DNSSEC Debugger - FPKI-LAB.GOV

Domain Name:

Time: 2025-12-19 04:53:22 UTC

Analyzing DNSSEC problems for FPKI-LAB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 22274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for FPKI-LAB.GOV/A
	Received 619 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 619 octets ;; HEADER SECTION ;; id = 60894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251231220000 20251218210000 61809 . pgPXpWiABQfBTgKDF8VXZjOjKvp3ILE+fICM3oLM9zfKuTItKHnmDo7MrVkp7jfHFbrcoo8qjuiw Kf6YOHJrOIlZHkAYJI6c43lLK4Y4Thnxn6ozPh+F24R3nL+XWtip4eBfk2f93GokQfVaZ4fxmfid UsQPwTP/eqcuehphjmzllXz6roNsxzLvJ50r/g/PbZS/AGRTenaZQ3C+NU/BAHH/1XxJIMOYuPLT hNysjqzs6E9jE/G1bmM1hZKe7hqFEh4MPwpcHjSTK5AuOEJCKjL5PbtiDjGR5yKNhjTRRAKDIrRx GOjbNiYhg9yA8CX5L7cFGXtvmhgoSMzJvX/GeQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 33271 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251231220000 20251218210000 61809 . pgPXpWiABQfBTgKDF8VXZjOjKvp3ILE+fICM3oLM9zfKuTItKHnmDo7MrVkp7jfHFbrcoo8qjuiw Kf6YOHJrOIlZHkAYJI6c43lLK4Y4Thnxn6ozPh+F24R3nL+XWtip4eBfk2f93GokQfVaZ4fxmfid UsQPwTP/eqcuehphjmzllXz6roNsxzLvJ50r/g/PbZS/AGRTenaZQ3C+NU/BAHH/1XxJIMOYuPLT hNysjqzs6E9jE/G1bmM1hZKe7hqFEh4MPwpcHjSTK5AuOEJCKjL5PbtiDjGR5yKNhjTRRAKDIrRx GOjbNiYhg9yA8CX5L7cFGXtvmhgoSMzJvX/GeQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 50133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251231220000 20251218210000 61809 . pgPXpWiABQfBTgKDF8VXZjOjKvp3ILE+fICM3oLM9zfKuTItKHnmDo7MrVkp7jfHFbrcoo8qjuiw Kf6YOHJrOIlZHkAYJI6c43lLK4Y4Thnxn6ozPh+F24R3nL+XWtip4eBfk2f93GokQfVaZ4fxmfid UsQPwTP/eqcuehphjmzllXz6roNsxzLvJ50r/g/PbZS/AGRTenaZQ3C+NU/BAHH/1XxJIMOYuPLT hNysjqzs6E9jE/G1bmM1hZKe7hqFEh4MPwpcHjSTK5AuOEJCKjL5PbtiDjGR5yKNhjTRRAKDIrRx GOjbNiYhg9yA8CX5L7cFGXtvmhgoSMzJvX/GeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20251231220000 20251218210000 61809 . pgPXpWiABQfBTgKDF8VXZjOjKvp3ILE+fICM3oLM9zfKuTItKHnmDo7MrVkp7jfHFbrcoo8qjuiw Kf6YOHJrOIlZHkAYJI6c43lLK4Y4Thnxn6ozPh+F24R3nL+XWtip4eBfk2f93GokQfVaZ4fxmfid UsQPwTP/eqcuehphjmzllXz6roNsxzLvJ50r/g/PbZS/AGRTenaZQ3C+NU/BAHH/1XxJIMOYuPLT hNysjqzs6E9jE/G1bmM1hZKe7hqFEh4MPwpcHjSTK5AuOEJCKjL5PbtiDjGR5yKNhjTRRAKDIrRx GOjbNiYhg9yA8CX5L7cFGXtvmhgoSMzJvX/GeQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 3467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.GOV for FPKI-LAB.GOV/A
	Received 362 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 362 octets ;; HEADER SECTION ;; id = 14403 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FPKI-LAB.GOV. 10800 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 10800 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) FPKI-LAB.GOV. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251220055322 20251218035322 35496 gov. RlMBFJdK2IhvyF2HDFPbnRwSSjAMoff9DoRm2Ov1c95sNUPpOHmYnZeNl0TJCNSmOJoCS7vX1J3K JxYDBr5liw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 3600 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 3600 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.GOV for FPKI-LAB.GOV/DNSKEY
	Received 362 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 362 octets ;; HEADER SECTION ;; id = 43146 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FPKI-LAB.GOV. 10800 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 10800 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) FPKI-LAB.GOV. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251220055322 20251218035322 35496 gov. kSukAYTeEn1wKFMC5p1GmWYbpE6oVT4syFex/nT71nEJFGPXSFkPv+3CF1BX2aywcy/DT6Gb/aa4 wvIByQo6sQ== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI-LAB.GOV. 3600 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI-LAB.GOV. 3600 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone FPKI-LAB.GOV

FPKI-LAB.GOV

	Checking DS between GOV and FPKI-LAB.GOV
	Query to c.ns.GOV for FPKI-LAB.GOV/DS
	Received 236 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 236 octets ;; HEADER SECTION ;; id = 23714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DS ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f ) FPKI-LAB.GOV. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 ) FPKI-LAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251220055322 20251218035322 35496 gov. sD2mdBtg1nFL1qJ/gq46FjUZsHv6ZoPPBzB4YuEIFV5HrI+Kpt3Ug+yAlOnDljZ/Rtl1Cc5tuUFC DHqZ/pZ1vQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for FPKI-LAB.GOV in the GOV zone
	DS=29035/SHA-256 has algorithm RSASHA256
	DS=4219/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI-LAB.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251220055322 20251218035322 35496 gov. sD2mdBtg1nFL1qJ/gq46FjUZsHv6ZoPPBzB4YuEIFV5HrI+Kpt3Ug+yAlOnDljZ/Rtl1Cc5tuUFC DHqZ/pZ1vQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=29035/SHA-256 is now in the chain-of-trust
	DS=4219/SHA-256 is now in the chain-of-trust
	`FPKI-LAB.GOV. 3600 IN DS ( 29035 8 2 c17e38195c37ee45e07ead53e590e579e20355dc52f3b27bde05962b8f0ef79f )`
	`FPKI-LAB.GOV. 3600 IN DS ( 4219 8 2 556d3711ba771f1eee741b4583bd0d2342d816f682a23fd40f3322f570d81726 )`
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/DNSKEY
	Received 2345 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 2345 octets ;; HEADER SECTION ;; id = 56809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035 FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAYqC4Kua1w3rLM+MEc+nx4/WobwbdetCgigZ49oB1HufE4dQwaH975ftW3N9VbfvovoTmUEz XWeCtFFPn3Hala4BZ1YkVPqfrBSjQYhdHB+UskahY90YJnL+aIbMwgGOXP0KutYLVRjb/zOSIIsl Xtr/gjlaygoDQloBUuIcVuUaoN7X+aVCckGkPVIbWteIsaYf5+E5ofmP5ttn0RhxEym+uFcI07sH O2dwZu/EB9p7Cav1zn7CmzfaggGKgXFIjYjPIgKNym4xeDzIWCLbyUBGIrTjfUpXY9vUvAvzyAuS CgY5dnZXttfteL/OJkbDSTcQOZlwNSHuoTekvye0u3k= ) ; keytag 40410 FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZkjnmZ/z15OEj9OQEPA89CK3lqvjLvKxLLU7SrVI1OchU/G67pJh6sgvuTq+LjmjYhkwG+0 dxBjWmcUPAG1VLFBUU0T2bWbKh3Xt17fY7u6uLkf/l6tnu7Ppt76ad4EPCD6bnjAQQSGWI5y5ntk yePLM4WpC01jV5UBzPuUkJ6lg/W37tPtOh1HuuCuuVswl/tkOPL0hwxBERs0OX7NhU2aAKLrkgEu uyKGxA4iJd4Db7sZUomw0eBzC/3qaujiC/woLl3WQ2itS2SDW/IuxF283y7iMXKxEQioGJCYexJT YwJwNTQqhialMOJpzH7s3u/CTT9BeXyOtKnOx3Ihy2c= ) ; keytag 38433 FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 29035 fpki-lab.gov. Oj/EJvrOICtmBAdwNMaSOkip0QqrGaYpVkf99Ow2MoCTNDBU0qqsOuBsTQI4YO6GOTamyWPMdhdj kH8gW3Og5HIXRfylP9Um7Bt+Q3OIPNaOxBI6ZuHAinrBdQD1NjXDRaNwzGNQ0OLBj/ZqUFuyrbux kHmr6I09WVhgrQ1q4NJsjZ6n24Vkejj/Ghl8ZbyW62LjqzIAHrX8382nQmQRS32H1tlV1vw8LWva /mLUI2MTlpFu6SRYRxRAe6A7a8Gz6vTqXiH8t8li95AtGBUfO5QoJESygJo1ZgK57MAbzHLYqJx2 Nx3I3zzGUzCRYtgKjWpbbesmq8b902gXQ+PtBg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 4219 fpki-lab.gov. kVKCO2RsaWJiXaH2bEQ+l4vXoNtntUrl8BH+Z6HbUXrJOTUWQl1T7k1R/TPwcoizfn4dddZC1icN H/kW5D7BNKEL+SZb0bfZ+wLhjyfcdJ83MOQuc7j5V2YNEkBU2WmTfQmNSBwqrdhhfQB8c/t8+UXB bPkMSWjIyK3CUOiRJmhSXIjMzSn83FKFNhKex6XQkUxNbWtyMDxSFC62KGxaQlDILyioSRyIqTdE QzxUI/dUhLUUCbbhHMgWtfYwdIcBE4IjX5K3Hlv3iyZGSPkuoruuXn1mkBSvA4TXCOCXDAv25DFG s3o4JpZrFESuL9qbFVQmfR0jTkrIqOO2Zw5r+A== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 40410 fpki-lab.gov. Z5H39We00q09AoaEDREsleXecvcncUh/CzVEXlnsldnDKicrRiwHgzCjYHC8Saqq3NQ4OJeztkGi xRcLPruEZecR66sAV5QrDYC851lh0JAPpx7WhtJIruFj26cFkgPerxAIDf8krBnvyFirVcbiUjh1 bgPg3Jsv2zaXW2MB/fr1+1soVIOUqbLpU2Hjk3JzY4wRvlW7z3SDGexbp6C9lMpVIklEZdqmKBav Dja+8qyvp7MjkhTMpr2UQ7fnCtILvZaOyZd6dApWUsQ4bGQxdgidqSLeDHIHk+VHYqZp42EXBLJF hbVBUomvi/P48uWFOJ1EuV2Z0tnaOpBJUjr40g== ) FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 38433 fpki-lab.gov. bgQVgvsTcZxhCkCIYoXQMIyiagcTvRgQ4XR2RUtFa9V+cZqESK489fnnExGvU3PkBh8lQ//4GjXR FuyKG5psT6IfmNd/lskzn7JIaW5e3x9YAwzoGxAK5xTs9/DnD89Tub1H8SI9mN10+wkf4XQ2mIH6 I8xRDVHyWkZd/EzGk5z+1yy5dX1L8YSogycVIouzzqtA+7j9VHjJyXkOuMZNg6m/R4ewJ52WKZ1l ZUSiED08uWbQueLHPE2SUfnLnWJQJNG9MbxpghgATFSpor1uQKAKLPLJtlzi/rDXfqZHSEUdss2g hyJS9WG7UAkHQSAKkd+ryuL37jAJxWYDpc/1tQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for FPKI-LAB.GOV
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAc3kg6cPi9uUB0/2IGZvH79LhYgvfniZPVvKImYxZxYL4BWcs4E+Hv2GqU8M0rYhYfFhn1d3 eZbfXBybsWOBUHyVJXwhJZlHBJ8Ud9ANCJ65CFebGeecSsxfT0nvv26apY5zMQxU2nyUWbQ7vSnK 4qSpZRfRxGbem/4VrGTuJ58nog7XuyYLSGXeEqPtG2fo26UjGpUNLbqMurCy3wdmHl21VbM7VhYl p9NQwO++bEDpS1hsUOoNkbww4gNWqN8zQjgaKyUZc1DFb0b2mfkIO/4Qbi4u+Uh9v74sm++erLmI wc7HywqRQfvdd0sI2HyZ1xZJVlauyg/XkkUe7zH2Shc= ) ; keytag 29035`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbCNjou0CVWFCq104UMjYxv5hSlLSAEo7q6vSlXx5cTJnvrlrtX4R6e5pfqmkBP3Jr0847ZY pWcf/OR0lepRRVoz6ELAXpm/pOr11S8B14UhvewmtcIPSsCOZn19ggkHSkfyRJ5Z3l/8i+1galx+ o3NbKDNK+t3ISTa7PTFxvaWk7IgQvYE9fy0UKmIFFWEe4OM/7MCtVJkQfsp8foSRh8dIiIMvhG8S Ley8tLQs3zQoJJGxSH6nHgTkuLbcc1Nrwu4oEtW9txo7xXgpGgk6CLRIGI9IgmmXFor7j2uxupHX XSVOu4Qud27imlPD1KdwNUVsVNNhRXliyh8wujk8+V0= ) ; keytag 4219`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAYqC4Kua1w3rLM+MEc+nx4/WobwbdetCgigZ49oB1HufE4dQwaH975ftW3N9VbfvovoTmUEz XWeCtFFPn3Hala4BZ1YkVPqfrBSjQYhdHB+UskahY90YJnL+aIbMwgGOXP0KutYLVRjb/zOSIIsl Xtr/gjlaygoDQloBUuIcVuUaoN7X+aVCckGkPVIbWteIsaYf5+E5ofmP5ttn0RhxEym+uFcI07sH O2dwZu/EB9p7Cav1zn7CmzfaggGKgXFIjYjPIgKNym4xeDzIWCLbyUBGIrTjfUpXY9vUvAvzyAuS CgY5dnZXttfteL/OJkbDSTcQOZlwNSHuoTekvye0u3k= ) ; keytag 40410`
	`FPKI-LAB.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZkjnmZ/z15OEj9OQEPA89CK3lqvjLvKxLLU7SrVI1OchU/G67pJh6sgvuTq+LjmjYhkwG+0 dxBjWmcUPAG1VLFBUU0T2bWbKh3Xt17fY7u6uLkf/l6tnu7Ppt76ad4EPCD6bnjAQQSGWI5y5ntk yePLM4WpC01jV5UBzPuUkJ6lg/W37tPtOh1HuuCuuVswl/tkOPL0hwxBERs0OX7NhU2aAKLrkgEu uyKGxA4iJd4Db7sZUomw0eBzC/3qaujiC/woLl3WQ2itS2SDW/IuxF283y7iMXKxEQioGJCYexJT YwJwNTQqhialMOJpzH7s3u/CTT9BeXyOtKnOx3Ihy2c= ) ; keytag 38433`
	DNSKEY=29035/SEP is now in the chain-of-trust
	DS=29035/SHA-256 verifies DNSKEY=29035/SEP
	DNSKEY=4219/SEP is now in the chain-of-trust
	DS=4219/SHA-256 verifies DNSKEY=4219/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 29035 fpki-lab.gov. Oj/EJvrOICtmBAdwNMaSOkip0QqrGaYpVkf99Ow2MoCTNDBU0qqsOuBsTQI4YO6GOTamyWPMdhdj kH8gW3Og5HIXRfylP9Um7Bt+Q3OIPNaOxBI6ZuHAinrBdQD1NjXDRaNwzGNQ0OLBj/ZqUFuyrbux kHmr6I09WVhgrQ1q4NJsjZ6n24Vkejj/Ghl8ZbyW62LjqzIAHrX8382nQmQRS32H1tlV1vw8LWva /mLUI2MTlpFu6SRYRxRAe6A7a8Gz6vTqXiH8t8li95AtGBUfO5QoJESygJo1ZgK57MAbzHLYqJx2 Nx3I3zzGUzCRYtgKjWpbbesmq8b902gXQ+PtBg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 4219 fpki-lab.gov. kVKCO2RsaWJiXaH2bEQ+l4vXoNtntUrl8BH+Z6HbUXrJOTUWQl1T7k1R/TPwcoizfn4dddZC1icN H/kW5D7BNKEL+SZb0bfZ+wLhjyfcdJ83MOQuc7j5V2YNEkBU2WmTfQmNSBwqrdhhfQB8c/t8+UXB bPkMSWjIyK3CUOiRJmhSXIjMzSn83FKFNhKex6XQkUxNbWtyMDxSFC62KGxaQlDILyioSRyIqTdE QzxUI/dUhLUUCbbhHMgWtfYwdIcBE4IjX5K3Hlv3iyZGSPkuoruuXn1mkBSvA4TXCOCXDAv25DFG s3o4JpZrFESuL9qbFVQmfR0jTkrIqOO2Zw5r+A== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 40410 fpki-lab.gov. Z5H39We00q09AoaEDREsleXecvcncUh/CzVEXlnsldnDKicrRiwHgzCjYHC8Saqq3NQ4OJeztkGi xRcLPruEZecR66sAV5QrDYC851lh0JAPpx7WhtJIruFj26cFkgPerxAIDf8krBnvyFirVcbiUjh1 bgPg3Jsv2zaXW2MB/fr1+1soVIOUqbLpU2Hjk3JzY4wRvlW7z3SDGexbp6C9lMpVIklEZdqmKBav Dja+8qyvp7MjkhTMpr2UQ7fnCtILvZaOyZd6dApWUsQ4bGQxdgidqSLeDHIHk+VHYqZp42EXBLJF hbVBUomvi/P48uWFOJ1EuV2Z0tnaOpBJUjr40g== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251222191656 20251215181656 38433 fpki-lab.gov. bgQVgvsTcZxhCkCIYoXQMIyiagcTvRgQ4XR2RUtFa9V+cZqESK489fnnExGvU3PkBh8lQ//4GjXR FuyKG5psT6IfmNd/lskzn7JIaW5e3x9YAwzoGxAK5xTs9/DnD89Tub1H8SI9mN10+wkf4XQ2mIH6 I8xRDVHyWkZd/EzGk5z+1yy5dX1L8YSogycVIouzzqtA+7j9VHjJyXkOuMZNg6m/R4ewJ52WKZ1l ZUSiED08uWbQueLHPE2SUfnLnWJQJNG9MbxpghgATFSpor1uQKAKLPLJtlzi/rDXfqZHSEUdss2g hyJS9WG7UAkHQSAKkd+ryuL37jAJxWYDpc/1tQ== )`
	RRSIG=29035 and DNSKEY=29035/SEP verifies the DNSKEY RRset
	RRSIG=4219 and DNSKEY=4219/SEP verifies the DNSKEY RRset
	RRSIG=40410 and DNSKEY=40410 verifies the DNSKEY RRset
	RRSIG=38433 and DNSKEY=38433 verifies the DNSKEY RRset
	DNSKEY=40410 is now in the chain-of-trust
	DNSKEY=38433 is now in the chain-of-trust
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 1381 octets ;; HEADER SECTION ;; id = 23160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 86400 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251221191851 20251214181851 40410 fpki-lab.gov. AT1cID/lbc+eB/EaBn8Ykr17j56RVZEgi0f8hIL2lQpR59Iis2ciyGqV+HDBEcyCbPB1oYwky+AW CtRaz1Udakg49MDmUqQ95sk/8lQNzkPIWL+uudRvXxLMYkA+T3lhD1wkhp/yMvjmTbFxZELfOwh/ 2upbA1EfCPI4AZCtJZUxhRWSRtSUwq9DiheXaYnd+7UPAZqBAav0BOv8PEXhRpHg0GK3/e5mFR21 hGeYvs9AM+RJ+OQUkX+T1X3ZpJcs5CMpwelXz91Ief8BaqI5Ia8eABhDcqL2dhOqPvwY9JVpV0Lj wyuS+AzWQOCSyrSzqosPw1kAiTzE1mQNFUv/Zg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251222191659 20251215181659 38433 fpki-lab.gov. B6QkIggfnMh0Rdg4OmvwAl7VT7zumo1A+1OO32HU9PdRITAPzi+ppTy9isQW59nxXPlPQZcJKK2W p+fium6WbSqaUvAvNRkbeJzKwyxlLUKNIMPbgZbLdVTMEYAx6SyPWiioLnnIq/bya9ucpNSNwPak TmBP7OYVAoIRlnHx4tIYh67gCcSfcZYWMlXVww9HYDPF/rsFkETxUOQwea0MjEdiLs49QYgI1HGy BvF58J0tko5xjYsG2eK4H+DPkj3qsWMZC7mnoMnEWU+RToSr7nzaPhVLuJSo+m2vc3ThWXdAHJFM VXX6UYYN4tAtBX0aEkG3s9vJmwRzQyBAa6k3fQ== ) se8bacoamotoj5n3earh1siljaqcaag3.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 f3a6e50ff1a06ca7 se8bacoamotoj5n3earh1siljaqcaag4 NS SOA RRSIG DNSKEY NSEC3PARAM ) se8bacoamotoj5n3earh1siljaqcaag3.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20251226045322 20251219035322 40410 fpki-lab.gov. HtmP8aZF2fzjWKhV2dm4gcZ7QF7v8UXIUs8OP3UIDT2XYbPLQxflS3+vn1uCqpHd6gYc/LqcMQJm IqX3iRXROkINa0O/VWYKUNOSzD1K6W6hOFfnIycYg7l3jCUfIcM5oDmDyCAt7vzUL87kSXCNuX2f 8J2zbsp6I6fzFQx90yQ+2uV8YZahBmS54zT6dtQ0Y4LIs5K9kzjppwzdKtuy4kGGpHUqYghVoZXg tXIznuAy55pepiw6Xqmx89bHGtXFU6bd1XEYeIkQK2X2z9ip0rN1Jaih1eDL2HG3tYafIISSwFm9 S+S7Z6euvzYVVMYiH9Z0Hgy7EVguns2n88NJZA== ) se8bacoamotoj5n3earh1siljaqcaag3.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20251226045322 20251219035322 38433 fpki-lab.gov. JFdyEGn0NN1QlntLLIhfIAXAGT5nuHQzBUwvu1+Kc39+IjM0edWhiJMb8OnxYSskY4EH8w2wiYx7 IdCWSsj7srxS5qpZWOHeniHq1TYtJTBF81NWBNF6i8mRdxAZVRUEJGZHjl8p/bxUFXS8GSrbpY7B 2m/pEzrNawBSVYzFl/LER3j1zI5iVO0mkgHOXYv0UGII5utc3hlPgv4IrVQOO13prdy45w7Nx6r7 b8uyzqjZDGt3hWCzRwzjB253MiQh0ReYojAYUzag5dTJhbIPvZLdP6AuTRXddkDeHPWQSjWjHeA+ IW0gmVP8vHVhH1xjSehizKvPtqe0J7omM3D0MQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.FPKI-LAB.GOV is authoritative for FPKI-LAB.GOV
	Found RRSIG signed by fpki-lab.gov zone
	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/SOA
	Received 3814 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 3814 octets ;; HEADER SECTION ;; id = 28284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI-LAB.GOV. 86400 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251221191758 20251214181758 40410 fpki-lab.gov. I9ahzhVqbrUqbVioKUTMrGSUwqOjba1zwhOnfDBc7fgDF2bKuyH7qcDb7+njo2SeZ7icbXw1O05b cTTfGGQNS32jsAhRUflhCVNC3/o8EumC7jTU7HxGV2DL8vJDHM7WtV0CSurqMpx+Fbk7gY9zWZoV Vs9YMuV6eIjsIcEVk+rY50LQ5PWXsYDizt0bwsz0dCpluO1yqw4UtNXQYmQI4DpV0+B0YjhRqJO/ +gtuF8VJJNrjaUtvBxv8r3wYvxjkwr02L7AmkvfqBFf647xbjvRCZ+ibmjnxCbqxF5+vVfs/Aie2 1WMHmQ2DecqlgeniuqiSHTTumJhsz79inWTTkw== ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251222191706 20251215181706 38433 fpki-lab.gov. aZ2RpJF2CXRZ4OD1F4XQcYUr4fp/+tSSLblzHZO01+fAfO3wMQvE35bijXEj0BAe2qGazLKD6gB4 nNaKqty7umcf3Abx9KMNCgqPazwL9Izh3UsLTlqzSvcM+/epzC63T3ic0Zkr0v+kANWAK7Ko9k8/ pZKTEmh5eRwag2iCu8YqmwRZAYjhbQ7ojQxr4+QBnlLjRsfwBuBXSlwEJ+GTW1Z/flqlGX9+AMEv ebibVhJmZMr8VtqNSwyd+7uu2GAeNJA7XDk2Yyb3a0x0NO9vODHAlerTlcjjx86pKBbDv5oOcbOO AJlvXbxtkOgO8Wok0mtT7PqRNElfFUX05uWz+w== ) ;; AUTHORITY SECTION (4 records) FPKI-LAB.GOV. 500 IN NS dns1.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN NS dns2.FPKI-LAB.GOV. FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20251221191916 20251214181916 40410 fpki-lab.gov. TrLxDDb83+LXyeZ709pGKjW17YTqR86fNpCNRO7lU+gIFQoVqHmMj5y7OokM08wbDye2WOpXBerk ctQEOQmzlV1SVl/ztYrZUKwsLV5HjKWy1LRekE5cpzZc4EoR05fu6BowE9MS6pEIshv33iLD5JpK AVDsP5ORNBTAbMz8ve4e8xgkyzb/u0GE1A3j2sahzn9X6S8qQo/gEyebzt3kz2oXuKZDDQtnh5qJ aNNfLYzlMHUz2NHdLHhlmDL9mxim644+rrMhUWqC1PCRjwXQZKRKlKaJeEQFmcnEbvXPOPAijQQ9 gVRTsKitKeP3rr+ay2kJz/fsy4Gnx7UjJ9cl4w== ) FPKI-LAB.GOV. 500 IN RRSIG ( NS 8 2 500 20251222191659 20251215181659 38433 fpki-lab.gov. G6sQK2tWrblJRk5/Xwqib+4Mv7pfcyKxcfAQ+Jyq+uz0X4Fu8xjjsTms9sbapDDMGnPaV+MU6svO jdcRzH4phFGaVAje9gxEUVRHUMAdPe/jgyb909Sl/TesMnDJWi0CqZTU0Qd7sFWRe9cBDk1RjSDj YMa6YWao3CwvHAU1ifaylmB28W+ElmLqT+c0E+QeXKFM34mVio1wNDAgzVPHfmyVIqBEsgaoD/+r 6UsDW532i3JFScUxVJx1csdXXJ6Vs4kAziX+oZEQfeKAvdOBao1zeOwlfVKNL68izCPFHLnWDm+B JG64ERHyfH13aqtmBUlzP2LGpFVzEKUi6Dzo4A== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI-LAB.GOV. 86400 IN A 199.167.92.100 dns1.FPKI-LAB.GOV. 86400 IN RRSIG ( A 8 3 86400 20251221191916 20251214181916 40410 fpki-lab.gov. admSYEroNJOL1+X+48XuFBYOacVJSbTk4Dd3kRxsQAsG45Ka0wH1JCpknCsYzGtx27duP4FRweND v8GRpe/9rFeBITj/ovFAAZmEpCwG16Hf/5hoc4Iskvyaj74Yu6yj+dbo1qZ+Sxidn7d/d/ZLoUwg Evz94NOHbX0DnUj+D+mECJFiSglPhtTz+mdWTDUCw1AB9pm9ninBw5KHM3yGsEQF06alPth9iQPn XUWFx+pHVewQl8gsUKsXTgs0tYMBnQxz0jr/krOax1p/r1VdOGkzTE+d+HyAfFxeDDGBycQE+9xt 8vLXptT3gQlUF13JHX+HURIdI1KB0NFtHMhpWg== ) dns1.FPKI-LAB.GOV. 86400 IN RRSIG ( A 8 3 86400 20251222191659 20251215181659 38433 fpki-lab.gov. RAeUbwh7kuIn/IQOMDfpVfl9U4hHRvEcFs78qhKzQcyA0ebQy+Np41KFvkPZGMMX0uaKcpfBqceb Y09W+tX28VO9Y4uskcWM7cTMmkwiS5ruT1hbYtGXe89XYPpxauxx9LqsOe8DYgxg9dyxvzz/1F5D BRaoPCYgAQr6oqqy11HJpOmwnrFwxvYY+PUmhDte1DbwWe/mYC749LHjGT9V2I6TRfGB5QTZPRmI JLi8RjKTNrxrcJdVHfHOdpGx+qjxouETytXdqo4+9lbjh5xDFXGLcIX4rStwM8zFlIfsgWcfQyMC Yt8FEyexbC91rEIDgIcNP7Lkt9u2zuhedrD0JQ== ) dns2.FPKI-LAB.GOV. 86400 IN A 199.167.93.100 dns2.FPKI-LAB.GOV. 86400 IN RRSIG ( A 8 3 86400 20251221191916 20251214181916 40410 fpki-lab.gov. WhLUxJ1xxyrIfjG4SvJ9BYpuG8bAaXJeWwwjLX3O/E1RMfdvKmZ0MOmjCkQDKWBkpPH9Vf3hv+w0 TJ/ncqAZ47VK6sWCiMmOMkVFpCtfGW3BGQH6w1ajECz52KfA1FX+vI5dYeGlPQmyvQa4dftVvJOv P1HHL+iVB3MEnrCkyZyVUBVy1hXMm5SFU+USeRxsSdDyDDQBEHQXcsRtsGI9BxreChbGcVLCOPhc ftG5Sq+eJNnXuZMdOa65cNESPC2YIti2BV0oSu+0mHKPensJSaAHCbIPZjxMpOqshqgUzqyPtj0y pV705deUjZxjMBh4Tj224sKNF3VlnMDlDeH1xA== ) dns2.FPKI-LAB.GOV. 86400 IN RRSIG ( A 8 3 86400 20251222191659 20251215181659 38433 fpki-lab.gov. R4KXGv40XqfRFXf6Mj79c/8hvp72lpvef5hmgECL64iewy8k4KPvXL8TDxz/s4xlWVwe63OXjwj5 CaAaTATcYLXXurwNXyJY0OMf0wVoUR3A7JtW6xE1RoE1RtOUavT/x6eDP20xbMvrwSby2cuE5sLV Nrn4i83FboR7nm4H3SonofWT2BFmQr/IqS55LtmK8d08cVxQ4NOUR9vxvIFMiWNSPobolTsoduRX CYkzL+eE+FCpwDZLlXTfDTE8KX19So/zy2ilCyl2hrTR+sxp1LLnZ4dW+C8pbkYE76eP3pcvYilr AReBxTQtfx0JvvBJCPpgy9otLEryFdJ6jfv+OA== ) dns1.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI-LAB.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20251221191916 20251214181916 40410 fpki-lab.gov. LPLqhCDAjrx7ZYklp4D9HVFMxPTlJ2LRWjEJKLIaGuM+yAWSAPabVxjgJV/lvLZUFFIybBUC6v/g WaM9BlaGTO39liE9MAYDq2b4GohgNwQX9Q44OqSEmMLo85i7dzp2VLjxKGjLrdw/+Dm0t2JAvDFt 6ToWWB0ZkmHGbvWCWULJ9zfHUNZ95EgwC+/ZH23o1UTygvx9ErajY9T4UyiHMvIYoVblI7sKEsDn Bj8dU4/0IJE2PespyfhXJ6LAHn+KfF5gWTEmU7pEB6kC9zftuZfzYSI6htQEFAv95AlHLfchEtNU fQyi9j3cnjHJ/NxYnl/1JSfJMRTKattk3w/5GA== ) dns1.FPKI-LAB.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20251222191659 20251215181659 38433 fpki-lab.gov. LdmWAkwBSknhHxEfq0BuywbJUJpE6XgxatkawcIxFyuQ4OhRxbsiEnbjo72tVzDInGkg7MSsQNI6 rDAoK79y+kIkpv9k2H+/FoEuxYt5Prc4+hb5PKLjGzxzG3ig5PJiD869Oz+31Al4kENbYBOu9UMr UqVrrjsf4RG/icQTTxhhrSdXQqxjxux0CEITNJjQR1Vcm9Ee091j5bfpWM0mhjRDEbNzIxuOY6LS 1F89ySEYNOwRbx8vGbnS/n7gxY0ns52eXMn1620GvSblTLSUNBBJABQzMg2Ob9p3jHcrcJ58w2Ik onTnh6CabVtma6SVg7DhTMzetx+fjGogxApY6g== ) dns2.FPKI-LAB.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI-LAB.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20251221191916 20251214181916 40410 fpki-lab.gov. DYhHXZxw39nMlaXueojkbdgqeTlHeEp5F5y9YglKWv7+bt2UGkDetzHOzMd8rc2+nlliDBFiKCrA Y42AZ73lkI62d/Dt+QAn0T3RIPQ4xIHAyOqOmxoH8FIZo+Up49QJBrX4Hh8gGAxD2AojvDQa+GCN HM5RzCEWVYIWpTGB5xTIiUwpKdQHkcwjaBXpunvVvn2Ke8yONzpsVpW4kV6mg4KB9bQ11lwSYS3b ci03GtPLbxVAh6fvvokZXqXp1zySq25kxKa2qqa5GtKyIFYsItvfRf1sC7GJ7YBLOsyvtGvaJaVI cmtDrAQ8bFtErvI8IAr94YYIjJ/oFEQqF1MhDA== ) dns2.FPKI-LAB.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20251222191659 20251215181659 38433 fpki-lab.gov. kBsRTHnIsbtHS2hao7b3ajOBOQhyh65FRGWU0MDnph4lk/aeuFQMHMThE2SmhNjmMj9amwg/czAc 8VHU+wtYXVv86Zi7nk12LQZlpXa8GTVOl448YSJMxjJO/V5P9VMZH8zMpWn7jeykOOjEjxW6aE5s McBDdl1IgQ1B33KclzemUWRbVFyWOaLBUiq67gS9V3IOsZOOQR7Ln/2Za1Rd9CdklIy7kMO0xbB2 01B35MGmGhxaT9dutP0Ro9lsUr8JrGz8wHDtPC6/LGQKfCMY/7Ic7mk7ru4yepmML2Yo2vVnx6aX I17BdxIZZeHOS+MLtoB9KwLowJL5M7uySE6g/g== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Received 1381 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 1381 octets ;; HEADER SECTION ;; id = 13015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI-LAB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI-LAB.GOV. 86400 IN SOA ( dns1.FPKI-LAB.GOV. hostmaster.dns1.FPKI-LAB.GOV. 2025063001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251221191939 20251214181939 40410 fpki-lab.gov. Xi2pBstjzdc40JG7QI9PCa5tFj43y2lKFPOHII7YlazwAP6fAiWxYfpRIAfdRnmXAyFKYm70jvWg jo9qc9LojA/vljNIKXKtqda3TXyUAlAHjQMXw/Jn2XZZEDUJ53rBf4+kGswQDs8T1Xe0xjyzyCDf mAMAGcPtoMsKDTEHYd45z2UU3o9m2iX32tVi5rKvtfIrhmar1X9a/tdE4DsUAC3QBUGg9Ygp0+V8 JTQrfl4SoNEEJlTq+p9bT2sGu09DgurwUWLRqLmvvODUfq1mW7V1XB4XtrqadVIlyO6q1bWznDvi CRyzgR5hAwKjt4nQ7vRNw+3g1J2GTJ6sdKO3Fg== ) FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251222191659 20251215181659 38433 fpki-lab.gov. B6QkIggfnMh0Rdg4OmvwAl7VT7zumo1A+1OO32HU9PdRITAPzi+ppTy9isQW59nxXPlPQZcJKK2W p+fium6WbSqaUvAvNRkbeJzKwyxlLUKNIMPbgZbLdVTMEYAx6SyPWiioLnnIq/bya9ucpNSNwPak TmBP7OYVAoIRlnHx4tIYh67gCcSfcZYWMlXVww9HYDPF/rsFkETxUOQwea0MjEdiLs49QYgI1HGy BvF58J0tko5xjYsG2eK4H+DPkj3qsWMZC7mnoMnEWU+RToSr7nzaPhVLuJSo+m2vc3ThWXdAHJFM VXX6UYYN4tAtBX0aEkG3s9vJmwRzQyBAa6k3fQ== ) nub71sp374vsuik0ec14u5qfdfv10tnc.FPKI-LAB.GOV. 86400 IN NSEC3 ( 1 0 1 af96ea44fd58c33e nub71sp374vsuik0ec14u5qfdfv10tnd NS SOA RRSIG DNSKEY NSEC3PARAM ) nub71sp374vsuik0ec14u5qfdfv10tnc.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20251226045322 20251219035322 40410 fpki-lab.gov. acHTluO9OFXBQBZkPZikPB36iMITmYj/+if453YY0nRAeC8lHLWKJebv/klROxFH8RoeLMHOSm40 PRLuHHllUj90nt8/8U7O649zdvSckZ9DvB3BG2kTzwJQw0UEwL2/7yCrF/Z18zZjO9XurCfrQw4f feMj6kb2I0xAD2S/yqFYA3CQr9IxrikD/PHg7NDU4326Z4vc9Pig/JQ6hqcK0OXMRAveIaLObosn 4huJA6PJiNfZ7sniU5Kc5raZgztULJfY87v8q36PSfrBsk7xoBTRltIXGBXbCZXOf8Sr1HHDNq2J +5MxAp02QuVMOJei1GGyIZNF1J268q9biyfijg== ) nub71sp374vsuik0ec14u5qfdfv10tnc.FPKI-LAB.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20251226045322 20251219035322 38433 fpki-lab.gov. BJL/Q1aM1jEYUT3xbtzsu9x3qEfWSTfPdo0hXLAiRSJQt6EqdGgcBc1hvhGq+WtQs5A1eMbExN33 l6/b87WglCI7yCfHtonRjkzhHi3CV1vlk4jCqTQAKXOakk14ADrb8mtJPMaQiCoeDG/qYuB2xJgG mCT3ScyVc1ZUamfwkm0LhmspenhVMTsrv10DYy7z29Ibx5AqQu02HClFy27kIqGN3wCnzDUwiBrJ t3j5U5W/y/KcqsERJJ2Wua1VLcn3hbWDCIC9y2+P6L0oBPmped3jh0zPlfbf1N6KKuL99QKoVSHj wuTdMyLrGYMo+YLDwugspEQcoVqwH0Q8EXDcTg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251221191851 20251214181851 40410 fpki-lab.gov. AT1cID/lbc+eB/EaBn8Ykr17j56RVZEgi0f8hIL2lQpR59Iis2ciyGqV+HDBEcyCbPB1oYwky+AW CtRaz1Udakg49MDmUqQ95sk/8lQNzkPIWL+uudRvXxLMYkA+T3lhD1wkhp/yMvjmTbFxZELfOwh/ 2upbA1EfCPI4AZCtJZUxhRWSRtSUwq9DiheXaYnd+7UPAZqBAav0BOv8PEXhRpHg0GK3/e5mFR21 hGeYvs9AM+RJ+OQUkX+T1X3ZpJcs5CMpwelXz91Ief8BaqI5Ia8eABhDcqL2dhOqPvwY9JVpV0Lj wyuS+AzWQOCSyrSzqosPw1kAiTzE1mQNFUv/Zg== )`
	`FPKI-LAB.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20251222191659 20251215181659 38433 fpki-lab.gov. B6QkIggfnMh0Rdg4OmvwAl7VT7zumo1A+1OO32HU9PdRITAPzi+ppTy9isQW59nxXPlPQZcJKK2W p+fium6WbSqaUvAvNRkbeJzKwyxlLUKNIMPbgZbLdVTMEYAx6SyPWiioLnnIq/bya9ucpNSNwPak TmBP7OYVAoIRlnHx4tIYh67gCcSfcZYWMlXVww9HYDPF/rsFkETxUOQwea0MjEdiLs49QYgI1HGy BvF58J0tko5xjYsG2eK4H+DPkj3qsWMZC7mnoMnEWU+RToSr7nzaPhVLuJSo+m2vc3ThWXdAHJFM VXX6UYYN4tAtBX0aEkG3s9vJmwRzQyBAa6k3fQ== )`
	RRSIG=40410 and DNSKEY=40410 verifies the SOA RRset
	RRSIG=38433 and DNSKEY=38433 verifies the SOA RRset

FPKI-LAB.GOV

	Query to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A
	Timeout querying dns1.FPKI-LAB.GOV/199.167.92.100 for FPKI-LAB.GOV/A
	All Queries to dns1.FPKI-LAB.GOV for FPKI-LAB.GOV/A timed out or failed
	No response from FPKI-LAB.GOV nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI-LAB.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: