DNSSEC Analyzer - FPKI.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-16 19:08:59 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1425 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1425 bytes) ;; HEADER SECTION ;; id = 4369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190303000000 20190210000000 19164 . DRLIuvzzp0A+Z7b7nlT3HJMahMFy7lSb57kNKimzxRPWpzvZjThoh+Hndxxd/uZcfSv3n5NaxTNa pelPGigUV6JQD7sj6+KUH1zMdM2o3JiMxEz0iwIKyPfxGAvVucpmm6Knq7nmZ9LOYqdZiaO/eJLw DZocVlOEjSvXyZyzb3RrwrSVsuHSbvSLHqT6KMvFG0VTiiuIqxE7+I0QreU1C5glIhBnOjq8Jfk2 1xJBaXNa0OQLq4X5xxLYEXLkQD43VWOD06gui82uwWMBOD3WppzHTaEElwc3QHvcpVQDyvo2uQRn YUzJgLKfq4fsmX1U5dd1Q/foAUXr1VwGopuuWg== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190303000000 20190210000000 20326 . jDakJUdKPUe6+mUEZUdbRco9OREoxJSxRsxw1rYshGYqgJjWSvXUXd+YmO+kcwEG1POOhZpnnKZK rJ/eP7gXnS67fFVm5zgW0ztXe1LACwFM95EFaNozZ8Y/w0JIDDoMtoEWT+UrkfYxq5XqYw3Opsmw 2Ij7lMQzm93rRVv8aVqLTFrNWLVUE61idcu4S8ThqF57mcJnSKd51qM0428UynOnNCKeIU2O1aJ9 agtvaSe99zFpccyNfiaUNjvy+P1a8wSmTgrEwEb+Thmv87/We+UNZM43I6np0ub4/We0wANtt7Y7 cyzOLs3U4mY5ZWYSwlQKC25zLQWpQC18mGeyWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190303000000 20190210000000 19164 . DRLIuvzzp0A+Z7b7nlT3HJMahMFy7lSb57kNKimzxRPWpzvZjThoh+Hndxxd/uZcfSv3n5NaxTNa pelPGigUV6JQD7sj6+KUH1zMdM2o3JiMxEz0iwIKyPfxGAvVucpmm6Knq7nmZ9LOYqdZiaO/eJLw DZocVlOEjSvXyZyzb3RrwrSVsuHSbvSLHqT6KMvFG0VTiiuIqxE7+I0QreU1C5glIhBnOjq8Jfk2 1xJBaXNa0OQLq4X5xxLYEXLkQD43VWOD06gui82uwWMBOD3WppzHTaEElwc3QHvcpVQDyvo2uQRn YUzJgLKfq4fsmX1U5dd1Q/foAUXr1VwGopuuWg== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190303000000 20190210000000 20326 . jDakJUdKPUe6+mUEZUdbRco9OREoxJSxRsxw1rYshGYqgJjWSvXUXd+YmO+kcwEG1POOhZpnnKZK rJ/eP7gXnS67fFVm5zgW0ztXe1LACwFM95EFaNozZ8Y/w0JIDDoMtoEWT+UrkfYxq5XqYw3Opsmw 2Ij7lMQzm93rRVv8aVqLTFrNWLVUE61idcu4S8ThqF57mcJnSKd51qM0428UynOnNCKeIU2O1aJ9 agtvaSe99zFpccyNfiaUNjvy+P1a8wSmTgrEwEb+Thmv87/We+UNZM43I6np0ub4/We0wANtt7Y7 cyzOLs3U4mY5ZWYSwlQKC25zLQWpQC18mGeyWQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to f.root-servers.net for FPKI.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (666 bytes) ;; HEADER SECTION ;; id = 8117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190301050000 20190216040000 16749 . lFF4K64HD57GWXi+sM1bRq3yuR9ym9S5vt1Xab9UouXKxmNmPRsQyjtrTAsE7WV7sF+TT4Gmnw8p luE6yIlVF8PaRIDge6Zq1ZWc7dKiTmD1Zl3zQzMonlTKjyVCJY6ff2d5lzh7zgf5/z+LC2baHWy6 rqjWMbEfuxDYAh6BeA3dok40iOxJS7v2T4XlOJZkrZ26asUx0sbfsIvMkP2l3XKDKnWXpd5+LtVT fnHAj9DTTrtgHE7p1Wmx6J6sN8aaW4GNjVtr4h29muwwkTizgi7OYYXX+SRynBtiYwExU42+inIH MVM0Q9REbxy2Lj5jas79enc7PxwAlObYK9IKQA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 38776 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190301050000 20190216040000 16749 . lFF4K64HD57GWXi+sM1bRq3yuR9ym9S5vt1Xab9UouXKxmNmPRsQyjtrTAsE7WV7sF+TT4Gmnw8p luE6yIlVF8PaRIDge6Zq1ZWc7dKiTmD1Zl3zQzMonlTKjyVCJY6ff2d5lzh7zgf5/z+LC2baHWy6 rqjWMbEfuxDYAh6BeA3dok40iOxJS7v2T4XlOJZkrZ26asUx0sbfsIvMkP2l3XKDKnWXpd5+LtVT fnHAj9DTTrtgHE7p1Wmx6J6sN8aaW4GNjVtr4h29muwwkTizgi7OYYXX+SRynBtiYwExU42+inIH MVM0Q9REbxy2Lj5jas79enc7PxwAlObYK9IKQA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 23735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190301050000 20190216040000 16749 . lFF4K64HD57GWXi+sM1bRq3yuR9ym9S5vt1Xab9UouXKxmNmPRsQyjtrTAsE7WV7sF+TT4Gmnw8p luE6yIlVF8PaRIDge6Zq1ZWc7dKiTmD1Zl3zQzMonlTKjyVCJY6ff2d5lzh7zgf5/z+LC2baHWy6 rqjWMbEfuxDYAh6BeA3dok40iOxJS7v2T4XlOJZkrZ26asUx0sbfsIvMkP2l3XKDKnWXpd5+LtVT fnHAj9DTTrtgHE7p1Wmx6J6sN8aaW4GNjVtr4h29muwwkTizgi7OYYXX+SRynBtiYwExU42+inIH MVM0Q9REbxy2Lj5jas79enc7PxwAlObYK9IKQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190301050000 20190216040000 16749 . lFF4K64HD57GWXi+sM1bRq3yuR9ym9S5vt1Xab9UouXKxmNmPRsQyjtrTAsE7WV7sF+TT4Gmnw8p luE6yIlVF8PaRIDge6Zq1ZWc7dKiTmD1Zl3zQzMonlTKjyVCJY6ff2d5lzh7zgf5/z+LC2baHWy6 rqjWMbEfuxDYAh6BeA3dok40iOxJS7v2T4XlOJZkrZ26asUx0sbfsIvMkP2l3XKDKnWXpd5+LtVT fnHAj9DTTrtgHE7p1Wmx6J6sN8aaW4GNjVtr4h29muwwkTizgi7OYYXX+SRynBtiYwExU42+inIH MVM0Q9REbxy2Lj5jas79enc7PxwAlObYK9IKQA== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 11591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190221224731 20190206224231 7698 gov. sh7fkHeIv7bQZkWl2+yqVqL45IR2zski423cwv7c/llKG789cJGmTWaNupoHBezGI90X+CQS3NQQ WEl1uKEfwmvL0vaAbm3tNB8ZJ8eGau08UkzUhGwtvpKcoBQgXtTs9iJRatjFcVSUm31+SNP2/Ckn iCc3l+CSZFe3WCcFMZzNPV8Is7SOwy0i5CdcceDDZK6bx44RPVyLEmbt+7aqgqFnqjcknoAtw/2J zWvd2tyNU4fSwDNokoKxeChrokxkO6cLGs/atVBXkm6CirCge9SP2NiFaINsaIEgmTgizpt+xECO J9FmQ0b9AkJQkOttmj3ZtmZNDZDXOQwD5UW94A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190221224731 20190206224231 7698 gov. sh7fkHeIv7bQZkWl2+yqVqL45IR2zski423cwv7c/llKG789cJGmTWaNupoHBezGI90X+CQS3NQQ WEl1uKEfwmvL0vaAbm3tNB8ZJ8eGau08UkzUhGwtvpKcoBQgXtTs9iJRatjFcVSUm31+SNP2/Ckn iCc3l+CSZFe3WCcFMZzNPV8Is7SOwy0i5CdcceDDZK6bx44RPVyLEmbt+7aqgqFnqjcknoAtw/2J zWvd2tyNU4fSwDNokoKxeChrokxkO6cLGs/atVBXkm6CirCge9SP2NiFaINsaIEgmTgizpt+xECO J9FmQ0b9AkJQkOttmj3ZtmZNDZDXOQwD5UW94A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 21193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190223161006 20190216161006 28157 gov. XQlGszRH3V4iQyIkHFxJ1iAFVlxngQjO4yni0ZqjSnQf1MJxi/x+lNeEgdEtyUses+dIn2lINrfn 5nOOA3ZwPkmxFfmk+TQBy7mBLS3dXrJ/+EPg+NayDYnGAdUXEdmqSE7lTb9wP2pMQT0K9AC11qNx Pf0m1PhHTZQp07Vn7h4= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.gov-servers.net for FPKI.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 494 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (494 bytes) ;; HEADER SECTION ;; id = 18251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190223161006 20190216161006 28157 gov. XQlGszRH3V4iQyIkHFxJ1iAFVlxngQjO4yni0ZqjSnQf1MJxi/x+lNeEgdEtyUses+dIn2lINrfn 5nOOA3ZwPkmxFfmk+TQBy7mBLS3dXrJ/+EPg+NayDYnGAdUXEdmqSE7lTb9wP2pMQT0K9AC11qNx Pf0m1PhHTZQp07Vn7h4= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to c.gov-servers.net for FPKI.GOV/DS
	Received 368 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (368 bytes) ;; HEADER SECTION ;; id = 9006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190223161006 20190216161006 28157 gov. XQlGszRH3V4iQyIkHFxJ1iAFVlxngQjO4yni0ZqjSnQf1MJxi/x+lNeEgdEtyUses+dIn2lINrfn 5nOOA3ZwPkmxFfmk+TQBy7mBLS3dXrJ/+EPg+NayDYnGAdUXEdmqSE7lTb9wP2pMQT0K9AC11qNx Pf0m1PhHTZQp07Vn7h4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=14811/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=54990/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=54990/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190223161006 20190216161006 28157 gov. XQlGszRH3V4iQyIkHFxJ1iAFVlxngQjO4yni0ZqjSnQf1MJxi/x+lNeEgdEtyUses+dIn2lINrfn 5nOOA3ZwPkmxFfmk+TQBy7mBLS3dXrJ/+EPg+NayDYnGAdUXEdmqSE7lTb9wP2pMQT0K9AC11qNx Pf0m1PhHTZQp07Vn7h4= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=14811/SHA-1 is now in the chain-of-trust
	DS=54990/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4`
	`FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea )`
	`FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b`
	`FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 )`
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 10425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAePvuAXAg1V2GIJE3L3VQlRAhpne7uKatHuCYT2V5pcp8UvZ7nRpow1m+HNoWH+SvAhbe5yR uBTw7mCKsxbH8EgM0YP7UvPfjJxjxvqcZtU3aFO4pXZq77q80tnB7t1n7aPyU+6pq4/60n/CWzsa FQ7DC8CZaxkr0Kr/V/nl9U9F9erKlGCKHL2etoIzr0BTkIcynlGAZzi6onFrIxMgG+E5LH1orYtA iNJyH4rBu5H5ThvPGDtWz4swvgX45Y7KSbWHXZVYxU9IB3XO6uE2LHg2KN3XmQwl+EchMvFlArOy hKIqXoEkCDfnzBCP7VLaLLzKVLA+L64F5g48h4FZhsk= ) ; Key ID = 59612 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAY9292+s9FFBjoxuaRlj25rt/iigRFmRC1hd5PFfiGCItnnVsmJfFVmjzwuooWPjVrv84dwX xIxcS70Ezair4tZUxUhzlHyXsBrBi2ols+f5NU9/y2crl0kIOm4sYg4OZ8cFTENCgojaisR8eg90 u+UHBhRnXXGRjgttZ4G5yq6nXrwkCKEqXcBZXGSAtTULEyJDO23Dj0g13bbv+Ehu77KZGk1ZDIyQ gcB2dbMUbGAeq5MjOIm6xmZJVYVKpQhnfP953DcIUqc0H/98WUBmw8TbI7Io7uT9gXURA9RqTAwK 3HQAKWgPGCu/iBCZsgcJi/f4NKU8z1iSf9l9V90bzBk= ) ; Key ID = 59732 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 59612 fpki.gov. klZmIsa3wBYGEOl6ahZkub5TJDloOem0nPszP8P4uW92l/iqC4Ji+QR2JjCLcEtevqvnJWKGASEQ w1LvNhbUPk4r6oyq2lLdPFEiBXPZR5+bWOpcgrhX7SGaQ547IqGlu2zWxGZ7EPMIJi9Fx23Yhmpj HPaljqXEbh69iZUhjwe9WG0Kt2zAKXONd5E3AbZXepeEHTME0R0zMeMVR3e6hAhhD7iUcppYV+cv 3HkQg4k1ia5pbbsfY5wg6zQpSj3FZs5TBqG+0A13381F5cMVS9v09C+xZIQUFGdzC0MdUO4nXWRx n4ustEgNhbOyPii75WWDwyFvW2Nr9icaooJaaA== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 59732 fpki.gov. bXB+dlg8VPHB7SL1x5E55b2tAA5u9Cn1FTDqA9LdfR6YpF0hsB91/b2FNNE+ElvVKSSlRnHdFQzz n0TBOC6AbIMMnLYmcQWdiSZJLDLd7MdyaBfMs2OFHBrxZaxKllk34Ud3U48Y8wSor00CHWOOwzcW 8obJMJGty0mYUkWbwcREXRlFQ5SDNyMwnIzYPX+OYsK9CtuPD2Dx/o+p/adQbiSne9wGjZMfWEBb nMznEP5fCRGDs8T6g4oy2zMTSB360fdhkLJvCG7BFju1cx9PJMqKnGTpIRkKsKG7S930jjIrM5Np JTOp+/dhvu6Eba82DIebwRI9Yr0h48eZcbxrqw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 54990 fpki.gov. r/HQfkR4BkXrg3wdBcIdCGlajx/gjda6WVDH4Voj77O9Zvabhv5cyKAN2fXfWOoDA7ohe2jGBjCl e7bhbEvtW6EKK3BEeZnZGD+uLB2x2CDUl5zLX5vqrlO+/Lhl/0Ew7dsj5FF7GbRTtObtsl+Zuxw2 VNXksGEypLXzk9zjZoMeqS5OWPctiatBJHQzY/OEZhesraBp+3kisu+Yed1O/Q92UZ78WUjJ15lB 51Rf6vsAHO1w+SswomJ4CmP0f+rfl20SeP28sDZT7JWI0y6w65qTSNM6c04cOdoduCCNqeGb680y kTEXGru1BuQeYEeqNToq2bWzcyC0vrJuVK9d9A== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 14811 fpki.gov. K8ZXUvJnQZX2PNyXpo58Zv+p5upQwKIe+0RlEUJR/SMwjqQthddcghZJM9ILokK6enPj9Xmieb1s MeDav4ha4tutMup6VSToPyw6UTB0kKv2SeXTjdVpWRQKDo+Z7OX751omo0VbRLj7/TJOWuUa++BE RXnqFbnAuNmJNErj4QhZIqzPtmfoiafYKv66wCfSZ0dFCKjGLMM0/UwEHCw9P2o8KdR5Cv5+gca3 XQY8O12VSbQZxtNvs7ZX2mFApXfa2hL0KVLETiwmZgGIaQqBV/FPcdhRyvEd/orJxdl8VpatBLlR FqhVe6CnzjQBrAgYxniRSLPo499f2DsrAjgylg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAePvuAXAg1V2GIJE3L3VQlRAhpne7uKatHuCYT2V5pcp8UvZ7nRpow1m+HNoWH+SvAhbe5yR uBTw7mCKsxbH8EgM0YP7UvPfjJxjxvqcZtU3aFO4pXZq77q80tnB7t1n7aPyU+6pq4/60n/CWzsa FQ7DC8CZaxkr0Kr/V/nl9U9F9erKlGCKHL2etoIzr0BTkIcynlGAZzi6onFrIxMgG+E5LH1orYtA iNJyH4rBu5H5ThvPGDtWz4swvgX45Y7KSbWHXZVYxU9IB3XO6uE2LHg2KN3XmQwl+EchMvFlArOy hKIqXoEkCDfnzBCP7VLaLLzKVLA+L64F5g48h4FZhsk= ) ; Key ID = 59612`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAY9292+s9FFBjoxuaRlj25rt/iigRFmRC1hd5PFfiGCItnnVsmJfFVmjzwuooWPjVrv84dwX xIxcS70Ezair4tZUxUhzlHyXsBrBi2ols+f5NU9/y2crl0kIOm4sYg4OZ8cFTENCgojaisR8eg90 u+UHBhRnXXGRjgttZ4G5yq6nXrwkCKEqXcBZXGSAtTULEyJDO23Dj0g13bbv+Ehu77KZGk1ZDIyQ gcB2dbMUbGAeq5MjOIm6xmZJVYVKpQhnfP953DcIUqc0H/98WUBmw8TbI7Io7uT9gXURA9RqTAwK 3HQAKWgPGCu/iBCZsgcJi/f4NKU8z1iSf9l9V90bzBk= ) ; Key ID = 59732`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811`
	DNSKEY=54990/SEP is now in the chain-of-trust
	DS=54990/SHA-1 verifies DNSKEY=54990/SEP
	DS=54990/SHA-256 verifies DNSKEY=54990/SEP
	DNSKEY=14811/SEP is now in the chain-of-trust
	DS=14811/SHA-1 verifies DNSKEY=14811/SEP
	DS=14811/SHA-256 verifies DNSKEY=14811/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 59612 fpki.gov. klZmIsa3wBYGEOl6ahZkub5TJDloOem0nPszP8P4uW92l/iqC4Ji+QR2JjCLcEtevqvnJWKGASEQ w1LvNhbUPk4r6oyq2lLdPFEiBXPZR5+bWOpcgrhX7SGaQ547IqGlu2zWxGZ7EPMIJi9Fx23Yhmpj HPaljqXEbh69iZUhjwe9WG0Kt2zAKXONd5E3AbZXepeEHTME0R0zMeMVR3e6hAhhD7iUcppYV+cv 3HkQg4k1ia5pbbsfY5wg6zQpSj3FZs5TBqG+0A13381F5cMVS9v09C+xZIQUFGdzC0MdUO4nXWRx n4ustEgNhbOyPii75WWDwyFvW2Nr9icaooJaaA== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 59732 fpki.gov. bXB+dlg8VPHB7SL1x5E55b2tAA5u9Cn1FTDqA9LdfR6YpF0hsB91/b2FNNE+ElvVKSSlRnHdFQzz n0TBOC6AbIMMnLYmcQWdiSZJLDLd7MdyaBfMs2OFHBrxZaxKllk34Ud3U48Y8wSor00CHWOOwzcW 8obJMJGty0mYUkWbwcREXRlFQ5SDNyMwnIzYPX+OYsK9CtuPD2Dx/o+p/adQbiSne9wGjZMfWEBb nMznEP5fCRGDs8T6g4oy2zMTSB360fdhkLJvCG7BFju1cx9PJMqKnGTpIRkKsKG7S930jjIrM5Np JTOp+/dhvu6Eba82DIebwRI9Yr0h48eZcbxrqw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 54990 fpki.gov. r/HQfkR4BkXrg3wdBcIdCGlajx/gjda6WVDH4Voj77O9Zvabhv5cyKAN2fXfWOoDA7ohe2jGBjCl e7bhbEvtW6EKK3BEeZnZGD+uLB2x2CDUl5zLX5vqrlO+/Lhl/0Ew7dsj5FF7GbRTtObtsl+Zuxw2 VNXksGEypLXzk9zjZoMeqS5OWPctiatBJHQzY/OEZhesraBp+3kisu+Yed1O/Q92UZ78WUjJ15lB 51Rf6vsAHO1w+SswomJ4CmP0f+rfl20SeP28sDZT7JWI0y6w65qTSNM6c04cOdoduCCNqeGb680y kTEXGru1BuQeYEeqNToq2bWzcyC0vrJuVK9d9A== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190223145044 20190216145044 14811 fpki.gov. K8ZXUvJnQZX2PNyXpo58Zv+p5upQwKIe+0RlEUJR/SMwjqQthddcghZJM9ILokK6enPj9Xmieb1s MeDav4ha4tutMup6VSToPyw6UTB0kKv2SeXTjdVpWRQKDo+Z7OX751omo0VbRLj7/TJOWuUa++BE RXnqFbnAuNmJNErj4QhZIqzPtmfoiafYKv66wCfSZ0dFCKjGLMM0/UwEHCw9P2o8KdR5Cv5+gca3 XQY8O12VSbQZxtNvs7ZX2mFApXfa2hL0KVLETiwmZgGIaQqBV/FPcdhRyvEd/orJxdl8VpatBLlR FqhVe6CnzjQBrAgYxniRSLPo499f2DsrAjgylg== )`
	RRSIG=59612 and DNSKEY=59612 verifies the DNSKEY RRset
	RRSIG=59732 and DNSKEY=59732 verifies the DNSKEY RRset
	RRSIG=54990 and DNSKEY=54990/SEP verifies the DNSKEY RRset
	RRSIG=14811 and DNSKEY=14811/SEP verifies the DNSKEY RRset
	DNSKEY=59612 is now in the chain-of-trust
	DNSKEY=59732 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 21674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190221140406 20190214140406 59612 fpki.gov. qzZ7ICrsFlq2gGJjEB1W7oDQt7K9J/HU+jVAtcqhfCSZiQenX5BylYFkVztDEM4OXCFz5NJwBgBV mERqJ4vXfgfDRgFDz5kO8Nuz8I4QX3rgJo4/cQ3JTVMDsf72ny1cyK6I90j6UG5VWGsd4SQrEJb3 D7zE9+rEDxGEh+M/QVroJEXmjKqa0ecJIWy5+IWjT8/CVltfYvKqbbku7UoirBFWFCvNK0RpwLQ0 rAoHSAjQB+EMH6VoMkBRj4gdkFMHftYnILtQz3eRhv2KvKNzdgCECSizj5eAHTj8U6cAT4IrfJBI hT+ec2FqL/Sq9vagd1K3j7dQw8pZgr3ARuE7kA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190223145038 20190216145038 59732 fpki.gov. BheyEtPaucBaWueqGKCBNpPT2/KVz/HWrboxa8FaKoJOqmCiDVMu7PD2MeDKg8tLUl2CqPO6cV8I 9AQCVi46SA8ki++3J7foOXYRG7uTbYN6wSrd3Oj05ggXozwVk/sV1ZvBmzTGc98O+tLPeRJPtyGd Icg/kJgpNLO0fwKYwrDJMWgkkkd68aNfObuxNenKME9h4Wq0Dct4aIzXX+cK6yzWpQvaDKG8K5Wg FUclAQ1wA95YjAwor9LEEJowO9j8aauF5GQ6Q6rSg78evJw9Oocc9AuH+OCpsc99NcyM3onihBkA gk3FF8Me+WyQi5GLTi3MycmaxTZF3EBgognn9Q== ) cm831q6qg10trkv4rd0fp0j05na9ou8i.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 c23bbe143f8b0540 cm831q6qg10trkv4rd0fp0j05na9ou8j NS SOA RRSIG DNSKEY NSEC3PARAM ) cm831q6qg10trkv4rd0fp0j05na9ou8i.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190223014530 20190216014530 59612 fpki.gov. URuGjxb6touK+scnfY5Hg4ylUQkZfHgBfwS1U8Cac1nsC3T/Ytp+EOWJnr7lK7Zwk/QCXFU3AskX oZFSy7KPCmX1zPKOSDm7mgBe4Uo8MCfV48ENia90tziwRtElkGa72OpKMr+Zl2QapVlc60anf6fb ajr5TmoHcoTHYNzcM9n4F6apLeTJcVAUTVrNpdgO4Vwbf/TYr72JMc/boLYmDpwDwfvTC+ypijUd EGdk4BimGK1Q90SFruvvTz4gNDjTI80htXAcJbR3SO9WcXTUlHOJBZNb5RYxzkbS7xZmFAPmV3c4 zeh5p1QBS6ffmhOdSksjpa1O79hsA3RqLdUTSw== ) cm831q6qg10trkv4rd0fp0j05na9ou8i.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190223014530 20190216014530 59732 fpki.gov. Dc7KYEGy9lz58KWNIr0VHIsmWFR/kR/OYB1OGacrWh0JvubvlVYZoi6SW+NSFzoTiuvjmZLCH3/w 2VqddiN0K7eV/yFRphgi1rIjjhkUWijDC/6nLRxTt7Vk5yrLY4WlfyUljjjV/85DFNiX4tmBtULx T+kKX/Zx9NDFW/zAeuvJ1lZhNRrsREy2F13KmMxWPyAJzVdAKSny/I4DblzsgQAy9egWBle5DfC6 4tponPwbfCsALnkvEgLmvxIvRlxtLTQOVSYsI3m3P/geO4aP1/sg9+itkFO5LCG1LzlNVF01/RVt 4SdqOuUgCZBHmLKiYvx0FxpT0WIJRQJnrblSWw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 32734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190219143957 20190212143957 59612 fpki.gov. OgcZvLwmoggmPS32ZzcVN8prDvcxSwG16FDU9v3Vcvj0yzyBSCKeMVP+BRsP53ABCdwEAucEGBA+ qV2r06v4yRhEsY8hL/OGvaz7pV/reVZip13mAWjRZgTwOc2/17EDB6HThbR/u/cGxPA1as4/Wo96 VBE4M9VvM6149cEdEmdeFIwMZoje9O8OZ1Ddeg0MVkM9wLIvnvJKEuFJI55jEjwqMLxoEa6WieI6 ENdBdev9uJ+uQ1KJxeKqrqAKbpa6nnWwZ91J/Vwi50GH27YDVsucBkqfOAhV+BIqMDjIJMvL+x2t Q+33ObTUcV+Wj3v2naoLbiqqcteS2uE4jSsMpg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190223145044 20190216145044 59732 fpki.gov. Gr2WvHBirwV94Xoyl8YX6Bq2DUqZnvpicXlbkYPkMVU0sSOJ/bKswHxNgGwBmcoCyJJgJXgZehoM KFEgBqC5MO//OtHMFspuEBd+HuMATW6R28L4wlK+QyDWhXhR1Q3hGzlktVZlnunyonaHtw2KHXBp nYOa/yTfISk8gG2jHUqK79zRtNWTleWbFOhH4xPavOhmK2IwPcJ//tZZTPM/mBpBt4i54LIF0b+1 /O1BHOz3ie5chQj+K55/+zQh8P0D0u5KWwbNBmFYcjabYDwsj34cVDaUUIFQ/jusGDN/26LSIpyg f/aKW7jm06wDl2cKiEA7Ch+PYj7sR/Ov4n/w8w== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190219144015 20190212144015 59612 fpki.gov. uDbGZ8szvHd6xA9JJZmoawtCgiy+gE6AzlCl0hz7ectB37xQrNFRymddZY6NmmqejvgNQEMyBPhC /0ATai3aSJ4kaCvYU8FyxbtHq2TBpiNdRidVec68yDai5Sy+7luJv0lXkegBi5l8Oox7wcF2+hxu bhwCjqZbl051/DOldDOd9DR+deHGCpSw4da2OOXvUoRNIn68O/XoVU9YnsDykqgJ+1l0eO7CpD1v JSNb8GesAJpWK6aobCASgHOKpCDqWtXe3HsRSgLqHawSKD3bHWif3Xj+4wq40Vhlh/DWz1ES7BI8 8m72dNT1RFe3NF8YU4KLXyrvNGAyuB2KQls7xw== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190223145038 20190216145038 59732 fpki.gov. B5P1NTeKK5cZrXENSPm0iQwWU4wvwcGADQQjqpxIuafiEXCzFzYQ66ZZfTCVBfhcIUgjq44dvEjm IXq10mxlIdHKwaLiy1rRMowiPsva2O5LQ+toc4ir2P34/uNKoJ4UPTNoS4PnXun83APS3kC/KxKG 1S2jaf8dHhecer+BkvOxY3/mcg/DAYa5BXj4Pwa+iD/eGZ6FerqPpyVWz3UaGfxRjL79LANcSWgM KHA2fpfx2iR+H1wiEmws1zVjZc7lqoqotEwTrLbf8CyHlzDox7DKnMrRYdHiIMrxxDWnxryIQqiM 6SY87CGWUleOOZWcQyTv5GrpfAu6J7quOVZs/Q== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190219144015 20190212144015 59612 fpki.gov. YbABDiiGFb1Cs2hdGFEBRBFsBBovHpoaGnBBZi5YzUV1EYNnsDof8HXW8IrfSglC0DwZ5B0fKH8k g7K1w5RxQM6+T9QmYWTRJ4R1RQ0TCm85WlU455OSQoZ+0/fcwszz7Igm0U19e+L6wEV2ptUqv7GE 7NihzGMavxwdR3pFZbvIyBxWhQANhjqMMMHXv9h2VtkZwJDK2s8So4sBZmoHOsXcj0M2zA2d5pB7 IO9wTkT+QVBtu3Lxd1sJCcQA8T8VFFaT1G9J7atOna7CVRxJQYzOb0gPtQYZVmIMg766A+m5tatm qwby/XA7X5kI6Gb826PTfqclaREJnc7f+3Spwg== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190223145038 20190216145038 59732 fpki.gov. P/AUavNKVC66MYp3kGxlf1YQ7REZVkIhlH3EoGUvEMRwmQaONcpk49iuO2hYsf4io0BhDeJX+CGI gIcz7ui9KYBRDGXEr7X/Y0vOwL/FOmnTGkfVL7pC9XbWRGKW/8PRS+Xn6flPWLsUa0AUmtJAJKr+ 554pG7xOQpir6NNawsN1kqE1fXeMFY29V9+tn6s6gYXCvpkPKkelQgRSfhcsz9Bm7MGpu1OCzmbP FUE/s2T5yTRoog8r/15l4qTvRT8bKOWo+WfZBZ4I6NpsRFgNqxvnGxB2D+458WuSwgYQq0FoLFS8 fqKMnLDzcFgNforWGN4atFaa84cHlCAiYKAUDA== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190219144015 20190212144015 59612 fpki.gov. pIcLsobMd9Ju+7AIh2ua07D+DYPCzTHVAPZpXTUgg9cyK/dr8WZ9PdPO2JQZn/K1r1bb2hmhWyvG gu3TttJ4riXuqLhOpWkFooUFJMr8iGMIlFccoqlzwHqIwdoYZ65slAeMegVsHBaxu5gofoPSFI6k uApvmS8QlfLrOar07FxlP55qH3ofzgRIP6L+67X1TEq2FfsXBOmdNYQG5TReHPlwQY/8b0Rjwr/I 9nyThbojwvs4nqRRPXgXh3u9pKCSP+o/0v2dhG3tsYyDKHrZ1Iou0MkummPb7jDxbG0drqEEyU9u qZz7o0+Hl0aQXpqy/k0eiCb24oTgv0EsYmhPeg== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190223145038 20190216145038 59732 fpki.gov. C59xxxyr1OJjImS8URtMpsHQ4/OyypRVGTAs3QaCOYhiukw90lZHOmNSI+Cmk/QTJHbiEwDoccMZ thNeI0FjSRf7V0g/PbYT78VhFNR02TP3rfcbyN7VFlNkyN/9kRJiPuJu7g2L0nW88rbC5Ez1Cksy THIGldy73SvXyWPYqXNgrEg/9Vwr0o0jC1E+CNp/JdJVkRKK5iL2NUPshJ8P1NcYiTmAYRslfvfX oZpNXj175JG4jPVzewhMIpkdQrecA6rmS9c+Kw1iInAu6c4+2c3gtqYP8pvtXe5tAoiFSsSPmZ04 YKlgeu675CNqmmLfTM3NPBTbL4KhimCgfY3o8w== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190219144015 20190212144015 59612 fpki.gov. CLDC9GDyl5aXwzTe2xjZssL7fOQl3tFIFKB8f6Tbofz0vZ6m7AFD5WeDLgDfugGYqzDaWc9M05NR bxOgPMYiWzTH12K1TRmFQ79VM8GKLZBDExd5ITj267nftIZYF0GhRWCXdhiOFQQnR9JyljBziuSi QaoESiAlUKGjcxH55Lu6CLxi0eAHaELiPUGO1aKmQVx0hnjxayODczfxZ4WqaZDjOyeus/X4Xw2K IcONk+psJzoXGL8JyqueznoHjOmqJEDqJI0AZ9sbOJEdr29H52SeHF7CoO87DXKer0eJzqqU88JV ItNfsiBGDo0RK8rxYkZ8FBf2vb3UxUNFjwHxCg== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190223145038 20190216145038 59732 fpki.gov. SdVXDne72YzfOJ/UXQ5JlFTnbgNJ7Nd+sGLHcbO2vWkOsZCohz2aCMC4eFVhROGEAOKF/K0Ma+7y IcrAmm6V/DKH3JybpX9bIxbjKwEjB8EVKKTxVnCnf5/RFhGHRSYqvwgCD3ypaHoDZgETiaR+6hLl hf93pHua6UglvVmLnMhUIRou6L8jHTtlpcidjQINpZqR6+bdc/OjN0DBlAivSuPSoyBwZHqBIJ/+ Y+8KPRgYQsxA7P+xsQ2jL51XmefUrSIHF/z8i23TRtA5A8SohVzLU0zi0+Po3QJhxVtVp6oSANIF BV9eKbjo3lWldwkFTwdDOmKrcYxhaKP5iwRxWQ== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190219144015 20190212144015 59612 fpki.gov. hFiw7IsBV3ASf87Y4Wlv1AwS+dDDdP8iR1yCm/+/CjdvrL8wsT6aIsWZBHsIBHnjT/i71YaEREu/ W7PGnRhSc0SyHfvI+6rvt7ea5bK2RvV7ACY7innQX+HHDFoOYG5aVNhhUxeHZmnQ7zNEwDSjKtKF deN6B61CuuCHxqxxt7p5sl0XVjT2b1PRdmvxTcgcDEhkYDAgxJSBCv1P3SUlzmHcfZSG3hGxL4ES vjmNDgEjinX9dTZ9p4hPZIhl6wWdrumME7oFRx3TlBWtMUBJ+brrjqjfeNLH/xkDqmVpMgqNdniL L3fijd39LdVXCv6fivDoufNNdEXtY7hQK9hXqQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190223145038 20190216145038 59732 fpki.gov. RW2VjXQf6Ixlfyw+/LHrsVdeUk1eEf+q5mXUpxqNF64h8bHJhNJn1P2KENw2i3uvQuQGSlRF+y74 HFtajKE8pLrAsJYj8kf+k79LXsVqe94s4jumdP5uqFn9aaS9gKIrPP8cT3npVwhNfmly/vFvkqd+ eUgTTSD5TC1Ec6ql8ojn8HK+jFqrbf9pVKIfdY+V9ZIs+3FdD+h7LgzWBZEERpdh1yTy5fN6TwJd Ax3giQXZ49KazVs7sYimzbKupwyVRSbnINNy9+t2SlY2niv5a3ZIhXvyj+QMgqX70H8dHxLJhoX5 Ku/esMPTlnKC67SG2EqNqKsKoKZTVahoVQO8qQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 34908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190221140355 20190214140355 59612 fpki.gov. rZBpfiEEI69z+yLlM4P22H0YZWLGapD9iQG2tzsHCd8c79hsA28HTl8+rdDP7FwxjjtAFUtzvomA xxS3E3gLWT/P3jjjl4/lT51zwjx1AifLi1lZ6pv6Yd0azqpDuhA6kIGFI2WRpCthmQT8CRf9Jssx 60Mn02vuArvb9DGT7vhKPl1Lsl4tYRCFL4mNoiHq8m+qDF6kBEQOCt9UOeFVci91Eco/yizGLRiA j/8sAV1d3YteqXPe85mdP67VMGoFwU3vpwA3iqzHVvXR++jUyrSVsT/+HqeNFy8V4ptJua3vsAyD 5kW2HO+S5qys3yIYhGUznfb8uacm7Vq5bQ+4lQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190223145043 20190216145043 59732 fpki.gov. VRysbmubKsYsbM+ePVYUfaKm2Z4tragLEsVl5JVQjzSs0PSfoBNGuDduwdKMHNTzhbj5nUTTNb7H 7ynp0fZBwcXwaKO4DjRZeY8LTo07z3GmpKxgBmnSuYu3RYYzaQJxZfmj6QqEcZBJYMVPVYlNaO4y RsayCxpw1Vlv6kBOp/looJryljLrAfHUC/PishTERMHvUewaViJxJ3KkbNExoruC5SzP0UtqsqZb R4YsJiW0p+IGNwH8sbmoxfgsznt5oYTTWIDngaIb2lAYnkMVF1DQA2Lt0v6SPUlo1FvKcWorBRIL 7brDsUnB7y6dw47pqNT7wAplHwso/P8ZLROyKQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190221140356 20190214140356 59612 fpki.gov. C4p0ZqAbM8v9KBLVO9d9wVXZuguPBtmReO2HPFXi4ZDo6HdRnwCKrldlglLmU/QSwp0LCI3slmAU 5x+++fzkZ35q9GMl+rW3rM+cD7tz57WvOGLBffEBULyMWA88I76aueCrYgMbQ5B+QMbYN9FWp24h kQIsp4INS6Zm15Fg9HxRwodwYCFfXIpQ2FVuGdL3b5bOpDHlQNLiesr644aCNQ566z38+IJeA0kK YTa0MIx0gw1YN/5I7A+llkoPnfCZ+X1kb0HaG5RCMJNHcQ091vVXHTIz077Gxia7eWHWaAfRMn5A yDms94Ta3YbfM1ThN26T45d0UFZcTfr6iQPJyg== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190223145042 20190216145042 59732 fpki.gov. SsGegWYgN9C6duxmxf16xN4JLUcHF/s43J3ZbmbBlaDEbcVoCuI9axglvfdmBEInaCt1RV0G5WNx +NgHQ1apivH7nR2YeFsvv3FNyKIDxCYf8z+Q4lvbR3uO7eJy2VaYD9LajOe6gl5NbT4bctlsbkp+ gnk1JrnU5vlYnLA7UDq1AA/V371016KRpz13O0qa+llZyhBgtgH6jbN2SMyS3NF1Xv/w5GT2p4ET q5cupaXjGnMJpXILAZWAx6vAmBwEglL6fiFEYHy9//6gp61K0haq2XhoIW2RHh1lfImsVI5lBU+b PQDzannYoz/vbtl3KdK+TFSSV57E5A+nY4pI9Q== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190221140356 20190214140356 59612 fpki.gov. g8UyU6O04HKrdhoBQL8wPrnb0SfklwKMzTLCswW15LjOjh/EZYj+kpa7gdpoHfhYb8vXP+TtMfMX d+xNo7KrvzMcgYNpKHenAWnRZj52cMgGnfWFtfWcHhxSCrKHf5yIPqEx7jQLlXLIAOHjSxebgNcA 4jvWM7rsh/wN2AJy2RjJAyq1+rHBiSbsxTgdxQgSI+hbk/G/0mWd5j+/ksYlDYR+W150ZwqlOkJF k5uyEN7xbmh8XGl2pK0IRGuMNhpMJIvAMW7vptnxbEIYtEA2QD4xTtLZ3k1b6vBy13X7ImvqoaaA rQpcErP0dQu7ku6Xy/HttMLLR41T+Uli26Kbww== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190223145042 20190216145042 59732 fpki.gov. dWb1+LkeTeRHBx0tNf/xa5DnbYoaO8DENMMJLCjqD1uqhO0JMgqnQLE0+Ufkuitxy6ZHa4pGSOCC y2gtr5EQETDodwm1Dguw5sVlVzZvIpEh5TbWAQs071dlTHodGvQtAQq1SwXSw1fkTIPDs4etucA1 xbR8aUR3ngFNlBdCItBZTsdNz9COha5EdCj9Jlmbt0TeU5Dnrfk/yPqY5i6obUdOPCp6NXI//3bN 7PG8f+bRe1KknQKDZWW0fYTsi8rrqdJoFY8boBJwfsp/cADme3ajQdnKnhBKqmxcqxGBsMgCZmZ7 Kam8pKxUdaCInHmZJfpfj6Mjh6uuEoDMKNLA+g== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190221140356 20190214140356 59612 fpki.gov. Hv9z1xPzSxf7VpzBv9xmtLtARz11xbA5/H7ARU8qhqu4cHRs1ybK7T0NNG7rxBtRFjWMgCkDdou+ NNCRVDYsMgc6roKYCbw9X2TWvboJYlw3VvDCQFpNMrCHfXo0alvnZY4vofLnWpRJ419jMDI22WsK 5XusHXtaiTeZUmahocUQp7DmTdK8xM6YopMUNbMSIiuFpdIqT0za4f9qPeDFUKovVgmUknIIxHRh iyHAL4uUxqp1APsSdP5h5VdrW2XYP1wBSfWwpSSdCnzAHn7CZpP37+xQFFtb/MI1K69fE/k1Iwl1 f6qUF+q8SuISkLgJQZCQiMPpw5ZXGRJabNRzvQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190223145042 20190216145042 59732 fpki.gov. IQH4xAgkZolMFfrzxfo8Yi/gTkgsLhKi82tKGHdePQSauVKeKTQpfNgb7rXOJhawCa2/lX1FiQiT ywG33aYh1h+a2qEqwIMFYvteiGiY67oqcW0/Vbkr/66OhiNurCullghpUeo9zW/7xwADt6vuDpo/ 4QuyA62I9RAuPNs6qDNH/DafoVCEIGTmCS7loaCA8CDjpEMwMpyf4lE7XYDqOyXILkRJL48vkryL AS0YHwr7s4Lq3C1K67lR/flEmOK7KX0Uimd29R7QeTrPvEdlUvNWuiqM7fZcSZ1v8wLzUfqaa4T/ qn0c3Z0j5MdYIPXSgDTt3OcBQOZZjQgIZAxjBQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190221140356 20190214140356 59612 fpki.gov. IgTjSPuDYnUyQgpZ+oWani3pkmqYCBpbaEsriPRAijVI3PbPdtOoUWf91t8ATxZ2Yg4kw7iAbBl1 QGMMsu+xqTKrAd0240UJTmXvWXUImKHe4PJuQUkHdJGBfpPaN8miOcESdO6WxN6OEgCbbRftsSfQ xOGBoYwImZj0Z0KwE+4DVc6Trj9+eJCECDGQWS2Zm/W7E5WEvebQ/ww1FbUZyzyVHC2pSu8HOd1F Nleup2oxX9Rrc57DvAGsdJwLi+LNvX1MJk93LlEtSwnRJhoYdblENdz+oFB1f8chMNb7e98kJvY6 ue/Gt6orTA+mLefx++V7WJT0u0bCwchzIIh0Iw== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190223145042 20190216145042 59732 fpki.gov. NhDl610qoeQaFG9rOwzdByLbS3+7Ukm4AJjBK/Hca6ahKJfSKhNpaptSPb84RsL6bAbvdJLNq1eO PDK3HY7zRqQB8TM97kbIHctw56YTaB8U51NYyAryxyrKGFjqv8Q7gki6L53Jelpw40AoQQCqzUXw 18J5if1vzpBg63btt6l5yGEOlxGOl6R3bgQCBf/2gVUAoHmUvJwVjhbaEleKAMWpCnboavrBI2ZH TWxhSjPOMT22C/gfZwvKbfxFqWg0qyHTiiurEHrl+MixGJhQyeTaNRKp3CY3wmOaWzHFOuqOIyO1 1zwpem3UUBMk3bI+hkwUbXKd7MiFeGBpb2hhsQ== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190221140356 20190214140356 59612 fpki.gov. Lqz9D5PDj4DBEjQmV5n9PI1JbDUb+iu68V6i289i4MMAqAAyMQsR54kb5D1YarZtKzAcAvv5RAvk mVO6lR4cdstmt3hV7A0zFBuqENV6XvNHiN9vO9OucapU8HEeHcIUHHwUpX+Wf84cNwp+ste8kpFk JWSICT0u/+8UNn5nmdsiiG9KpPWm+77aujL5tS4C418ZKJREWIvhJHzshpZgry6XxgEOUDTurOiC DpKz3di56/FeAx3Ilo0tjUUYcJzMEzS8kuEXSnWA3DbObTuYIMJ6Nmjd1lTSMLmJXCP06JTKxu05 ikma28CtH3Y/DX9g9rxGZ2Cg0bKAD3nX7dTrZA== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190223145042 20190216145042 59732 fpki.gov. a+WSAX4c1XVdF28VD5HVRR2+7LCruDlNEylZYe+xMlF67+D2a0xBDtiNxtOt1mANNt1cy+p7XDFp wXR0Mv7iAZmruTHCeHWJSP7g5OhQTuWqbwPGGP+Ub0FjL4uBm2S9CNEHFf8MTdXAQ1VdhiPBheh1 b8FHdMYWgwzhaKTHHrsRdL1QbgQ+7yfkVHUSCEZa4xMKstJUN7RTosOizHODc46EcrayfU11a1RE nm/54fTBrC8PQyQIImtksWmMHcULJblGU6VGaO8Al07e887S748/rJxEjs6yiEJbkICysS3T7t9R pLGItPe9q/ZngaBop0xCoFe8144wmHjxT//Qkw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 20938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190221140355 20190214140355 59612 fpki.gov. rZBpfiEEI69z+yLlM4P22H0YZWLGapD9iQG2tzsHCd8c79hsA28HTl8+rdDP7FwxjjtAFUtzvomA xxS3E3gLWT/P3jjjl4/lT51zwjx1AifLi1lZ6pv6Yd0azqpDuhA6kIGFI2WRpCthmQT8CRf9Jssx 60Mn02vuArvb9DGT7vhKPl1Lsl4tYRCFL4mNoiHq8m+qDF6kBEQOCt9UOeFVci91Eco/yizGLRiA j/8sAV1d3YteqXPe85mdP67VMGoFwU3vpwA3iqzHVvXR++jUyrSVsT/+HqeNFy8V4ptJua3vsAyD 5kW2HO+S5qys3yIYhGUznfb8uacm7Vq5bQ+4lQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190223145043 20190216145043 59732 fpki.gov. VRysbmubKsYsbM+ePVYUfaKm2Z4tragLEsVl5JVQjzSs0PSfoBNGuDduwdKMHNTzhbj5nUTTNb7H 7ynp0fZBwcXwaKO4DjRZeY8LTo07z3GmpKxgBmnSuYu3RYYzaQJxZfmj6QqEcZBJYMVPVYlNaO4y RsayCxpw1Vlv6kBOp/looJryljLrAfHUC/PishTERMHvUewaViJxJ3KkbNExoruC5SzP0UtqsqZb R4YsJiW0p+IGNwH8sbmoxfgsznt5oYTTWIDngaIb2lAYnkMVF1DQA2Lt0v6SPUlo1FvKcWorBRIL 7brDsUnB7y6dw47pqNT7wAplHwso/P8ZLROyKQ== ) aho0g3sg9gre2dpig206pibb7ijh9miq.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 88670d5581591f0b aho0g3sg9gre2dpig206pibb7ijh9mir NS SOA RRSIG DNSKEY NSEC3PARAM ) aho0g3sg9gre2dpig206pibb7ijh9miq.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190223035219 20190216035219 59612 fpki.gov. pUWz4PxY1J4Qzr6cW1VC+uUASmbj7fGeFLCHPKnmUOZ4HYLBS2NmFBAmZQ5350nQjqVtED5VAs+J LdDiYO9x4kJpwHrx/uG918k7IBKcvkgHSc48vo0xlwD6jNJaV59qhbfBWoHvrz5WaWtmg+NEk3tg gqoybRKFTnEzd9jj57NYpIzPqvGpakGArvQ+v5f2vHjJU4QMF2rSYRfl5DCeS2cL+XSxHL2ZdcBg LVL5+lpyY8yAwjDVuLXZytiuQivcZCbjPFATDqc4NlZj/9yx1EYlo10lTRwEnb2kpm0AeueD4cJ0 CyeZTZG/4DBEVUClTHlkZYRfIQilgevmTsxehw== ) aho0g3sg9gre2dpig206pibb7ijh9miq.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190223035219 20190216035219 59732 fpki.gov. eINWOjc2dQt7ZDRjSiNGrNlPI1i5C2sCWgDP8DXFAq4levkC4XfpeWyV9ZGWsSk5P2ib6azM/raa B6X0N9o6nSCCGYOOegUYUq5ek5yIm5DIUskCJj5fOzx7G2kiyhVwmrbOqjO9XGu73mIkSn50W/NC t4vNXrPu24Q9upDhzxKwdh1ZYaFIIvl77yx3YyAsmLA+IVx6ptpXfUwH9hq3UzRg9Ai6Jt3hMaes 1qU/RqG0vSp3f1Ecc3SOgIUoVIH/PNmpy8oXK6oRYJTlhnGG/ib1tqk9uB5c2lRVmD//R6pUKmWr ew8LHVX/ItJ8Dt1BLCC2wIHGpmvRBPGwn+qdig== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190221140406 20190214140406 59612 fpki.gov. qzZ7ICrsFlq2gGJjEB1W7oDQt7K9J/HU+jVAtcqhfCSZiQenX5BylYFkVztDEM4OXCFz5NJwBgBV mERqJ4vXfgfDRgFDz5kO8Nuz8I4QX3rgJo4/cQ3JTVMDsf72ny1cyK6I90j6UG5VWGsd4SQrEJb3 D7zE9+rEDxGEh+M/QVroJEXmjKqa0ecJIWy5+IWjT8/CVltfYvKqbbku7UoirBFWFCvNK0RpwLQ0 rAoHSAjQB+EMH6VoMkBRj4gdkFMHftYnILtQz3eRhv2KvKNzdgCECSizj5eAHTj8U6cAT4IrfJBI hT+ec2FqL/Sq9vagd1K3j7dQw8pZgr3ARuE7kA== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190223145038 20190216145038 59732 fpki.gov. BheyEtPaucBaWueqGKCBNpPT2/KVz/HWrboxa8FaKoJOqmCiDVMu7PD2MeDKg8tLUl2CqPO6cV8I 9AQCVi46SA8ki++3J7foOXYRG7uTbYN6wSrd3Oj05ggXozwVk/sV1ZvBmzTGc98O+tLPeRJPtyGd Icg/kJgpNLO0fwKYwrDJMWgkkkd68aNfObuxNenKME9h4Wq0Dct4aIzXX+cK6yzWpQvaDKG8K5Wg FUclAQ1wA95YjAwor9LEEJowO9j8aauF5GQ6Q6rSg78evJw9Oocc9AuH+OCpsc99NcyM3onihBkA gk3FF8Me+WyQi5GLTi3MycmaxTZF3EBgognn9Q== )`
	RRSIG=59612 and DNSKEY=59612 verifies the SOA RRset
	RRSIG=59732 and DNSKEY=59732 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: