DNSSEC Analyzer - FPKI-LAB.GOV

Domain Name:

Time: 2020-10-31 17:00:51 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 44362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to i.root-servers.net for FPKI-LAB.GOV/A
	Received 670 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (670 bytes) ;; HEADER SECTION ;; id = 51633 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 47164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 48004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 63929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for FPKI-LAB.GOV/A
	Received 530 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (530 bytes) ;; HEADER SECTION ;; id = 13821 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 11302 8 2 8a04364c9b48832894f25ccebd48b0c49b494331e15ec6c40f55266531c12eda ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN DS 11302 8 1 07b4dd7d24e3736fee0e5c3e6af8cb11311ca56f FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 0019cgwRapExeC+z+69X+L89WLYiXNdqHCwbMFiwnmamnkdziTxkQqBZyoFx7YN+EbNVok73jsRh 5oy/u3aaC5Y6BhDn+VPWFlFtJDftjzugIQ+yi2vSf+KGIQ6jM0BVkMpSO+mIBVST8N2gVkM1l6YL 6MCNdGrndwcOrONPAy74G9qJtOubJk66eitxPASzJh80zHsqxkU8VNuZfgsfww== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 530 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (530 bytes) ;; HEADER SECTION ;; id = 4670 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 11302 8 2 8a04364c9b48832894f25ccebd48b0c49b494331e15ec6c40f55266531c12eda ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN DS 11302 8 1 07b4dd7d24e3736fee0e5c3e6af8cb11311ca56f FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 0019cgwRapExeC+z+69X+L89WLYiXNdqHCwbMFiwnmamnkdziTxkQqBZyoFx7YN+EbNVok73jsRh 5oy/u3aaC5Y6BhDn+VPWFlFtJDftjzugIQ+yi2vSf+KGIQ6jM0BVkMpSO+mIBVST8N2gVkM1l6YL 6MCNdGrndwcOrONPAy74G9qJtOubJk66eitxPASzJh80zHsqxkU8VNuZfgsfww== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to d.gov-servers.net for FPKI-LAB.GOV/DS
	Received 404 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (404 bytes) ;; HEADER SECTION ;; id = 18636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 11302 8 2 8a04364c9b48832894f25ccebd48b0c49b494331e15ec6c40f55266531c12eda ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN DS 11302 8 1 07b4dd7d24e3736fee0e5c3e6af8cb11311ca56f FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 0019cgwRapExeC+z+69X+L89WLYiXNdqHCwbMFiwnmamnkdziTxkQqBZyoFx7YN+EbNVok73jsRh 5oy/u3aaC5Y6BhDn+VPWFlFtJDftjzugIQ+yi2vSf+KGIQ6jM0BVkMpSO+mIBVST8N2gVkM1l6YL 6MCNdGrndwcOrONPAy74G9qJtOubJk66eitxPASzJh80zHsqxkU8VNuZfgsfww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=1924/SHA-1 has algorithm RSASHA256
	DS=11302/SHA-256 has algorithm RSASHA256
	DS=1924/SHA-256 has algorithm RSASHA256
	DS=11302/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. 0019cgwRapExeC+z+69X+L89WLYiXNdqHCwbMFiwnmamnkdziTxkQqBZyoFx7YN+EbNVok73jsRh 5oy/u3aaC5Y6BhDn+VPWFlFtJDftjzugIQ+yi2vSf+KGIQ6jM0BVkMpSO+mIBVST8N2gVkM1l6YL 6MCNdGrndwcOrONPAy74G9qJtOubJk66eitxPASzJh80zHsqxkU8VNuZfgsfww== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=1924/SHA-1 is now in the chain-of-trust
	DS=11302/SHA-256 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38`
	`FPKI-LAB.GOV. 3600 IN DS ( 11302 8 2 8a04364c9b48832894f25ccebd48b0c49b494331e15ec6c40f55266531c12eda )`
	`FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b )`
	`FPKI-LAB.GOV. 3600 IN DS 11302 8 1 07b4dd7d24e3736fee0e5c3e6af8cb11311ca56f`
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Timeout querying dns1.FPKI-LAB.GOV/199.167.92.100 for FPKI-LAB.GOV/DNSKEY
	All Queries to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY timed out or failed
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 47228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAduCvEUuxaaR6qmPecJeadFEYI9zNoKBf2NsY1TM8AUiC+x0nVMJMAeZuDNxakhlZJpjZjZ5 Yeja4BImye82bWE6Gm3q7xCQY0lcHePSsTYMynWaQsaKDQj1wP1MOkrS8ImcXXa5V9XAUvyTUdJV 2X7sWL36EHC/BdP+MWTgIJxCyoaCymwl1y23Z+lSuWtoVv/+vMge0AHBu77J9Wp63nEJW8iH1HVz vlIvU/ZEYKv59lEygfdFWkKFy2JdRnJnrtS86BBG7qXFLEwemwHGB9EZHnVsLtt1TEygyYbk40b3 ZK22fRlqOL+2mX+vFPjRBJXuA8JYidD8WS0+0D/7o1c= ) ; Key ID = 29943 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfDRg/kJeB4KqqF8KyYHjpWhFQ7Fny/i6JhmloiRXeAPrqtVl4NDL9z9ZI4pB+qsU6bK2UXa dRPI4bstTk1VtcLpHvZ5jR2LV6N7y12f674k0lAtepL7eACVy8UPV1DPusY3gPPI+S0NOKwmid8P ueRghqphc/YvyOZl1CcPXW8sdJzCq3xCDk4mLEEdoLO/X+v7Y/OYJHAYjegd5OROT8f1I4Ar5qz6 JjZ3gCgk4xTnpviRQeUugrQMNWg3Hp2BgPWkDzGehkbzUnusHd37oSYWM0iowsOHke6NzMco3A23 IQR3jrNH3kT0ghujfZ36np4sPHTR83b2Hzk+ZhXgQbs= ) ; Key ID = 33366 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3oZtEx+J+n/HmLw3pwBgdzrbXVwOub5/wFJkblMDzxiAVPnsKk6uQVyBD95Ro1FE9eOwHB XmC3Cmzs5BKIW4KIT2bYeG73dbjsOZE3ZW/hpBJ7xDA/9czDjraQDkfA3Qrdlw5pVDOsNb3oUgnz wFvYa686Ha0mp0xVpwDy8hlTSjhMzkBJ7rCO4QZQsoGstIDNm63TlKUJn0qjS63LIgE+fwKjhoqV 8ZFdh8ycB2fU8LURud6NkTLOSgZI5Y5SD5cV1MI3shBGrGTZCEEueLZjU7qbV0LNVsVM/AL9HePx TBVxxudw3n9HwfsvOocABvjyXyGry+Czc0eI5O/Hzw8= ) ; Key ID = 1924 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdeod0HDjqli3eTfoaxQ1Ohlww3hWCs4AXuNBXSfs6OXp/Ne7OdWCXggQ99qqzHV2SGUQbw8 OhX9zKP8T/9vmnpELgGkt4ok7IViIMPIUK2L1j48KRe7O5REU/7+z2IsdRiYwXsmoZGyOHSjjhGO KmDUHASXlDdqCWwBHQfm8I5vPcbjx+0JDWWRyokrlhnYqb01LdIDRuHC6uLEO7wEn0PlAZethQDF 9W/l1s0bRd1ygxVEQUHK9ESnEADwXIu6M8tgRth7OAaCzyBkz0BjhKMFTIbuxTQpY9VY5YBgma/B DuNWWNBlTUEuP2mrRRLAjeaP3owdgfAmzfEeuGRdFB8= ) ; Key ID = 11302 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 29943 fpki-lab.gov. TwRcH75eH0cIS5Au3/AzOzDUqaQkeEUXxA7jy88sHzlNGX3r24piGtB47GAJ/VqLscCpOQHjAkuK evNAEEkB2NVyT782GU/D4J0AGf0y/mGZy/lBeg67egsAFqOSBXBUGbVJZgtP4Elcei5COucvNIdm uhPAruCHo1+KU+skecR3IQJwxs3rcBWbGb5KFryzkXXzcV6VJsO5P9c44cT5ACG7gI9zjxLp5/Wb ESZ6VpMZ8aAMfJtAU9TRBca4HDt8Ikw65qPP9SagmLF0V1/wMTnRKCmVpgY+FHVkVWFF15yARZ2Y ck0gu9J6LNAyJmUG8gDv0aTeM9eeDpze8YwwxQ== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 33366 fpki-lab.gov. 41ZlXveEqkb62IeY8d8SksNm1tv2haZkH/K7UCskUZjHwWIlaBDtyLgwNGlKyDdeCcD8nSKrtMax w50eXtmRINgiiIu/ict4nFC6ZGRmK3W9M5c+ae7GMEZJCZg/FzNQsI0QHjWEorwLH9sYK3TUGluA bSHFRUo38hGZq7mfnCXy0j3vQ4F1fw2JeDKRbVF+dzi7NlEMtzN4maey0512gwHElkF/D09Ozoqc B38M+xbCDuurAPNvhN4+GpMHZrIrjj7v6HNd9uGbROtxvGVExxkOlhpk9V2cbbMjpEmGnwaLnxix 1ob+yQn5Ct/2g0R1Rq/axthSFRHttw/tsSFiEA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 1924 fpki-lab.gov. K3uAcAIWPx1Bj82d3WeDlbT8zVX7u7IEvNRIcNB5yCAXnWJSVUvx2eQgDrFMnOXivCH455BrvJjj +nMXSTuD27aeKb7quWeaV1oDxkPLsTYyyisrz0W6ydn/WgB17JqfFBILeQef3xtbnVAy1OTQCu3z X/S3+QVUbicK9HHUB9otr4vsp4D1gJvNtcwZZWeL+ce+YT9EjwYkdJqsRzZnpLXwfJkSb7/rdOX6 sTHz899SHHf3qpYikioYpxPG7FDLklQbeqjQr7xuM3WqnSQ2HjqFi9zSO4PQjmR8mMsup93pt2A0 N6q3DvyOE8ajSuTqQlH0rSdESfv6OYN09SEa0w== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 11302 fpki-lab.gov. 0Ua05hziVxBg/9KupMlnrRlp1AHrBXvhaxJHefqKKJjdkpOOgWK8Hgoz96lj9MEiIyTSFzX6h3Sk cV/XSmQC6oKLLXSefWMjWgqArVxL4q0J33GLeVWUgONIKf6MTBnNV2wIRJ7Aaf0j5iHcbnm4SZNx neWSwXY7+/XTA5nMJRRZ2u8cs3e2g8fyeGMGnbWN68GIYwh3J91k8IL1NUKUHM/iChTzZnoSwhCv byD2AJInRQ5wAGWQH0U1kZIw7fzhG1cUjrs5VBj1DeS89Ugo2uIHHp40v5xwAyCrkn5AeHUWKi63 joemZr9NSFYZib22+Z+NTvf9nY7OLP7gfpYKEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAduCvEUuxaaR6qmPecJeadFEYI9zNoKBf2NsY1TM8AUiC+x0nVMJMAeZuDNxakhlZJpjZjZ5 Yeja4BImye82bWE6Gm3q7xCQY0lcHePSsTYMynWaQsaKDQj1wP1MOkrS8ImcXXa5V9XAUvyTUdJV 2X7sWL36EHC/BdP+MWTgIJxCyoaCymwl1y23Z+lSuWtoVv/+vMge0AHBu77J9Wp63nEJW8iH1HVz vlIvU/ZEYKv59lEygfdFWkKFy2JdRnJnrtS86BBG7qXFLEwemwHGB9EZHnVsLtt1TEygyYbk40b3 ZK22fRlqOL+2mX+vFPjRBJXuA8JYidD8WS0+0D/7o1c= ) ; Key ID = 29943`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfDRg/kJeB4KqqF8KyYHjpWhFQ7Fny/i6JhmloiRXeAPrqtVl4NDL9z9ZI4pB+qsU6bK2UXa dRPI4bstTk1VtcLpHvZ5jR2LV6N7y12f674k0lAtepL7eACVy8UPV1DPusY3gPPI+S0NOKwmid8P ueRghqphc/YvyOZl1CcPXW8sdJzCq3xCDk4mLEEdoLO/X+v7Y/OYJHAYjegd5OROT8f1I4Ar5qz6 JjZ3gCgk4xTnpviRQeUugrQMNWg3Hp2BgPWkDzGehkbzUnusHd37oSYWM0iowsOHke6NzMco3A23 IQR3jrNH3kT0ghujfZ36np4sPHTR83b2Hzk+ZhXgQbs= ) ; Key ID = 33366`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3oZtEx+J+n/HmLw3pwBgdzrbXVwOub5/wFJkblMDzxiAVPnsKk6uQVyBD95Ro1FE9eOwHB XmC3Cmzs5BKIW4KIT2bYeG73dbjsOZE3ZW/hpBJ7xDA/9czDjraQDkfA3Qrdlw5pVDOsNb3oUgnz wFvYa686Ha0mp0xVpwDy8hlTSjhMzkBJ7rCO4QZQsoGstIDNm63TlKUJn0qjS63LIgE+fwKjhoqV 8ZFdh8ycB2fU8LURud6NkTLOSgZI5Y5SD5cV1MI3shBGrGTZCEEueLZjU7qbV0LNVsVM/AL9HePx TBVxxudw3n9HwfsvOocABvjyXyGry+Czc0eI5O/Hzw8= ) ; Key ID = 1924`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdeod0HDjqli3eTfoaxQ1Ohlww3hWCs4AXuNBXSfs6OXp/Ne7OdWCXggQ99qqzHV2SGUQbw8 OhX9zKP8T/9vmnpELgGkt4ok7IViIMPIUK2L1j48KRe7O5REU/7+z2IsdRiYwXsmoZGyOHSjjhGO KmDUHASXlDdqCWwBHQfm8I5vPcbjx+0JDWWRyokrlhnYqb01LdIDRuHC6uLEO7wEn0PlAZethQDF 9W/l1s0bRd1ygxVEQUHK9ESnEADwXIu6M8tgRth7OAaCzyBkz0BjhKMFTIbuxTQpY9VY5YBgma/B DuNWWNBlTUEuP2mrRRLAjeaP3owdgfAmzfEeuGRdFB8= ) ; Key ID = 11302`
	DNSKEY=1924/SEP is now in the chain-of-trust
	DS=1924/SHA-1 verifies DNSKEY=1924/SEP
	DS=1924/SHA-256 verifies DNSKEY=1924/SEP
	DNSKEY=11302/SEP is now in the chain-of-trust
	DS=11302/SHA-256 verifies DNSKEY=11302/SEP
	DS=11302/SHA-1 verifies DNSKEY=11302/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 29943 fpki-lab.gov. TwRcH75eH0cIS5Au3/AzOzDUqaQkeEUXxA7jy88sHzlNGX3r24piGtB47GAJ/VqLscCpOQHjAkuK evNAEEkB2NVyT782GU/D4J0AGf0y/mGZy/lBeg67egsAFqOSBXBUGbVJZgtP4Elcei5COucvNIdm uhPAruCHo1+KU+skecR3IQJwxs3rcBWbGb5KFryzkXXzcV6VJsO5P9c44cT5ACG7gI9zjxLp5/Wb ESZ6VpMZ8aAMfJtAU9TRBca4HDt8Ikw65qPP9SagmLF0V1/wMTnRKCmVpgY+FHVkVWFF15yARZ2Y ck0gu9J6LNAyJmUG8gDv0aTeM9eeDpze8YwwxQ== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 33366 fpki-lab.gov. 41ZlXveEqkb62IeY8d8SksNm1tv2haZkH/K7UCskUZjHwWIlaBDtyLgwNGlKyDdeCcD8nSKrtMax w50eXtmRINgiiIu/ict4nFC6ZGRmK3W9M5c+ae7GMEZJCZg/FzNQsI0QHjWEorwLH9sYK3TUGluA bSHFRUo38hGZq7mfnCXy0j3vQ4F1fw2JeDKRbVF+dzi7NlEMtzN4maey0512gwHElkF/D09Ozoqc B38M+xbCDuurAPNvhN4+GpMHZrIrjj7v6HNd9uGbROtxvGVExxkOlhpk9V2cbbMjpEmGnwaLnxix 1ob+yQn5Ct/2g0R1Rq/axthSFRHttw/tsSFiEA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 1924 fpki-lab.gov. K3uAcAIWPx1Bj82d3WeDlbT8zVX7u7IEvNRIcNB5yCAXnWJSVUvx2eQgDrFMnOXivCH455BrvJjj +nMXSTuD27aeKb7quWeaV1oDxkPLsTYyyisrz0W6ydn/WgB17JqfFBILeQef3xtbnVAy1OTQCu3z X/S3+QVUbicK9HHUB9otr4vsp4D1gJvNtcwZZWeL+ce+YT9EjwYkdJqsRzZnpLXwfJkSb7/rdOX6 sTHz899SHHf3qpYikioYpxPG7FDLklQbeqjQr7xuM3WqnSQ2HjqFi9zSO4PQjmR8mMsup93pt2A0 N6q3DvyOE8ajSuTqQlH0rSdESfv6OYN09SEa0w== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201104065352 20201028065352 11302 fpki-lab.gov. 0Ua05hziVxBg/9KupMlnrRlp1AHrBXvhaxJHefqKKJjdkpOOgWK8Hgoz96lj9MEiIyTSFzX6h3Sk cV/XSmQC6oKLLXSefWMjWgqArVxL4q0J33GLeVWUgONIKf6MTBnNV2wIRJ7Aaf0j5iHcbnm4SZNx neWSwXY7+/XTA5nMJRRZ2u8cs3e2g8fyeGMGnbWN68GIYwh3J91k8IL1NUKUHM/iChTzZnoSwhCv byD2AJInRQ5wAGWQH0U1kZIw7fzhG1cUjrs5VBj1DeS89Ugo2uIHHp40v5xwAyCrkn5AeHUWKi63 joemZr9NSFYZib22+Z+NTvf9nY7OLP7gfpYKEA== )`
	RRSIG=29943 and DNSKEY=29943 verifies the DNSKEY RRset
	RRSIG=33366 and DNSKEY=33366 verifies the DNSKEY RRset
	RRSIG=1924 and DNSKEY=1924/SEP verifies the DNSKEY RRset
	RRSIG=11302 and DNSKEY=11302/SEP verifies the DNSKEY RRset
	DNSKEY=29943 is now in the chain-of-trust
	DNSKEY=33366 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 33652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201103065605 20201027065605 29943 fpki-lab.gov. c3CtRlyQfQxbdS26e8UlQ8pCuuJ9rciBi7lIOBZ+9mPi6gJ7QnjZjTdUEvmTi91Qb3UsOIo1Utvr J7/IumRUFoPN0RgxaMAsmmvMYHPw1zTDvd/OQxft8sxo7y5/HPl2xuxyOmTB3gvjS1jUTvIzME6G sGhh4Tp6Yovdja+bU0V7kPsOVYu0lbWgOw/imB2JsZWZTxui4PdNlja7H54/0x+7ONmMIg4zwui8 ip/CdPUpwFItasNReI3ec2fEHNul3e65mYnX0+CbLTsnCwfXnCuBQ7CiVZOgyv162H1Yx5InA3yE cZRw0leK8pVt9m3wS4wBMWjJwKQSTkBGQYLaUA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201104065600 20201028065600 33366 fpki-lab.gov. dczVxpmiu0iO+5K+gSvO/5jFsuoGJjcV/RDWI07GIf89SqMBLHhYr4iLbdVXN3moqDfbpVz25ZlV DJOcvOFxmJ1f8epaLW4laGEEAoG04O8qLEgo3m0ziOD4FcZUrWy7N4sGX/K7CzKKQKboFlEdCGYL TSWRTw+mQBn9JiiMAJMn8dCKBSZU6kh1f7Q6GgbsL3MI6+py/pZxUQlX5oGNNysldmpKNDOgZL61 uuMASIYCuuGRqRiY7cOnXIouZaEMbwerywaEhJw6FuGO3m2ZcZ9HQ6Cr6jlojjdWk7gAekIiChie Oc16xCoR/3eVr/vu6JFLJjXkc8IOW7xcz5tFjQ== ) baj3hmu383lb469butv528rta5su65cb.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 43cb638da1e1e889 baj3hmu383lb469butv528rta5su65cc NS SOA RRSIG DNSKEY NSEC3PARAM ) baj3hmu383lb469butv528rta5su65cb.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20201107004549 20201031004549 29943 fpki-lab.gov. P7PA0c3aLkrZM9T0tik/tcvTa6OHeJQjsZc0hnpnQ8jZVKfUo6OCCZtjMbJOjogDRF/YHP7n+h6C PAyHvdf5hZQtHYkQ0DJ7t5qhizykwjS1Pgp8t5+qzQspkCFfCd0i74hr3NsmKCUzdEzVz7yDhAWP OK35hRad3OJodZzM2lHkHXC7/mlL4Ky9ZdXLkK+JhBGRuH/ybicVcYW3gS2APJgsuDuOVX3dVkdp ZxIfMfetM047Uqlrg5w+TtAJSiy1cWQohM83RuZHVtct9k+z/lzD3tGiTDgRR4MXPnO7/C45sO3b VgBWXtVAkfcwmk4aHX0jLFUFD2q/74Jv01WpuQ== ) baj3hmu383lb469butv528rta5su65cb.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20201107004549 20201031004549 33366 fpki-lab.gov. f4ZLix0rmw4w43THt+Wz/T8kgpCHNiO7A0KHbN7WR5MAyNZHzxxhl0OGmNBU5mvqaN8ca73VvnNp lfRFXNMMuAjj2xK9wFVbllAF88cZLqAGDwwP/jtbvY9mMUmZvBQsxV8E+jLjgatyBwbqkhF34fIO kT1QMBcCv9/GozdF2ZtFbkLkW4ysC4zzxCmWy9uLbgcxM2XpEAcS5RbTEP3VBSITV4dm2nu6RSGm KZATrlJVZAjARYkpAx6jNDjNLifcbI3c2ODPXx/IQo16NhbCb1sSD8IHcpR8f77wbmzqgimf1Q1R u2BDBO1hu10w8aybcukrt3MZ1vlQFBfNDg1K3w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 29550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201103065750 20201027065750 29943 fpki-lab.gov. 0VZ/Wv9klXXfiagVYJwEUykxJ2i4UJJ1QXyuIXXwMr3PD2TWhe6d1uYrPGnkl/CantqB2iqiak0C P01ovKKeCWZp7hzXUBj2Al/0EkCJqoZHT1/3x5tv+3Qus/Q+hWmJKNXgJ17fG505JXLzj2wd4CcU SP+8wv5L+UsCjkpLMO5RnrtRbVvtuFWrl7KntwPXF17cQb04C7w35va2NnsS4WhK4g2l0rQcsAmv Git2z4xoX6XiHjCniTAWpMg2JSUqfNcj7HCxlfN8QA/7o/ewW8Iov1PSc+XJ+OVy6wFrPJKUiZR+ 0gGDGha+1KoUlp2cpHIBOW5f04gW3Y1LvvwMGw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201104065150 20201028065150 33366 fpki-lab.gov. VQqui94QDuWJLWIpdyA97tWG6qA8Dm6LOEKkyLrEsrJqQAbEyL49Xp10bjAb4bwPKzBJEmcD7AR+ b1z8gzQ9iUsvnYinf2b4OsQi7Op2qBt86estYppFSaYpTXjryTq65QzsCU/IicaSr249b8NsYk5a 2ASOP4DTlHYJ2mTPBJXRi233bfygebNmQHNDwQ3B28hixrVN2OJc1AdJq4hSBri7E4ebhiLknJUT zyJz1BrLMOufaxXsFsfGx+MMdKdIsCsAFeEqqi3Yc42CWhaOjiV4eiPgJ8JiGXX2HAkMsNtimeB1 a8dgnzk4e+LQHMQ8BQYBGpEpG2i7XbudExeW3w== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20201103070002 20201027070002 29943 fpki-lab.gov. VeKK9TmyWjHTaHZ2ZinR6c3ghtGGDNmcTxfGTOmf3lGeBFnAj8BxQ1/t+OmOndjSKd6RD56ZKUpU Uu7CJm+/43CTN6bHmYIvHVJIiM8vP4mdakF76BvcRczaa8sCN+Ck7bx/7CA9tDGONuR6PIKeEglL IAI6ec60TjyjNeBJoviPlL3E231YHnOqpuYHv9u+JtpidBV4IQ2BxjyASvP+OUXPxxCDIJvZY/xN nao8WBV9LxqBgUFUGDqNKXBwsa5CPniRgiWBmFeuTAoCRFX2/sDTszSLXyFpw8CrLwIBVtIzM/JM sTvBKhTr8jn/aIVw2dDziot8FHq5r/TqjyWpVg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20201104065622 20201028065622 33366 fpki-lab.gov. fz+LEjBbKVZbInrYL4wQv70grlgqN26Fz/7Tf7ylcUSAtwfvpBn9jLEphIT+u4mL5Y+rETxt7FEy h+2R92FoGvxSufwNT16b0W5pc6PiLq9B2B72ffjM3oLRaxdp5aGvFb+QwH3Ml3T3F7/1s0z09ZID rAsnUYeeSdOn4RFYvcFZ0m1D15+fxy2+elrJexosT8GXLroiQQGJ5JpvIYHYIoUICmYYeBQ6OnyI y/R+MhAEoHMwL61hF0Nk98zoR4afq7dL5slts4PmDJ0QgrXW3yj2ac5FzFEvevtAqWNUo8xaKw9V 65qhApVD4LAhuGPGUa1ZJM2kJVEl+1RG1wczZg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20201103070002 20201027070002 29943 fpki-lab.gov. SBk+DXlAw2wa4+9l1qfyIRrMPew4qnu9uWn9EcI0w7kJfVXg9fdA2/BcugPH6VXIbJfZRBycXpq0 SASTW7+snwzTU6WeZpVU7PKDBF0g44RzXLFbjJMlJPuBRzNs4VEmqeIDdJO/vJfc3Gzjd97GZrIj ++spbMoRN/86CVC2Bx1R0R0a2YXHEod/xOVqPodYvAuHpyTPy2QO1Ero7iCKFY1Lwm0S5XzWi4O4 w1OkaO18MuZYHdSU4O7Vzq8FIvvEA8lYSFkgXaKrymq5wGFiTshVhFU9iWMC2pQ/iq/S2gjYP/Ne BpRyfz77sQ6KPTv/9vNv88u/UI7Sz2L4H/EaCA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20201104065622 20201028065622 33366 fpki-lab.gov. SRHMwBKeas5Uv87G6hYODFGTDQ0/5B5fxFn/pyyGOeJC3HLoRWMOTsQ2oJZAwbnPvgJ/xjeh77vb QdYcOTYbtVYQO0gGfHx4ch1WIYuQpL5sYrxgwMGUs2QJFGPPp664ef45O1mIs7nhg21QG6iEyNj0 Pbvwuh0yLK0a/P/UplJgML9sRoYdYeV63PLZeNQI79Ghxg3G7kmUsXP7tUiCF9OZeP0LDzHNKI49 u3Kn9/yuh6rZkg2JIG3SYBq77q8s8UwScB3HTYvcdadZUG6Orztlszs8VT4Lb5UGWKVFDHl0Y+Nb 3OQwxmWZQ9MvIa0R3YqpWuA6adYKaEY5L+5Wkg== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20201103070002 20201027070002 29943 fpki-lab.gov. TTzP2En1OPXHcfKtAyO5onovkMwaaHoMD47ceEiznmCCbO+ZCKk0BEAiHPLPKAuQaIeD9H/VE+yv eSN9WsVVPgf4nu163scMSsC7eU2krOohJd6VaPilkKu76lB6Zp2cfcIAleUeebfXTV+BQn2vsUS4 kLI7veF8YAQbsOQH/87mGi9xj0wKbm3c/WjsZFoSa/SZO8QWtoXypgLpemYwUdnxkjaSfkjsBfMQ aEBl+vYOBQTNe7Di7c1SgqGJOjrlmM73W1QHPlEc94bX+NfrdUzBiJ6+NItGqaLMoU01Ylg5lZ/a 99NoKb5mtxamLZOGPqELjTWnIopSCDE+QeyqWg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20201104065622 20201028065622 33366 fpki-lab.gov. mtUkOMJkVRY+HPcrG34GOBUpqtNXuyOrCyKARe1jq+6XCL2Q0mWe4NcxO1VdwyFqmcvOfMGbAHyM wi9sWCIiz4U9eXAN8v4qfOmjYSqiBN6pxcDZ8/wNNyAojkmCSSKe0rEJUTYYkLfcDZ2xBc1cPvXx 9CGx+9mXncQcQuvDlXQ9/cRKJje5xdIHMWeigtNYv+cNX6X+a/KT0LaXghDWjrczadNAC8naeX5n RF6M3SBXNA8zJju9VAUQYIATO1lYkdlPAXJnKPU7RIct8bB9YQkbo/1GMvtnIuqrb+/BLf076t4X mrsEOsoLeLG0WnPNxvTvfUaiTt32T2129krqGQ== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20201103070002 20201027070002 29943 fpki-lab.gov. DTs1IGqTL8C3Sr3CIhaaw5uQPOVjI9y+9y7C4yBW/0tey3hSsUP9661F+W9IdEs0MTolezhQEvBj 3JL7903hrlfnLoVhDjHAiQtBnoGG06p+T8AnnCvOZfVOieVoeZ3yOKwzc13dBtnTWMRnC3wVHCCY o2tn0W23VfaAspN0pKozN0ikZnE00Jknw6Uo1mkt7JNi2jXlOiHoEPPEjbb6+ZTTEesnRroTL7yB QAIK//9Q8/4o28k2ra4J2Puk6nKO/v3TEdUITON7dr6dliMMwbZAOeIW2d9eMr06dLOPTPa5yYIh slnay+544+iclPl0qoLsOmWHfS1RZ5CmeKITaw== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20201104065622 20201028065622 33366 fpki-lab.gov. nl+gOd9gNiRPiFwtsKK+bXu7NGLRrFcH7dpHyQMPL52oi1AGtoSpj42Hr3LIyV1+CbJW0iUk+NV5 L4bNN0QuPrba5kVwqh2PTp5X+nYbdraTbRO4n3tSGt530qo4JszZKvAMDwH31+zi4haOaOa3zwer eOWXJENaO7UoX1yNsvAauAxwkRQD+wAYRv4ciX3Np4aI4sguFYgABpAzO2tBlRMnc4Ue48U1hrGH u7R+X16vw0sUzHsxoNQR4emlRNOENpoLo1YMoCb7aQKoHT+szKk1lXITyTLrMcB7nNDVHZPm6KIx 6WJAuX1m1qCZpS7MOA33/WAu00YpbKhUXoFpvw== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20201103070002 20201027070002 29943 fpki-lab.gov. vKNHwqMi1IuBOkXQXn84QVRnZzCaQQdKvK5YxLXXGHzsSTEci74FAbBG9VWVwNCYP7lvx5MMm96G Uk/QtoWd6bGY7O0nC2NhWl3sn7jKeSxgFODoO+5BS+cWR3vH5xqXMSsVGjT2Wr5qLxv0zrPdEiVE z6JfXINi+yhsF4bHINI3QHiKGT2077rNIVREBeikCL+g7LwyHRK0JQ5vjlCDVbW52+GEY22eaHyj D++2PZ2Dgl3OeBx0EaqPQIH/gfLSY9RlC/86G19UQ/rgBjf6szNwpw+IQacPzzQcGcFyCVco6l5N waD0bbHa3qMB8vkyAMwoA7VBTK7US+aJWS/4zg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20201104065622 20201028065622 33366 fpki-lab.gov. s2SkXMcWY+dbY+pDYuj69AnJbVxTJoC3L0NMk2lv1Wru6YGsXYAdBXxR425C8MO27zTdsNMNCJmh ivbfgBGu5yUToab0+bZS0tYliPVS9B8105Ci4exZxkadE+Z7271SOaFQHd8LcU1r1b4M4RqOWE1N aSc1fax+WFIpsxfUz6Egjrkhq21CygYR2PvpNRmwaPNOLu6pWsE4sMsXg2c3qNEh88gMk/ZnK4uy oZ1XIG8YCJdjaAee5ve/4L0LbJqQOp0v8yVTVqSdv0n4H8RCIRmTAgPPNqkwWZZ4TfPX61pqi1Op sPsFnhfQmBXnlZ1IP/qePREulblCrUTcu2GgjA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 14432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201103065750 20201027065750 29943 fpki-lab.gov. 0VZ/Wv9klXXfiagVYJwEUykxJ2i4UJJ1QXyuIXXwMr3PD2TWhe6d1uYrPGnkl/CantqB2iqiak0C P01ovKKeCWZp7hzXUBj2Al/0EkCJqoZHT1/3x5tv+3Qus/Q+hWmJKNXgJ17fG505JXLzj2wd4CcU SP+8wv5L+UsCjkpLMO5RnrtRbVvtuFWrl7KntwPXF17cQb04C7w35va2NnsS4WhK4g2l0rQcsAmv Git2z4xoX6XiHjCniTAWpMg2JSUqfNcj7HCxlfN8QA/7o/ewW8Iov1PSc+XJ+OVy6wFrPJKUiZR+ 0gGDGha+1KoUlp2cpHIBOW5f04gW3Y1LvvwMGw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201104065150 20201028065150 33366 fpki-lab.gov. VQqui94QDuWJLWIpdyA97tWG6qA8Dm6LOEKkyLrEsrJqQAbEyL49Xp10bjAb4bwPKzBJEmcD7AR+ b1z8gzQ9iUsvnYinf2b4OsQi7Op2qBt86estYppFSaYpTXjryTq65QzsCU/IicaSr249b8NsYk5a 2ASOP4DTlHYJ2mTPBJXRi233bfygebNmQHNDwQ3B28hixrVN2OJc1AdJq4hSBri7E4ebhiLknJUT zyJz1BrLMOufaxXsFsfGx+MMdKdIsCsAFeEqqi3Yc42CWhaOjiV4eiPgJ8JiGXX2HAkMsNtimeB1 a8dgnzk4e+LQHMQ8BQYBGpEpG2i7XbudExeW3w== ) 5bd334ck9kbpv62c7rgcq85qpl3tl9na.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 aa078e9b4c16a703 5bd334ck9kbpv62c7rgcq85qpl3tl9nb NS SOA RRSIG DNSKEY NSEC3PARAM ) 5bd334ck9kbpv62c7rgcq85qpl3tl9na.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20201105005556 20201029005556 29943 fpki-lab.gov. 2kOd0t3+H9iwASZXtVFybCyu1izJINtPMh2e9GPieps4dbCPxPlfghUr3/66S6kkYHCXF0RIXjCg 87lQgH36Ik8HHmF4RAYNyoImqAvs9YJPFA0wgycWn35zTKW47p0+H62tceD5h7HWaqQjLYz+iTVe nw2nspHr1ilWxM79CbjOMFfkrVvugVef0MUl3wzenLm1qSdk9buUbhoxNZzRh31xDckz24m9uy4T qJxZSElNKNtWLI0HxOBjMyD9y/R4vyCS6XWJnyTMLYedsG6OWK21r6/mq+TTL00uMq1ZyLxbfNZz 3Roptx/NqLmdMbJyP/nWDqxkTujt53LLQmywYg== ) 5bd334ck9kbpv62c7rgcq85qpl3tl9na.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20201105005556 20201029005556 33366 fpki-lab.gov. m17pg4C90F/pnWsnCXAVqy0wTF0lppDMWfHq4mRQ15mtp9b8pLvHDyCSoxr1no2OMjXeSKJLZ9u3 w9B60RTLmvAZliEncMPF9n+xY8JdDLshueU8f4P4G9dgRWYzArV0/nkFQo0Tapf6NWSG8/rlM9HC je+J7sC0DTCR7TAGSqSdsx3Ffy/mLroWT0AMs5opOCqt1TOjnbl5+MpL5OKQEGw8zWPnFHfHl7Wp sL6cjd7BTAx+FIVwjkC1znmtu5CJikjjOHwleIIa7qDp2aqSoVS1ihPxkA1kVeBsUkXQ7ZPvnCu/ vLVsjFbpwmS1EYUHjhtpfvdOaHk7PRt3P3IzuQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201103065605 20201027065605 29943 fpki-lab.gov. c3CtRlyQfQxbdS26e8UlQ8pCuuJ9rciBi7lIOBZ+9mPi6gJ7QnjZjTdUEvmTi91Qb3UsOIo1Utvr J7/IumRUFoPN0RgxaMAsmmvMYHPw1zTDvd/OQxft8sxo7y5/HPl2xuxyOmTB3gvjS1jUTvIzME6G sGhh4Tp6Yovdja+bU0V7kPsOVYu0lbWgOw/imB2JsZWZTxui4PdNlja7H54/0x+7ONmMIg4zwui8 ip/CdPUpwFItasNReI3ec2fEHNul3e65mYnX0+CbLTsnCwfXnCuBQ7CiVZOgyv162H1Yx5InA3yE cZRw0leK8pVt9m3wS4wBMWjJwKQSTkBGQYLaUA== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20201104065600 20201028065600 33366 fpki-lab.gov. dczVxpmiu0iO+5K+gSvO/5jFsuoGJjcV/RDWI07GIf89SqMBLHhYr4iLbdVXN3moqDfbpVz25ZlV DJOcvOFxmJ1f8epaLW4laGEEAoG04O8qLEgo3m0ziOD4FcZUrWy7N4sGX/K7CzKKQKboFlEdCGYL TSWRTw+mQBn9JiiMAJMn8dCKBSZU6kh1f7Q6GgbsL3MI6+py/pZxUQlX5oGNNysldmpKNDOgZL61 uuMASIYCuuGRqRiY7cOnXIouZaEMbwerywaEhJw6FuGO3m2ZcZ9HQ6Cr6jlojjdWk7gAekIiChie Oc16xCoR/3eVr/vu6JFLJjXkc8IOW7xcz5tFjQ== )`
	RRSIG=29943 and DNSKEY=29943 verifies the SOA RRset
	RRSIG=33366 and DNSKEY=33366 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: