DNSSEC Analyzer - FPKI-LAB.GOV

Domain Name:

Time: 2020-01-26 05:47:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 50886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to b.root-servers.net for FPKI-LAB.GOV/A
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 670 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (670 bytes) ;; HEADER SECTION ;; id = 30058 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 48892 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 60231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 28479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for FPKI-LAB.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 530 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (530 bytes) ;; HEADER SECTION ;; id = 22216 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. lrZssOOBAiYN4ajcXCrQTavyz+ESWnEwNQvZwKN5mcnglARPj+lVC6ALsmRtUqRnkURKj9KH2KiK iDP8hsTClwUOk1vipof+XQxAc+YvopunsPxTDuUQtPy4J4FFvlmywbidpdmBJCrgLrNb0+FQF5q6 oXc09G8MKvW8e2lmwrfSlBs5I37Uk8fDQb8USrGgXzeB91uK+Qh2O/DEp4Yw/w== ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 530 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (530 bytes) ;; HEADER SECTION ;; id = 13070 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. lrZssOOBAiYN4ajcXCrQTavyz+ESWnEwNQvZwKN5mcnglARPj+lVC6ALsmRtUqRnkURKj9KH2KiK iDP8hsTClwUOk1vipof+XQxAc+YvopunsPxTDuUQtPy4J4FFvlmywbidpdmBJCrgLrNb0+FQF5q6 oXc09G8MKvW8e2lmwrfSlBs5I37Uk8fDQb8USrGgXzeB91uK+Qh2O/DEp4Yw/w== ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to c.gov-servers.net for FPKI-LAB.GOV/DS
	Received 404 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (404 bytes) ;; HEADER SECTION ;; id = 6753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. lrZssOOBAiYN4ajcXCrQTavyz+ESWnEwNQvZwKN5mcnglARPj+lVC6ALsmRtUqRnkURKj9KH2KiK iDP8hsTClwUOk1vipof+XQxAc+YvopunsPxTDuUQtPy4J4FFvlmywbidpdmBJCrgLrNb0+FQF5q6 oXc09G8MKvW8e2lmwrfSlBs5I37Uk8fDQb8USrGgXzeB91uK+Qh2O/DEp4Yw/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=62614/SHA-256 has algorithm RSASHA256
	DS=23689/SHA-256 has algorithm RSASHA256
	DS=62614/SHA-1 has algorithm RSASHA256
	DS=23689/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. lrZssOOBAiYN4ajcXCrQTavyz+ESWnEwNQvZwKN5mcnglARPj+lVC6ALsmRtUqRnkURKj9KH2KiK iDP8hsTClwUOk1vipof+XQxAc+YvopunsPxTDuUQtPy4J4FFvlmywbidpdmBJCrgLrNb0+FQF5q6 oXc09G8MKvW8e2lmwrfSlBs5I37Uk8fDQb8USrGgXzeB91uK+Qh2O/DEp4Yw/w== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=62614/SHA-256 is now in the chain-of-trust
	DS=23689/SHA-256 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 )`
	`FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab )`
	`FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7`
	`FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64`
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 21152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfSfKts0vhXJdX+S5man01pLYiAWQoJPxbtlTSamrqFCToB8dBPLpX1sruNW2BPhSYYMwYRP WQoAtntUGOsXGpTpEVKsyo1BtLUaZClK5/+Qt1jTZeZy7p0QJiB6nAox4dOkMeYBBg1PX+IwCVCZ t1vBAvh9kWLsZ197Uw8hrMuQpcOsPY67BbPYZEQJslTZHDYMpBgC6QBPZ5nUePV8HPw/YAAYJlPy HJ+Ep5LCd2PcCUM2+I/+a0jFq79ecd1xp7l1SWsYkcFO9wze99xBQoJ7vF/pNQw32xzD3rmn8wwM J1a2v6i2QlH2f9yuomfx0fsCCN9ww69zXmjemQpiK6c= ) ; Key ID = 33348 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc2xOSetgF9qL/xWLJsBn9moGmS0JYHZxp8+AZ+iehpMDyghfq1y/JbtvpEDWXbe+Mu4upvK AWU4uaIWsdWxK0rGEMdxPmAbhj1UXk53V1qTobfGB74xmmBDylktRCnNGuKroowYbeHKCs+O1Q/+ l8nz6Y34X0GK/jEK3ddR3i0EMzU/eVgPmyvFdcc9j+8rZlyqbb6i7UHEdEwI99YDnV0RWNsG6XPJ /rYWVBRhKM481bntXgmIsx8SNjEP5QILE9lhgEvzy/kyFa3ENDBpcSyun54JVC6UOg07zFzQECt5 AroahyEb2pH9Pk4XllGolBs1ci1u7c54f0Vh5q5QzMU= ) ; Key ID = 19794 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 33348 fpki-lab.gov. KAAFwU1y2fviGmLnVkaibTFnK4AmoV7hDXziQ0SWeleWI56cGZZ06F8htDjGwnBWZdhk3ebBVxK3 M9yQo8Bkqx/Vo4KlcDc+57eih1rI3WmUoX0SwR2KI5Pnf/oTVzZKeTZDvtOxETChn59XJE5JkBSR hoqtLRdrHhHZI7wDDwJfw4HyLUMq2SljexbObigikN7u1qThLL6z33HJ+3QG3yx+isAXF6pKcn2R XFeNmQgDVyQMf3n/f0vpnpDu/DZwP7Tw5epwQ8l9/UIdrWhgX3MbtY/W4KnJ1y8ttoTH5FQA61V4 zC3z0ds7ctbALC5NvN+OHfh0/H0WwQC2aZzr3Q== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 19794 fpki-lab.gov. UA+NCdRcbXG91z7zmcAaYnKRElnZtDmzN7z5r/C+uYyYEOw/rMiaw7iYEdpBSeOBCJVI+4MsUK+S qjdUhYBBGNAoQB5pHwMdCQXLh5KdPThidlNARjh/jVf1fMVzo36lxGRVh1wp1z8oRYNm7nIPNhLi QYNDIyxfLeKVqqqsjoBR9AA21FGq5NNRwn2Z48neGwczol+1+u7ZxY72a+GdeYpfVh9e0mTm7qm3 T6PufReFuDvCNk6WbxTj6dVJtixRxpXucWbLNIpKdbjDbEq6RROcz0M48TsW8FutxmhZcq6TC/qC LVp0jGm7Biz7td5y7kmnKAkLAF+uTRW/d+Y4hg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 23689 fpki-lab.gov. adrvlsQonAgnv3tUQ8/q7HuN9nUC1/L1cYVO5K558pF3D81EkSdq27VQXqz4ZbxQ220u+7l/FntQ SRshmk2ycKI1OsEm74gpeH05WtNe8z6iIGlkfp6GvWGTSadzQeVp7/fvYa5rxRY+sz8CDUkUvEW9 Ue7WqoZ4mVrBm+25nEjYSf/jqtAW6mRfY3/2Rgax8dlC1QTyhmdRiqTZQ9oIx7JUxgjjlAwNhC8S 8oLhIljeCyKd8jxRduMGi58cVplzZA1wEZ1mkhmTSh0tRcuqGd8MhbeIwHtTsORUM+jNHvIIfKcH TKHclWVRCAropS1SWjsh/ogTeO5IwfeyUc4Sig== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 62614 fpki-lab.gov. gXeT3iY7I6VwvIqRrbEineOSjf7k0Wls+V4wh0VsvJ3Qe69eW+kj98ocp35XEZCED/eovLsb4wq8 7J9d5VvYQ28IOkG78KlQOsyKgSLGERNT9LAhIHEGd2MXQKI92KpMXFWB+R0CmvmK0U9p+C85Obxq DjEpPw2CRh4q6Qa5bnI1b6xlZOlon7FWflJ1WDt00fHDl/4aLV0s/Vgj4m5W4MJ/2vt9gSRFNDlY 6iQrInVypxFaO49eNnSkfysmIC9ykPxuo8/sOYDQWwA4CpCaati/fPDFFMJ5twciGpX6ds69Ukik FbANvo3UnEawDw9OrQiEWwoBsmr9bF26edDXCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfSfKts0vhXJdX+S5man01pLYiAWQoJPxbtlTSamrqFCToB8dBPLpX1sruNW2BPhSYYMwYRP WQoAtntUGOsXGpTpEVKsyo1BtLUaZClK5/+Qt1jTZeZy7p0QJiB6nAox4dOkMeYBBg1PX+IwCVCZ t1vBAvh9kWLsZ197Uw8hrMuQpcOsPY67BbPYZEQJslTZHDYMpBgC6QBPZ5nUePV8HPw/YAAYJlPy HJ+Ep5LCd2PcCUM2+I/+a0jFq79ecd1xp7l1SWsYkcFO9wze99xBQoJ7vF/pNQw32xzD3rmn8wwM J1a2v6i2QlH2f9yuomfx0fsCCN9ww69zXmjemQpiK6c= ) ; Key ID = 33348`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc2xOSetgF9qL/xWLJsBn9moGmS0JYHZxp8+AZ+iehpMDyghfq1y/JbtvpEDWXbe+Mu4upvK AWU4uaIWsdWxK0rGEMdxPmAbhj1UXk53V1qTobfGB74xmmBDylktRCnNGuKroowYbeHKCs+O1Q/+ l8nz6Y34X0GK/jEK3ddR3i0EMzU/eVgPmyvFdcc9j+8rZlyqbb6i7UHEdEwI99YDnV0RWNsG6XPJ /rYWVBRhKM481bntXgmIsx8SNjEP5QILE9lhgEvzy/kyFa3ENDBpcSyun54JVC6UOg07zFzQECt5 AroahyEb2pH9Pk4XllGolBs1ci1u7c54f0Vh5q5QzMU= ) ; Key ID = 19794`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614`
	DNSKEY=23689/SEP is now in the chain-of-trust
	DS=23689/SHA-256 verifies DNSKEY=23689/SEP
	DS=23689/SHA-1 verifies DNSKEY=23689/SEP
	DNSKEY=62614/SEP is now in the chain-of-trust
	DS=62614/SHA-256 verifies DNSKEY=62614/SEP
	DS=62614/SHA-1 verifies DNSKEY=62614/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 33348 fpki-lab.gov. KAAFwU1y2fviGmLnVkaibTFnK4AmoV7hDXziQ0SWeleWI56cGZZ06F8htDjGwnBWZdhk3ebBVxK3 M9yQo8Bkqx/Vo4KlcDc+57eih1rI3WmUoX0SwR2KI5Pnf/oTVzZKeTZDvtOxETChn59XJE5JkBSR hoqtLRdrHhHZI7wDDwJfw4HyLUMq2SljexbObigikN7u1qThLL6z33HJ+3QG3yx+isAXF6pKcn2R XFeNmQgDVyQMf3n/f0vpnpDu/DZwP7Tw5epwQ8l9/UIdrWhgX3MbtY/W4KnJ1y8ttoTH5FQA61V4 zC3z0ds7ctbALC5NvN+OHfh0/H0WwQC2aZzr3Q== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 19794 fpki-lab.gov. UA+NCdRcbXG91z7zmcAaYnKRElnZtDmzN7z5r/C+uYyYEOw/rMiaw7iYEdpBSeOBCJVI+4MsUK+S qjdUhYBBGNAoQB5pHwMdCQXLh5KdPThidlNARjh/jVf1fMVzo36lxGRVh1wp1z8oRYNm7nIPNhLi QYNDIyxfLeKVqqqsjoBR9AA21FGq5NNRwn2Z48neGwczol+1+u7ZxY72a+GdeYpfVh9e0mTm7qm3 T6PufReFuDvCNk6WbxTj6dVJtixRxpXucWbLNIpKdbjDbEq6RROcz0M48TsW8FutxmhZcq6TC/qC LVp0jGm7Biz7td5y7kmnKAkLAF+uTRW/d+Y4hg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 23689 fpki-lab.gov. adrvlsQonAgnv3tUQ8/q7HuN9nUC1/L1cYVO5K558pF3D81EkSdq27VQXqz4ZbxQ220u+7l/FntQ SRshmk2ycKI1OsEm74gpeH05WtNe8z6iIGlkfp6GvWGTSadzQeVp7/fvYa5rxRY+sz8CDUkUvEW9 Ue7WqoZ4mVrBm+25nEjYSf/jqtAW6mRfY3/2Rgax8dlC1QTyhmdRiqTZQ9oIx7JUxgjjlAwNhC8S 8oLhIljeCyKd8jxRduMGi58cVplzZA1wEZ1mkhmTSh0tRcuqGd8MhbeIwHtTsORUM+jNHvIIfKcH TKHclWVRCAropS1SWjsh/ogTeO5IwfeyUc4Sig== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200129225331 20200122225331 62614 fpki-lab.gov. gXeT3iY7I6VwvIqRrbEineOSjf7k0Wls+V4wh0VsvJ3Qe69eW+kj98ocp35XEZCED/eovLsb4wq8 7J9d5VvYQ28IOkG78KlQOsyKgSLGERNT9LAhIHEGd2MXQKI92KpMXFWB+R0CmvmK0U9p+C85Obxq DjEpPw2CRh4q6Qa5bnI1b6xlZOlon7FWflJ1WDt00fHDl/4aLV0s/Vgj4m5W4MJ/2vt9gSRFNDlY 6iQrInVypxFaO49eNnSkfysmIC9ykPxuo8/sOYDQWwA4CpCaati/fPDFFMJ5twciGpX6ds69Ukik FbANvo3UnEawDw9OrQiEWwoBsmr9bF26edDXCQ== )`
	RRSIG=33348 and DNSKEY=33348 verifies the DNSKEY RRset
	RRSIG=19794 and DNSKEY=19794 verifies the DNSKEY RRset
	RRSIG=23689 and DNSKEY=23689/SEP verifies the DNSKEY RRset
	RRSIG=62614 and DNSKEY=62614/SEP verifies the DNSKEY RRset
	DNSKEY=33348 is now in the chain-of-trust
	DNSKEY=19794 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 56806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 33348 fpki-lab.gov. nx7z++Z/Z/tpO1bIPklqwOlsUj/ctj818Kjwk4DwwCywnPLHRuuhAIch7PUKCljNf0LaUnvfFXsV w/lwCBAZgHA6LgZ8fjDcSUF9rqvkonPKBG523bdY+gmgcmmvC4f7hfFtsfuNYf56nft+8XnyWQMy JpJOXK5RpeFMBan0NIgGs/DvlwCvNiX8l4IWNaEvwtR3YSc0GRC9O+rETw5KPYnv0yRVJj2wnIVX Oy9vEyN0L1KI4zOZkS/kohS017HVJSarew8kSHPS9Vjd335eVgeEt3O8yldZb6IXIOJ9ksRt6n6Y odcPWXJgzQOpSfcdHslj4Gg80zVhnbwvNjxVRw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 19794 fpki-lab.gov. KJV1NiNfjf3ryGCmA+BcvsL8vNiLHOyEIwRYG4Pez71RCc3j07hQhU6t7t2Gbbgrp9de52RSwzFB W3uoyUcxvx/oI+ty5BIi6riR+OR/xDLq2dbz5TuVO37qHwRoiM1i000zxjWZTKepkrQPILhhiq8Q 8pvr3wZwQT9TG0ld4VeUzWm6SeApDNXEA2r7Sr8opr6Zh+0VQrGcHhpkM09DVbvdi0qG50NaQfoa SvqYHgLh0M/L7Vqiruu94xu+5bbKbpM9+/17HFbqM+pm6kOyI06zCF4NvUYoVZtXYvdQOAyo8irU ow9gDGPRgjE7IkU1ddsAfElxj0vdM/xxgzAtzQ== ) pblr7o61375mue3bu1e9fbigr91vah9b.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 2aa81110379d4886 pblr7o61375mue3bu1e9fbigr91vah9c NS SOA RRSIG DNSKEY NSEC3PARAM ) pblr7o61375mue3bu1e9fbigr91vah9b.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200128232907 20200121232907 33348 fpki-lab.gov. q79OW4RaqqPoD1fW1xlUN+QbZlokE7rPiO6BlfK7RPQLtYI7HjjYhUIg+QUwSrKC2acT0rmXoY8M TxQrqhTSOqQyvKV3WRG0Y2VckMi9Gj4ZcnL+gkXbdkjwnqQTVnuMLCs5KJYxOdRkfbd3sAzjEGiy nX4BtkHUELywkwr4KhdMO9JhJ6OaPS98YxipZTJzFvAWOP+FzukvNvFXsZEvCwShjUebi4UEU7lg 4A13E7NdjuUXWwpig3uZ5/EATWFIV2BYtKu55FW4ipxXMzcVNoeY0jzv7Dfa9F3/8DpzTMFSjnpq wd+aLQrpttJT5rAzJW3wePwbsqWT93z/zbBo5g== ) pblr7o61375mue3bu1e9fbigr91vah9b.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200129230413 20200122230413 19794 fpki-lab.gov. AyUkDjdR33qSPIpwcgFnowfEqaXC6kUl32/cm08c6OYdJ/u9frwKGyh/LQRtcsx/Vy5HT2cdMC56 WAqyiqzRSBZt2R9W8Ezg0UfsF/X4at0ShuGwdQjWXAJlUaPUrkplljbft6Yu7JJjm8HPxsz7Ehfv /PJX7wigFaV2WXnARn7n3PYYzG1kZADoC1vPCgbKW6lVmEqVpzntburrl0zlzCRZj4205FrqIk6c EuIqQ6jxGUxOeMpv2dwxnnK1NDjw9aXaqwk2SCWB4x//gaVHrdsqeN3lnyyrBXzFsj8/JClZU0go txecDwnhx52T7xne8KMQIqQp+CpiCzTbGWIMsw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 15233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172301 20200123172301 33348 fpki-lab.gov. 1rL163Syq5YLn322fddX/Tvh52iED571IMVsHLpbfLk3Nz6v0+ARGuI1CjPnmI5COcr675oJvZX5 cniXVMr8WzMUNPPiRHTvYDM3Z24w04tDbLfo/fvaQEusx295KsxqnO853vIrTAqjpq8qzC+fcydn PXMsvmL+RqmtqEhPJI/49CrPtCAsaljp319mefVAtjL9V7xjjVaN83OwnvTipvPQ1w2tPdSrsbOx pvrhtd9N2OdFyMNVAH8kY+645l9oTRBGPKxgMFMRW/S4NWldqIKDave6I67CBlzNNgItK/OnU1Zo 3E3iBOcFD8lrudxbfQHM0wcZrlvnjn5HNE7vfA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172301 20200123172301 19794 fpki-lab.gov. bRSrK2suP49I1TkC25eHXvVXNQ4b8AxrxrulLoZYio1An2CIYHAYQBmrF+x5Ho74oXLk64IsqRgP ri9Qia79Vu4E9TPe3nbF6nD+hUgsQe2dIKKURnKM1KuUlTtqQPLimOk05UakzvGNKBxKuAA2j6Kz oDM6ME3VzUx70TnKBcIDDVYG+DW9Q2Z5DaAPN6uyIpfPFpBrTHiKGfPbAzv8stZtUvJzs9ZWIWCn d0EJ9rxzoSbK275KKd+UYx8haPdhhVt7JA9xynZVUMqTnuX02B6+kRLQ0T+K0+7wyOgPovy0J1SQ HSmSaPkkDUtcV2rDzMBWPbzVlhPIbAk0N3GNzA== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200128230002 20200121230002 33348 fpki-lab.gov. ytkUoXoDcXXsuH0lUEJkYW6OfIgys82m/13qvpNFcr5z5ydWITO57A9gUo12xCC15JVXoasnh7OP oKsj53aH7YFNQ/qlwJXWKul3uT22Aqe11zQNA/1Cr5NBjo3LQtLj59ZC2A3fMjkbKufsXomr+4CY keRGX138RA9i363h19vXboIDeL7oJv824i9UmnWHwYHFEXPK9tcWFwpVQrwdfy+df7KUYVIslv2m lyn/J0RQDm6VlXlwDRIYbDqMXpTnNz18mfOhEYOfNSSHYrOKFLsVZXbbcLW6BhfCNtxO5F9cbmJy is9TEu/Xl2VRRhQbvxJdi0D1yrUn4fSrax52tg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200129225057 20200122225057 19794 fpki-lab.gov. wPDfVjZ86kgbceyH3M36qTWrIZUsTzs4hsA4Hraf8dnXPIx0hlzUoDJz5eo3/4I0RZW3K5LO6dqj x0W/d0+yY01nxberkDvYVhZmtQnybTwlH0fWHMNrQSkUih7EiDOGz0rUhXRg2EeqR7v1ky442Fp8 o+bzGAjLLk0fJHaTBt/n54lkD7IkE1hkWW0mkC8j4aNyse8aBugyXHvI7Nm1hZczD6F+WVgtkpBx ToaKK100yHESNRU0t5po68sMq/gTE30JLn2HGGfgKHSSMAvJgPusvei4oQMI2ViqpvO9IovCvVDi oTsR0+Z3SJwYDtGjBJyMyiCAsWPfP6HDKx+H7w== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200128230002 20200121230002 33348 fpki-lab.gov. aeEiAu+bLIuR1dY1ajtMFQDM7r5gzCbzA2gMDMGVYAqDrmOXjvXVW3oLO7ahtVD3waLUAiO0booG wljqeOYv+VKdSzWvJvyRimww9FyvocFxsOB11SV2RJ5G/3GFtHzRGVEzvp8pcptWgRyJY1msVQXc vGYx/7Iav84LVWlEEX9BBeqyfzDkq5H4SKiXEUxlgSC9xtzOXsFxg+49ZAqM//Um5qySiXdv+bDU vRDwH5Y50eZ6IFsxECY4t6Que8XCjcaSmg+GerMx8yfVfo8+n1pCtee94AgnH7dkL7WVTsINT8ug QzYRi8xOUpnskk7puLU7WSDO7bl7UGRJGOUy2w== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200129225057 20200122225057 19794 fpki-lab.gov. qIBobWK2awQRDC6oSRKoVK0nrxv/wfgwX6dChR9vpoOqQGUA7EcEincSZnKw+NQQ3iLdeXIRMR7/ dUWJy7n3GC6es93VB8y9CuKhxW7HZhD5/GvnhDtclqvy3zHGxUZix18Dzvpwzo+46HRvtnrQ5MEA SfduBRXKVIajeavHapbLQLsDlW4XSlPic6aAGqTvn8jtvVzDxBLmfca3Nwh2eXrb8413cpxwP3Qq ztcpsfQCaAS4h5fvB6i+BlKOenHvzDptrBfmIP0HeLhp/xzo7rMcbOOiit7hJ5cDaDihB9BFuLgZ LjSkUR3PFSOljPpy1conXkt+fz/ic+dl1Lh+8Q== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200128230002 20200121230002 33348 fpki-lab.gov. 8dviPqP+cge8gtd8s/3B4lJHrH0zg6saHU7iwbVUPY2fV2qPyQxWSmOhF/ITRiMQmw8nktK+HsCa cwT0n7tggf0D3IojLaAnXJdDD6sK9wQlOoIGOzT/cSfjJeIh3mtg7PUrjZ714ksF3TkJeHQts0eD qPptOFByMfFzuxiRmXdEqlYSw7PJaHgM+TAVQ1TrXdJwHbj0Q5Fl9PAHl2cFvX+rLT5sz3uGstY8 qb8ft724iC1ZeFUFjm9JbZw1+IFKNBTlxl1wthndy7EaJOjLl0/gUEGYa5SJ9wIuNur+656GAJE7 ZHylSCWEVI7Z3diq/OOM3GyVJiVFnIcFhtFfEw== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200129225057 20200122225057 19794 fpki-lab.gov. S9tzCGOq0rSCG4xdylPGEm1IQlTYqZ5AtJ5M/BSsxBM3OFt7vwu1fcl0P3NgOPrd2a6UOW0g7K0h SJ8pBF6VbVu1oo7hjOrM8IZoO2H92SGj0bt8c9qKlVXmMbZ0MfgtVD8Ov2Lb+6pW4JfKEZg38Mnm 9815xKvgUQiHWZqbufn7r4OKFf+sBqRHl9KdXtJ7VjLX/JC7gEPxEBVIpxICMy++5KZaDWhFzQME 8qhEJjqU6MlOGBA2bG6WDrQIICH49nUcfod20OFpyT8UnDtBoiIV7e7/iU2ne+5rcs3OPmziSQ/j ewqsC8752HAhvteskBbgZDUEsG06u5TYT0VJZQ== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200128230002 20200121230002 33348 fpki-lab.gov. iHCTGBAyzVcOqKjeyyX0ODeJrFIiuvUggd26OIWaLnb+v7m32AdsYP44SSAuZkvT639hq5dYCzho pato7lyUn6FFrtLdHRqyijQnIO2/ejWZVGk8spYWbkIoi++zXJN3XvSV6O9Lq2jHPvpVhNo2Z9hO xJuLR3qtf56HBWX1fdZNX4fjTsHvc+ZlFALDB8/3lqouKggUTdGLI8qCsJXxLtSJbQWEkJOWUiyi yLmyhPpYzZiZWM2NwffjagX+a2ZXBrtNDPewZsw3ExOhC9R0N4TEvDYn5tYsW1Uf9swsYTGtuXAy 8Ic08GIlKLDxYHEyZBSm85xo3naj00Xsd8TG2A== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200129225057 20200122225057 19794 fpki-lab.gov. tCPm8OqHyNO5ojBUsGrksvFulmlJT9pgxqUb6D0EoEP0QCVAAm5QXh+6V6BBm4cr7rbyobu4eYzz ZKAUzIAOfUqUVPw50AbYt/VVJs8VbQVC60JFRIjqbDuhMEpOfcaoaV4Z5m+x/BUF5z4CWwbvcAOL i9BMBas0hByf05QQhlzU/NjkPe8ZBtI2n81plyRFvJLlzujUvdCndskZ4d2JttP14DCV+VVoFUgd 4XocWx89eaqlo4kFNUv6p6rJEPXGTbf1zYtkZWc5p1EGrKKF12H1yDvfBH2sgRF25rMOUr57nxf5 Jcb8n8nflz86CbDlI+b6Rgl63etvQMgPzVTQXg== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200128230002 20200121230002 33348 fpki-lab.gov. myxFKoZo/xFXDnfIQ7XjrVAYGgMUT29i5UbeLzXw7ZNwr653eicAYDtkbIhmjERrvvyvlQZriS8n /kbJ1bogiiOWZPxtNUjpQYjG0W2N73U//iNplDgf06yJT2G3VlhGcmWp+DzPbdzHqX7Vt5iwgpJw t5wegFbKUb/OryCAQOdsAS6rmKV+T0B0CwDuo+r5zFkfVXIECMynv8VUtGz/Phx4o0P/n01ehz2i Uyl3vLWRYgDoqX/MupEX0UXxS1OsRWgIL9/1NG4nDJkYvY2lQx2kmdsJtjGczEES7fr6rfhM8Fze SSZL8awYoevlH0bCtyvb84PbUXrQgRPwoBuTXQ== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200129225057 20200122225057 19794 fpki-lab.gov. p+PjWF/1TX2Saa9hqKRsi6w3N1MTjJD0XOdSap1C5jt3wAv/kw2/z9if1nMrHXQ/zgvoMs9cSe5r iX8cP4AzXrJuN5cu1dYZjs0iN6bnzcWQNC6uYOzuXAyf94ripdwJNHgwDcCQaUziFx1OpAhwvGet jDgTgykBgUl2qCKZj40S1LYsYpUsiyeY1FaNkG+qW3q7Mtu2eaIgCyLPU25w+TpcO8tNzQMApKEi iCaj/Y75PUjDG2aXZimblRRWSIW3PuPZKaBtcN0QnNEmUotMMRa8qlI+ZzRrVvgr87zVobKL6dkQ xhfmqeIo1OH4Bl6yVHnkBxcuAV+ylvG/hSKxkw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 28510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 33348 fpki-lab.gov. nx7z++Z/Z/tpO1bIPklqwOlsUj/ctj818Kjwk4DwwCywnPLHRuuhAIch7PUKCljNf0LaUnvfFXsV w/lwCBAZgHA6LgZ8fjDcSUF9rqvkonPKBG523bdY+gmgcmmvC4f7hfFtsfuNYf56nft+8XnyWQMy JpJOXK5RpeFMBan0NIgGs/DvlwCvNiX8l4IWNaEvwtR3YSc0GRC9O+rETw5KPYnv0yRVJj2wnIVX Oy9vEyN0L1KI4zOZkS/kohS017HVJSarew8kSHPS9Vjd335eVgeEt3O8yldZb6IXIOJ9ksRt6n6Y odcPWXJgzQOpSfcdHslj4Gg80zVhnbwvNjxVRw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 19794 fpki-lab.gov. KJV1NiNfjf3ryGCmA+BcvsL8vNiLHOyEIwRYG4Pez71RCc3j07hQhU6t7t2Gbbgrp9de52RSwzFB W3uoyUcxvx/oI+ty5BIi6riR+OR/xDLq2dbz5TuVO37qHwRoiM1i000zxjWZTKepkrQPILhhiq8Q 8pvr3wZwQT9TG0ld4VeUzWm6SeApDNXEA2r7Sr8opr6Zh+0VQrGcHhpkM09DVbvdi0qG50NaQfoa SvqYHgLh0M/L7Vqiruu94xu+5bbKbpM9+/17HFbqM+pm6kOyI06zCF4NvUYoVZtXYvdQOAyo8irU ow9gDGPRgjE7IkU1ddsAfElxj0vdM/xxgzAtzQ== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200128230001 20200121230001 33348 fpki-lab.gov. 4D7E+ZZvdUda5eMm9DA5kzb5YhFGW319Tsw7m16aLd2RQYQIFqyg+srMUYpAT0948/bhHxpApiLC G7tWDXbsIujc1c0syVt6o6GOsNZ2EXjAW+yZ183gdmVywOKjFF7gY+ZJFwm/TZGyGkDOOetuXeI3 CVoNa2n6YA2khJa5YSIywyqpZvLZyOGKcGsEvTtPl39oMnVKHAJ2JJ4Sg4P3oD6kA/CxHeTS//IC 1PvQgclZMxV0QDsz6i6NCZMjV9U3waVf23m6r7WHye2nozMcDo11joJQCz7KO5XFNtlueVI17MU1 CbUrdZhlj/ntVPcSrbl865DcpsEPPDzYk7bATQ== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200129225323 20200122225323 19794 fpki-lab.gov. dzsEtijjH/0fXw2p26qLx7LM4fpkuAbwU4JN8UKpBVrFknUq0iGzEjF90rUfqtIcHdI2vEX9F/KQ G8u9oEUP3XnyBzG8n80zLPULRyLB1AFNbwYxbWcY8MAkKVYcJxCIKWiUYSdzMPEiqISSIUvoXe4L i0P0qGcHuMNq+gVEcemzbv90TYcOXELSJsynWYDmN77wQOJcSiUfGGkW99PyZusliHwfFlt3jVYd wRHQjFfMa2kkk8Q39kIOxjXNNPWye7+jVb7m9U78lLXvUeVz2ymuVWj6ByquskNRaj94QHOJuDhn h+9tlG5R/hSivavB2FaqhS+F5TqbRd+I9a75FA== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200128230001 20200121230001 33348 fpki-lab.gov. zH/YKqa/aPpacGI2thiH9eZNMTJHacMU9xzW2OT9auGiFsHo2+S4HnMgvpCp+TiTc8DKlQyKTW0d L0j1UKKYV6jCYFL52PPlkIyOacCiHtxvVPebs8FnDFLSVxe8hIyl0gclyL9f/iEp/7FmeKV8TLEz SABmM4WMz+b3W4Rdz8LHvO+XrNSd29sHkZaj1OF0f9GE9dIn9lKEuFStW/JwQh7bssVYqxASPnz5 a9fKFUOP/bXJ3LlYDt/0+JmZSfvVUTomQhLdmJiuJ1AASn24WVqEshjwCH8yDL6GlM9qCtrhQ4qf ewxt8ZUd0DQK/IUzKod2+ZCYn0auGs3VCuYhPQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200129225323 20200122225323 19794 fpki-lab.gov. vf4SVWZ8Bbq+bcevXQTO15edp5HzlLWDxA/M++spXcdA3Z+DYarOVG3GyvAwN53xD7UQsDLgI++Y RJLCdpdMINei/0gn/nVgGnJbb4vUQepgxiuSsWTggBK3GzOdA2lC9hUetlYvtAs5mYkzsHw3S+Wt +0n+oo5BYXDPtsqD2kVXm5UNPDIjmzIIXTc9b97QC9BSB0n3KTU/toqVIxzOgEnkunpSs9d6TlOY uYXY6TqOpDPbGM7V+Ay9iIJi1I13dZClah5RYj95hWJJ9mRovbj6ZFVTMQU9clpcsC91k0O5XOhq /3LqU+F8q7ZUZLztPo9AhHp7ssAmVvOTxFFEng== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200128230001 20200121230001 33348 fpki-lab.gov. MZO9FgZqX0XT1bg7oHi5yDhPbFrJ9CD3TcE3d6KeBDB86EF4oWLRVys5I6b7e8JRAkNAHcbByOLl JtCe6NnGUrIupt3yv3qjpmDrtwYNLuCywORzUBQcA3ud80kk6IRX5InnhYszKPHAqBC1F66s1hhM ZA6ALqmMl0hr3fRL4t/V3+354QNfbKjlO7hyMn/i+KUDEuF8jRSEaT6HvoB8TOTLvvh2k1qdi1O0 QgH62brxyFx5LxKIJGTdfP6l5eSB26Ai9YgjpF5MLEWh58r3TmqVcdEaqz0k7Iv0LUUhQtVu1Smz +BHVdSeVyZMi89ZUlMy+Ex/lvIE+g4Adz1gfsA== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200129225323 20200122225323 19794 fpki-lab.gov. XuVhNAhEoAuOU7RQSKPIMFWLRmF6oLBfWxx6II9Yw9AoWVEb8y640aQUS2+CrqMmYxuy2dDZAn/1 A+DaMvbxoDWyR3pG73DVqtU2mGWYsmSmt6PkSNbIOb+qcbj+V1Ed4/tTUuTNf9jylt5rV8sX/jPL hbmzjwduSLXpH+urdLpI58qi0/d8X+FVePhCNhxiPdWJsafDe7dwEh7sPwuROG96On9fVQ7RG87Q qraoca7wLrYZ/HEcsbJRTkJtArTZV88JZdNWgpm6ectFceTxu5oqfvyeNP+2TGTylfSMp5+gCsie HIwt6gB6ejewBKkME+jzIYUPosrO5LF6tKMlNA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200128230001 20200121230001 33348 fpki-lab.gov. xbvMynV3pbtOO73R2ARaeWxl1jhzCXPBA78wqMbXfudlqPbRRvVeBcqCYzgC0RAlCfFLE7xurHsO jI+NM8wCe+mzA5CKh2g+3pJvQxeMq5WI95deCQnVVCwJmE8f5tERLA3C50FogYjZYOUa+mSP2O51 k9jRbo4nTCKDkYEDKvpibl3KTrVtgm754xrGClruExL2jovtb+2p1VOhYFgc+vI4uIrDQmCh92f1 5yQ9ccf0dugFcG5bMrz0LBsUEVatC7z60nAcqB1Lp3oggYvz0iIGf4bIvm5S1tPRnpGCpNmfjQ+D 56dhs8SO/LMQCM1AIb0G9GMnQDvYq+QGnxBOmg== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200129225323 20200122225323 19794 fpki-lab.gov. NSxtQi7gX4z25s7TS353vPvRVQKzidsJLsijCdzYv1l5KzOVNZ8WLgnBXSHv5HLkK722klyA/4c+ OjJHJkAM+H2RL5craH1dd+1FxQnLcv2G4Bo+e5rPSXtiuDaV/u97EpS6r51TZf/rhKsmepKlOHjX jNbU+ZpUq875cEl99AShdrmEXRd6iKafVzjCDt75A675WEhSTd+vNXLLURCyE3phheCT28hDMR4s eqY85BWHqMqzkjEq7zi2OcY5r/0TeTh4ZGLS0ZRzihPwRc08VDjRks4BadaRZR+0hx7xCTieGBkL IoGFoofTYzkVL/+L3gd5kK/FFDB4WqpXvRjpSQ== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200128230001 20200121230001 33348 fpki-lab.gov. FN7pvwn03CAWJ/PMbnlvDMPfRPEHcqsWLqpvmn3Dmf4UVz0SKGucX2y29YyXJxLAK4N1S3aOuk0n Dp6tg1KphpG8CtDhEHuZN/f21G71C3+tVgufidXF/yvuPZexIzHgwCQ4PA1UQF9te8xZvo2NofOc fbnFsBoH/7EI+bSw9sLxJIrWczfbVmaEPK0jvuTs4kZqYDsD3wvvzHA4cC84lWFQlEQjUTdqofU9 GpwHonDS+/uWwrF0cBTLO5NeDBS4Gqn4IVh2lJwJFzqybChUlOza5SuSYHafyFhvdF/lGj9DfQbR aquufNo947U3qi51U6EEnDV1DkhNFUGsqw28CQ== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200129225323 20200122225323 19794 fpki-lab.gov. bkX1YDZej+qPOsBqm3kPbQiQ+er/jdEdAACO9Qd7KltzS5naM6y7pV/Cu7nudf2HwgIEh9ivgOM7 x5VKm+uAh2WXYFq+XjEF21gs7UXbcSF4dhar/jfl/4UNqM93m0xefnno6v0D4nyg1a6fGdmnZ2sP vcHHH0KvCS0lxkplw/97vV2LFse+M8oPoDsXPuiQqYqSE8yG1X69wsdyWXN37zrPY9EQvq2WHdRq nnw6fvoPAgnyoEJ091VhgheOy3COFtTUri2T+ErJvS4t9H/jUZfI0QE034+JMzwHu+adVkp1jkQV u2Zi7fjKiBNRzpLMeTjzN8mwvj/cYRUr80msDw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 3783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 33348 fpki-lab.gov. nx7z++Z/Z/tpO1bIPklqwOlsUj/ctj818Kjwk4DwwCywnPLHRuuhAIch7PUKCljNf0LaUnvfFXsV w/lwCBAZgHA6LgZ8fjDcSUF9rqvkonPKBG523bdY+gmgcmmvC4f7hfFtsfuNYf56nft+8XnyWQMy JpJOXK5RpeFMBan0NIgGs/DvlwCvNiX8l4IWNaEvwtR3YSc0GRC9O+rETw5KPYnv0yRVJj2wnIVX Oy9vEyN0L1KI4zOZkS/kohS017HVJSarew8kSHPS9Vjd335eVgeEt3O8yldZb6IXIOJ9ksRt6n6Y odcPWXJgzQOpSfcdHslj4Gg80zVhnbwvNjxVRw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 19794 fpki-lab.gov. KJV1NiNfjf3ryGCmA+BcvsL8vNiLHOyEIwRYG4Pez71RCc3j07hQhU6t7t2Gbbgrp9de52RSwzFB W3uoyUcxvx/oI+ty5BIi6riR+OR/xDLq2dbz5TuVO37qHwRoiM1i000zxjWZTKepkrQPILhhiq8Q 8pvr3wZwQT9TG0ld4VeUzWm6SeApDNXEA2r7Sr8opr6Zh+0VQrGcHhpkM09DVbvdi0qG50NaQfoa SvqYHgLh0M/L7Vqiruu94xu+5bbKbpM9+/17HFbqM+pm6kOyI06zCF4NvUYoVZtXYvdQOAyo8irU ow9gDGPRgjE7IkU1ddsAfElxj0vdM/xxgzAtzQ== ) 5m6r2kess3s4kkgoh7c6e85l0kg2jf2a.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 1d77cae567d27359 5m6r2kess3s4kkgoh7c6e85l0kg2jf2b NS SOA RRSIG DNSKEY NSEC3PARAM ) 5m6r2kess3s4kkgoh7c6e85l0kg2jf2a.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200129000255 20200122000255 33348 fpki-lab.gov. o+EeJ6zJcedqS6hCh25fNRTzo+FOHWJNh/WXW3WO/7miNXtrJ8+CitLiuUVD8dTgYZ10bSMFX8Ti SdxRgI+YNfciTmCmBW7itrKF7CT+1G25jttqqk48qvi/8eCwfRGyw3cK+AouwEC7E82DIbeReBuo yYAhzEyiNxA494VnuZHvbhp+a4zTAKYcV7HzPGZrw+pZOo+EGd3PTDeAdr2ROkaboSpCUZmJ++Wd VOm5UTpX624lGihiPRDfM8FGoLwo6mDGGyBkAnCHPkVZXpd9BMIi4hGirTH1t1Jj1rwX0Vvj6AfI pKrASaIhW4KDkfLFQBMfuu7+0uPBqkLR6kjgxg== ) 5m6r2kess3s4kkgoh7c6e85l0kg2jf2a.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200129231946 20200122231946 19794 fpki-lab.gov. l/6dnZmKX1aM9Igi+zIRMe6/Dub5NZ5dcgnCJcKsTGrFmll62qDuTeyZhJhZTKpQcB8WV+Z89KPJ SEJFM2ihAc450iFn7csUAqvUL73OuPBQS34p4/gOZdZ//23A//mAOLgL2DjSYF4atd7z2whRiMll yRLlqUENqAOIQmJYi4XgoZrqBga649arvrMKI0l4ZbnaNaroQdvUNGJ4JIgQe1YNpYdhg2/H6MmE fit5ZtAGfrSyRwwyTAu0JoDqh1FXqrpGSY78avMVVxaNwsBVEzU+4wwY2mjlmXJ5mITKQo5x3U5d TEVpj1UMCuJAerz9Enh1YV/XzKOnSdEeCGID4w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 33348 fpki-lab.gov. nx7z++Z/Z/tpO1bIPklqwOlsUj/ctj818Kjwk4DwwCywnPLHRuuhAIch7PUKCljNf0LaUnvfFXsV w/lwCBAZgHA6LgZ8fjDcSUF9rqvkonPKBG523bdY+gmgcmmvC4f7hfFtsfuNYf56nft+8XnyWQMy JpJOXK5RpeFMBan0NIgGs/DvlwCvNiX8l4IWNaEvwtR3YSc0GRC9O+rETw5KPYnv0yRVJj2wnIVX Oy9vEyN0L1KI4zOZkS/kohS017HVJSarew8kSHPS9Vjd335eVgeEt3O8yldZb6IXIOJ9ksRt6n6Y odcPWXJgzQOpSfcdHslj4Gg80zVhnbwvNjxVRw== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200130172001 20200123172001 19794 fpki-lab.gov. KJV1NiNfjf3ryGCmA+BcvsL8vNiLHOyEIwRYG4Pez71RCc3j07hQhU6t7t2Gbbgrp9de52RSwzFB W3uoyUcxvx/oI+ty5BIi6riR+OR/xDLq2dbz5TuVO37qHwRoiM1i000zxjWZTKepkrQPILhhiq8Q 8pvr3wZwQT9TG0ld4VeUzWm6SeApDNXEA2r7Sr8opr6Zh+0VQrGcHhpkM09DVbvdi0qG50NaQfoa SvqYHgLh0M/L7Vqiruu94xu+5bbKbpM9+/17HFbqM+pm6kOyI06zCF4NvUYoVZtXYvdQOAyo8irU ow9gDGPRgjE7IkU1ddsAfElxj0vdM/xxgzAtzQ== )`
	RRSIG=33348 and DNSKEY=33348 verifies the SOA RRset
	RRSIG=19794 and DNSKEY=19794 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: