DNSSEC Analyzer - FPKI-LAB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-20 13:39:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1425 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1425 bytes) ;; HEADER SECTION ;; id = 8428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to j.root-servers.net for FPKI-LAB.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 667 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (667 bytes) ;; HEADER SECTION ;; id = 46352 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 21060 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 50688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 24142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI-LAB.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 498 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (498 bytes) ;; HEADER SECTION ;; id = 2533 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. crBXvFsrcj0fa8W4O1lL6XCyd5eH6kDuxewIQqqDc4aUdrycEVeAvlEEOsIZU/kJZMtzjz3ck7fs 2pszPj7oKykfiQpbckSSxxFMKASO6qPxiwciVfZi5NOC2nIKNfEjM8B8kYuYQDi0qDikR2abGbMa u/c54f5Y+Ik3ELSBzAU= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 498 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (498 bytes) ;; HEADER SECTION ;; id = 31338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. crBXvFsrcj0fa8W4O1lL6XCyd5eH6kDuxewIQqqDc4aUdrycEVeAvlEEOsIZU/kJZMtzjz3ck7fs 2pszPj7oKykfiQpbckSSxxFMKASO6qPxiwciVfZi5NOC2nIKNfEjM8B8kYuYQDi0qDikR2abGbMa u/c54f5Y+Ik3ELSBzAU= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to d.gov-servers.net for FPKI-LAB.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for FPKI-LAB.GOV/DS: 'IPv6 transport disabled'
	Received 372 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (372 bytes) ;; HEADER SECTION ;; id = 49802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87 FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. crBXvFsrcj0fa8W4O1lL6XCyd5eH6kDuxewIQqqDc4aUdrycEVeAvlEEOsIZU/kJZMtzjz3ck7fs 2pszPj7oKykfiQpbckSSxxFMKASO6qPxiwciVfZi5NOC2nIKNfEjM8B8kYuYQDi0qDikR2abGbMa u/c54f5Y+Ik3ELSBzAU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=5320/SHA-1 has algorithm RSASHA256
	DS=5320/SHA-256 has algorithm RSASHA256
	DS=52519/SHA-1 has algorithm RSASHA256
	DS=52519/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. crBXvFsrcj0fa8W4O1lL6XCyd5eH6kDuxewIQqqDc4aUdrycEVeAvlEEOsIZU/kJZMtzjz3ck7fs 2pszPj7oKykfiQpbckSSxxFMKASO6qPxiwciVfZi5NOC2nIKNfEjM8B8kYuYQDi0qDikR2abGbMa u/c54f5Y+Ik3ELSBzAU= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=5320/SHA-1 is now in the chain-of-trust
	DS=52519/SHA-1 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b`
	`FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 )`
	`FPKI-LAB.GOV. 3600 IN DS 52519 8 1 1aee6b49f50e6cd019575a540ebf7dbacfe1ef87`
	`FPKI-LAB.GOV. 3600 IN DS ( 52519 8 2 990f0f9cbe624b44d7b98890c1b8c2064c0a90fda8c505f9e0066ca32fabd8c5 )`
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 18151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZqUcc9Nr9uCjuwGBSTFtPDZ2yv8LH5lWq9CQFXfTELgRXmEM3Gj7qQRa8KYx1sewG43jSFh SdrkfTnEi23da4QIuzeqpfkGvyVGSPa1FPUcw+MKNjK0wS63NFSuCyjM3Df7NqlcOPjsLo4x5X/q O6CyC7hObkQUZp4RTW7SdsFgXxHRl/GxsZMfQ2HL65o34XPJ6XoB/vyCK6t/RFF1ZPM51i2wqA8W jMppSyUlirb27K8+iUo3e4lKPE7sg2iFiU6e64fJckqGlMoU/N9ClRYf0YDX5q1rOgg+gsbeEHl1 XWOZP52u+GST/UE9IjKdk1VnFkhd+kj1m+OsC8rfYU0= ) ; Key ID = 19905 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbDaMa/pcpuAds3jJaFSnbx3o3qIg9xtggk7zKQsrXO03QMh91eqXcdkUeEyB4NoaoqWCkYF LYBdgQNy/ur0FZyccaIzOZYQveVjKdwUujN+UpvFa7F80UvxOCV/aKirRmmawhqU0s7Rlx4J9Imz S0GUJdT4Yd1RhTHiUWoSqf2lQEs7IYqPcMcmQP6Kowng+poVq38I2vVvffxHh4FbaosjP+sXnJy6 IsRHsHc8p3rE4idJRx7javBNeEcGoZCNapW3IZVPn4M97+f6wvBMxTvQ8bDSe3++4Q2qo7sx4Rf2 VtXyou4w1PBdoFE+aZ857SiwRu5XUBZq+ZOMrbY1hCU= ) ; Key ID = 13098 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ/axMAxCnqd50sRSnP6ICXUcFmU1vIELhfNekffZ7wfwRFYRVUKq4k7uStFaQcvSiO3gbE5 6S2l63r2fAQ2WEvwKDfuPLG6NRHrIpbJ0y7g9mCVUAQ263XQ7VyzYqv7qgwPrHX6+TFx0TPak53f sTdVWEAdUFuLoHyN47/ULNUWagv+X4YjEEUYSANYRaqPx+TfaEnwUkdB4ST2aP/uIQFqtfTIs/kd aa0gexzNY5nr1uwmOQ6HGC/LBwAOa5HpYiGEKLgBiDHjighg3xN7AiTsObhxpFrW6/yaCBEP7ONj ZODcg02T6O8l1x4khIYHYbEDAPcYBvn0zFChIOIFfJM= ) ; Key ID = 52519 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 19905 fpki-lab.gov. PxGOeZU4YDgRldMtBQlcjZktmrJIMzN7Zmym8KJfFtNAl9WyLr4h/Bjgyr7edJvwrfDyzk/T2kjm di9Q+4HjySZfdvEl/ijsOw6pvVVPJLb5+V8gFu4kqzo070IVBj3kDSiExtC20viYRCZBY9l1UySG y8+PzqbW2QFUIpYQSQASrlFPJr0etv7FW+C7ROmEBBwVCHcc/L9t/kPr2O+cC9T7uV0hmMo3dG1p NrXasVWmP/Y7jkPWoN+h4I2yuDuaugTVmnxvtHatKqmSCc4ifWVfxvHn/wHJdGQavCNcl4rWpwAG esMsO7G6rwBwRXUi183EP+vTD/bXVN907EjP/g== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 13098 fpki-lab.gov. kae+CET3HE0oryHfmWb1zPuvnajylLRcsXpTaERmk5miDevvT6gtVoooXpyPmCDqVZOattyugZPw AGwQR5a8xmuEJq0apkvFYP0pKISmbpGIUgd+//G+y6/CtdPIG4zGwQBocLZTdpu63PCMOdhSuSHe HL9b8cWNtJvvAbnVYldwFtTtvpyK6Vj+swG6Di0KaSZ61/+Yskf8xaa9VhXOsucTFsx+7nUtQi14 9yqzJng/TIBUOR5Yc9SOTTkfzgQfY2dc/PQm5Yl89mSZXtAoF7q2xCpyMc8VaPwGe76WdKhYki+p BgXyK3zzT4fmMZBIwuVlhsjhuI4ZvL+s4KZK5A== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 52519 fpki-lab.gov. DvCUnnI/K2z44/UV0nwwP3YkRaOppQZ7ThagLpmrJo/qOOAyTAyOO9B0eXTjMJTPoX3Drbglg5xl DNZ6K8VTXtMDXGXsY3B+MnMT+EJQuaDFMx2+KzVrYBShzEnrFcFNij84AwqbRGvUocYlQGkAvr0P P/rxvAyIUX1019bjp73G/EaHF+4cJSEbnfROJVpVce6SgtNn+fn2NWo8UIQOEB0SonJKlswvTYHg Sd4Kx7m5yi49lWEXc7CFW1DtIy4ILZxflwc5vcczS8JLpDCwXBg2YjWt12pHouVpS7fzojsAP5Ka tjXMSJq8BMNlTSGpjuQ+bOZ5Cw8ldjtiQehCjw== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 5320 fpki-lab.gov. qg7zziU0b7YnX7oXfnwW+1EOljEc/RNcYMCVzs+qHR0L6g9IE4JYXSXHKCjvsSchKLt4R/4Rp0g3 g18uTQSZfrPO2VWh33/kgrJMEReluTD3UTn9AsaBxWyyzX7a6iBxp/hV9pgIpFuQw4DVlgkcSIqM bsS+zmL6fhEmnb+Ys84rdcJj8flFlIgs8RjchFXR65fkuGQ/9CMjdLRd2LlcEOryfKEYePT4uvw8 yTK6JndsK7JpqO8WL+jHAS8g89hzBoumfjaA/xUFo4MWXTPG2CB/ILRpajXIC2saiHxHHD5itpDi mCGvZV46VxWmzCVscckhC7sMUNc8xBNswUkoXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZqUcc9Nr9uCjuwGBSTFtPDZ2yv8LH5lWq9CQFXfTELgRXmEM3Gj7qQRa8KYx1sewG43jSFh SdrkfTnEi23da4QIuzeqpfkGvyVGSPa1FPUcw+MKNjK0wS63NFSuCyjM3Df7NqlcOPjsLo4x5X/q O6CyC7hObkQUZp4RTW7SdsFgXxHRl/GxsZMfQ2HL65o34XPJ6XoB/vyCK6t/RFF1ZPM51i2wqA8W jMppSyUlirb27K8+iUo3e4lKPE7sg2iFiU6e64fJckqGlMoU/N9ClRYf0YDX5q1rOgg+gsbeEHl1 XWOZP52u+GST/UE9IjKdk1VnFkhd+kj1m+OsC8rfYU0= ) ; Key ID = 19905`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbDaMa/pcpuAds3jJaFSnbx3o3qIg9xtggk7zKQsrXO03QMh91eqXcdkUeEyB4NoaoqWCkYF LYBdgQNy/ur0FZyccaIzOZYQveVjKdwUujN+UpvFa7F80UvxOCV/aKirRmmawhqU0s7Rlx4J9Imz S0GUJdT4Yd1RhTHiUWoSqf2lQEs7IYqPcMcmQP6Kowng+poVq38I2vVvffxHh4FbaosjP+sXnJy6 IsRHsHc8p3rE4idJRx7javBNeEcGoZCNapW3IZVPn4M97+f6wvBMxTvQ8bDSe3++4Q2qo7sx4Rf2 VtXyou4w1PBdoFE+aZ857SiwRu5XUBZq+ZOMrbY1hCU= ) ; Key ID = 13098`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ/axMAxCnqd50sRSnP6ICXUcFmU1vIELhfNekffZ7wfwRFYRVUKq4k7uStFaQcvSiO3gbE5 6S2l63r2fAQ2WEvwKDfuPLG6NRHrIpbJ0y7g9mCVUAQ263XQ7VyzYqv7qgwPrHX6+TFx0TPak53f sTdVWEAdUFuLoHyN47/ULNUWagv+X4YjEEUYSANYRaqPx+TfaEnwUkdB4ST2aP/uIQFqtfTIs/kd aa0gexzNY5nr1uwmOQ6HGC/LBwAOa5HpYiGEKLgBiDHjighg3xN7AiTsObhxpFrW6/yaCBEP7ONj ZODcg02T6O8l1x4khIYHYbEDAPcYBvn0zFChIOIFfJM= ) ; Key ID = 52519`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320`
	DNSKEY=52519/SEP is now in the chain-of-trust
	DS=52519/SHA-1 verifies DNSKEY=52519/SEP
	DS=52519/SHA-256 verifies DNSKEY=52519/SEP
	DNSKEY=5320/SEP is now in the chain-of-trust
	DS=5320/SHA-1 verifies DNSKEY=5320/SEP
	DS=5320/SHA-256 verifies DNSKEY=5320/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 19905 fpki-lab.gov. PxGOeZU4YDgRldMtBQlcjZktmrJIMzN7Zmym8KJfFtNAl9WyLr4h/Bjgyr7edJvwrfDyzk/T2kjm di9Q+4HjySZfdvEl/ijsOw6pvVVPJLb5+V8gFu4kqzo070IVBj3kDSiExtC20viYRCZBY9l1UySG y8+PzqbW2QFUIpYQSQASrlFPJr0etv7FW+C7ROmEBBwVCHcc/L9t/kPr2O+cC9T7uV0hmMo3dG1p NrXasVWmP/Y7jkPWoN+h4I2yuDuaugTVmnxvtHatKqmSCc4ifWVfxvHn/wHJdGQavCNcl4rWpwAG esMsO7G6rwBwRXUi183EP+vTD/bXVN907EjP/g== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 13098 fpki-lab.gov. kae+CET3HE0oryHfmWb1zPuvnajylLRcsXpTaERmk5miDevvT6gtVoooXpyPmCDqVZOattyugZPw AGwQR5a8xmuEJq0apkvFYP0pKISmbpGIUgd+//G+y6/CtdPIG4zGwQBocLZTdpu63PCMOdhSuSHe HL9b8cWNtJvvAbnVYldwFtTtvpyK6Vj+swG6Di0KaSZ61/+Yskf8xaa9VhXOsucTFsx+7nUtQi14 9yqzJng/TIBUOR5Yc9SOTTkfzgQfY2dc/PQm5Yl89mSZXtAoF7q2xCpyMc8VaPwGe76WdKhYki+p BgXyK3zzT4fmMZBIwuVlhsjhuI4ZvL+s4KZK5A== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 52519 fpki-lab.gov. DvCUnnI/K2z44/UV0nwwP3YkRaOppQZ7ThagLpmrJo/qOOAyTAyOO9B0eXTjMJTPoX3Drbglg5xl DNZ6K8VTXtMDXGXsY3B+MnMT+EJQuaDFMx2+KzVrYBShzEnrFcFNij84AwqbRGvUocYlQGkAvr0P P/rxvAyIUX1019bjp73G/EaHF+4cJSEbnfROJVpVce6SgtNn+fn2NWo8UIQOEB0SonJKlswvTYHg Sd4Kx7m5yi49lWEXc7CFW1DtIy4ILZxflwc5vcczS8JLpDCwXBg2YjWt12pHouVpS7fzojsAP5Ka tjXMSJq8BMNlTSGpjuQ+bOZ5Cw8ldjtiQehCjw== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190223145350 20190216145350 5320 fpki-lab.gov. qg7zziU0b7YnX7oXfnwW+1EOljEc/RNcYMCVzs+qHR0L6g9IE4JYXSXHKCjvsSchKLt4R/4Rp0g3 g18uTQSZfrPO2VWh33/kgrJMEReluTD3UTn9AsaBxWyyzX7a6iBxp/hV9pgIpFuQw4DVlgkcSIqM bsS+zmL6fhEmnb+Ys84rdcJj8flFlIgs8RjchFXR65fkuGQ/9CMjdLRd2LlcEOryfKEYePT4uvw8 yTK6JndsK7JpqO8WL+jHAS8g89hzBoumfjaA/xUFo4MWXTPG2CB/ILRpajXIC2saiHxHHD5itpDi mCGvZV46VxWmzCVscckhC7sMUNc8xBNswUkoXw== )`
	RRSIG=19905 and DNSKEY=19905 verifies the DNSKEY RRset
	RRSIG=13098 and DNSKEY=13098 verifies the DNSKEY RRset
	RRSIG=52519 and DNSKEY=52519/SEP verifies the DNSKEY RRset
	RRSIG=5320 and DNSKEY=5320/SEP verifies the DNSKEY RRset
	DNSKEY=19905 is now in the chain-of-trust
	DNSKEY=13098 is now in the chain-of-trust
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 20756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190224065035 20190217065035 19905 fpki-lab.gov. YIsGhQAE0Ia9dU4K7Xzub+ATph3mY4MyJd54zYF4Bj/lIqgUtZPH95ys+sZI350lFWS0mIQiTBgb 0PRVRF/OpmcfLo42KA8dFXN0W0sW1OXdNeVoZQ/+7JngsiU3K3Ou53urqRERAu+qVLHYeQ7AQFSG 3CdcPe+L9z9IuZ5Mv56cBwoWHFank2kqQZ4PpSCWTZG16nlmRPHQqROmxLGMjCf5v8LaEZO/WiHp vFdS/rIPCf33OxDRuMUPP1tksMpzJDkt9ybJJCRK4Fsdmk3jyB4AeeH2J+du62VlqqidhlpHGKgH e8oXM83sCsMCre3VG59X55qsGM3Kf9Hadogaag== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190223145301 20190216145301 13098 fpki-lab.gov. BxX6N426Osxx3r07jnXe6m3ckhwj+xcfp68irbbiyGepEnKTMYR20M3OkpjfLMIaKg3yiZz9SOqa DI0mn5406VBq8eFVo/U6ZF9x1ahcvt0OEzoctnPrOtd4XKwgXZn4CXPvswAbxR8nKQh7YZ/+ccwx 5uHUiSfEdyCNCn/S5jJQMi+0WtZ+JL46rpt3q+n7I/7A3vuapH7Ob9hk/xEe4gpZE0hSzIeWH2QP qjTBt9QTogMcKZvrO05kWrnINraljFO6JHJdFPXjsat/3wNw7fEG37s1AnZoyEzSpMoRk5nIPp+K Q4UUgW2QOZefgq3RT04GXEb9O/26PLKK7PCRlQ== ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 47c9d4d65505f2c4 ivtundc60msmdhaejith3h5i6nnuuao1 NS SOA RRSIG DNSKEY NSEC3PARAM ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190224085107 20190217085107 19905 fpki-lab.gov. kCg85wLPZn/CDQMhal1sv67a78IbjwWhJt8V2aPqUzQaDIKJyzALxZxLR7cZXfzGYjxpNXFCbUAn MhS6QVfYXc/LVC8uN8dOsSlGx4ZrnEV8fMEtq0G9Z8bvNOxmDO7hsLBdZhkmXhkMdgS/2zf10lpC PNBDUFpMi0/uL+vpgXLjcE759wBtW+QxyK730FBXx9w7AJcvBUWgOq7Dgja2qnpTqvPG5iTc8ExX OYr9iesZLmXvJfHRlTXp6dgr9eJOp9oeSGzC51HA+d5M5X4CSnriiia7GbkAE3XX3NfIiMAy5qLO 3iN94yOlzisHb/quE9YekwpMZe6XAFCSmoM7tw== ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190223152816 20190216152816 13098 fpki-lab.gov. rEP/MAgEN+tKpOTXJGejZmAwo+CHGTg2feXBbLrHUaDvEnogITMdFGsUKQ5oM4ibEnHHjGRdcb0m lJJFZye2S0j9bZ2G0DIaCkQJrXW8An9UarWUrrI2nQAHGoVk5SrWi9Ynf1RTKM17dFZ1SQj7iJGn 9iVWRnA0Uw7HT0ivdNR38Ey7ZqXCaY3gV2Oze78Kdnc7qj3rUJHYs7RaDDjkU87hul1ZgJFPR1NP qpPNtgednufaOTkJCyyXzvo7vyq7Ff2dWmPtg8bGFKL6Nr7UUrq8XdkpsJPI1vZbif33QXC2PsCX XVNIjzzdkeszlRfA/8Z3L4yaolvH46woiu0DQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 60269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190224065035 20190217065035 19905 fpki-lab.gov. YIsGhQAE0Ia9dU4K7Xzub+ATph3mY4MyJd54zYF4Bj/lIqgUtZPH95ys+sZI350lFWS0mIQiTBgb 0PRVRF/OpmcfLo42KA8dFXN0W0sW1OXdNeVoZQ/+7JngsiU3K3Ou53urqRERAu+qVLHYeQ7AQFSG 3CdcPe+L9z9IuZ5Mv56cBwoWHFank2kqQZ4PpSCWTZG16nlmRPHQqROmxLGMjCf5v8LaEZO/WiHp vFdS/rIPCf33OxDRuMUPP1tksMpzJDkt9ybJJCRK4Fsdmk3jyB4AeeH2J+du62VlqqidhlpHGKgH e8oXM83sCsMCre3VG59X55qsGM3Kf9Hadogaag== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190223145301 20190216145301 13098 fpki-lab.gov. BxX6N426Osxx3r07jnXe6m3ckhwj+xcfp68irbbiyGepEnKTMYR20M3OkpjfLMIaKg3yiZz9SOqa DI0mn5406VBq8eFVo/U6ZF9x1ahcvt0OEzoctnPrOtd4XKwgXZn4CXPvswAbxR8nKQh7YZ/+ccwx 5uHUiSfEdyCNCn/S5jJQMi+0WtZ+JL46rpt3q+n7I/7A3vuapH7Ob9hk/xEe4gpZE0hSzIeWH2QP qjTBt9QTogMcKZvrO05kWrnINraljFO6JHJdFPXjsat/3wNw7fEG37s1AnZoyEzSpMoRk5nIPp+K Q4UUgW2QOZefgq3RT04GXEb9O/26PLKK7PCRlQ== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190224064459 20190217064459 19905 fpki-lab.gov. bNQypW02T7H8L52khfkaCR46aGRG8SDgg1msOfRJs64fOjDzog/dMOdzzVUMSDlbBbBb3lf2UM4i BZTPvll7eui741C8RiUDVSmnhE0KHGz2y9A1D6/xhaVzvBOdlYA+Jh9tTQZl2gbBxSwUzND1tixI IuV20i6dGYv1NyGnvDk9po52CrbPyNg/xtUcvLdLBuF3fajzpt0Xoi9HTw1az7iVwasPeFiMzdwF h8O0DMFzL8VKTy5+vydpfh65cjn1FekVnvIZs7uH3vzfWcEV5GyWSAh/ha6WLCTc8DjRE07OvVzX b0FOFkcLtRpy+a7l3e7kWnvjj/V4RhIXA6FbKg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190223145415 20190216145415 13098 fpki-lab.gov. QJqp5Vy1/J8r2dIrfbRE+7SzkwlZFgLn1ZCgYpKW40Kze5FWSnZoMgMpbSo+GjSGyo1UL1B7Ck4d cjudJ0o9eBfNFZZLO6PbwViyrUhU4SoYfWpS982JNcdsavKH/2sPtGavckXoFBrhpCZ8VROjChJr kbzkq2iWF+wJq8nahj4puMCjO3t3Tn3XgV2mS0D3WzF0lBhTxLlwZHjwdOPzz/RZZw9j52hPURAl 4GL6+LgudA2PRMM3GUkfgbDUGNJdaxSz9RXgR6X07MH5whFoVJfuJGgKZV3y4Qj/e1ilkspeqi+T oAX9n8DZM0htR+AGHJsCFsAkhjI2rVzJ2W/vrg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190224064459 20190217064459 19905 fpki-lab.gov. G9+DQqw0Ej/LQp3jsHG6xEZfGwchTjN29AAFWClkmmo6C0HFiwG1EJKIAfaTJHPWf9J003vUWIGF ghQ/rFiQH6VFym3mRHgR/rxpBR3eyS6RrKUYhqSlietpYpBM0guJ/Z3+f/IagOMphwPLZod5nk6s 6to1vhXEQLMGmrY1T9yqyC8oO+Tj2FOnAF3bgPHDDsOUDcyDqPT5mQJSIMDB9dIwPSArjnki5zcN nfOieJnhyKJQ+OsrXdC03hG3StCsg6vFV4EzKK9WAlBi6SNtA+iZcO2kPxcSnWatUJ8ii58CevDE a4ArvTVNk34A3hDHQvtd77sTq+aTL8lakuP7EQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190223145415 20190216145415 13098 fpki-lab.gov. CMpmLVNWJm3hogElqrwbDvQdU5q2s64ARSKWEmPTVbyf+pPo0b/AI1vr/af3v571oPaD+ZK/ro1q rdJFIdv2JuQUnxVu7sXcmhjfJcI6TT4nakj/U5HB73+4OX27V9aE/AbYS7LuVuCjuPMreDblxGFJ VKGCrf3NBxqjbXjrEaD5eNbAKSqfqhDlb5mdIobGCa+rGfmLJu7lk/hH2enCopffHx5aYchQ40v5 VDLC5dO4q6ATlVOgsoVy+UZ4BF6vYGaGHcxMESenEJQ/FfNO6ms8CoGoUoRltO72s4c1sZKO423e jf0nz/R/Q0JRN4+YgSgfh1kkBE+JIfHfwUnEiw== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190224064459 20190217064459 19905 fpki-lab.gov. UMzJSgNf4yn+2qxOP/eU04ebiz6srxvmN5OmgJMC0gaMzqh+jX/+HdSiGnhXOcBNu6KwnsKwB8gP uQAq6+PdhiqxTKkfUztDQaz0UAquE4/+r+yq6lqmEIuENoQFXrhxvi3yHJYQnJ8EvVYYXmWny8KC CQMlMIFMapBHKR/hvggIVUqAkKPdMWhzmac/+PiRK5+LRWE8HPAvUN5qSG6M9tXIEl9hOHPFo0BN FDeUjKWOyFyywYtMqMzRVjDHlDsPUNPfBkWAFa8kMCsli6KzqQ8hwMRQr5wiiZWNtRzSgxTvh48/ R2GrAT0MGBX31ct32edboT6flyOoWzhsLru81Q== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190223145415 20190216145415 13098 fpki-lab.gov. WgMKPFilJyRr4n6g/b66rjI3qrPI+458KE4/kJktHKWHbL8c6LJwodqzXgf9pYMMFkm28lJDXFvu TZjcGR8CmvFH1oyaGaoHMPqHnsd81YcwdeIkJywY1CaMwlr5ycsxAp6+6Kjvo03RCVqIDDqLs4oD FyWMJ+DU89gfsIH91gis+rlHaQWdfnENICHxeQUaaIy8TxZHgH4+QSuNDHDxNLWy7yDdN5PJtv0N 99+UjBJLfR/Ci7rfnE62VoMCKnWHuMR9aTJawsjshj9/bSM6rQDM2O/WvUlw+r8zzn6lbc4L7TTu pOU0nCGsOAa7btljfGFgPimK3p70Lco5FHJwww== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190224064459 20190217064459 19905 fpki-lab.gov. O4IaM1LIkEKXptK4sdHQSuWLZ5uQbhpeB2M629+HYvtAA8NBCbgLTRwy626Gw6+giud5YIIi2BTi Ni4aSU2K5CcPXytdxFeskZE2wf7TqATw2FM2rH83lLIYrFELdxmpI9UPDTLb1slVBM3+NMpG1RNj n0r15gZzBhojdv5Hco0hWcd5wEMBo16V/J71Ew5QEUFpKSqGDBPN8FU4UZgZBNVQWle97p88KVDd yGXxJnO/vfTrY3YJM2M7iBUyfpupV+bJL505yWXmBpbP/hckcXDr1EPOjXHn8xmWhuHNFbDWVkUz zglS0Kk2s8x+5rYxrYB3dmsIXqBf7M0sU9WUVA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190223145415 20190216145415 13098 fpki-lab.gov. niEQL3R5VCZh/2MAqolvH2XqrxugKV2XkjvDA2e5lXvgIepsjOe+XqFMlwzOQZtk9q9rinsvtXjr pZeJUfPq01dhUTKdPPqWtflVDpZ4geJs3J8HtCNM7EWUlZjDOkbUnNkiBXVoscrnTcqW7ANrMu+H ejnsBkT0rmYXgrRDpdhpQdHarEYue2xfnbWSciMwpAKKOuuskmKSDsOJZrCAhK6+1tiwACTexqVp yslOm2qPjo+mjPfpNdFdx0K/RGECb54m36v0AiMFNwrZzMPEPpa70gy3+6WmRFQJEPaCc2ARNgsy 3ykdv18apD0Jr7l3NWvugTK7WNr6XBntpK44kQ== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190224064459 20190217064459 19905 fpki-lab.gov. eEBSD9RjgdGboEhbUHHC3b1kpQ7AnKc4BY9pcC4gZNbJ+TxGV2xqZMSgRpeTGnPl4dolZ0Vrgl8u tk6I+dF/tZqwrGX5TOLLaa//xbv2fG0RdLd8QqVjHLotqBGNk9x1iFlt3nIQFom3dL8MH4lzZWpx y1zy1Ymbt7FmC5sT7bKd1gIf3sG2FaQI+1/JoX9Rhr0CSL/Yc646v6/7k4VsyTMRyZVOm6o5QjRf fIaab8nmwzDkAIqKXgN3ntDuXGUMH90A1WF06wjKYhFJPbnCR/hzgWFzaNnGYtITQkWHgMk28pCW q/xFzXWXdTpXba9OMESwzUg/9TzBJgKKF4+fCg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190223145415 20190216145415 13098 fpki-lab.gov. YMt6kDEFKaSEcUQLIcmBgMHRHW/pzQ2G9R3S3JIh/5XqNKlMF2piZ7J+/BVfW2IYHl7p1smeLH0s cWqbt0CZ3jbFfI5ILsmsEv6/camI8cxapqXm3neidkcZbGyHnd1bRe1u4QadzwUTZB5pusniMzAq W+dUZ5QBROyuFlzx3z5GR91cAn/PJVxSmJ5lSLR0JeWnUbUeZ7qJzfJwzE/VsvsZPdNoxMDQH1dk 6RTjpiqBXE4L5jR0GZLVo13ObHlp20HAExE/P0twWlKW8E9ul9olX0dlZDYdrcKR9yUG5ntvnVJR rQx5YWp/cJrsygmiWW6oQ+dGV4nT2i0txywV2Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 33236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190226060747 20190219060747 19905 fpki-lab.gov. Oy2y461MNb2axSzmEOWkBDfMKAH+hIXMUyiGa3tPYr/VIpIgVGTQteb7IUE3ndAlJMWGdrWsv5Qc dKp3astlvnbVE9pmsbe/vNax4IKD9lK3ye8qMQmCROBbjOgNNBgsqiY8cFHTs1eSiQnIQyY6OuAS 7ExKm0vZaPwnZ70li1EVKpzlTcX5c3A7NdiY+30LTeueToSaL49KXpx73W5YPdTwMr+hd/pR47pe jzGrjXBRr7KQumiVS0BQSZz27e0L/HrTsuKGb3H2Quj9+V+8yKB0xXKsMM0cTX3LY/OACk114SLs 4c0mBwaC90OtTG+Ucoo4hwZst7Y01DE4iotl7Q== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190223145656 20190216145656 13098 fpki-lab.gov. NWKMtBSTQHT3y98DPFb8apYMXu7QyXiL4/THmCq1m8Qr175JSw8xRY8nkvjxVHntHkYQIkH5ngWr 9M3v1EJtHKvGHTEYGeIxR9el69PFK11wPkFGI4SDOQbjUnRULIatvIwS1YsW/itjbBCzRBt1GUP6 oU9UlXzigOETIHccQXjwNvfi9q/A5cXX9Vc8M/e48cLBbc/zlbQyhLXRiOqI1e4Mr+4mKbKly+uK aBmimG6QeOPhLkzcc2zqukbwdrTLt5ABfbWFdReIiE3pwvg33bvaxWTEpvsd6hMGWvcfeA/IdQ7A 5jMfNPkVHFu2Z/EKtyARJ2qFy4mdLzBXbx9HMw== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190226060933 20190219060933 19905 fpki-lab.gov. RkzKdQKLB/xi5aStFyWOVw+UGSHY5aDksCT3QklAOvZBhnDAfBR2I/Qi77MbRQVJs8iovjBVQv8d k/fI5NRlzRwopPyKaPQkB7ibbk63ll6/JmIZE1aXZsoOv2V4wCXY3MTWkXouO3Posnkl02Tc/Q/+ yyoYRhw4nh+8oyxvSUSxjXqVmzYw0HgPUX3ZxOJV+E6B2ZaFOovu4LRr1K5JpieTEJNg18JVrO+8 Qlk71CkhRj0UZr9OvbUsXFF5JJRiyW0KJOOLu791FEjm52g1g5Vtpg0u2AVj4KdGsAIHj6Jktvpp tnVC5m5rf2rzlkhUNgPtQ9QYBDtIztnVHjWzQQ== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190223145414 20190216145414 13098 fpki-lab.gov. QuvyWtOn8bivBKvGGR5r4v9ex/VTaqAeaPG8h7eba3OFe8kdpRsbtFcLVk6E7Azcl8mfs+K2Hfr+ UoVGNaI6lzZM/IfNkGuEVwy/p5d+UclWrPkCM+ScBmoYrgojtDLFtgIujIUf6VCSprgqcTCEa9EE Lcj3cJ2uoRQP/OyNNn4S5X+KxQCB5P2YuYLJS5R0ZlIJV0b5sPPK8hEH9/3l/8/GYFhRsn3SLVoc hr4wLUJcYAq4A/3vt6RO0hNdnDqxMCQAlv6DGk9OneKaqF7SgG9bh/5qW20z3PEznSigIqbXx/X5 0u41y35QQaQAryAnmhq43IX8amaoTJyurAaGLQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190226060933 20190219060933 19905 fpki-lab.gov. Bc7TQYLXYHmyU0CmcP7JEXyNhePFQgwcgTHzD9+xsXnS8ZWMdwOc+V3hqMrcmKzdFevQgkXNEheD 9U1wpmIe+Dlx3sxHXeXrP50GoO5CNN8GEtuXA8m4XrMicfksVDoHUsc4S33ApBT+aB4Hn4qz6UCD VV0CEIBTLFIfxGZqaP13WVOZcQBII+Vf5PbXKtXHTvX/D4PLHf6Zc5iSYefqpTEwK7VtmLrExIef 1lUlFmDTz/O3z5fXDXV0vwHW3o/YiMspcJS2qMM352++mf2AI31jOs46AIZ7a2sXC+AN6U+X5Bff DY0LHqVkeRcEy1R4ez29AfU2BkJIEHPwicRZ8A== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190223145414 20190216145414 13098 fpki-lab.gov. T+EA4v+5zzgLp+PzmqiWMThIFpCUZ6vbGeoor6Bhya5SVwrKjU3BRuwqVGmxr5Evr/e2ajgXVBNa dxbgNsjN6a/W0qirVtWztaml9oxLdTUVdw3Lcka1/3U6nxmEoAQEsJpG6zrw9w/QITCKeHCKUXIb /8KpCyFE1uc/OCYJmzgKYqsW2s1ZkKyVAd7vvOQVpct2UUJuHUwCBe/dtMpc5c8ud/O0lVeIIFrI lz26XiqkUyhxAh9VDmAjGn/BsHFC1THVQFjHTghGfr5uFVJaWID+ij0qHSygJuZ7CnGxbpGsxsxT 5OP8/LMbP7KpPd0tkDfumuTFKcyVs7EW8fTqYg== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190226060933 20190219060933 19905 fpki-lab.gov. aMq+qnLaz3XIfqkURwgGTNK6qghDhV0E1DuT99B6uEcHSYTwx9BSKtbu4rSeky+5INXZuLIG0y9n RrcW5vrgsAxeE82q3bTpAmx3ln+s4u9pheRjjSuAaHwVBfrrjW4b/DG/TeOVqsZryORfD4Uk1fqn 1iRHXve+XzSPLaEv5Fi5psTDhyYn+1GRHz9JSegRqEHe0JqHcgSbPNopPCvOYgtVUb84Y/X9Phe+ jU4b0XNyi4HxUk7+JZHHtCi2bGM15Z4tTgFsdZrjyikaVE35Ey0TOYp/fxn4fpz9oZi34OkvX+3I t66xGT4ZWORFjpj1h5VOGl7EOXjCeMr7yiFpYQ== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190223145414 20190216145414 13098 fpki-lab.gov. oGeKjHU/t0s5FGzidboa/mh27MbB6KxhA6kdajTBTR9fJLGgLlRS1v6ECF0YVDHtebIjVogCIWvR cjUqKn4Oz30tQP8uZpkywLXGrqYZRsvl6bz/U2NOXhbJo/ynA9nbUuBEjdgILQIzXhaLrXndcbKs MRextztcd6zP2kwQyjFkRBzFpvY/dtuiwGZcRHM5WCdBUbwaJIOL3wIP4Sx/zk6hcd0Og3n38mou iEM+kGmQ4Jd3kcfvk/RX4XmsKAhiMs2FOeR0yNjF16ifCJaCrgxCKj+fY7IZhM1GyzyaMm9Ll+kO 0X5jckwf0VfptDV38kg594OFGLffZNMa2eK4fA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190226060933 20190219060933 19905 fpki-lab.gov. R+R9OEN9ogRseazuQSWXJI76yPgkGBAri0laG529m05Q/T89tWaO3LK/vgQqlVsecrVqSbEZi+7o yPzcT5crCoFBlVrU0H2gJtJHQpJL9TU2PR5lmuexD6V/EzytFAJnffzoXHFF5SLYCh0Lxf4BfGM1 tn7aSQMp2OhkKAEUC7vLesDaVzwOALs0StQFURx8ljGFzgOxvO8QOh3wdtmypW+fGOtgH/dHtB5d HZQJ6Jw5IAaffB1/IssjrQQ1CKKHNEzEw/qQomCODghmwdrFLOg/s/RbA3fcMvb4pVJTgmTrK97s CeDtKKvWdbmY1yZeps8O+PWxUpOlfdLlyqm/ag== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190223145414 20190216145414 13098 fpki-lab.gov. Diwo2y5FbPGgTxxHF0XxeE1aumAXpTeq2ZmuHajD/CEPhtqGPwSSt+4mlG5oihSbhUyvhYJKKKle hJ5oX0DOXM3FhhdYjexOVzgl/H843PBcgZckZMTHrsRtZAZr8MI8q8C3Nf6dIKzebmlhr/4t7Avr 41jICVwNt+txkE6sp8Oc6kbOz5khD7NstJYaxUQ1Qplm0JtO42pFlSyzecn/2d5t4WlvrAM3Y7zM 4Ma9ifMtgXgWofnqTUyUeXfJq+lGrdfRAyV+YyPiKMOeSVMc3Ces+5fxl2lj+Wi7yaIXlHeiVDlt zSrWOyKisMdVcym0Q/uNi9xVy4pnUX8JnhB8Qg== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190226060933 20190219060933 19905 fpki-lab.gov. Ohj3ZOnpBrKtvzokbjWd031vmcMLfmYZ55mhB89sFm8YmKFto+ZWWZTWps1ZFmY7kOk6eKtmeDha t9XuCIL7qWeLdB6/f+UD8TNKrfIZVJPvWCXmNAKtvkeNWPVQcqmNWYke5+dJXuv9xMhKxe1QwhTe nzlV5XoLHOHfCY/G+YDfiqbQTxBWTQYn17ahnAXNb7cYMtw1LgFAf7/mz/Z0yEcNTq1ApPw6vmf8 xnjLJhCukfQxOaIbZh3YcXL7QDDy3YO0IGUoWxwppS4wzJqAaCNUc3YFQ8CctHEDcg0P79tz5tIm GVGw55CBiniHMhrQ+Ne308sFdL+jjWw6cSgbYg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190223145414 20190216145414 13098 fpki-lab.gov. bA4C2paZsspGHS4Ecrn3X9fhFahcf5q74XdCyuWvSlpSLAqJoOq9YD1pzfjvVP9S9qkvtFqfIe/g dvGpXwpnWlC958YrJLz5Jt2tmA40dkurgG+vAKrVHfBiVqS5D2KnLYNLsgvCnegYlaWomZWcp3P9 jMt/IEHji2AsNjobonsTKX+OSXnc0kHjgDOHdcvYYRZQFEbXXs1+96EsLBllKSQGZBNdp8QOMlXF IHGbY0bDPRtg9A4+qvjzRij2U5YShrEHgLYxKCkMbvhQbstlomsGxuqe0GIknmber3TruDJmvSJj 3nsqHK9/lR+r2QknAH7KaTZs/DX7yLM0bbH+NQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 39327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190224065035 20190217065035 19905 fpki-lab.gov. YIsGhQAE0Ia9dU4K7Xzub+ATph3mY4MyJd54zYF4Bj/lIqgUtZPH95ys+sZI350lFWS0mIQiTBgb 0PRVRF/OpmcfLo42KA8dFXN0W0sW1OXdNeVoZQ/+7JngsiU3K3Ou53urqRERAu+qVLHYeQ7AQFSG 3CdcPe+L9z9IuZ5Mv56cBwoWHFank2kqQZ4PpSCWTZG16nlmRPHQqROmxLGMjCf5v8LaEZO/WiHp vFdS/rIPCf33OxDRuMUPP1tksMpzJDkt9ybJJCRK4Fsdmk3jyB4AeeH2J+du62VlqqidhlpHGKgH e8oXM83sCsMCre3VG59X55qsGM3Kf9Hadogaag== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190223145301 20190216145301 13098 fpki-lab.gov. BxX6N426Osxx3r07jnXe6m3ckhwj+xcfp68irbbiyGepEnKTMYR20M3OkpjfLMIaKg3yiZz9SOqa DI0mn5406VBq8eFVo/U6ZF9x1ahcvt0OEzoctnPrOtd4XKwgXZn4CXPvswAbxR8nKQh7YZ/+ccwx 5uHUiSfEdyCNCn/S5jJQMi+0WtZ+JL46rpt3q+n7I/7A3vuapH7Ob9hk/xEe4gpZE0hSzIeWH2QP qjTBt9QTogMcKZvrO05kWrnINraljFO6JHJdFPXjsat/3wNw7fEG37s1AnZoyEzSpMoRk5nIPp+K Q4UUgW2QOZefgq3RT04GXEb9O/26PLKK7PCRlQ== ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 47c9d4d65505f2c4 ivtundc60msmdhaejith3h5i6nnuuao1 NS SOA RRSIG DNSKEY NSEC3PARAM ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190224085107 20190217085107 19905 fpki-lab.gov. kCg85wLPZn/CDQMhal1sv67a78IbjwWhJt8V2aPqUzQaDIKJyzALxZxLR7cZXfzGYjxpNXFCbUAn MhS6QVfYXc/LVC8uN8dOsSlGx4ZrnEV8fMEtq0G9Z8bvNOxmDO7hsLBdZhkmXhkMdgS/2zf10lpC PNBDUFpMi0/uL+vpgXLjcE759wBtW+QxyK730FBXx9w7AJcvBUWgOq7Dgja2qnpTqvPG5iTc8ExX OYr9iesZLmXvJfHRlTXp6dgr9eJOp9oeSGzC51HA+d5M5X4CSnriiia7GbkAE3XX3NfIiMAy5qLO 3iN94yOlzisHb/quE9YekwpMZe6XAFCSmoM7tw== ) ivtundc60msmdhaejith3h5i6nnuuao0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190223152816 20190216152816 13098 fpki-lab.gov. rEP/MAgEN+tKpOTXJGejZmAwo+CHGTg2feXBbLrHUaDvEnogITMdFGsUKQ5oM4ibEnHHjGRdcb0m lJJFZye2S0j9bZ2G0DIaCkQJrXW8An9UarWUrrI2nQAHGoVk5SrWi9Ynf1RTKM17dFZ1SQj7iJGn 9iVWRnA0Uw7HT0ivdNR38Ey7ZqXCaY3gV2Oze78Kdnc7qj3rUJHYs7RaDDjkU87hul1ZgJFPR1NP qpPNtgednufaOTkJCyyXzvo7vyq7Ff2dWmPtg8bGFKL6Nr7UUrq8XdkpsJPI1vZbif33QXC2PsCX XVNIjzzdkeszlRfA/8Z3L4yaolvH46woiu0DQg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190224065035 20190217065035 19905 fpki-lab.gov. YIsGhQAE0Ia9dU4K7Xzub+ATph3mY4MyJd54zYF4Bj/lIqgUtZPH95ys+sZI350lFWS0mIQiTBgb 0PRVRF/OpmcfLo42KA8dFXN0W0sW1OXdNeVoZQ/+7JngsiU3K3Ou53urqRERAu+qVLHYeQ7AQFSG 3CdcPe+L9z9IuZ5Mv56cBwoWHFank2kqQZ4PpSCWTZG16nlmRPHQqROmxLGMjCf5v8LaEZO/WiHp vFdS/rIPCf33OxDRuMUPP1tksMpzJDkt9ybJJCRK4Fsdmk3jyB4AeeH2J+du62VlqqidhlpHGKgH e8oXM83sCsMCre3VG59X55qsGM3Kf9Hadogaag== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190223145301 20190216145301 13098 fpki-lab.gov. BxX6N426Osxx3r07jnXe6m3ckhwj+xcfp68irbbiyGepEnKTMYR20M3OkpjfLMIaKg3yiZz9SOqa DI0mn5406VBq8eFVo/U6ZF9x1ahcvt0OEzoctnPrOtd4XKwgXZn4CXPvswAbxR8nKQh7YZ/+ccwx 5uHUiSfEdyCNCn/S5jJQMi+0WtZ+JL46rpt3q+n7I/7A3vuapH7Ob9hk/xEe4gpZE0hSzIeWH2QP qjTBt9QTogMcKZvrO05kWrnINraljFO6JHJdFPXjsat/3wNw7fEG37s1AnZoyEzSpMoRk5nIPp+K Q4UUgW2QOZefgq3RT04GXEb9O/26PLKK7PCRlQ== )`
	RRSIG=19905 and DNSKEY=19905 verifies the SOA RRset
	RRSIG=13098 and DNSKEY=13098 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: