DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2020-04-09 07:32:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 33182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to d.root-servers.net for FPKI.GOV/A
	Received 663 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (663 bytes) ;; HEADER SECTION ;; id = 50451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 15095 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 23894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . VfRp7ELpShyr5ClA3xw5IHHRUJ8LjaaME/QUFJj9pmMQ4zDnsip2Ol7cjA7q2NuU6MRgEaV/zcIU aPUkr7A8D9bNHoAFdiDpUs3JPdUJ9LCoTjSGRpjPC6LJBVg7J2s0WGqsKnYnDiyEYoYmiVUyYp1n gXRvHGXmggEYVm4iBOQAlbOGEbfHRkGOuDtF+NontHMPO3fZIsFwqrCxuaPT9m7faHs/ON1mNNxP dp3AgzhabJ1YkkXOsWAAsLKsXmZ3UKjO6/PJNY0nzTRr/qI4gb6Nd+XHmj9QfqeGbT5nXmJmu3Kc jjkrsjbdYTFe5C2LQxXHQ2PgDzfpm5ekm+8gbQ== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 2886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200414190254 20200330185754 7698 gov. eaZw0hRg+S8eg4O/3jBHDIuZnsV8O9W68yMQFeF21bkiKZh7X7O+/H8Vdsu2fbCa1ejR6xe70wZl FYsPIHXannKenlzwuCe1WtuSiLFn1NDKscZexHmBOtCisLK+6vknxj8Q4/R6fwClA432ZoTNOd2U mSwSo3tb53vELrDgbAh9iWJVQjbGMZVxjKpQzTGc+VEJiNcerDvhFdqMG4Q2P1KTYEhnyDt1ptn2 Rx+LJs40cYuZYIXUO9PAwNWkmNSNsyIt3yrG2o7KNFoLhmnhHuubGJAVE8YqekUjcpICspZE2/xl gPPM0ZGSAOx7w7AUA6FkUMWgYgCo4oc8ZzbA6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200414190254 20200330185754 7698 gov. eaZw0hRg+S8eg4O/3jBHDIuZnsV8O9W68yMQFeF21bkiKZh7X7O+/H8Vdsu2fbCa1ejR6xe70wZl FYsPIHXannKenlzwuCe1WtuSiLFn1NDKscZexHmBOtCisLK+6vknxj8Q4/R6fwClA432ZoTNOd2U mSwSo3tb53vELrDgbAh9iWJVQjbGMZVxjKpQzTGc+VEJiNcerDvhFdqMG4Q2P1KTYEhnyDt1ptn2 Rx+LJs40cYuZYIXUO9PAwNWkmNSNsyIt3yrG2o7KNFoLhmnhHuubGJAVE8YqekUjcpICspZE2/xl gPPM0ZGSAOx7w7AUA6FkUMWgYgCo4oc8ZzbA6g== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for FPKI.GOV/A
	Received 526 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (526 bytes) ;; HEADER SECTION ;; id = 18842 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. nisAPnq6hVG9BxQECtNSRlLAElPllW3lVh5Zt5b5pQbor5KNoaDqDMQGMsRXl1//XUXlKV9pKDyq zGzKGTiUOZao/w0ubBEfEJVEbTUDgk2HzK0o7Q9126Hpzvyq3OT8fxbt3v4bVJtfqpSuakXeIKCK wnjgQN/eO8Ch55cGOkcuEZfPBSFlRY9CiT82TKmy3dVTFpX4YcxGeL+WH+KiEw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for FPKI.GOV/DNSKEY
	Received 526 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (526 bytes) ;; HEADER SECTION ;; id = 62655 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. nisAPnq6hVG9BxQECtNSRlLAElPllW3lVh5Zt5b5pQbor5KNoaDqDMQGMsRXl1//XUXlKV9pKDyq zGzKGTiUOZao/w0ubBEfEJVEbTUDgk2HzK0o7Q9126Hpzvyq3OT8fxbt3v4bVJtfqpSuakXeIKCK wnjgQN/eO8Ch55cGOkcuEZfPBSFlRY9CiT82TKmy3dVTFpX4YcxGeL+WH+KiEw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to a.gov-servers.net for FPKI.GOV/DS
	Received 400 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (400 bytes) ;; HEADER SECTION ;; id = 27144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. nisAPnq6hVG9BxQECtNSRlLAElPllW3lVh5Zt5b5pQbor5KNoaDqDMQGMsRXl1//XUXlKV9pKDyq zGzKGTiUOZao/w0ubBEfEJVEbTUDgk2HzK0o7Q9126Hpzvyq3OT8fxbt3v4bVJtfqpSuakXeIKCK wnjgQN/eO8Ch55cGOkcuEZfPBSFlRY9CiT82TKmy3dVTFpX4YcxGeL+WH+KiEw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=16539/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=16539/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200416041007 20200409041007 36558 gov. nisAPnq6hVG9BxQECtNSRlLAElPllW3lVh5Zt5b5pQbor5KNoaDqDMQGMsRXl1//XUXlKV9pKDyq zGzKGTiUOZao/w0ubBEfEJVEbTUDgk2HzK0o7Q9126Hpzvyq3OT8fxbt3v4bVJtfqpSuakXeIKCK wnjgQN/eO8Ch55cGOkcuEZfPBSFlRY9CiT82TKmy3dVTFpX4YcxGeL+WH+KiEw== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=16539/SHA-1 is now in the chain-of-trust
	DS=18798/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f`
	`FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4`
	`FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 )`
	`FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba )`
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 1145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbyg71bCz51Z1e3knZrUbfa8GWcUUAQApuf2R8BVzctdTpdSjQQ7PNeUbS0GW2laca+Yw3GR Lbh7ZYVo3ubWpZhAbeTkuynUWiEiFisv2vtqoXm2cDtgQnZqASY/Dm9PAk89tcuMgfkQOOldYOtj dbJXDbZRSKWr/a8DIHCO7azmIaWmJWrznMEieX1b2RgTktCXBp3dB3Raduhdh/cuzK0bgbajfdhB rFJc/hz3dm8nTyX/C6nBFFmvVtPTChf96ozj2LECbPLoyhnkw/Xxpkjmzk36bOpqGm3SM2Aof6yo AsvQ5EeN4NYOh4VmV9TKil9TYQie/NEBY94Ei2aiP2k= ) ; Key ID = 36065 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZuk8M++6rcoPc6HbzCVd0HopTloMUx2jZYnJb7Bja1T9rjKDU5GCXbCcGY3jcseLhGleM2n hPXm0DUi8dzlyaJgP0LkGojSNhso/Rim/VRfblCEKqEtW/uBQtKT8TBlAXHVjSO9e1A53jvFtq5t y+uN2omMxmDUm7RHUGrQ4lvpPFlh4/4CtWVaaG9skxsa8r7I2gmC6HAbk7TzkOVDYDdrrCFXVHZm /eI+IKY64CqHoyA8sxRQRynmbcrIy3NdDEBL6shUw+sLRPDeglH3QrDhDOjXT8nzXVgsFdEtPlCG 9DxDCzPYLc/rVKyN/6fy2ix0w24LUd7qO6zIGrbXkbc= ) ; Key ID = 45965 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 36065 fpki.gov. mGVHv4sjLzl48+DVqK8MoXxuihAVoS0+WsMzsRxIg43hxUxZbyvSIDHxwMYDCm+/p9uO7w23+Sa9 WtgK+buS4mcElPWiyRIUMDBY3YDFd/mGt/cDPyEcJCIro8q/oeD2h9mSPuFbu1WmpOML/Sc8FLnl RCxFBxKveicuXwyel9KdOLqhIi2GZd5Q65SQyr1/WHODaKaaS4ra+ivUPFslSZRKMiSxzRa42odl kvcJe4Kkh/pKSFzNqonsG4CiwVRehynz+rYX6xGpp0cBWb/l/yqt15bKKqmyyVqxO0SAliqk8TwX 35KXHZMSETA4S/79TjuWLgRZmQzdWk5bzx/Jqw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 45965 fpki.gov. buiVLr2Ffx6tYskaZt8tUVFeVWibHq6DPw0mPEGguZ9vBsVtWWPday4OBRsIFygwltgGNweR9zKu spyS5IF7nF4SoPODnEd8+EC1XB7tzlLBXGKEP5P9SIZQBqMkZhtJZh0ORIK/zun/54BSENfDghw5 R5ojKnifpTixVyMLF2Ad0qegiV570OM1BbLneMR7Ghk9WIvDoC35sKA+PdfleD9Cf3CspyF8kzGi V2iZGPPQYtisP1pvjw8gJuse6P8LH4sk6+DJeSxMzMDprNnO9o4Fsm6sVTRQmRTjTaeDa6x84EpJ 95hG3R56alfe2+Yxe8JHv3/Z+7FIwbYdCVG8GQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 18798 fpki.gov. QepQWPOgsGbE7PZg4qGG882lAhCwf9TjOJ+2q39mK21Wd2jQDXTOA98wGlRYzYX+J8MRhH3OOL9R Qr37yL2R9EKS8ScM5orumjGVHgznVz1/xLaFY7UOoxAlanD0xf9ctP+Sg9Y+QabqzVrPkJCseH3L Yy9wY5IRepkxKGM6K72QimrnkTw7DhtMxg7TG6RZSKNhHt8ogo38ayTCYIwy1tc9cJfp5UsH3nAm nPWwfOfV/ArUxdUBVxqKNmrAu7borQ2K7S+KPk93iW2uG07tBFiNsvAbQq1MkHAaC5nGrSC4y1bc b/mTi6rPLGvsBVMozsvQGEygSzYVnamI6peM4g== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 16539 fpki.gov. Ex9ziiwBdtbsjO56FbM0LRAcx/53ifo9WSQKDbhIe/AGEXZV2sk9hf8Mki+waU88a9h/xOtukrLn GE6PDYTZDNhrZXVLXXhkT9MlyUICMnx/4XIlHVrMSCJPUZeoxLEIf7RG5TJbIDKzvWM4iYPlyGjg bZradiDrBie0902SHqqG5m1M+bk1uVgAKAnvvM2H7k6mqIdqDY4UA6lgMX39zFP1A1ifado3uwRX aWNSEOfyj9Nw/6bqgFeMl5OvJ/9svolteH2Ba7jkDG2BgEZPITPABukPFsQWeG7GAz+VhmWevuVS rQb+NJEXwKWg+Xz9ijlj0PfezQcmnSunLy4YKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbyg71bCz51Z1e3knZrUbfa8GWcUUAQApuf2R8BVzctdTpdSjQQ7PNeUbS0GW2laca+Yw3GR Lbh7ZYVo3ubWpZhAbeTkuynUWiEiFisv2vtqoXm2cDtgQnZqASY/Dm9PAk89tcuMgfkQOOldYOtj dbJXDbZRSKWr/a8DIHCO7azmIaWmJWrznMEieX1b2RgTktCXBp3dB3Raduhdh/cuzK0bgbajfdhB rFJc/hz3dm8nTyX/C6nBFFmvVtPTChf96ozj2LECbPLoyhnkw/Xxpkjmzk36bOpqGm3SM2Aof6yo AsvQ5EeN4NYOh4VmV9TKil9TYQie/NEBY94Ei2aiP2k= ) ; Key ID = 36065`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZuk8M++6rcoPc6HbzCVd0HopTloMUx2jZYnJb7Bja1T9rjKDU5GCXbCcGY3jcseLhGleM2n hPXm0DUi8dzlyaJgP0LkGojSNhso/Rim/VRfblCEKqEtW/uBQtKT8TBlAXHVjSO9e1A53jvFtq5t y+uN2omMxmDUm7RHUGrQ4lvpPFlh4/4CtWVaaG9skxsa8r7I2gmC6HAbk7TzkOVDYDdrrCFXVHZm /eI+IKY64CqHoyA8sxRQRynmbcrIy3NdDEBL6shUw+sLRPDeglH3QrDhDOjXT8nzXVgsFdEtPlCG 9DxDCzPYLc/rVKyN/6fy2ix0w24LUd7qO6zIGrbXkbc= ) ; Key ID = 45965`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539`
	DNSKEY=18798/SEP is now in the chain-of-trust
	DS=18798/SHA-1 verifies DNSKEY=18798/SEP
	DS=18798/SHA-256 verifies DNSKEY=18798/SEP
	DNSKEY=16539/SEP is now in the chain-of-trust
	DS=16539/SHA-1 verifies DNSKEY=16539/SEP
	DS=16539/SHA-256 verifies DNSKEY=16539/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 36065 fpki.gov. mGVHv4sjLzl48+DVqK8MoXxuihAVoS0+WsMzsRxIg43hxUxZbyvSIDHxwMYDCm+/p9uO7w23+Sa9 WtgK+buS4mcElPWiyRIUMDBY3YDFd/mGt/cDPyEcJCIro8q/oeD2h9mSPuFbu1WmpOML/Sc8FLnl RCxFBxKveicuXwyel9KdOLqhIi2GZd5Q65SQyr1/WHODaKaaS4ra+ivUPFslSZRKMiSxzRa42odl kvcJe4Kkh/pKSFzNqonsG4CiwVRehynz+rYX6xGpp0cBWb/l/yqt15bKKqmyyVqxO0SAliqk8TwX 35KXHZMSETA4S/79TjuWLgRZmQzdWk5bzx/Jqw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 45965 fpki.gov. buiVLr2Ffx6tYskaZt8tUVFeVWibHq6DPw0mPEGguZ9vBsVtWWPday4OBRsIFygwltgGNweR9zKu spyS5IF7nF4SoPODnEd8+EC1XB7tzlLBXGKEP5P9SIZQBqMkZhtJZh0ORIK/zun/54BSENfDghw5 R5ojKnifpTixVyMLF2Ad0qegiV570OM1BbLneMR7Ghk9WIvDoC35sKA+PdfleD9Cf3CspyF8kzGi V2iZGPPQYtisP1pvjw8gJuse6P8LH4sk6+DJeSxMzMDprNnO9o4Fsm6sVTRQmRTjTaeDa6x84EpJ 95hG3R56alfe2+Yxe8JHv3/Z+7FIwbYdCVG8GQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 18798 fpki.gov. QepQWPOgsGbE7PZg4qGG882lAhCwf9TjOJ+2q39mK21Wd2jQDXTOA98wGlRYzYX+J8MRhH3OOL9R Qr37yL2R9EKS8ScM5orumjGVHgznVz1/xLaFY7UOoxAlanD0xf9ctP+Sg9Y+QabqzVrPkJCseH3L Yy9wY5IRepkxKGM6K72QimrnkTw7DhtMxg7TG6RZSKNhHt8ogo38ayTCYIwy1tc9cJfp5UsH3nAm nPWwfOfV/ArUxdUBVxqKNmrAu7borQ2K7S+KPk93iW2uG07tBFiNsvAbQq1MkHAaC5nGrSC4y1bc b/mTi6rPLGvsBVMozsvQGEygSzYVnamI6peM4g== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200413225105 20200406225105 16539 fpki.gov. Ex9ziiwBdtbsjO56FbM0LRAcx/53ifo9WSQKDbhIe/AGEXZV2sk9hf8Mki+waU88a9h/xOtukrLn GE6PDYTZDNhrZXVLXXhkT9MlyUICMnx/4XIlHVrMSCJPUZeoxLEIf7RG5TJbIDKzvWM4iYPlyGjg bZradiDrBie0902SHqqG5m1M+bk1uVgAKAnvvM2H7k6mqIdqDY4UA6lgMX39zFP1A1ifado3uwRX aWNSEOfyj9Nw/6bqgFeMl5OvJ/9svolteH2Ba7jkDG2BgEZPITPABukPFsQWeG7GAz+VhmWevuVS rQb+NJEXwKWg+Xz9ijlj0PfezQcmnSunLy4YKw== )`
	RRSIG=36065 and DNSKEY=36065 verifies the DNSKEY RRset
	RRSIG=45965 and DNSKEY=45965 verifies the DNSKEY RRset
	RRSIG=18798 and DNSKEY=18798/SEP verifies the DNSKEY RRset
	RRSIG=16539 and DNSKEY=16539/SEP verifies the DNSKEY RRset
	DNSKEY=36065 is now in the chain-of-trust
	DNSKEY=45965 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 38156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200412225151 20200405225151 36065 fpki.gov. CpJ0Y3aaH7S6vl5Atw5i8xNP6ek+sdoRUTuHwqRUvUrkCSSbQcqOc3XSB0R1i+FLT7S2w3l6sU+Y JLdCixGEhldHHBFNByx68MldH+cL76k1gokKs84aLZPwknx+X8SyX5JEYykJEVI+P57HF6eNxuvL 2DW2csi/OoNXXlJn1V5Q61ABzyUAI4izH/JKh7TeXtVGQsTLXML41M4iMzaAOnpl8KbDWDhDuzFn hy6T34MQymkT3k00b0oFzUlDl6lDRDgqmt85RwRcwXmf2dGu5M+pxjIVZZBgJSAwVvvv6sY4tqyS m1AGO20HNXzHs0rgcTze23ZtTbJ9AhXU4KU73g== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200413225106 20200406225106 45965 fpki.gov. I4dDeAESzsRimSpMYWtKRWzs7XCx7+LifKXLLSXGg2PpzMKubMoCkxB8IcxODbRchurBaX1a7d7P dREKQaHWl4U9i1jWVVoBPW7Od07iOZ5DU8aS97xJFg+yLbBDMtbbzxZV4tahJQNtRgPRDM0+Pb/O g61sJD6cd2xjiEqhK7dknSkghycmMUNySl2GdtsGagXlWyMizrEPf4c2xN5YJU4Eel9o2uACidau 74b2oGSDI882i4+HXRRhf0OjxJOJwD5WGHA243ao2uUiwVcVtfPzhhc7/OnNqQAzo7mEE0XHzswt xEtBxS/ZBt0W0TtF4isHtT11nhODbRN9fbf34g== ) l206tks7g5a2ep9shfncc8dhk3f0juvs.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 4980f118cb79d514 l206tks7g5a2ep9shfncc8dhk3f0juvt NS SOA RRSIG DNSKEY NSEC3PARAM ) l206tks7g5a2ep9shfncc8dhk3f0juvs.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200416032751 20200409032751 36065 fpki.gov. UPErH6U8ckDJ+ZcaF7iT1dYqD/YRr6Gf9i6fCW3r+NpA6V+6NUn56149JjI3I0Xsm7G92cYk41sN Dertyo+zjDb+hbinoKlSRI4gY6sxvw3M/rWKGprVJDTpDSDDXcEFy1IoWzdjuW45LOBsme8WAJS+ tIr1Dd6ePUaD5EhLUTRWqzrED5NcNT3YPnAbrk9j90+V5EzmORjjdMgpGKG2f/snYD7C1MCpxS8i Z1/b+6IS93TqHT9CVCnCBN/89w7+/7g3Z56SltbQTkKM272qS/GyouoZCQzRUC6mR4cBK1I6tcKg 6ixGSMMse42ch8+l/zJ0Qe3+qbjNe/2RdOHr7A== ) l206tks7g5a2ep9shfncc8dhk3f0juvs.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200416032751 20200409032751 45965 fpki.gov. Ig/+/jmFGhEGB2eReuU/3idDIyUCp8TbTWNelqqxR7KFXiIAelj4l2PQARBJRRLGW0k49vxfuaiV +hBIa9kXXdCx06ghuwlUzDaO60digJ3OdQ+2ngpHptGQquh0uIU3qfUXY3BuNthAp+vjPv6W4QOD 5TFfwUhvc03fL9OSBAyt6YG79TE6yiifLCIE8ydK8pKMSw5rHbw0PQrBN7LdqFpXgy9cMzZr/H78 bL8yDVzniKf3YGypgxsA01xaom5tbswawGL1kAE8Y3oeOfYj9nHF42dpZn4/xea6mOIrEXj99Mri 2p692oCM3slFVtv85FiEh2XaMPL5kefpZgF0TQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 28705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200412225129 20200405225129 36065 fpki.gov. VNLmhfVQoWKmLTycK3xJlPUPQNx5Mfiyg81hy7/yGCgG9yKMkP60s8MTHTG+2YVK64pIL5mmZXES 7J2evEQG7EE51Em7cL6oolD9d2DXbvZqMbzznQxs3vjf7OSLNfpwPA0CpvV3L0UzuAe/pBJ8BMoW WwjRzw1AxArD+4pd8wJ+0LEz3XsFazKisHI1Z7GD6mgN5AJZoAaaLnuvyGaqarYeIr6ZhDN5M+wA 6OK+wF4JA1eVBpSnapBInKhiD9b5fZRcBV8aC8kk9KqNpxXMjjMn2iHDxz+Z9ABRtvj46enGrmCl Ym4T1DvVhzgwfwpEMp3PE7wsSXFewRyRjlPWaA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200413225109 20200406225109 45965 fpki.gov. HxWy0nTLa1I8UenS5k93W5ifDfZ7cfuGixfutOXqC4XWk2/T5DqNtk/TazznLn9BcA2LDnUDxnFx kQEfVr1V6JdX64m/gLzS+9v0oVKhEsn/XRusvpQcmshGcaQkyJPqtpZQkBi4oNZfE7QmyWqaFoXH Z06Q8BckWgJDCdeUuMYjG258IiVu+F3Xn8v3sKPEc8BePJXs0VjLCGQtwJ4UkWZqXUeewMb79Olh xRv7VpJR3ohO5MjhUn+jNdUZW5LOPq0Q3DP7QbGA3H7dl7L414bHWaJSt5v0B1tlQgDgMQJK6CQc 7FEkeh09OnCk5hteyl8lv4aT+wjtFl7NOP52ug== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200412225109 20200405225109 36065 fpki.gov. nudBLcUW8wZhH55G4XerGVnCQuTqgquwPhMLvv2QsWVQ9U+6AQcxXuUhMy+ytN4PiOvmcfK1zG4T fGIL7yjeIVgmtqqsedY76ok1lo0dysXdarZGZ/HsSXnwrov5Vrh19OH3U+XmoVoJl8AAW+ejegbL 1zJmIgWO+so6aK40tKRiCGxx2rFgWTVVceL48GvLHyMHoV7Us7Tf9RyY3UKRppmyTCaeafvxXxFn Yw9Gx2vUcKBs/mufwoi0J4GYq6PiqxNtgf+ShxIjjCWXmGK4qpaRDaMQf5w9cD2bDAzH6nSazF6U Lhhw0EaqVuZbLpfvAKf2+sb5n4JPm0TWkZ61TQ== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200413225105 20200406225105 45965 fpki.gov. lQLHY8YMGHaRPD2VZD9ghl1mPW+LPT7tX8NQwC6ittf8eAXnuNrbPutpcsQvO45SCk4zAce7amdJ +zbbozRIhYo/L1XMl3EM/Z5A5c+SU/Iwmoe3IWQgg+E7VN8TV03PYjkuVKzJo8WDesVcqRoJJo5n 4h8MzY+VyJjT15KXyS+C4dvl9XrVDDpMn+YXJx0Lh8bGidkAaAMpu0fLMG9Y2G9anBRpb323RuTs ReA5sc0JhD0/+jbVKrs91n2woF0luA/sO3EozMU/G9RREyYHVfhZ/RbOzFewd7ZCbv3+qJR3Hb8E wBQeJAe3zmW83EsxADDWyFc/Krq3roqlsYoomg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200412225109 20200405225109 36065 fpki.gov. qKfK0UdcueSRJG2cazLbwGPaRF4iZ8tQDGGVHrGbQ9OXUbIckNWV/+7I5tUykp7/gDxdG4oloKR4 1SmraHvojkW2Fhu4NbDC7gKYksbs5dJUEoUxbM17WrV5cHg9226Re1LDCXYZgoDfCBzCAPav++8X z9FB4dL7aaRTiUjXUVm6mzjeOSPWy2yoW1OSaRNov/frTIzmp+yyYVDm6kbaKHGBIjiJAYNR28US q30xMvTmSdnn0rBN7fKOxM5xgcyM+OSh6fpYylM/BN6nIE6mnLsmIW6XAm+reKoESlCmo1yvkx4e a8/WUOhOHXBG63SS4UiRincqtbIvoGwr/pZNkQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200413225105 20200406225105 45965 fpki.gov. Im6zZqRzEdcV3dksJGLTgh8jvSIcZ/flSng1kOoMY25hy7YKy/BV5LhuI977JvTgfeMbVByZOFOf m3FFPXcbjaI+m7js1Aw378RJhC3QVkOj3CEoMYs9b19spaGdWv7hR3UKSYqDExq//Lursx4DkXE5 KfF+JT/PrTROoBZowGIA3IPm5A2OLuKmPgONjPyoTRXgsjVBrMB8lmFRVto3HP24P2rUwYyqD8Zz 8qtkndIQrkmAbEERkuV/62DbNS6pm1FlUxYFmA20dyQPUrDwY3BamAAGwCIMgGMuFEh8Aen2R7Fl CIy61r8wBnyieUN6bVieVvo263yQu2saBNtOTw== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200412225109 20200405225109 36065 fpki.gov. lccSXQ4pj/uQS4AhWVf9VKZEaHMQiZRgutL9gls365E48pTheba5F4fxfC3fsRLAz4aVjuiy2bkI II3WgGZQmiGS4IrY/ScUslUUrDlKETFRhQ2bGa5pFHEm0N4q4sEOOvo9y+No2Z8Ze6rkAc+5uej4 v9mhOEl38yGyETcdQEpXPgKHIeWI6Mh/KrF7w+EVZZOUjnlYgJC4eSUvCQir/LuE0EJEV373E5pP 2SiaO11xuskbZEsFYHTiavM/fEQkBhCDTU7t9U3bSKWIIm1kUAKG5haTz8SfHQJFJLVyYxjtxjDU kvFpzuBGG7QRkWfgTtuQpQmhKHxu0yckW1aydA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200413225105 20200406225105 45965 fpki.gov. ZH1PNC41GwrQfoDiB2QEU90N+07copAz+kMVcxXdOvxe0JgzjYxt1LVJ7J+nfNUtj78JSOD+urdk ebJVHqr49gYHcxsDFgRJQZL3SwS9UX/Kst1vlD5Xt12DMeWlPncQHnKkxXi85Zk/Oq2iABt195s/ kVVlrFlSPVUCT0taowwuhpVwxXrsuerJ+alGFNjWDA1fNshAIFQEW3+NvdHqO14uMiHChkJo90af 5hTF3R6XUhIOiA8VV+xPTNw11FzMLGzGQ2wAIDFbxUd1DboCssBidZGtFLtKE8yY8nesbbjKk+VC 9f7nATOHbDrDFjOkFX7Z2MqqujY++hhTkC9gyQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200412225109 20200405225109 36065 fpki.gov. tgh6GD1WP62W5uhhFpTgOmIWgo/rBG3fKl2ExHxSZzMRMgnW3Ogt/8IWlBxbh/iEY0jl9RMoEcW2 tnSwQPWz5/bO4lVxjy1dE+xJKkI4WDhOLrTyKwTM0qAOPk1pUtLqr38rG6VK9GBIQixPKU3YsbNi 939pAeU/703PXTUHrY9bMkOwt+YUSoF0K7ve0JWRUU2MWumOwH0/5AjnoCm1x/bhagBI2RM3xoPK ZLy5/EPkePLGDsaulN+WnT4D4tEABr2CDkhSxI80H2Qvv2nmA8kChgPFJPhyeLD9tCo0qcHU8YnO 9UT6pZdmJ+BezE8xt3MW9Fo1V3uLq3OOU30aVQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200413225105 20200406225105 45965 fpki.gov. cNHTWCY/5UTYA/VpDspRTFq06JqmUnwMReXPcMTrMpQOGZ7ANRMRo21BhUeOG/VzcIGWVe1/jeVP OnwaQa5EfmQdkq01fwK2HZvIFDMxhTewNf1NIhkSFKZ0DL8SkQxeaVHDjJShlIC/Wx9MrEd9+6fl V3JoOEX1Z3FIQ/Hd/UgkQ2z4HzzggZqM8MKCdXsLsi93aImDvNvh9ArwYaCgbZP4iVTxTFIUUAxQ cWS6lFUlq7+0F0GTnL5wRJpn8j/DM6W+nZ0MiYMZlmLaMdjR1um3GUzxvfkeUBrxoZfXrdHvTPzo 2E8cCrI1XXn61Spe7hiYmCs6njVJkQf0fvbphA== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200412225109 20200405225109 36065 fpki.gov. bBBZKXcxUpajz5BGNBSMyJypxy2T+JyCItWIgKYD8TjvXpleOlH4Xzv8dZzcK0HeLA+mVEJIeq+y uYp6UHdfpa6nCVO8YtB2S/Y/oLxtiRkRvF3fwSh2yI7RtbJig1pjUHh2dKRHakO2wgE2VkCirj0S /KRGWgqfj8scQRhkZ9+rRIVrkUEvlXlA24BOiy45MedcJ7M5tt2Sv5rycJaJPtow8mZNhGUW9crf LyylnlsofGAV1qPSIcV2yaaMFQY9xUho5kQKOizLL9/jdLL2qR8NRabxVPw/qLokepriKFD/jeiJ fgOdWrN66tUEPeH002wjofQQrljA01RkiFmMLw== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200413225105 20200406225105 45965 fpki.gov. XLHqasiPmykcSkES2+UzjSPml1E1pNwt1KB4evKBp5u6yjZt8jK7QgpEbrARSY9hNf5PAZGswtBL m9PHb3o89sBgzWNs/nv1SV7HJX4/Fvf8TyTqIIJwBiNOVMkKzTDeiTRgar1RX3O4llK7fANi7bWn F9atzvhPPHTWK11jk1qVdfbyNWyW9b5RVjHqH9AQ+syb//eANAQRJqOqiD+gXrfy4gSu4JLN7++2 sZ5a2GzyQK7fQqMA+4uLRcCQ5Ctxo3INh3ttN3fI6Lvi6Oh9Mx67Gd9dQHtFNIj9gnBVsia37o6Z AoV4GHizyMFdi9Sme84OelG3VDe03ygPn8ZtPQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 7108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200412225151 20200405225151 36065 fpki.gov. CpJ0Y3aaH7S6vl5Atw5i8xNP6ek+sdoRUTuHwqRUvUrkCSSbQcqOc3XSB0R1i+FLT7S2w3l6sU+Y JLdCixGEhldHHBFNByx68MldH+cL76k1gokKs84aLZPwknx+X8SyX5JEYykJEVI+P57HF6eNxuvL 2DW2csi/OoNXXlJn1V5Q61ABzyUAI4izH/JKh7TeXtVGQsTLXML41M4iMzaAOnpl8KbDWDhDuzFn hy6T34MQymkT3k00b0oFzUlDl6lDRDgqmt85RwRcwXmf2dGu5M+pxjIVZZBgJSAwVvvv6sY4tqyS m1AGO20HNXzHs0rgcTze23ZtTbJ9AhXU4KU73g== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200413225106 20200406225106 45965 fpki.gov. I4dDeAESzsRimSpMYWtKRWzs7XCx7+LifKXLLSXGg2PpzMKubMoCkxB8IcxODbRchurBaX1a7d7P dREKQaHWl4U9i1jWVVoBPW7Od07iOZ5DU8aS97xJFg+yLbBDMtbbzxZV4tahJQNtRgPRDM0+Pb/O g61sJD6cd2xjiEqhK7dknSkghycmMUNySl2GdtsGagXlWyMizrEPf4c2xN5YJU4Eel9o2uACidau 74b2oGSDI882i4+HXRRhf0OjxJOJwD5WGHA243ao2uUiwVcVtfPzhhc7/OnNqQAzo7mEE0XHzswt xEtBxS/ZBt0W0TtF4isHtT11nhODbRN9fbf34g== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200412225108 20200405225108 36065 fpki.gov. E/g55u0X+Ks7WeGf79r29lbBcEHeN8oDBv822714i+dzUOXObyHdgshwONUNSttw7mztoYMc+5P/ WCNIKcaLnOLmd+57KfwZDs+uSavVFxDMM8iviZf09YW62blcXM4KtOjN02y/eP0g/N3nqiAaqYCe MjRF4iOqzfaMBl4qq65Lhng2Y+rXpwR2KBznDVFUqFzFkSYEyQ+MGNgJf2XajAuwgD/36ynaMwUi pYMeHFYJgcUy1YfXIJ4SbBhaugXpYs7yU8k55Pws9Ue5LM+ahAAWfa06FDuJ3uIj/E9tdIU3B2f0 Y5aQfMJvrBNDo5Xaf+eUAa9nNIv24y6XttA/aA== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200413225105 20200406225105 45965 fpki.gov. lQLHY8YMGHaRPD2VZD9ghl1mPW+LPT7tX8NQwC6ittf8eAXnuNrbPutpcsQvO45SCk4zAce7amdJ +zbbozRIhYo/L1XMl3EM/Z5A5c+SU/Iwmoe3IWQgg+E7VN8TV03PYjkuVKzJo8WDesVcqRoJJo5n 4h8MzY+VyJjT15KXyS+C4dvl9XrVDDpMn+YXJx0Lh8bGidkAaAMpu0fLMG9Y2G9anBRpb323RuTs ReA5sc0JhD0/+jbVKrs91n2woF0luA/sO3EozMU/G9RREyYHVfhZ/RbOzFewd7ZCbv3+qJR3Hb8E wBQeJAe3zmW83EsxADDWyFc/Krq3roqlsYoomg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200412225108 20200405225108 36065 fpki.gov. VKaLIDF991NzvJ2CGk3SneJhhD3XWhJi+7eeoMIn5fvh2212A25Xno0dVsn9NJTBd+OxryHWCBP3 HXUFeD8d6bsDlb2iBr2PhAdybxXVS2GHKPCM59IslBHNRaYUSL1k0gwv+e+/xUnt3fpVGoDlcyqw LV0Dvzw1FY3ZyKURYc9S3vfxmophYwm/mkbeiaogPoaS+JpsHgilqb6LzMCnnq5SUwI4bfj+6Seq pe1DhrGxNghWIPcFiJDBGXqiBWYxFj4qtQPPeVY5esihttwcccLv3eVSEwZJKJgVyq9VVa/0ay4l PjLlwrKc/2tpVjezD2InvsUw94RqZEFYS5kPnw== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200413225105 20200406225105 45965 fpki.gov. Im6zZqRzEdcV3dksJGLTgh8jvSIcZ/flSng1kOoMY25hy7YKy/BV5LhuI977JvTgfeMbVByZOFOf m3FFPXcbjaI+m7js1Aw378RJhC3QVkOj3CEoMYs9b19spaGdWv7hR3UKSYqDExq//Lursx4DkXE5 KfF+JT/PrTROoBZowGIA3IPm5A2OLuKmPgONjPyoTRXgsjVBrMB8lmFRVto3HP24P2rUwYyqD8Zz 8qtkndIQrkmAbEERkuV/62DbNS6pm1FlUxYFmA20dyQPUrDwY3BamAAGwCIMgGMuFEh8Aen2R7Fl CIy61r8wBnyieUN6bVieVvo263yQu2saBNtOTw== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200412225108 20200405225108 36065 fpki.gov. buzcG7bVzMbBcPw2Z6MMvHVMs54CyYRq/SCnzV6qlAQBVePD9nuvYvfsLDI75rKGPuJg3QsakngY QVWNKdU9IcW0TKTCm4kgAodonbmX71WuA8AeXFA3h6u7GYUQavRLJFfaoHIunC6EnlM5UbMb5DsN 59ux6VrEtQhibn5cCrvoNYsXh/Vxr+7TNer59u4s+g/kTFnC2ATPh62Htyv9kP1+AZYGt19KPNul jJol8nbmc47UgJYjJfm4DIdmbYo45OM/cxMJKTqXygsM/L27E5wncvxadoSmjIqyoh3RzcyBCKRb bYYotBNXLcShOvq/vDqxVweXRgDHwKg2OQo+YA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200413225105 20200406225105 45965 fpki.gov. ZH1PNC41GwrQfoDiB2QEU90N+07copAz+kMVcxXdOvxe0JgzjYxt1LVJ7J+nfNUtj78JSOD+urdk ebJVHqr49gYHcxsDFgRJQZL3SwS9UX/Kst1vlD5Xt12DMeWlPncQHnKkxXi85Zk/Oq2iABt195s/ kVVlrFlSPVUCT0taowwuhpVwxXrsuerJ+alGFNjWDA1fNshAIFQEW3+NvdHqO14uMiHChkJo90af 5hTF3R6XUhIOiA8VV+xPTNw11FzMLGzGQ2wAIDFbxUd1DboCssBidZGtFLtKE8yY8nesbbjKk+VC 9f7nATOHbDrDFjOkFX7Z2MqqujY++hhTkC9gyQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200412225108 20200405225108 36065 fpki.gov. P1V1ya/5dsoApfbijXYd7LjB+pvvaRmWD0hboW/oQ32nkFEwDwf1yErulsyAMzfnRTQflEIlt5/A wSzQ7h84Pu79KPSWQ37ECWmQgy3VHrman2rINrMnUqL6lHvHdHCv2drbCODNOQEDLM15CpIsq3GM d8+W0fwbIoQaywbJo3ftSdKJ26/7m8TCSY3YFfQEO/FkrqU5SbLI8hGwLc+5Zk5nqF4LGfPN1wFx DiqQr1VXF0Si4SdiPGUUmEzQTZmO70GNNnryWe3iOmpD1dRIVEmf+lNmoB7i3KELTIeEd7GsV2kD m6LCB7voSzfVFKwBtn3pFjjdLN0wqWDKIbuigw== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200413225105 20200406225105 45965 fpki.gov. cNHTWCY/5UTYA/VpDspRTFq06JqmUnwMReXPcMTrMpQOGZ7ANRMRo21BhUeOG/VzcIGWVe1/jeVP OnwaQa5EfmQdkq01fwK2HZvIFDMxhTewNf1NIhkSFKZ0DL8SkQxeaVHDjJShlIC/Wx9MrEd9+6fl V3JoOEX1Z3FIQ/Hd/UgkQ2z4HzzggZqM8MKCdXsLsi93aImDvNvh9ArwYaCgbZP4iVTxTFIUUAxQ cWS6lFUlq7+0F0GTnL5wRJpn8j/DM6W+nZ0MiYMZlmLaMdjR1um3GUzxvfkeUBrxoZfXrdHvTPzo 2E8cCrI1XXn61Spe7hiYmCs6njVJkQf0fvbphA== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200412225108 20200405225108 36065 fpki.gov. R9QyiZ1s1Q8xLxmdT0dy0WK5bYjtNq6fyxSw65dx8smSMVpJJ7Lz0WOXRqyTvbl7gFpGF7ldB09G FOehfcT/yOqSQdCdaRyFt6Hl8ukTEAPxxJqRZCfJldhGlnOkFHcu+CAFKTrA39ImsXdafjQ1VeRb 3t2ObiRYXYJIkvyz5hvmfZ1VCcSrG6Wr/718daOH71PFH2Ggln/G9tN4sET06dLxG/3H5TFTKCKe CUCWH3EAbLVy7zWzMoS7AtmIr/fXoUms5HpdJfaMWlchYrT7e5YApS+B7UFeEULa/HX/neLhEN5g gyzKXDWyUhBKtp2u9CEcwokVCeqYhBJYhu6/Fw== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200413225105 20200406225105 45965 fpki.gov. XLHqasiPmykcSkES2+UzjSPml1E1pNwt1KB4evKBp5u6yjZt8jK7QgpEbrARSY9hNf5PAZGswtBL m9PHb3o89sBgzWNs/nv1SV7HJX4/Fvf8TyTqIIJwBiNOVMkKzTDeiTRgar1RX3O4llK7fANi7bWn F9atzvhPPHTWK11jk1qVdfbyNWyW9b5RVjHqH9AQ+syb//eANAQRJqOqiD+gXrfy4gSu4JLN7++2 sZ5a2GzyQK7fQqMA+4uLRcCQ5Ctxo3INh3ttN3fI6Lvi6Oh9Mx67Gd9dQHtFNIj9gnBVsia37o6Z AoV4GHizyMFdi9Sme84OelG3VDe03ygPn8ZtPQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 44012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200412225127 20200405225127 36065 fpki.gov. tFWkW9lk/ccFTacJz/yuusPySfxdqlbIOoqIxJTNWCwMoDxfoFtqPb6hLXlustanN/H5cXbvt2yE U6ek7EqXhKO69nTGH3y31psj+lLXPPfIri3KLifbYn9pq67vcvlW1IEysHeJ7jGrAj1QsWS+a4ss 21usZsqxTk87YIFn26cdhsg95OVgGcW7mFrXMVkCUoO5g1LjaAB5+kYjUKq5d1+1R572fDOnsNDF F4zMYU3qhv6AeuwK+kFakMmXVluGr2eTZYYv76oft3i3nEQ2hbDS/lDoAKpe/0oXNgpddNGNjrK/ 9qbQ1RGK+93sZAMUoVdnnVBLLKpgMt1ALc8S8A== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200413225106 20200406225106 45965 fpki.gov. I4dDeAESzsRimSpMYWtKRWzs7XCx7+LifKXLLSXGg2PpzMKubMoCkxB8IcxODbRchurBaX1a7d7P dREKQaHWl4U9i1jWVVoBPW7Od07iOZ5DU8aS97xJFg+yLbBDMtbbzxZV4tahJQNtRgPRDM0+Pb/O g61sJD6cd2xjiEqhK7dknSkghycmMUNySl2GdtsGagXlWyMizrEPf4c2xN5YJU4Eel9o2uACidau 74b2oGSDI882i4+HXRRhf0OjxJOJwD5WGHA243ao2uUiwVcVtfPzhhc7/OnNqQAzo7mEE0XHzswt xEtBxS/ZBt0W0TtF4isHtT11nhODbRN9fbf34g== ) t39bjih9kou93cogou2qjcn1ier0sh8g.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 0b3a34d4aaa77306 t39bjih9kou93cogou2qjcn1ier0sh8h NS SOA RRSIG DNSKEY NSEC3PARAM ) t39bjih9kou93cogou2qjcn1ier0sh8g.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200416025855 20200409025855 36065 fpki.gov. rX68OMtylEywqC+AomfP0twr3St8n1MSK3qQWzoI22Afbk+vz8TG5gsAIAe/ITNZtDh67YMtnEoG 4wTNry9QiHn+tmOa5FF9GFLEBUvWmBVQuvt2A3P2UQn7wctzJdHajqGUt9J7/YH/WFlteMKF7eFS Xne5Tu+2qNJKixqf4a0qBirEJj+WSAn7ag46RIbPuVPCMJkzfV7OzpaCgDTeBRQOhIr2L+Oj6sw4 rI392Jh2WUfWT4LyMyp3SSjwl80f4unllSqk0rgiE5KznkjP8qdqWvKNnzTTEa3RZN0wUVozPTMn MKpCR7KRHPRwL6mEDOEizyhniC1DvEx6kUyLyA== ) t39bjih9kou93cogou2qjcn1ier0sh8g.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200416025855 20200409025855 45965 fpki.gov. eupsLqG3BcIvPLt+XUqytrff6umDIjMmUz1SSYDqVvlwUvWV5chJzL4qBs26qrZvPJVyKNUUuXBj pCgL+HvpsWoc/A6eKK13oeuyTSbaQoXdw51Dww6Y/1QwyK/6AWThxATsZGwfBSqe+RBFlNbJ43Qy Iij1Hii7L84aA0N0Yfz99Fg49mPIJeGsXl4CRp3SojhraEGPs6cHQxaHcdTlJUC4dkU1GeCCFb4f 9DOFVik/kU0HTF4ye1lV1owRdXYjku13YVIFfEEcRKiwyA8Fi8j7506KzP2LDrrWD081+NlkQI9j JCnfWg6NNHMZ1vblfgBc2+wldw7A/0sw8K4FQw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200412225151 20200405225151 36065 fpki.gov. CpJ0Y3aaH7S6vl5Atw5i8xNP6ek+sdoRUTuHwqRUvUrkCSSbQcqOc3XSB0R1i+FLT7S2w3l6sU+Y JLdCixGEhldHHBFNByx68MldH+cL76k1gokKs84aLZPwknx+X8SyX5JEYykJEVI+P57HF6eNxuvL 2DW2csi/OoNXXlJn1V5Q61ABzyUAI4izH/JKh7TeXtVGQsTLXML41M4iMzaAOnpl8KbDWDhDuzFn hy6T34MQymkT3k00b0oFzUlDl6lDRDgqmt85RwRcwXmf2dGu5M+pxjIVZZBgJSAwVvvv6sY4tqyS m1AGO20HNXzHs0rgcTze23ZtTbJ9AhXU4KU73g== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200413225106 20200406225106 45965 fpki.gov. I4dDeAESzsRimSpMYWtKRWzs7XCx7+LifKXLLSXGg2PpzMKubMoCkxB8IcxODbRchurBaX1a7d7P dREKQaHWl4U9i1jWVVoBPW7Od07iOZ5DU8aS97xJFg+yLbBDMtbbzxZV4tahJQNtRgPRDM0+Pb/O g61sJD6cd2xjiEqhK7dknSkghycmMUNySl2GdtsGagXlWyMizrEPf4c2xN5YJU4Eel9o2uACidau 74b2oGSDI882i4+HXRRhf0OjxJOJwD5WGHA243ao2uUiwVcVtfPzhhc7/OnNqQAzo7mEE0XHzswt xEtBxS/ZBt0W0TtF4isHtT11nhODbRN9fbf34g== )`
	RRSIG=36065 and DNSKEY=36065 verifies the SOA RRset
	RRSIG=45965 and DNSKEY=45965 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: