DNSSEC Debugger - FPKI.GOV

Domain Name:

Time: 2026-02-23 05:58:33 UTC

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 32898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for FPKI.GOV/A
	Received 615 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 615 octets ;; HEADER SECTION ;; id = 12951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; ADDITIONAL SECTION (9 records) c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 616 octets ;; HEADER SECTION ;; id = 37630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 8759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260308050000 20260223040000 21831 . ZeXP0Nefopc0ETOWDo97WAWEfTWRg+NCOW24SWBC91grax7uVuwBOyeR6b6l9W0A4p0wKWN0Mqqt eM/LwmQ0ZrJBfGot0ZjN2qcwRyIbbsbHMNzKUjJZZtKhal+eWnAciotZoDfwRHR8rkq0PWBoMmQ6 Q/ATg2o28XaJidLJ+kkjRdcx3CZsCZwFYtgKyich87HmjP6F/Wr3jFraImIToreobL2dHv6c7A1C GY23iH8D6LqTc6NXJwbWMwvHL5/EijG+ZNwhSG/Tvix2J8Y7yYmCcAeE5dAAgilfiqdwogi7ld6r gyu1KIVNzJUwp7FT6y271wq8jGg+rhyi2ta8SQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 45805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260418110625 20260216110625 2536 gov. I0iSDDCNvKVMZA6sNbu/vSpxFxExdKw4wolKgp9n5lVU+L+LLIrgFsg7MfMTRCgrMX1UDqFBsElS w+yMvE1WnQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for FPKI.GOV/A
	Received 358 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 358 octets ;; HEADER SECTION ;; id = 52707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FPKI.GOV. 10800 IN NS dns1.FPKI.GOV. FPKI.GOV. 10800 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 31975 8 2 2d8cb07d8de2617e899e1a2d572e23b4ac7653583a0741a706e3abe50fc6f3bc ) FPKI.GOV. 3600 IN DS ( 6487 8 2 d7f9509af2b99a708bc81ea5c70ea0c1bd4a778f61bc9814e2501c1966f8307f ) FPKI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224065833 20260222045833 35496 gov. k97JXAqqllTD2haL62XXhcp88uFOMRU+de2pIq8n3SOaj6ktMRaZ4ybvNg20a4J+c5XKqZCQFrQI Aqo/YVuKkw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 3600 IN A 199.167.92.100 dns1.FPKI.GOV. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 3600 IN A 199.167.93.100 dns2.FPKI.GOV. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for FPKI.GOV/DNSKEY
	Received 358 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 358 octets ;; HEADER SECTION ;; id = 21332 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FPKI.GOV. 10800 IN NS dns1.FPKI.GOV. FPKI.GOV. 10800 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 31975 8 2 2d8cb07d8de2617e899e1a2d572e23b4ac7653583a0741a706e3abe50fc6f3bc ) FPKI.GOV. 3600 IN DS ( 6487 8 2 d7f9509af2b99a708bc81ea5c70ea0c1bd4a778f61bc9814e2501c1966f8307f ) FPKI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224065833 20260222045833 35496 gov. 0gaHyb+E/9Pv2cXV43fPTAgNjOUs6ytIxkgrogbsaEkDpZsQ5kgdl4HOOn5N4liQBFBEdhbb9YFS 5rchesGTAg== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 3600 IN A 199.167.92.100 dns1.FPKI.GOV. 3600 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 3600 IN A 199.167.93.100 dns2.FPKI.GOV. 3600 IN AAAA 2620:9b:c001:9300:22::30 ;; { "EDNS-VERSION": 0 }
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to d.ns.gov for FPKI.GOV/DS
	Received 232 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 232 octets ;; HEADER SECTION ;; id = 61867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (3 records) FPKI.GOV. 3600 IN DS ( 31975 8 2 2d8cb07d8de2617e899e1a2d572e23b4ac7653583a0741a706e3abe50fc6f3bc ) FPKI.GOV. 3600 IN DS ( 6487 8 2 d7f9509af2b99a708bc81ea5c70ea0c1bd4a778f61bc9814e2501c1966f8307f ) FPKI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224065833 20260222045833 35496 gov. 5527DV8CVgUj0gPvGpzIiu45uUT4mEgtIX8ei7pJuSKuL4cwkRq1PHsoF3YEy6UH7RFnvvF/h90l 9kbHM252Jg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for FPKI.GOV in the GOV zone
	DS=31975/SHA-256 has algorithm RSASHA256
	DS=6487/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260224065833 20260222045833 35496 gov. 5527DV8CVgUj0gPvGpzIiu45uUT4mEgtIX8ei7pJuSKuL4cwkRq1PHsoF3YEy6UH7RFnvvF/h90l 9kbHM252Jg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=31975/SHA-256 is now in the chain-of-trust
	DS=6487/SHA-256 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS ( 31975 8 2 2d8cb07d8de2617e899e1a2d572e23b4ac7653583a0741a706e3abe50fc6f3bc )`
	`FPKI.GOV. 3600 IN DS ( 6487 8 2 d7f9509af2b99a708bc81ea5c70ea0c1bd4a778f61bc9814e2501c1966f8307f )`
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 2325 octets ;; HEADER SECTION ;; id = 39549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbjjKFzZ2f0Fg7NACZV6HK4ZBxyutuo8YHnJPUai/co8002GbDiyfGGD+Ap5RlCUcU7RX2SJ UNNOYwu3wpcoAWla06FoFPC7AufSWzCbPy+BPqN1NH0aH1kvGa797A17bGyee/y3GqcZpRyJdqsJ QKQFcyYeB3wRR1d8zZ9eUX3dj9x62BQCZwitM7WvnLrCo+A0hIjV6niHaPZVGwj3z6Cyp5YLSBBS wITRay1rkscGJ61oMGrK/3AtLmZdeQ045SCHP8kwCH4Gt1y/UQaWWNp6bZbSOQBTs6bKRKqRXuXT dpjgj73MwMHWXf1N7PCGGKIkYXrkYTTiVfO2ENW7cpE= ) ; keytag 6487 FPKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdQYVxsNuHPzWniE9/8cnP88YyXzH5MOvf6h9Duoq6bJz9OOjfPMYFc5b46A3wNIf92Lu52v nrOapeUXvNnV1286BVtpluiovsv6gjbJXQrzONYwMvYVM86bpebNBrKx2jRsQjwhufynfPGBmz+2 2VU8dMQfiGBGcarTMY42czVu/BiIGzoxUpDNWvYlUQCKjVOvoVMyUvFXPGL42LpUe5iV01Bn8gWP H2EyryBys7W9JQ/4oOCJPoBFAeGE934gM0JGdkcf9KebbYFCg4ZaMVr6Mlx7tj78XMuA8ME6a/GU W7744TbEPsEKqGM8JIItKna/WkEiINd2GgWV4c3E6RM= ) ; keytag 31975 FPKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAah+QBMK2ARCTlVaFntfoAi/zYpa6sAT5ZObIXXZdqrb8SXO487zesXSJxzPAx+HuCly7fyd 7zspcJnslnU6Eb/75GPIcuU0HjMTZpgm/kw2RIrzhFYS0hQa3lN4wATP48E5Tm/whKDO2RnpMDLx BDw59Q1UXNEdnSWXOVbFiNJ2kLgounLAPoPlDrLGg00zpr8pmTsqZOZ28bm6Q1TBsT5wfH93qefE GylI7+2fHAqvQp4k/IIEIoI1TDgLpNIHHwDmpKlFJ+Hvo1DHp0KTSGaBoX/TkTIxFVkssQW+tCS+ 8s9pXBlBV/g/5x8kuhtD4WBpJZu7MhcQUKHIdMQ6x50= ) ; keytag 6366 FPKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdkm2iAg5FtMQd+K+VHuatCP7TkL0CW385MpWqtyRf9HHHlV3QG7DZbwbKiwDbokeDWBklfV qQqMhQqIOixUDd+1kRI5mtbyikuQdVLfKY7L9hE4zYkr3DEWYEMJDkPVSI4cK8w7Hk3NSkatOJd9 OBxa6pQG4HJ6F7gaO60/4C/DQPqYShnVzo46b83UpIP3v9ykqPBlWZXAJuow7rl9XVfceN0VKVpE m4fbo8U5rhAGRyBW2PVZJlJkCFQymolkDFwD0U2m3dwTslFiAt2h0eSmfGGV8eWl5YlFhp5YXFcs 9/GvqHUxMkiRozSvFS4O58pkxVyMLnSHsuRCxrU7OYc= ) ; keytag 40380 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 6487 fpki.gov. QPC9zejVcKiZh++q83zvwhewwGDJ+SwMTkrRLfFEkmnTpHgC0Ld+KtRoUtkIHj2F6SZgFwZyBiSJ /HfgUFGmDYs2/cmIkdG++zgUl20r+VzP1bht742Og1ALWxN+cMS0HlwwEyTJ2IAAQVKsvPGDMRRl TcafHpKYcYkcsknHbylZGzS3ICHj0TmI/MCqDh6BYod7jeq+UESe5Uvygf7LAJxuc+CQZrG4ThYb FeAfFzBRETfdf1A6NW+lBrZpuPR901PSDCkCWA4u8V6T1hkU4HvhFEiiwNsHl0QMenmRZ/HeygAG 5iHKN5Vz2RlcZIfWHCJ1ovpcTgN43uJTxiLS8Q== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 31975 fpki.gov. iPKY8UAhkG6BjFTLtXHJxFJjZX/ZEk7bJqSsZm55a5+R6nuU2ZcWOfKDNXTwiUg5cEXLcp8RV/vH nyIW2dAMyzjocqKF1xFjl5yvldiOSEisIFPzDzGKBfcHxyXkoK0UXaUVzNfk7s4c62dNa0k90sPL 4QXEUwWKarjU7HpR7vVMlN9dw9Xoif/BQHIogSW9tuyybcIvsDr7fdYsQdP6b/ILBuQrWXxFMaqs 3C+34eIoGQQDU7jL5p/VvcdRNEqN6csfUraK0t18eABew+uSZqV5LnP47tFrc7SteTJjdOINGgju iyy30V+2jZKr8lZjW047qDrick0Bn6bykC1Wmw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 6366 fpki.gov. OTylo0OXnoBthkT910TwAyW97rK7UrroUpZ1YCF/p64TYBiqbKs1JnoYqqiNZ65NPGePDc5e/eZv Y4sB1hZNK/OISPZxktl3Q5pZGsj/VFEXJRpa0bZOYC48K/Sd3cGFqtPjjEcwZQ3hxOVtAWg4dWmQ UTJ02sAMW68OLTwtbbJ0+KY4d/2bUK2H/BdWeiwBBdHvUgAm3fyXR3lwa3SbS3y6CpDm4YfFCn9U WW7/UPpe1JJ6ImuAebF2ee0LCCTtxk4A9yCAglVUq9omkv/pTFjiSYVKaRpJAYr3kSz1y+tnFAOo JEznqwUL5wHZEOYXEfmQuVn/zEXK6XgCe6isyA== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 40380 fpki.gov. 0spm7VnGR2TVJ7ciYdKzlmg6v0gOaEggYhIfNq7ZBKthLtYg2x7Hh9ie3+M2oT3vFc621Uk/d6wO RXshr1ABA9zt/5I9/I5mn5NWLBRP1OwR7Iv1pDy8co0ZzlYZ5cm3hjJKBos3hFwsdsJiw7k1owoa Yah72Qnl7m9Fd0uGj/e0q+jU1bAVlANeVLSAYeHqlQ31d5M7QmYklKewZe658pzu8pk4BEyCqCHf 2tfVvZJ5KLR0/w9hh6Y6cMbImloZoVa00aRCtzfv9yMafLi7T/yKAR5/q+vkEPv2zKxe0tDijGCL U+84kDonXZuSdvjHJdjadtiAc/5fSK4h0kOlsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbjjKFzZ2f0Fg7NACZV6HK4ZBxyutuo8YHnJPUai/co8002GbDiyfGGD+Ap5RlCUcU7RX2SJ UNNOYwu3wpcoAWla06FoFPC7AufSWzCbPy+BPqN1NH0aH1kvGa797A17bGyee/y3GqcZpRyJdqsJ QKQFcyYeB3wRR1d8zZ9eUX3dj9x62BQCZwitM7WvnLrCo+A0hIjV6niHaPZVGwj3z6Cyp5YLSBBS wITRay1rkscGJ61oMGrK/3AtLmZdeQ045SCHP8kwCH4Gt1y/UQaWWNp6bZbSOQBTs6bKRKqRXuXT dpjgj73MwMHWXf1N7PCGGKIkYXrkYTTiVfO2ENW7cpE= ) ; keytag 6487`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdQYVxsNuHPzWniE9/8cnP88YyXzH5MOvf6h9Duoq6bJz9OOjfPMYFc5b46A3wNIf92Lu52v nrOapeUXvNnV1286BVtpluiovsv6gjbJXQrzONYwMvYVM86bpebNBrKx2jRsQjwhufynfPGBmz+2 2VU8dMQfiGBGcarTMY42czVu/BiIGzoxUpDNWvYlUQCKjVOvoVMyUvFXPGL42LpUe5iV01Bn8gWP H2EyryBys7W9JQ/4oOCJPoBFAeGE934gM0JGdkcf9KebbYFCg4ZaMVr6Mlx7tj78XMuA8ME6a/GU W7744TbEPsEKqGM8JIItKna/WkEiINd2GgWV4c3E6RM= ) ; keytag 31975`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAah+QBMK2ARCTlVaFntfoAi/zYpa6sAT5ZObIXXZdqrb8SXO487zesXSJxzPAx+HuCly7fyd 7zspcJnslnU6Eb/75GPIcuU0HjMTZpgm/kw2RIrzhFYS0hQa3lN4wATP48E5Tm/whKDO2RnpMDLx BDw59Q1UXNEdnSWXOVbFiNJ2kLgounLAPoPlDrLGg00zpr8pmTsqZOZ28bm6Q1TBsT5wfH93qefE GylI7+2fHAqvQp4k/IIEIoI1TDgLpNIHHwDmpKlFJ+Hvo1DHp0KTSGaBoX/TkTIxFVkssQW+tCS+ 8s9pXBlBV/g/5x8kuhtD4WBpJZu7MhcQUKHIdMQ6x50= ) ; keytag 6366`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdkm2iAg5FtMQd+K+VHuatCP7TkL0CW385MpWqtyRf9HHHlV3QG7DZbwbKiwDbokeDWBklfV qQqMhQqIOixUDd+1kRI5mtbyikuQdVLfKY7L9hE4zYkr3DEWYEMJDkPVSI4cK8w7Hk3NSkatOJd9 OBxa6pQG4HJ6F7gaO60/4C/DQPqYShnVzo46b83UpIP3v9ykqPBlWZXAJuow7rl9XVfceN0VKVpE m4fbo8U5rhAGRyBW2PVZJlJkCFQymolkDFwD0U2m3dwTslFiAt2h0eSmfGGV8eWl5YlFhp5YXFcs 9/GvqHUxMkiRozSvFS4O58pkxVyMLnSHsuRCxrU7OYc= ) ; keytag 40380`
	DNSKEY=6487/SEP is now in the chain-of-trust
	DS=6487/SHA-256 verifies DNSKEY=6487/SEP
	DNSKEY=31975/SEP is now in the chain-of-trust
	DS=31975/SHA-256 verifies DNSKEY=31975/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 6487 fpki.gov. QPC9zejVcKiZh++q83zvwhewwGDJ+SwMTkrRLfFEkmnTpHgC0Ld+KtRoUtkIHj2F6SZgFwZyBiSJ /HfgUFGmDYs2/cmIkdG++zgUl20r+VzP1bht742Og1ALWxN+cMS0HlwwEyTJ2IAAQVKsvPGDMRRl TcafHpKYcYkcsknHbylZGzS3ICHj0TmI/MCqDh6BYod7jeq+UESe5Uvygf7LAJxuc+CQZrG4ThYb FeAfFzBRETfdf1A6NW+lBrZpuPR901PSDCkCWA4u8V6T1hkU4HvhFEiiwNsHl0QMenmRZ/HeygAG 5iHKN5Vz2RlcZIfWHCJ1ovpcTgN43uJTxiLS8Q== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 31975 fpki.gov. iPKY8UAhkG6BjFTLtXHJxFJjZX/ZEk7bJqSsZm55a5+R6nuU2ZcWOfKDNXTwiUg5cEXLcp8RV/vH nyIW2dAMyzjocqKF1xFjl5yvldiOSEisIFPzDzGKBfcHxyXkoK0UXaUVzNfk7s4c62dNa0k90sPL 4QXEUwWKarjU7HpR7vVMlN9dw9Xoif/BQHIogSW9tuyybcIvsDr7fdYsQdP6b/ILBuQrWXxFMaqs 3C+34eIoGQQDU7jL5p/VvcdRNEqN6csfUraK0t18eABew+uSZqV5LnP47tFrc7SteTJjdOINGgju iyy30V+2jZKr8lZjW047qDrick0Bn6bykC1Wmw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 6366 fpki.gov. OTylo0OXnoBthkT910TwAyW97rK7UrroUpZ1YCF/p64TYBiqbKs1JnoYqqiNZ65NPGePDc5e/eZv Y4sB1hZNK/OISPZxktl3Q5pZGsj/VFEXJRpa0bZOYC48K/Sd3cGFqtPjjEcwZQ3hxOVtAWg4dWmQ UTJ02sAMW68OLTwtbbJ0+KY4d/2bUK2H/BdWeiwBBdHvUgAm3fyXR3lwa3SbS3y6CpDm4YfFCn9U WW7/UPpe1JJ6ImuAebF2ee0LCCTtxk4A9yCAglVUq9omkv/pTFjiSYVKaRpJAYr3kSz1y+tnFAOo JEznqwUL5wHZEOYXEfmQuVn/zEXK6XgCe6isyA== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260228141156 20260221131156 40380 fpki.gov. 0spm7VnGR2TVJ7ciYdKzlmg6v0gOaEggYhIfNq7ZBKthLtYg2x7Hh9ie3+M2oT3vFc621Uk/d6wO RXshr1ABA9zt/5I9/I5mn5NWLBRP1OwR7Iv1pDy8co0ZzlYZ5cm3hjJKBos3hFwsdsJiw7k1owoa Yah72Qnl7m9Fd0uGj/e0q+jU1bAVlANeVLSAYeHqlQ31d5M7QmYklKewZe658pzu8pk4BEyCqCHf 2tfVvZJ5KLR0/w9hh6Y6cMbImloZoVa00aRCtzfv9yMafLi7T/yKAR5/q+vkEPv2zKxe0tDijGCL U+84kDonXZuSdvjHJdjadtiAc/5fSK4h0kOlsQ== )`
	RRSIG=6487 and DNSKEY=6487/SEP verifies the DNSKEY RRset
	RRSIG=31975 and DNSKEY=31975/SEP verifies the DNSKEY RRset
	RRSIG=6366 and DNSKEY=6366 verifies the DNSKEY RRset
	RRSIG=40380 and DNSKEY=40380 verifies the DNSKEY RRset
	DNSKEY=6366 is now in the chain-of-trust
	DNSKEY=40380 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Response received from [199.167.93.100] 1366 octets ;; HEADER SECTION ;; id = 7092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 3600 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2023092502 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260227000604 20260219230604 6366 fpki.gov. W4pWJArszHms4QdLe5Ogn562QDUhgoFZjeHXGFUHptwD1EKeD9P3bFD51KEQ6v1KSiwlkjzU9chR CT392ZxmFjZs6DS468RkMwyMSiB+1SVGeWEx7o5vA+5MNH2SeoiNaGiCl21MIaoq3W9T6hExtGcn ySdQh7Ry/LtCfi8IHGgbkuFHNxc/SQI5HY8paGxlRWim2ANizoUU5jKY/YFDxfqcXMoE3QoMMr3M p78fOfdHVT4mmg2qLse0ByujBla3kbvJiDlD2V/4FRQOE6Wt9W8NLroqlpH3Xp4G1a/Y4yvgxHFt cC+2YJ6ydxcbEbg5XRuBJXNtu5DZgdsTcFLNdQ== ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260228141156 20260221131156 40380 fpki.gov. vwLDuCnrXWZvaFR0E0gWZMf/XGvKeqTRk4EdlyT2hvX9dRkIDFdx2vQyybcKA0EONFCsnUeNz0Wg LYDcseNRVsLJcYmPJqz2ZORyzNyeDpU4/JpSn7AOVmrlhVLn2F91nFagEaGpyaT64+M/O0Iq5Fgv 3Lw5PAaV3nWZFB1mXSUG4DIUGDaTTmQMRMn4CZiN/HpCYR0qVMqqSjqgP0ACh9Olf2vHGehTZHk8 r9OTurH692RfvxJtKum9UWM+RgRE4VQe3LY6m9JI5+X0Bedhvm0OXqin6IIOzzVeP76LqjopMdcG pu4YdofwuxNb92LSZs9hjqqbYpmLD+BOpMPcjA== ) iir3lot54k8tq3efvcusfb0qrh8skgro.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 72e274f4fae7961d iir3lot54k8tq3efvcusfb0qrh8skgrp NS SOA RRSIG DNSKEY NSEC3PARAM ) iir3lot54k8tq3efvcusfb0qrh8skgro.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055834 20260223045834 6366 fpki.gov. Uhf8jjX0XWt17Lo7Ey3Y3yBvjOeOpXVguDF+dJQwvvN+bUcn3TcHTZFFlt39mY4wxd0gRJ2Tc3V7 VAAyp1UUAb9EwBjxC4gW3cMiIUDNrf+009NEd8j+7C29CZkIlxoCpqmOADG8E6geyq+JOu03v/W9 ZLPNpH+Ed7zg48ED04bzjHUfScrFfbQq13/4lw91VMgdBm6QGibbk4l1tNjoxeL86OvNpEjNs/nI /XemOFb2ouiYzmwPpvT98IQ/j8lE749DQFzc+NkL+A7t4rxPteFdm9JrRVb688Ycb2oGMLcgY3es /0KzhpN36ud9UxV7sUgFtmCx1SWn3t3glQWVNA== ) iir3lot54k8tq3efvcusfb0qrh8skgro.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055834 20260223045834 40380 fpki.gov. HCnqFI6Z3OQhkxjz4GcgXqn0yhEfApjkJlTcyoAOHHFTvspi0FD9MK66iTR7zLjC640Loc1vihim 3lXZqgD+ln9xIkbEQNDfbUB4scWyIqvB/RZ4bfXClHl6Ndtjww/Zpv9xKrgQC8sDS+20rCU6yHvL gM1OTIlggIAIq2v87s6HnOL5BOUlfSxVUREyxvtLvbHm3kudRUObL9NBMYWDVBTSY8vFw77O0+Uz ghN7h5B5lvhooWzB0pSb6a7+4kReX3ACoteVhJGKlcOtK66kJ/N7V2EbijaQZGi/vZmsCF8qwaj0 8QCfFcTQJaoFTGvrRXD+1IxC079tVwiplXqt4w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 3762 octets ;; HEADER SECTION ;; id = 35769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 86400 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2023092502 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260226235703 20260219225703 6366 fpki.gov. YV6PVKC8jNE6vhARejT0aGVrX/ErGxKJtdnimffu0TMjBEx/6TK1I9xeIwSFDiCTSKLbq9255Fpt 5rfnOC8cI4W8gysaEkvsEgyYT4NQn0KyEMumY0KaCIT+CuzqEdqJq1slqIkG/h8ddjKCm1zzF2lm 2fX/LyUgFDe7lKXHQz1HzvZvrYkJgWSIDnQTuJ8/UpEuOYqorM22OsH0uDcMRUAw5CpYglrfTaMK nwa2+AI3OM9LqiJV0QFIM5RXYCfddP+GR+gpfRQoFDH28iKjidsMc0lNOwEzxg0iEZTt0KdqmLTB tw535RjngtVr7iwhEPvpExjISo3K0qpILU5BUg== ) FPKI.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260228142251 20260221132251 40380 fpki.gov. UNO7szZ4dMxfPA9O76OT5LLOeWMyu26zRJpVBFRwcQKa0aiAMwdSoKaBSKefrg8NFvr95vfeNd9I E2NSzgnsbTfeIQHUOPiTL1yiVI3hdZYDlcarHOYNDcFYmpYXf8mXLR8GZsyQ3lqzqDtp8IJssItk pqjrKjJk3fHWOr749CfuJozGTl8eX9l16FECQrLwZ4SihGoD8p7j1PPYwM7aDs8K4Bs8EXKqDex+ uDX2sEX3m64uO6XYV0Pc+M/oR5L8Cjzglir7iIEecLpAK0rW2o2VunVzjSa42qNju/iFOmBVVYTd +YQEtuvY9IoBW6h3MHpVO63bcMKleFOkNc/vaQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 8 2 500 20260226231149 20260219221149 6366 fpki.gov. opKf67CCHsfapF+Tlz3VlbHo2m0DjFDadtkvDVJF4XS3SkafD5eO9n558qQa00fk6ayoIeL1qXyn 1BjxVPIFVMCyJwfFaq3A1asNydIGASkGJTqbp+/yOOamof3D1WiqsceN3KqN5d0Uv3WrI2d39w6M 0JwmqoJbyfkGa867St84obE/oTJtLF/OQ2ORigPxFXle/6qG95xl6kxx2Y2siHlhxsY6lPCyvGn4 xbUizYhnmgqG8ZIbBG1/5FSS1SQSQ/93fZFJ2pq8OXVFyK14NUvoEsN1KXNbUZfYSImjpQ+q4ad0 eQX2cBwmHqm8ipJUW4JSD0HqwwmnKAiFayU32w== ) FPKI.GOV. 500 IN RRSIG ( NS 8 2 500 20260228141205 20260221131205 40380 fpki.gov. BX7kyGPMxCAv5oGR6XYJ8GFuhSy6Gohj8DuwgkIeNEqzxrmiNiUsoWSSHXIaAY/WKFTfzXI8dtj/ ndR8mtaGBF+tb8MJ7n82LuKtyAvavFhpVg/SDUKQoUEW/0/KEsku04noa89J3QNrIZv5GjmHbZb1 OrLwFqQIU9CUp2xQKhtcRphaBVevQN8c3j+VgFlUVt4aBuJSPQmjqpNo5meu2V3r1On4b63magcu 3fJt6glKbMGWNbByvBae1zDFsd3oQH3G2QpaG3ipF7AFX9w3TijzHS89AW59a1e9xck5q0vr8lf3 Ku93BP8d1Tvtkv9Y8glFCzNgn9pQTRPRZb1mdQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN RRSIG ( A 8 3 86400 20260226231149 20260219221149 6366 fpki.gov. hucG8Z4ybOLIkiRQDvJ2MBAWYnO2PjL0zo0cB+/Sd+vdiTXbhMnOF1Ar3ba+m4WUGlezfbIqtL8u 4QlNgiDM+A3a2ud3GFCG8m2JsDVRO9/WY4tUXQtmWmyC305CHuWHjSpGITrmnYW9u5A4gHOTiVSJ z55+07+Ytgcy3bK9U7PUj6A2upVyKIxuPwMCuIvHm07wMpk7kfpfz643AzPRI79JtHTdW/DxFb/S Gx4yxqJUTAh/MKB7zwxs7fM5O79fzJDHgtXtFF9S+OeEMdrkrFcEeclMcA0XgHo1C1MbzXM+x4e1 LAzOrcb4VKlUKT9XrLMQnIdwgLmT7Z6nKdRIBw== ) dns1.FPKI.GOV. 86400 IN RRSIG ( A 8 3 86400 20260228141205 20260221131205 40380 fpki.gov. D/n5gTjz2M07tRq/wzTZ9/hjjBmO/ecirh6DGmBjG0bpHCFAQcbbLSaY87AHIGw9OqKS/DYO+M4/ xLmQa3Ai8lflqD9H0NFi5/ZO0FRs5u3v1wdKNVVeNGnn24Adpgw+LJElAogH8kXmiQLXTFzPaMr7 NV5vf8VaRkPfgA586pM9RS0ZgQSVYqdBb1Fm2RxqOgme9RA9xSNR+j3+HqX1064Lcc2vLVcqkoZd ltbAKWC+Q7D6mR72x8vrMgY3onzbXFz9bO3W4JEE1jAI0TiUdJWvZgCQJNaQ68EPxCULgKDGmoQV 8dv5e9pRtrrmTnbvTjj7xRFycXBx//T0DXpaFw== ) dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN RRSIG ( A 8 3 86400 20260226231149 20260219221149 6366 fpki.gov. gpxs7aFObfu6TbBJtHL0Vkw7/sGfR3zJ9v8HqD8IGDTvoctbSUJkt7iqUJN6wraFOFx1KBY1r1Ej FedsBvD6c5jXz4k0qCmbRsIjg8CIupkrAm1FAiTAL/IKt1i7KHYtRAh8uXkuucUD6U+IRw50zG5J 3hY+/J7tKGGdhd9vXN4wUZfo/09Zsj1rUYHzsuRQEw1tRoSm8fo4m4TwO/Xz97BxJdg3VYKg+9i2 uGKOHopJhXXK6d79lSAzan01GB6cPXhOaC/JlPXJk+ZU0dWECYrRnZQrNYJvdkyOsEhnk5luEsGK hsssauOwfziMxaYmr/SYeAYZWPuaD5N3n2Denw== ) dns2.FPKI.GOV. 86400 IN RRSIG ( A 8 3 86400 20260228141205 20260221131205 40380 fpki.gov. plOmbwMiONZ+sGtHBqsMHqKa4Qz8Z+RC56oHSGSJQ8fC4CQZ2jfTBtfDWP9JHRZBn5CPLlN1uwmM sTK51WE3hz3emw2xxqx7VRCMj1nWIvnQnv/dKa/y77W+T5UPR2LSSoQrPQbkuGd6n4zBpUVmYvow L8Dsm89mglm+1GTtfRUx0HwRBy6uQ6TAzGj9ZbNN8xlkN8awCQckw2i+YCeGUUO2/7cuu3WbhkJb 8n+vWlZuzgr0VfDXZk/iLsg7/J+9+1u7HusXCQLVuWaOqYGpOHL+1G/W/Rh1zMRBF25JBEAYiyff ffhy/PD0LfnbOMK2ZBcDyckragOaYkGsGMQLLQ== ) dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20260226231149 20260219221149 6366 fpki.gov. N9861tiqYhWRCvcN4G79KGbcxrff25xdN92DMwtVYzaqfpC4McOKYbRWRA2cCj3y/dbnQ0pHQdUu aasS2P9pun5EmRewDRO4NrJNkmd08rfzHrailTVdxHT4OtZW2I0Y/bLOkuYu9QuXvt4VI3txnQf8 8glJUA4TXMpPwS291cNfNCft4fgETgNWzpm+8nzo04wrgZLh+gBwYVYLKlPdTSifO0dp7GjFILAt 9cmbdii0nk7DteUNBORgjt5Hkpi1pJPNLMbPw0wJOgZDgaXHtZmp/yIcI/QUm7lcd8T1HEoGWLSK MRyWabfIz3BzxkkqeB8cnhpMa8GecuMiQ+U7Nw== ) dns1.FPKI.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20260228141205 20260221131205 40380 fpki.gov. xLqWxKtDxsWWPHhIzOeRFlFwh8Y13+CIUV5W7m2zcR0AvaZFAZboyR/S48lWvBBG9MqCCptPcyC+ V0yjW9DtxWAfPKZbzB3FRaOTA2URQ3/c4ONrjtR84CV11T4Y5oogzwAa80M1G945mOoeD8zJLdso KYYxlqhHYvhotlT2OL1DfYYTwLqpVa2EwqCj08TMrVWy+zgSRQuNU47wDhlDXf58Eiu7S4W96rwz DWwxB0H0t6EK11IuCWPkcRFdjw4UY5auGZPd4xM/ndzDG7NkORkBXyg+SApTgaub4Vy4GC7BL4AV 8x2WDZQz4mYY+aoIXgj9jl7nkjcJnqTwpRQM4w== ) dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20260226231149 20260219221149 6366 fpki.gov. b/JcWo6OgLSskd9LDH8hwf7HTacTrNopWCaWjdlPT/kAgFygFhPXfUZreOWKs0v4yS08hhZblytH E29/Iqy2EhJxF90HBWqUcrZnqiBcXKAX/hYvu+VV4lYYalw2M+U5BU4XQCOLhSMhLT/qPcV/myVK 2kx6aFtlUWrWw4XXKf/mCYQFUCFgIBkgYLVfv+fNOL1q98dG7AGpnrg/urqLoPOunffCDk5iswmh E52llPhMfJIF5JXB3WDVD6DFjN1uOSvgN7hvk/Nz+d1RvtSeGbYC4Pu9LgH2rx/ajjWTtSym0UjZ gXTeQ/eQZUFWweDgw/C08vxmgZOMYm+g6LVSFw== ) dns2.FPKI.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20260228141205 20260221131205 40380 fpki.gov. e1kX4n+G7sPFphJg8y6sVCEI+nDelfgHM+1t8RVjuNUBbsu+vapYoQDBVWehsvi81dRIfc4eP9aL DdhEs1djSbe//hODpbyb8h9gniJKuDU8YSKu0D7lGFBXO3GGJ2X6upC65SOZZn8+8PFdY48M+jd3 m3p3g356CeGTqVL0mXK+CpyY5PwSCQfM8zikhjpxTTljUYV+54e7gmmOQY2+S8VVrx8yXKX1W0mn Xb+uL/+JJAJi7PlbunM8n4a4PBfjTKEuyUrrlwRFVqE7JI3S0wqvEKhX+Z5yoaSQR0sDKJFXJF8L NX8fgXwG5sLOBvJu74RkssqtcBgJl3rH+XxDEw== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Timeout querying dns2.FPKI.GOV/199.167.93.100 for FPKI.GOV/A
	All Queries to dns2.FPKI.GOV for FPKI.GOV/A timed out or failed
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260227000604 20260219230604 6366 fpki.gov. W4pWJArszHms4QdLe5Ogn562QDUhgoFZjeHXGFUHptwD1EKeD9P3bFD51KEQ6v1KSiwlkjzU9chR CT392ZxmFjZs6DS468RkMwyMSiB+1SVGeWEx7o5vA+5MNH2SeoiNaGiCl21MIaoq3W9T6hExtGcn ySdQh7Ry/LtCfi8IHGgbkuFHNxc/SQI5HY8paGxlRWim2ANizoUU5jKY/YFDxfqcXMoE3QoMMr3M p78fOfdHVT4mmg2qLse0ByujBla3kbvJiDlD2V/4FRQOE6Wt9W8NLroqlpH3Xp4G1a/Y4yvgxHFt cC+2YJ6ydxcbEbg5XRuBJXNtu5DZgdsTcFLNdQ== )`
	`FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260228141156 20260221131156 40380 fpki.gov. vwLDuCnrXWZvaFR0E0gWZMf/XGvKeqTRk4EdlyT2hvX9dRkIDFdx2vQyybcKA0EONFCsnUeNz0Wg LYDcseNRVsLJcYmPJqz2ZORyzNyeDpU4/JpSn7AOVmrlhVLn2F91nFagEaGpyaT64+M/O0Iq5Fgv 3Lw5PAaV3nWZFB1mXSUG4DIUGDaTTmQMRMn4CZiN/HpCYR0qVMqqSjqgP0ACh9Olf2vHGehTZHk8 r9OTurH692RfvxJtKum9UWM+RgRE4VQe3LY6m9JI5+X0Bedhvm0OXqin6IIOzzVeP76LqjopMdcG pu4YdofwuxNb92LSZs9hjqqbYpmLD+BOpMPcjA== )`
	RRSIG=6366 and DNSKEY=6366 verifies the SOA RRset
	RRSIG=40380 and DNSKEY=40380 verifies the SOA RRset

FPKI.GOV

	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1366 octets ;; HEADER SECTION ;; id = 22875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 3600 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2023092502 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260226231139 20260219221139 6366 fpki.gov. g/ayOF5C0EvcoMKwqsbXhT7W/6iSG3pe/jCSkkG34FOAhwznMJvOA091QHwIg+4v6+3raaL61+gR ajGunPnQBEnIR6oU6hmAMB5VRcN9Ee1mfj5sNxsDAjmTjcpsiZewL32KuCMEjhkU1uYhg39HTU2s R3ByVnPEcYXq/ZKgvIomAXT/haudyL+U0eEdFn6dVoxRH8nBHSwv1AEPKa5uhhOSZy+HDwlbmYtN 21Wlt1dEkr+VxYLreMEvAuyZ1uzcxItzsK7KBLciVY8X3NhyfF6JVm0qA6Qqtql0E+h2HfSYmX8f xh0Ey1TfYbTyB1mIhWldJPRUyu4f5VyiXcqD5g== ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260228141206 20260221131206 40380 fpki.gov. zYWzS/Zx3/xopqDpAtGvOsSJ/ifqtt5YWqNMszP4kulDo6NSDTH8YiZEO+Ch3n78KEAW72u0Fw9E S/p4kFBeL6dIDEY4IVctMmRHMqK4QpRVgHLYWqDlIy6d4vn5VuKIANlixo+56jnAlpzzwQb35COw JE6yXyw2Dt+THivZ3P7mrOkQJek8kj0y2oYpenjZoYW2sP8ecBRems4xiyA06AtNUXKn1q+SxJJ/ VLrr5oSXBC/uVjZ8iA3lKjeRw1zVnoe8fnaIfOtFm5hdjSTAE/K0b8mJnvkYx4lsIoz1DXrRqxEB OF5Hc47neT3HmkR/D7sKFeaGK9SJHQ/cFwJ0XA== ) 4fpmugg733bs2stm9ul5sdnghg79ogt3.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 de98b8488a66d682 4fpmugg733bs2stm9ul5sdnghg79ogt4 NS SOA RRSIG DNSKEY NSEC3PARAM ) 4fpmugg733bs2stm9ul5sdnghg79ogt3.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055839 20260223045839 6366 fpki.gov. USQzfR1Ikkavv3Mfc39rD7zjlIqkvGgRJY9pCdk1kopd+Y6LcxOU1YXBkV9jI11aUitsp8EOLJ33 xV+j1ekrYtHQDjCmQaLSm14xrahxwgHh/dhnv/7sbMAJa8IVnjVe2BdOC9O0MznJgM5NDoJcITbz u/ZDgbL2OO9XOeHueixrptmq0vQBHla5UWwmAPgJH0Viimbod0sna+AGjsbOfWvYmLDTLWJLztIj 0xknNnNKx9q78bLw1Pqs9p+u5GidwzpJ41L7Hd/rOYsHfGOMYLX5+wT0853p14gN3hU392YzfTI1 XCBZmbgeU3zArOp6KHirokiGfZxXgTQQfQUKyQ== ) 4fpmugg733bs2stm9ul5sdnghg79ogt3.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055839 20260223045839 40380 fpki.gov. nauFDRWZPIF4UYW1C3RvfN93mdW5abmF2NJBx51LyHmzpMFaQeZKJoOwgJb/HFANj6nGZdK0NuhT kKiVu6X35p5HjJDg9oHKeGA5pzYBi8uGR/XxobJxeXIpmvOISXFzxSksMC3RZKjam3Yqc41jKqLq VAEgFESdY3V/dq/kZ6S8ugcxyoZ5lVFUC+Og1/+aIsn3Lw6f4OR7dAAqhoH8YT+2mED1KQx5Ab4E A/SmpvW5vsENHv8378Uf9pa50fXnIOod9HI9R+RmHweIEWnBK7d4MjB9cBrdKcSpeIiouSbKImve RjSIfVoZdqgLZynXGTjhGmGHTHyJnVrozD+91w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Response received from [199.167.92.100] 1366 octets ;; HEADER SECTION ;; id = 54427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 3600 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2023092502 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260226231222 20260219221222 6366 fpki.gov. CTA+3SBveggG8WPsg2nOSfx9oC68ig3oBSb6LyOznMaNNDqDNUhBhGnjc8hNa/+suYjkho82swUc 83/NfBLJXP47CkU7Evifbxw7GsFwEI1AFx3UJVCLtOiYjlBxNPGief1cZjjZ2mOMaVHEZuVGDhoE 3aaJRBZe8/ZWed5lyVNHhmG26FJp3pej8ujd93d7nqgJqo+KKEOQpUV33hZ9deHwcL1bfC+zI4rQ A5/Zt0YmBJCWvZJVMMhgd/oNySFl2BD9DpjsfqojsOwNnXOfN8EY6/WmCqNQo7+o9ZLWeuo3Dt9S lQyiBUuxRpyGJtniW+fK53IbyArLGCSRPsCvcA== ) FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260228141206 20260221131206 40380 fpki.gov. zYWzS/Zx3/xopqDpAtGvOsSJ/ifqtt5YWqNMszP4kulDo6NSDTH8YiZEO+Ch3n78KEAW72u0Fw9E S/p4kFBeL6dIDEY4IVctMmRHMqK4QpRVgHLYWqDlIy6d4vn5VuKIANlixo+56jnAlpzzwQb35COw JE6yXyw2Dt+THivZ3P7mrOkQJek8kj0y2oYpenjZoYW2sP8ecBRems4xiyA06AtNUXKn1q+SxJJ/ VLrr5oSXBC/uVjZ8iA3lKjeRw1zVnoe8fnaIfOtFm5hdjSTAE/K0b8mJnvkYx4lsIoz1DXrRqxEB OF5Hc47neT3HmkR/D7sKFeaGK9SJHQ/cFwJ0XA== ) b3ohjfk6fust1s6l136irfq8mfpkuls4.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 0874a676eb4de533 b3ohjfk6fust1s6l136irfq8mfpkuls5 NS SOA RRSIG DNSKEY NSEC3PARAM ) b3ohjfk6fust1s6l136irfq8mfpkuls4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055839 20260223045839 6366 fpki.gov. JfG0P9Uhzv2HjRiiHOeS6ButsZZXWzTEJ+/kmf9O3YR5O6fTj2Uk608UPJII2VfJ/OLDoJ5J/m+i taKpvQJngwi7ENHyl+ys8zS+dnC5loMqz4EOSPTVmB3OR368XtUBayI6cd+1ezALtR8f5yPgq924 USpXzmNL3NbswfoqQlTbJeQ5l1nfOvdL5DQj0jCeYywR5ZYq2GstEM4CbkBNAjiAAAn6weZwjUZ6 t3m/11HJOnI/7FXxRPTyMIpQcBcbXr/0bgKqLjJn3RgBDge9j3qFYqFgqyEf1B4R3ZSf7Fk6+qI5 KzskEhQhVKDhe6mtX7VOXC8NewYx2tmzOMwLzg== ) b3ohjfk6fust1s6l136irfq8mfpkuls4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 8 3 3600 20260302055839 20260223045839 40380 fpki.gov. Wnkxngm1oStc8hYjtv06ANii/b7Y6bzNEd1mYWHzOeuk9HXBhMIOzI1okXt8zQTpxxypmixWwtac niFjohDWzGo96mm7l3ftVvjPAE0t5Vuear6jNyzaH631V0G/s2OfkKZToQYpktuF3bLcpyg0KsvB l0F4E925sXJUOu2Q+TZoxL3VNnvHznsR0vJGKjGk3WvSAMP0snpaHD4MPecmD2XJjD/CAbDnLDuv ntXuj00XXBj5eGWYKEf3JGLj6vad2HU8NcNbLztFJdouHIFxP7xfxrPrZt4S9mrBmgOJbCV853bt lY1mNTlz2psM9AJqxh2Rlw+jn/i6JAe57zd9Yg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260226231139 20260219221139 6366 fpki.gov. g/ayOF5C0EvcoMKwqsbXhT7W/6iSG3pe/jCSkkG34FOAhwznMJvOA091QHwIg+4v6+3raaL61+gR ajGunPnQBEnIR6oU6hmAMB5VRcN9Ee1mfj5sNxsDAjmTjcpsiZewL32KuCMEjhkU1uYhg39HTU2s R3ByVnPEcYXq/ZKgvIomAXT/haudyL+U0eEdFn6dVoxRH8nBHSwv1AEPKa5uhhOSZy+HDwlbmYtN 21Wlt1dEkr+VxYLreMEvAuyZ1uzcxItzsK7KBLciVY8X3NhyfF6JVm0qA6Qqtql0E+h2HfSYmX8f xh0Ey1TfYbTyB1mIhWldJPRUyu4f5VyiXcqD5g== )`
	`FPKI.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20260228141206 20260221131206 40380 fpki.gov. zYWzS/Zx3/xopqDpAtGvOsSJ/ifqtt5YWqNMszP4kulDo6NSDTH8YiZEO+Ch3n78KEAW72u0Fw9E S/p4kFBeL6dIDEY4IVctMmRHMqK4QpRVgHLYWqDlIy6d4vn5VuKIANlixo+56jnAlpzzwQb35COw JE6yXyw2Dt+THivZ3P7mrOkQJek8kj0y2oYpenjZoYW2sP8ecBRems4xiyA06AtNUXKn1q+SxJJ/ VLrr5oSXBC/uVjZ8iA3lKjeRw1zVnoe8fnaIfOtFm5hdjSTAE/K0b8mJnvkYx4lsIoz1DXrRqxEB OF5Hc47neT3HmkR/D7sKFeaGK9SJHQ/cFwJ0XA== )`
	RRSIG=6366 and DNSKEY=6366 verifies the SOA RRset
	RRSIG=40380 and DNSKEY=40380 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: