DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2021-05-12 06:12:50 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 55800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to g.root-servers.net for FPKI.GOV/A
	Received 630 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (630 bytes) ;; HEADER SECTION ;; id = 40306 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210525050000 20210512040000 14631 . YrvkkX1y2fW/loQ0IEX1WtNAXfQYe+8zesknfk0yCRwiWBG2O9j/5ouOlTEk+pZTOnq2OGBhoNEG +NGJ+H/d3G+T7h8uU09WtX9Hnchzo5LnD4dmcsopzTclFBr/2dJJ8We/VraJkrfTRnOsfxxMmLcb EDM5ZRmyXlwjbBXX7X11i6+hTRGdq+9G9HXo9dYAOoIR7u4bmQWd18A5WQajzO7gHFv8DuLzGrpe FOc/X4xjoGYwNwdlUiFvpjZAywLcmV033v9Adm8TH2nokRftcYtodzfRWAhlcPX2aAJrjl+2vgRG lhP/UdIZPq1xrKJqMZhk1jeSZnuSxYl+gHrsqw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (622 bytes) ;; HEADER SECTION ;; id = 26751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210525050000 20210512040000 14631 . YrvkkX1y2fW/loQ0IEX1WtNAXfQYe+8zesknfk0yCRwiWBG2O9j/5ouOlTEk+pZTOnq2OGBhoNEG +NGJ+H/d3G+T7h8uU09WtX9Hnchzo5LnD4dmcsopzTclFBr/2dJJ8We/VraJkrfTRnOsfxxMmLcb EDM5ZRmyXlwjbBXX7X11i6+hTRGdq+9G9HXo9dYAOoIR7u4bmQWd18A5WQajzO7gHFv8DuLzGrpe FOc/X4xjoGYwNwdlUiFvpjZAywLcmV033v9Adm8TH2nokRftcYtodzfRWAhlcPX2aAJrjl+2vgRG lhP/UdIZPq1xrKJqMZhk1jeSZnuSxYl+gHrsqw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 370 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (370 bytes) ;; HEADER SECTION ;; id = 5854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210525050000 20210512040000 14631 . YrvkkX1y2fW/loQ0IEX1WtNAXfQYe+8zesknfk0yCRwiWBG2O9j/5ouOlTEk+pZTOnq2OGBhoNEG +NGJ+H/d3G+T7h8uU09WtX9Hnchzo5LnD4dmcsopzTclFBr/2dJJ8We/VraJkrfTRnOsfxxMmLcb EDM5ZRmyXlwjbBXX7X11i6+hTRGdq+9G9HXo9dYAOoIR7u4bmQWd18A5WQajzO7gHFv8DuLzGrpe FOc/X4xjoGYwNwdlUiFvpjZAywLcmV033v9Adm8TH2nokRftcYtodzfRWAhlcPX2aAJrjl+2vgRG lhP/UdIZPq1xrKJqMZhk1jeSZnuSxYl+gHrsqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210525050000 20210512040000 14631 . YrvkkX1y2fW/loQ0IEX1WtNAXfQYe+8zesknfk0yCRwiWBG2O9j/5ouOlTEk+pZTOnq2OGBhoNEG +NGJ+H/d3G+T7h8uU09WtX9Hnchzo5LnD4dmcsopzTclFBr/2dJJ8We/VraJkrfTRnOsfxxMmLcb EDM5ZRmyXlwjbBXX7X11i6+hTRGdq+9G9HXo9dYAOoIR7u4bmQWd18A5WQajzO7gHFv8DuLzGrpe FOc/X4xjoGYwNwdlUiFvpjZAywLcmV033v9Adm8TH2nokRftcYtodzfRWAhlcPX2aAJrjl+2vgRG lhP/UdIZPq1xrKJqMZhk1jeSZnuSxYl+gHrsqw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for FPKI.GOV/A
	Received 526 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (526 bytes) ;; HEADER SECTION ;; id = 24997 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210519051009 20210512051009 48498 gov. lGqOvub5tj5qmRGAwUUstzTRfxZ1sYAnhjQJrSnjU/jz8P3Vmj7iwb+G29fGMmFXiEot6zNaYxn9 eU7NEWIDEFRbsTJCnebKHwOKudB6tmqSp8m8DR6xeUuruWHyZLJ9z6vgr7mkNz5isLhvt+V9XSWX btslylJfuulTAezXZqB7a/ubTx3WBa5qJ3Es57+RWKH+jL1OYTjSibDp+RETpw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for FPKI.GOV/DNSKEY
	Received 526 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (526 bytes) ;; HEADER SECTION ;; id = 20101 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210519051009 20210512051009 48498 gov. lGqOvub5tj5qmRGAwUUstzTRfxZ1sYAnhjQJrSnjU/jz8P3Vmj7iwb+G29fGMmFXiEot6zNaYxn9 eU7NEWIDEFRbsTJCnebKHwOKudB6tmqSp8m8DR6xeUuruWHyZLJ9z6vgr7mkNz5isLhvt+V9XSWX btslylJfuulTAezXZqB7a/ubTx3WBa5qJ3Es57+RWKH+jL1OYTjSibDp+RETpw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to a.gov-servers.net for FPKI.GOV/DS
	Received 400 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (400 bytes) ;; HEADER SECTION ;; id = 32168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 ) FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210519051009 20210512051009 48498 gov. lGqOvub5tj5qmRGAwUUstzTRfxZ1sYAnhjQJrSnjU/jz8P3Vmj7iwb+G29fGMmFXiEot6zNaYxn9 eU7NEWIDEFRbsTJCnebKHwOKudB6tmqSp8m8DR6xeUuruWHyZLJ9z6vgr7mkNz5isLhvt+V9XSWX btslylJfuulTAezXZqB7a/ubTx3WBa5qJ3Es57+RWKH+jL1OYTjSibDp+RETpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=53169/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=5730/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=5730/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=53169/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210519051009 20210512051009 48498 gov. lGqOvub5tj5qmRGAwUUstzTRfxZ1sYAnhjQJrSnjU/jz8P3Vmj7iwb+G29fGMmFXiEot6zNaYxn9 eU7NEWIDEFRbsTJCnebKHwOKudB6tmqSp8m8DR6xeUuruWHyZLJ9z6vgr7mkNz5isLhvt+V9XSWX btslylJfuulTAezXZqB7a/ubTx3WBa5qJ3Es57+RWKH+jL1OYTjSibDp+RETpw== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=53169/SHA-256 is now in the chain-of-trust
	DS=5730/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS ( 53169 7 2 a51eb878314c65c94726ef86edcf448d2c8e75c27491aaeab797a4046462b1f3 )`
	`FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1`
	`FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d )`
	`FPKI.GOV. 3600 IN DS 53169 7 1 72c8145f0cd63e776d859e4e700b239d071d6c6f`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Timeout querying dns1.FPKI.GOV/199.167.92.100 for FPKI.GOV/DNSKEY
	All Queries to dns1.FPKI.GOV for FPKI.GOV/DNSKEY timed out or failed
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 40530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZa0tli3cfksD8pKd6NwpDKFB4bEiaamd/UjJnSiSlpAbuUrRyq3YLWIieetgu+Ekei7fwGk Mj1gtLad8dcngdxsZ3K927F+ZdP9Co+Zov9ZsqzWdSOhTrvLnf94OYT3tAlQntrDg0Gb5nY6Jk6A fxe6gXY24wHuf5z5H3dKjxEZ7K4p9jnGqLAVGtFaya63daXfAZKku16O7T+zK0H4WtBfa8U3jiud SAYmxmrY3Wsqmky+/MGxOKyXnV2/UFIFwunavyJ1owhFeCRx/LxpbOEI7Lc8Qx13F82vn/yH/MHE lH/b1wOnxzP7A0wcVCQUsQYoSYb1buI4dVsGHLll6G0= ) ; Key ID = 53169 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAcIZiK/8n3w36qliNoVTfO5Z5wGFZJ2RU7lbOBQGCsOBpnwzLJNKfBTUi8xv9ANn5+d6aTo8 GsulAuNgZbeTqBotpiJaRQhpm7aj8xECxJ+MRUG9Ev69CU9daCSVAocr5q0iJhZiM/Cyfu5VmWQu qQcsmunRUSDY6+X6opyUml/q4PBJjwQSq0lw/xbaAlhEAcMk0/5oajWdTstqzg0TP5wKFlFJdYMJ d+bX6Te18ZSVpur+yEizGmqgxbfhyb/s38N5jovf+Bnuvc6or3CVkKenswHfBVoitUZ0YZvabcdK rKeT9eqaOPWZ6gu9/E3anWb42hcYSxFmtsVjZ1YkqIc= ) ; Key ID = 5730 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa9Bp/ZM6+CqRW+yVUWVkVTILfMKsVgvkmhgZHC7qDr29HbdLhegqXru1nGZWCGuBzxxsXLD HYubv20gaImtjp4egcDYPDewh1w0+sSbRUTLYNeIBXg4wAs/Kmsore1jcD3Y+FLicM2dKJstkdiR myrV/U7O10qemkicR+pET8mdI/Uddpu0G6TgiL8LSBh0o8nD1c1BXCDcgLSbtdHFob698O7zUgA7 1XL4JwPm2k+JMAH+K5IpSQvHnZ4OtboLVVnh+PYGpCi+dtzt6XIXkEfcK3KucsoOgjpPQmpCpVQw 8tbMVd3oFHF8dRttzwWXoZwqXdy1Jpqj6pxxM/qM42M= ) ; Key ID = 54317 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa+OzDq71+/CpPSa6Z2jHWt6xTojwbbm9YyLKtEoTu+15ldgvbLOTfGB8A4QVH89YXzAWImz POAdO7YnbEeIsat+NI0V38WE/MDwgQSptHq5I6448MfalSu6TlqK29MUX9W0cdtTFsVa8XAKYzLd AKBzkwyTx2BmU1Cl7Oehepy2wZxRfRM6XyDX/4gpB3ph4APc8z+SSMK52ATpsBJbVJzkgSiX3GOa HJ8W5N1D/O5e/NqeRZnPzJLi6lWWiLsqdq6Yiw+OQ7tENvvUurXcro83Qxjtwxry3vHmqMr1nxsf MwDRTazumQa+IMT6Zffdu1y2O0VylDQv1/OUw61+kK8= ) ; Key ID = 23957 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 53169 fpki.gov. AXLstCswmaBZTbfI+TocVIPeevYwX1DR4OWQozZ/8J40aLPYYh2Twkqpk6yQVOCzSVC5Z+BZT2Mm kgNMg2o/I2zFRAnYN92S66oN6FuqOS3Z9L+DfT3nd8PL27YgH6uRCiE/snAyjjugrZlx43/a2pP+ wPqwIkMTJ8rkz/107IdISssF5tzgf6ia51LgD7ohiUfXFtiFdL5NkPnsBrDyMiOg9nN3UGQaESsD qmjAQvHOYh8bFxtLILmT5ICGovhIS71/f/bbyk1QCRDLJxjnk9YQ/chxOXpjOUlyy8vlEIxYH5sw ENexCyAkl3HRiOoShWB4ngyP8OKNlcJ3AJJ7Vg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 5730 fpki.gov. EhaHFeP6IFDf9gSQdZ+iTESpjb13ejsqTs74BD5pxR9hqjRdtyPuxdSFvF13HqXSEFHENhfEBwSo EI+9QGAij8j5cDWxuiuzs5VzA3m6PLfo/ZxuJk57248j35xl2lE3mzhKVroUSRMraeGmOUaraLK8 MKVD5wrjRcr76+hI0osrpEMjLYxnJU1qoZw0og0SvwUiIlQHCNrsszKPEgiYSfb6Qzf4AuJKqBRn BUMzcSr1wpbaBTH5WhhOr9+KvyTpWrusoIm6weslyC3sGmEbka+egbSGCxqEuMhmR5Bpo1G1eQpx 9X6ZAJ7yp0JpTnUJKVvfGB7tJBlRbSQHsHipqA== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 54317 fpki.gov. fhlLIGN/vNKaIqJgVeLcnDKj0fDPEuCpjtzG8qFBSM21YZ5HlOUnqr7aM+GA6Do1q86JUWfcJA7C nuT8IKJend8cN6Eluf2akndSdeZbfld5t3V6tgMdh6k3kgiT8cb4IZaYBz2uD1NQnjXCIz3cj+Qv FCnL4SH3bC4YCSFL9aj8KcYhHGLT7FwsRXWoNTKOZ7jqjRDFlJO8YGvjmsRhEDfEiKUz5qkA33DT e3hrIPeW4+44AZjMbptoi1IB1whALm35T7ycR9yxmiP0EYwbRzl4Q51WWuIlSbv7YoJZmM9Ma8pY Jd8Zn/ulHaUGMZzF16MyML9SWSuoEhVdVtTM4Q== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 23957 fpki.gov. rqhOFVA6eTUYYgBUSWdf6MJs86UzXfjkh9N26Rha3iQA5QMmGR37wBxeeBNrQvgU3K3lqfbWKCkh 761PjOka3ERFdHzTtr20VS1gIardMBozn4GCmknacUtXl5gfmdbCOWJTfrWU1k/7Pd0x+REpfn69 yZznAE1Z4rc4GwQ6I0hziuogxKcDsrCARVqkH6MJHGzMVYaoUsOlFqMbJOpjkOgJwsJy7z8E0OoY BABTOKzc3k2Vmc0DBkuwghpuJdixg5GgvEyTvR2TjxEd7kdl/AK70WWauitpgVE+L9yvrOoCUUTZ fc6K02GjNyBaFZFvOTbzZXiInV5TUnH+Cu961Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZa0tli3cfksD8pKd6NwpDKFB4bEiaamd/UjJnSiSlpAbuUrRyq3YLWIieetgu+Ekei7fwGk Mj1gtLad8dcngdxsZ3K927F+ZdP9Co+Zov9ZsqzWdSOhTrvLnf94OYT3tAlQntrDg0Gb5nY6Jk6A fxe6gXY24wHuf5z5H3dKjxEZ7K4p9jnGqLAVGtFaya63daXfAZKku16O7T+zK0H4WtBfa8U3jiud SAYmxmrY3Wsqmky+/MGxOKyXnV2/UFIFwunavyJ1owhFeCRx/LxpbOEI7Lc8Qx13F82vn/yH/MHE lH/b1wOnxzP7A0wcVCQUsQYoSYb1buI4dVsGHLll6G0= ) ; Key ID = 53169`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAcIZiK/8n3w36qliNoVTfO5Z5wGFZJ2RU7lbOBQGCsOBpnwzLJNKfBTUi8xv9ANn5+d6aTo8 GsulAuNgZbeTqBotpiJaRQhpm7aj8xECxJ+MRUG9Ev69CU9daCSVAocr5q0iJhZiM/Cyfu5VmWQu qQcsmunRUSDY6+X6opyUml/q4PBJjwQSq0lw/xbaAlhEAcMk0/5oajWdTstqzg0TP5wKFlFJdYMJ d+bX6Te18ZSVpur+yEizGmqgxbfhyb/s38N5jovf+Bnuvc6or3CVkKenswHfBVoitUZ0YZvabcdK rKeT9eqaOPWZ6gu9/E3anWb42hcYSxFmtsVjZ1YkqIc= ) ; Key ID = 5730`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa9Bp/ZM6+CqRW+yVUWVkVTILfMKsVgvkmhgZHC7qDr29HbdLhegqXru1nGZWCGuBzxxsXLD HYubv20gaImtjp4egcDYPDewh1w0+sSbRUTLYNeIBXg4wAs/Kmsore1jcD3Y+FLicM2dKJstkdiR myrV/U7O10qemkicR+pET8mdI/Uddpu0G6TgiL8LSBh0o8nD1c1BXCDcgLSbtdHFob698O7zUgA7 1XL4JwPm2k+JMAH+K5IpSQvHnZ4OtboLVVnh+PYGpCi+dtzt6XIXkEfcK3KucsoOgjpPQmpCpVQw 8tbMVd3oFHF8dRttzwWXoZwqXdy1Jpqj6pxxM/qM42M= ) ; Key ID = 54317`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa+OzDq71+/CpPSa6Z2jHWt6xTojwbbm9YyLKtEoTu+15ldgvbLOTfGB8A4QVH89YXzAWImz POAdO7YnbEeIsat+NI0V38WE/MDwgQSptHq5I6448MfalSu6TlqK29MUX9W0cdtTFsVa8XAKYzLd AKBzkwyTx2BmU1Cl7Oehepy2wZxRfRM6XyDX/4gpB3ph4APc8z+SSMK52ATpsBJbVJzkgSiX3GOa HJ8W5N1D/O5e/NqeRZnPzJLi6lWWiLsqdq6Yiw+OQ7tENvvUurXcro83Qxjtwxry3vHmqMr1nxsf MwDRTazumQa+IMT6Zffdu1y2O0VylDQv1/OUw61+kK8= ) ; Key ID = 23957`
	DNSKEY=53169/SEP is now in the chain-of-trust
	DS=53169/SHA-256 verifies DNSKEY=53169/SEP
	DS=53169/SHA-1 verifies DNSKEY=53169/SEP
	DNSKEY=5730/SEP is now in the chain-of-trust
	DS=5730/SHA-1 verifies DNSKEY=5730/SEP
	DS=5730/SHA-256 verifies DNSKEY=5730/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 53169 fpki.gov. AXLstCswmaBZTbfI+TocVIPeevYwX1DR4OWQozZ/8J40aLPYYh2Twkqpk6yQVOCzSVC5Z+BZT2Mm kgNMg2o/I2zFRAnYN92S66oN6FuqOS3Z9L+DfT3nd8PL27YgH6uRCiE/snAyjjugrZlx43/a2pP+ wPqwIkMTJ8rkz/107IdISssF5tzgf6ia51LgD7ohiUfXFtiFdL5NkPnsBrDyMiOg9nN3UGQaESsD qmjAQvHOYh8bFxtLILmT5ICGovhIS71/f/bbyk1QCRDLJxjnk9YQ/chxOXpjOUlyy8vlEIxYH5sw ENexCyAkl3HRiOoShWB4ngyP8OKNlcJ3AJJ7Vg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 5730 fpki.gov. EhaHFeP6IFDf9gSQdZ+iTESpjb13ejsqTs74BD5pxR9hqjRdtyPuxdSFvF13HqXSEFHENhfEBwSo EI+9QGAij8j5cDWxuiuzs5VzA3m6PLfo/ZxuJk57248j35xl2lE3mzhKVroUSRMraeGmOUaraLK8 MKVD5wrjRcr76+hI0osrpEMjLYxnJU1qoZw0og0SvwUiIlQHCNrsszKPEgiYSfb6Qzf4AuJKqBRn BUMzcSr1wpbaBTH5WhhOr9+KvyTpWrusoIm6weslyC3sGmEbka+egbSGCxqEuMhmR5Bpo1G1eQpx 9X6ZAJ7yp0JpTnUJKVvfGB7tJBlRbSQHsHipqA== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 54317 fpki.gov. fhlLIGN/vNKaIqJgVeLcnDKj0fDPEuCpjtzG8qFBSM21YZ5HlOUnqr7aM+GA6Do1q86JUWfcJA7C nuT8IKJend8cN6Eluf2akndSdeZbfld5t3V6tgMdh6k3kgiT8cb4IZaYBz2uD1NQnjXCIz3cj+Qv FCnL4SH3bC4YCSFL9aj8KcYhHGLT7FwsRXWoNTKOZ7jqjRDFlJO8YGvjmsRhEDfEiKUz5qkA33DT e3hrIPeW4+44AZjMbptoi1IB1whALm35T7ycR9yxmiP0EYwbRzl4Q51WWuIlSbv7YoJZmM9Ma8pY Jd8Zn/ulHaUGMZzF16MyML9SWSuoEhVdVtTM4Q== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210518065159 20210511065159 23957 fpki.gov. rqhOFVA6eTUYYgBUSWdf6MJs86UzXfjkh9N26Rha3iQA5QMmGR37wBxeeBNrQvgU3K3lqfbWKCkh 761PjOka3ERFdHzTtr20VS1gIardMBozn4GCmknacUtXl5gfmdbCOWJTfrWU1k/7Pd0x+REpfn69 yZznAE1Z4rc4GwQ6I0hziuogxKcDsrCARVqkH6MJHGzMVYaoUsOlFqMbJOpjkOgJwsJy7z8E0OoY BABTOKzc3k2Vmc0DBkuwghpuJdixg5GgvEyTvR2TjxEd7kdl/AK70WWauitpgVE+L9yvrOoCUUTZ fc6K02GjNyBaFZFvOTbzZXiInV5TUnH+Cu961Q== )`
	RRSIG=53169 and DNSKEY=53169/SEP verifies the DNSKEY RRset
	RRSIG=5730 and DNSKEY=5730/SEP verifies the DNSKEY RRset
	RRSIG=54317 and DNSKEY=54317 verifies the DNSKEY RRset
	RRSIG=23957 and DNSKEY=23957 verifies the DNSKEY RRset
	DNSKEY=54317 is now in the chain-of-trust
	DNSKEY=23957 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 19249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210517065218 20210510065218 54317 fpki.gov. cqCMpxUZC1/dAUm2yOnu4hkBYBNxcBffFYiZD8HE0TNReFBAhzFEFaVTMG2+9BpTMB66ZKOMR0xH JMTZbyOEOC4KIGUKm3Db4hR+IzC5PN6C7ywfnad9TKyvkF1+qzm4ZOH7M+G8DvSkeD30rsbek5s2 WM7oR0FoIIjBXnVIQdYkoTRXDY5i0vKq+fBbQUe2N5pVbYtvE5LA8Z1Tc212NwEa7CzesxtfPrDQ VNogwChSwUzjbvYT5c8Lilb18nxDLr6narYmSB95VUN0pAH5w4qjiLJYX1FMe/rd1JRNuBiLUtyY NepI1Zu/QV/kP+VoZw9g9Mpg5vTAIcLwQ01bhg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210518065203 20210511065203 23957 fpki.gov. G6zYMP4pJW4Fgv5TV5gOTzjjmewNGpFRBS/QT4YDxojWmHBn+uovsbPHxqSpDfNv+I5btYNGrKSR t37NF3UeLEhRWGcBnM54VJwPFqCpO2Nw5aZ1dA5QGV+3s9rpl4WdCZeGatyrmnWpTS9liGjd9aBi J0NWdPlfbmJVNImx2cLGK4cdhHL7zu/GFpfdS/qmU7NfgIHOMJIRovTs6DRmfFcCb+7SY2mhZ+sr 6K5Y0cIXM5yw7caGo4lSYXQbCy8p4ehuUlq8PxPm0tYlz1ijjcuAZOHP1f4W12JMdi4UW3JL1gfp 5OXf43K7HJwhLrdEjZUO+UaXxNfHhMusYWiVhA== ) hlctadr4p3enn9408lp4ruioqdcjjhk4.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 6a6343507ee7ca20 hlctadr4p3enn9408lp4ruioqdcjjhk5 NS SOA RRSIG DNSKEY NSEC3PARAM ) hlctadr4p3enn9408lp4ruioqdcjjhk4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20210518203610 20210511203610 54317 fpki.gov. MMjY3VpDs6LFyXwVCP9TguusLHeWUX7V7BN/BUI8u90vZp5h4a+bhlXxfaBmtGPPkYjLnLHtwafJ T4xATLqtgsoSgNRTJCVL2YcRJaS36CVF8kNc6G3YQQH9fJm5rsBKjM/fIAOOs8FvnhbdDoAsmsJQ qziu5f/+9cXTVbQ40qwITN2tD391wuJnNgPyiuzZrRfEurOLWa85Pbqfzf1TBQ9Wy37ytAhabJi5 quCa8fBlHW76F7b23aezSoMRNrIZiJNn1UtTd5M5Rn5FkQEAo03qJao5aJslYYGd7N0V/JbZIMwZ 28TIVgJ2gIR9uh8TAP9Lz/H2WZ3VcmKYaVZ2hA== ) hlctadr4p3enn9408lp4ruioqdcjjhk4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20210518203610 20210511203610 23957 fpki.gov. qbzMoAcpztSZiZU9lh33IThmmG8BlCHXCvmq7/YWu0RtI5JvdMIwNzFDlJBM/bkFcN1XEegQHxa3 Ng1d9DOQ4O6H+WXYDMYP61HFiipubs+V4zBBAud9M2R8LG7Wgq2UInYdpzxQXye56f76A4iUIhBd AvYD9wqGu/0oBcp6cMOYU5A51CFaMyV510/aUxGyXDCluM79di5BCSHG2gjJSfrf7T/J903JV0Y1 v0bGlUF/VKHwbHi+u4iYVtxsAReWGpADd1oqaqeT8DLWhoRABOeLjfFVFau0vKONpH5h2b9JQ5MV 0xfMV86JDRpIz3SV7chX8Jdz+rS4SzCcwQKYvA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 14849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210517065229 20210510065229 54317 fpki.gov. WKk0EokB495PA3GspF3OOBww1VMCgDTP9JzWKlXWlHMSM732ivJT1oqW7bc3JCMONLdw5ZYdgGZB Rxfn/6/Bw+Ze6Er1jPvcqCUk/Ms2f+qRrRMEq2d//iBg4qqQ/ytcqxboI5w9/Dbz9RWcKFYxqjwt 6egwymSRqrp/Xu35tWwQnbIfxVAQJ7kT/DmfWI4dEHm1de6M2pYH5TY/d2VIJXsHF+yga3YHmb1c hH8D61bSIP5RFr9SFP5Z+QPMtY7L7wc4IT7TN897eOTnsxh5B3eOA3rEqHUcEFaQ26xI8irh78BM qoGlty1R7V84akoWSC3uFCFiy3fj9h8zkY7eQQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210518065217 20210511065217 23957 fpki.gov. Ct5bL/lOaC7+tgBTB/FEtLrISERd2aATqpsPR52c8qvrdNqBC/mnFsqeUJJrtkFIv/9rm4mhGdZg PRSnNt6sdLJv1jvhOf+HLA+24pQJmtSK4oV3gFlBTRf0fNsRyDM5NI4M4RYHfNUyui/aUjQ3hedO B4yo0Nb4oWQ41iMN/XPJHtDPrUV33eXLJG/VyAR8UXZIc/7wML+WAfnYOi/E83RAxdi/BcjkiOBC MspUx9Jeexh8QJAVKcva7+vCgcb2ihbyEnvLruCLS6Dq1/feGOeS44DN2Q8MVQQXHOyOHtUeSssO M7WfsonhdZ3M0ctScDKcOP7FOvEQQ+nN71n9bw== ) 5ku3dupotp0t8bq9gmqee4e3a790kq21.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 e38fe84fd22d39dd 5ku3dupotp0t8bq9gmqee4e3a790kq22 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5ku3dupotp0t8bq9gmqee4e3a790kq21.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20210518235230 20210511235230 54317 fpki.gov. HKC1oexfqR1E4Wuy8KZ8Sg4x4T+e3GOOE2gna1xSdM43rflhkeKtvHgElX6JlD/Kc3Y6qH0rnYXg FLh9UZ8St4XYwJg75mXLAnp87MDpV3CkgiLsVgmcmsa1xQmR+Qq7QRp3ophGczoCjCl/iGhGTHBM UgXRGemaBINurrlneY7YhhPFeyxNeU10bZZ+X7mu+NCg5mc/8reL0xgsP/ZHZEPxBn4SD9NRkPlr qCgqIeKCGPfjzRjrz9Njxu2IshLvmUdHK/UmG5JxEsdq71ZjJKNQinzX39xeXkbLHikwMLusaLDr W/c1swH6cZQpNptXm5onotOeXajgTZH/t+iGlA== ) 5ku3dupotp0t8bq9gmqee4e3a790kq21.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20210518235230 20210511235230 23957 fpki.gov. X6kJ0JFW6Z+M0wJNnF/MFXhx3u7sp4xQ6eaF5xl5rVsWdGAkFGKWM67OoNdlw1KzUabKxaG8BWDD l13COCwT6rLPTGp9VNGv94ScI6m6KirvGbbf+urk5VUE0Z4zPyLq3EAjaIJFFY/V5duo6Ybd0g/b tbLyxtoePP3itEM6oad9xIgVRbjCfX1TjLhLmzBgSyKsSiqbeb/JqofZ9vFf9Pccy1dqpl4fnS7D BPAFanluhiPwJrdD8k3yfmJIvplKc+wDomn2g/Ne1l74C18O3iX2hNezjD9wYqJgf5d0Iy3NBhSZ UmrL5fNTCVuM4ZbkqtpPwNwt8nP80kY8nHbE9A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210517065218 20210510065218 54317 fpki.gov. cqCMpxUZC1/dAUm2yOnu4hkBYBNxcBffFYiZD8HE0TNReFBAhzFEFaVTMG2+9BpTMB66ZKOMR0xH JMTZbyOEOC4KIGUKm3Db4hR+IzC5PN6C7ywfnad9TKyvkF1+qzm4ZOH7M+G8DvSkeD30rsbek5s2 WM7oR0FoIIjBXnVIQdYkoTRXDY5i0vKq+fBbQUe2N5pVbYtvE5LA8Z1Tc212NwEa7CzesxtfPrDQ VNogwChSwUzjbvYT5c8Lilb18nxDLr6narYmSB95VUN0pAH5w4qjiLJYX1FMe/rd1JRNuBiLUtyY NepI1Zu/QV/kP+VoZw9g9Mpg5vTAIcLwQ01bhg== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20210518065203 20210511065203 23957 fpki.gov. G6zYMP4pJW4Fgv5TV5gOTzjjmewNGpFRBS/QT4YDxojWmHBn+uovsbPHxqSpDfNv+I5btYNGrKSR t37NF3UeLEhRWGcBnM54VJwPFqCpO2Nw5aZ1dA5QGV+3s9rpl4WdCZeGatyrmnWpTS9liGjd9aBi J0NWdPlfbmJVNImx2cLGK4cdhHL7zu/GFpfdS/qmU7NfgIHOMJIRovTs6DRmfFcCb+7SY2mhZ+sr 6K5Y0cIXM5yw7caGo4lSYXQbCy8p4ehuUlq8PxPm0tYlz1ijjcuAZOHP1f4W12JMdi4UW3JL1gfp 5OXf43K7HJwhLrdEjZUO+UaXxNfHhMusYWiVhA== )`
	RRSIG=54317 and DNSKEY=54317 verifies the SOA RRset
	RRSIG=23957 and DNSKEY=23957 verifies the SOA RRset

FPKI.GOV

No response from FPKI.GOV nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: