DNSSEC Analyzer - FPKI-LAB.GOV

Domain Name:

Time: 2019-12-06 13:09:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 62027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to b.root-servers.net for FPKI-LAB.GOV/A
	Received 670 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (670 bytes) ;; HEADER SECTION ;; id = 19661 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191219050000 20191206040000 22545 . r3+cEyuEUUkk8iM/SgQseVhe71J2URZQs29zSLubYMwp5sy1rm0XHfyaJfoCSH4R87hITE8hms5e RZL71yVKB4oYNjb6e/axP5SOl2bit6jMA7SelaKd3J+r8Lfz6Sya9IxnQ4FkSb5MTQWl3Gs8q25T g4H+h3xxXHL1I/HJXOv8EYt0dkdxV/YF7vkPhVODWs3JTpVh2jCkMOR51cuKQ3hJcJGyxnm568mk n/VWawKWNebbWFzsv93hegpd+5Y/1TVXrOZMmuc1hPB3At1m6JFORfJlCISzgkWUOXIpsE3IdBY7 x5IxUKmYS1ylF5nLd0L1aAY+r/EAWhFEc9PJ3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 5925 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191219050000 20191206040000 22545 . r3+cEyuEUUkk8iM/SgQseVhe71J2URZQs29zSLubYMwp5sy1rm0XHfyaJfoCSH4R87hITE8hms5e RZL71yVKB4oYNjb6e/axP5SOl2bit6jMA7SelaKd3J+r8Lfz6Sya9IxnQ4FkSb5MTQWl3Gs8q25T g4H+h3xxXHL1I/HJXOv8EYt0dkdxV/YF7vkPhVODWs3JTpVh2jCkMOR51cuKQ3hJcJGyxnm568mk n/VWawKWNebbWFzsv93hegpd+5Y/1TVXrOZMmuc1hPB3At1m6JFORfJlCISzgkWUOXIpsE3IdBY7 x5IxUKmYS1ylF5nLd0L1aAY+r/EAWhFEc9PJ3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 43648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191219050000 20191206040000 22545 . r3+cEyuEUUkk8iM/SgQseVhe71J2URZQs29zSLubYMwp5sy1rm0XHfyaJfoCSH4R87hITE8hms5e RZL71yVKB4oYNjb6e/axP5SOl2bit6jMA7SelaKd3J+r8Lfz6Sya9IxnQ4FkSb5MTQWl3Gs8q25T g4H+h3xxXHL1I/HJXOv8EYt0dkdxV/YF7vkPhVODWs3JTpVh2jCkMOR51cuKQ3hJcJGyxnm568mk n/VWawKWNebbWFzsv93hegpd+5Y/1TVXrOZMmuc1hPB3At1m6JFORfJlCISzgkWUOXIpsE3IdBY7 x5IxUKmYS1ylF5nLd0L1aAY+r/EAWhFEc9PJ3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191219050000 20191206040000 22545 . r3+cEyuEUUkk8iM/SgQseVhe71J2URZQs29zSLubYMwp5sy1rm0XHfyaJfoCSH4R87hITE8hms5e RZL71yVKB4oYNjb6e/axP5SOl2bit6jMA7SelaKd3J+r8Lfz6Sya9IxnQ4FkSb5MTQWl3Gs8q25T g4H+h3xxXHL1I/HJXOv8EYt0dkdxV/YF7vkPhVODWs3JTpVh2jCkMOR51cuKQ3hJcJGyxnm568mk n/VWawKWNebbWFzsv93hegpd+5Y/1TVXrOZMmuc1hPB3At1m6JFORfJlCISzgkWUOXIpsE3IdBY7 x5IxUKmYS1ylF5nLd0L1aAY+r/EAWhFEc9PJ3g== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 29130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI-LAB.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 530 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (530 bytes) ;; HEADER SECTION ;; id = 57281 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191213101007 20191206101007 14320 gov. UyUQ6mvO9tvdg+oszQ9cqErmMsoRli6YFh3gw4bvrIPj3b8EytiEEnUX4J9muccDgO7U23nJQFRC aCIS7SoHqYrzOjgzWJ79HaQspImiMM0HfrmZ9KGGSu1R1L/j1K8NeGcxdUVI7dxhekgFJaZeFxpw 29wGkpaL7RUNtxOkd82X8TqdIVrTnCxwwMtkFUKRd3i32b8iioEFO6xFowOEzQ== ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 530 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (530 bytes) ;; HEADER SECTION ;; id = 8972 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191213101007 20191206101007 14320 gov. UyUQ6mvO9tvdg+oszQ9cqErmMsoRli6YFh3gw4bvrIPj3b8EytiEEnUX4J9muccDgO7U23nJQFRC aCIS7SoHqYrzOjgzWJ79HaQspImiMM0HfrmZ9KGGSu1R1L/j1K8NeGcxdUVI7dxhekgFJaZeFxpw 29wGkpaL7RUNtxOkd82X8TqdIVrTnCxwwMtkFUKRd3i32b8iioEFO6xFowOEzQ== ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to d.gov-servers.net for FPKI-LAB.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for FPKI-LAB.GOV/DS: 'IPv6 transport disabled'
	Received 404 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (404 bytes) ;; HEADER SECTION ;; id = 30622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191213101007 20191206101007 14320 gov. UyUQ6mvO9tvdg+oszQ9cqErmMsoRli6YFh3gw4bvrIPj3b8EytiEEnUX4J9muccDgO7U23nJQFRC aCIS7SoHqYrzOjgzWJ79HaQspImiMM0HfrmZ9KGGSu1R1L/j1K8NeGcxdUVI7dxhekgFJaZeFxpw 29wGkpaL7RUNtxOkd82X8TqdIVrTnCxwwMtkFUKRd3i32b8iioEFO6xFowOEzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=62614/SHA-256 has algorithm RSASHA256
	DS=23689/SHA-256 has algorithm RSASHA256
	DS=62614/SHA-1 has algorithm RSASHA256
	DS=23689/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191213101007 20191206101007 14320 gov. UyUQ6mvO9tvdg+oszQ9cqErmMsoRli6YFh3gw4bvrIPj3b8EytiEEnUX4J9muccDgO7U23nJQFRC aCIS7SoHqYrzOjgzWJ79HaQspImiMM0HfrmZ9KGGSu1R1L/j1K8NeGcxdUVI7dxhekgFJaZeFxpw 29wGkpaL7RUNtxOkd82X8TqdIVrTnCxwwMtkFUKRd3i32b8iioEFO6xFowOEzQ== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=62614/SHA-256 is now in the chain-of-trust
	DS=23689/SHA-256 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 )`
	`FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab )`
	`FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7`
	`FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64`
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2345 bytes) ;; HEADER SECTION ;; id = 9246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAavYtVdCFkh9glES9Stf21ENKOivvBW9LLaHGdEj2N6VN3s5aV0q9mIqQnB/WciMQFv6mTvp 9TfZYQA+ib2v5okqat5N5JJjVteac1vBlsoBz2VkZpHh5dbVcd0Dwq4U+F/oIwTakhZhG5VMEkf3 XQ4QoFprtLWVVNPHETrefbUayzI6mytSJ76POZcWQTmJQ5TMq6Xz591mSlhEFVYfefgkz9r8F2Mv In8iIt/f+gRQuh+dKKZhYl5d+9PkPtqQ7fq7s6u5RcOblHqnFlKixOBvYu/HvExiNgT1S17inzjJ pAjf2UvMoBdTH7TqUxuYzV5inRh2PTPxS2qbscRZXok= ) ; Key ID = 57123 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZVVk7hfrS1dPnGpCKoraAmXrblwziyB6f0EtW+ZiKEeHLp3jtzX+qrwZS9Rd03Ya/N8ee+6 4X8qGAW7obc5q/fuAk8Ep/MX6HNTSHZfjUJaRrc41h7fortaKXIZwzcyHDSkic3fc0kP023CzUVx lC3D+2j31ZqDzQhJvVZq5Mrq1n//zKQ3teAU/oiWmyiVuhiLaBH/8BWC5H62aocgNPdHi8XIQDnC ETgjM26w/RWep9laE+FB10GHPAJ0R5Kz/0xcc7dBN2ZE5sMP4m2iimEy3CNjJjKJiOlHDA50B4Ty ORZeV4v7QuUa0XClq8yfnuPLQC4p7LWdSGx1fIlzqxU= ) ; Key ID = 8115 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 57123 fpki-lab.gov. RAMwipzZnM9J2289LFjlgODVCEw1uHaxbnKHposXGH9KRYEAODUVsLNoptjsdAZePk3LG77kHZ8p pCjIRWqHu/lbIHZi3yIC/xzGOJhFDt487vF3AWJm1Pv8RznjinkUhTnwqtumlCO0r3ayHtW/a7D9 8rK+ohS/LQPY33YO8KWXKZS9Pdy4vasIZnmXJ+EcKMRjddQe5LTUFX+gTJpMCOwqqr57iln0bOa2 7XTwxlTVCc5hp0wI7IeUo0MG59KtjE/3f1UuHNkaG13BVA2q9brGkAQm1T9eaDj6iPx9IbFwXj4L IzUvYN0w4cJaILksRxMJ8QNHONZQfJAtFal2Lg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 8115 fpki-lab.gov. U7V1xkbvXXSzKf2dCMAYkmUwf9wdoqoqMhY8z0RmK02uGyOwDvUKq4JypB4meDIyyy1X2ixXh8MH Y4l+LXABazKhNN5JCCdxP6TpxogMNG44P2OL3md2p6iI5hYoaeudGliqTNe2v2R/figOOPJJOQky j5sItBE7H94i2UQ6MBHD4DjNVkMh8FSwKMjbucYeX/VKDCG7pS6JFBQmco7diQAy4U8xNBJq69Nz 0VCI//ylTsrc3CT+w9Ntp2TesDRcW6/9KNRIhXlU/d+WAojYS63Gcdhhy+/vx0pvFAPDpIO4iTwY V9Bx9gPQJiYh/J3bSb7dlh2ZUCLAEpkYYVmMpA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 23689 fpki-lab.gov. VM98KNqF5v4TEBwdlElMggoShI7V/rjL6oTW1uP6IaPa1Dx+a1p8BhNO3xK6BUgKK2iBiFOK0CwV Wmd/kO2D/meNBopfW+BpGZSkV1kIZN0LrTeO4Y4QYIyooooQUto6NW8THTwsVnTfY8eCegMAA9WC 4jjAho2EJ9s3XwWoPDR3exA1kmiTKqBXkRpHy4rgHfzrccV/YtWfOlERzvDjzsqIzG9FT/9ZDycV TZnUsQs5FJnXv1a6x4Gt6ltQNLxCBHkaQXsZPI/m6JGmRUff5QD1gT2wBbfrOv4LCeqSzPS5FX1z 26e0AAFKnuO0XyDxYaGP1lMDgupFKZfqwlKgdg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 62614 fpki-lab.gov. KUSGQcfy3NZ6DcNUyDz0bCNNGlnBZfhKBWq2ZUe3y1v8vkqKusOSrB/T5Fpll76ja2oP1s3e/dS0 gkYfdLaFRQmsQvsreHljUDenbHqWROE75Ubi7XUfJA1Z3cH+NE5S4okn5Q6AqwAs6IgW56eKxh00 lSylt92pl7c7XbA+uEDvEwYUeDPDWPXXaxBI1JdNuWAfE/fuKWdqvVMal1veON4Ia4f6UcbAI0// B2zy7cie8a3M3157M6XRZu2KQqdxGFMqOTV2NV1qTb8F0j3TgHGs7sdBWLORCybuxhZt4H6HimjK ySTCg9U94ldnBKbPJ/mMRfw07bS3gYhhcea5Ww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAavYtVdCFkh9glES9Stf21ENKOivvBW9LLaHGdEj2N6VN3s5aV0q9mIqQnB/WciMQFv6mTvp 9TfZYQA+ib2v5okqat5N5JJjVteac1vBlsoBz2VkZpHh5dbVcd0Dwq4U+F/oIwTakhZhG5VMEkf3 XQ4QoFprtLWVVNPHETrefbUayzI6mytSJ76POZcWQTmJQ5TMq6Xz591mSlhEFVYfefgkz9r8F2Mv In8iIt/f+gRQuh+dKKZhYl5d+9PkPtqQ7fq7s6u5RcOblHqnFlKixOBvYu/HvExiNgT1S17inzjJ pAjf2UvMoBdTH7TqUxuYzV5inRh2PTPxS2qbscRZXok= ) ; Key ID = 57123`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZVVk7hfrS1dPnGpCKoraAmXrblwziyB6f0EtW+ZiKEeHLp3jtzX+qrwZS9Rd03Ya/N8ee+6 4X8qGAW7obc5q/fuAk8Ep/MX6HNTSHZfjUJaRrc41h7fortaKXIZwzcyHDSkic3fc0kP023CzUVx lC3D+2j31ZqDzQhJvVZq5Mrq1n//zKQ3teAU/oiWmyiVuhiLaBH/8BWC5H62aocgNPdHi8XIQDnC ETgjM26w/RWep9laE+FB10GHPAJ0R5Kz/0xcc7dBN2ZE5sMP4m2iimEy3CNjJjKJiOlHDA50B4Ty ORZeV4v7QuUa0XClq8yfnuPLQC4p7LWdSGx1fIlzqxU= ) ; Key ID = 8115`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614`
	DNSKEY=23689/SEP is now in the chain-of-trust
	DS=23689/SHA-256 verifies DNSKEY=23689/SEP
	DS=23689/SHA-1 verifies DNSKEY=23689/SEP
	DNSKEY=62614/SEP is now in the chain-of-trust
	DS=62614/SHA-256 verifies DNSKEY=62614/SEP
	DS=62614/SHA-1 verifies DNSKEY=62614/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 57123 fpki-lab.gov. RAMwipzZnM9J2289LFjlgODVCEw1uHaxbnKHposXGH9KRYEAODUVsLNoptjsdAZePk3LG77kHZ8p pCjIRWqHu/lbIHZi3yIC/xzGOJhFDt487vF3AWJm1Pv8RznjinkUhTnwqtumlCO0r3ayHtW/a7D9 8rK+ohS/LQPY33YO8KWXKZS9Pdy4vasIZnmXJ+EcKMRjddQe5LTUFX+gTJpMCOwqqr57iln0bOa2 7XTwxlTVCc5hp0wI7IeUo0MG59KtjE/3f1UuHNkaG13BVA2q9brGkAQm1T9eaDj6iPx9IbFwXj4L IzUvYN0w4cJaILksRxMJ8QNHONZQfJAtFal2Lg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 8115 fpki-lab.gov. U7V1xkbvXXSzKf2dCMAYkmUwf9wdoqoqMhY8z0RmK02uGyOwDvUKq4JypB4meDIyyy1X2ixXh8MH Y4l+LXABazKhNN5JCCdxP6TpxogMNG44P2OL3md2p6iI5hYoaeudGliqTNe2v2R/figOOPJJOQky j5sItBE7H94i2UQ6MBHD4DjNVkMh8FSwKMjbucYeX/VKDCG7pS6JFBQmco7diQAy4U8xNBJq69Nz 0VCI//ylTsrc3CT+w9Ntp2TesDRcW6/9KNRIhXlU/d+WAojYS63Gcdhhy+/vx0pvFAPDpIO4iTwY V9Bx9gPQJiYh/J3bSb7dlh2ZUCLAEpkYYVmMpA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 23689 fpki-lab.gov. VM98KNqF5v4TEBwdlElMggoShI7V/rjL6oTW1uP6IaPa1Dx+a1p8BhNO3xK6BUgKK2iBiFOK0CwV Wmd/kO2D/meNBopfW+BpGZSkV1kIZN0LrTeO4Y4QYIyooooQUto6NW8THTwsVnTfY8eCegMAA9WC 4jjAho2EJ9s3XwWoPDR3exA1kmiTKqBXkRpHy4rgHfzrccV/YtWfOlERzvDjzsqIzG9FT/9ZDycV TZnUsQs5FJnXv1a6x4Gt6ltQNLxCBHkaQXsZPI/m6JGmRUff5QD1gT2wBbfrOv4LCeqSzPS5FX1z 26e0AAFKnuO0XyDxYaGP1lMDgupFKZfqwlKgdg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191210065600 20191203065600 62614 fpki-lab.gov. KUSGQcfy3NZ6DcNUyDz0bCNNGlnBZfhKBWq2ZUe3y1v8vkqKusOSrB/T5Fpll76ja2oP1s3e/dS0 gkYfdLaFRQmsQvsreHljUDenbHqWROE75Ubi7XUfJA1Z3cH+NE5S4okn5Q6AqwAs6IgW56eKxh00 lSylt92pl7c7XbA+uEDvEwYUeDPDWPXXaxBI1JdNuWAfE/fuKWdqvVMal1veON4Ia4f6UcbAI0// B2zy7cie8a3M3157M6XRZu2KQqdxGFMqOTV2NV1qTb8F0j3TgHGs7sdBWLORCybuxhZt4H6HimjK ySTCg9U94ldnBKbPJ/mMRfw07bS3gYhhcea5Ww== )`
	RRSIG=57123 and DNSKEY=57123 verifies the DNSKEY RRset
	RRSIG=8115 and DNSKEY=8115 verifies the DNSKEY RRset
	RRSIG=23689 and DNSKEY=23689/SEP verifies the DNSKEY RRset
	RRSIG=62614 and DNSKEY=62614/SEP verifies the DNSKEY RRset
	DNSKEY=57123 is now in the chain-of-trust
	DNSKEY=8115 is now in the chain-of-trust
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 52695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019081521 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191209065652 20191202065652 57123 fpki-lab.gov. DmyN9Fw+GtPic7KOdj1NBo/UBn6SqtYK0QrTytW8evlAcDF2VZ/mcMYSbc9HUf/DUEgVt9JnGUXK iSFwf+iUlZ3BL9n3jyHZrcTa5HwdCrx/cGXSL3/aQpUro9u/aPedaB+VU7vWC0uClo7lpPS2Gwox epQYD9UYag5G6sz5hO/fHvtCey2wWI5QySV+IcTOCJN5Dw78//mCcKo77ihXrQS5ZyBFaockiIej oVTamW05SXx5y0iaR52+tRg9OsprcN2UGfXGvDCWarsKdNWw8xfXFwuB+EdbRUV9QeEpOu9hhRU+ D0xd3Mcf9YOz+s/zd8ebi18JWcbV9DaTj1K8IA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191210065558 20191203065558 8115 fpki-lab.gov. fsMyYvXUiWm7wLchdgljJk0OAUOBfka3HTx6UO0eTZc7mo0ArzdobVrKGWdSXRAdLIGFfPhls1/c 80bjBaU819hqFjSRGb0A6Z6yqDdEVOfs9m8uI/1skOCq/dKI1FaeGvoKbRccVDd7nkfwu2VPoqor bZCGneZCXQt/gUrpnW08dOKrb1KijujsqJaNqVsRENGhWSXL96sIeusa+D5xOv9oAzOnGHE0gt3h wb5Osd33cMq8sTweCJ0ZXjGropT5D2QTHZK+d6yw6F6MxRPGnjCCiyRXc2sCeOGzD45jgQ2u5Iai qr2qY9bbHjFzU915rx4d7B+CcBtaxnmNST5cnw== ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 e094a34d17b0098c cm4n0njsc7e87304t6tmvijmolsujdb1 NS SOA RRSIG DNSKEY NSEC3PARAM ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20191212192504 20191205192504 57123 fpki-lab.gov. KYVXKTSLBLD+9YdqSGiM71e3tHon9U1skZP7fLZFM7rIqHR3gAHSEidw6LHQe76E3Jmt6mtbfgyG j5yMYGHcQjgdQvuWc0JB3aQAY4XPN8iKtiT6280pn9tCO3+hDkY/kXrYw9wBRTWdTSHLLDHVvc6A B0uzUQHO1S6Zy44aUy+KAqasWu6NmmHsY4CoOZzMJVr87Jgnk8UoghXOsBdNbzQ3tIswymY69Wx0 gAcU4+/A+dcwKLlS2Uq5wFFHKh4WYDpFPNaCOI3H+01OAiQ4+vdxZDqKjwr2eYXcKlxry4L9+2sp YoiANw0erAnKaG+Yan8hxKe/Fgy1nf3HgcYEqQ== ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20191210073314 20191203073314 8115 fpki-lab.gov. Tp5bPbc9lNGzpwghnKC41sJoDuZP298dxapnmt0REj3uxaKOgct2Hp7iq0Lkbb5hftFBPLc3CyPj uqhMhNXJnxpaB6bfIScH2SANTEuTI1e53pDUKF9SCNoIWjIi9P5WIosmLdqkhRcTEfN+r9ijmpTU rmHhgLLEZ0hP74Tw26fVunX0e+8lN5MGnEABba0nhdvcCK8NLFyiTFPG1ubKHNFwTWxtMVzu/0jx m6mKY8JwyhWTRxbMP6WTJQR4Ntv20ILHkSUUr4QwcvyefPt5LN4slKOoS+i3F3rbK5pf9fVoNfnD V8m2bMtVCjspgS9jKYw0AZPn3M9qw253rduA+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 12159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019081521 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191209065450 20191202065450 57123 fpki-lab.gov. HT41e8Al+JroSe/AUfZHGRIN0wjOlpeEQ7U8gY2knONdig21xnEk2JjzvAhT0CwyY1qyG8SUJvfG awx9If6XXGN3Or/DVq6SOeixqxP/vM1vSrtowv4lyiD5O2v+PB5bv9ym5XIBgnJWIDfmZ0xyuvVv eBdVZ7wAkkAqX/xJL98ZMsgT0q7S+PLzYDobVY7o1yzGs5Jgh1tDR3bAi44Dpb3Q00jZ9NUEYNd6 VmrBG4TDcElVFlXORE0VqDnXIyBQ7NrNqz7FfJCIBha3j68zo5OCi6SeMxys06rvfkDDq+UCyuSY 90n6/NLrEOoorbgN3wYsQaxtjiymZOVR1QSDaA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191210065409 20191203065409 8115 fpki-lab.gov. fMGNkRxLJ3wsAd/LwzDVstgcDLHfSUVzY2BCPsQI47Aj+luk33w3IQG09UAk9iP8/8Pko/EBgaA1 soST78wJu0Odk5aeAo2Q/Lr9xtfBcbE5pHzLKaYjw4Vo5x+7L/q0f3Zw/ULrjO/T1wRtGN9cSi/0 C7g8i7g4PCHTnpGuN9cyzU0QJuODLOzuw3PlCTFrY5N+BHsABRL+JB3UwvMF3uYmNGAU5e9XTI61 T17spsPGFBpQDKkRX5BZSVpWu2PwYCuFJ7KPYUzZDFpJ4vJPTV+FIgZGalGiBaIsKIMjan4C+N50 O8nW4a2Yx9Z52LmAPdEVXaEBMX3rs4Xwr05lBQ== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20191209070005 20191202070005 57123 fpki-lab.gov. Bh1lFRPkYkxEMfuqWZ8evo0eNd9MUK2dV6Fdb7CgdsM1/cJrr8iOdtiCBJEus8oWVFLx9ZqydXLe wMOJJyFjOz/fiqDDQXGLVaZFG0WLExKnATrCECnQdKXhH/vdy5Bbc444vmqgChA8vgz0633CPyZN TETDBO4MPZ3xr0oWJdncZFbjlb/GH1BUsM4nV7FjoEej5Ape6RLR1hMGs+UXYpS+w130AMty0NDu QTu98vayzpPDfX2cpdLsQv3laU2ICYJzr8CA0F2uHBKR7PEt/AQ42k+E1tXxrlrAIdCVvSXoIylH sACWS9QIKqO68tcQNs5786hEFhnBbkKbdWggNA== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20191210065742 20191203065742 8115 fpki-lab.gov. gXlSCq7OPTlsnQ8yjNArDHKbxIaL8v2cH2syjYVkAW6BsSu693jFgdppxBQQ0h0dq5iGX9GRPBAy NMoPzjyMXvyYSTSKAe2lhK0aySJU47FxCr8OYUwNVODy+jTWnQizZEnZRrKr1N7g12pEtrT5SDBc 1g9fc1Fmt3ZPaU1ZipLisV2It/0FIJYlQSzdDK7QMvb8yU2qGJCbRBKjJ9LH3U6nDaVVsmIOLyPY rvQQ4AAk8sdOD1HLTfawOapekreBavB8jDq31Em6SMHMin1+zhZXSYGG8iFoTj4EBjC+y4iBLzLK qoX1txWXDkaG8SCuat2m5A5R9lWUQIjAdo7oWw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191209070005 20191202070005 57123 fpki-lab.gov. VM17EXUBR6u8cbhHcnQDvoRe1IQALryVK/MASsJnp2SNeoFn8AcjZxFMFd3waBU0ZTf1pOKanw76 aFFusPwZPfH5n7DGgiSAIwz6czaxxJnRccUcjiIN5sFW5SkPEu9fPZdJslskfr/+4k1bGx4nJcra T5hjvz5sIjrZYFij+DkSomvUjfw1H6OydgvBBIRXfFEwUmqX1HtpV+j66jRd2HUBF8RhcVqzmora L9ooxHD3ts2DT5RecZS94UDwYAchfFxVPlQjtFYHpOq5yapFsRXILGOKtp61UVCt5C9TCtgtSwr9 mMAdg3OzfTEARH/vo4bnC3svLvJGagWDvg1VoA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191210065742 20191203065742 8115 fpki-lab.gov. PtqGBrf5HA+/JhiJpHBWS4GToYb/VUQ8tukYfLAgP6sK0FAGQCrUn8B09INk1ZIZ3EcvUnvWKPqd 0tSmjMZ/ZBjLP58OGrb6RA9gU73SSznT10T2PgTtiT1nnxwg0kkcwf9NuDYocOYNGsAgMpU3bKWL fEAK4Cak9+nEl2X91DYisTv6cLDdoGWvKypNydx55nhUGhdkxHj3hxA6PADg7+F2oh9M2PLMl0ra 5To8VNYrSzLxAMnKFdqlxVPDONSHAsi3eVpo8mrip0zFps356eIMTJ5xXCojziK6J8J44MKZ4mTF 0OMQ0PTzbjPxKWlSbZakGe/MniU9NaSLXYi9jg== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191209070005 20191202070005 57123 fpki-lab.gov. l6rJGlcNVvFvEHBv6J3+5LtzGbcnVH3L0L84S4LvRPeeDBZIbgAvTh8i8k/MmT/EDhjZIq9Ee2EP QuPFyDF7JouPrdL3CCb1BuDsspOdnCwujFZos07iYwqksuef0nmVsMZ9VvX0Dk6aqc91ytb4NwH9 3FjFES7dvE+Qz/+qXp9PsUBMRF2ruUNDFsI71Jagql+cf5zSYJ09cKIGHygpQUsa5qRQ6kz7ppuL jtZYtlnjduKKMJB7xtGgPpN9GHuRG1mSPIwO637EOTk2BOip2yyEXIqHBaOoOtvRE/8Z3+mpLWy0 ZTxtMnRtHvhpR+pBDvGW1M13VyKO747BiHnh1A== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191210065742 20191203065742 8115 fpki-lab.gov. ijfJ1qlwUQIR+gXucUOSz4FlKbjyb0mcL2wNFELke9Vvse8rTgY7D/5Yt++N0tlSmqJ2tgUJYxkR t5Ia7FpP3k2tV6z0+o1QSPC5tbHhldvnCvPSy0MGAlUbO8UL+WiN7AMdKylo7WfpcDbANU8R0hu5 4EnWtVPPccf2LRNmI9VQaA3bDoSPOamni9bgyOtrGw5BCS+JDVevOW8qDxRMVmHI3aCg/q2hBlUl vC0lpkmthSTMrRuvvEueHaHYaNmM2CPdsp61avnR9z96qe9fu/iINwhYT0aDAUii3SfIN6FZ72EU 0lkMkwTqr/WRiL6WWstEbJiGPGMOzPNVf55ZwA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191209070005 20191202070005 57123 fpki-lab.gov. V8WFTE5BuKsJePO0ofG0JZQ3kZ1FkqtGVgxSGQA672deXakbFlZPmYYxIKvkyn5UpCDsgdFt2NGA qqwEW+jjwnsrllXqftsM0BghGETJaDEv+cubsw2Ol8rKreMyO4HuuA4gJokhyKxdJR18AH+C6kXU LOGFFMJ2ZYKO5McFmK3SkSpslpaopGkanFse3EvW4dz49Po0QGAqQ5YBKLCK/rZXB+MijjWS6gRI cWhUybcfjGNp9N7qs6VL3SLCSpaoFKTREnZKXZ10ldH1ttcOaPcA6ivKZg62AnB8EYPE+Vt4AyCT J5bqievwlwY6hp9ir9Hie1iMT2srkZWxafdx1g== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191210065742 20191203065742 8115 fpki-lab.gov. gJ16HYDa+RyKjANU3nkQFZOXAcVDx+uzExr1YpWX4a+nba4OPrmUOBSyVOXj95KoRp1XY6PeAI8v uh8K6ktWBMUW9OeyQ+ke//68J6wyWGuwt+eScnm9S+PjETSImdWLjoKMERvCrqINBzZBlX7HA7XT 62ZG56YyWvftLtz1R/+0la5T8PSJKScM2kRlUN0OtjmI0b3DbvbudAGxfjXsW74mkzrHQgAyTVOH ++ZCo6e5tQg2TsmUiG+JrAO1Oj1as1R2RLrGOJ8le6ZvmTGAIcTZe+pNXjNaPbm0BgNvdVOfLzId mcwZhG4+nJR6rkkuJPQkWX7egnUyM1/F+D2o+w== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191209070005 20191202070005 57123 fpki-lab.gov. iXvbtDe7Y3GorMPwt1IqNMem27lwWK4+ubmYNbxVuChoaEN2SliT+ayW+qAJ5fhmjjsZAW/F6h75 lyNHnV5i+mYG5wqpOYoQHbnO6stSvtt6rvIfQgcwieLiNfgB2rjY5yCXB7ssXEkxOwXfB3fi92CM wR8t7tvfN7flXGFmgF3nsmQ0UwAZ1HRuFMssF/pl9KY8lC7UpABG67A0+cv8Izf7cakjNss1kUXL cSQaGXG8UURt5XyckDDUtlxiJYAz/alq/wvYGMcPMKEIHNUwLd8uiRnP8MlORqOEBRsJxcndtg9x IJV5wrJeV+MC2yytyV4XPBG7DQecJCqjzYiFTg== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191210065742 20191203065742 8115 fpki-lab.gov. H0oDXTorqvLyjLF7vsKgd+EgitbVtYFmmkfPBSJzy08y6AZAYH/jckvgtAvqnBCiVBhTDH+XJx/e MAIDFz9Y58E5Sqyanpjx6OiQ2OO7ZVqeEyTX8GnOpNOk/d8FYgWJ7HivZACoATDs0rloQte1ePQx 01fZWjjwj/PI1v9YKnSlE50XujmQKmUEN6dPwej2jtDSHvniQZH4dAhDY7xFt7pL9gJW9m1Dw+YZ U9VVZnUdTjG8L6i+E52EVFJ+GXHQaMz9MEKKuQ5wC/0iL/DOVDo9wWWBBIacYM7d2gSzhiOWeKFJ rmjSdiBto32EvhL1wWQr23R918gaEY6XMC4cqQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 33923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019081521 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191209065513 20191202065513 8628 fpki-lab.gov. XxsPFaTAcBCJg67szXxhJT3FZ+glSIgYfE0adNexMm5HOENhXjuyfwf7FKBYyFGUS90SaCQxuNhR haOQDPKCywIDxJnC4oXEyXu39JaHJUflltogJr9duzMOctNSWGABuvTe7kphxrk4ovimuuBeeJPy YClC0HXKEak4K/tj6u7zALzqknElMy3Q6d1l5cwONz5OMXrzb5THjClf0AevAOQ9ksrLAPqNg+vS /5aQTrkF7DAT1BWZ1L+V3K01M2/D/RVnwwzuO+zxaGRosNlQcFUDOHs0/I/4PE3l+BqKZZwL+Br9 yF0qTL72pN9z1RSJcb0GKW2vxzI8deT7N41ghQ== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191210065142 20191203065142 8115 fpki-lab.gov. X7/dfHwBRCOnJuIrkMONrzaN+rehFUvTBK0Oa8cy5Oe9hT08BnJBpW6kctAYlamfXJ7BFIyGGH1a iE6tYIIGByplJnT6uq9geLhDF9B45EqEEP/gpy+/XaeBu7sM3jv5sPw76eHXL868MWZUtfsCjrx4 5YrVgBYYAZtU+lnCM9sNEOH5sCvRkVQXKtgAxocDUrF+247HS/Qy2OYxtLHcEQ6VVLGuYJTu0JeQ 6qw/7UtnVdFBKD1XsbUeFLeMEN1S3xisZDj8tUVW/ZSRlXCnMPhMX6I3Azg2vyYYKF2Lx/h9qeHl xO/ywhJhwcoI4tZnZrRYq0DERZJJuSGL9B+cHQ== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20191209065733 20191202065733 8628 fpki-lab.gov. fc0vYXGDDXRFTjMBVEwV4mketH7JPhPPDRyJ8IAzjUbeuLN4zE0Z7YF4lYqL4Vm6SO8PGG0BJAb9 H8amygG8LuBvx7iakS+9eiGorbMCIlgRKWUHv/Plgy2vU7/Si9EpTZKrfgxxzX/0Rf7qVn5n//2x CS5qH2wEr1I8S7OxvhXHkubN0zzSdW3HpmG65USGNVsZisKlpf5Kp3pz7BHU2wqznVa1MsmMdjeq oASkFiJ6ECiFtT/JfR0CTlqMBwZ8ECWtU0x8Zh3NJx3kKnOn+C/DvJpkzV/bQEv4eBl5e+CdcZxT n8xysdkGSoW4qgyQa75pulbJjbOlwkFO1r7WNg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20191210065544 20191203065544 8115 fpki-lab.gov. GrjisenuXuui419gPLOn02jJGpN0CSuwI9iAu9T70OBfrk1VKKew4SLytRPdVn1/NGp5SDXsb53m QTXMqZQbKMhN4Xnf8pEHHa4hhWWsCwXayhEVT3FXlB2HsWT5eGqFZla56EB6cSex0raV3hsr+E+t OAHkz1TKGZhZ/3boMzPObuYD9YK4QWlLSpAXgrl9BTvBLdcOf4Ut4SiBzhJYPuZvDKlRtZcyN+VP sHu5HAZbFKR7lfgLO7wgBnJKTMO6K2L8iCo5owlwP4ZpWePH9Lo9NxjgbC6dNrOJ2pCw2rzkPBOE y8lLHKEx45G4xb0hwFBzfhpFMRB/FxnheiCztA== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191209065733 20191202065733 8628 fpki-lab.gov. eB1ZnMje9idivOSqkq2IByDgYFP4Am0Q8ItNtnTiFHSiUyO1BKc1T+uOdNlUqMraGL/z3wX/v6Wl gDSsX9/Vf8foKcBXcT7X+2hqM7FXQMRsGSc6gEgYUj5w+bTEv7NVKi2mIufW1oPCTJFQbqmwPB8q Ov+ILyMRoz2K/UUuiQyWO9T+GPWuko2/1hPsqaMfaWcQfvNdo08kKj0DZA73z9qU75RWUbTj+8YS 1iL1U6fL5lYUGMeKl6rMWMUPj1qUdoEi2by9crA9/fnTbsPsCm5cKCG4W2E98GjkqeAPnRVMW4Y5 5q+lWYNMq0wGynGQiQIH4XrZk0KF1Pp7ucYMmg== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191210065544 20191203065544 8115 fpki-lab.gov. EPCNaL8Pt+u+cNTfv96dKoPHYyhtiY6mYzcFCryJKBOhTwY4rTSt/WVALxj6DG+y53zRT4fTtrPF LrG9AH97y9gGCw6Ok297Y5QACOOYXnUkYXBibwqFwXZ5VO3zuIj1mkZ+pvAZtwyFlE+ZcTNlVbZJ D80Cvyc5V+8CZfufmE2kPePCODzcXa71SZJh12tnhVila1zazPf9Zea0Uls2X1BjGqYLa50DyWqc 4g4Y8vkQLOkC5WvUfHujXRVlWPR0uVFKK05tkAdcpFFT3KZ0d08JgUM327KimdDRJHGLzZaVfaeA 6UJBS+XnxZitTJZK9X/rDDV6QrwTrkPL9JnUSg== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191209065733 20191202065733 8628 fpki-lab.gov. P+FFRWALFLXsRwaaezOyLXKYMnHgPt0Z/vovSAU1zle9SaKKjNqP68E5irO5EfVCLk28OJJKytAN QlMZ5atla4ngbMRsLX3rIW7V1FKxINBLp8so1qOyNYEx5+HZ/pXO9RohC+0dbtYaDEFB8yHy0j5B tvWx4jI9sbIZAV1oE7QApQWMmP9X16llT7aGXsD9cdl/ugYJ+5pI8mgURs3VhRX/3CD8ZVZfAv7u F6JFM4wkMeJmCvVasTAkjWq79G5EqTefoH7Zi+WT1tQi1yIstpRkavxfhct+TsfDp4N5gFS/YFuP FGmiR7jedTNrxgvGMlcvooNsBHy2J6aAeqNY2w== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20191210065544 20191203065544 8115 fpki-lab.gov. Wq+MKXoY+Mn6Y9X/vaB1f+IVMNzpOY4mdbFNHtd8SyfUNHTc8EdOowVOfMKzfEpVqc31qIgnGN9X 6DPuKcucHEkN9V4k4VPEXUcDQUPUK2n4vOP4sRAXJ08WbpML/tmxciBJJz5O+I78doyaB3z8R6Ds rALesgl3VxCd1GCNpudrT+/4aBIuFAJeVXKkyr0rC9AlkTQz6IkBE4zbzPCfD7j/HNhZYupQfwGv CsT05atz7LdXU0lnkBiPm84YAQuujM1z/lT7jwuyG4Pp0mZ5r+QDulbOCHIS2dLeXev9hRqoDpEw JQesrKqDR2xNwRSgg0JVkL9wh1nioBwHsCPFBA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191209065733 20191202065733 8628 fpki-lab.gov. Dm6qLbX7x9MfBYVHR7pAQsiHqLurffCWv98GSY5aGIdYZqR9QOvqebBhfIkW85hPX1APpHD12dN6 jiXTuJ0FujNCi5xkZL9UNoCx6cdtTZQCVCOc2dKLj/lHYjvYTGi+KX5T6M0xX4RDfOD6+ejw7rIJ EzqpEZb5aRkC/mKmNpbxx5wyXLmBW+OLLav4aDqQCPPQnsKNSbabfUZDg9IFutlidthKpWe4hS0T Q9yuhvonue33GYeBoGBvLBcKrwJvknxv3sVsBUO2/7kri2CbOw9QL/ZOY+5Y57c+hRdUIXVUpW1b 1AaFBBb8eFXyqBaBz5yvJQq4Q8U6QxaoE3hvrQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191210065544 20191203065544 8115 fpki-lab.gov. a11YelIABlf0rxYzYsi6BP48uAiL8gsNuOERSLKW74PTl0OebuQ/eGlIWg3+K5suqefQknv0eXTi QZZQlpp8G7JdvXG5ysYpABlKqdyhHQTiSPgeqNKzKLijIAq1iu/Nx6z1hGDH341ZXasZzm7SDbkc JQzzTQlVuvXTbM7absPqVLr0dgYEF8HjlVf8hEzFtoGMl6uSNw5icEiicMc2pIriVnQokzs9lbSE rhAg+f5nZTDlSZoMuL0yqIGYG3OAiZZqwcpRkTO8wia7hDrP5XTx3ovkbng1K9T1ZtITDEFdCzJS KX1NL1m+nwG6ib4T5q9oCkdqZkj9KkieClhUVQ== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191209065733 20191202065733 8628 fpki-lab.gov. nex3kg5h6rc/9wG6dIktclZd0iJAhzGqmD8CVAUHPL9NNshxrGD0Qtd/gTRPrfBG+t2PGC62L3n3 q//YXzCK+7EKLzJWMNrCjl+Yu3dKhXdcD+JhXnSbig6GqDMZZIGggm1J1rkedl1vZL7RsPBkLa6u NHMQOJusPnmPAAPbQn2HLi6u3SrnmzoF0BiPZLh0EFlmkDUHIrteMeih5NNOAdbWPsCUcz4dUn/E KAAUUzJYsrMT/2VpBTszIxvpSYfUq7BNDWo+KcyBihR7Pbxu/+MyaOpmXgyeiBvkE0w1gJiYir48 2nzJFXKXsytdRAfp9zfQYSJHu6X3Wbe9rsPQrA== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20191210065544 20191203065544 8115 fpki-lab.gov. lPy5VwDEGq0i0VlR8XZdziPuMderRMAczP8I2g7tLB7zUudJL1dhLZTgFR2/vdhM9/PfdA5u4eDl 6saMeg4xxlrS/a7pAGqwEodYR/nGF32dMl3ZP2WJGVBhC/37xJIMHTAVmKxHyMCheOSjRU3KD2eB V/qw/2JxNIZ5jJ3x5ZmiReovVBRNXdyKoJa6FE9VCpUfMpjU+WnAhe6N4ShVoYMX8z7Va2gep+fz 1Z7jTeZcNgJ/3bSH1CoZo7dEC62b5J39HzEmnotm05hkzeOhRoeZwWWv08aLR9KxgVTSpBBFxCkb 8Kd2UD7prW2QtC7aoXhc1lNVGpF4pB02q1k8Yg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 43550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019081521 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191209065652 20191202065652 57123 fpki-lab.gov. DmyN9Fw+GtPic7KOdj1NBo/UBn6SqtYK0QrTytW8evlAcDF2VZ/mcMYSbc9HUf/DUEgVt9JnGUXK iSFwf+iUlZ3BL9n3jyHZrcTa5HwdCrx/cGXSL3/aQpUro9u/aPedaB+VU7vWC0uClo7lpPS2Gwox epQYD9UYag5G6sz5hO/fHvtCey2wWI5QySV+IcTOCJN5Dw78//mCcKo77ihXrQS5ZyBFaockiIej oVTamW05SXx5y0iaR52+tRg9OsprcN2UGfXGvDCWarsKdNWw8xfXFwuB+EdbRUV9QeEpOu9hhRU+ D0xd3Mcf9YOz+s/zd8ebi18JWcbV9DaTj1K8IA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191210065558 20191203065558 8115 fpki-lab.gov. fsMyYvXUiWm7wLchdgljJk0OAUOBfka3HTx6UO0eTZc7mo0ArzdobVrKGWdSXRAdLIGFfPhls1/c 80bjBaU819hqFjSRGb0A6Z6yqDdEVOfs9m8uI/1skOCq/dKI1FaeGvoKbRccVDd7nkfwu2VPoqor bZCGneZCXQt/gUrpnW08dOKrb1KijujsqJaNqVsRENGhWSXL96sIeusa+D5xOv9oAzOnGHE0gt3h wb5Osd33cMq8sTweCJ0ZXjGropT5D2QTHZK+d6yw6F6MxRPGnjCCiyRXc2sCeOGzD45jgQ2u5Iai qr2qY9bbHjFzU915rx4d7B+CcBtaxnmNST5cnw== ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 e094a34d17b0098c cm4n0njsc7e87304t6tmvijmolsujdb1 NS SOA RRSIG DNSKEY NSEC3PARAM ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20191212192504 20191205192504 57123 fpki-lab.gov. KYVXKTSLBLD+9YdqSGiM71e3tHon9U1skZP7fLZFM7rIqHR3gAHSEidw6LHQe76E3Jmt6mtbfgyG j5yMYGHcQjgdQvuWc0JB3aQAY4XPN8iKtiT6280pn9tCO3+hDkY/kXrYw9wBRTWdTSHLLDHVvc6A B0uzUQHO1S6Zy44aUy+KAqasWu6NmmHsY4CoOZzMJVr87Jgnk8UoghXOsBdNbzQ3tIswymY69Wx0 gAcU4+/A+dcwKLlS2Uq5wFFHKh4WYDpFPNaCOI3H+01OAiQ4+vdxZDqKjwr2eYXcKlxry4L9+2sp YoiANw0erAnKaG+Yan8hxKe/Fgy1nf3HgcYEqQ== ) cm4n0njsc7e87304t6tmvijmolsujdb0.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20191210073314 20191203073314 8115 fpki-lab.gov. Tp5bPbc9lNGzpwghnKC41sJoDuZP298dxapnmt0REj3uxaKOgct2Hp7iq0Lkbb5hftFBPLc3CyPj uqhMhNXJnxpaB6bfIScH2SANTEuTI1e53pDUKF9SCNoIWjIi9P5WIosmLdqkhRcTEfN+r9ijmpTU rmHhgLLEZ0hP74Tw26fVunX0e+8lN5MGnEABba0nhdvcCK8NLFyiTFPG1ubKHNFwTWxtMVzu/0jx m6mKY8JwyhWTRxbMP6WTJQR4Ntv20ILHkSUUr4QwcvyefPt5LN4slKOoS+i3F3rbK5pf9fVoNfnD V8m2bMtVCjspgS9jKYw0AZPn3M9qw253rduA+w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191209065652 20191202065652 57123 fpki-lab.gov. DmyN9Fw+GtPic7KOdj1NBo/UBn6SqtYK0QrTytW8evlAcDF2VZ/mcMYSbc9HUf/DUEgVt9JnGUXK iSFwf+iUlZ3BL9n3jyHZrcTa5HwdCrx/cGXSL3/aQpUro9u/aPedaB+VU7vWC0uClo7lpPS2Gwox epQYD9UYag5G6sz5hO/fHvtCey2wWI5QySV+IcTOCJN5Dw78//mCcKo77ihXrQS5ZyBFaockiIej oVTamW05SXx5y0iaR52+tRg9OsprcN2UGfXGvDCWarsKdNWw8xfXFwuB+EdbRUV9QeEpOu9hhRU+ D0xd3Mcf9YOz+s/zd8ebi18JWcbV9DaTj1K8IA== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20191210065558 20191203065558 8115 fpki-lab.gov. fsMyYvXUiWm7wLchdgljJk0OAUOBfka3HTx6UO0eTZc7mo0ArzdobVrKGWdSXRAdLIGFfPhls1/c 80bjBaU819hqFjSRGb0A6Z6yqDdEVOfs9m8uI/1skOCq/dKI1FaeGvoKbRccVDd7nkfwu2VPoqor bZCGneZCXQt/gUrpnW08dOKrb1KijujsqJaNqVsRENGhWSXL96sIeusa+D5xOv9oAzOnGHE0gt3h wb5Osd33cMq8sTweCJ0ZXjGropT5D2QTHZK+d6yw6F6MxRPGnjCCiyRXc2sCeOGzD45jgQ2u5Iai qr2qY9bbHjFzU915rx4d7B+CcBtaxnmNST5cnw== )`
	RRSIG=57123 and DNSKEY=57123 verifies the SOA RRset
	RRSIG=8115 and DNSKEY=8115 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: