DNSSEC Analyzer - FPKI-LAB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-22 10:28:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 6301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to e.root-servers.net for FPKI-LAB.GOV/A
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 670 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (670 bytes) ;; HEADER SECTION ;; id = 29353 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 5569 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 9948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 17227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to a.gov-servers.net for FPKI-LAB.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 498 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (498 bytes) ;; HEADER SECTION ;; id = 10143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. F5v0CodqLT/mWuC/1ZnVcpfDvkEReohY7EpzcylMezaxLXr3/ZQCI8eikqG3shEWbAfYGpeLTWLM 3QiJmwyjeqCZl3a3xbVDEdxysgJ/x16Ys+Ha+vSzyzvTVP+nSlOto1028kkDXNUMrpp7FUXQot+G KeDQ/zbCpjJKi3BO1kA= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 498 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (498 bytes) ;; HEADER SECTION ;; id = 33522 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. F5v0CodqLT/mWuC/1ZnVcpfDvkEReohY7EpzcylMezaxLXr3/ZQCI8eikqG3shEWbAfYGpeLTWLM 3QiJmwyjeqCZl3a3xbVDEdxysgJ/x16Ys+Ha+vSzyzvTVP+nSlOto1028kkDXNUMrpp7FUXQot+G KeDQ/zbCpjJKi3BO1kA= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to a.gov-servers.net for FPKI-LAB.GOV/DS
	Received 372 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (372 bytes) ;; HEADER SECTION ;; id = 10266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. F5v0CodqLT/mWuC/1ZnVcpfDvkEReohY7EpzcylMezaxLXr3/ZQCI8eikqG3shEWbAfYGpeLTWLM 3QiJmwyjeqCZl3a3xbVDEdxysgJ/x16Ys+Ha+vSzyzvTVP+nSlOto1028kkDXNUMrpp7FUXQot+G KeDQ/zbCpjJKi3BO1kA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=5320/SHA-1 has algorithm RSASHA256
	DS=5320/SHA-256 has algorithm RSASHA256
	DS=23689/SHA-1 has algorithm RSASHA256
	DS=23689/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. F5v0CodqLT/mWuC/1ZnVcpfDvkEReohY7EpzcylMezaxLXr3/ZQCI8eikqG3shEWbAfYGpeLTWLM 3QiJmwyjeqCZl3a3xbVDEdxysgJ/x16Ys+Ha+vSzyzvTVP+nSlOto1028kkDXNUMrpp7FUXQot+G KeDQ/zbCpjJKi3BO1kA= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=5320/SHA-1 is now in the chain-of-trust
	DS=23689/SHA-1 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b`
	`FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 )`
	`FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64`
	`FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab )`
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2345 bytes) ;; HEADER SECTION ;; id = 49155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAekGSw3vSLygWCwdJBF2cvPLzlqoEWuNoZtfd8cz6N5ykHOFmF66cPsgEudkMRApQ61NC2ga PhGwp7yPAIb2/LjCNCJFWdr7zJ38f7d5R3NOV9U92eE0RsHZegUEc32DiMvZlrOGsEdg/MW9li9o MCqiSJf0oac5uELok0s46nu1x3XEDLxIwdI+vyiwmYAMyQx0B4up8778V8/qnn0JVLBJsOGQV9N3 h4mPVPdyWQM3/YFSUvhVCNlQrX6z+Fir7pzvEkd+9LWUKeFPljHq6/E+GKJ079Zi2H21tKP8GLOs ntjQ6Sd2Oujxk8fI33Eccjoi4FT7ejNizFD/cbDKNRs= ) ; Key ID = 17298 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdC2KjIbPpBBCHtQjTOsdO4mk538U1Y1xrkd52i6lckCAOIC4LE2JfFxCu48wKjAQfYRWu36 CmROG6WTo01DXhlUP2F9ShPFIOGuE47TpF0O0cCXbrNUqqTV2zkN73LaicGo7l4+GORMXuOnmvQY KoU58zG3Wbx4sBktJL0KAIIOUwISny1RvXkjkRcwkkYPZxIvMs4yBsZujky5g6GPbnw6fqrl/H4v 0Gwh4EEbiQX2d6dtjYdwfBmGyB+0ZVv2Fl2sINZr6qURR417OMH0DUAkmgSCwlUJCN1DKJQfJvHz TxMoR9yRnNClpRmE3fU+b7v/UG5965+UKb8huYb9SnM= ) ; Key ID = 56568 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 17298 fpki-lab.gov. ZpL2NSqomoZ3R/bDK3dQnVIuHUISx2pUsOh8VxQUaAtPoC8bC+WsHC+XCsRdV+3IsWz5tTMw35EE CP/ainzvJM+TQa3BjRFtbxhGhJtOpY+1NLuzJw0hJz3ON1CGIb5gP9zIjUtfy5v6urM+/VKrjh+v 87HxWa+xsxllWXin6olveHJ6596vZCIPMWb8CMpDF4VxQemEVhjDc3NFFyofSTo34/qeBKAO2SlN ld1u6KKRoftqddA01fAYN0NY1SiXLf/qkLeItv2vOetmxuuYF1Lh+aYUaqFUnmXfyhZfgIqWZrGB j0eG+LDnx+wNIaBSt5nXifglRqNo7X7ZoowygA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 56568 fpki-lab.gov. DRSpXP4vTtZ4SGgmwvG4LYXPVcrfkxiuY2ZFZKJEghti8ntiFYXYpPKbq7+SXrh++r3eDk8XV0U9 JYXPeDJg4AKcTz8e0wpNfWs8UDM1Rn1RTUEZovF9y9kweiwZK80HzVvSDUZv5tbtSlut5EqOq083 v62zAyAja8mAmRYuL64QEvSzHDSTiIL6XFrTK8aNSlTLmrRkpLHLziQZF4p9z1qh38M32151XzNF h+Z4lTQdtHcBMD67YtIAn+oPy+9uRx8fcTW6tS3kn8YZi80iwp3SyUFAmyJiO0yDES136mpxG70j qLZ2odkdS0B6/i7ARnJ6e9nJy1PzL2+J8Uqkkg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 5320 fpki-lab.gov. amHs/x3mJRqwpG7iF0zKVcfValO6wUjdBjPy8qxnlxdVw/qrLqsU7s2c3TfSl56YipXgIPmP9yea dSzZk22QC6aouzuUAjm4MrnUGuWXVeyKUPqfvXfBKpQxnaqBa6Y2s8hguCilB9hTwVmcXhAtjhFr zgPl4yRwy6zn4VOU++y/hFYM3go04RjhFWZFR1fM6577yXQBcBW3b475AcLrbB17qi+jLcxaJvPB J0iuR/Egyo0gEU4xxciZ1jSL27WpuojHGNldqzzwsFkCGwPfH6dXKIJgyO8oLgzVBGtOtFqtTkyZ Fv3IHkbea3CQicMkkGHXjCzoi8sRwwCnxyL8RA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 23689 fpki-lab.gov. eLbvhx/GNVU3ND3UTyLZF+f1k+FiJDrxpL5MwvnjHBxTQNMhUyZjSaEb87hM+awAEoRFT9XVEIcr JrxVxN18w3nM1/A78bZsjB3wgfGN5LQatU0RV3yyzcUU6nUcVaqDXEGSDJK/ZRHBBmem/BzkOwiM ITyNcR/Ild/f2ZS0VLqRFbAAaJbS9IhXMiNcAYi28R9uGjt9UzTHexu3+VgSVGESmM/6B329kE58 e0BwYtJ3+Rj91iojJ07RqVTqMGxUgG1X6Dsi3wXVu3ZXHM+02jNdSpVQgUo65Vuylytl/3HCpnuL +tty0TBKHtBPJ86P7t8/GrwbEcIikNDbc/p22A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAekGSw3vSLygWCwdJBF2cvPLzlqoEWuNoZtfd8cz6N5ykHOFmF66cPsgEudkMRApQ61NC2ga PhGwp7yPAIb2/LjCNCJFWdr7zJ38f7d5R3NOV9U92eE0RsHZegUEc32DiMvZlrOGsEdg/MW9li9o MCqiSJf0oac5uELok0s46nu1x3XEDLxIwdI+vyiwmYAMyQx0B4up8778V8/qnn0JVLBJsOGQV9N3 h4mPVPdyWQM3/YFSUvhVCNlQrX6z+Fir7pzvEkd+9LWUKeFPljHq6/E+GKJ079Zi2H21tKP8GLOs ntjQ6Sd2Oujxk8fI33Eccjoi4FT7ejNizFD/cbDKNRs= ) ; Key ID = 17298`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdC2KjIbPpBBCHtQjTOsdO4mk538U1Y1xrkd52i6lckCAOIC4LE2JfFxCu48wKjAQfYRWu36 CmROG6WTo01DXhlUP2F9ShPFIOGuE47TpF0O0cCXbrNUqqTV2zkN73LaicGo7l4+GORMXuOnmvQY KoU58zG3Wbx4sBktJL0KAIIOUwISny1RvXkjkRcwkkYPZxIvMs4yBsZujky5g6GPbnw6fqrl/H4v 0Gwh4EEbiQX2d6dtjYdwfBmGyB+0ZVv2Fl2sINZr6qURR417OMH0DUAkmgSCwlUJCN1DKJQfJvHz TxMoR9yRnNClpRmE3fU+b7v/UG5965+UKb8huYb9SnM= ) ; Key ID = 56568`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689`
	DNSKEY=5320/SEP is now in the chain-of-trust
	DS=5320/SHA-1 verifies DNSKEY=5320/SEP
	DS=5320/SHA-256 verifies DNSKEY=5320/SEP
	DNSKEY=23689/SEP is now in the chain-of-trust
	DS=23689/SHA-1 verifies DNSKEY=23689/SEP
	DS=23689/SHA-256 verifies DNSKEY=23689/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 17298 fpki-lab.gov. ZpL2NSqomoZ3R/bDK3dQnVIuHUISx2pUsOh8VxQUaAtPoC8bC+WsHC+XCsRdV+3IsWz5tTMw35EE CP/ainzvJM+TQa3BjRFtbxhGhJtOpY+1NLuzJw0hJz3ON1CGIb5gP9zIjUtfy5v6urM+/VKrjh+v 87HxWa+xsxllWXin6olveHJ6596vZCIPMWb8CMpDF4VxQemEVhjDc3NFFyofSTo34/qeBKAO2SlN ld1u6KKRoftqddA01fAYN0NY1SiXLf/qkLeItv2vOetmxuuYF1Lh+aYUaqFUnmXfyhZfgIqWZrGB j0eG+LDnx+wNIaBSt5nXifglRqNo7X7ZoowygA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 56568 fpki-lab.gov. DRSpXP4vTtZ4SGgmwvG4LYXPVcrfkxiuY2ZFZKJEghti8ntiFYXYpPKbq7+SXrh++r3eDk8XV0U9 JYXPeDJg4AKcTz8e0wpNfWs8UDM1Rn1RTUEZovF9y9kweiwZK80HzVvSDUZv5tbtSlut5EqOq083 v62zAyAja8mAmRYuL64QEvSzHDSTiIL6XFrTK8aNSlTLmrRkpLHLziQZF4p9z1qh38M32151XzNF h+Z4lTQdtHcBMD67YtIAn+oPy+9uRx8fcTW6tS3kn8YZi80iwp3SyUFAmyJiO0yDES136mpxG70j qLZ2odkdS0B6/i7ARnJ6e9nJy1PzL2+J8Uqkkg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 5320 fpki-lab.gov. amHs/x3mJRqwpG7iF0zKVcfValO6wUjdBjPy8qxnlxdVw/qrLqsU7s2c3TfSl56YipXgIPmP9yea dSzZk22QC6aouzuUAjm4MrnUGuWXVeyKUPqfvXfBKpQxnaqBa6Y2s8hguCilB9hTwVmcXhAtjhFr zgPl4yRwy6zn4VOU++y/hFYM3go04RjhFWZFR1fM6577yXQBcBW3b475AcLrbB17qi+jLcxaJvPB J0iuR/Egyo0gEU4xxciZ1jSL27WpuojHGNldqzzwsFkCGwPfH6dXKIJgyO8oLgzVBGtOtFqtTkyZ Fv3IHkbea3CQicMkkGHXjCzoi8sRwwCnxyL8RA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190429070004 20190422070004 23689 fpki-lab.gov. eLbvhx/GNVU3ND3UTyLZF+f1k+FiJDrxpL5MwvnjHBxTQNMhUyZjSaEb87hM+awAEoRFT9XVEIcr JrxVxN18w3nM1/A78bZsjB3wgfGN5LQatU0RV3yyzcUU6nUcVaqDXEGSDJK/ZRHBBmem/BzkOwiM ITyNcR/Ild/f2ZS0VLqRFbAAaJbS9IhXMiNcAYi28R9uGjt9UzTHexu3+VgSVGESmM/6B329kE58 e0BwYtJ3+Rj91iojJ07RqVTqMGxUgG1X6Dsi3wXVu3ZXHM+02jNdSpVQgUo65Vuylytl/3HCpnuL +tty0TBKHtBPJ86P7t8/GrwbEcIikNDbc/p22A== )`
	RRSIG=17298 and DNSKEY=17298 verifies the DNSKEY RRset
	RRSIG=56568 and DNSKEY=56568 verifies the DNSKEY RRset
	RRSIG=5320 and DNSKEY=5320/SEP verifies the DNSKEY RRset
	RRSIG=23689 and DNSKEY=23689/SEP verifies the DNSKEY RRset
	DNSKEY=17298 is now in the chain-of-trust
	DNSKEY=56568 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 10797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427072451 20190420072451 17298 fpki-lab.gov. o/sb8TNllLoP8juVwR3RajBpdl3I8CU1DLK1mjx+o160RVbNc5RKChNV5p7Qln0FzgK95q38a5BZ D55Tb25P9DvaSYB+CXsnFcLCc3j0Wl5WcU6UNjQ+8ESkFLByl0MSkTGAWwCJrYo/4ilkDC+JkXTa fU4bPJEaJi30BFMTpxa+Z6dghCcyo/bGuZnoBt6948wE7hr/9i9SKIJBirSDysMtM0L4/uErDXxJ bw1nWNTR33wdSIHP/CM6ESa3120BIG4R6zE1URsgRyj8pCM+ruz7o6OMr+3GaLOeb2uZadPKruC7 x1fJs6sBBw9Ibr7IuqYP7yGuOQIJNMqgikZf5Q== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190429065718 20190422065718 56568 fpki-lab.gov. oevyn3ACblXkqBBtCTcLjoJSDNWpDZkFd3n6Q5rREbRea3sSPven+jFr5uB3iPva6ihFjpoahIPt 1sssR3iVflSiT/gFzUzyZflhMqHbyINuqk/iIJAVahbkJE2lVpDlOxJNKvNQ8JzZq85jxXMF+pal vWOUzjRWrWZ1rTVtUlAFazU7V3lYJnmS1qpOkr1+YeUuQoaDpdevMkPnsTFmHMjsXlT1HJrYkE3q GuU30SSN4ulLnwO49U7B/mwbFXHJx4LaTsHpfusopDFlkg3W4iypAq4Tx1pzeihVcnHMawo5tRN4 4Q2K3zkasvz4k8/VKhy324WU73QM2xXedllvUg== ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 cc6c666c63835df4 76fvft1fvvboptqi9u4b56rmug9q0kvb NS SOA RRSIG DNSKEY NSEC3PARAM ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190427090553 20190420090553 17298 fpki-lab.gov. Ql/24ZGDyNxkTVALJNUXN1tjRI0UirwlGdlkVj4k+p851njizJDvXwTY6MYNhGYsCYKxfi36ZmxG K22t+wTwcHYaVmU28VpXpsYLBVtmvCA/x9fXKKZsWrvi4sujyKkirE94+6MZ1efA/4r5S29wa7HH KOAtihjFl9sXKRUfV9DPG4skjKqUvG6tHCDmcKuImmpNb8Uw5bfinz+aGeXtLrPCYTwVEWYpDP8d PF4zr5D04Y+OYwqYrIBbDtTU5pUcumDjKTW4hB0oH1ZL6XTvREjfSuUbsiQYMV6TLlxAKniWAOCy Fe+JaUB6hzptYjpVg7gFtsPd2FfngNJPrzxqjQ== ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190429072824 20190422072824 56568 fpki-lab.gov. ux0h0J/2glfS/a1jTTnZqaqgK7/HaFybl0m8t9mnDAqpxVZferBN7WHbr6X7wvI2OSY/vO7HPvnT 94M1yteqLEMiIO1hG1BmULKi5d5kEnpgNsOVZvG+7ziknBn4Pu+aZv0LphCqqJfH+PBwzjBzQiEK 1qQVbM9IVVG5LdOue8AsqId/JuCW8IH4Xke2Lh5TWhfVHoQtCIH0baLYSa/LU0A5IjXMNHs+Zpnk vkC78WY0nIGcvOuS+LXTWz6kIVI0YjBJ49myVb5/4fqWVValoTSAeXaPF+i44Gf8+AHc4OROVAcn /rW22RnfB8jtU8VI85Yksqe2U29LiLUyqaTSvg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 60523 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428065719 20190421065719 17298 fpki-lab.gov. Zt2s+9OtpRUv7tulm/NWTo/d1FZLQsum/roMj9eGvLiyO+U94pBBgiKGuZ2WR/kA5CEj5uM55z/3 Z1LbpjhfBNjk2UVd3qjuGefZCleSLpARVeO3ExhIf28dzW81b4hpSI1voF5rKlsd6msIw0CtGEvc Vns5Z8CfYrZEsE4YY+noAnHT0IpE04Jb3yyi650hak/bGXAPlBiSH7mo9U3bAusrfV+mU5Gud3mF z29naf2vAe8IDH5SKLnIPlASM/9NqdgsBS0k39k+x2fLHWYuFY6/OX+If43Yf5FU/UJ4RJRGpWma UZwujsM7X/VOeDBc8v3k089CHY87POG66JYcpg== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190429065718 20190422065718 56568 fpki-lab.gov. oevyn3ACblXkqBBtCTcLjoJSDNWpDZkFd3n6Q5rREbRea3sSPven+jFr5uB3iPva6ihFjpoahIPt 1sssR3iVflSiT/gFzUzyZflhMqHbyINuqk/iIJAVahbkJE2lVpDlOxJNKvNQ8JzZq85jxXMF+pal vWOUzjRWrWZ1rTVtUlAFazU7V3lYJnmS1qpOkr1+YeUuQoaDpdevMkPnsTFmHMjsXlT1HJrYkE3q GuU30SSN4ulLnwO49U7B/mwbFXHJx4LaTsHpfusopDFlkg3W4iypAq4Tx1pzeihVcnHMawo5tRN4 4Q2K3zkasvz4k8/VKhy324WU73QM2xXedllvUg== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190428065841 20190421065841 17298 fpki-lab.gov. EvpVUZL4nhLSEs0/PCr3tM0cCNFii7vSf8RF3zTDokmA5j85BLrsrmJ7DbpxWv6+y7zIsUkVzINR +Agp6Eox2XwOlkOJ5gsKue9gimHz/A0WOLAsLscv/ovg5icDqTTIM+0y6sd1HsVhtYXgNXyCBjqh RzVuwoVb11FsDFo3Inz1boSiWbgBGdibkOpDoOkPvrHMB4dF6YTBOIFogciROaQWmdc81mDyOYqZ g0P5oBMiurVkizcKAJDib4waIoj8hDcCNnK/s+XYyJnZdr1P3rtmXlN2Q1rvjOpZoLIdzmfVmQGx gdVpUZrU79pRyrS7CmsKmtqSbUssxAlwBtQlLQ== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190429065410 20190422065410 56568 fpki-lab.gov. GXNaxj/rPSqAbwIhP4gGTHLl5TRQn7+0V+R2eMrB0TrcvEg47d9b3cu7NeBWtR46aCo9SwTFQoNH h5SdlR6tnMd++VJrJOXDN/sABHiPXTBnZu1YLBl8qkn8qKLiQxZ2Refm/918zylQa02BMfFYWjXN XwDMeIJWzz9riDvVsdhVr/pW2U8wKVhHH2zPddeO8r72KUPXLW6l/OGPPt8sKf5EFr85Qw6nSws2 u/UbF2PhOo2QFy5E00na74GbSyhS08d3WvOhknbDtQCpiG2MMwdXpWUSZn0XxYPbBl/PPk60YTtN DKnLSPMDsAapXkANTedMyQsY8nj6FEknlJblBQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428065841 20190421065841 17298 fpki-lab.gov. HCLe3ImWVEEb3ZiN44QXldavAXRZMW4krHq9FIKe/e2h83QaUdc6WkaG800ifM7it5X9oWNTNlQk c0HgYj6pdd1PIzriVKa/Q66UMYGHvuM+zrhjUjXWLGzsAszcUlY+X2TxDvZjaFu/rGS+SRj4BUpJ UmZoJ6LuTZbVHacJ/04yl9zlomPcbCSAtiGiOMiXhBntC09F5CVdA8bF8KvoLUEoCiN00HoyM6tj M7DDbvosgqRvN3VsmWtoWeoz7gGy+MbhJx9vUdIU3nkCQwrBnzevv+/H2rKupiw/mRsGK0Lvkqfd 8hlGlFomWM80eACMr0T9YB4UlXEWF26gm6SYsg== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. ZxRMBgDdXiASUiEkKfBu4PrvIk1NvWHrx1g+jLQrxNwcZfnSy/ot3bAgWwI/AZnSgwkkv0cUialL Qa5JX1ipr/dD7/8faa2GmsT1i8PIqdiIzOgMmfDzAabt2Y2kI9L5ryIjhFfJNHHIpq4nlQNnzd6d Uv4LEMbrC1Zze3R90Q8vklOt9ZqoGJWcmskrGdziFYJ+CZiaVHpgOwoOzveBChl1AlA40q+NOPEc W9TZstl9qqBV8XbPcpTanjSIICThPNpFmJh6vm+4O2unrTuqViKK8DMKRKsXBqjekhzDRH3QFW1m SIWeOnbUUbuWfzgeBdDKnJPis2dui0Ndy7/2QA== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190428065841 20190421065841 17298 fpki-lab.gov. j/R+GIbmyfkr/8Yqgad9Y42G09uoLUruzS1czq1jeBvrBhDqH2yXaY6V0RTQD8HpHEeegc0YGX0T c4m6N22MauOvueq+NsVBffF8A9Bdih7B//4zTGKtfxVcNkRCPmRU3zyJDQLDBsgUerqSOGlMMl8z kDr7clyadc9S0FVtDWFGcO9YGJ8/r/LBKk96b/ZPA49ljnh5voe/XF8L3pQxxK4AQeN8Q3gFACkq oJuR+tIN9erpRawmOmOkYHKEqb8lnaaUgjYoAWrR5AdXuTmwXaoMQQ5lrPUzdu8aN0kkAVdhIjfh hE8D2rsCcUYfvwA+m399I1l8LOPTEQkAfIUf9Q== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. cVD9IFFVn/ALcM7k7OFa52NKFD7H9ir5Bz27Yq0zi4wTvQKY8gl5NUrKA2SEeEzsZ7ilzdXIWVu4 tYMtlAyncpzIVBMHixFCnRmqVLXDMAxN2YMRVAf7dgHOmscOWI+c6ZNBKPZ3a9ICpQaXcIl+kbUH F8L+cOYGbiyDk1clpOAGCTpeQVWkaatJjdQAGbodSGts9gKDPeEStgO0HetrNmnsOUPu/uvDd9XD YE2kfCcmSMWCZW2LxVWyZ1agBgMgYcE3mB8Ujudnsq0785wcViX2OqBzSz6OIQsS15Xny4OcXXv4 UrPfPEo+Nzd6ABitpsTsnpdc4KPuJ+kjbOQgMQ== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428065841 20190421065841 17298 fpki-lab.gov. fQ0+ncn8LUyZ9pazXSG+0rIn9tDEE3lFKWGmPPcmM+rFj3evoKG+p7t8tUDmQfQQmAAh4Rmk1S++ BJBbHTbHsJD0kr+HK1UFUv4pjXJHPDqUyznP9CLtGJrc+MG2iGdXQp0jcfIAqgqDMIpfg0tNmRZS TVg2FXLICTCmHM/M6iI5Mqnp2zO0+zUr7QMEGnN9ILiMi4i6xOKBPU5tuWJ4i5KCfLyV0U6QJqkQ MKjgpyhmCbJcjnMUNHd+D2tB0Sub1mrILDXUZhJQZ2ZmsSWEeo8E67s/hOVvixZC4DpF9BVKi9M0 m4CYP3tJOgMW8irHgYY2L4MsVbr3wY1/N+Fc3A== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. qAPNIYYKpdVoG5Dbwen+IMUHf0j1lJFXCVY4tbm2TI1VmKlyhYCuW78uC+410SIoHFlLMiwOeJOM esOxwz91WoWwwROpWWRu6+FSWxMdXN64EAHJnywSpdY+BKLtinoGaL9/WG2iVXtPO2Zo9/+bp1cx fxMhKXjz98yCho/7g8xV0fNzWZElbnXflGOB+nYX6T2TGeRfn8fuviq48Zqz+7f3IGmum4Hmuic5 LsSobNGqkJc3KCXLg35b4TrlavMCqRC0GnhMPAsY2hczjKaRFBPx+f751z/ivoz3bl0GVK1+VXPF MWEW7Pj4zR8h37uI6LXAeDx1g+MkhD5XyWCk8g== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428065841 20190421065841 17298 fpki-lab.gov. FJa/sVgtjjruKP5MkmXk6HT/XRLz5Rxv9gdyBQpJnzmRsK9/f+CxHLUsWRYAyGk/uhPH0LENevGf Zl/b7h75BSnOhUji3d8+tBfLoW8Ax4n6oqtk4ASqji38lDc4yjUTatarN4KzPX37/aNDzdky+UG/ Dhq4+eLr06dqh6086YXtNi5T4JAomaGAAddw3s2mn639UX0W8Uvn2zrLOrRwF9o+nOa50JUo8fQo 9DUdO1outjOFBChvE5MXyWPZ5XDxUR21zEKwPjH2GfRS1KVtK6oKfbLkoZ4z70M8unJwsmXqfrtj chVDGSd2KDh2mrVDmqdekzQx52njCRS5LxFp8Q== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. fid/DAwpMcMB1YFQqXCnv3F7NcvS/tnkuyT/alqEnDwdjoMfJF8Ss1bWg0esKAD5iD1PvLMlS0/m +mNXHrtquFB/9ahodQFVGvK9p/JXTiw8B+cZKN9QInqqCU0t2k6wTNshjbiuCsqliLYfWvKlPKHU EW7soG6lWDFiiU1wB1WT4y5PteeeB372JRjg4fZ56EZKehSuC29uNHZBnCPBLsUrf32ng+3jOxzp t+C4NU5OZIkRpa4YWqEG9cNtG+T7ApMf9SStdH7CiMpWHFuHNeeCWJ0WE/ZOaH0FqGBmLLXYD8B+ fPYSYSS76EnUKO+kuezWVjo/H+4UEbciPIcdLw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/SOA: 'IPv6 transport disabled'
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 6882 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427072451 20190420072451 17298 fpki-lab.gov. o/sb8TNllLoP8juVwR3RajBpdl3I8CU1DLK1mjx+o160RVbNc5RKChNV5p7Qln0FzgK95q38a5BZ D55Tb25P9DvaSYB+CXsnFcLCc3j0Wl5WcU6UNjQ+8ESkFLByl0MSkTGAWwCJrYo/4ilkDC+JkXTa fU4bPJEaJi30BFMTpxa+Z6dghCcyo/bGuZnoBt6948wE7hr/9i9SKIJBirSDysMtM0L4/uErDXxJ bw1nWNTR33wdSIHP/CM6ESa3120BIG4R6zE1URsgRyj8pCM+ruz7o6OMr+3GaLOeb2uZadPKruC7 x1fJs6sBBw9Ibr7IuqYP7yGuOQIJNMqgikZf5Q== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190429065718 20190422065718 56568 fpki-lab.gov. oevyn3ACblXkqBBtCTcLjoJSDNWpDZkFd3n6Q5rREbRea3sSPven+jFr5uB3iPva6ihFjpoahIPt 1sssR3iVflSiT/gFzUzyZflhMqHbyINuqk/iIJAVahbkJE2lVpDlOxJNKvNQ8JzZq85jxXMF+pal vWOUzjRWrWZ1rTVtUlAFazU7V3lYJnmS1qpOkr1+YeUuQoaDpdevMkPnsTFmHMjsXlT1HJrYkE3q GuU30SSN4ulLnwO49U7B/mwbFXHJx4LaTsHpfusopDFlkg3W4iypAq4Tx1pzeihVcnHMawo5tRN4 4Q2K3zkasvz4k8/VKhy324WU73QM2xXedllvUg== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190427072712 20190420072712 17298 fpki-lab.gov. rrV67B8d+DG5vZU58pqRq96O7Ugus/H/91sibNdTBavYd9GFs2DW/DPcK5lVYpV7wInQeRoZKne6 aixXKUyMkXg0rAfaDeAttC/ZTthb0NzNgCqLFwwUik+zPgpEjZ2Bd7/7VrYufIkGE+9Yfgq436px yQlel8mx+HbIjLl8erWQySghgSuDnXuOI7iDpimAQfwx3fFCGqHOUAsolG/fMe/ijIljhQW5zF2m mV9z7facxfyGenQtPPMygAYfXiS0rSvOAtLJjHLUZdql8W4v2KNF05yyQm3DL6mN1iMAp69f7Yik u83j57dtOyhbfbh4BYneOo2Mk62BsvgKCaDjRA== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190429065410 20190422065410 56568 fpki-lab.gov. GXNaxj/rPSqAbwIhP4gGTHLl5TRQn7+0V+R2eMrB0TrcvEg47d9b3cu7NeBWtR46aCo9SwTFQoNH h5SdlR6tnMd++VJrJOXDN/sABHiPXTBnZu1YLBl8qkn8qKLiQxZ2Refm/918zylQa02BMfFYWjXN XwDMeIJWzz9riDvVsdhVr/pW2U8wKVhHH2zPddeO8r72KUPXLW6l/OGPPt8sKf5EFr85Qw6nSws2 u/UbF2PhOo2QFy5E00na74GbSyhS08d3WvOhknbDtQCpiG2MMwdXpWUSZn0XxYPbBl/PPk60YTtN DKnLSPMDsAapXkANTedMyQsY8nj6FEknlJblBQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190427072712 20190420072712 17298 fpki-lab.gov. BrU7GunSV64kfbws0fTVJemf22WlduSGtWVcj/cygxTC5lpwJecTfRktuBEq/hYYDPVea4ApEHuS dGqv4oxZ9VYOqQ50prBvNvP56Iwmu8M9cqSQAfvziupzL1DiaskyoZbC0s+IMpe0yEBabMUHuGRj hNFzPGMZrEnBMNq6qyE1SFXEGLzz3hdZMhtsxFgCrspftxp/dGIXJfMJ7EOUcXSFMinudLj9w191 XDkHfr8tDCqTT4l0w+nd0p6Xe1g2y/t7IU+yDAMjCwOeJMnwKVAsc6WsyyiOaIrGknWTW1gOTn+8 XkUsTNkedPA84Q2GFp2W9cSYIgR9omNIsY/lkg== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. ZxRMBgDdXiASUiEkKfBu4PrvIk1NvWHrx1g+jLQrxNwcZfnSy/ot3bAgWwI/AZnSgwkkv0cUialL Qa5JX1ipr/dD7/8faa2GmsT1i8PIqdiIzOgMmfDzAabt2Y2kI9L5ryIjhFfJNHHIpq4nlQNnzd6d Uv4LEMbrC1Zze3R90Q8vklOt9ZqoGJWcmskrGdziFYJ+CZiaVHpgOwoOzveBChl1AlA40q+NOPEc W9TZstl9qqBV8XbPcpTanjSIICThPNpFmJh6vm+4O2unrTuqViKK8DMKRKsXBqjekhzDRH3QFW1m SIWeOnbUUbuWfzgeBdDKnJPis2dui0Ndy7/2QA== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190427072712 20190420072712 17298 fpki-lab.gov. EocCP4OD1TUOTIgeMdAbQjVgMNsPZO5ir9Z/5muw2+AILtyfjtFayZX8ZpS9ivjcMAP0fKvznBYC zob9eTo4LMNMJRpoxTgfgszFogDr/uEp4Zce/JvU/C/0wrCVaKVc6dLTg57iBtrQ2KqHisFccS+h SVNzkDFhxU1VF4v25dr7vVtst8HYLIUlYniqQ5EWoloLeD7ahS60+8gn2WIjpVZGeZeiEjbUhSjA D9eWfbsSzSKidVmKvEupWIJM9BMg5cnrsJjWTjYUNBpZGRf1WQI7HwjB2pAjxrrKDEfN82Erm5Tn ei5iWmiFUgjOPFOvnc2w/vXRR/Jfejwo8PPjgA== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. cVD9IFFVn/ALcM7k7OFa52NKFD7H9ir5Bz27Yq0zi4wTvQKY8gl5NUrKA2SEeEzsZ7ilzdXIWVu4 tYMtlAyncpzIVBMHixFCnRmqVLXDMAxN2YMRVAf7dgHOmscOWI+c6ZNBKPZ3a9ICpQaXcIl+kbUH F8L+cOYGbiyDk1clpOAGCTpeQVWkaatJjdQAGbodSGts9gKDPeEStgO0HetrNmnsOUPu/uvDd9XD YE2kfCcmSMWCZW2LxVWyZ1agBgMgYcE3mB8Ujudnsq0785wcViX2OqBzSz6OIQsS15Xny4OcXXv4 UrPfPEo+Nzd6ABitpsTsnpdc4KPuJ+kjbOQgMQ== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190427072712 20190420072712 17298 fpki-lab.gov. HsRVpPqXQS9XcFXlk9VPzdcB7L4q7ud2Atbrj0ycu9RkUrqJGIiSBJoTHAXJ5BXmKDCv5OQA6wOL SwSBnWfbwDC8BevmQez9hMwsCslkL5B6+dSru28mBvmV5njFJefKjMZxGgQx73YlY7nNxtVb8eDF YYls4zhO7NvvS8CBOHUv3fH9AegB4yyheRbM4eWMwgMJ6Myv9hj0f6LjYmy6c+3b10aIWURZT3Jy FXAdiKSnsFCJB4TQW8uDpvd9YGs00MMmIva1gR6G4jedz58PZabGPnFLMFL1vw+T50H+PllOtqHr tLYZAPlz/soVOmwrVGHEDOQhRIVhWol/RWAt/Q== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. qAPNIYYKpdVoG5Dbwen+IMUHf0j1lJFXCVY4tbm2TI1VmKlyhYCuW78uC+410SIoHFlLMiwOeJOM esOxwz91WoWwwROpWWRu6+FSWxMdXN64EAHJnywSpdY+BKLtinoGaL9/WG2iVXtPO2Zo9/+bp1cx fxMhKXjz98yCho/7g8xV0fNzWZElbnXflGOB+nYX6T2TGeRfn8fuviq48Zqz+7f3IGmum4Hmuic5 LsSobNGqkJc3KCXLg35b4TrlavMCqRC0GnhMPAsY2hczjKaRFBPx+f751z/ivoz3bl0GVK1+VXPF MWEW7Pj4zR8h37uI6LXAeDx1g+MkhD5XyWCk8g== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190427072712 20190420072712 17298 fpki-lab.gov. 03URtZZEKHvqLjkl/1cMppq8j0EYccSafObcvFXrDjObVwzxynA/kDHSiconU+A19CCapNJTolsG kL4AtISqxNAds9YWWmPbFU74Z7SZXsyqv0uqOGpd5xMv+KLsotNSX+uPQnz9wsxkZD/86FBuOfHZ Mucl3afTimDyO1oN5O4IVVdvYBDEdAqYWkTXERUaMLerGzYwvTIi7/q/k5FI0XPoNxvZr/R36Ys6 nM+1yeOUpsb22uwOaT3MeR8avEkmb9nJYah/gJCTcJa4OINSMk1dZRlbIlY+fCUgfUiIbrrlooGN n0E5pcavcohhVWKp/lKAgv7yG+b7TH3Lr+zCMA== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190429065410 20190422065410 56568 fpki-lab.gov. fid/DAwpMcMB1YFQqXCnv3F7NcvS/tnkuyT/alqEnDwdjoMfJF8Ss1bWg0esKAD5iD1PvLMlS0/m +mNXHrtquFB/9ahodQFVGvK9p/JXTiw8B+cZKN9QInqqCU0t2k6wTNshjbiuCsqliLYfWvKlPKHU EW7soG6lWDFiiU1wB1WT4y5PteeeB372JRjg4fZ56EZKehSuC29uNHZBnCPBLsUrf32ng+3jOxzp t+C4NU5OZIkRpa4YWqEG9cNtG+T7ApMf9SStdH7CiMpWHFuHNeeCWJ0WE/ZOaH0FqGBmLLXYD8B+ fPYSYSS76EnUKO+kuezWVjo/H+4UEbciPIcdLw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 43263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427072451 20190420072451 17298 fpki-lab.gov. o/sb8TNllLoP8juVwR3RajBpdl3I8CU1DLK1mjx+o160RVbNc5RKChNV5p7Qln0FzgK95q38a5BZ D55Tb25P9DvaSYB+CXsnFcLCc3j0Wl5WcU6UNjQ+8ESkFLByl0MSkTGAWwCJrYo/4ilkDC+JkXTa fU4bPJEaJi30BFMTpxa+Z6dghCcyo/bGuZnoBt6948wE7hr/9i9SKIJBirSDysMtM0L4/uErDXxJ bw1nWNTR33wdSIHP/CM6ESa3120BIG4R6zE1URsgRyj8pCM+ruz7o6OMr+3GaLOeb2uZadPKruC7 x1fJs6sBBw9Ibr7IuqYP7yGuOQIJNMqgikZf5Q== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190429065718 20190422065718 56568 fpki-lab.gov. oevyn3ACblXkqBBtCTcLjoJSDNWpDZkFd3n6Q5rREbRea3sSPven+jFr5uB3iPva6ihFjpoahIPt 1sssR3iVflSiT/gFzUzyZflhMqHbyINuqk/iIJAVahbkJE2lVpDlOxJNKvNQ8JzZq85jxXMF+pal vWOUzjRWrWZ1rTVtUlAFazU7V3lYJnmS1qpOkr1+YeUuQoaDpdevMkPnsTFmHMjsXlT1HJrYkE3q GuU30SSN4ulLnwO49U7B/mwbFXHJx4LaTsHpfusopDFlkg3W4iypAq4Tx1pzeihVcnHMawo5tRN4 4Q2K3zkasvz4k8/VKhy324WU73QM2xXedllvUg== ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 cc6c666c63835df4 76fvft1fvvboptqi9u4b56rmug9q0kvb NS SOA RRSIG DNSKEY NSEC3PARAM ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190427090553 20190420090553 17298 fpki-lab.gov. Ql/24ZGDyNxkTVALJNUXN1tjRI0UirwlGdlkVj4k+p851njizJDvXwTY6MYNhGYsCYKxfi36ZmxG K22t+wTwcHYaVmU28VpXpsYLBVtmvCA/x9fXKKZsWrvi4sujyKkirE94+6MZ1efA/4r5S29wa7HH KOAtihjFl9sXKRUfV9DPG4skjKqUvG6tHCDmcKuImmpNb8Uw5bfinz+aGeXtLrPCYTwVEWYpDP8d PF4zr5D04Y+OYwqYrIBbDtTU5pUcumDjKTW4hB0oH1ZL6XTvREjfSuUbsiQYMV6TLlxAKniWAOCy Fe+JaUB6hzptYjpVg7gFtsPd2FfngNJPrzxqjQ== ) 76fvft1fvvboptqi9u4b56rmug9q0kva.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190429072824 20190422072824 56568 fpki-lab.gov. ux0h0J/2glfS/a1jTTnZqaqgK7/HaFybl0m8t9mnDAqpxVZferBN7WHbr6X7wvI2OSY/vO7HPvnT 94M1yteqLEMiIO1hG1BmULKi5d5kEnpgNsOVZvG+7ziknBn4Pu+aZv0LphCqqJfH+PBwzjBzQiEK 1qQVbM9IVVG5LdOue8AsqId/JuCW8IH4Xke2Lh5TWhfVHoQtCIH0baLYSa/LU0A5IjXMNHs+Zpnk vkC78WY0nIGcvOuS+LXTWz6kIVI0YjBJ49myVb5/4fqWVValoTSAeXaPF+i44Gf8+AHc4OROVAcn /rW22RnfB8jtU8VI85Yksqe2U29LiLUyqaTSvg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427072451 20190420072451 17298 fpki-lab.gov. o/sb8TNllLoP8juVwR3RajBpdl3I8CU1DLK1mjx+o160RVbNc5RKChNV5p7Qln0FzgK95q38a5BZ D55Tb25P9DvaSYB+CXsnFcLCc3j0Wl5WcU6UNjQ+8ESkFLByl0MSkTGAWwCJrYo/4ilkDC+JkXTa fU4bPJEaJi30BFMTpxa+Z6dghCcyo/bGuZnoBt6948wE7hr/9i9SKIJBirSDysMtM0L4/uErDXxJ bw1nWNTR33wdSIHP/CM6ESa3120BIG4R6zE1URsgRyj8pCM+ruz7o6OMr+3GaLOeb2uZadPKruC7 x1fJs6sBBw9Ibr7IuqYP7yGuOQIJNMqgikZf5Q== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190429065718 20190422065718 56568 fpki-lab.gov. oevyn3ACblXkqBBtCTcLjoJSDNWpDZkFd3n6Q5rREbRea3sSPven+jFr5uB3iPva6ihFjpoahIPt 1sssR3iVflSiT/gFzUzyZflhMqHbyINuqk/iIJAVahbkJE2lVpDlOxJNKvNQ8JzZq85jxXMF+pal vWOUzjRWrWZ1rTVtUlAFazU7V3lYJnmS1qpOkr1+YeUuQoaDpdevMkPnsTFmHMjsXlT1HJrYkE3q GuU30SSN4ulLnwO49U7B/mwbFXHJx4LaTsHpfusopDFlkg3W4iypAq4Tx1pzeihVcnHMawo5tRN4 4Q2K3zkasvz4k8/VKhy324WU73QM2xXedllvUg== )`
	RRSIG=17298 and DNSKEY=17298 verifies the SOA RRset
	RRSIG=56568 and DNSKEY=56568 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: