DNSSEC Analyzer - FPKI-LAB.GOV

Domain Name:

Time: 2019-06-25 15:58:54 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1139 bytes) ;; HEADER SECTION ;; id = 64214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	DNSKEY=59944 is now in the chain-of-trust
	Query to h.root-servers.net for FPKI-LAB.GOV/A
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 667 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (667 bytes) ;; HEADER SECTION ;; id = 29577 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 8025 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 406 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (406 bytes) ;; HEADER SECTION ;; id = 29610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 26679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI-LAB.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 498 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (498 bytes) ;; HEADER SECTION ;; id = 56827 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. A9pko0pWmjJNtQ5JM+jTV+SHfFkM12y9K2brRcJuw+jmqrF/Z8DJ3RuAT0K47aaMVfI7fujlHzLT OIWJV7FxpdiSx2ngCZO3Dnb2dLOsPk84HWIyAAn1u+qmQN/8APT2pcggl0C4B/tpUc/ELpHwkZGU W+t3N9ThfUB9/++EmcA= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for FPKI-LAB.GOV/DNSKEY
	Received 498 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (498 bytes) ;; HEADER SECTION ;; id = 50558 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI-LAB.GOV. 86400 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 86400 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. A9pko0pWmjJNtQ5JM+jTV+SHfFkM12y9K2brRcJuw+jmqrF/Z8DJ3RuAT0K47aaMVfI7fujlHzLT OIWJV7FxpdiSx2ngCZO3Dnb2dLOsPk84HWIyAAn1u+qmQN/8APT2pcggl0C4B/tpUc/ELpHwkZGU W+t3N9ThfUB9/++EmcA= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to b.gov-servers.net for FPKI-LAB.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI-LAB.GOV/DS: 'IPv6 transport disabled'
	Received 372 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (372 bytes) ;; HEADER SECTION ;; id = 56327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab ) FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64 FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. A9pko0pWmjJNtQ5JM+jTV+SHfFkM12y9K2brRcJuw+jmqrF/Z8DJ3RuAT0K47aaMVfI7fujlHzLT OIWJV7FxpdiSx2ngCZO3Dnb2dLOsPk84HWIyAAn1u+qmQN/8APT2pcggl0C4B/tpUc/ELpHwkZGU W+t3N9ThfUB9/++EmcA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI-LAB.GOV in the GOV zone
	DS=23689/SHA-256 has algorithm RSASHA256
	DS=5320/SHA-1 has algorithm RSASHA256
	DS=23689/SHA-1 has algorithm RSASHA256
	DS=5320/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. A9pko0pWmjJNtQ5JM+jTV+SHfFkM12y9K2brRcJuw+jmqrF/Z8DJ3RuAT0K47aaMVfI7fujlHzLT OIWJV7FxpdiSx2ngCZO3Dnb2dLOsPk84HWIyAAn1u+qmQN/8APT2pcggl0C4B/tpUc/ELpHwkZGU W+t3N9ThfUB9/++EmcA= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=23689/SHA-256 is now in the chain-of-trust
	DS=5320/SHA-1 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS ( 23689 8 2 cbf0b1d625eb6ca7dbab7df566402298f548c48510524505966c7f2d4846dbab )`
	`FPKI-LAB.GOV. 3600 IN DS 5320 8 1 5cf980f2f43ad2dd46752c6c86d1a77e6539834b`
	`FPKI-LAB.GOV. 3600 IN DS 23689 8 1 b34ce09e67bf7dabf8ab2636c09a3b9064c52a64`
	`FPKI-LAB.GOV. 3600 IN DS ( 5320 8 2 ab79c5f0e44631d87e2b391e59506384c15b08b424fea143ff27c9fcff560837 )`
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Error querying dns2.FPKI-LAB.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI-LAB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2345 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2345 bytes) ;; HEADER SECTION ;; id = 55900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbHxB4ui1eUCeQhMaFNS3WB8pBPgxu+TMAK3DL3DZSktLf9IGOs3YjmnlNiB7SoIKm5I7w1q /T6l7+F3PB+q8un1imRN2DhIUIiC8OB5VFGM3nSoh8ROCRj7ajkRLOoU0xUsOOGi/E++b1scIZ2S wQW5LpasDnuzK26FuFHL5ZhUqJtFgr5Q5++1nnZqW3V9AydceLVyYzxLN+YSTCN0lKQQjAs0aAxB iDpl2PfRnf3TpSieJelxmeX4Ji2rLhVjON62guCeNRNPfkf1Q7lPO1l1dLG07mTbiilCOjkCKCXk X6aaEtbfrE7dtBxMp8UVV2E2wLxROm0dPUIB8EA3CEk= ) ; Key ID = 54090 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZj5etGJiNWPDJ6f0h8Dwgdp3uuq92VsYCN3Jzb2kcAjpnPcIGAfcZSK7z9VV57WdQG73I8G qm0v2Gtu5UQ8Z6MwfDmhZTtpqGe096iKR4uF033tPzdmV6Y85S+7FAV4tonkk0wCGEoMnNoAJIon TS5Enu/MnmGOW6iZ3eVODIMJEZ8WCdhwCCVA97iMrCF5XpDnByX7Uax5oI42gAfKqp3GEv+ONAi6 1vGqiU7UOs7AJnZ3OESN7FU7QaHI83I7WZQGof3MuOADjfZ2BBtLCybN6QZXg4YfMFn3lr+FMaKK b+L4nXDRcP9ihAK+DdCi6Cle5MOLZ35wxv7Tfh9pL3c= ) ; Key ID = 32118 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 54090 fpki-lab.gov. Pyn0Q1AF+73b2c3GXDoHelf4Z7cG77HFqx7jxY0E3EaiW44thqRAIe+igLuKSHzYyuGMS/5IqryO El8J7kadux/jMC4iHjX+8Lhx6o+ULh9b66UYiXTwmR0CPL29XHt1qiDAqStW04YwB8xykXVERgbO SQQKGLkEWw+Ipd5BdjqdT8Rc2/99zwMkUCrL/pT7RBIPAXMSYBrUbKCNfQPtVV/WUyo7UNd72J21 yIJnohA4oTLxgAmoIaGFDTDpOXSUC4x3DhF8HR4H6Ze2GniEm3MQUHO5GkjAL1aCCQ7FIJqv79L8 PHl5FW9GIiPVfWHZhkrgO6FLDeDi2/7ziHK92A== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 32118 fpki-lab.gov. NUA7L/E1v7sRtVcSG8Jxt7rue3whtCxpDY5kOLXdXT3k5EtA22y3ewMsRfukLhBRm1aSHlAUYLyD Ec256xLFDAagH1TRDtP5wZKrP1681Q9Sa5jd7PlcNgDp+mGNeCG5mgXmpPVKHRW9tfmJdOIcvTo6 CZiZw8NyKXQV6H9tDHJN8lJPujdUqTRoCTSzM/HL24IOgnQMX4y5e8xoyXfobXVYZhr1muoLxJL8 mq+YUZWTjdfKGjkEf+w8PJ2NM3zZNQlDRccDsYh8qzFvS1txw9lKCyKfaIcIscZHeNCwx4rsq59C RHxSpO4u6VBfQqC3DCTyMU+AGhF38iqhfwOrTw== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 5320 fpki-lab.gov. bDiTjGuNFRKIlyut0SAO/vQY6TU1Dw4Q/Cl6eFdEDunafMdEdTR3wXYNVepWJJa3D4WRapLh8RbK x7IG/XKRk4jJ6Jl+bXW06UGiN812TFIu/zDPf+RV00kftes/dU5c5ktxkaHVzrt0roi6An5e/CuI wSJFDSCccivXguoCtNvJfyk0XtkLxqDRqDeAT30TUFlZ7XwcYDL3w6NfCXelfrHN2Nki8lvBDyI4 KEq7LpV69MnXuy+LboeSlukIPjhx6v7tyANUt1A83zBlg7DYIONpj6p/LWv1LcDX93tfdE7T5Lha qX8vtMteI4zkNP7wmmJ4HmDeQ8N5018hprfBCA== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 23689 fpki-lab.gov. nu6wv5rrnFBtosPWJLc7V9PtB0/YReq+ry1zf5I8pqznX3DxvtdJj1LBK0UKgeaXQIiOM5r/b0Yx rWEsMnJ2PurEPAVv6gaULcT94m4Y1HGH3pIz4lhV5Eq4ILmi85lh7GAeRH7Ef1tGV/HqZmTJIx6a aN4RABEzjH/1icI6RU7V8jeOdhWDhi1hcW88Km4TJWkSUJNFU5jD3S5Yl8sHmDsmFSVzrLb2VahU FcZEiJnUMLzUGLtdBReM9aBpafeve6zEGB4K+nyEL4Ge7hacgxEk5wij3mThqKA4Nx7DE6YLHTKR gtMWNKOTsJPPAp7yF9nL3Jp5w4UuxpIrHqwP7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbHxB4ui1eUCeQhMaFNS3WB8pBPgxu+TMAK3DL3DZSktLf9IGOs3YjmnlNiB7SoIKm5I7w1q /T6l7+F3PB+q8un1imRN2DhIUIiC8OB5VFGM3nSoh8ROCRj7ajkRLOoU0xUsOOGi/E++b1scIZ2S wQW5LpasDnuzK26FuFHL5ZhUqJtFgr5Q5++1nnZqW3V9AydceLVyYzxLN+YSTCN0lKQQjAs0aAxB iDpl2PfRnf3TpSieJelxmeX4Ji2rLhVjON62guCeNRNPfkf1Q7lPO1l1dLG07mTbiilCOjkCKCXk X6aaEtbfrE7dtBxMp8UVV2E2wLxROm0dPUIB8EA3CEk= ) ; Key ID = 54090`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZj5etGJiNWPDJ6f0h8Dwgdp3uuq92VsYCN3Jzb2kcAjpnPcIGAfcZSK7z9VV57WdQG73I8G qm0v2Gtu5UQ8Z6MwfDmhZTtpqGe096iKR4uF033tPzdmV6Y85S+7FAV4tonkk0wCGEoMnNoAJIon TS5Enu/MnmGOW6iZ3eVODIMJEZ8WCdhwCCVA97iMrCF5XpDnByX7Uax5oI42gAfKqp3GEv+ONAi6 1vGqiU7UOs7AJnZ3OESN7FU7QaHI83I7WZQGof3MuOADjfZ2BBtLCybN6QZXg4YfMFn3lr+FMaKK b+L4nXDRcP9ihAK+DdCi6Cle5MOLZ35wxv7Tfh9pL3c= ) ; Key ID = 32118`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb39/1jLUzzOmc2cBNP0W7VTWmEJU5JQGjsi/YAKSg9pPi1BmgBut+tPRYGXpc17Xj5RXJkH NJzor/Y7UCB5RFqzsrhyYbSG6tW2r8Ftgw8jqHBpEjLM+oyzfguqAZJ5QoUPq8LKvnqqwfvO+/0a bd4vLmsnkzXqaFXq71u8+58iwEv3JorW9qvH6SVATrI7lqMmz+JjlDNvARFHZR9PPatlkw1sIt8E 8RSAk1ZDP1PLA7lpXhLB+d/6AXi/lgw3z3p+V3c5ugVGhvv+4ugRn7Ilf9/d02pYQwnqlMYpWaQE egB5+SWUkxoNw0P3x0/P9hd2yGSFuht4rZriX9UHWHs= ) ; Key ID = 5320`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ1Jvgn8E1KdufZSwuoj0s3do6deDKxO3lKqTujlCO6RDbtiK9i97a06LQWdVHoz6GS7h6k CiTB8Oyr+yjvt9aRG+JKGkf0QM42TTxRuLuE/78ll0k74Eg9g85KNTsEieVObEHdjit6F2qOgSeL e5S4gh3QsJc0w2Nop8ZJSnFxWLJPSDFLLOY1DQUHHbzfrqe4qO5p8wtKTkv2QO0FVXxOCG3kG2/c RpqU23ZeDGg4MEvN5uMHHlkoKvnwU0lWt/l43Qszbhwio8quukT6guqlakY13aOqLUF3rWGqkqhL +Pe/C1g8P71ATPgi3/O49NC1xFhKYRuhIqJLAmLXPx8= ) ; Key ID = 23689`
	DNSKEY=5320/SEP is now in the chain-of-trust
	DS=5320/SHA-1 verifies DNSKEY=5320/SEP
	DS=5320/SHA-256 verifies DNSKEY=5320/SEP
	DNSKEY=23689/SEP is now in the chain-of-trust
	DS=23689/SHA-256 verifies DNSKEY=23689/SEP
	DS=23689/SHA-1 verifies DNSKEY=23689/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 54090 fpki-lab.gov. Pyn0Q1AF+73b2c3GXDoHelf4Z7cG77HFqx7jxY0E3EaiW44thqRAIe+igLuKSHzYyuGMS/5IqryO El8J7kadux/jMC4iHjX+8Lhx6o+ULh9b66UYiXTwmR0CPL29XHt1qiDAqStW04YwB8xykXVERgbO SQQKGLkEWw+Ipd5BdjqdT8Rc2/99zwMkUCrL/pT7RBIPAXMSYBrUbKCNfQPtVV/WUyo7UNd72J21 yIJnohA4oTLxgAmoIaGFDTDpOXSUC4x3DhF8HR4H6Ze2GniEm3MQUHO5GkjAL1aCCQ7FIJqv79L8 PHl5FW9GIiPVfWHZhkrgO6FLDeDi2/7ziHK92A== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 32118 fpki-lab.gov. NUA7L/E1v7sRtVcSG8Jxt7rue3whtCxpDY5kOLXdXT3k5EtA22y3ewMsRfukLhBRm1aSHlAUYLyD Ec256xLFDAagH1TRDtP5wZKrP1681Q9Sa5jd7PlcNgDp+mGNeCG5mgXmpPVKHRW9tfmJdOIcvTo6 CZiZw8NyKXQV6H9tDHJN8lJPujdUqTRoCTSzM/HL24IOgnQMX4y5e8xoyXfobXVYZhr1muoLxJL8 mq+YUZWTjdfKGjkEf+w8PJ2NM3zZNQlDRccDsYh8qzFvS1txw9lKCyKfaIcIscZHeNCwx4rsq59C RHxSpO4u6VBfQqC3DCTyMU+AGhF38iqhfwOrTw== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 5320 fpki-lab.gov. bDiTjGuNFRKIlyut0SAO/vQY6TU1Dw4Q/Cl6eFdEDunafMdEdTR3wXYNVepWJJa3D4WRapLh8RbK x7IG/XKRk4jJ6Jl+bXW06UGiN812TFIu/zDPf+RV00kftes/dU5c5ktxkaHVzrt0roi6An5e/CuI wSJFDSCccivXguoCtNvJfyk0XtkLxqDRqDeAT30TUFlZ7XwcYDL3w6NfCXelfrHN2Nki8lvBDyI4 KEq7LpV69MnXuy+LboeSlukIPjhx6v7tyANUt1A83zBlg7DYIONpj6p/LWv1LcDX93tfdE7T5Lha qX8vtMteI4zkNP7wmmJ4HmDeQ8N5018hprfBCA== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190628071129 20190621071129 23689 fpki-lab.gov. nu6wv5rrnFBtosPWJLc7V9PtB0/YReq+ry1zf5I8pqznX3DxvtdJj1LBK0UKgeaXQIiOM5r/b0Yx rWEsMnJ2PurEPAVv6gaULcT94m4Y1HGH3pIz4lhV5Eq4ILmi85lh7GAeRH7Ef1tGV/HqZmTJIx6a aN4RABEzjH/1icI6RU7V8jeOdhWDhi1hcW88Km4TJWkSUJNFU5jD3S5Yl8sHmDsmFSVzrLb2VahU FcZEiJnUMLzUGLtdBReM9aBpafeve6zEGB4K+nyEL4Ge7hacgxEk5wij3mThqKA4Nx7DE6YLHTKR gtMWNKOTsJPPAp7yF9nL3Jp5w4UuxpIrHqwP7w== )`
	RRSIG=54090 and DNSKEY=54090 verifies the DNSKEY RRset
	RRSIG=32118 and DNSKEY=32118 verifies the DNSKEY RRset
	RRSIG=5320 and DNSKEY=5320/SEP verifies the DNSKEY RRset
	RRSIG=23689 and DNSKEY=23689/SEP verifies the DNSKEY RRset
	DNSKEY=54090 is now in the chain-of-trust
	DNSKEY=32118 is now in the chain-of-trust
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 45322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701231000 20190624231000 54090 fpki-lab.gov. GCGqfo3xdM/+3D/DpszRsByeRCQRcz4ze4xil4p9j+Z4E1H3DFHeSsbbNuUq6ZmwyiTYYasY4lVH g6uxmbOt4Pi8XYMJ/VHTD7KHDtGforzoy1oCIojARNFyjEVhGXgQ8f/VEw0Ie5vWxvj9LoWwQqaA MIVotCuGD9Bm65bDRnVuQ2HsI0cfX8LBts2NTnezMPmkGDy7S25MSP5YYvTHmPdC2rQJnX18gpBW bAnPA3ES2sjevlW3xKBLfrK9fwS14CD1wULcZrEKUb1VfaHa7XQiXFML1ZUyemYKV8Zrwn2T0k/3 1qtZwG6hrF11FxjQbKF8DPVieG+CzlvBhvw4lA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190628065414 20190621065414 32118 fpki-lab.gov. WgNTxuqt5gD0ZKAJFdP5LO+C7XGvnmdpamQr08eFkoCU9ARkyKXLLikfQ5jxcnMqbCxtFnv/u10W +tNi8/RRyNZENC6F2n6VdclYdRnlcaZN6xKW4U14kXJnmM2ZCZBTAE580NfTwdcGgZo8/U4VdfHe I6F4CvKG9+d70I5vOBQm04gc6gobwm/LAM1xU/ozXHFZHmF/Atg9ZI+NwFbTmvURz5h/C+A3Bhdy FXW/rrEo+kuuTBUYqGzg8YCwzY79GDYp+X/eWFOZdcHdV07N/gspqDrtoqiV9/rTNNu/AntHbjWP 6XyLA97CKeuuZXyCceV1Py4olPK1Ycjj8XezOA== ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 2702403a06073582 0d9u7sh5fe89d3vo8uigd8j9rgbegb8q NS SOA RRSIG DNSKEY NSEC3PARAM ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190702023358 20190625023358 54090 fpki-lab.gov. mJ2Jj4STRpAooW39Vy+NX4a6kitF3HVdtjk8ciNeqS1fZT21i2RZuNrNFZRTC+y50/NAcTLF+Mu2 NKXHCu+evMxUY30tfb7d7wzm953L/Xn8IAEsS+22w6gWilgDwMi8nff95ELnwLKt9AoQXxv1NZTY ttyG8t4Ck+znFb+Aw3dDxxEUUZl1fdawg0GMIVNEn0CbfllrchCc+loHn8rLpJkOhHGTK1a7Uwv7 YkRs9EmvNrOQRDi3a9WZqHHRvcTnWdL23ROlBB/ysQ1tBdXyWJ1kwN+A3BHGl/AA1URdwxfbouf8 OW0HBqOJknOPwUwlx0diYpWLQ127/YfLfWQodA== ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190628071506 20190621071506 32118 fpki-lab.gov. Zhg5PysXx/wWxKqkJx32rFGpWSu2hz+MtsvEEyC6hHIBMC5ODJOy8G3lDf1SDqyNWvWmLzDqcccm /v/+G4aXwzym64vlhQbnk1bOBH43bUCkazpJW/6Vv1MLytqcXLKbO8Q14yfET15SDNeya1PvHL/D 0G7WTRqlaKULFbtiaXdWhx7ja7oWA4tiJAOGghKO6zU9JW9XgSY2AZqAEkT07HyYVgW6oVa1mZm7 18iLwSzerF+7leGgASfYIguu+1DBXJElb724HU8sbj0Q5ZFcNsQ1jXKO1vfODo5xuV8tG+H0Az8E W75zCw+5WiimswevIdCIGkgzDTLeBdSvCfcjUw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3814 bytes) ;; HEADER SECTION ;; id = 31692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701230123 20190624230123 54090 fpki-lab.gov. k14ILg7dE9kTdeIk20D9QsaIWk9At0te7ogzX40ndtxbDYuvB10UDk7YyoahcH+aCafXNXlDRC3I hFYqWos5gjUiQSPH7G3PHm414ruwmrAG4oIy+5FucgGPuW72fWuXryZYBXKKQxvy5uwN7GYWp7MG FhVuaDTbA1pRjT3BkUI06oU8hMTqAoVu1FCVAEYXVXYDeZzD2KgQLCsVhAxyKD6ewJwUv/VOzZzL ooEiwaTn/reerxgxkeC5MPZpOlA1weGRNY9p+rRTwdRuo57fdgZsU0naEl+DFM6Z8kRzXTXbG23b 8qtAzvHciBl/QUCIjwPIsDzJjsQdwXUGwsevgw== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190628065650 20190621065650 32118 fpki-lab.gov. ldCuPKC4vJdiEUIw3QDYLzEvC0JmoXcgco4YM+xljjyF6JJwa/JEQGeUWmJckk3yaj8OHYkr3oH3 JKj2CXwog8DcMf6tVaXh2R9AOq0IRZBaQbYWbkt5RYrswF1GxigpYgIWdQgLz4LIYqKJHUA5AcNk KGKKxPr+wthqyIBCXFociIp/8NqniAfFW6iNVX4u30aHN2VOMNWY8jhqSPHrn/OqtYfcyYg3vfr6 uJkLlAqaHuSeANief+aBwPV5G6Hrrl32z0RmsPj4YOgaltfHM4DbAyc9XzX2O9O1EkCvK03nqC8X 3UoqOs8KbpOTbjUHUGsuFBn5FZOiI7dE/d6fxA== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190701230000 20190624230000 54090 fpki-lab.gov. eiVCNZpBoCw8sbXEmrWoUdeVCXAbHyZlkgcI6fRRpvFR3MSfNhK1eTzu4KOPV60ArcAaAGkra4K8 vQ/q8IdfCmL3qlKBv+vhRB7P83bGggmeq78KgjBLZGAY3QBna9UwysISE2eVzYsz+SwrdNRPuhAX QSTnZIu0s/+z6MSCaC7pXy4cqiymj36WTmKpmgPaqzZ9ziu+cPFw8w+8kl4DFn/N0eXgMWezgFIK YG1ttEEL+/hErlMS33KFqs3X7DosOpZizKDdaIxYADfLqyKYujK7X6FHctTMY+ZuDyUo4aZwSapp 6MY+SJ07lzFbZWO1m+jLUDp0OhYaEZ3Ie7yKWg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190628065400 20190621065400 32118 fpki-lab.gov. mGHYOGkT4AEWyLxPm+aXfQRLeyglPEjbd+WGHydQoy+dlRH/4BboOkZR80QWU3aTiXnv9MtEuSzL StI4cwHbmQUWLQ7kShjRK0EIndZT6z6Xb2uTw3zcRpPXG9faAlU9NGvc72pZu74uCQfGoMoy5Hyc Z4OssPA01WDsrTidx4LMpV40GMw0raSUgSx1FDCPfYpu1z/sd0oluaum5T+B411CBvgX9DorOHGE vT84pS6lFHBOozkYh7nnQdcxfMSzZ/HQ3sPscufQeGYYVaHC1QK8D56lC31UXJ8oI3tdpEeW3kQY ho3gyWgXiwIKROkFF/+z4AfD43rkSfaKjdWCjw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. B/6/hhKVx6F2+7Fyh2UUYEWUug/LakNo1ystF3VGmsGli/qxKOQJ0ny4OiUKyTOo4VbxdfF7Bzj5 1V/qJ9WDWHVKcvI/3Yc2D8VHSm1pC8oRmSS+J4pHXSbSRRwJA1WenWqxraB4t6AcJBdF3TaWfggQ DJO5COhrAqEu0l0lHqGEubf/+VwkhJcPmxOxVeZS6qbSTsHvMDTGgJ8ceOlpLIReZFqWtpz6hYWP YS3nvQPtuvfZxXa6tktC5/3EOfNNjwC0ba7eTX2KkLcqWnKC/KmYSdRRrHlLAOQbr1+DvKSOZDIQ FptbXMw8OV+Y6XjGQKrdHDAURwA/JaXM4sEOFQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190628065400 20190621065400 32118 fpki-lab.gov. jhVlSUcas2F0qx95UTHR4Wb1BIVkma2kZwLcNirmAB4OfP7/WMjd9JBZ2R+gTK0EZLoY7jrUYXb+ EHXZjCy3538ul1cJ973F1kiVo/HnEHYwAGCcw2UIWfVMq+kflr5PEzzTaU7Uc9A2LKgziQnwf2h+ pWaoQLW4c6vtJZXAc/BSZVg7QmqZhSijduRYe8AiCiK1lUpBdhbJT75fLOL2lOSO5HoHxq6GYO5S qmtFPuk3fQOP2+FrxGCeRblB0cR9Gk2YUobgr1UPWiAA2b7NsFPhaDObK6Wz3j53A4I4t1WNZWd5 sAlMrwWQmIPeibxOHfuDPuCmk6rjhbLxQ6x5vg== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. JFRkBLJIbbBV1BVrI8YbZqxO2cKsZtAhJsI1Uw0zaEx/Bqu5nWIgLMt/+vYTugHZYXQnOwVAqkGT AWG0RpXYut/bQiVd6tvoRVQFxu6ct1wqjbudGRQIrQBvhZWSLEpToJhy2TXcHV50q8xk27IlV8lx TeFt8mQ0Z/d2pFgS9ZGZoefVeg+PVO2PyxJDP2BbRZwQbBakZud+uqOaq7lMYWsA6EQ4JqvTI9hj yoLDwIkuqiuk3tXTAGCQ2EtagxLWbdJpUy/i+jgkMEf6Cx3v9VrM8sjHvmQ/GSm+zeoebX5lqW3R LSp9TjVq2VOC0nTjPnqMFP4cAnRddU0enELjKQ== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190628065400 20190621065400 32118 fpki-lab.gov. lMSWL1UohxGHrgMWUnXWcm2kCnAgRRnSm7Igpkk/pziN0c13T+xsPbrfXTJpJw/UC6bZCu6qu56t wEeqGuAOdWZjdVPmjELW/bCGIPhzLEXrcqFd3Ma9o5wRQkyZ4sHp0rPiunPqsYK2O8p0YPvGGKTN h+KeE2pgqThpV+BRV8hU+2HLGql1xQAPbdeohqR6iIEcZGHjTiYgR0Hdh1WMTORZO67SJEGaqesr vAwa19dM2aKBpPIjcCj46XYD2kguRCk5swN7/yc3SIMMWr6HN2MYr2GFbcJ9ekKexerTOTiMrTsI fPJS+ORt9+Y2LBRdmBfJdB1CmREutXAovXQzXw== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. lsgT3c5Y3LXko79LxBvDmdIQHVgcqij1lrA48h1+bODoSNTyBawQIbBtZycVGlTfRif+ZxcHejiz kJ7N59rSYzCiUdM3oeUaEcUrNdWPkePCcdBS0JQhUSdASstQxJ6yHML2dE3Z4hsiy1+DKzCy0j7A XtKejJYBGV2eTHw/KfTGrGPueOj0MK56kmorPgUa2kUrEU7kBXf4vHR5GhQNdlKPgIW60LFc+Kcq T1/SUmlPN0UQ7ZeAHm4IYj2hs7vB+WyBPDn3hK+1ayZzoRTqkj1fCdG4wq/OV1bm6TPFTODJ39Jr fyncffP7hF2QixQQmTl09bsZwhThGMawdn7edA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190628065400 20190621065400 32118 fpki-lab.gov. GMnItoc5kqkVqBAIJ5UtoFFzquZtGJLbOpQ5t2Yw6RhwKlnSkfNLRFCs7pJFfovGNI2NqR6vJxMC gAbH9LCo1cMRNzXSIrJkTWn3rDKgFM2LrcRsNFio+ZSTeAeLPdL4lEfvKJyTHfQEqWD3SZdAE1cy HuxasoWXcfMIIXZpimVXrka8Ivc9YXEUxdER6rrf6ubDDNseKHbyNaHnPjMhnornCfDld61Yf4E8 NKyssfIZonF6wnPmIyE0e1qtGOJyEJscF7LCF6YTsRGkHO2YOfWAfoSkHRru9SuKvFIOirK65Q5F 1f8/zB91/eGrwwqa5lU3Gy4rOci4+kjRMiWIZg== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. k3KYf54V5kOM4Mv9Q9EJLuw+UBtCDwqA3BliR/uj+tTp/70wAtuk6Wr8Qqroif1nVtG54JEIZa3p mQwdKRfrtlE8YIHU5LtCSkRmy4t7ElQ6QUjDLBnYAhKBRagq9oyfoxI+lZRzTDDbyz6dZAaRcH++ HSY9rcfZ6gy9nWLh/UhQEx4NEwcQ0RTD1bX2prW5w93+RUsRhep97AkN6LeZdEqQolU5Qw3jAkKR 4Q5/xMc3hNr7gioSQph3s0Nk9IXuTNIINEMyv+W4M8cI0+ix9KoPHKGmxwt/1eaE3ZHFM3nk/mkI BVw3r/QkuZa4Bld+UBJ05GIM8Do20b7cKMHBKw== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190628065400 20190621065400 32118 fpki-lab.gov. MkaXNT0sQ1O/y/D7MgAnqGZrxZKBjPUYZUOK8zyIr2YKeHdyXHwRXIPaQ8HUC50RXWSdqRtVm63I qbWN8WCerI8zvDGX1y1ZguErwuuYrilVyeO8Jz9MbnptDZlIf1FGGeBVoqMb5ozYcCAnC22DSTvE xPvaUMu4Uz2u2r6WDfuvs5H2pcBTFQa+7zoCPXKBwRfwTw6f5T9sqNgomdmBHVnt/kdYLXyMpl33 /lcJhIZFro+cZDEx4vlUmQKjcqW+jP9qT5jkzwp/0t3Alf/B4SvpXH/RiWBolkeXuScMa0a0QJ2A lzeT147BmO41bU3jS7uNI/lx1LH2jtl6JTipDA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3814 bytes) ;; HEADER SECTION ;; id = 44012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701230553 20190624230553 54090 fpki-lab.gov. Dlfx7eYFhG9QkbSBujxsXdfQrEohMZt7pC1O9baQVOK9zxcWI34LozkX8pnzshgML7x8/eNF3W/S 7x+XYF1eOFucUDsgke4toduIfc3h5z0w8SIb10DBRBx7R6dgQqOni1RZEvC5wqT0TXXVU4p2xg+2 xY9zCgi8jXgEdSQrgtrhkcfwzl/hBdhseuw9Kn4yFGoCQZpnbFIM8GZNnC6suoqcHkSCtPbu0GT4 ryeI8R4xEPl3agKD1rJcpJ2eHeSPr6OStaO7kzWMXw53Ujm3VUErH5qnXwrWhgIfI/PZf1p8VHGa uVuSjRvY6XUMslN8IOjVzDxdSMCUT3s5CcENdA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190628065312 20190621065312 32118 fpki-lab.gov. SuX7pvktK7MIVnLIKxaadwTt5yJRTKJsxB92Wq9/N+eS23l5Axli9MOfqD3RU0IcoIPjCj1CSRuE Nbx8XzwHilGVJo9o9EMt/+DOX60oC+NM85hD/+7HZV0lPasLKB+QTog6dJCvbCBIaub5b0dHAcnI WZuN7E6haqJlAL7ERHlPoKP5Np0Xi30v/k1ve4Q9sJt2eDZRD69M/ITT/dpSHDIGTAgeKz2RskWe 9oMLUC8VJqPZ4Z05tVkgEY6GlMx2QFlIh4mL/fW1n3Js2pslE8kSbDuFpmBrXg3BMVn283fmZE2a WK5rc7ye/jSnxrk1l0+M0pIK+5m/51UFfHxwVA== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190701230000 20190624230000 54090 fpki-lab.gov. eiVCNZpBoCw8sbXEmrWoUdeVCXAbHyZlkgcI6fRRpvFR3MSfNhK1eTzu4KOPV60ArcAaAGkra4K8 vQ/q8IdfCmL3qlKBv+vhRB7P83bGggmeq78KgjBLZGAY3QBna9UwysISE2eVzYsz+SwrdNRPuhAX QSTnZIu0s/+z6MSCaC7pXy4cqiymj36WTmKpmgPaqzZ9ziu+cPFw8w+8kl4DFn/N0eXgMWezgFIK YG1ttEEL+/hErlMS33KFqs3X7DosOpZizKDdaIxYADfLqyKYujK7X6FHctTMY+ZuDyUo4aZwSapp 6MY+SJ07lzFbZWO1m+jLUDp0OhYaEZ3Ie7yKWg== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20190628065524 20190621065524 32118 fpki-lab.gov. UxjLdN3kFmpNayIOtxurfaiSjQ+AISnQaeuPxId4EYj68VbkxUID0EZxOIdi2ewMvxPtakUzJn9s Nvsg70f2+MI/cv+XxuHHx0+OxnjvyKE1BL5hot8o4LgsDHNwrXpNkEifh6+q2drlMq6/tbPhbuft PKfSMZF5UgxizmK9pAzREr/U+c5R/AqOX6Jt/rqI0ybbfUOjJUwYyrf6ABksEBbkILFu2tC9H0S+ iC9MbpSkHHfADge1wvXotxsn6hXYOt7Gk9rC+oRtZP64dUM8R0Gcyj/vaUSxO0z+VgnkQixGNabi JIjv90/mJu+u9bDICYwvSKbd3iyJehL3hHo3hA== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 500 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. B/6/hhKVx6F2+7Fyh2UUYEWUug/LakNo1ystF3VGmsGli/qxKOQJ0ny4OiUKyTOo4VbxdfF7Bzj5 1V/qJ9WDWHVKcvI/3Yc2D8VHSm1pC8oRmSS+J4pHXSbSRRwJA1WenWqxraB4t6AcJBdF3TaWfggQ DJO5COhrAqEu0l0lHqGEubf/+VwkhJcPmxOxVeZS6qbSTsHvMDTGgJ8ceOlpLIReZFqWtpz6hYWP YS3nvQPtuvfZxXa6tktC5/3EOfNNjwC0ba7eTX2KkLcqWnKC/KmYSdRRrHlLAOQbr1+DvKSOZDIQ FptbXMw8OV+Y6XjGQKrdHDAURwA/JaXM4sEOFQ== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190628065524 20190621065524 32118 fpki-lab.gov. B75wqtgF39lNJK9ffr2VFIJGey+zL7zEnuzTZRQHVSfyWWt+ydFAFD0qXPxYEa7uU1SjWv0VZK9q 74Vy7bLqSmts9pk1AT0TNvA34t/25s3S91XBisHSefJI/cvJekdkG8+svrTxZyHWnNyR+zE9U/gG hzyROxnWH/i5FC0TJ19xHtdS4tucA1oZicSnngQiYIVCmbUB2LrB0BHo+yeHYffCO2Yyre/qdv7y 6+u8gSo91iWMHOXP7Y+Fbe/W28klXyIC8F9A+LScxe2/SfLRGWZHvLnDorzFRmYi5Bw/zt0dP6oC mBPTYnakqr1V7GHn0fLmsdsac0GZNUdXa6NY6g== ) dns2.FPKI-LAB.GOV. 500 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. JFRkBLJIbbBV1BVrI8YbZqxO2cKsZtAhJsI1Uw0zaEx/Bqu5nWIgLMt/+vYTugHZYXQnOwVAqkGT AWG0RpXYut/bQiVd6tvoRVQFxu6ct1wqjbudGRQIrQBvhZWSLEpToJhy2TXcHV50q8xk27IlV8lx TeFt8mQ0Z/d2pFgS9ZGZoefVeg+PVO2PyxJDP2BbRZwQbBakZud+uqOaq7lMYWsA6EQ4JqvTI9hj yoLDwIkuqiuk3tXTAGCQ2EtagxLWbdJpUy/i+jgkMEf6Cx3v9VrM8sjHvmQ/GSm+zeoebX5lqW3R LSp9TjVq2VOC0nTjPnqMFP4cAnRddU0enELjKQ== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( A 8 3 500 20190628065524 20190621065524 32118 fpki-lab.gov. TPfW7xWDnTCk94St6wFICNV3y61GWmKI1lmIPXfKvEB73xWo8DKEgE3Bv6AVEYEjZZxovp0BRSzO ggqhzwYSWQAMeLCN/tzFrdJwsZuDf8X9f1azQ0gAVza1H7kp1hK7U5nDzCzCw8gCONVOIg0am+ns 6sLs9Yztdr1/gCaWs1PuM2zInByjYyYzBYeuiedDF709fzxOU2Us8jBSls4Xo1PNkCliPkOI1M7+ eybQfc0hR0kJeGc2jfzdCmOUFBv5DwSzHj7sB1D3ioNi/5JUHoUH8lAXefOWP+lBsnFm8AFRx05i epbrYC8Tu6sxYMMBHvYwHi7H16vgG0/neYTBPA== ) dns1.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. lsgT3c5Y3LXko79LxBvDmdIQHVgcqij1lrA48h1+bODoSNTyBawQIbBtZycVGlTfRif+ZxcHejiz kJ7N59rSYzCiUdM3oeUaEcUrNdWPkePCcdBS0JQhUSdASstQxJ6yHML2dE3Z4hsiy1+DKzCy0j7A XtKejJYBGV2eTHw/KfTGrGPueOj0MK56kmorPgUa2kUrEU7kBXf4vHR5GhQNdlKPgIW60LFc+Kcq T1/SUmlPN0UQ7ZeAHm4IYj2hs7vB+WyBPDn3hK+1ayZzoRTqkj1fCdG4wq/OV1bm6TPFTODJ39Jr fyncffP7hF2QixQQmTl09bsZwhThGMawdn7edA== ) dns1.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190628065524 20190621065524 32118 fpki-lab.gov. INCmDF54fBbKjlzWIWlgQPC1KVI+ULpvznyBazkLnVd0p6NOm5/FZZ7Tvht1mLCChEilagcZtWNZ fuCnv8Snfb/9IAKpf4TSkPvhiZwdG+ZeJ4xeTV1gCZ7wAsItE+VVZPCS5LLy3i2NL6OS7VwC2zbn GgIjZl3YyLcd9bsLVMExT1YaG77xcK/lZIectnYpTgldf9yjmZi0BObrBkW8F9Jqcolxar9k8pGA Z31zjaF1+CXQ4KKs8ZviUxARlnwyzGVnoY9+RQD2qbVIB4Yig4Q8Bykv6nT8/XFqjdENppSjcyQ7 iFtQZKV4WYa0YCGUQ6JZshEKVrCYtAOH9o7U1A== ) dns2.FPKI-LAB.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190701230000 20190624230000 54090 fpki-lab.gov. k3KYf54V5kOM4Mv9Q9EJLuw+UBtCDwqA3BliR/uj+tTp/70wAtuk6Wr8Qqroif1nVtG54JEIZa3p mQwdKRfrtlE8YIHU5LtCSkRmy4t7ElQ6QUjDLBnYAhKBRagq9oyfoxI+lZRzTDDbyz6dZAaRcH++ HSY9rcfZ6gy9nWLh/UhQEx4NEwcQ0RTD1bX2prW5w93+RUsRhep97AkN6LeZdEqQolU5Qw3jAkKR 4Q5/xMc3hNr7gioSQph3s0Nk9IXuTNIINEMyv+W4M8cI0+ix9KoPHKGmxwt/1eaE3ZHFM3nk/mkI BVw3r/QkuZa4Bld+UBJ05GIM8Do20b7cKMHBKw== ) dns2.FPKI-LAB.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190628065524 20190621065524 32118 fpki-lab.gov. KJ7R85r657ZL71NGb4x4ozQ42WsiF0DYIHXY2NDMHFYNtUWd3xuPIXcTlvpYhjv2xFersktFib3x SzwTw6WAmx7UCH38QI9hRpPBvxYReCUjRA0Utfypk+MPNpLSOIcPXNNgBMUQobeMmJt4yvqA52mI euVctUG/LaVhThPpVtoDfp+IGwtHpoNyUzZceNROVgXCwjBLqXGkz0eHVL1HgfiQa2v7n/z5onwk DWHpGd6ZPbm5pQVPDNE8AoQzekheSH80wdXsS5rP8O2k3cYSUAVFO5Mh/bttYvLH4DtfpEjKrosC O807eKDma/+v9dhy//AKXfsyYFG+Ehf2dphD2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Error querying dns1.FPKI-LAB.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI-LAB.GOV/A: 'IPv6 transport disabled'
	Received 1381 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1381 bytes) ;; HEADER SECTION ;; id = 5699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 500 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2019011701 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701231000 20190624231000 54090 fpki-lab.gov. GCGqfo3xdM/+3D/DpszRsByeRCQRcz4ze4xil4p9j+Z4E1H3DFHeSsbbNuUq6ZmwyiTYYasY4lVH g6uxmbOt4Pi8XYMJ/VHTD7KHDtGforzoy1oCIojARNFyjEVhGXgQ8f/VEw0Ie5vWxvj9LoWwQqaA MIVotCuGD9Bm65bDRnVuQ2HsI0cfX8LBts2NTnezMPmkGDy7S25MSP5YYvTHmPdC2rQJnX18gpBW bAnPA3ES2sjevlW3xKBLfrK9fwS14CD1wULcZrEKUb1VfaHa7XQiXFML1ZUyemYKV8Zrwn2T0k/3 1qtZwG6hrF11FxjQbKF8DPVieG+CzlvBhvw4lA== ) FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190628065414 20190621065414 32118 fpki-lab.gov. WgNTxuqt5gD0ZKAJFdP5LO+C7XGvnmdpamQr08eFkoCU9ARkyKXLLikfQ5jxcnMqbCxtFnv/u10W +tNi8/RRyNZENC6F2n6VdclYdRnlcaZN6xKW4U14kXJnmM2ZCZBTAE580NfTwdcGgZo8/U4VdfHe I6F4CvKG9+d70I5vOBQm04gc6gobwm/LAM1xU/ozXHFZHmF/Atg9ZI+NwFbTmvURz5h/C+A3Bhdy FXW/rrEo+kuuTBUYqGzg8YCwzY79GDYp+X/eWFOZdcHdV07N/gspqDrtoqiV9/rTNNu/AntHbjWP 6XyLA97CKeuuZXyCceV1Py4olPK1Ycjj8XezOA== ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 2702403a06073582 0d9u7sh5fe89d3vo8uigd8j9rgbegb8q NS SOA RRSIG DNSKEY NSEC3PARAM ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190702023358 20190625023358 54090 fpki-lab.gov. mJ2Jj4STRpAooW39Vy+NX4a6kitF3HVdtjk8ciNeqS1fZT21i2RZuNrNFZRTC+y50/NAcTLF+Mu2 NKXHCu+evMxUY30tfb7d7wzm953L/Xn8IAEsS+22w6gWilgDwMi8nff95ELnwLKt9AoQXxv1NZTY ttyG8t4Ck+znFb+Aw3dDxxEUUZl1fdawg0GMIVNEn0CbfllrchCc+loHn8rLpJkOhHGTK1a7Uwv7 YkRs9EmvNrOQRDi3a9WZqHHRvcTnWdL23ROlBB/ysQ1tBdXyWJ1kwN+A3BHGl/AA1URdwxfbouf8 OW0HBqOJknOPwUwlx0diYpWLQ127/YfLfWQodA== ) 0d9u7sh5fe89d3vo8uigd8j9rgbegb8p.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190628071506 20190621071506 32118 fpki-lab.gov. Zhg5PysXx/wWxKqkJx32rFGpWSu2hz+MtsvEEyC6hHIBMC5ODJOy8G3lDf1SDqyNWvWmLzDqcccm /v/+G4aXwzym64vlhQbnk1bOBH43bUCkazpJW/6Vv1MLytqcXLKbO8Q14yfET15SDNeya1PvHL/D 0G7WTRqlaKULFbtiaXdWhx7ja7oWA4tiJAOGghKO6zU9JW9XgSY2AZqAEkT07HyYVgW6oVa1mZm7 18iLwSzerF+7leGgASfYIguu+1DBXJElb724HU8sbj0Q5ZFcNsQ1jXKO1vfODo5xuV8tG+H0Az8E W75zCw+5WiimswevIdCIGkgzDTLeBdSvCfcjUw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190701231000 20190624231000 54090 fpki-lab.gov. GCGqfo3xdM/+3D/DpszRsByeRCQRcz4ze4xil4p9j+Z4E1H3DFHeSsbbNuUq6ZmwyiTYYasY4lVH g6uxmbOt4Pi8XYMJ/VHTD7KHDtGforzoy1oCIojARNFyjEVhGXgQ8f/VEw0Ie5vWxvj9LoWwQqaA MIVotCuGD9Bm65bDRnVuQ2HsI0cfX8LBts2NTnezMPmkGDy7S25MSP5YYvTHmPdC2rQJnX18gpBW bAnPA3ES2sjevlW3xKBLfrK9fwS14CD1wULcZrEKUb1VfaHa7XQiXFML1ZUyemYKV8Zrwn2T0k/3 1qtZwG6hrF11FxjQbKF8DPVieG+CzlvBhvw4lA== )`
	`FPKI-LAB.GOV. 500 IN RRSIG ( SOA 8 2 500 20190628065414 20190621065414 32118 fpki-lab.gov. WgNTxuqt5gD0ZKAJFdP5LO+C7XGvnmdpamQr08eFkoCU9ARkyKXLLikfQ5jxcnMqbCxtFnv/u10W +tNi8/RRyNZENC6F2n6VdclYdRnlcaZN6xKW4U14kXJnmM2ZCZBTAE580NfTwdcGgZo8/U4VdfHe I6F4CvKG9+d70I5vOBQm04gc6gobwm/LAM1xU/ozXHFZHmF/Atg9ZI+NwFbTmvURz5h/C+A3Bhdy FXW/rrEo+kuuTBUYqGzg8YCwzY79GDYp+X/eWFOZdcHdV07N/gspqDrtoqiV9/rTNNu/AntHbjWP 6XyLA97CKeuuZXyCceV1Py4olPK1Ycjj8XezOA== )`
	RRSIG=54090 and DNSKEY=54090 verifies the SOA RRset
	RRSIG=32118 and DNSKEY=32118 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: