DNSSEC Analyzer - FPKI.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-12 16:04:42 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1139 bytes) ;; HEADER SECTION ;; id = 57678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to b.root-servers.net for FPKI.GOV/A
	Received 666 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (666 bytes) ;; HEADER SECTION ;; id = 64059 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 45802 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 4555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 1996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to d.gov-servers.net for FPKI.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 494 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (494 bytes) ;; HEADER SECTION ;; id = 57837 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 50088 7 1 98bb309d9a8316e7ccac8403e9772f8a7a184b83 FPKI.GOV. 3600 IN DS ( 50088 7 2 59045b56aaa84fe6fa02988aff884befd508fe5aed28a5ead106753491820d69 ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219101007 20181212101007 40499 gov. EioYItq9O/Vnh04Ep2Ld9kBd7cNLn0DQN0dqygEz5IQMEVu18SfcJWA0swzHbjS0JfH6tPcnDjM6 gphe4vPvQiJK81Ti2MlBPny42pftuQcjywU0ENzkhRujk3yxDrKQClq1QwOjvRz/QuZYrlBcCQ75 rsCynMze8Or/EpO9aC4= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.gov-servers.net for FPKI.GOV/DNSKEY
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 22925 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 50088 7 1 98bb309d9a8316e7ccac8403e9772f8a7a184b83 FPKI.GOV. 3600 IN DS ( 50088 7 2 59045b56aaa84fe6fa02988aff884befd508fe5aed28a5ead106753491820d69 ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219101007 20181212101007 40499 gov. EioYItq9O/Vnh04Ep2Ld9kBd7cNLn0DQN0dqygEz5IQMEVu18SfcJWA0swzHbjS0JfH6tPcnDjM6 gphe4vPvQiJK81Ti2MlBPny42pftuQcjywU0ENzkhRujk3yxDrKQClq1QwOjvRz/QuZYrlBcCQ75 rsCynMze8Or/EpO9aC4= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to b.gov-servers.net for FPKI.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI.GOV/DS: 'IPv6 transport disabled'
	Received 368 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (368 bytes) ;; HEADER SECTION ;; id = 61903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 50088 7 1 98bb309d9a8316e7ccac8403e9772f8a7a184b83 FPKI.GOV. 3600 IN DS ( 50088 7 2 59045b56aaa84fe6fa02988aff884befd508fe5aed28a5ead106753491820d69 ) FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219101007 20181212101007 40499 gov. EioYItq9O/Vnh04Ep2Ld9kBd7cNLn0DQN0dqygEz5IQMEVu18SfcJWA0swzHbjS0JfH6tPcnDjM6 gphe4vPvQiJK81Ti2MlBPny42pftuQcjywU0ENzkhRujk3yxDrKQClq1QwOjvRz/QuZYrlBcCQ75 rsCynMze8Or/EpO9aC4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=50088/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=50088/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=54990/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=54990/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219101007 20181212101007 40499 gov. EioYItq9O/Vnh04Ep2Ld9kBd7cNLn0DQN0dqygEz5IQMEVu18SfcJWA0swzHbjS0JfH6tPcnDjM6 gphe4vPvQiJK81Ti2MlBPny42pftuQcjywU0ENzkhRujk3yxDrKQClq1QwOjvRz/QuZYrlBcCQ75 rsCynMze8Or/EpO9aC4= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=50088/SHA-1 is now in the chain-of-trust
	DS=54990/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 50088 7 1 98bb309d9a8316e7ccac8403e9772f8a7a184b83`
	`FPKI.GOV. 3600 IN DS ( 50088 7 2 59045b56aaa84fe6fa02988aff884befd508fe5aed28a5ead106753491820d69 )`
	`FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b`
	`FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 )`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2325 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2325 bytes) ;; HEADER SECTION ;; id = 4955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZuxGmQwFX6+9Od2gjEwUzLTVGsIIiUydPJ7exPqEss7uX+ZN2r9qxquZHjxFnEQPwZeny7o d7iSJfeTKjgn9dHMR2uRXRrESGjvm+8Yetd5SF7xNrLIxFjHhz0uuTLrUaIadMYawTcCKyVu+xCq qiw4vaLAQDNuyX+K19+Re04e7s1FKK5rtJUKZf7As/JtDa37J7+ATzN+KSQyY8zUwkACqYcrcU99 HUDzQTUE8AMP2MggGqpjdkXlUCA7PcyDuU+A9zGBVNWp9D+LZW1O8FgQ7zopxGTrYP26RtkiMQ/6 k9c25k2we3saz+Iswl66NRuDRr4DwEt2IlASiuCj9mc= ) ; Key ID = 60659 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAcaMl1dOefJ0cc9iFajuJaPFrwBhciigQZIZY3NIMtSGi7UA0LEmkHehRwCX2q1hzo4ujhcq EQiR49VE9+yF/4fuJUBUnsTbc04F9n560nt4WJ+Iv72o7oSmErexRVUSEwLD2e+LLtDg0Rk0PNBa xBRGlnSY/2+7rvKjncVRXNnxuhwjryedSYpJHe3DPp08yRd9OIFYJp3JtNhnoiMkOtFjzHQb3gul NYoo/jPG43kVhOP3ZlJ9lnIJVPnRWxam6/vueqSvuKyb/Pnqh/2s7OvqVtCrNIIj5qFua89itfIK GWTaOJgY+XQCnJWcoX+zW0ko/aEoNHJZflpqMzTsLr0= ) ; Key ID = 30674 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZlFU4tCntKWVgU/wpXf8zPi5PzyVjGloGzTcPoUzQUmNF8NjP0U2izC/7wWmynYA47KrizK J9UGOTZ6UEHNPQYJLmheCaNwkxDSuepwCwRqXNIcUz0bGl3QQPBK1uTzWzZMy2cPrLcTQhlMjSC6 vTJPR2SkOD43srwK3gCKAf08XgObd+vJxFvcPl+AvDFzarvG34uSJT1V3yyBxzH6T+qqvLKWUC74 rYlSFg1olpeZ6yEBPtGO8t4Q3ax9Jczuwi7qEebvwkmJJNRu/r0qMZ+id2IUEpiT4Of4sx80DJ35 Sa5OTzWM3qjyJffDJon97ZAzDlRcuwvOE+lHbHeX2U0= ) ; Key ID = 50088 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 60659 fpki.gov. mN0eSPzrQo5B8W+u+7BmPPP/7GLyXLTo9cHnHrQ3Cru23tY1SKHg28f72cvWsI5km2+dcsFq3soO iMIYMXoWwrKprouDa3usANjPHms84wfMcWMkzO3U6LvHGY2Lvq+t+bz6/k66Hx7T2v2BfvYrUwsF px2HveJdCPpndrhXLtkpIPUka4u6/73yEFaY5ZPxOFMt2l+cZAls+X7hlDy+qM8gNV5fbV35zKVH 6W33SKXJRtOL4Bh+S9u2pY5YnYd75DIa32GXReg5Cm8L+82fU0KnZA4NIAB+M2hII7coTXsHV4vV fG3/Rq/29f3Bdnh8oLdK2TU2QsBnwb+FVjeDFQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 30674 fpki.gov. ZKlhGUBSTGReGzTqeBrSZP2SCH510w51WuyVWCtdC4QhKkIaBYXuIbrAUaScefkWzkAG94S6tKey ZDSg4xMMrAruomy9TYzXHcuFgPi1/ll0JyHeJZamkXFLMmIDmUdBQwzU/pFEGPfkG6qz01coOu+L wmMQey8SgXDvZXL8k6ouh2MNwHTI5XVWytulYmDaQsm2Jfu4pdsiKxed9JO6CXgRt7C+t+pRkJOY i8h67hkyX/kQ5ETbX1ThHirOteew2xereVFEIKV37FohsQUpeKPQgD2KeWV17zMy0Gz7qX2MmWec OsVdWnrtVhBMEhmbS+IJl6g12Jb9Pie7WnOwLg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 50088 fpki.gov. GCcurvx8uDA8L9r0cKiY3MIjHHQy+NC9DU2y703qxEySOf3M3mxpqG0crq2uVx2G1XyAUsew3J1R 4WmjBlmHbDvEtjxheQxALkJ2gS7t/2yu1kYXc9XyMHhfTHH7xHu795dR3qJsS+6CaBpAc8tHWv7c Tu5zd+DMtFz0iQnqHrHiDdF4HT80GKmDJgMts5bGXNmP2hcY3XaVCTgFClVIufvqs4eMv/HXQwjG H22XF9VplKidLcwLaLMsoaRhVM2OvNEikjO7D2b033+35tjFDQMiqCsK/6xW82ImRvWW4SN/cJ/T wyERvK/5J7x/AHdKeK+lZpf2g8jZFzOwGSy12g== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 54990 fpki.gov. GUjm47Wk5a4cVSov4GfIFvCIUIY55ILTlB6O5YfOBY/hVnhyQQkRJHCqjFmKrCTXrgQDvI1J0IAM e/NEFcWc6n/zehbVRPACpUJ15mssU1uDuzKZ1IKpSma9+nbu/bBvD/673BhThgwpTpDYTyyk2EvS wDY72zoG45kOorJ5eDqpGiBIkoUMO9g4RQ2nPckvxkygoa5Xs4vfh9WurfYwXxlBZXllxMJ8x0ql /mGDqTlHDfaP9QR5fG7Md7y24+fGmaUIgQiromq0NeXDBwJimr+31Knpj7CUzlcYc3L+vAg9/9AF IMmMSztEbSEF973Ip0c+l9iYC8T7BLeIpAGghQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZuxGmQwFX6+9Od2gjEwUzLTVGsIIiUydPJ7exPqEss7uX+ZN2r9qxquZHjxFnEQPwZeny7o d7iSJfeTKjgn9dHMR2uRXRrESGjvm+8Yetd5SF7xNrLIxFjHhz0uuTLrUaIadMYawTcCKyVu+xCq qiw4vaLAQDNuyX+K19+Re04e7s1FKK5rtJUKZf7As/JtDa37J7+ATzN+KSQyY8zUwkACqYcrcU99 HUDzQTUE8AMP2MggGqpjdkXlUCA7PcyDuU+A9zGBVNWp9D+LZW1O8FgQ7zopxGTrYP26RtkiMQ/6 k9c25k2we3saz+Iswl66NRuDRr4DwEt2IlASiuCj9mc= ) ; Key ID = 60659`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAcaMl1dOefJ0cc9iFajuJaPFrwBhciigQZIZY3NIMtSGi7UA0LEmkHehRwCX2q1hzo4ujhcq EQiR49VE9+yF/4fuJUBUnsTbc04F9n560nt4WJ+Iv72o7oSmErexRVUSEwLD2e+LLtDg0Rk0PNBa xBRGlnSY/2+7rvKjncVRXNnxuhwjryedSYpJHe3DPp08yRd9OIFYJp3JtNhnoiMkOtFjzHQb3gul NYoo/jPG43kVhOP3ZlJ9lnIJVPnRWxam6/vueqSvuKyb/Pnqh/2s7OvqVtCrNIIj5qFua89itfIK GWTaOJgY+XQCnJWcoX+zW0ko/aEoNHJZflpqMzTsLr0= ) ; Key ID = 30674`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZlFU4tCntKWVgU/wpXf8zPi5PzyVjGloGzTcPoUzQUmNF8NjP0U2izC/7wWmynYA47KrizK J9UGOTZ6UEHNPQYJLmheCaNwkxDSuepwCwRqXNIcUz0bGl3QQPBK1uTzWzZMy2cPrLcTQhlMjSC6 vTJPR2SkOD43srwK3gCKAf08XgObd+vJxFvcPl+AvDFzarvG34uSJT1V3yyBxzH6T+qqvLKWUC74 rYlSFg1olpeZ6yEBPtGO8t4Q3ax9Jczuwi7qEebvwkmJJNRu/r0qMZ+id2IUEpiT4Of4sx80DJ35 Sa5OTzWM3qjyJffDJon97ZAzDlRcuwvOE+lHbHeX2U0= ) ; Key ID = 50088`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990`
	DNSKEY=50088/SEP is now in the chain-of-trust
	DS=50088/SHA-1 verifies DNSKEY=50088/SEP
	DS=50088/SHA-256 verifies DNSKEY=50088/SEP
	DNSKEY=54990/SEP is now in the chain-of-trust
	DS=54990/SHA-1 verifies DNSKEY=54990/SEP
	DS=54990/SHA-256 verifies DNSKEY=54990/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 60659 fpki.gov. mN0eSPzrQo5B8W+u+7BmPPP/7GLyXLTo9cHnHrQ3Cru23tY1SKHg28f72cvWsI5km2+dcsFq3soO iMIYMXoWwrKprouDa3usANjPHms84wfMcWMkzO3U6LvHGY2Lvq+t+bz6/k66Hx7T2v2BfvYrUwsF px2HveJdCPpndrhXLtkpIPUka4u6/73yEFaY5ZPxOFMt2l+cZAls+X7hlDy+qM8gNV5fbV35zKVH 6W33SKXJRtOL4Bh+S9u2pY5YnYd75DIa32GXReg5Cm8L+82fU0KnZA4NIAB+M2hII7coTXsHV4vV fG3/Rq/29f3Bdnh8oLdK2TU2QsBnwb+FVjeDFQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 30674 fpki.gov. ZKlhGUBSTGReGzTqeBrSZP2SCH510w51WuyVWCtdC4QhKkIaBYXuIbrAUaScefkWzkAG94S6tKey ZDSg4xMMrAruomy9TYzXHcuFgPi1/ll0JyHeJZamkXFLMmIDmUdBQwzU/pFEGPfkG6qz01coOu+L wmMQey8SgXDvZXL8k6ouh2MNwHTI5XVWytulYmDaQsm2Jfu4pdsiKxed9JO6CXgRt7C+t+pRkJOY i8h67hkyX/kQ5ETbX1ThHirOteew2xereVFEIKV37FohsQUpeKPQgD2KeWV17zMy0Gz7qX2MmWec OsVdWnrtVhBMEhmbS+IJl6g12Jb9Pie7WnOwLg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 50088 fpki.gov. GCcurvx8uDA8L9r0cKiY3MIjHHQy+NC9DU2y703qxEySOf3M3mxpqG0crq2uVx2G1XyAUsew3J1R 4WmjBlmHbDvEtjxheQxALkJ2gS7t/2yu1kYXc9XyMHhfTHH7xHu795dR3qJsS+6CaBpAc8tHWv7c Tu5zd+DMtFz0iQnqHrHiDdF4HT80GKmDJgMts5bGXNmP2hcY3XaVCTgFClVIufvqs4eMv/HXQwjG H22XF9VplKidLcwLaLMsoaRhVM2OvNEikjO7D2b033+35tjFDQMiqCsK/6xW82ImRvWW4SN/cJ/T wyERvK/5J7x/AHdKeK+lZpf2g8jZFzOwGSy12g== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20181215065123 20181208065123 54990 fpki.gov. GUjm47Wk5a4cVSov4GfIFvCIUIY55ILTlB6O5YfOBY/hVnhyQQkRJHCqjFmKrCTXrgQDvI1J0IAM e/NEFcWc6n/zehbVRPACpUJ15mssU1uDuzKZ1IKpSma9+nbu/bBvD/673BhThgwpTpDYTyyk2EvS wDY72zoG45kOorJ5eDqpGiBIkoUMO9g4RQ2nPckvxkygoa5Xs4vfh9WurfYwXxlBZXllxMJ8x0ql /mGDqTlHDfaP9QR5fG7Md7y24+fGmaUIgQiromq0NeXDBwJimr+31Knpj7CUzlcYc3L+vAg9/9AF IMmMSztEbSEF973Ip0c+l9iYC8T7BLeIpAGghQ== )`
	RRSIG=60659 and DNSKEY=60659 verifies the DNSKEY RRset
	RRSIG=30674 and DNSKEY=30674 verifies the DNSKEY RRset
	RRSIG=50088 and DNSKEY=50088/SEP verifies the DNSKEY RRset
	RRSIG=54990 and DNSKEY=54990/SEP verifies the DNSKEY RRset
	DNSKEY=60659 is now in the chain-of-trust
	DNSKEY=30674 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 47900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 60659 fpki.gov. AELbb+fcMMARNqkatbFEmkv9M0S4XseFWrXdwMfLTHkamY9CB54RW2DfgkAnUHBCZl3SyF6Drh2W kzpz9H9LB1q5l3Z+tIsCGEFlg5HZgG1ikyGCJVc1qjUTEgWxyekvWa7CVuTBcMkV7KXi0bRle0eI f9c/nXJDj8v/fe1uJoCsrMtkdGN6ZSTK0NyQMKzXhkfsWDOjqW1IdJvBX6AlNs1Rb/WtDfScOvgh iWQ9OjID7js9ndEkyAQI7G2Hj9WFyGILVFg0FcjpQmNPMAHiKrAfz3bgacCmSm4rrXX7E1H+H0s6 rLSikb7qXieLiq8AyjXryoxQ23PQZBjWfO090w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 30674 fpki.gov. OUVieHNxammlS2+xo8Ck2j+p5uD2KzpudMfkzSwtYqqtRD/Wzt9EgbLLDCS6AiBveg7bodrn7oLJ kTWffRYxK9KO08U+eiB9hv1QJg7SaSS+5Zk4fPKf9BMbomYKLJJa3l2L/4IcVNwydvHdopnIpf4v n94SpYUHSayc5kQHkzUegNx3o2Jn0Fuq+Kt2v9kmyknziCR9aL3/3kumVJPD64bgdTsRQ7Eq4AS7 A7GqVo1Jzl+5PnagS1i/KivuhCOd/wUd6zMS27d9463c0I+mptGTii9u79KkemIjsAVIS8aKfp69 eigY4fChHAbkx3SOkK8Vp7UxEtduV3p5aN2AyQ== ) 3gpd2d9eid62posrbjld12hedd386s49.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 a01cb0d53ed3394e 3gpd2d9eid62posrbjld12hedd386s4a NS SOA RRSIG DNSKEY NSEC3PARAM ) 3gpd2d9eid62posrbjld12hedd386s49.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20181218221402 20181211221402 60659 fpki.gov. Jn4k1e1xtzqG+wTX7Us1Fi6nT7HUsI6onMLcZpqBc9y1EJGH8av4F86HZVhQumw4gLOVy3xFpYhz DTRuTlKfQwvAWmWkak2shVGHPjqcipU5xl93i7iApE5L6Hosu75UxidkGDuwsNd6xq+pVyE5z4cI 4c2OdMsMLUuhNLv91822HcTqeBLISFhhUlhcGMUwsZ3IoTap39vtbQZh/xLWgaGBb6XIspRc4qVi QfHjoSjCALoAivVhPAJXWxieLNnMsBaDVWmyhWpQIbZFGhvNKylOs4CERodsCqh0irr+Vh5Yx0FA UZ8W485dSJN5W41cI1h1BeNMJSGSsM1lMpxLNg== ) 3gpd2d9eid62posrbjld12hedd386s49.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20181218221402 20181211221402 30674 fpki.gov. X0k8iqGiRVbeAUzsOnjmHf6kVBcKF2vka2t/IO62GEew9ArRZpEWzQK3ENoTf8SjYsGrJFuTZSgU j05Dnu5SVtQSYwTKFuQlCjo4/lB2p8rBJQJquJ6N58ckwva4/GSLi9S6Z2AHP1vbStHm0/Vtkbvp UUbVIQv4/3pzXWMcBnP7Y9Wu/j4+3L/V3qRDdAEV/9LN/X1dRhZkg3dPU1caMjqf9D3a8vh59blx GfEZ4S/ptuLXa1dNj3WIeSV2UM2Bt8RjC0lItuuI503gL1F6iro61u1v2lFC2LEXHhXJ4Rsc/5iI ZIsGemf9hx8q0Aep/VWV2Ffk5q89WA3PYv2Keg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 28533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194436 20181211194436 60659 fpki.gov. DkKkuwJ+mLC60Pk3o5E/c73glq4IbuBNQAh4+k8n6XRk4AxPEUGrBsyAnUK8V7KTlQtXX7wG0BQ6 UY+NBV8IkjYay3c6AJ9AJj5CKahiB5+JkKNbiv4grqjHQp+tsRiolh0JGGwUluNgqX6UjSllZrjg mZegH+VB2aBq59mlnSQ+RPyFwmwpjYFPBzOBoXBB7xYXcyjIuDAm5xuj/LCzzsI4CB04jD7ete9h 8O8ZMsb7nc3sm+ms9fsRjamAChoXJeUpdYRFDiUS+PUrkPfJqsxlGDO8SHpE8CVFg8QF6RCwKJ5U 2paETbIreth+Np/AxA/Z3y2t79xu1glpupb0qA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194436 20181211194436 30674 fpki.gov. HU6PUEaUReJCshC7bGu07nv07vLUaWc7MKLlxkNU5gjIznXhduxdsu9lq37ZsfEUIertkABP67c7 t1XMXnh1nkH9iV6Kof6N3AfUltMeqzLLNrNdsVksDyaLfSv7nPN5akyH1PX+TgND6rL+T2QWdg8S /plii0RbcO3lVOBjYWQ8LHmmLniDrSrnaiVTck+h2kqk6vbiY7Joxv3Zqz9iArKRBhM3RkLhe8hR 7Ivy+sTa+uv+rV0KlQoUO6t6XK22LrsysWpaa8SJB8Tk9vWftlBVBJYxAt9Jf8DNPA9sXh9PTm15 vGPiQlDPwj1zWFC3J1LVfmo1q3siAc0Gd3UB9Q== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20181219150447 20181212150447 60659 fpki.gov. km0fkD8HHteNmmDW6RpaWk02eVrki8+sG4gv4/WsMsb88lWszNfytJT800uEQLFpCsVZ/YPjiCL9 iPMrRotr4vHv9gkt1fTjkaUL1Y6jXLNJXLCZ3SeEogBTVcDW/VnQHDCtFCoU0XnzHbrrPcXkwHFp kWlNp+MFHUEb/68CKC3RYUf+kOaw92nHRShOqvGgOGeS+/wnWzE5L/9zsmuPiQwxSzbmIWS4U1h2 BmQNiIq1k8BxIsHzXGI7s4XgcSzNDtR+QYIx0ftnj/4W9bvsw2/APn8Z+SlOsees9ZfZMcP8gjNy rpHpcNQjMhDlzvGHMEAqylbYdp0xzsGAA26fDg== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20181215065105 20181208065105 30674 fpki.gov. j9MGD0eRrxc5GaO7QrsPcx/NV+/+uHn3ZkrT0DpvQVmtolTDssOAxDC76XWbF7I976KIEI32ZLoo Eq1+7lXSGrkAFV8d4k8kSmuEd4MiJXjItmtU/erFO3G8fEuo5nVgyXQm7op3acX6UpQxq+pZtFIY ghoxyB7oBLNVK4iYpaM9w53Eu+sdM6xHNnlImv7gEeMMq9bsybitpC0lvz79Pe6F88/XRR6A4Nvn aDZxNaBZTJOnYCViiU/5jw6IdDl5u6Sdej8xL7/i5wNbyYteRLtLoyzD9wmwLfcVNQDid55qI/Kc UWJApMoNqmvJ9lwMRF9itl1P2YTYBELmzOh4mQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181219150447 20181212150447 60659 fpki.gov. l6Qh6FiYXshiq9JK+hwlvvMPRVzlkAPgdm/mn+g2B54abuVFvwRhJJmMv1IH4cbSHL8uCbtH/OTB BdpnJlJJcXs13rr8GkM4Sa3BKt9M21xVHir4ODuAupErYoBEnDCQxh531NOinvi0aZcjK8M9xdNC DpAX1MZ/5xIZ/pZt9QVW6SEt33OoTvLsWxOH/dq/Dg1qWKop0tk43DMWjxMjBUC527I2k2ytWsXA XpRk0/fzIuzZ2VnGN9l2AB9FAU8Aoveb3JhnPz/vESiLgMS+rkF1fis+QU/yWLoRYlOxtKaiJimg Hx0DGeIBFuRp0xIuZ1iSn/I7PhZVNdToqUzVYg== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181215065033 20181208065033 30674 fpki.gov. UZs0u2qbloN+bR6VFZvMZpo/z3V/lrdV/PVX3PuavfRD7apB7S7pE+Md1U9vACDMeurwg4CPkpiO QpevxeYAyMDC1PZKT2/V2bGTSD38tG/sqvqHt/PUcAMD4okV4bZfNED4wHzSCD75Fz/ThWUE0iBb Ty3y7x2CXJA+s68t8egLGJro+ACA953ZNlnig8inkI3UU78qF3mpsTN8Tj3+80CmQw0JqTxCYOpo L+JK/E9ltPzhXicFvSmWouzRq10N2oDxJXiblH2869OgvF1X6AigFo9DFxqfzqNEyC6sP22hWCxQ Z4yQ7kTvSRSDA/RMuNyJzJaZzRThv7LGF0EfCw== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181219150447 20181212150447 60659 fpki.gov. lcfe0QXjbtHEQDDS/nvp4FIFGSPMLiMBljmEsSTOR6ehJXGzXHAwfKC14qsvaeUhiy9L3BKveu1P UFEEXB5TJ1zxt4GlWANg8dwGakwtqEMIcSIcIztPgFc1exQTXomhxf2WSAQgUhaLQtCSpR6n5RbT gcp7za76dj6rlTSSlbPid8qTVG+YN8rtzO8uqjt5TAwHI6PV9CcPBqRVGnkqySYjY4Lqz1xvonSv OQnlK8pE9SYNWTuAmpgpRpKPDDoURsKtsbkoMo74DtzQYW+CDRqk0U39jRvJRlYvvmPNRzQ39LIb eCGoRdm8tguBjBJqxpfcV1Ibhn0xgAJhbk7K3A== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181215065105 20181208065105 30674 fpki.gov. BSIZvv4G8ZcvGwPynad9ldfHvxkznS91Qsh1aFtydF1HqA5Dnzwyv34UCGvAY49lWxiSB3UuXY4A uGxRJrT4WYdGWiDlIdjLBDhw3T4Bcy0kIPCH7eNg3jxVnnQc5hbZljUshVE8ktAMpX3UlKQdsUaG ZwnQ+jr1qDt7kmeh49mIlL2xnyBxlUu7VsNgr8A2Y0qOOXUvjwJ6caoLXhXoqqSRWBFtFTq4SrM7 4VYlpZCzJMpncE5JwSjDQGRkQY1UNTkPtMiiuxo01+GFM4W8Q54vY73W2NR8o3QDPFzSt9XExUVD 1Ui4y2vOS2/f1AQSAXiBLtYIqhYt+SRi0dMjrg== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181219150447 20181212150447 60659 fpki.gov. YYRFLq7fahb8DhKVnJEaJywME4L5jwnbC34my79KUtJ3UABfzqPMkFQUrM3Gcu66P9TPxF89G5gF wqAnf3jc5QhOWuq8ntLzustj1zdu1z7fRBT/JMum0yJfFOBn0jCWSNBBut1aruYjMY/mekYwWhxL sOMcKL1Oy6IOg8iDWkoFxZ5YRbgw9PZY6HeR9emH/oqUUoggNLT0fWOWkg/SxrApZB6QUFqegtL7 sk9wFCje2eChLPxe0vIgvEx3wdlkLyy14/NTP0F3I1Gg4LeSzGM/FsV0BUJlf/9QlgXVpFAPQhHj 724781nlxlYPdERPknblUBQ/qu5+WVKhGYVBcA== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181215065105 20181208065105 30674 fpki.gov. cPBYqjbl6COCZpiIK9kIhx/f1CbNuMcsfGeuHvmhdLfX/0TqcbwzQLblKAAy+aGd5QFO48GkzfXW iTE6mqgA0dLaDzjdQseJKs2SlGlQ1q/1idlq5LbIi29zAvX6Sr5RcbuZzLzfzyieDLRnjP82g+iL yJnj29ooFHpUw4OifhhXqQj0zUlEesreWmXNNKdKXoxsnV1GMi6lLVvrMbQR8tIqp/gulK12+nGF N5sO7zIPo3FwIpAzfBqpq4flKvWaHZC9NxSoPPCzdU7ihQI0/3+KZo8Yzzc5k5aPhX6+6HoUTnjp gnTHIH5s/1d/JzVa3O9wHUW9ZMh5xwB76z4YPg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181219150447 20181212150447 60659 fpki.gov. dbu78HA8reqolyQuhjoalsvNWEoE1eWMTFuwzqJ2Nbiu3yB/6GCCtZmESu2rKY2pFimVBxqWVJ1o 0lHC6u4M8AMR7fHng4q58wKDHRcHlkXXF3LSkEonbNdRZ19q5khNbiY2GfoRLyLN7DhZh1tqr4lU YnaU8EPMe2Ej6/vt6JCA11VSQvZEEk6bj1gWOb1HQawaNPirdwEyu8G+7UoMIwHyl5ghuGjzpFhA OwWEhloQ1tng5d3lcQFvJSAOmv24ey4xjcdw5mof8uSHBob1NzuYHm9f98jh+4NEr0AqZwku9ULC HL6Bo+5/lCxpoAcw9sV1Bjs2n/xow8+Hza1ULw== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181215065105 20181208065105 30674 fpki.gov. BO0EDuUT7aSZiL9L+HiVPOGHwpaBFK/3nzmcZbpX+tcsqLsFl+taBY6DVL5Lc88ZOMU7xysOm+2Q Pc3WwDNoM2GI3WrkvEtjFcOkCZhLuOLRMlkMl1pi09X2DjfCSj0C9cKkpsUJIxxeh5+k3ELxFVCn 6l+qMuCjs5+yezVIupgAvdilRNuEsaYLedH/5Vxb2fMk5sl97oEJKC9iP2F+bvKRK3uEmcAKcDPa GECJ+M0P60r81v078K8n2Wqigb3ip49vX6pDKrjUyh0InISq7AApw0B01iBJ3BjF8Qr/76QW9zh6 ERMZmbbsHgk5zxHbHvozUa1J6OIQ8BS+bCgKVQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 40484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 60659 fpki.gov. AELbb+fcMMARNqkatbFEmkv9M0S4XseFWrXdwMfLTHkamY9CB54RW2DfgkAnUHBCZl3SyF6Drh2W kzpz9H9LB1q5l3Z+tIsCGEFlg5HZgG1ikyGCJVc1qjUTEgWxyekvWa7CVuTBcMkV7KXi0bRle0eI f9c/nXJDj8v/fe1uJoCsrMtkdGN6ZSTK0NyQMKzXhkfsWDOjqW1IdJvBX6AlNs1Rb/WtDfScOvgh iWQ9OjID7js9ndEkyAQI7G2Hj9WFyGILVFg0FcjpQmNPMAHiKrAfz3bgacCmSm4rrXX7E1H+H0s6 rLSikb7qXieLiq8AyjXryoxQ23PQZBjWfO090w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 30674 fpki.gov. OUVieHNxammlS2+xo8Ck2j+p5uD2KzpudMfkzSwtYqqtRD/Wzt9EgbLLDCS6AiBveg7bodrn7oLJ kTWffRYxK9KO08U+eiB9hv1QJg7SaSS+5Zk4fPKf9BMbomYKLJJa3l2L/4IcVNwydvHdopnIpf4v n94SpYUHSayc5kQHkzUegNx3o2Jn0Fuq+Kt2v9kmyknziCR9aL3/3kumVJPD64bgdTsRQ7Eq4AS7 A7GqVo1Jzl+5PnagS1i/KivuhCOd/wUd6zMS27d9463c0I+mptGTii9u79KkemIjsAVIS8aKfp69 eigY4fChHAbkx3SOkK8Vp7UxEtduV3p5aN2AyQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20181219152956 20181212152956 60659 fpki.gov. mGAevGS4DhQ6tQgQy39gkFSjYxUboDXmZGsFpbpG1NLTeXxIIcKLsnjz7nnDKs8x8gcI2sNeKk81 Pciac/qVu3RudpwMoAMbn9SWUN/Gg3lpe6nx+2bTwZwzIO4tmCXHAq9Qnmb5SlOhZvu8xYAZryp/ 37mu7YXxO2t/Gnp3IgJfIQ3hMJc2567onGs+jjjFtoO6xhJPPqOAP+IC0lw/x6o1dfBCGN2ByU3H filXkMd7uTOY7YcIvNIkVjvkaf/ElFBY9wUTGpFZnDIoPjt7v7OvLiNOtTKHH0mSa1jTNAIzuEHb 8ley7RVNQDPgdCBZNnqPX/rk+ZxbIwiHV5HEBw== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20181215065105 20181208065105 30674 fpki.gov. j9MGD0eRrxc5GaO7QrsPcx/NV+/+uHn3ZkrT0DpvQVmtolTDssOAxDC76XWbF7I976KIEI32ZLoo Eq1+7lXSGrkAFV8d4k8kSmuEd4MiJXjItmtU/erFO3G8fEuo5nVgyXQm7op3acX6UpQxq+pZtFIY ghoxyB7oBLNVK4iYpaM9w53Eu+sdM6xHNnlImv7gEeMMq9bsybitpC0lvz79Pe6F88/XRR6A4Nvn aDZxNaBZTJOnYCViiU/5jw6IdDl5u6Sdej8xL7/i5wNbyYteRLtLoyzD9wmwLfcVNQDid55qI/Kc UWJApMoNqmvJ9lwMRF9itl1P2YTYBELmzOh4mQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181219152956 20181212152956 60659 fpki.gov. aOr6MnUe0bhiWlMiiWOcegz5TocWf57xRXNC1bhlTLz1ntO0VI/wFKb2DPFI5Xm5Hz3L1aNwufdQ QM8jpms1AUkTKuoABKlpu4Vbl6bvlOwRjjJ77L9z3MwaePosy2ru1VCaNKiEO3SgzzQFfMPmAC/p eGMcd+flt7mCC742EnrFVe6DacnZXE5Gu6ghn02fFDK2c8woqKHs2sRGZ67JMdv/iCSJIKMjtb2l 3/hAiH31fpltFId2plpGs0D4/TUlwxDQ63pMQQX3POjj7BXjbqOqI7sMnx44BpMTxT6nDQOcL9WP 0phCOroBC5XNAxYQo1sj2aYnZLNpjA7bz4iPqQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181215065105 20181208065105 30674 fpki.gov. sZzGDsZQ/repakAjVyVaE7EaR16qV8K8GF/bQZNKWebYlUDQZ8W+oSwllRJHzbuaWDtjqKe95ZSB uD9U52ToIZNHOgytSZ7LgSJeec0PxpuGv/ei/jJpd9Z6BBrk8uJZOizik72lkElXzm/urcdkop7q 56dHcvSJmaeDZGHWMgNeGMOHr/VzlK2TtF0ah5tPibKHc+uaz2PCtpCw8WiO/9QNez5bEvZSW6UL GsXyoTzs9w23nHQHCMpNkGCjE+lsbd81zkZGyIn02ZQa6E3b3KGmaCgEMwO9t3OG4UGeyFvBMDMs 2pVGCxWaePBmP0dBCKttFDkDS5tKHIksoHTjhg== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181219152956 20181212152956 60659 fpki.gov. a4mL8oR6whW5Q8xHBW37yNe/MO7LyeMC1mDURjdRYHI8omqubxt6VFmNPF3OCgbHVIy+7X25Ytid xzLuECJXnEBfYge6OnOJnjCkQ2QE+c/ZMcbULI56UTrGjrboKWlP+SAMyqbQ2xsrOwr3LWr15pSU xClGnbEzuVaeN0qmjGvOtWPBP4X2Do32VQdT5LPZnGrw4jQDHONp8Akum8S2heV1YuBD2Pzm6qiP mB9pSQhr2Sf1cpSNL+Szk0YaaOQMDwJ8pzo3ivDkn8MaVA/f04wAibxGKdvTFlR7jvq/Fo6AqIzK uqOYPtYJCF5E+2s8H9EvAxyjGtVy57L7yS7/vA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20181215065105 20181208065105 30674 fpki.gov. BSIZvv4G8ZcvGwPynad9ldfHvxkznS91Qsh1aFtydF1HqA5Dnzwyv34UCGvAY49lWxiSB3UuXY4A uGxRJrT4WYdGWiDlIdjLBDhw3T4Bcy0kIPCH7eNg3jxVnnQc5hbZljUshVE8ktAMpX3UlKQdsUaG ZwnQ+jr1qDt7kmeh49mIlL2xnyBxlUu7VsNgr8A2Y0qOOXUvjwJ6caoLXhXoqqSRWBFtFTq4SrM7 4VYlpZCzJMpncE5JwSjDQGRkQY1UNTkPtMiiuxo01+GFM4W8Q54vY73W2NR8o3QDPFzSt9XExUVD 1Ui4y2vOS2/f1AQSAXiBLtYIqhYt+SRi0dMjrg== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181219152956 20181212152956 60659 fpki.gov. drJnLLeWRaMQpQjIH3boHUseJKM00wq6k4r1R1LELLgQy5ja/Ph0qzLR1xubmVdLXGG6LprlAK6n Wa06IgDTnsF4F2LimXnk/q74a537ivRD1bdlkpIouRLaL+2jRW2ejwW1RnYDTeqVrh9AGBl46GfE 0tOuVGPnsAL5EXuylZnoBw5rcVU61BCyzAn9M5JuxtvDaksVPfx0Z9wfrCRZf5xqIuyqR0vT1Dxs dIsFPgYGaWcqaD0PPkDNVy127nkOgYGmK8cQDJ2NEVvSGKDx5gawOxZ7J29i3CxCI4YWg3EcTQcQ KqDL+6y4xkdNZndXD1nGFEkH6JNfxRcFd8GfIA== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181215065105 20181208065105 30674 fpki.gov. cPBYqjbl6COCZpiIK9kIhx/f1CbNuMcsfGeuHvmhdLfX/0TqcbwzQLblKAAy+aGd5QFO48GkzfXW iTE6mqgA0dLaDzjdQseJKs2SlGlQ1q/1idlq5LbIi29zAvX6Sr5RcbuZzLzfzyieDLRnjP82g+iL yJnj29ooFHpUw4OifhhXqQj0zUlEesreWmXNNKdKXoxsnV1GMi6lLVvrMbQR8tIqp/gulK12+nGF N5sO7zIPo3FwIpAzfBqpq4flKvWaHZC9NxSoPPCzdU7ihQI0/3+KZo8Yzzc5k5aPhX6+6HoUTnjp gnTHIH5s/1d/JzVa3O9wHUW9ZMh5xwB76z4YPg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181219152956 20181212152956 60659 fpki.gov. ZUrhBQkbKMyfTREt+N0EEJGyJZrs21u0/n8q4CCsJd8QjsEJ0j/t1oO3077sSsSEj37jLU1SJm+d zUdJrvs1kkCQhNrXrdssgbSsYzd4KC19O/4n6gUlKY59Fd6JkrqCrLZCkUeNFn96duw7s91Skmax kAjRhjxhWEM5NgheHnNgvdteivBYyVOxADXeDiUkRmPirwRnqbQXp3ToA8SbCR6B4psSOCNlfi7I EqiSvrMYzyTrFuNWue2XpgyGg1WaorosOAe0ETiXOALjNUQtEbulIB/Xmnvq3ftAq07m1FHVTTir k+s4Axkf0TtiPgCfmlEPbvKFh3W46YJSQoFt7w== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20181215065105 20181208065105 30674 fpki.gov. BO0EDuUT7aSZiL9L+HiVPOGHwpaBFK/3nzmcZbpX+tcsqLsFl+taBY6DVL5Lc88ZOMU7xysOm+2Q Pc3WwDNoM2GI3WrkvEtjFcOkCZhLuOLRMlkMl1pi09X2DjfCSj0C9cKkpsUJIxxeh5+k3ELxFVCn 6l+qMuCjs5+yezVIupgAvdilRNuEsaYLedH/5Vxb2fMk5sl97oEJKC9iP2F+bvKRK3uEmcAKcDPa GECJ+M0P60r81v078K8n2Wqigb3ip49vX6pDKrjUyh0InISq7AApw0B01iBJ3BjF8Qr/76QW9zh6 ERMZmbbsHgk5zxHbHvozUa1J6OIQ8BS+bCgKVQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 38287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 60659 fpki.gov. AELbb+fcMMARNqkatbFEmkv9M0S4XseFWrXdwMfLTHkamY9CB54RW2DfgkAnUHBCZl3SyF6Drh2W kzpz9H9LB1q5l3Z+tIsCGEFlg5HZgG1ikyGCJVc1qjUTEgWxyekvWa7CVuTBcMkV7KXi0bRle0eI f9c/nXJDj8v/fe1uJoCsrMtkdGN6ZSTK0NyQMKzXhkfsWDOjqW1IdJvBX6AlNs1Rb/WtDfScOvgh iWQ9OjID7js9ndEkyAQI7G2Hj9WFyGILVFg0FcjpQmNPMAHiKrAfz3bgacCmSm4rrXX7E1H+H0s6 rLSikb7qXieLiq8AyjXryoxQ23PQZBjWfO090w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 30674 fpki.gov. OUVieHNxammlS2+xo8Ck2j+p5uD2KzpudMfkzSwtYqqtRD/Wzt9EgbLLDCS6AiBveg7bodrn7oLJ kTWffRYxK9KO08U+eiB9hv1QJg7SaSS+5Zk4fPKf9BMbomYKLJJa3l2L/4IcVNwydvHdopnIpf4v n94SpYUHSayc5kQHkzUegNx3o2Jn0Fuq+Kt2v9kmyknziCR9aL3/3kumVJPD64bgdTsRQ7Eq4AS7 A7GqVo1Jzl+5PnagS1i/KivuhCOd/wUd6zMS27d9463c0I+mptGTii9u79KkemIjsAVIS8aKfp69 eigY4fChHAbkx3SOkK8Vp7UxEtduV3p5aN2AyQ== ) 2n9vhfefclbf2m0lf2plbddnufepdflj.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 746ceb26f06cdd73 2n9vhfefclbf2m0lf2plbddnufepdflk NS SOA RRSIG DNSKEY NSEC3PARAM ) 2n9vhfefclbf2m0lf2plbddnufepdflj.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20181218182135 20181211182135 60659 fpki.gov. VbTBYQi0NSRZqEdAO/mbZEnU+AoRiTbSNYDcRruxb+CYX0sCQdt2rqQtvhJ4ILOpfVwnR6IW4aY7 QHFsHK5wbTIcMFA540+7fZYk6aILeAbdvPIWmxp0WD2A6VkXCKUnmlQelZVnqEkbbTHZwKyF2x7a vfRTdAQIwPkt11VHzar74d2qR26MCz60X/qDwPm3oZVuK+XK69btJlVCCKlhXdBRNjbc/kqU7xYr QGkqWDTfQ4P4IIOdVq+VG442LyJhVL4gCZ4ykkuo66VsYHFkjEnMdDfxoaVRybrj37SRnJd3UFvT 307EUUJs0JTMk1GsMMkO7C4G8ZtMo45PKHLLlw== ) 2n9vhfefclbf2m0lf2plbddnufepdflj.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20181218182135 20181211182135 30674 fpki.gov. Thahoql2uWeO6iW1skzpGS5ttebAH+SeutfFce5hUxbvnJapn9x58PgcdnX/d6Jg894pAjudavZM zl8XAufFhZ9f/re7p1wdxcMN0s01x9AOnRIz0cytDYh37pIHf6vYG5Di5sA/TgbJy5mz+Y3MQTRf EvSMUuNyqx/fCjoUndQja4ZTJZjsnwIfi0gauaTbczjixRCX7c4BJRMmoVtW8ZtKITMl4QjGdiz3 1SyiwojtDoyTHeU2wNijZx40UABtSivAfTufCsVFmiVtWaBU/Pe5AHzUSeJI4cUtTS592/kjHQyV wFnr/GSyJvq2CPpQ5TKM/Menz/xxK5KIHQojjg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 60659 fpki.gov. AELbb+fcMMARNqkatbFEmkv9M0S4XseFWrXdwMfLTHkamY9CB54RW2DfgkAnUHBCZl3SyF6Drh2W kzpz9H9LB1q5l3Z+tIsCGEFlg5HZgG1ikyGCJVc1qjUTEgWxyekvWa7CVuTBcMkV7KXi0bRle0eI f9c/nXJDj8v/fe1uJoCsrMtkdGN6ZSTK0NyQMKzXhkfsWDOjqW1IdJvBX6AlNs1Rb/WtDfScOvgh iWQ9OjID7js9ndEkyAQI7G2Hj9WFyGILVFg0FcjpQmNPMAHiKrAfz3bgacCmSm4rrXX7E1H+H0s6 rLSikb7qXieLiq8AyjXryoxQ23PQZBjWfO090w== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20181218194437 20181211194437 30674 fpki.gov. OUVieHNxammlS2+xo8Ck2j+p5uD2KzpudMfkzSwtYqqtRD/Wzt9EgbLLDCS6AiBveg7bodrn7oLJ kTWffRYxK9KO08U+eiB9hv1QJg7SaSS+5Zk4fPKf9BMbomYKLJJa3l2L/4IcVNwydvHdopnIpf4v n94SpYUHSayc5kQHkzUegNx3o2Jn0Fuq+Kt2v9kmyknziCR9aL3/3kumVJPD64bgdTsRQ7Eq4AS7 A7GqVo1Jzl+5PnagS1i/KivuhCOd/wUd6zMS27d9463c0I+mptGTii9u79KkemIjsAVIS8aKfp69 eigY4fChHAbkx3SOkK8Vp7UxEtduV3p5aN2AyQ== )`
	RRSIG=60659 and DNSKEY=60659 verifies the SOA RRset
	RRSIG=30674 and DNSKEY=30674 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: