avHH7dn3OaiDJlgv6c6VMTyZ+yVbM7FUWfslmF4Lzfylh3z/DB0 oX+nUGuc5WZ8x0FiBYWB3XfH9vs0ITzc03My+w== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 52519 fpki-lab.gov. ZwKiPJRxhFGj3rPpBcOMjjNR9jL2/I8q1+2PKogdF+sMVpN2QDZVrGialjSWZzz4++E68dg10+pn 8MCQf/XGp0oz4UnmIbFD0TcT5wOPhkdcbTjvtfeNHsZaZbGW3zgdHe3Cn1HW++fNNYMayaHshtVd yMSR8wZYytSR/mADfdNYOJ8HcyNEI98awfZO3pqC3Ofkn1+wQVkws/5u8ydE+3FK6WhANDBdd+Vy w39+TUR6H0/M1v/HrGlvX1XqWe/dJhlX1uggWDw7Z41mmdcOkgshyURTi2aEcWYcV6j4RDs7NQto ldXKfYo05elcAKj5rD8YM6yrQoKd7rTFK9hh9g== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181219231815 20181212231815 5320 fpki-lab.gov. Ws6EVa+D7xNsgdzr9GlKDZrMMinlW5rX8xKhDcHj6vJ/mjgaV4I3mMq/IinQIUhR2He1OQKy7VkD yyQAXiEDUE8zzKWt/EJ095ddkZqZPpLib9uhT27d2DPFTsjng+uNxQTgNGAqnul3iSBgicjXrdjd FCMTFv0UpWyTK2rwWTg0NdrBzzTguEV8MPjZNkgCpniQZT1ow2IiKexrT5Vhoxjep6KX0KPXwF6w sY5iNsuTNWJpFpCY93lcSQ1qX94pHgs0MWB+fuHIRe9/3X/RnGlLc4W/Yw8qCxXV1GHxFu/RnI8x Pf3NzYr0h8UFy5YB5ikj+HlF90cT/j4g+dqsxg== )`
	RRSIG=60318 and DNSKEY=60318 verifies the DNSKEY RRset
	RRSIG=28230 and DNSKEY=28230 verifies the DNSKEY RRset
	RRSIG=52519 and DNSKEY=52519/SEP verifies the DNSKEY RRset
	RRSIG=5320 and DNSKEY=5320/SEP verifies the DNSKEY RRset
	DNSKEY=60318 is now in the chain-of-trust
	DNSKEY=28230 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 27656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194450 20181211194450 60318 fpki-lab.gov. KaTuQK9Rq4go7GwJKoGeMZCeVApHi91F4mGh8pLamejFTWcbaK1EwB/J2OvBrwESO3CkSjDVVZkC Ocm95aPWQ+hDzIAX26JhPZMvI7X1Z8KpeQGrDXtcgBfNU3+mSmWV65kZtkVwAJSWxrCYDrW82l/e jIKHADUibzdQlDm8G38RoLHmf37ZXGSrbxabxY2Fxiqt+OzcJ93lZJEo7cAWiusSCnVQPlOlotyB O6H6BjiMx/j0TSe3MmfG+072zXsKVsCpAw81VFfVnfHxc5QNZ+q/sK7n4LlYP8wgswUzZ6KYb12O 31szqgEGzeSKyHQ8E+oQRmT3g69j4jHPocs10Q== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194450 20181211194450 28230 fpki-lab.gov. c0tEuJ5rsB6Qo4EF1N166pLfhP40hCcwHtRicP04bE90YrEyZf4uj/mtDv226c/BtudOPvvkimtK lXExMPBoDVdJ3qedkoX+S7arKqChM580xk3xjF7ygUQ7wevUvC19mVGAeVXGfzvvsmFSd2Q4lBZU UC7IOT2/A6qTmZfZOQlTJ7oAiwI+mZeQQ8PkUW9w9eUP9HmsFul3dnPSSFH60bKI7yrb2HNNtTrD eii1x4FYjktPvYOmxGNPqlWu+O7gU0bfZXKwCkiZcMzvvApvR4BF2BhIjmzfj7UHBJ0tHQx1SfCr mHbMpeuf0IBvPF4gTmPRWmAMczKY2QDqj/Tr2g== ) mjpd2n2527sgllcnnhen9l2qtd8tqvi5.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 2572527ca71508e6 mjpd2n2527sgllcnnhen9l2qtd8tqvi6 NS SOA RRSIG DNSKEY NSEC3PARAM ) mjpd2n2527sgllcnnhen9l2qtd8tqvi5.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219205939 20181212205939 60318 fpki-lab.gov. eTD7XnMGjGxIxag0LyYF70DJAT9CJKizr8m5fPmjFhcIIAO44j9ky0Ia2m+lzsqm3YhFkWAyJmTM 4sWqu5Ur4vnL9Rp1x99CCJopK+KJHmigDVcYMYMv9JH7HQjv1BERqrPiocn1S2cXCTqgPJYx5Wcn lUDJTKHMeeY+0b4sOzxpQzl8H09AptOBI/6dmp4+7RgeZ/DBmo9UQ6a+RX+wiUUW2w8ABVmOw4ic hQDov0TNVAEBXR0eCQvdaAoCF1HZ1JXaJeItV0t3OaCEL86Z6WeVvBp2gkbVnfpIDAo8MF2J3fug ru64zv9ObBNiJCXd7md8oUZhS6zh7x+SExVMQg== ) mjpd2n2527sgllcnnhen9l2qtd8tqvi5.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181220022431 20181213022431 28230 fpki-lab.gov. hwc+vc6X8aCB5kt3/L5uqkV2mxt1+UxynZSyIZ+Az5wCK18GVgYO7gP8JJjffe60+UiJHGlDgqQ/ xq6TFvELXp8iHHDCie4ub/pm8CLdNHPvZNEGputkypc42k8VWjLoy5YiAzns2ka7EVVH+Q3N0oxC J9HUlutjXLCR/Px8UiLUZ12KRVGaEKOiui5Lc/h0mALyBYTX9PzWvA4heb8nftxsfJ96x4y8j1ir rpCKV6Ka60JTeWian2BYiJeQPu8MpJY4KF59zBptWxniusipulbIrjq8FP9FsMXjTUloot2lDOjj KpxEPkSgse+FmrkUb4Ik+VvZ+RrgJam0CwG0AQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 15444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194334 20181211194334 60318 fpki-lab.gov. mFCjOy/sCMRMXpDoc6obWwAQo8vy0xEnSZnTk7Rz3IfYtqW0O8LzoGFkRcr8reC/wvIpXVN8AvJR BVWOXDfeM2Vp3tzWpNjunuFxe5WMlWXRrPo2C0L+Mw9gssEFgyqgUzDN03aDcsOssXo9A/IX9xSU Wt6DowWYySNFDUyKCepbo+yNjJHolhsAyVODkV5oXUDfp/pCBHpukML0yMJhzyHq7H5sbYqRFXID huWYGRfwLHWGFUN36to+oP/OWBFUwcFKqDJuEWFyF3erJamdoKEqpbP4bhY4y9rTnq8KlRLEYUNu 2EiI5TZCZEQbaU/QEJOHZYaBPHZn7Nm1OecXZw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194334 20181211194334 28230 fpki-lab.gov. BZKLSEWcpA90Zwl7Yu0L1aP2mL8RSEsAy/wPpKwFeBdMh5rf0+zKUfGgAJyLFuiw9rCQad3TQ6ca XYKsOdPx2lEnhfPrUP+bTniC5t7TY7CdLtQ+ttIzR/srii7ut0wltsFfRmeENpZwu0RdgOkk08Yy w8Art23EunlffxocV4VfMo1sSkGHft7lIreS/72VEnLRwE5SiAs6sDCLBxMfsd0nCx2AynfSEZ6T QCkpA7cKD1hHqnStM+4uLT/tK+nUWf1Bh9vLpKpUNzYTVgfKqnTKoKvRZ/xWF59wp94JqIiK+hTT U6u3zHo05kwa4Wjy3cHeL4STDVmRyTnBg+e6og== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219151313 20181212151313 60318 fpki-lab.gov. aHZqK5NHU78oROGvepXKB8NaYSYXpY8EmMY/M9XRkTrkZCkVPxr2hjjC4mE3G7HN1stSkD5RESNi z0LfJ00/AlAB7jFJwkc+2rLPmBZeEMO8xN6ZQLbRdCZEyLhgD6LGzQu5DVvg0owK3s0tU6iKA127 LZA8ev4ldM2z0StwirmLBLIyswbmt392TE84hkC/j/X9Le+OGbgxLPPDNduGrjeK9qhedzzeY696 ww+0kRMaI5xZoAF63diCYKVm9IwxVAIMz8bUftHuhPdlQsX6BrKJxKhnEXHd5XyH4dj4qgJaxzu3 B+1xvxJAx/Ff3T1rquuAiH7bd1maa0ocl1CsvQ== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219225621 20181212225621 28230 fpki-lab.gov. CjKXJvc4L+CuQpGsYXNADcgH+sDKzIBhie3Fx7I1QMurH8vQG0lv134e9c+MrU/FkjtGXXjFBP8E O+81Fi+SRBpNma2JveBhJj1UnyZ2Q6Xo8ir4cRpZenvOEszz1bQobQrOv+yVnXzzBJ0Y/PBGMyFR tmvZswoUJUaAzyENwPez50ujRc4SLh5cRivfQ4EgXs2FOCDbI9QSIehD1Advgv+oNs6ipWHtaQFr Sh+LeDeO1u+8QtO3CKDLjBddHiyFp8DVYd43fEedC8CaiwGAUyRA+EMeRQXPjGsHeoyoEtJ2KAhV 9dV+qlGbYdIlrK3QfwTBhjXL+pI1CAa0OX5rZw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219151313 20181212151313 60318 fpki-lab.gov. aV6EyJSPPw2LFWMlDGXx8Cuez1vwHiyrIaZZeckx9SvmxGTnBEmhUIo7/H+6p3Dm8inj7FjMEo5Y OmsimKwN3E3iERDo1dNqfWiWhFlNVku2aBPhxTX5qFA9RgdzUc9S14cCuEnscmvnB7QeplymadLO eu4lUXOwx05R+inoVp7PjdrzF+LbhAltX7ifORtR8BDfdlvzXCRox78f8syzq9YnLYKoQZWOBiva xwxsia4F+S62yPg/ocxaZg0HdFJ616BcrDb+MPSGJ64s1EqTLixPC7Cv3CATUijAzZSixF+U5Ewj IZkTrM1DD57Fas5UcvjKTdcB5sqqYQ75Z/xnng== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219225621 20181212225621 28230 fpki-lab.gov. YdIIJlAiZT0nqJbN+SByx5AYULwOXAxRyTDSCqxI5aKDJ+ibAS+EVq0meL0q0avEER5Xjmvp2HCZ 9/ur1TmPRPn6eZuol2kKoTZdNPOhdH6pSwMnTUsa5+/VaYVgOPDnRy9gWgbzqoEJ4YRi9Tdbbn8C AzRKULrzU4gxEckBUxYqrDfCPuiHl4p+tkpRMQ6ZL+JHKPEoU24l7IKrAJlYhh8mgawkj0L6iKIz V8WBo/FB1Npuk0XuQoJz5Nr8Y1iWsC/dP/v4jRTZl6BcZ4fn5RPxQH5g+84YkGGhHh1ZTxkzuBiY 5YCrxdRTQAoBKePjjw5k9mF5cYgMqwcy0AKQcQ== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219151313 20181212151313 60318 fpki-lab.gov. BwTQ2ISfRzocbDeC1A1hi+l1Mf0NaocDkklm2zHZqmmjjo6isJGfug46wtoa5R9qaaHep8gDsL6E 2BspfFJTtsAxQarjYLFJF/KwmKbq7zLaRodFWVTg1qkhTAkYeem5doW9bICfhjx+UmKQzt7wo0Qh 2W4bXy7tTbYO433yM5PXW2hBQt30SNXRGXrojV68YfchneYorBbftefqzcbXRqx8fSDfr3ypG0Ks cSxi8SGhO5FtPrUB8SghRf5WiArS7nNYX15OVG8Cl2IqHzLMhPxxa0VqMxu17XgVxC5GAvfWCGu3 0rkp7bzQAlnwH6/pvpiDLfgV8hr2fCIiFFIj4Q== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219225621 20181212225621 28230 fpki-lab.gov. VlcZn8l87+0AGTbqUd4HL7Xnsxu9Pk9y+wmo4d2Y+up1PFbBTBod8xzyTQigxbWyqzXxJ4LRaoUD n36aD+f/Xubn0AkW+WKvEXO+Psp8/lk76eujqWhdsalmr1NizQgSMLjWIOutKvGSlZ9VJNaWaYVn /wm1byEiLLkjd7JFXtjIelD4EGg4pzKrY+WyNXrn5GxjMdqsPSp5/pSfSQDEkma56CtPAu95zKyh +LcpQOzDUvbWp6E2mn+CBaGUcIzwEsszcucP0awzRdo/ZfV0DXxiP/S048kigpo/EbdgOm8G2Aq0 QuipBk6M+1xy3HI/IgV+8MW5YrlwuW2xqMycbw== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219151313 20181212151313 60318 fpki-lab.gov. jtYMzBA3ZVFA60P+rIVm9FeIFraWRRuE+DUO3UTwPj9n98+eZxh0XjuomnW8LZjg2Vu9ZEpUnofS 76thouHBLO1gnH75m7uf/lqAJcZvSoaa+SMra5J4f2WY9v0ey3HbaVdZsoYlRP+lkAYQsMExIDwk qShIfZtVSzm4LSxlupsYVmFRhV1SKSGYvD8yedeE0aJtv58HihIG/0X8ym0Dn60Yrx1xPTNwkYh/ 4tJwZcP28Z0v+pq+J4YzG6njYaapO+zFNHMJmp8vtVDHpD8X2nLX7apGuCUz3VdW6Ms0ratRIpbu /hS4v3b2fIA5R4bcM1urw+pyxsSSbdVwEMfYxA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219225621 20181212225621 28230 fpki-lab.gov. hgdWB1q5B8i+uQ5PiWhDinv2h0vltG2S2z72Anea8fV1U1h4y5/2Dym0k4FlbM1yAXlYXHtl+Dv3 B5SMIcxCIqLcNpTxF46KYvXVusDprjwwhM4jOeZx4es49Dw4+z/gv8pHEGYBEDlkRLdjwAU8NCvI J/1CcFHyJcwv/kgibsECCKv4qv8FS07ac7zphNOmqG5miMMTXO3tIxuZBKVVRCbi9lLZxt5Kvw5i sTf3xppClo0yqlAbQODXiOUz3N7WQ2eSUQ3L3Ehxy5cnwqANi3Z/B3v7AxzICe+vFz5FkSjiBfLS r+Bz+YDx03MLAbfx00u9iHYaIkiEXv7lDiqi8w== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219151313 20181212151313 60318 fpki-lab.gov. iA2VPbex7RA0yfFLjpJnHo8IfMBtIOhk1Gtn8hKWqgIcbMW9pmnV4EUAh78RCCC8LC+ox+eR+tcd CEU6+m4aKi2FHBWDktkNkTaaEIjbwnzBZxIYw08zjOH1CCYT586VCplc66lDqfy/YFd7BhHP97hi 9KMT8qgupllNKjyKT1nrWoT3sLagv6TTSeLez4wVO61a3VkQ+wlIei3ywWqRoTRG1xEO89F06Qto x3WU7naThwhXOlcpc6odpbWKwRi6RMbhc3UN4wgupU1XfkAKWpVjlQ1q9e4AdHr3TqKwUOqOVSAo dlqj3b7c8D/EaMVL4A2xB5SU15E9xh9hOtHemg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219225621 20181212225621 28230 fpki-lab.gov. X96N22HMR64ElmL71yasl7AUzzGqZjKyJ0fqyQ5zYimPGaTuLYGC/rIQ4snm8xp5giRn7uo2lnUr fMegR3INbjg/WrfdsE8RYL/SdjjZMoVnfLDGVnMZZHWYnvlY1PQyInLVDnOitEMfpTbKbQ0opPhf FwvvzuPoI0/9FLjT2w6A9pnkaj7Jr19+WKsyiDncXySXldmfaUg9XM/hTVYvjHF7SB3z9akrmLVS 0X/AdLKygm4W5Ihuqs+BKwRrieDLFhticajEy5HUzI5fc0srsCVWGMU6gqHTzBPUUr7Ytlmf1BTk zL2Uuf9zSMzBmC9+a5gVLTHHX0El/XNvA/49BA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 14441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194519 20181211194519 60318 fpki-lab.gov. cz0Xq/HsTc1qqCU9i4ZGQunBOvFNFPES4stcNpJ25eoD3Xu5mJejyt2Lpvye7WPYrERPmRahRTWc 3cqdi+J+E27vyAFWdAH1M8EOWCNbTRhrIUimTfbtkQFy3MgNxn0UEeF9CNQcKLXb6oBTrLlI5sDQ UUVAqfi1CnJ8s1Ar2493J8OezMJmAIA1yrmCqQSeUtgsv/8RUbELyT0QOuQLDt6xt5XIrDTeSi8t 74zCTp59Jlj0d6OqQ+PO4+8ykJO5aasxTuHuZFZoudygBUYdbRq7c+Yt4oDMAsvr1P1mhYFzSfb7 3BTRaI4T2bkmbvNynNEHI2bGTIZDYEMfZELLyA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194519 20181211194519 28230 fpki-lab.gov. KHvgC+yAj5bhACZBMsDFTD0+7UYgRasEd1Pn0IwTVzue4zDwBafH3vJCR6Samy094K77/BAo80l5 T+QaneVjZifd2EarBjQByRqLfp6R2C5+nUtl6jQq9hBI7qsFmohiZdFfq6mC9hinxOW4K7sdpRFY bpJ0wzsRUacl3z/XAaYMQNtXRHaqHmiOGhBPQE+43jA6yUtHgbSRocLgE1Xvf3H0dSkwOneRigFi wmUophs+G9SYrw7bOadDLPDyuBI3wlappap7vIfVzGKlgKBRkVufR4N0kSAldmapup37pNNOsKbK oboe5BLcqP9KpSrwEFQapzJIQQegTrOlXz5dFw== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219153451 20181212153451 60318 fpki-lab.gov. VNrph2cMlxwwbjDUhTVM7ckuBXNdZ0ul4qhtptyUbWdYdjQmO8Gn2aE7EeXS1Q7F3oJWwgw2HNvQ rNdSLhTRnO8ODOiOSNrQyXEWnPlZcJxTQz5NURSdLjJzmDEzloG9IYgieD55514wod3/C67XX59e tT3c9JQOsjzuXXgoSaxWMIE8BCSBmGclFBWIhXwghxB42XZKjl7lY4EPKk917T9rDgh6MbkiQUPc PgEfjShNd2mxB2g2Xu+cwAmN1ewV39/gmWTcSc4NGmkGRETSfCNL4z5UZsXE06kNRz4+G86WGwbQ qbXGRmXJI8xshYl2u5EBwJ7rn2X027/7FlKUBw== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20181219225518 20181212225518 28230 fpki-lab.gov. VojZ41LBHeawg1At4B6LxhYd+F5Xo9Rg3GYSAv5zDnKNyTT2kjzu4RyxH2lguxDjErb+xhosFqrp 1+qv/yOegXXpLaOhnDhJmlO4IPhSdmfHnV3SjVwpCVlNtUg44M2RNbgAQn+MUCfpDFD7XiNaZXZ3 +742QxGKT1hxxptbPMDLdjgrJ6c8PQMLigNdNXo7fY/Ll7hEreaxZ4LHihBtoas+hVLQd/drZxGl fgb6sUkd/LeEL0dXXF2LsWO6HVZheBz2HA4H5dVcBNBt2GrjhaC1+jGDvY29ller0RpdwuWzHclx vW151P10pek/acV/jfnFQML6n3ND0t2P7GmjZw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219153451 20181212153451 60318 fpki-lab.gov. GZoPo9PkczQrN7tV+7HGmqg/q7BYWBsqJiCF76JMNUHzOlPBt1ELzhoigmKWDzLB0cVf/5dIdHV/ fkRDgPjas0hMf+bBHATGnu6RwyMddu83O6aT9rDC7sfJtigGYz1xwllSxwKBxZL5ZAs5H/q61FQ8 G9q2ISdyoyyJ3jUkD5o+bUULNWasas0xrOFBEjsM/bwHpXl5/7U2FpJWxESF6QfDHErPhFFyxpzb KtYOIK/Z+yotf165fU6IsVBNusp8NS2leMx6dGofWggGI8dRHblE5UVzJb24iON01lAyYvCRHIQL anDZljQ2Uy4ZSP+VloumqNkfGyUvzP+zjCfHUQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219225518 20181212225518 28230 fpki-lab.gov. fysPanl85rg+Zunm+yCeA9oz9k72Pg8AbKJoDkpThSfKfIqWWgl9HPdwxQrLOMzCuvHktnN8tVoG eVSqMsqMaJ4wlVffYxPbDcUBI+x/fR+S8+1Vffabj0ggT5sUqu2yRFOPG6UbYA0nvxpOeL045RC1 0ADzHeHWHwYOeoz6kDieZkq59HJnVRKtprO709xeDP7Pc8z1AmkNBGvECm7Sq7VZd/aW8Dqjtuvv dJkL6F4cOxAmPGiJkjsj5OV9AxI+c8HzM9OtX6UiABEoDsH8w588p1gTBkXEo3GwFQbuehGYJ/kM 87aQ7pl24jZnr1GNSR1x9tSFQoVEERsf6JmDng== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219153451 20181212153451 60318 fpki-lab.gov. Re7ygkjvZIhmu2wH6qxLYH2hNg/um6K6t2FfG7+0cqImjs7HcbTKnPdxUjR71+y2NCWnEgoi9HME O5rKaOzPUBke+H/joibMVRxupunO9xgrFLxHJUOo7JoPmJJB8yfYLmV6MZ/G++Y9MoVji+kD3u1z ZYdZVVx6JGtpiwfLF8LRTDIYH1otZUqKx/ff6jR9kBL00uPiUE1/r0wk+UiisoCV1hGYEzV9BFG2 k6GliGNM+tIpXpDKVgdpLotpHLEGu9iY94a4war3Zg5fjdfBuHSIGCghitbtcsBLpkQ/VeUs5Nmd sf5zamNxkNvSmX5NXoxDuGKhjrzkBXko+L165g== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20181219225518 20181212225518 28230 fpki-lab.gov. mmA++X0G6y4WkATeh//KpVKfcn9AN5y98kV/asvgyXW5ZSeiT1TRxv/U6obIexPEjpCx4RvPnpPk rYgllNCNG29LoFcg2XyEdgBoPtLBS2VAfD0uhYPtkwshSPumaNHfxrdl6VT+90/FVLVW3op4H/gA UMamfBZJyiE/ldYiKW3sHH4G4BtqtMjRDb8jC9mxNjFUNd3jtWHXlZHZqzhUBjKxtfdxvcH4dHrc ZcbqLTEo1QcgmiInTOkJCeJ5QaB2cRfb6Rx6Q6qeNj58AIdchUcti3g0weMooaC4LmGtbJsD74FQ vF9D/v+eETmJdfU5pGozjBISI9ZgluItdT7pXw== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219153451 20181212153451 60318 fpki-lab.gov. CiKY5K2TrcwDM9EigdzbAflnXMsmOur7+tvpGBNwhwZLB+8I5NMeRg/wQnflWxj65TuEcJTnNt9r keSuxi5oCq9HUjJtffcDZipWDU4f/j3KoU1hzYV45ZsB2yFs78TteH88IUQowo8Uj8J1T+DJwCAg aN9INakFkxuFK8YXlDWC3pzzPfH2KWNbJeOpDGxX/6hyWzildNICMfUfKdJQbBxynXqwE2VQi2w3 8mYYw4kRsUXbxXHZYJltetgBOXBeF44PrKCtQM9yaJ+Rof6nVs3Ja/LiCsGTefZvWhLMF3Sb6QRv 9+QtUeKun0BZjq31dTx8DX1d69UNNMXcvgvFZQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219225518 20181212225518 28230 fpki-lab.gov. oP3rwa9sNn6Bx05C4SPmA8X2xsuZwPci736pqiNw2Hez2AGTX2yXtwVmoK7I3sD2e0f/b5QNt6wa 9CYeykZhRHZxUbG/01dAJj0ZJyDJYQespPstaJ886wZdu07Hb/+otEaGcF4A2DzXXCxCHpxpMfxd k4Y57HxN5k+HMy2OaaUdDLeUiD/A8yrpLvAZsYsQkmSnzl0FW4y0x6YB/lItLkyjE6KHIYqP/Ryi ToHFov1KcEtWpkdU/iyApuoBDV+QIDVIqoNVyOl3+X2GvXd1Lkq/7TlK9WAsZzb5Opf0anCdcvLb waE9Z8jWY0IIfjh174tfd2PSg54W/He2ebAZqw== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219153451 20181212153451 60318 fpki-lab.gov. N8LhOoo8oo4+jFDymg/iqm4yENhU15owHIM+m+s2e9QDbMWBJUnMERnJJrS8WHimXjShInvlnCly g8vKTSA+Xm8RuMiDkn+zPmvi2oDvUFgvuLmhXjBLXZ4NnAFr6f5VO6YhllLNUVm50z0TQ1T6D+5x NW1DoEKgfjGjbNf2KuZjVPmqsIsHke8afJc+wOAGgfRnC8A2Zm7fBq+S94LaWAUhKjyevlHSyacp LL9UxuOdRcovbYZl97gBe4ufYwWo5JUnPdeUrW5IPKQbe7BCObCa++qWa3MhUCdiJiye4F7+9p8i 73MyFos42CTl1ToXsphJtr55vz1R0ReWlRq79w== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20181219225518 20181212225518 28230 fpki-lab.gov. nMrRTJLQY0p1OavkrLsiNkbxfQ527qtoxGmqFCQuGPrp4IV5WVBMG4xHByRq+uJbzYZGoiq6tTbH zw2Pw7ME7xRDS+mPAlDdSTb4pwxEXD+NLnLftSISrAde9pOE97aWo091Lkp6zRUixnQYlwENevy6 7ylquqvGDduNAwVMMzF7AfBQnB8YK7yCJZcPkjzvQi8Lle5XwhBXbp0R2u1WCJ82lqtfjaxE3yOr 1gx3gIpxdo8I5bDr2xgMEZPI/3OsXI9o9qXYtB4BSWug65XzgG/dsKfYwp2JjTPSFLb/Vtl+rCtv f9ZElMi4vLnSN/Ms74XuGCtfnYu6qaNdz5tTSw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 1605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194519 20181211194519 60318 fpki-lab.gov. cz0Xq/HsTc1qqCU9i4ZGQunBOvFNFPES4stcNpJ25eoD3Xu5mJejyt2Lpvye7WPYrERPmRahRTWc 3cqdi+J+E27vyAFWdAH1M8EOWCNbTRhrIUimTfbtkQFy3MgNxn0UEeF9CNQcKLXb6oBTrLlI5sDQ UUVAqfi1CnJ8s1Ar2493J8OezMJmAIA1yrmCqQSeUtgsv/8RUbELyT0QOuQLDt6xt5XIrDTeSi8t 74zCTp59Jlj0d6OqQ+PO4+8ykJO5aasxTuHuZFZoudygBUYdbRq7c+Yt4oDMAsvr1P1mhYFzSfb7 3BTRaI4T2bkmbvNynNEHI2bGTIZDYEMfZELLyA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194519 20181211194519 28230 fpki-lab.gov. KHvgC+yAj5bhACZBMsDFTD0+7UYgRasEd1Pn0IwTVzue4zDwBafH3vJCR6Samy094K77/BAo80l5 T+QaneVjZifd2EarBjQByRqLfp6R2C5+nUtl6jQq9hBI7qsFmohiZdFfq6mC9hinxOW4K7sdpRFY bpJ0wzsRUacl3z/XAaYMQNtXRHaqHmiOGhBPQE+43jA6yUtHgbSRocLgE1Xvf3H0dSkwOneRigFi wmUophs+G9SYrw7bOadDLPDyuBI3wlappap7vIfVzGKlgKBRkVufR4N0kSAldmapup37pNNOsKbK oboe5BLcqP9KpSrwEFQapzJIQQegTrOlXz5dFw== ) juhogb7p12d1vqu19b45pm77dbfmc4m3.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 f101d1e91002f1b1 juhogb7p12d1vqu19b45pm77dbfmc4m4 NS SOA RRSIG DNSKEY NSEC3PARAM ) juhogb7p12d1vqu19b45pm77dbfmc4m3.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181219194740 20181212194740 60318 fpki-lab.gov. HGmlnlSaGzydBnr5sOaF6QaFzhhQf5O8NCARLnguO9X3h8MqL9KoR2PQW9a1IzI/MIClWBru23O1 X2jWDofdW1GXjMbUhnqPRW9LKcn06SnpIERSrgRdLX0k/iCcyQaHHv80h2lrZimKQssgaMiegqVS +4cZoQP/rBqzUpXGdsNEXkJnY5Lxbv77atBkV3+6/V3zrPpXOGU5p47/eYQ53471320HHA6a2hBt 30hwyFzWRYNJIYqV+tfTlMMdwao0Eiw74zqrzA7Q2HzR8GENBumPtYyr2HYh3ExI8ey9vMDbpSFZ VgKsrcirKQ4iZDLlO+SVB+pb1Zk4VmQloUi8WQ== ) juhogb7p12d1vqu19b45pm77dbfmc4m3.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20181220024152 20181213024152 28230 fpki-lab.gov. hi5l04fJgSRug5hd+2mIr97tqlmGCFThanpY4+HEwJjriE8EdRGCR4jxF40wI70Rl2Kb9NLp++Cm tMbHR8vpvt1PKOlBXeVbBR/FR3NGC4W/kbmX8TAjMecy7v62lv3i0oNwYM3WdmDhUyTflBldcKWZ m9YNDxuoAFDgvbZgVVwhlI5VHCR4sUCi3/SW1kLsNHLr2trZ+za46wis1Bj963I8JYtTP2SXpO8A msWrSCe3PSSblWmmLMd7g5AE6tEIaGDRbUZnHA7O3/qqdzqlz5hPrczw0acuCI36ME39LcE1hteM zYRJs+N/RCHuFSb842Uab3CBcGTCe2hXgKCN0Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194450 20181211194450 60318 fpki-lab.gov. KaTuQK9Rq4go7GwJKoGeMZCeVApHi91F4mGh8pLamejFTWcbaK1EwB/J2OvBrwESO3CkSjDVVZkC Ocm95aPWQ+hDzIAX26JhPZMvI7X1Z8KpeQGrDXtcgBfNU3+mSmWV65kZtkVwAJSWxrCYDrW82l/e jIKHADUibzdQlDm8G38RoLHmf37ZXGSrbxabxY2Fxiqt+OzcJ93lZJEo7cAWiusSCnVQPlOlotyB O6H6BjiMx/j0TSe3MmfG+072zXsKVsCpAw81VFfVnfHxc5QNZ+q/sK7n4LlYP8wgswUzZ6KYb12O 31szqgEGzeSKyHQ8E+oQRmT3g69j4jHPocs10Q== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20181218194450 20181211194450 28230 fpki-lab.gov. c0tEuJ5rsB6Qo4EF1N166pLfhP40hCcwHtRicP04bE90YrEyZf4uj/mtDv226c/BtudOPvvkimtK lXExMPBoDVdJ3qedkoX+S7arKqChM580xk3xjF7ygUQ7wevUvC19mVGAeVXGfzvvsmFSd2Q4lBZU UC7IOT2/A6qTmZfZOQlTJ7oAiwI+mZeQQ8PkUW9w9eUP9HmsFul3dnPSSFH60bKI7yrb2HNNtTrD eii1x4FYjktPvYOmxGNPqlWu+O7gU0bfZXKwCkiZcMzvvApvR4BF2BhIjmzfj7UHBJ0tHQx1SfCr mHbMpeuf0IBvPF4gTmPRWmAMczKY2QDqj/Tr2g== )`
	RRSIG=60318 and DNSKEY=60318 verifies the SOA RRset
	RRSIG=28230 and DNSKEY=28230 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: