DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2019-12-09 07:17:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 61468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to e.root-servers.net for FPKI.GOV/A
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 663 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (663 bytes) ;; HEADER SECTION ;; id = 4708 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 58318 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 54916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 33371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to d.gov-servers.net for FPKI.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 526 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (526 bytes) ;; HEADER SECTION ;; id = 2322 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. T7F6bMU6vLKKZXAUH5wlW9tONrtGg+L6hy8uwVi191M02eG7940cyxEKjhlX2YTxT/uLe3JkbrI3 vEChSBKvg4Wujq5gF9saX5Ig6gCUGF7l7rlbFkssL3NADFautvuwv16lQ050Mf0oeG0fNJ5cfELe VXHtkLXZprLnGHYDYvG6YRMIKMFPjmO5+shwnVLdS9NgboFBAMePF0gqYxlmBQ== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FPKI.GOV/DNSKEY
	Received 526 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (526 bytes) ;; HEADER SECTION ;; id = 9775 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. T7F6bMU6vLKKZXAUH5wlW9tONrtGg+L6hy8uwVi191M02eG7940cyxEKjhlX2YTxT/uLe3JkbrI3 vEChSBKvg4Wujq5gF9saX5Ig6gCUGF7l7rlbFkssL3NADFautvuwv16lQ050Mf0oeG0fNJ5cfELe VXHtkLXZprLnGHYDYvG6YRMIKMFPjmO5+shwnVLdS9NgboFBAMePF0gqYxlmBQ== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to c.gov-servers.net for FPKI.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FPKI.GOV/DS: 'IPv6 transport disabled'
	Received 400 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (400 bytes) ;; HEADER SECTION ;; id = 14098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. T7F6bMU6vLKKZXAUH5wlW9tONrtGg+L6hy8uwVi191M02eG7940cyxEKjhlX2YTxT/uLe3JkbrI3 vEChSBKvg4Wujq5gF9saX5Ig6gCUGF7l7rlbFkssL3NADFautvuwv16lQ050Mf0oeG0fNJ5cfELe VXHtkLXZprLnGHYDYvG6YRMIKMFPjmO5+shwnVLdS9NgboFBAMePF0gqYxlmBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=14811/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. T7F6bMU6vLKKZXAUH5wlW9tONrtGg+L6hy8uwVi191M02eG7940cyxEKjhlX2YTxT/uLe3JkbrI3 vEChSBKvg4Wujq5gF9saX5Ig6gCUGF7l7rlbFkssL3NADFautvuwv16lQ050Mf0oeG0fNJ5cfELe VXHtkLXZprLnGHYDYvG6YRMIKMFPjmO5+shwnVLdS9NgboFBAMePF0gqYxlmBQ== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=14811/SHA-1 is now in the chain-of-trust
	DS=18798/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4`
	`FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4`
	`FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea )`
	`FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba )`
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 44566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAY9Xelx+gM4CZ8ZULzj0glmZP8JslxbUTSjG84dHlBNX4JV/BdwVTaHOgxtbub4iXViqWmfy 0jyC8V5S377HOH8SwVpZYD5z6NcWRSPIVxavpxU5H9lE2S637zH3n0RLFJY4lJf120AdhjMKsqgu dmQ6MKFHPZATBl/g3FX0L2Q3oukdd0c39ajS5S4uf6BOOVOxs6duxCYScgue2ndH/JTW8SJhsyDz WJlXxe3pHjXoJrc3oIN9xs5pOkqkoQXXcwzW+sklo8qT0Uf/cua8Aar/TKM/zLtWqjR1Uijy90/F nws4TWCq5WYs5/zp3ujoEVF396PLo1/b+smD2/5Pgss= ) ; Key ID = 38765 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaLkMlbmqT1Ie0C1SaLA3/zcgPr3HQ+RRfLPLvOQY4+2mDPQGFJkY3g4b85cOp18nxPZu4g8 LIVQii911HYPYPBk2zn6k5KkP0y4sRHRWD29bfENgz35NZ1GSzLyUW7WRma66pTlsixIEa1CZ3hG hxCTQ9oAu5vKxdcXfid1Aoag8Aau/Ye0sXVarcLcqUwudffST0r242zKvcdSEfJLDzn/WCHgaDyz DoJXbU6GMtSM/aO4nZzv0IP07g1HmcRI0Aj209L3WFMoLTPPtj+N3DesDHuNyt5rR8AU378dbAP9 E9P+X/9TMmRYZVHSfm6J77l7GvFSI8Nmv3I5Nxc50Kk= ) ; Key ID = 26378 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 38765 fpki.gov. bkASmykwjOrYrZyQwF7rbwc7glJYu6m1fl5hKdTcFF4LsiTP3uSZf3GeoaZ9gaLpVOdoIUCpNCjb kehzq6mTuf8nfsAnoe28hOvbSetTw06YnqEHZ4ZAbubUi+p8erab5Bbg9WT6FDDqexBsQRW6F8Ys fQb3FVdVU63Vj6uPXQh6sKonFimdpr+wf9Cc66AOWt2rUPr22bC6R6Zv8zM0xobrEKgmzsXHRbiv Lj64Ja3AQ7SbHjZPyWWky5d5ixCNRIpD/7PkmTqG6JVIdoUMC62QwD1c59etmNYzLwiMYe8gS2tj IKRFx46fdZSRuTeDM8KmyhojvuaMDDzot2wDng== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 26378 fpki.gov. EHCBggvV11DRr2nuQMWmvdHwPVN9aYmRtYM0ZDcHhbXD8s0bif3M6ftJpj2IV21ye8K3oHpIp7rc vTr5EfAcED2pE5msRGp/CuzgeLxCBAXGmlaj+wg15rdbHEqTUrIJPfch1D+1AHO/aiuROErXy1Fq uk0Nl5h0Pgl9sPaWua6UryBomddt6vIUtbggZFh+LI+JNgZ27XGY0PyRMhqAO+He1FMpodI7O5Eo cGg3LRpyFaYZzPDPPNF5MK4HRZKxWOko67F0vdpxzho9Ic7VICJ8LhebiGS1jupyCpiqT2tssf21 UXyy9AKUA25eaH3VMJWBjvKfEagQ8ujMzuk4pQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 14811 fpki.gov. tTYOmylNIIHE3+BgqGvlBOZLgHlorVZTpexK2FfB+eTBnAObPSYm+DsUxnygckMyDU2uLwnMaLps 480iaOoWgGU7dmwciSeg+3VbkSqF5m/bxoY1mfWFG0Z4nDUEW5KEJ60wlbMV1iuV13cMxhgoHJvo rzd2rAHgTK/+OpjYK2+6ySkeQI9B84lsmpzYnz66gDTa1LlyYGidop9yagVcjn8kQRaDckmENoRu zleihuWCu12ojnIfnADqGxMLXFNU245o1MqNvHQdBeT7BMdQTuwMumjmPUBYiz3eTqMtskPJaBRM DzqxxR+AYTwTfrefhmCkV9tSvtVM4b/ZwOMsmQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 18798 fpki.gov. IlgbqI+niq3349z/ChsNibzSEldA9bFKmw6mJEwFwEVh2yfdRdlWgyhQVf9psQZtJV/ykXe46iZg tqt0A0j9nyIsH6LmGce4bz1vPKYbKwtyunQdNB+vGgxIPWz9uh3Q73ZEE2qKeLRR6EF42WVoeiE4 +d9GjkM7z0ZXVQvAcWn3L+W5KBmH1HT8PuEuVHkBrSeiwKg/6p3hd0XnF02xuNhz2THe05TKP/03 hRImZ0D4vHYXL0qGAXdWzozAfmMDzFFbV33UzwXaEq36FuCIEZKZyjjDfiYWCOqyqI+VobheSFbW KVT3JHOOEVA07dil8euEbRSrr3jRSfa9SPA43A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAY9Xelx+gM4CZ8ZULzj0glmZP8JslxbUTSjG84dHlBNX4JV/BdwVTaHOgxtbub4iXViqWmfy 0jyC8V5S377HOH8SwVpZYD5z6NcWRSPIVxavpxU5H9lE2S637zH3n0RLFJY4lJf120AdhjMKsqgu dmQ6MKFHPZATBl/g3FX0L2Q3oukdd0c39ajS5S4uf6BOOVOxs6duxCYScgue2ndH/JTW8SJhsyDz WJlXxe3pHjXoJrc3oIN9xs5pOkqkoQXXcwzW+sklo8qT0Uf/cua8Aar/TKM/zLtWqjR1Uijy90/F nws4TWCq5WYs5/zp3ujoEVF396PLo1/b+smD2/5Pgss= ) ; Key ID = 38765`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaLkMlbmqT1Ie0C1SaLA3/zcgPr3HQ+RRfLPLvOQY4+2mDPQGFJkY3g4b85cOp18nxPZu4g8 LIVQii911HYPYPBk2zn6k5KkP0y4sRHRWD29bfENgz35NZ1GSzLyUW7WRma66pTlsixIEa1CZ3hG hxCTQ9oAu5vKxdcXfid1Aoag8Aau/Ye0sXVarcLcqUwudffST0r242zKvcdSEfJLDzn/WCHgaDyz DoJXbU6GMtSM/aO4nZzv0IP07g1HmcRI0Aj209L3WFMoLTPPtj+N3DesDHuNyt5rR8AU378dbAP9 E9P+X/9TMmRYZVHSfm6J77l7GvFSI8Nmv3I5Nxc50Kk= ) ; Key ID = 26378`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798`
	DNSKEY=14811/SEP is now in the chain-of-trust
	DS=14811/SHA-1 verifies DNSKEY=14811/SEP
	DS=14811/SHA-256 verifies DNSKEY=14811/SEP
	DNSKEY=18798/SEP is now in the chain-of-trust
	DS=18798/SHA-1 verifies DNSKEY=18798/SEP
	DS=18798/SHA-256 verifies DNSKEY=18798/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 38765 fpki.gov. bkASmykwjOrYrZyQwF7rbwc7glJYu6m1fl5hKdTcFF4LsiTP3uSZf3GeoaZ9gaLpVOdoIUCpNCjb kehzq6mTuf8nfsAnoe28hOvbSetTw06YnqEHZ4ZAbubUi+p8erab5Bbg9WT6FDDqexBsQRW6F8Ys fQb3FVdVU63Vj6uPXQh6sKonFimdpr+wf9Cc66AOWt2rUPr22bC6R6Zv8zM0xobrEKgmzsXHRbiv Lj64Ja3AQ7SbHjZPyWWky5d5ixCNRIpD/7PkmTqG6JVIdoUMC62QwD1c59etmNYzLwiMYe8gS2tj IKRFx46fdZSRuTeDM8KmyhojvuaMDDzot2wDng== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 26378 fpki.gov. EHCBggvV11DRr2nuQMWmvdHwPVN9aYmRtYM0ZDcHhbXD8s0bif3M6ftJpj2IV21ye8K3oHpIp7rc vTr5EfAcED2pE5msRGp/CuzgeLxCBAXGmlaj+wg15rdbHEqTUrIJPfch1D+1AHO/aiuROErXy1Fq uk0Nl5h0Pgl9sPaWua6UryBomddt6vIUtbggZFh+LI+JNgZ27XGY0PyRMhqAO+He1FMpodI7O5Eo cGg3LRpyFaYZzPDPPNF5MK4HRZKxWOko67F0vdpxzho9Ic7VICJ8LhebiGS1jupyCpiqT2tssf21 UXyy9AKUA25eaH3VMJWBjvKfEagQ8ujMzuk4pQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 14811 fpki.gov. tTYOmylNIIHE3+BgqGvlBOZLgHlorVZTpexK2FfB+eTBnAObPSYm+DsUxnygckMyDU2uLwnMaLps 480iaOoWgGU7dmwciSeg+3VbkSqF5m/bxoY1mfWFG0Z4nDUEW5KEJ60wlbMV1iuV13cMxhgoHJvo rzd2rAHgTK/+OpjYK2+6ySkeQI9B84lsmpzYnz66gDTa1LlyYGidop9yagVcjn8kQRaDckmENoRu zleihuWCu12ojnIfnADqGxMLXFNU245o1MqNvHQdBeT7BMdQTuwMumjmPUBYiz3eTqMtskPJaBRM DzqxxR+AYTwTfrefhmCkV9tSvtVM4b/ZwOMsmQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191215225103 20191208225103 18798 fpki.gov. IlgbqI+niq3349z/ChsNibzSEldA9bFKmw6mJEwFwEVh2yfdRdlWgyhQVf9psQZtJV/ykXe46iZg tqt0A0j9nyIsH6LmGce4bz1vPKYbKwtyunQdNB+vGgxIPWz9uh3Q73ZEE2qKeLRR6EF42WVoeiE4 +d9GjkM7z0ZXVQvAcWn3L+W5KBmH1HT8PuEuVHkBrSeiwKg/6p3hd0XnF02xuNhz2THe05TKP/03 hRImZ0D4vHYXL0qGAXdWzozAfmMDzFFbV33UzwXaEq36FuCIEZKZyjjDfiYWCOqyqI+VobheSFbW KVT3JHOOEVA07dil8euEbRSrr3jRSfa9SPA43A== )`
	RRSIG=38765 and DNSKEY=38765 verifies the DNSKEY RRset
	RRSIG=26378 and DNSKEY=26378 verifies the DNSKEY RRset
	RRSIG=14811 and DNSKEY=14811/SEP verifies the DNSKEY RRset
	RRSIG=18798 and DNSKEY=18798/SEP verifies the DNSKEY RRset
	DNSKEY=38765 is now in the chain-of-trust
	DNSKEY=26378 is now in the chain-of-trust
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 9343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019112103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191214225116 20191207225116 38765 fpki.gov. gK3VJ4HIN5UIDDErOtsH7RvZghPsrmpTY1WdV3yLmRSzJeyn2qEul4SA+Wf3v/HxhdMHccJfm7ED 2J6hT6+aaKXcATpyRJ+RPMh5sqhpNSqx6UcSPWQxFKhdWJzIMPzT1wOBikqm/5J3TWtRK7gYw2ss oPPl8rH3WPwpy5hzhlHhkS9diO/kpFPyNPC/GMoDmxlXIFLCAsgQwp+BMoARzBN3fzB7FZJ+daDh gWZ2KbfXw444Rr6JOs5pkBH9tkcRumqCUxnNVfO5M1+wwmcncm+mn1oeoq5Dw+FzN6dOTYdHlAzp I3bXgen5fxngtmAtjv/wQPykdhP9Zrj/DDun4Q== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191215225053 20191208225053 26378 fpki.gov. Nr14o82HSF29I6o61C+OjwhEdNJreBYnxdcuSjRoQPmyTrnnJjiViK22yN6I07jTu9BvGjg/13lE VRCXOtzWulCMaPo3YvWsI+Ek5IRM6KO5UI4zySFxZbfu+/r/OBDcv4tCcyaJmpghH949T/+J2fVX sG53aT8TDg3YY5T6FVNRvFmLiyAusK+CXbDicAyFhdPQNcPC5iSdVNhIaR8C3Lr3qaZAQTzhjPPU 6E/HAokkmc+mjnUO4ctwJFw84ZLXRFVSXyi/wN/Hrq3FzMixKYZgBhZZZX0gE239sv6F7A2Hi4Cw rYDTq+IVql9RWUDWtj/0oSEFTsaStW5zsKrtFw== ) uja1346u1c2gjs98ddti791c45410pn7.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 cf20e64d696448ca uja1346u1c2gjs98ddti791c45410pn8 NS SOA RRSIG DNSKEY NSEC3PARAM ) uja1346u1c2gjs98ddti791c45410pn7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191215232047 20191208232047 38765 fpki.gov. KWluGPr+p2Y3l8zTbs7nYGMMnX0YdMDQOgbjxuBCE6XeCTMlh6woVFH08d3hgxjzl+QxM8b1BKBu 89hJ3zjMvkRtPTHpqi1q/KKNivR3VKOVW53o46JEUHHP7V2bXAf1TUHIcS86F0rasM2qk0UBTpMK z2q9MThZyBVBfrgxE4om6Ozz0HLurl0j5tdQQCWmq4YM+t40kPMGxU97tetI3+K8BoL0IbrsQLg0 1CTALZi8kcA1/K2bGi5P+BopSeDdY1T7k7MvR9q6XPFj5HszKGSdOG2wNdK8+2EXZWJDYW001fQB tUjtgwO1knrTC4WfLqQ3nyCD3vfEgRQbJ/4SQQ== ) uja1346u1c2gjs98ddti791c45410pn7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191215232047 20191208232047 26378 fpki.gov. laNIJX+yCg3d+brHoeYm+ff2noc4gSuYcPKPyke0r4xMKQoBu1vDtiQjsnGazUG+cCTEYAMVq0+4 rD9yGr/rfam9BNQhrsiFN8arlT3Z8ODLXgvFLCIFyYeppUxjM+3ullWZeqzDmM5pJpWwjLMxpZkZ NZg8zYT6StFBX1XCQnd4W2tT06bGotrcLChNNxih+jSwljxtY4Wx/tjUCLigv8yWRsC8/MdH2GVt FF3ZLxOL2iFJ4TA55brZP1G4+9UyKiYZJfDwo1AUZdxNrLHBdvRb1qBzv5QgNrjBMQCvZ7af+y0y 6YLMzxEqpSF/cFKHQfrDil7ABHfPwl7XPhIzRw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 37491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019112103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191214225128 20191207225128 38765 fpki.gov. YAuAM8s9QuiwfQ5YW9WAmrNQakVYiL53LQQcQvm93S3FdqibcQaRM5HHbT37nQjVNIoqSFVUfx1e Yb4vqxKj47qa1PpBebp+8bKpFGiWpR03EljrtZsR0x5JYD2FXxqFPoKl26xAOYILV/EC97l1iUAo CV/D5o6jKPqCZ0t619zJ6Uen6OwNqn9q1Rd+jIejh+3UTHpwCrQe8ig+Dui0T3hkVfpxXU6BuNrs VAefVWvPmGbYutwR/romRwXaulRCflSwOcEeOsLTodWySS2uQIggU7xLLp4N1/PbeS/EHBdjeX3B lAtLSJEDYZaLKHklfcw0p6OjieIJJId/r0+Sow== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191215225054 20191208225054 26378 fpki.gov. eeMATLN7B93bY8XUg99dBlvy3bayWpc5jDDdTkBF2ROaak1FrYJz2m+wU1apH4yVreEzZoHKZYbX J33a107urpNm+iT6aqYq+nofbnMHqz0Lef4impcSbmp/omoLaeO+GyuYN32e40B9ym4Uim3VC8tf Mxu9/aNi5uLkKuX02WNspV6AzD2mxAqiJmY3ZKWU+R6UJpwqFfCVW7LFSTxbtp5NGM9ObDzIx7/r V/J7cUYCFrCI7BF82MRUrHXl8xHbyUml6MZvvGo7pcC9hB2b2myt7aA+Vg1CsqwL1FISlfqv/635 1KIaUh4ZcbQzw+dvw0QA3ZZ3kMH36ckiYw/NOQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191214225120 20191207225120 38765 fpki.gov. VaZqqxU7KbNgU/PQecPRac1lwySlLzlkD/7Dv2HUNx9lLugDkFBApqT8TmmKZVkFH3zljk5H+4w2 sdazTxKqJpthNpFCrYvEyfvgVa4Qjln4Bn7dX03tkBW36gl6kXwSqVxuq7UihFOLQi5LuTvYN6Nx EImaa18MHQXd0sTGNHmNFsPpsPghnOYVWw6rtl6Fpy6oVvuIsjim7WnICbc/2eZG01kXtnK/TeYN KET7XvCwMw/Y3tm5puV2Qyn4Uc7ul4BZAQu6eUSTRHaZqey2d+DxLLKviAZzwNI5eQBVFkQLi2BQ 7jplNDUdV4gkut9wVAl6qrmWLPxu+TyGzStFCQ== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191215225056 20191208225056 26378 fpki.gov. b5oFm/988HIwDfQt2+Mp3ebebLEJjO+ivNCDYCtwc4QXVwupxTAAw09EXrlsSk8bJCO22frSmflb dznej4j5oLL9Dj8A+Xmxx5Cc0SoMRW2yFksBv7+xvH5dph/jsD6Xq6F6mxoBI/YBDr6xX2U7WyMI JhhfO8nBvRKyxnAKFiUgtqEYm4lZIArLK3LxUHsWGmroNht7wO7hs1IHFpaUM6pvd8KPxsNmmf0D PAbxYHyYEM6o8yne4SUnDYyDJvknmfG2bFzG6MC7CSckvNI8oHlyf3n9eRw2YIeIH5qjjLPMwpdm wivBMD32gMwXjglYiU6TYtcvyyM0IdbYRxOzfw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191214225120 20191207225120 38765 fpki.gov. gvOLwONvKhz/thnMF8vzPRWXoktyrdj6GOG/Dmm3gTa2T3dLjkn6TSQqTCUFn+Q4wbKFyFOwtASJ u/W08EJXp4nbt0HnTLFkwImtKkPtngEEPDtMwjeVQNe2Wp6pXKhIeXnsQ+hkngqHD2w86rps1BvG tlMTsAYIHUMZS2fNJH/yityGvOPeO4T+qbUKpz7TFJmdxHzTd9SwqZN7dA3y+m/jOrK6pxa983oY 4ZP+hWu1sOxFOuwx+UklvWFcE9GhD/STrHpW5fWJc+MEgl7fRyWFYErJw0sfL0tvQMDt+7kw0Epy PEZQ9/RZupdbsJdioyGaRrzmG/B1Qp7k76683Q== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191215225056 20191208225056 26378 fpki.gov. OeRLdMmN2eTaFxhYafkjwSvJ7AMxg4KPprvYeqqJtfkuD/LCmNo/sh2+Hs5FOw9kh104mR5iD6fe 5gYZZM8Cj9Bvmajt8zv1aYJExK8wtatEvUJn38zWk3UVUOgqba7L583KUXjrxpitFhxP6dFHxATa do1p1DAsrKV+iQSWhGN+vUhhMHIzwQAylPGZ2n1X7RlUlwnf37Dzq2KkgTwbRXIHcRql4azyHHfu YyQI+BmVM4WqpgvkP8n38G5uO4CsQuPrbsuXNFAMhtoxho0v93JEXi9vP0Yst8WEYsnn9GNYWQFD PrzTK0npm5ILVT8J41gYLuYgqYnOvqu7EcNEqg== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191214225120 20191207225120 38765 fpki.gov. JSWYNzdQitImCg6243SHMSa3duNu+N6TMCjpQmeT+/p2R577YuFED16uOFfnsdk46QlFuQ9h5nSx zq+srDgN5ZzE+vPGS1NjjnCfOPNVT1ZSL5oOsyZgieM7r9Ue+iFYmLTEctB/I+524ClnXRS+U9NU FjRr6Dq4LU2GlC6IU+5weDQt/baUg0NdOdIFRTWV7OxT0JtQAXVVpwuU1eFjowzMF/iw+rMrNmRH rZDMgZh/3XHZnCYw3v3RhoKoHkOYbb7r/ZG1CqDTl7d0GruVV0z5faJhcQHxAMhD+aJJND4QboCy 65513BPHH5ZoqYxfA4YF+dG+W61/eK/kKxdCvA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191215225056 20191208225056 26378 fpki.gov. fpfyGy2mhG+SCrJHQoANilKTa0PrOcOqFYNvaEOTZ3HROosbSwFvk9HtT7b425PS/xzU9YvHhhNO 7l92XzOhKoXYJAjiHU4BJ6F6XIvklh8gDcUtcCNFLZuOEd5SIMN2F1W5WRfLX7qkRYojeUGzorhw bVtdNdau5J1YhsTZq3a66xI6Av9nlYAulHfI1Nc5T6cmPUdzgcLRZz8U7GdDwQKZdQTKB80+WAoJ INCytsQiKgkilnHQj81GNBYbHDSSLpmxNwma8ISCDg4RWrlgyyDeYDQJEjbxDPdI4EPSAeP8dFgf yqVC7T/tDAvCbOTYx1fSUYO6H0Xp5yrq+OrbdA== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191214225120 20191207225120 38765 fpki.gov. hmsOtfDgiYrUs9nGI6d0QV9E6QQAtTfOdBHziVEzwngPiMf/dEp2GdIWZaP+PgpSSHP6KQhvZscF so0y7TiQP8x8+LO6xlRq611ZkPHB6VuTDHwWnMfz22zP23FaUmLhpxHKJ2rF9Lx2S26ULvrNxhGs NneGg5h93iwG7cyaONqxoOQa2C9HRqy0whdg8kURYsVZA3JBEGgLTeZhS09meI5pCBXc3UHOoCRX IueyQ7PjscOEhGCLBwLstOU8XbAAGEhSvOz858jdb7uG/75TBZt2Zg0egzqSqDTZwjpqU5K6oPWx 0Nqr50KnJye59kep4Z54aIbcBloaf+xVO0cBjg== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191215225056 20191208225056 26378 fpki.gov. cXgvU0l7B0XQOgcp7LwkiMvEuWJwf5kz3f/+6rpab8ycy8XuwJrvSqqhEIfr+/hiJq4oCD2tWso+ zelX8bo86N3Fhg6/JNuhhhp8PZUZlZEp0jaEPsl6/JrQR2gCxmat7pTXuoz0t3uIwysYwc5g1te2 +B8D2v1Cg+IxRUWWd+7wNJs9o0IxDOa/nqoQOnc+cetSOEE2RPY0XF60Oz9r2RPFihm5x7MFV0SS 6/sid7R5qIDn4Ouh7h9swL3MkNTz4vebeXrLzFamj+CBCVkEs3Wg1/suAtTED4YYLDBAAAD1amwl RYY6ZUKWNS+MA0Xdn+HBuyTpkzNrHCpEGULo1A== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191214225120 20191207225120 38765 fpki.gov. g63hd3edfnCcdRJWkgPHRLFQCmO3naamJ+z83RCczfY8qXb+2PPHDHWvUssXuJrogk+69X3pkFb5 tJDxyPWpAGd7xClKDmUnFFquUwgSnJXZ+rrbBtuDFfYf+A4clbOodgSUijlgJWEfRhboSRJ+58sC RfzYg+kFuRhirYS9xmy2O83eK9qKL1WNe1IEsNB3YAuYJHYyBH0EGMu1CZt9VNoPSWe7dHLgAo2N eRXEV9/MejeABe/3M7ExxaGmy76iD6RMrvI9zrr253MDG1MBna24IPdEFRggYHlOYcjUZRaMGAXo 6T7Hpbz7tQjq3Gm8hhDaFN5wylI2ZKKBFmOHYw== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191215225056 20191208225056 26378 fpki.gov. RivcutL/G/S+lI26MlcuBHkHnyn6Qn3vJWTt/h5pEIn57sWUD05u5zTaxzlXNZT6JPqBLH/kJ8Lf DtT7j2SNX0RAObbAJ+HXarsZv3g9TzKvQ0jq8l005EEogvV5F4M18nFwTGFLviW6yngNbPGcwbQJ kYj5jY5COovMpgqbcSfaHJf1FQo31kdhYMyk9DxiRIYhHKJMjAZD6FNoUWzsZJBhELwf4lTeolzT UlsLWUO07sUznSOmALwMdb6Pzs+wpA9fkIBbJZT3E++9AqONF5flVmkpmrFH5MvZ7jtuyIYQ/stK baZ3TJ0I2T3CauJn1xX0lerB68xo6GuyVKzSow== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 55593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019112103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191214225121 20191207225121 38765 fpki.gov. cEpuwsJw37YHSz22VlcqFQe6mr2YVrWrXREvdkIQqMgVlaE4Z013HAaumNhjPfvM6aF/0RUshuGO pyZdErQcozN3uwvNlzYIVpVFBwA3Ggp8omd1WlxHgH3xe7d5zlZG6P9x388DNhmSEgVXf7oFrtzZ 1UZgAyyCTrur+sjHeqZTxZdihSIdVnPlKgM+1+YRkXlZZfmAWCj3NbnOIlpvdd9gcQdDhboGfe+n taLWCvn586w4R16VfUxyVdNLzbevYK14hMoEMioVfrJNZbGE6bMGYd4kaamzoswRdK3kbrEItLB8 bagpdf55yzwzaFkQgo27xWBcaptnSkHDVAKjiA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191215225054 20191208225054 26378 fpki.gov. eeMATLN7B93bY8XUg99dBlvy3bayWpc5jDDdTkBF2ROaak1FrYJz2m+wU1apH4yVreEzZoHKZYbX J33a107urpNm+iT6aqYq+nofbnMHqz0Lef4impcSbmp/omoLaeO+GyuYN32e40B9ym4Uim3VC8tf Mxu9/aNi5uLkKuX02WNspV6AzD2mxAqiJmY3ZKWU+R6UJpwqFfCVW7LFSTxbtp5NGM9ObDzIx7/r V/J7cUYCFrCI7BF82MRUrHXl8xHbyUml6MZvvGo7pcC9hB2b2myt7aA+Vg1CsqwL1FISlfqv/635 1KIaUh4ZcbQzw+dvw0QA3ZZ3kMH36ckiYw/NOQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191214225118 20191207225118 38765 fpki.gov. WQHI1CI6mITT/3xFv1Ov2lhj91SsPi4WM+NzjAgwDNhc3CX3YvK0nCl4AeiF4ZODJCjEUCPL/fyR rAKzhMv21h/IWHV1o/5RECpMBwuLoylD6HwxiKEW1lBWqsnCMtsUJoSy6sEokMU9FXuZYSKj1b9B 4JTOEy6cY9W0Ca7IZcpEfnqnh1d8IjwhAovAQesSMw8yUokV/G1buJR6jSzgLpZitu/+1DNsxRzJ 9qg19rsr5tVxX9w7YXgf1yREqpR3GmdqXKaTZ6FM8RXTE4N75rNj1/O45J2Xj91A7qnsV/UHREsj AOd0RYXk2CpSIS/qfvK3PxFFefiKmsSaOfmYOg== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191215225056 20191208225056 26378 fpki.gov. b5oFm/988HIwDfQt2+Mp3ebebLEJjO+ivNCDYCtwc4QXVwupxTAAw09EXrlsSk8bJCO22frSmflb dznej4j5oLL9Dj8A+Xmxx5Cc0SoMRW2yFksBv7+xvH5dph/jsD6Xq6F6mxoBI/YBDr6xX2U7WyMI JhhfO8nBvRKyxnAKFiUgtqEYm4lZIArLK3LxUHsWGmroNht7wO7hs1IHFpaUM6pvd8KPxsNmmf0D PAbxYHyYEM6o8yne4SUnDYyDJvknmfG2bFzG6MC7CSckvNI8oHlyf3n9eRw2YIeIH5qjjLPMwpdm wivBMD32gMwXjglYiU6TYtcvyyM0IdbYRxOzfw== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191214225118 20191207225118 38765 fpki.gov. jJYfbeYWY+yubGtsbma1S39YaJKXB33iRmToSMdk5ymKmQck1/Qj8MrEmxF6OCkIIZBqzrxJiHdr 2zh7qF+kMMiDfhAMlK6Y599BvxDoNgD30FNPUBaxvVgNtsZTlIsoiSH7JjpoRQPFeldQYP0YFK6H B3DhcL3gD2Zq29Ap0imOoFBpaUUvYAdo19PGZWdWFI1j3cMZG9szaYcMl/xaIy9pbASLcC2KYBDB isvQyoaSNgFLesZJTBWYReBaJVHWiQkgIK3vARDKtonNC6VXOQB4T3YrHGLy2DmGXbWhadA+G2dd bQh1KvkMwYKFcmF9O+20vff0/q8wIls1RcOIKQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191215225056 20191208225056 26378 fpki.gov. OeRLdMmN2eTaFxhYafkjwSvJ7AMxg4KPprvYeqqJtfkuD/LCmNo/sh2+Hs5FOw9kh104mR5iD6fe 5gYZZM8Cj9Bvmajt8zv1aYJExK8wtatEvUJn38zWk3UVUOgqba7L583KUXjrxpitFhxP6dFHxATa do1p1DAsrKV+iQSWhGN+vUhhMHIzwQAylPGZ2n1X7RlUlwnf37Dzq2KkgTwbRXIHcRql4azyHHfu YyQI+BmVM4WqpgvkP8n38G5uO4CsQuPrbsuXNFAMhtoxho0v93JEXi9vP0Yst8WEYsnn9GNYWQFD PrzTK0npm5ILVT8J41gYLuYgqYnOvqu7EcNEqg== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191214225118 20191207225118 38765 fpki.gov. O3hMBvgXf1qBNoVs0joAPy92rBOf1ruRpWL7Cqt/QI7QLlaQOx0cf6xKc1KCv5lsJCpSTDL1M3as QVU9+MbNa4JMtR1vbCzx0R1fenlCd/96vA7disPf3ubk4GXp0DuZmdNlaXh73Fv4yM0Bx9W5/xWR WSDGbg0XnPaeYp6umdzxZHTqCOvYSouvG45J0R+20t0dBVMClnKVnx7q0mkZEr4PuBpaVpLDPG6M NtlRujvU5xMtImIwzD28ei/9YTWxwDJ+pef/gU7+LCoKjGgQWpMjEFsI+5U51gUTX+EbM/jr9EZ1 wuvnUpJYR9FwajiRpTk25iecIYdhjEIzvIzNeA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191215225056 20191208225056 26378 fpki.gov. fpfyGy2mhG+SCrJHQoANilKTa0PrOcOqFYNvaEOTZ3HROosbSwFvk9HtT7b425PS/xzU9YvHhhNO 7l92XzOhKoXYJAjiHU4BJ6F6XIvklh8gDcUtcCNFLZuOEd5SIMN2F1W5WRfLX7qkRYojeUGzorhw bVtdNdau5J1YhsTZq3a66xI6Av9nlYAulHfI1Nc5T6cmPUdzgcLRZz8U7GdDwQKZdQTKB80+WAoJ INCytsQiKgkilnHQj81GNBYbHDSSLpmxNwma8ISCDg4RWrlgyyDeYDQJEjbxDPdI4EPSAeP8dFgf yqVC7T/tDAvCbOTYx1fSUYO6H0Xp5yrq+OrbdA== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191214225118 20191207225118 38765 fpki.gov. N3r4ZLzQK9rhZExCAuCy+YEA+Fe+zrv99L8V6CRmDaSXzuUfR40DrnFHCzO0/+R24694F95tK0NA 07JhlYIV4SNHYhpmqlHwopRxoQekWjtr7tgYmfQap1LFVBfshdVxROOuxCvnbi5AX46j4C1GWCfA Zi7rKOSiL9A3xlOuJnmM2toBoMc+WKwvbBkgwwNOABqGzua4dCsmqjh5wrKeM3XAh7HAjSvfLpLt L18q7EQuEb373sQGRJYUf362fTobk7MtNqfA0L7LP0ab/l2EE5dJaKzLhO4ueElAY1P6V9+WHnEH +RDywkzWlh/Gd6w5DqUid57du/QA0PvBwxAh9w== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191215225056 20191208225056 26378 fpki.gov. cXgvU0l7B0XQOgcp7LwkiMvEuWJwf5kz3f/+6rpab8ycy8XuwJrvSqqhEIfr+/hiJq4oCD2tWso+ zelX8bo86N3Fhg6/JNuhhhp8PZUZlZEp0jaEPsl6/JrQR2gCxmat7pTXuoz0t3uIwysYwc5g1te2 +B8D2v1Cg+IxRUWWd+7wNJs9o0IxDOa/nqoQOnc+cetSOEE2RPY0XF60Oz9r2RPFihm5x7MFV0SS 6/sid7R5qIDn4Ouh7h9swL3MkNTz4vebeXrLzFamj+CBCVkEs3Wg1/suAtTED4YYLDBAAAD1amwl RYY6ZUKWNS+MA0Xdn+HBuyTpkzNrHCpEGULo1A== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191214225118 20191207225118 38765 fpki.gov. ROjCg4BZe5nC/5clQNYJ9UYBH8068hTv78/JYPH296N6m/Xe1uL6S5E6/SDvzBp531DB7uuKCCdb WkuSxkiBuXwy+zPuSGnBYdqufR6zSiIaCCBQkEdCL1fobj7y//LIRGcMBHFuuqo1KYSWCj/nJazB 1k6FfZM4kJ4/2V07CdgZIhHRfQeNoIGHdA1H8h5Yz5KjeX6zZNi4jICQoj2A4EtD/08m97w87bef FT3dlZwboar3EfF921I/Gu3JZ+h9SnxM17bWCIa0CUzzwUXR+93Cw9XQlDn2M6lJaWFHnPfuuUt8 qdaO5onNZ/1t4Z2c/5y93wv+B3LF38sHqO2Sqw== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191215225056 20191208225056 26378 fpki.gov. RivcutL/G/S+lI26MlcuBHkHnyn6Qn3vJWTt/h5pEIn57sWUD05u5zTaxzlXNZT6JPqBLH/kJ8Lf DtT7j2SNX0RAObbAJ+HXarsZv3g9TzKvQ0jq8l005EEogvV5F4M18nFwTGFLviW6yngNbPGcwbQJ kYj5jY5COovMpgqbcSfaHJf1FQo31kdhYMyk9DxiRIYhHKJMjAZD6FNoUWzsZJBhELwf4lTeolzT UlsLWUO07sUznSOmALwMdb6Pzs+wpA9fkIBbJZT3E++9AqONF5flVmkpmrFH5MvZ7jtuyIYQ/stK baZ3TJ0I2T3CauJn1xX0lerB68xo6GuyVKzSow== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 34142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019112103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191214225128 20191207225128 38765 fpki.gov. YAuAM8s9QuiwfQ5YW9WAmrNQakVYiL53LQQcQvm93S3FdqibcQaRM5HHbT37nQjVNIoqSFVUfx1e Yb4vqxKj47qa1PpBebp+8bKpFGiWpR03EljrtZsR0x5JYD2FXxqFPoKl26xAOYILV/EC97l1iUAo CV/D5o6jKPqCZ0t619zJ6Uen6OwNqn9q1Rd+jIejh+3UTHpwCrQe8ig+Dui0T3hkVfpxXU6BuNrs VAefVWvPmGbYutwR/romRwXaulRCflSwOcEeOsLTodWySS2uQIggU7xLLp4N1/PbeS/EHBdjeX3B lAtLSJEDYZaLKHklfcw0p6OjieIJJId/r0+Sow== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191215225054 20191208225054 26378 fpki.gov. eeMATLN7B93bY8XUg99dBlvy3bayWpc5jDDdTkBF2ROaak1FrYJz2m+wU1apH4yVreEzZoHKZYbX J33a107urpNm+iT6aqYq+nofbnMHqz0Lef4impcSbmp/omoLaeO+GyuYN32e40B9ym4Uim3VC8tf Mxu9/aNi5uLkKuX02WNspV6AzD2mxAqiJmY3ZKWU+R6UJpwqFfCVW7LFSTxbtp5NGM9ObDzIx7/r V/J7cUYCFrCI7BF82MRUrHXl8xHbyUml6MZvvGo7pcC9hB2b2myt7aA+Vg1CsqwL1FISlfqv/635 1KIaUh4ZcbQzw+dvw0QA3ZZ3kMH36ckiYw/NOQ== ) p36sdppg7r2cqvu0d5u5ss8b885dvg2m.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 e10e7579a5204996 p36sdppg7r2cqvu0d5u5ss8b885dvg2n NS SOA RRSIG DNSKEY NSEC3PARAM ) p36sdppg7r2cqvu0d5u5ss8b885dvg2m.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191215075935 20191208075935 38765 fpki.gov. FnetOycEf6F1JAUMWefJemacmtU8Ck6jUKU0AJU+0bbABVkv6Orrm6m7lSONRnQe5MA22+VC1lzF M+qwg7maEgg0OuZSPa7MOMifWebXclsdg3z+OlXZGJDg4mTpYRgceqV5Ss40JJhcMD16C1IgDgDK +sdKojrC3m0lJhY5HRGDsJ+ueP0SokrmeCn/td02ZJIPmfuV8ap4wGnahYZIVWmtS7+6XETR9Daj MCoWfOUzXJbuA6iWUz9pQx5/dyFzKDlTjF1XquIxMxV2/m+kD1Dsgf1V8mZETEV3SMYX/JY4vrJn Yj4knIdhf3evCtiWwZTK5d4LZSOqwni5jLlPAw== ) p36sdppg7r2cqvu0d5u5ss8b885dvg2m.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191215225119 20191208225119 26378 fpki.gov. ZXEFC0BRvFYegapIHYCyLkfwwNxrZcyUv5kDTnmTFYK92PLnebyA4X9X0VKdgi/MBgh4hbpiA2DY v7BCtKSkz66W4mpxYno87tzO8Sq/ccFk6cTHeHptu3y7ON5PBeU/GvQtO7HfW1ypcV3JrT6kf1Ek hf3slqs+RWn6GMo0/3OJVie201VYSJGu98s3kE8mwadTLklmf7yBv1fZCHumBx8XXFa8npo5gCi7 dMy9eT7v22BqnUn2jLHXzMsWiTkCWume01PYRIVh0m2vKq0CJeKxdvTUFBQD3cadNrOsqBoAJVji EYfYr5a80cx7dluIiOtyUHOv9bsYVD7UIPesww== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191214225116 20191207225116 38765 fpki.gov. gK3VJ4HIN5UIDDErOtsH7RvZghPsrmpTY1WdV3yLmRSzJeyn2qEul4SA+Wf3v/HxhdMHccJfm7ED 2J6hT6+aaKXcATpyRJ+RPMh5sqhpNSqx6UcSPWQxFKhdWJzIMPzT1wOBikqm/5J3TWtRK7gYw2ss oPPl8rH3WPwpy5hzhlHhkS9diO/kpFPyNPC/GMoDmxlXIFLCAsgQwp+BMoARzBN3fzB7FZJ+daDh gWZ2KbfXw444Rr6JOs5pkBH9tkcRumqCUxnNVfO5M1+wwmcncm+mn1oeoq5Dw+FzN6dOTYdHlAzp I3bXgen5fxngtmAtjv/wQPykdhP9Zrj/DDun4Q== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191215225053 20191208225053 26378 fpki.gov. Nr14o82HSF29I6o61C+OjwhEdNJreBYnxdcuSjRoQPmyTrnnJjiViK22yN6I07jTu9BvGjg/13lE VRCXOtzWulCMaPo3YvWsI+Ek5IRM6KO5UI4zySFxZbfu+/r/OBDcv4tCcyaJmpghH949T/+J2fVX sG53aT8TDg3YY5T6FVNRvFmLiyAusK+CXbDicAyFhdPQNcPC5iSdVNhIaR8C3Lr3qaZAQTzhjPPU 6E/HAokkmc+mjnUO4ctwJFw84ZLXRFVSXyi/wN/Hrq3FzMixKYZgBhZZZX0gE239sv6F7A2Hi4Cw rYDTq+IVql9RWUDWtj/0oSEFTsaStW5zsKrtFw== )`
	RRSIG=38765 and DNSKEY=38765 verifies the SOA RRset
	RRSIG=26378 and DNSKEY=26378 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: