DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2020-07-04 22:01:37 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1139 bytes) ;; HEADER SECTION ;; id = 35508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=46594 is now in the chain-of-trust
	Query to g.root-servers.net for FPKI.GOV/A
	Received 666 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (666 bytes) ;; HEADER SECTION ;; id = 43949 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 37350 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 28728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200717170000 20200704160000 46594 . AHOP1iLfNhPc9HTKzfmJ8w7sX3G39rBw7pbsmVayE3KdeWevdTUrnk8mXSDoRdXjvl1pDjjXnkBw YQQSww/oJmMF64gLRoQcWkUlmY8Mfsxnnn58Y3n6mfDm8qM0AqGScONcYjFdhtC5tFYcu2ls9xKk KgYa/a9zc6KkNPGJQjq4pLDB0XbRKZLgjZTMTRlgMM3O5FNp4dVfDIm8GlWapzoaPht+5BU9Dq5k PL4NN2fkR+hEs0P9JmVYN31rbXGdF1N7yG1lbj75DZSBpX1neAEHkyhoeupTnqdT3tXpDz8iXjkw ZCAVdoBbYhFquViGd4thxRsTUSbfPM41W8eO3g== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 10730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200713190254 20200628185754 7698 gov. cpLMlX7mvjmWoqy6BKZhJ39gUGSOy+c5uDA/f5A8nwkBllxnKp9jlCtyrJL6/FHVclJCkeeXzWPb 79sxp7aRZHQgR7jp4r/i6HSWGhOHCWYBNUm69ghiMBUPD+z8F29lp66nZTVDkgssvLTc/hGf5DF/ QfvNQE1ciB0MtKlmEk1QJRYNO3R5U1ZbjvH6+IpR+TfvkQxvXdPo/jeWN+OqOuZ6jg7bS5q3mWds fZHILyyJfXvAMq0wGnpA6bLHMXsT0okBsaAYQ3TTXJzUPubdNEwmey2hE9Qqs00huFbENw9tXnBb nuzJWV4zTvnbAdnGwYzhhYLKBp7W5xF1nEKcwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200713190254 20200628185754 7698 gov. cpLMlX7mvjmWoqy6BKZhJ39gUGSOy+c5uDA/f5A8nwkBllxnKp9jlCtyrJL6/FHVclJCkeeXzWPb 79sxp7aRZHQgR7jp4r/i6HSWGhOHCWYBNUm69ghiMBUPD+z8F29lp66nZTVDkgssvLTc/hGf5DF/ QfvNQE1ciB0MtKlmEk1QJRYNO3R5U1ZbjvH6+IpR+TfvkQxvXdPo/jeWN+OqOuZ6jg7bS5q3mWds fZHILyyJfXvAMq0wGnpA6bLHMXsT0okBsaAYQ3TTXJzUPubdNEwmey2hE9Qqs00huFbENw9tXnBb nuzJWV4zTvnbAdnGwYzhhYLKBp7W5xF1nEKcwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to c.gov-servers.net for FPKI.GOV/A
	Received 526 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (526 bytes) ;; HEADER SECTION ;; id = 11456 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. KGRnJerM4/c6b3wlA8RGPlryfpxQcKqBV7QuRw590W29y0P2S2g9WXNbCm1uQuvuVSAPgtk+b5k2 8tscmwGW+D1OQSppCyEXrv22RAkriERk1MYVBGoRrv60OqMpxFqza9qdpcqTNqQ8FeeQZhNJ1UQu 6nLWf1nDULab5Imq8VUBUqjoO8zdoRYDDJO8VT6iAuoUI7MjMHagcQAF+3nCHg== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for FPKI.GOV/DNSKEY
	Received 526 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (526 bytes) ;; HEADER SECTION ;; id = 35882 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. KGRnJerM4/c6b3wlA8RGPlryfpxQcKqBV7QuRw590W29y0P2S2g9WXNbCm1uQuvuVSAPgtk+b5k2 8tscmwGW+D1OQSppCyEXrv22RAkriERk1MYVBGoRrv60OqMpxFqza9qdpcqTNqQ8FeeQZhNJ1UQu 6nLWf1nDULab5Imq8VUBUqjoO8zdoRYDDJO8VT6iAuoUI7MjMHagcQAF+3nCHg== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to a.gov-servers.net for FPKI.GOV/DS
	Received 400 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (400 bytes) ;; HEADER SECTION ;; id = 48167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. KGRnJerM4/c6b3wlA8RGPlryfpxQcKqBV7QuRw590W29y0P2S2g9WXNbCm1uQuvuVSAPgtk+b5k2 8tscmwGW+D1OQSppCyEXrv22RAkriERk1MYVBGoRrv60OqMpxFqza9qdpcqTNqQ8FeeQZhNJ1UQu 6nLWf1nDULab5Imq8VUBUqjoO8zdoRYDDJO8VT6iAuoUI7MjMHagcQAF+3nCHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=16539/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=5730/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=16539/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=5730/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200711161008 20200704161008 40176 gov. KGRnJerM4/c6b3wlA8RGPlryfpxQcKqBV7QuRw590W29y0P2S2g9WXNbCm1uQuvuVSAPgtk+b5k2 8tscmwGW+D1OQSppCyEXrv22RAkriERk1MYVBGoRrv60OqMpxFqza9qdpcqTNqQ8FeeQZhNJ1UQu 6nLWf1nDULab5Imq8VUBUqjoO8zdoRYDDJO8VT6iAuoUI7MjMHagcQAF+3nCHg== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=16539/SHA-1 is now in the chain-of-trust
	DS=5730/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f`
	`FPKI.GOV. 3600 IN DS 5730 7 1 8e6cba6a0c0fe82bdc27a7ece9a28ff8333790c1`
	`FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 )`
	`FPKI.GOV. 3600 IN DS ( 5730 7 2 c8218af2b963175220214194f13f27401f20947a61de9c85291ee2a1ff17da5d )`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Timeout querying dns1.FPKI.GOV/199.167.92.100 for FPKI.GOV/DNSKEY
	All Queries to dns1.FPKI.GOV for FPKI.GOV/DNSKEY timed out or failed
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 21454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZ0GHbKqawpWRyFaucb2tLvtg5YcEG9B7OcoS4Y9JBeb10mk0E5Lddzek2iUagFYMfy/eUQb Y1uGwHjOqKcss7x88oIp6T8o9ljvGJv9r844fLqqlkT8pAAm1HRdl1g7N1iA0hTn4ShMyo6LVi6B jTGJ3ZSsrl6RnybtpYcoYyOJRpGvS84IDkmcJpvv0tYm/hAmlCoGfexKQgMzjK8lOgeA3PtxLZnq J6lAt0hS9Zut3+HFZ304VwtzDXV/W8TXxcPj8OuWwING3576uCKjgLNrCPpBZx04zrwlNOwXqHQv RxAh78HxHJlPVNztCNlZoajU/xIcUN2W+EYTlKiAWoc= ) ; Key ID = 27287 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbxPr1wcSlFYnJ1fDmrWeZj4cFdyjGdUo/WninXFfBvs77kcqRino3dmwFwaWGhTl3FJsUB4 C1hsEe8YMa34+GUWstBdEaYj1Bg5ANZUaM+O++z8/BMjPz5jJnuzibm1PY4fjDDB6CO07PfKwHiL hRYuQfibYFSkNosISmJZZ9mcXkA8YGTQDts9XEHpy5PoRcfH4S5PKg8gklH1eGXHljmc4oGXmHjJ fDS2hPI5MFHpxmWa7QjNWpfPLEWjU0y/dHMq6WQtmZBECp+RoiFaX1HOEHA7+rYsPyrL7nMt7d2q YSMXWsughIvvQXu+pKI6CwNzLtsliLZ4Ak6ncY8Ip9E= ) ; Key ID = 14903 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAcIZiK/8n3w36qliNoVTfO5Z5wGFZJ2RU7lbOBQGCsOBpnwzLJNKfBTUi8xv9ANn5+d6aTo8 GsulAuNgZbeTqBotpiJaRQhpm7aj8xECxJ+MRUG9Ev69CU9daCSVAocr5q0iJhZiM/Cyfu5VmWQu qQcsmunRUSDY6+X6opyUml/q4PBJjwQSq0lw/xbaAlhEAcMk0/5oajWdTstqzg0TP5wKFlFJdYMJ d+bX6Te18ZSVpur+yEizGmqgxbfhyb/s38N5jovf+Bnuvc6or3CVkKenswHfBVoitUZ0YZvabcdK rKeT9eqaOPWZ6gu9/E3anWb42hcYSxFmtsVjZ1YkqIc= ) ; Key ID = 5730 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 27287 fpki.gov. WEx9NplZmTJy9r8ybiOF9JD7hbWHDm3CBkei9PkcozsbfIphvKarExTDHAn6pEBeG858+CqJgtxI 22MmMVPd6F8Oa2oqSeans7tV+Cnnm6rusE8MK2nBUbOtgKHFBoc7c5WaFbfeHH9nIMVSRjpnM9nZ ym07nG+czKHY0cOfOF3d/s946TZjNEi2CWruMej5uxWRCXbpS922HyVZgLh61ARJNNtXsMCPbR/t aMssXeUpwWBHFewJ/MAZ/Ns5UtXzNE7YjmY0qlW9n+A3q/1za/vvDFV+LHkgmlw618bkss7fmchF ClkwHPxHq15slbRFUTFN1xNboogK4nI+ecL6Rg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 14903 fpki.gov. D6WrtI9hRNI9QOhQL80EPVqa4OC9GW7T/s2K/WmxG8ihp2ZIriPDL95GlMuUOoMWLIcAZES/teGM 4Y9tnfgZoSC7vAofhqFJ832V75zu+FxGrTiFeyRU5aCCIn9PBTE8rB6XsI2KzwAB5JWVgsUyL1oI vFBQwzQJyLDrUQx6oxjAcaDqsGolOe+aGOjGvIRXUWBGljNXbYbdXMXo2zarhZ9l0DK5QQ+omzWh tQpX0u+lYHVBpOawYbONU4jJavqmy4LtlMrspyOv6DaWTEEkVp7zevFalKZdRDs8hLxB6mLTfCgg APqtiZoUo6LPbMb/nC1GLsbz8lwAvLUTSn86zw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 16539 fpki.gov. gwo5o9Pq7GnlprCtOF4aBVkhiIugXbzatUHhBumu1wzb91CAiHaXhWFBK1p/g6vUWaHAeBza0Kx1 P8fvqsQGZbZs5fwJ8rG1wIGADAU+2mz7OfxN70aZikM9wMrKwRabK3pD/MXjpE5s63tWGpol41oH WYR/HkOrCme/o8VerPgB6NIs0P+JxhYNYMaTybq/DDNRcuKTi27dM43EZbf88M9J3IhUU27pYsnT CUz3fqCAESdkJjKNvjpscfXVAPfdAeYeyxkBWugSBpn23zXw2wLF0Zu9Dput1RkZ2EH+GbbciCMG 1gK+wZJKrBHyu22kFDTYpz4b5hIu1z2tmmF08Q== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 5730 fpki.gov. vo6UVZImYz3OrOzpSQT8qnK0njk6ZY9+JtSejYHf58ZPfWxC6apFuDNDNbr7NG8U7BZL/U71wvF1 tQaMzlHVzW3PnRAMGFKf3z9WvlCSX4BRZ0UFTsHCqolPiYnuSH0SEmzOOqnNRLx48CobEaoGUiWN IoIg3qfj2/rKpQU1S3fQtm3WBeilrZIhhGwAugbfqXotq6XodVIsnVNJtCNFl2UjZX0EMMI18xBk Qx97wW8X6BCGwfjbtNnGAjoITEFX7EEGb3vqjUAfwVk1qBBawu813FoI6ImAabjjuU+nUthG3qlf lDY5wbGl7TyhGxnCCHlX5ojaNg8ZnyLPWXqPSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZ0GHbKqawpWRyFaucb2tLvtg5YcEG9B7OcoS4Y9JBeb10mk0E5Lddzek2iUagFYMfy/eUQb Y1uGwHjOqKcss7x88oIp6T8o9ljvGJv9r844fLqqlkT8pAAm1HRdl1g7N1iA0hTn4ShMyo6LVi6B jTGJ3ZSsrl6RnybtpYcoYyOJRpGvS84IDkmcJpvv0tYm/hAmlCoGfexKQgMzjK8lOgeA3PtxLZnq J6lAt0hS9Zut3+HFZ304VwtzDXV/W8TXxcPj8OuWwING3576uCKjgLNrCPpBZx04zrwlNOwXqHQv RxAh78HxHJlPVNztCNlZoajU/xIcUN2W+EYTlKiAWoc= ) ; Key ID = 27287`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAbxPr1wcSlFYnJ1fDmrWeZj4cFdyjGdUo/WninXFfBvs77kcqRino3dmwFwaWGhTl3FJsUB4 C1hsEe8YMa34+GUWstBdEaYj1Bg5ANZUaM+O++z8/BMjPz5jJnuzibm1PY4fjDDB6CO07PfKwHiL hRYuQfibYFSkNosISmJZZ9mcXkA8YGTQDts9XEHpy5PoRcfH4S5PKg8gklH1eGXHljmc4oGXmHjJ fDS2hPI5MFHpxmWa7QjNWpfPLEWjU0y/dHMq6WQtmZBECp+RoiFaX1HOEHA7+rYsPyrL7nMt7d2q YSMXWsughIvvQXu+pKI6CwNzLtsliLZ4Ak6ncY8Ip9E= ) ; Key ID = 14903`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAcIZiK/8n3w36qliNoVTfO5Z5wGFZJ2RU7lbOBQGCsOBpnwzLJNKfBTUi8xv9ANn5+d6aTo8 GsulAuNgZbeTqBotpiJaRQhpm7aj8xECxJ+MRUG9Ev69CU9daCSVAocr5q0iJhZiM/Cyfu5VmWQu qQcsmunRUSDY6+X6opyUml/q4PBJjwQSq0lw/xbaAlhEAcMk0/5oajWdTstqzg0TP5wKFlFJdYMJ d+bX6Te18ZSVpur+yEizGmqgxbfhyb/s38N5jovf+Bnuvc6or3CVkKenswHfBVoitUZ0YZvabcdK rKeT9eqaOPWZ6gu9/E3anWb42hcYSxFmtsVjZ1YkqIc= ) ; Key ID = 5730`
	DNSKEY=16539/SEP is now in the chain-of-trust
	DS=16539/SHA-1 verifies DNSKEY=16539/SEP
	DS=16539/SHA-256 verifies DNSKEY=16539/SEP
	DNSKEY=5730/SEP is now in the chain-of-trust
	DS=5730/SHA-1 verifies DNSKEY=5730/SEP
	DS=5730/SHA-256 verifies DNSKEY=5730/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 27287 fpki.gov. WEx9NplZmTJy9r8ybiOF9JD7hbWHDm3CBkei9PkcozsbfIphvKarExTDHAn6pEBeG858+CqJgtxI 22MmMVPd6F8Oa2oqSeans7tV+Cnnm6rusE8MK2nBUbOtgKHFBoc7c5WaFbfeHH9nIMVSRjpnM9nZ ym07nG+czKHY0cOfOF3d/s946TZjNEi2CWruMej5uxWRCXbpS922HyVZgLh61ARJNNtXsMCPbR/t aMssXeUpwWBHFewJ/MAZ/Ns5UtXzNE7YjmY0qlW9n+A3q/1za/vvDFV+LHkgmlw618bkss7fmchF ClkwHPxHq15slbRFUTFN1xNboogK4nI+ecL6Rg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 14903 fpki.gov. D6WrtI9hRNI9QOhQL80EPVqa4OC9GW7T/s2K/WmxG8ihp2ZIriPDL95GlMuUOoMWLIcAZES/teGM 4Y9tnfgZoSC7vAofhqFJ832V75zu+FxGrTiFeyRU5aCCIn9PBTE8rB6XsI2KzwAB5JWVgsUyL1oI vFBQwzQJyLDrUQx6oxjAcaDqsGolOe+aGOjGvIRXUWBGljNXbYbdXMXo2zarhZ9l0DK5QQ+omzWh tQpX0u+lYHVBpOawYbONU4jJavqmy4LtlMrspyOv6DaWTEEkVp7zevFalKZdRDs8hLxB6mLTfCgg APqtiZoUo6LPbMb/nC1GLsbz8lwAvLUTSn86zw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 16539 fpki.gov. gwo5o9Pq7GnlprCtOF4aBVkhiIugXbzatUHhBumu1wzb91CAiHaXhWFBK1p/g6vUWaHAeBza0Kx1 P8fvqsQGZbZs5fwJ8rG1wIGADAU+2mz7OfxN70aZikM9wMrKwRabK3pD/MXjpE5s63tWGpol41oH WYR/HkOrCme/o8VerPgB6NIs0P+JxhYNYMaTybq/DDNRcuKTi27dM43EZbf88M9J3IhUU27pYsnT CUz3fqCAESdkJjKNvjpscfXVAPfdAeYeyxkBWugSBpn23zXw2wLF0Zu9Dput1RkZ2EH+GbbciCMG 1gK+wZJKrBHyu22kFDTYpz4b5hIu1z2tmmF08Q== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200707225008 20200630225008 5730 fpki.gov. vo6UVZImYz3OrOzpSQT8qnK0njk6ZY9+JtSejYHf58ZPfWxC6apFuDNDNbr7NG8U7BZL/U71wvF1 tQaMzlHVzW3PnRAMGFKf3z9WvlCSX4BRZ0UFTsHCqolPiYnuSH0SEmzOOqnNRLx48CobEaoGUiWN IoIg3qfj2/rKpQU1S3fQtm3WBeilrZIhhGwAugbfqXotq6XodVIsnVNJtCNFl2UjZX0EMMI18xBk Qx97wW8X6BCGwfjbtNnGAjoITEFX7EEGb3vqjUAfwVk1qBBawu813FoI6ImAabjjuU+nUthG3qlf lDY5wbGl7TyhGxnCCHlX5ojaNg8ZnyLPWXqPSQ== )`
	RRSIG=27287 and DNSKEY=27287 verifies the DNSKEY RRset
	RRSIG=14903 and DNSKEY=14903 verifies the DNSKEY RRset
	RRSIG=16539 and DNSKEY=16539/SEP verifies the DNSKEY RRset
	RRSIG=5730 and DNSKEY=5730/SEP verifies the DNSKEY RRset
	DNSKEY=27287 is now in the chain-of-trust
	DNSKEY=14903 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 8675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200710225214 20200703225214 27287 fpki.gov. AOX/Iq0pAp7fkHslr5fuDwGDDAJi18TSsp3afxFbRQsHexOYjuI+q2trTJtyHHSnEKKaZd6GhHoO O7wJgJ4Lempr7AObGSftOllPKx0BtxyF5dfNljTK2SaXbM3vA4O+U+n7CILfVPS0kkfoFPdAY5F8 O2hTvR6BZapQsh4DXuNnGaFOZ7zzkZEXLJMH6Ff/8QVHWkwZj9Ryur6opFufVIXoJTU66dDs8G/U Pi4OaK0S1+F6QuMtv0bmqNC+AsHAnS8rQt1a3XZm0LT/53eUQMRB6qs5gd7f7GZYyXGp9sNi/ZUB 6Tc1lk0e7t74YTEv8H5+agUC9q1G8Tfv1f0Cew== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200707065122 20200630065122 14903 fpki.gov. SK3vHogevaDPSRsHGA8LKQ43rCRpHFJGKdE8ocaQWOKyBKT+5kqfEcPhVRGdqD99jyGMBthY2Meu LfaHbIsEhQULrs4R6JKH3w27KZU1y6xS29qIMx4DtQ5zZ3AS4Z4REgUCZyD0XInulMC3BugpPzfy I/pWDdd/NWNSy5IisXRKPVbLMUV6MJNpPZ+1Kty9yCIAEUGVCC4YBAQUB1TbbvKFBO66k90k7hHW gJEQxSNcINE0ZjpSD/dipir/ZHQqOEHWUx4CsVHt3HF/TrjWBItCIlK0H0P1lawfite3WMxcuT82 q3r2Srvq47XXJWaXb5ostv4vuoO7rFb6QoeAfg== ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 818a7ef82de494fa rfkg16qq4agmlco1ittb7aeqk5j7ketd NS SOA RRSIG DNSKEY NSEC3PARAM ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200711135251 20200704135251 27287 fpki.gov. ZAWPgIEZ4IkiOcFcjnfBc2acnqsgHZOqe1kbz6tk12s+uBlRZY8eKyantl1ejXgg9POZ0UQ/LjYp k7b4jVSzkT+EFPJhVrUM/2+tjsk/VG+meD3y/ZpRIsIRgbZEQfpsPjChWMF8RqpwUFADJKHhu6jx 2AF6zubx7Z2/6d0/K8tQbsT0KuGLO8r630ySu/KQxcnwhCvhgErtIcr0ZJKtJAd0uw/QTkVSbzL3 /XwlLEvYCLzrZBozZ3CiGc5Em7kR9UM5Aw2qnBxnQqYUUA/I8A1BNwMmuVxw8V87tf3R9HsvIddf I+G76Um1AQVjsP/FhKuY4EAmKj8ZRWiakKztGA== ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200711135251 20200704135251 14903 fpki.gov. NL9/3nnhDMdSiJd5S6x/zNo1svU+HYGzEMUEYoIJscIwWpNrilO7ie2/jxHUOLVWSOFGeuyufzi4 lQqx3a5XE/CKXTqwklfTGxy/LMRgNC/fVqJH6cDARaaaqh90glIXs41qt24iqRZTDaguRYbwEUnn YifuXwwP2QmBBmmpQL/oR+Ro9bhb0hw5/O0oXnbnzGkWZRk6iHFCSXINHiR/9/ww1KmQgoYsxTCa o/bRfCDCkOphl576H0qzA9klTRHGNCazCN+oDAHObgQUDFWaMSEfmBDQ5orspfjU/IN6zHdFiXCG Od94QStokSIqGxar4nszVNEPrLLNFimVKgM8yg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 21496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200710225233 20200703225233 27287 fpki.gov. Q2Gwp451CLua0c7Hy4LwOb7y8QkZIahDHsz3O/FT5AIzQXvQSZiTQ0sCfEEByVGC/h8TFjmla0zS P+f8x3vHtTJeLvxlpGji/FqaSV0gczF8ZTKpvRUlp89UouiNf/clyQ5PwkD4y55mDQxl/TuICcGH d0JcFJ91swTyb4dB9p8k0VjkCziYTNC6lQjkTpCKtgs4laDjjJhQksTs9yV/QBTDRmRCATs2qc0h Q6U6+LCxOCx7nmDzmbpYsy+Vfm2qptTvMS+Lol8c8K+4GOEMY91HNLwD1Gv5HR36dnHVYKknQ7UF 9G6DSkV2zKby02RDmHx8FhDKpHBxuCueVt1GOA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200707065122 20200630065122 14903 fpki.gov. SK3vHogevaDPSRsHGA8LKQ43rCRpHFJGKdE8ocaQWOKyBKT+5kqfEcPhVRGdqD99jyGMBthY2Meu LfaHbIsEhQULrs4R6JKH3w27KZU1y6xS29qIMx4DtQ5zZ3AS4Z4REgUCZyD0XInulMC3BugpPzfy I/pWDdd/NWNSy5IisXRKPVbLMUV6MJNpPZ+1Kty9yCIAEUGVCC4YBAQUB1TbbvKFBO66k90k7hHW gJEQxSNcINE0ZjpSD/dipir/ZHQqOEHWUx4CsVHt3HF/TrjWBItCIlK0H0P1lawfite3WMxcuT82 q3r2Srvq47XXJWaXb5ostv4vuoO7rFb6QoeAfg== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200710225131 20200703225131 27287 fpki.gov. KmL2hLDPRIAlthLfs8XVVbQghDt8vnJ1MhZk/5ntUqrNUAdbzL7JhgsuquIO8O6okTbj3VOAQ3+I bNNKsV9NLXqfmJ+Q3IT9uiPZK2d3SGvb2juCmE145cIe9XIVw/dc/EgK6U+1UenRhSY3LmD/3MIp r/X01jwQK82NYOEsZxauykw+Hec9rW2egFGzTtFZQtVQHKOm8+XM9pbolcsHw9ZKlYFLI3U9m6Mh DFcgfF5eAyC9zr8vQH/NeJpseXP0wutf+BIUnA1xx+S3dW0LetnmKBzlrwqZNKr0xH2GQDfri3zD irnk8MbliGCJExgg32NBd84jghggFo9KTha0Og== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200707065117 20200630065117 14903 fpki.gov. FrQgmzmPcHnzIQCH1UZrObcZwVaVVSK3tjRsePkIoObVQ9oBgD2Yd13jcR19vXuxxl8R1jKcpV9l uhTycpBXS59du5rk9ofKFtPlpQCQ8ZUbjloHYOOA4gP17Et9lJBUE/Uk3rcHoz6/Ee3Yh354Gf+U Vhusz0AK58xD2Y+kBIuODZ8myTI0WpL22AVUyJNqpPCWHObulV0wwIcl3Ccy+KLB3BS7FMDyjw6N nk163iBgCGjaywfdAty4L5HBG1EkMoQBbsQzSBN5RjByE9jsuhNJkUH7xuUDPaAxnG6wr8dL0+3Y 7EkBZvejehQm+oOFeoodMlBrsEUJEUa4DXn/fg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200710225131 20200703225131 27287 fpki.gov. dYL0QY1BibjkNFXrhW8VFAAkoBjbvFTbxoERhsByhTaI0ym+SUJBVnHEwaLpToU/fQK/mvkYHPio ivYoWtXf1vu+EB/tqawI2xIRz60dW5zo/ZA7f9JnvveSQpgB/WZwVFAwo1Ln7w3g2o3MVIzASHpl TS5sK4piTqk4lQZRA+83une8pcxFiwdGp1tgmiAMfR+mut0Vo6pTn5+WzJLsDgfm4iC9lEhtxEqM PpMXMz4BckRl3XR3kLCCBZnOUnPBQjGwOlESto3muklGbJjNbXrCWbpA/hwY64IbTF5FcvdyHsGx e/nf1HMgkWbLpWZ7J50TAucyqVKE3HCYV/IKFg== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200707065117 20200630065117 14903 fpki.gov. Icej2c6D4CKCndYn7xmf5ZdJNFnnR4F9QSIBJ2tWXAaNPDHbeQcR73E42qR/1zHamCauPPFPt9oQ iuuQIwFtJblNAkJCgoBZ9nNK/el0Inn35RnhxkXq6lNtIcs6bLpylFvCA8NTALjDErwEE6WF00rI xr3A+HoRSZ8erE5TpMyUAofytLg89bUjrDJVYlhWTRxTkuBwxvVM31o9AH40YlaKKEJDUisBGAMj HAhDoPCRqpF75vrMnB6OOPxkRt+9vzT+eo2E1w8VYezIGqovwzjmOTJlL6XSUniYnLI9O+4C5u4h ZMUEJjUj8Hpx3bJ4cbpdyBzy0kEIrQzSuyLaTQ== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200710225131 20200703225131 27287 fpki.gov. Pb0NCupJDj2AEhf+k3IG+/+jiVLJNg6oHZVD3BqgSltGS5Tae5OB4VS/L2zTcC0LBKLZbBHvuNTC hu38XqLiA0uR2AXhpcG95kUeK2hH/sDNwSfzS0+78EyOyWt5nrmZEkLAUchnPRxAerENIfn/Tf/M 2TlYiZngQYJ+aCRqIDBCBOXhRiDZqT6ZwhES+VdLDCQJwUPPQKFCshUGlpvuOmkld+BnpZ2QjuXY QqMpVINtS7lCDeH6JgMf8ymDAPNSxTCgRgsijyV+Kz33DOjgD7vX1DhA+7quKAAgDy6b52eeE3k1 grlUu5UCnMsd6xcE90IAR0NhGkhDxBmmA3oIkg== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200707065117 20200630065117 14903 fpki.gov. YcRwomGE3xYEtMv40VGTda/yjKAb4X0F0CN3RnxMgFQyZNO/q38uG3yaKyKRnK9yK+C1Ixfg6VZ9 xrcMFpW9tzqhRNfduFkmEpUxftWd2WygyE1u88/8S0/UQwAWQvfOel+SLrXnBJuW0PlZguSqE5JO GR21fAECDLsTfKGxkmIT7n66Dwyb5x6Ok84ceHtvuSE6YKYyY4A3NGlloUp14qNpj4+tmgkPZ+nP 4nEF0JP2VPtSo6tq7kpY74CdtFj8bgoWv6zribbfg7zDU0Qm9XAVhNMYOQ1cxL82+DIYbkYDOnjl ELCYEciG8KpVVS1FuTizoLzsjuk8GvPLUbOJXw== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200710225131 20200703225131 27287 fpki.gov. VQ2pMKNnSeBBrIuLu8sXfkCzx0ISrra0DcJIU/xJEtPLS4WnblkfocQmFebokqvg6KwN8HPe4rbT aSx5kDr4V8bdHBo6wMcpvkz0u3CH7wPyvN8AS5CSSUqxQb1N0TwYI/c6c1OEJnYUUAIArae2f1Jc nnPXt+cLln/V+IAEMqwXLFthaTiromcgqkWWWnwXgpjtMtMHZ3pATQo5EHpl+edgiBh9JyAuzeYf A0dB4HRFuEFAZKD+JMoeiGFWX7hu8eesB/V5tlzglQI8mxvOLaqjgx1O5yuWpBdL5mpNdywZs9++ fXLiO0h87k7goQMf+RIur5/Rxy+oAw0Qvjyuaw== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200707065117 20200630065117 14903 fpki.gov. Z3PvYDijcoXK2s1evxMfQA3IITnc0Jze9iIIGB6ppy/vyHHNwYq7vrxZlh7yJAljALyHq8lxedVB 1hHB605vgufCT3/7JHu/9+M+0GRZO9PbUVvXK2jv1hQ8N4jiOiG/wqEkQbUmc570an+I2vMSEXAE aGBbsYuZNvFWX6iStetPY/UHcCHejdrTYIbepH0sGy4HXd2tFfECQ/US9iSpnvwCD/eQIfn1psmk r1b44UsGnT6NPThIgQmYzB6BT4NNtQo+Yco4fi85qWs22MKysa+FZAKB5gR9Wk3U0MmyqlgEx+9n Vorp02VPl/PGwdfRaOlww93D7hgi8spl7b2caw== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200710225131 20200703225131 27287 fpki.gov. ggv4rp0RPyhKNkMK2fgWK+vnH2YHqds6GLwC/I27eq8cXjyhrSYhzG0vqVghSF7z4VdRxpraSq7h Gyd5e/fdIgKVzZAFtvpGK7/1tqoNhawFNmb/OpadZqrBVLZHsbzRhHnZIvTjB3FhOjw1qUQ63uhN u9Y8h3+dJO3Upb7Hw88fQ4hvP4DUiJBo9XytLwjg16Brizwjq1exL5sq0JaDb3ucI/Fy4ubLjptV pAdPUCT6yWRp/INfcrM7u9MzDdRZex6bpSyP1VudHXU34I/fG/8UzrIgALMF8Xg6Aaz1WlN5NpGa ZaLYtR9BBqYR4ztf+Lm7J5fgP2KP5A7YAxMAwQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200707065117 20200630065117 14903 fpki.gov. DB5uI5nmQrJ0v8XL0R2qh6yxQFB1cvnZzr0ckRdpO6krNQOszuktTgkJtbR1/syLq2OUAcUADfLC ZCeg8WSa+kQgRYD8Fc939YOi7mtC19yjc5GIMXwBInqjuF8RJrO3FX+lAZM4MnJ1XF9JgUEDMhCB EKVo1ioJtkHgHaqfZmT0CGn33a6+OFJ+qL6KJhETmdZxLGIJM5pD3/4SWgg1uF192e8Q7PWWzn2O aB5JiXeEmFrcuiqC0h7Habr9iwNxvkLDGcdPn9gGtJ/Y9cRT0ep9McDuMQwdzImqoGaKn6zgcg+c WGHqC62VeVYLdBH4ciT59+M9TVcD7X9GWrt/Fw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 58094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200710225214 20200703225214 27287 fpki.gov. AOX/Iq0pAp7fkHslr5fuDwGDDAJi18TSsp3afxFbRQsHexOYjuI+q2trTJtyHHSnEKKaZd6GhHoO O7wJgJ4Lempr7AObGSftOllPKx0BtxyF5dfNljTK2SaXbM3vA4O+U+n7CILfVPS0kkfoFPdAY5F8 O2hTvR6BZapQsh4DXuNnGaFOZ7zzkZEXLJMH6Ff/8QVHWkwZj9Ryur6opFufVIXoJTU66dDs8G/U Pi4OaK0S1+F6QuMtv0bmqNC+AsHAnS8rQt1a3XZm0LT/53eUQMRB6qs5gd7f7GZYyXGp9sNi/ZUB 6Tc1lk0e7t74YTEv8H5+agUC9q1G8Tfv1f0Cew== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200707065122 20200630065122 14903 fpki.gov. SK3vHogevaDPSRsHGA8LKQ43rCRpHFJGKdE8ocaQWOKyBKT+5kqfEcPhVRGdqD99jyGMBthY2Meu LfaHbIsEhQULrs4R6JKH3w27KZU1y6xS29qIMx4DtQ5zZ3AS4Z4REgUCZyD0XInulMC3BugpPzfy I/pWDdd/NWNSy5IisXRKPVbLMUV6MJNpPZ+1Kty9yCIAEUGVCC4YBAQUB1TbbvKFBO66k90k7hHW gJEQxSNcINE0ZjpSD/dipir/ZHQqOEHWUx4CsVHt3HF/TrjWBItCIlK0H0P1lawfite3WMxcuT82 q3r2Srvq47XXJWaXb5ostv4vuoO7rFb6QoeAfg== ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 818a7ef82de494fa rfkg16qq4agmlco1ittb7aeqk5j7ketd NS SOA RRSIG DNSKEY NSEC3PARAM ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200711135251 20200704135251 27287 fpki.gov. ZAWPgIEZ4IkiOcFcjnfBc2acnqsgHZOqe1kbz6tk12s+uBlRZY8eKyantl1ejXgg9POZ0UQ/LjYp k7b4jVSzkT+EFPJhVrUM/2+tjsk/VG+meD3y/ZpRIsIRgbZEQfpsPjChWMF8RqpwUFADJKHhu6jx 2AF6zubx7Z2/6d0/K8tQbsT0KuGLO8r630ySu/KQxcnwhCvhgErtIcr0ZJKtJAd0uw/QTkVSbzL3 /XwlLEvYCLzrZBozZ3CiGc5Em7kR9UM5Aw2qnBxnQqYUUA/I8A1BNwMmuVxw8V87tf3R9HsvIddf I+G76Um1AQVjsP/FhKuY4EAmKj8ZRWiakKztGA== ) rfkg16qq4agmlco1ittb7aeqk5j7ketc.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200711135251 20200704135251 14903 fpki.gov. NL9/3nnhDMdSiJd5S6x/zNo1svU+HYGzEMUEYoIJscIwWpNrilO7ie2/jxHUOLVWSOFGeuyufzi4 lQqx3a5XE/CKXTqwklfTGxy/LMRgNC/fVqJH6cDARaaaqh90glIXs41qt24iqRZTDaguRYbwEUnn YifuXwwP2QmBBmmpQL/oR+Ro9bhb0hw5/O0oXnbnzGkWZRk6iHFCSXINHiR/9/ww1KmQgoYsxTCa o/bRfCDCkOphl576H0qzA9klTRHGNCazCN+oDAHObgQUDFWaMSEfmBDQ5orspfjU/IN6zHdFiXCG Od94QStokSIqGxar4nszVNEPrLLNFimVKgM8yg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200710225214 20200703225214 27287 fpki.gov. AOX/Iq0pAp7fkHslr5fuDwGDDAJi18TSsp3afxFbRQsHexOYjuI+q2trTJtyHHSnEKKaZd6GhHoO O7wJgJ4Lempr7AObGSftOllPKx0BtxyF5dfNljTK2SaXbM3vA4O+U+n7CILfVPS0kkfoFPdAY5F8 O2hTvR6BZapQsh4DXuNnGaFOZ7zzkZEXLJMH6Ff/8QVHWkwZj9Ryur6opFufVIXoJTU66dDs8G/U Pi4OaK0S1+F6QuMtv0bmqNC+AsHAnS8rQt1a3XZm0LT/53eUQMRB6qs5gd7f7GZYyXGp9sNi/ZUB 6Tc1lk0e7t74YTEv8H5+agUC9q1G8Tfv1f0Cew== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200707065122 20200630065122 14903 fpki.gov. SK3vHogevaDPSRsHGA8LKQ43rCRpHFJGKdE8ocaQWOKyBKT+5kqfEcPhVRGdqD99jyGMBthY2Meu LfaHbIsEhQULrs4R6JKH3w27KZU1y6xS29qIMx4DtQ5zZ3AS4Z4REgUCZyD0XInulMC3BugpPzfy I/pWDdd/NWNSy5IisXRKPVbLMUV6MJNpPZ+1Kty9yCIAEUGVCC4YBAQUB1TbbvKFBO66k90k7hHW gJEQxSNcINE0ZjpSD/dipir/ZHQqOEHWUx4CsVHt3HF/TrjWBItCIlK0H0P1lawfite3WMxcuT82 q3r2Srvq47XXJWaXb5ostv4vuoO7rFb6QoeAfg== )`
	RRSIG=27287 and DNSKEY=27287 verifies the SOA RRset
	RRSIG=14903 and DNSKEY=14903 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: