DNSSEC Analyzer - FPKI-LAB.GOV

Domain Name:

Time: 2020-08-14 03:09:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 52749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to f.root-servers.net for FPKI-LAB.GOV/A
	Received 667 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (667 bytes) ;; HEADER SECTION ;; id = 24270 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 23071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 13887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 30228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI-LAB.GOV/A
	Received 530 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (530 bytes) ;; HEADER SECTION ;; id = 31492 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. pgKuGItNBe2H6iV3zVwpsvI6ZU63ewvwnTz2UyH/x0YZ9hybj3/v/kJSOEzR0b0YHoshJ1ltkCLx BnLE9Mk1ayJ6DW/F5Ul7G/PP9Gbp9O0y+HZ42+1nKJ0j1jo2Bw1q+6QT9BgutHjz8Kekk0DEUNzw QNOQmnU/494NFZLA+2fFXWL0qX5AVpTkd1dKCcs18hzixBu9/oAQiKaFGZvhKg== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 530 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (530 bytes) ;; HEADER SECTION ;; id = 43240 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. pgKuGItNBe2H6iV3zVwpsvI6ZU63ewvwnTz2UyH/x0YZ9hybj3/v/kJSOEzR0b0YHoshJ1ltkCLx BnLE9Mk1ayJ6DW/F5Ul7G/PP9Gbp9O0y+HZ42+1nKJ0j1jo2Bw1q+6QT9BgutHjz8Kekk0DEUNzw QNOQmnU/494NFZLA+2fFXWL0qX5AVpTkd1dKCcs18hzixBu9/oAQiKaFGZvhKg== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to d.gov-servers.net for FPKI-LAB.GOV/DS
	Received 404 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (404 bytes) ;; HEADER SECTION ;; id = 11464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7 FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38 FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 ) FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. pgKuGItNBe2H6iV3zVwpsvI6ZU63ewvwnTz2UyH/x0YZ9hybj3/v/kJSOEzR0b0YHoshJ1ltkCLx BnLE9Mk1ayJ6DW/F5Ul7G/PP9Gbp9O0y+HZ42+1nKJ0j1jo2Bw1q+6QT9BgutHjz8Kekk0DEUNzw QNOQmnU/494NFZLA+2fFXWL0qX5AVpTkd1dKCcs18hzixBu9/oAQiKaFGZvhKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=62614/SHA-1 has algorithm RSASHA256
	DS=1924/SHA-1 has algorithm RSASHA256
	DS=62614/SHA-256 has algorithm RSASHA256
	DS=1924/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. pgKuGItNBe2H6iV3zVwpsvI6ZU63ewvwnTz2UyH/x0YZ9hybj3/v/kJSOEzR0b0YHoshJ1ltkCLx BnLE9Mk1ayJ6DW/F5Ul7G/PP9Gbp9O0y+HZ42+1nKJ0j1jo2Bw1q+6QT9BgutHjz8Kekk0DEUNzw QNOQmnU/494NFZLA+2fFXWL0qX5AVpTkd1dKCcs18hzixBu9/oAQiKaFGZvhKg== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=62614/SHA-1 is now in the chain-of-trust
	DS=1924/SHA-1 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS 62614 8 1 5990babca68fcf61b439331adc13c60725948cd7`
	`FPKI-LAB.GOV. 3600 IN DS 1924 8 1 7345dc996b4f534f4a92e6f7694fd72c6aa0df38`
	`FPKI-LAB.GOV. 3600 IN DS ( 62614 8 2 7b4cf47d4b37300c5464145d8bb92aaf0c0c6c9b1160358bf2581962ea5aeb51 )`
	`FPKI-LAB.GOV. 3600 IN DS ( 1924 8 2 ca08c0587bbce948848b7c1be60d6ce8c309a9cf96d1f29a804c786a7612e67b )`
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Timeout querying dns1.FPKI-LAB.GOV/199.167.92.100 for FPKI-LAB.GOV/DNSKEY
	All Queries to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY timed out or failed
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 7170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZyhmN7wKoxjMX5gSu/3gJiK3sQy8vSjqVuJvjOskkN3Zib/lR0sIj8h2M1G19tAp7qWer+y TwOQUWaFr0k0J4PZ6GpPOtIeKKb2AVqQU4CpADBHV7GCgHph/29nIiwQ8DPxmSOMUqoE6TTDOYPq T4rOHMhfWPKeB+TC0TttikgCc/IhjP56WDCdghBO3/wMQGITQHyqdwZ5RNfmGSNCXRwr4nM0bObj aXaZ9r67x8NBxyGj998uPoIhZfUr7zP465ggg5SPQ8/p/YQ/472R4uAmZm5RDjSsv8AXQATEtiPJ qrMw/VkbxQiXYNeLqYmrCCOqH1+xE+pOBv+VOUA5SgU= ) ; Key ID = 5910 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAabsiubXOb18Af+rufCAgn3zSJM0YWOFJ92GctWUD0VatXVInbO0bOpLrSSf45VIO7Nu9+va GenlIYbrDI1Wg93skLHeoZPVw37DQB4nb2C/I5ktwK46V0yx2ebgDimLBCMT5ZAHtCZFzZgV6ija xwzgSzNMzTyMA25YFfNdyMeqqZB+KE1g160n1sddIfEM8HgV3kXP5I5jT9XSqW6FTar4qHoixEzH +rLzgY4JV3iwfWTIjmnsqFe53JZ9vGGrVFrmf2c5aFKYSO1YUnjWzorpgcdpP+IfcSRXAt8HHlhH c55jpgjiJkp/KKhn0YPqX+djh/9GkFh2cy/t2/V/3xc= ) ; Key ID = 43800 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3oZtEx+J+n/HmLw3pwBgdzrbXVwOub5/wFJkblMDzxiAVPnsKk6uQVyBD95Ro1FE9eOwHB XmC3Cmzs5BKIW4KIT2bYeG73dbjsOZE3ZW/hpBJ7xDA/9czDjraQDkfA3Qrdlw5pVDOsNb3oUgnz wFvYa686Ha0mp0xVpwDy8hlTSjhMzkBJ7rCO4QZQsoGstIDNm63TlKUJn0qjS63LIgE+fwKjhoqV 8ZFdh8ycB2fU8LURud6NkTLOSgZI5Y5SD5cV1MI3shBGrGTZCEEueLZjU7qbV0LNVsVM/AL9HePx TBVxxudw3n9HwfsvOocABvjyXyGry+Czc0eI5O/Hzw8= ) ; Key ID = 1924 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 5910 fpki-lab.gov. JD5V8XL6sHaeGeVb1anW8OQkTM7uVsedkf8GQlZoOXemclkUbyWmrPWwf07Q/Tw7mzgu8DD9Yd+0 87U/mx2VMWqbmuchgjSuGdreFiVDfTdzjoyKrNNSpQeCZI47LkglJRfZB0N2/TeWBs3OiuPYJTut gb5L1vMGa+jyRK7GV5PHYh5ueJ/U2LxGyQOVkBpC/GHbCwx8ldDyOtYJ+/UGNn9//lHsKLlM7BOu KUQL6AzFzev81WWWxqjvkFkt7CLwr9XFa7GqIh5e2syU2dbG9hVQKYC2N+zqPt/9OssSXwDpO/OW zduAwdKafnqqxi8IgvCZfuR3w68MYYzvLiYydQ== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 43800 fpki-lab.gov. KOerNUu++5vnsc9mD12hJtEE/I8IANeYOiXVUEl99pK07DU12I0vUwXwLjuSfq9HPc4I50UK9XHj ZL3W0ZZ6AtTfic1fZcPfDcRmsLs66CfoNEXeID7okzqkJSqgSBS9J6on+V7RL14wk+fte0GcJlqS 2ym3iMCv6p4XBBYjmmV27x5ElvtHH80Zsq18wKuzDu4qVV+wrGIJNEliBJ+0cqkewHrPVgKd5saY M9+il9rZH6gOOr/JoyP5mK3oLNhrmLwaVhMxQjUEaIccHooelnbpI7s78EMlrK/gJAutx8iaNFJZ UXDF8HnpZ8xHBFkFVk+O+hB//90QaNKY9/d7Wg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 62614 fpki-lab.gov. gs6ZxEQLM7W4b/lDJgy+ssK5KaqlkVl62YpaoXcUpB59fWj6MtmOJLvalDsmdf6vMU//M/PWb+BA 9FD1Go1MILwTdaIL+tWs1eYQr0rS4O+goGo0GVQzFDeH+Ldm+UTTcEAU6BxHo3olrtuFOD1vp0Po aeNzDlR8FwWLC3tTe2FHxgajWVRuoueH56n+c5i9E6beg3qwU7K2fOw75Ktg8Hvg4K9KCh+yib4+ /ekOugZ8q9aWjWObwYSw8p/AFuypa8vANa/T4T6oY3wsqaEGR3isGlWCSwGavsCYXisaD4yLHrlM 3R8ewL80g6COlQq3SPi9sh0G0fEh9JhNJ+GhQA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 1924 fpki-lab.gov. SaSj0pbpYx0v5yg+ml4seg+GOhJzN4HkhhwLJH0kILwe/vPpsK+JHC58p6beu74vFrrrTu6GUnnT hqatN59E72vpGtVqIbbeIWauFXtP3IOPrVmeZNR+WK+a08fWb2P+jcBkBGYpb8Yr3K0qHvq3PYpC x3Z2u8GEYB9Uy97SWR4ynf+JT5XGzv98zfC3XFz540Rr7l24vtQNX0LqpYIBcRKQaE84V+eUNMzq IRRqs/Qv6vebZ4nPoLLf2rvdD/mn0YwyG7AhsRXLRG/+PLubWoWrXucWvUArGW9YIQdfpCfaNRwg EPVWYD1LLBQPjaKxaM1s5a9vkUnnB4GUrTmmiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZyhmN7wKoxjMX5gSu/3gJiK3sQy8vSjqVuJvjOskkN3Zib/lR0sIj8h2M1G19tAp7qWer+y TwOQUWaFr0k0J4PZ6GpPOtIeKKb2AVqQU4CpADBHV7GCgHph/29nIiwQ8DPxmSOMUqoE6TTDOYPq T4rOHMhfWPKeB+TC0TttikgCc/IhjP56WDCdghBO3/wMQGITQHyqdwZ5RNfmGSNCXRwr4nM0bObj aXaZ9r67x8NBxyGj998uPoIhZfUr7zP465ggg5SPQ8/p/YQ/472R4uAmZm5RDjSsv8AXQATEtiPJ qrMw/VkbxQiXYNeLqYmrCCOqH1+xE+pOBv+VOUA5SgU= ) ; Key ID = 5910`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAabsiubXOb18Af+rufCAgn3zSJM0YWOFJ92GctWUD0VatXVInbO0bOpLrSSf45VIO7Nu9+va GenlIYbrDI1Wg93skLHeoZPVw37DQB4nb2C/I5ktwK46V0yx2ebgDimLBCMT5ZAHtCZFzZgV6ija xwzgSzNMzTyMA25YFfNdyMeqqZB+KE1g160n1sddIfEM8HgV3kXP5I5jT9XSqW6FTar4qHoixEzH +rLzgY4JV3iwfWTIjmnsqFe53JZ9vGGrVFrmf2c5aFKYSO1YUnjWzorpgcdpP+IfcSRXAt8HHlhH c55jpgjiJkp/KKhn0YPqX+djh/9GkFh2cy/t2/V/3xc= ) ; Key ID = 43800`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYsydVE2m1KekT509rHoWMqSG1VWx481glrpQ6MF811iJW2fLJf/8UnnSiegmKoSX3O6ddgN 56nUIkoXQJ6wfOaBRIccYxXWBhkNKEY0PJY5zvxclo5LBr7wevsONX+zvcd8aG12h0GkFokyckCz YvA7qeYYWki4To2CC/ebhuLyH2I0ZlQLWYr++dWf8iWb8OaScQ7aEg9ionSfOIDx7FhLt3T/IT6O OyNQo/EYSWf+NZHh294GwVyxZrdU0m+fnRgJZuCrwGdXJhnram9Ll8XpLGmCcjnI8QJ9dNhd2uOZ w2xXQDaMwpjKFIelkvdezHYCg9/jzr7Xe4RdyHrHk/U= ) ; Key ID = 62614`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3oZtEx+J+n/HmLw3pwBgdzrbXVwOub5/wFJkblMDzxiAVPnsKk6uQVyBD95Ro1FE9eOwHB XmC3Cmzs5BKIW4KIT2bYeG73dbjsOZE3ZW/hpBJ7xDA/9czDjraQDkfA3Qrdlw5pVDOsNb3oUgnz wFvYa686Ha0mp0xVpwDy8hlTSjhMzkBJ7rCO4QZQsoGstIDNm63TlKUJn0qjS63LIgE+fwKjhoqV 8ZFdh8ycB2fU8LURud6NkTLOSgZI5Y5SD5cV1MI3shBGrGTZCEEueLZjU7qbV0LNVsVM/AL9HePx TBVxxudw3n9HwfsvOocABvjyXyGry+Czc0eI5O/Hzw8= ) ; Key ID = 1924`
	DNSKEY=62614/SEP is now in the chain-of-trust
	DS=62614/SHA-1 verifies DNSKEY=62614/SEP
	DS=62614/SHA-256 verifies DNSKEY=62614/SEP
	DNSKEY=1924/SEP is now in the chain-of-trust
	DS=1924/SHA-1 verifies DNSKEY=1924/SEP
	DS=1924/SHA-256 verifies DNSKEY=1924/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 5910 fpki-lab.gov. JD5V8XL6sHaeGeVb1anW8OQkTM7uVsedkf8GQlZoOXemclkUbyWmrPWwf07Q/Tw7mzgu8DD9Yd+0 87U/mx2VMWqbmuchgjSuGdreFiVDfTdzjoyKrNNSpQeCZI47LkglJRfZB0N2/TeWBs3OiuPYJTut gb5L1vMGa+jyRK7GV5PHYh5ueJ/U2LxGyQOVkBpC/GHbCwx8ldDyOtYJ+/UGNn9//lHsKLlM7BOu KUQL6AzFzev81WWWxqjvkFkt7CLwr9XFa7GqIh5e2syU2dbG9hVQKYC2N+zqPt/9OssSXwDpO/OW zduAwdKafnqqxi8IgvCZfuR3w68MYYzvLiYydQ== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 43800 fpki-lab.gov. KOerNUu++5vnsc9mD12hJtEE/I8IANeYOiXVUEl99pK07DU12I0vUwXwLjuSfq9HPc4I50UK9XHj ZL3W0ZZ6AtTfic1fZcPfDcRmsLs66CfoNEXeID7okzqkJSqgSBS9J6on+V7RL14wk+fte0GcJlqS 2ym3iMCv6p4XBBYjmmV27x5ElvtHH80Zsq18wKuzDu4qVV+wrGIJNEliBJ+0cqkewHrPVgKd5saY M9+il9rZH6gOOr/JoyP5mK3oLNhrmLwaVhMxQjUEaIccHooelnbpI7s78EMlrK/gJAutx8iaNFJZ UXDF8HnpZ8xHBFkFVk+O+hB//90QaNKY9/d7Wg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 62614 fpki-lab.gov. gs6ZxEQLM7W4b/lDJgy+ssK5KaqlkVl62YpaoXcUpB59fWj6MtmOJLvalDsmdf6vMU//M/PWb+BA 9FD1Go1MILwTdaIL+tWs1eYQr0rS4O+goGo0GVQzFDeH+Ldm+UTTcEAU6BxHo3olrtuFOD1vp0Po aeNzDlR8FwWLC3tTe2FHxgajWVRuoueH56n+c5i9E6beg3qwU7K2fOw75Ktg8Hvg4K9KCh+yib4+ /ekOugZ8q9aWjWObwYSw8p/AFuypa8vANa/T4T6oY3wsqaEGR3isGlWCSwGavsCYXisaD4yLHrlM 3R8ewL80g6COlQq3SPi9sh0G0fEh9JhNJ+GhQA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200816145307 20200809145307 1924 fpki-lab.gov. SaSj0pbpYx0v5yg+ml4seg+GOhJzN4HkhhwLJH0kILwe/vPpsK+JHC58p6beu74vFrrrTu6GUnnT hqatN59E72vpGtVqIbbeIWauFXtP3IOPrVmeZNR+WK+a08fWb2P+jcBkBGYpb8Yr3K0qHvq3PYpC x3Z2u8GEYB9Uy97SWR4ynf+JT5XGzv98zfC3XFz540Rr7l24vtQNX0LqpYIBcRKQaE84V+eUNMzq IRRqs/Qv6vebZ4nPoLLf2rvdD/mn0YwyG7AhsRXLRG/+PLubWoWrXucWvUArGW9YIQdfpCfaNRwg EPVWYD1LLBQPjaKxaM1s5a9vkUnnB4GUrTmmiA== )`
	RRSIG=5910 and DNSKEY=5910 verifies the DNSKEY RRset
	RRSIG=43800 and DNSKEY=43800 verifies the DNSKEY RRset
	RRSIG=62614 and DNSKEY=62614/SEP verifies the DNSKEY RRset
	RRSIG=1924 and DNSKEY=1924/SEP verifies the DNSKEY RRset
	DNSKEY=5910 is now in the chain-of-trust
	DNSKEY=43800 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 58205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200820065534 20200813065534 5910 fpki-lab.gov. ZM1+8hr+L2HJpb+YZ6uU0YfGtww3rOiR6JQAxHKP669a8zch6UN2Eq9RJzX/G/tANhougFRwpPFV mEPJYUuY5Kut0HbuepukmU5J8DKxLbdijD9zA6ydSNGVfzbFN1+6mMKP2gIEsxES1ZleDwO/bxxd /uRkHpsrXSk4LgbMR8Lr7SrXO+8gUlsUWgAzXdTisi7n+Me8o2OHGWgE8CsDypVXXQGRZ44DtDn5 vFPNk3oV+QvVoQAansiU5WP/IlYnJJqgO/dyEgvwnJiV4CDnHk5hjYljTu1mYR6yMQKuC9jJV8So Om1swW/ufio16x7AtM47L3VjERRtGe5ykz72tw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200816145202 20200809145202 43800 fpki-lab.gov. MSwAN+0by4EtmG/dRrpH0Qf48dQYepLk1LKP1yRIbE2b5X3ZOeLH8pm9SpOnG5xd6MGzacjdsBmf INFxJKyg9UXiFNn/zh8mUXazKc0jZdx+Mv0j79A/xnAdwLA4y+HLyr0d9UnoEtZCHlGmEuavrzlQ e8cF7UvgIorDUyhfpCaBEfJxKSF/AQgqAc6wHuBxDDA4QIGLOto1PGOAlNYY7iiqwYm7CC4ITq5T XgVPUBEwz4dNBO+41iJXIYida0BFCMSeync+JN9YbrE0rauVfCYwn/4is65zTeMiqp09wpgnE0TI zFBsldVDdyZiorKs60OrUr7iZxXviZ8RmsjOiA== ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 44861f9884816fe5 v25jto088b1lk4mnrgil649r58sqja30 NS SOA RRSIG DNSKEY NSEC3PARAM ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200820041656 20200813041656 5910 fpki-lab.gov. LYm6Rr60cHzMiqaV+rxqyywc7weU7ZI+VomIP2If2/Sc/koMChSfcMBam1seF9/aZTQELJU7SyjX KQg8qZjJuob0tU8hjPYpHS2y4iCaNlp1W+3N/c8NXH/6GHwRDNWyMC/Xf/IVsOc9g7FcF/OJpomA iSpfgIRXRu8kHVw/BAa72vUlltnbe+D/8L6P8s/uPUZ3LviFCDeSh/n68aDSq9FhjdKZBInfVbDq jvLp4+XqVDfFBWVLacPIFiu0SzuOvULe20TbSY/7qo50A3RoYOCNFkNYrJZJJlDyVBPRNycgnL98 NsbUlbQSpDDaL8X3Ppd2PG/8TiYd8zksPhBG2w== ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200820041656 20200813041656 43800 fpki-lab.gov. BV+ZDDoLVXDdqn055SW0r/3H3Y8OjSpLlaR+MYUJ+84RRAssUTcrTUxbRjGmyigYMf25+6I7EBvB tSF1cwkTTcBOxVSmuwN0Q/Y594toyw3XTtD7tqQPlOgo70RP4tJlVs3lgVaZ8LhDF+V9fKk6chqg 2kjY/tDwwKr24ghxxcjz6TzVyW/ZRU3qIW3IjKE8SG6N1mPvf4DQ0IWrfpgMPjgVKFPLAaZDdciU 4kGsWtyJ+PJojwALneYgwGn4G02KfaVl5I4H8lROXFV13Px6PwtOjFObBEVvQjsW25ZbxMiduuoY sG5GPGANI6xDOeMnRx7rfHAN01Aj0LWSzJiOfg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 4590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200820070137 20200813070137 5910 fpki-lab.gov. jeY0VoHYI+NIxHu9ktkySh91ciCd5hgCu7h2eV6rj+NO57ENy7cTjkFbjw5KhrAhooEvQJW9ePLX ZdaZlIgTyEiq1RpQ39A/rKD5lLLNvFLb47DqLBjeqEnAytTKoIsZi/5Xg+bfRJrk7eIo+ZT8+/X7 KTUb8jMlvBmBZqPOLvhcKnPZacddCxsku664PmuWt1e/d1rZKwCSKwr7gq+2k9566TRAiCBgNQcF PFvhL05d+UzFGeSmM4Y66eSAasucFenkTlLJ/z2MQuHfgXt4+kPwsI8VIf+FagJHF+EBPX3P1vaa e2rFC5OT9lQM4sxzCKZeNv3J6+5/gdhCReJUzA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200816145228 20200809145228 43800 fpki-lab.gov. kbWxn1wtcwfh/rh4ns8L/E6MvqP/Zn2vifFGFg72jlxw31ALB3uoT3DIueH+iI7DRhZMFUGIrHp/ oLaIVxXwuLHdvAjWIu9nvOUPHS8KzQuPAttz5UZxwAkS0bbHDxqEsHr4Cpkeaxzyxq0wNEK5c36w /Md895ItT3BbP66pMnmcCf6g3NBflIwd5ujzT5D8HRb8fyAhqKiLQi9mL45ezTTHbiSVK+ksk806 3rp1R5lIi3jrYNUPmhspO7qfBJSebdQkbsQTZIl32NiX1zzJUoptg0eLHlgOkNlTi1bd8inS4/uQ qDB9UodTIIkoSMZ1ObIz2sImpKDkmmW4/HFcxQ== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200820070800 20200813070800 5910 fpki-lab.gov. Z8AtZWbZ6DpYlbZYfV7nRv25bOjGlshnBaB9iMqNwO+Jo860L+NHMRJWyxkX4aYHgaLoa/C9vCKH fHZplovyEMiAc6kNphDAyAASiimGdGop2a7g2GB2TaG4yh5VavcaVW39XxTOm2CwvqrGIvbu6fUd lGgEKhjQPovmloT/Cp3Iz4EDzOK9J8ZiOW+A0cQEmZnHTEIifpk17xX/1N81Yb4EAeZXkWZbiZV1 h3/X1sXRsSeWuXX1HDuLEAt8zQHO149X/GMWySToGvZJzCtCQXiuUT01Jd76E5jbh+/QiyhYJItM K1oNgw/Ti3hUcXSALHUMB5PQJpBhsL8FQN5j4w== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20200816150040 20200809150040 43800 fpki-lab.gov. n0WnJelZzEz+t586x3CHsDp7k1XPZQAFOc575+FkMQOOdcpgtKsKeG+5uvVp02z9jpDLLuyb7bPo nH+5nYsmQyOqGkBJt7CjTsF0oq6stAs51l7/shO1zRKWPWn/QtPGurpJH30zkrs6oJOeBP2mDDtF BCyXWj2phSmScZXxBiA2ts0555+A645Ox0jbIGAhftlf+HozQamq5nSUdWoliDnXw+q9CfxG0io8 LXOTDvzSNxbpftQRqGzdlsXs9bBDF8owoLkJl9fGLh3HT4j7UqMbq0OLnRjJXJMbfqY4xMxXcjJp pTkHE+fOE4R1yzAy47EGxiHyAsUiaZKniSJa0A== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200820070800 20200813070800 5910 fpki-lab.gov. jolMLQ86Rnridw300zns/90GADsxGrRAR4+ESHUNuz157VrWbWBNddNwWfC4C8E+UoH3558e2RJF ujlblJf3ZT+k+ChQTaBWaeevLCpgOFwXsLVaKMI8+YOuKF5wM/EmHlMx7ot8O/oz2MOv38ABAvoA oWtBq9IhiYwtaDpfZcdgtFxYGh/beeLiolVFCBFjX6QpCDQc/Acx2GlZ6eg06M4uZ+WFHFz5ccy1 uCVikAiQ5GsYrXIMW/KpZw+Sn/Hi9kNsuju06DlBgge0Xz7baWXYQ05bs3XAwOXNvwI6ILibt77w qGk3Mnn4s2Tt4n19/lg1CjGpUwiv6ToKnnRrcw== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200816150040 20200809150040 43800 fpki-lab.gov. RPXjF2ya7VebyMZU6rnDLKJ+/isQJU9Uee4i1eYUzyezxXy1MMzeQvvwJcr4dCsoX0Pn2AQtsPVT LZx3+FnBdYfWekuSM6XPbH2/2RU19U9MR2yEt4aVDosMlTVJkELmUtlkGuoRyen1f2hl2VTHvakI Sig0Ln/P8BFHEisi70ATs7JvdofZ+fl0EEXTiqGPqzeK9/oEVXMUZKtqhrMI+TEUyldX0ebNefWu Y1S437SeAeT7F67xHcrad6sF0RjSvelML4bMsrF2Ie7RDGAgZekB0cLLlr7RG/87xJm9THtQjetQ aEEJ20BaVHDKVX2MW/IA887BBD41yCrAJ7xyOw== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200820070800 20200813070800 5910 fpki-lab.gov. VezTokKIDtslCDfhYD8MpdQg/oJpUCI4VRw8ihxfhorbQ95uE2aHxrDItn6GcSVCwyowB8OlgC5p uK19yaTE5NkTI8nJat/d9Eyl3N5GUgtENEN5Ir5n3SI6CQYavtYXWFYktVnZvKjYiZPz8LU7sv3m Eozg27Ywo2JtPWzhU9c7bgRrfE0P7e2sPePx2et9bo2AgvsYOYEk5d0mg4wSNa6e/QFb3CWkAEmF DEqdz0i7BTOeAZIz1zOjFz0yrw6DznlicEOU6metZk0nO2PffvTG/P2/aMUv2lhAfvNTmOjo4d8f C7UTO9rZP+SalJpS1zEzVzoNdDAmX76+W4mcuw== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20200816150040 20200809150040 43800 fpki-lab.gov. dpL5U6yTtB+0dlBZVID/8czgSDCXHoFYeCxt2DZzxLB6rFnG6Tsc2+DRDAnGyDbt80GDIWOkk/+x 0wmx0vODnDlhy2CBF0LXQ57jrGgrsdKopm0YnML0C7JTdXs2G2wKbL+jbptYXdtLSQXOnS9wwtT9 rbA6PFQhp5Hz/8urC3SYfIkFBuBgliX7lvADCafufQGZFcg8ZGxug8wSzdWkiVYn2N7l09ZcGzlC n334Lnrw6eIV2/gvhm6h8/EfUjsHVnI7lFWCqUKD1C4n/SAOc1nxJYlRu7KFeX9N7ckPyg/Qz1/N +C5eJmV3Q9Zeyhk+5kD0BYMZc3kbhdcjexSPIA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200820070800 20200813070800 5910 fpki-lab.gov. KWd0gzqODxTV2ryeC4aMvCQlUMy9peb292ihDrFVgi9T1eNa1tUVHgpAjJLa2utwmPMl+WGZtNNg gkQvexHMWd6IKzqlvWLVUsikV42EXqs6JpPaX4RQh3FZrECXvHBwsLqQiCDfxySm81Dkkg2QRcS0 8khQ9Pv+LdNC87tZOR5EFjTYZzQtqiJWbIsG4D5lF9Gm3xK/nX2jdsgw2V1IOriuTsuiXuQA1rPa /ftQoMCRuI56ue3YSssP2V8x6sY2kCqy2oK3ctYdQoiNP658P4AG47MMktczzwjdWc3tfMhE865L dH2g4PXTbBq+kH2WVSwft66qZRRi09HH2Nmqqg== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200816150040 20200809150040 43800 fpki-lab.gov. geKkYx3ethUwY6IhmZujWMgtz+ipNtUvXhkvNSOWjE8eB548qmXsLuTgmxannrcSJQflGkhHovlQ V0W94OeW2sex7jOblAermdca5bYxeGUbtL6hSnAbUryX0DOhLdfYJNDR1QaU8VjXYOpLr8vYNz4+ 6ahQi2m9lfsk7IPygeCAEYGRW0lyfhGgzPFO97yV+2zdvgR4wIsqN1bmAuyo3QLYtUzP789ztx38 cKdylEMGei74Y1D3q7q3c+9QNHIK5FmrQxZ3gNPFinBnCtH4TORsRhhe/7SM7XuXKzCxNVTIkhPF BTeS3Rd3dlvsYaZR0JZDHyV6i2dSoOKgKxGVZw== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200820070800 20200813070800 5910 fpki-lab.gov. F6w953VffSyFB3vHPu5MuMx1hkKXeSRm7Ury5TaHNzCnfxVWN6WhhlZWIMklHDpIw5WFR4bvuRwv xiTwUMxLnFlCoduAvT2qQoEVcIMTWCTLpeRboYvYuoHhnzqaTstFg8iI4BCGlJ5U6YRTqnB6mxda bNeaJIMq28BeUMhSmxzlo2ZiOuPzXwSmuttYST+u1jBKtFWdW8vh5AqxM6RUY+ILP02pVMBG/P2z W7BWC1Ts/2m7wYJqK7rISnrNkaCRSGjHBawhzfUEWUIDzXn7OxqnYF0bzwfR4Y8W7LqVP6gETilX ycwaEqR+1y8opiOERx0wngcqOsp1NUL/t16PnA== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200816150040 20200809150040 43800 fpki-lab.gov. d2Yx4pftT1grnQTM9LccHaGn0y6yQBDTyafOuxgEammFmT8hIur41IvBmkfIt/mQFB6VcpBl+T9P 3PTTFrNbwdw4kiARMLyOzfZeu3gN+GR3o7Aec69Pf7AIkSC4E4E7gf7Qi9Xf2Qx++eoTYfyU4gw0 yWgOZDnPb3Bs7Af352BwJlY3Nxc+pC52hNjWeTug/gLzKdkG2e/GfADZXjBoZ1j/1oKcFHvfmn5+ LSXkEI8SXhoPNUJ1ijJNRwKUgjx3cXmyZC9K9F0IlQTZmvPIaA8oGvK3J6yO2s2/F5ekJKpwjahd LLV+nP3FGc6lj86Ku+24e93P7kG7dXtbsSmr6g== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1381 bytes) ;; HEADER SECTION ;; id = 65463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2020012306 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200820065534 20200813065534 5910 fpki-lab.gov. ZM1+8hr+L2HJpb+YZ6uU0YfGtww3rOiR6JQAxHKP669a8zch6UN2Eq9RJzX/G/tANhougFRwpPFV mEPJYUuY5Kut0HbuepukmU5J8DKxLbdijD9zA6ydSNGVfzbFN1+6mMKP2gIEsxES1ZleDwO/bxxd /uRkHpsrXSk4LgbMR8Lr7SrXO+8gUlsUWgAzXdTisi7n+Me8o2OHGWgE8CsDypVXXQGRZ44DtDn5 vFPNk3oV+QvVoQAansiU5WP/IlYnJJqgO/dyEgvwnJiV4CDnHk5hjYljTu1mYR6yMQKuC9jJV8So Om1swW/ufio16x7AtM47L3VjERRtGe5ykz72tw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200816145202 20200809145202 43800 fpki-lab.gov. MSwAN+0by4EtmG/dRrpH0Qf48dQYepLk1LKP1yRIbE2b5X3ZOeLH8pm9SpOnG5xd6MGzacjdsBmf INFxJKyg9UXiFNn/zh8mUXazKc0jZdx+Mv0j79A/xnAdwLA4y+HLyr0d9UnoEtZCHlGmEuavrzlQ e8cF7UvgIorDUyhfpCaBEfJxKSF/AQgqAc6wHuBxDDA4QIGLOto1PGOAlNYY7iiqwYm7CC4ITq5T XgVPUBEwz4dNBO+41iJXIYida0BFCMSeync+JN9YbrE0rauVfCYwn/4is65zTeMiqp09wpgnE0TI zFBsldVDdyZiorKs60OrUr7iZxXviZ8RmsjOiA== ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 44861f9884816fe5 v25jto088b1lk4mnrgil649r58sqja30 NS SOA RRSIG DNSKEY NSEC3PARAM ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200820041656 20200813041656 5910 fpki-lab.gov. LYm6Rr60cHzMiqaV+rxqyywc7weU7ZI+VomIP2If2/Sc/koMChSfcMBam1seF9/aZTQELJU7SyjX KQg8qZjJuob0tU8hjPYpHS2y4iCaNlp1W+3N/c8NXH/6GHwRDNWyMC/Xf/IVsOc9g7FcF/OJpomA iSpfgIRXRu8kHVw/BAa72vUlltnbe+D/8L6P8s/uPUZ3LviFCDeSh/n68aDSq9FhjdKZBInfVbDq jvLp4+XqVDfFBWVLacPIFiu0SzuOvULe20TbSY/7qo50A3RoYOCNFkNYrJZJJlDyVBPRNycgnL98 NsbUlbQSpDDaL8X3Ppd2PG/8TiYd8zksPhBG2w== ) v25jto088b1lk4mnrgil649r58sqja2v.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200820041656 20200813041656 43800 fpki-lab.gov. BV+ZDDoLVXDdqn055SW0r/3H3Y8OjSpLlaR+MYUJ+84RRAssUTcrTUxbRjGmyigYMf25+6I7EBvB tSF1cwkTTcBOxVSmuwN0Q/Y594toyw3XTtD7tqQPlOgo70RP4tJlVs3lgVaZ8LhDF+V9fKk6chqg 2kjY/tDwwKr24ghxxcjz6TzVyW/ZRU3qIW3IjKE8SG6N1mPvf4DQ0IWrfpgMPjgVKFPLAaZDdciU 4kGsWtyJ+PJojwALneYgwGn4G02KfaVl5I4H8lROXFV13Px6PwtOjFObBEVvQjsW25ZbxMiduuoY sG5GPGANI6xDOeMnRx7rfHAN01Aj0LWSzJiOfg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200820065534 20200813065534 5910 fpki-lab.gov. ZM1+8hr+L2HJpb+YZ6uU0YfGtww3rOiR6JQAxHKP669a8zch6UN2Eq9RJzX/G/tANhougFRwpPFV mEPJYUuY5Kut0HbuepukmU5J8DKxLbdijD9zA6ydSNGVfzbFN1+6mMKP2gIEsxES1ZleDwO/bxxd /uRkHpsrXSk4LgbMR8Lr7SrXO+8gUlsUWgAzXdTisi7n+Me8o2OHGWgE8CsDypVXXQGRZ44DtDn5 vFPNk3oV+QvVoQAansiU5WP/IlYnJJqgO/dyEgvwnJiV4CDnHk5hjYljTu1mYR6yMQKuC9jJV8So Om1swW/ufio16x7AtM47L3VjERRtGe5ykz72tw== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20200816145202 20200809145202 43800 fpki-lab.gov. MSwAN+0by4EtmG/dRrpH0Qf48dQYepLk1LKP1yRIbE2b5X3ZOeLH8pm9SpOnG5xd6MGzacjdsBmf INFxJKyg9UXiFNn/zh8mUXazKc0jZdx+Mv0j79A/xnAdwLA4y+HLyr0d9UnoEtZCHlGmEuavrzlQ e8cF7UvgIorDUyhfpCaBEfJxKSF/AQgqAc6wHuBxDDA4QIGLOto1PGOAlNYY7iiqwYm7CC4ITq5T XgVPUBEwz4dNBO+41iJXIYida0BFCMSeync+JN9YbrE0rauVfCYwn/4is65zTeMiqp09wpgnE0TI zFBsldVDdyZiorKs60OrUr7iZxXviZ8RmsjOiA== )`
	RRSIG=5910 and DNSKEY=5910 verifies the SOA RRset
	RRSIG=43800 and DNSKEY=43800 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: