DNSSEC Analyzer - FPKI.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 09:50:16 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 51862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to g.root-servers.net for FPKI.GOV/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (666 bytes) ;; HEADER SECTION ;; id = 16600 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 17245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 39340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 8051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI.GOV/A
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 32638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. h8TqPCBMkKp27ynKhaDZIrH13zlE7SfcreUCT3z2RaUX8QrNafNqrMm8cYl+VGxutuzUINX4Aly0 RwwStK6/aiqzHWHVFv1ArVC2odA7vaZl4TGrRwhQKLWZoVH8Nm8qxvZ9YPBZPUzyC7ViLnyTVLW7 wUNERCqSwPbnJbfNtgU= ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for FPKI.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 494 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (494 bytes) ;; HEADER SECTION ;; id = 30098 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. h8TqPCBMkKp27ynKhaDZIrH13zlE7SfcreUCT3z2RaUX8QrNafNqrMm8cYl+VGxutuzUINX4Aly0 RwwStK6/aiqzHWHVFv1ArVC2odA7vaZl4TGrRwhQKLWZoVH8Nm8qxvZ9YPBZPUzyC7ViLnyTVLW7 wUNERCqSwPbnJbfNtgU= ) ;; ADDITIONAL SECTION (5 records) dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to c.gov-servers.net for FPKI.GOV/DS
	Received 368 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (368 bytes) ;; HEADER SECTION ;; id = 38669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 ) FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. h8TqPCBMkKp27ynKhaDZIrH13zlE7SfcreUCT3z2RaUX8QrNafNqrMm8cYl+VGxutuzUINX4Aly0 RwwStK6/aiqzHWHVFv1ArVC2odA7vaZl4TGrRwhQKLWZoVH8Nm8qxvZ9YPBZPUzyC7ViLnyTVLW7 wUNERCqSwPbnJbfNtgU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=54990/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=54990/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. h8TqPCBMkKp27ynKhaDZIrH13zlE7SfcreUCT3z2RaUX8QrNafNqrMm8cYl+VGxutuzUINX4Aly0 RwwStK6/aiqzHWHVFv1ArVC2odA7vaZl4TGrRwhQKLWZoVH8Nm8qxvZ9YPBZPUzyC7ViLnyTVLW7 wUNERCqSwPbnJbfNtgU= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=54990/SHA-256 is now in the chain-of-trust
	DS=14811/SHA-256 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS ( 54990 7 2 9bb3f80b05917790e120766befb19657aadb57d3649ad529d45a527b36f28e07 )`
	`FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea )`
	`FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4`
	`FPKI.GOV. 3600 IN DS 54990 7 1 7e09e176b10f6489d8ddcf51a778d50a90141e9b`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2325 bytes) ;; HEADER SECTION ;; id = 43021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAdZMHYy4wLngtfOhevWRXcPso5P7pIvYhZFdwI41qz3BsWwv1yGAUG3xS7U8pyFDnO+1E5en UwSD/sneQx/75BZyr06fYsNN4NbLuT2C1UQ8fHC+GNaBrpkcquOknTowW5IfaGi3o36/zzKDZhCj BvhV2d2dFOTDk2icN3t4JWCoZGXhkI+GdsfZNLNjXVzBCpwGFSAAm2GwGbLB3PSVwaLlglmsK1WC j1If2+PhALF9erEoK1LSwJ1/QxKnV0YwC4LcIpE021Lds/rQCJWjo6pttigwRGl9F/MaYSPHVZkj 9r3INUvPszGGCAdHvZ8LbfeC9ggQFgxga5UtclZkOWk= ) ; Key ID = 7667 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAfHdl1YVJP381UsrYdtJ4WL7vS2U1RTwOoLjwGj/hkvofBB/pFUorSbcI2lCfMfDKifs4fV2 3E8iuU31TalxxanZzJ6JuxgXcMGfhBCE/dJT4a7Wkk1P7ESZfcnQPjF/DkFNogrxni85iIOOYjg5 ZNRMf3RyfUevL6964pt0iVQ/clELwp+0JiPGZkSo+1I3ddQUf8H2tL092ce07N23lIi3D9g0JfA2 BZCstUVDDYQox3Tn4HjEjbGtQklGTMgP/SPRxTzQtE0y+yUpermpPCNNiJn4UBuLZwMISykM3MH4 Dk5VPjZDddJWAYOJVgL1ep+Ap5Xp/kpZggHaGx4o6Fk= ) ; Key ID = 59867 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 7667 fpki.gov. Xw+WlUdh9D11Dc7F5SNfHxesCNFEI7mBRzKi6y6oz+YaoAAEmaZpvkAlGKUsz7Q7G7FgoGT0Igu4 DPYsk1lriID21ZTtpolUHqjTl1qKCJECDD1cO4/toudP46QljfL+yxF1HWcE+Obhb951IG/QKMna oqE1XCHryoFN+mEnl6yryKwF9uG4Ml+0cllLre0p5gFJtn2vzfqb8WpKcwDqVPtnIBrv7V/R3WIe frPMN8NoncIhVBtjgKX5+QcBTLUS5Psr/J9PCLmi8x1dmJ30ec2jQaYXIXKBHg9ywNZoz1R1+nQo deDSuGaor4h9yzfzCMFAPuhA6jpjNRrIcvsrOg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 59867 fpki.gov. azBoUB/SQpgyQCPQ3hYOf8z7xAmFOkR19hTqC0BHFqFwJed7q0h+5dyH8nd69X4DTvRpxuofL5Gu 8GySuhJHfSm9Qh4J+4IH62YsTbDmHm9fw7qdq+3ub3QdT8xCERyYttIfhNp9k0Yz6hv+raQxcv2F UG0cR8zcvg+ehaPe1Hojq3SnxNeczg1vLYJxQVbN+7g88RvMNlORCjBRH3Eq3BXLShb72D6vCJ72 1D/nRN6N+qRv2PZem5i6P2JiBUbNHhl+QWdqnJuO+6tGyNa2EMCrkesnYHE1ZzbbWx2KV0C/pNyM /MVPu0tZOpJqp2aPkJukUJm8U1oWLlVVk1vB0A== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 54990 fpki.gov. gq21xAQNgmaGtMbe2rpzS3BzP/DZlVAHVoXFv1kxhoIAGwwP/oKPH1vO6DFUJS0jDc/h7I8c8YGK i8idKTTIJdaZeIBVQsjqIRgJoxBFg/qcki8bp6BtIS22V8FO34I4YyjN44vG02AShkyUf0puGU83 ccREP7OnR24NJvLpeuQtC1cFlvkmzWvBdPodCApJ9kykOayQILbYEh4VjoTWehEbjAYZ9ZpzeAdX hdXxsWF2l7FuHI4iVBerMSPUFGjkCodfM3Ek20j+oXbBRa2UJAznvA/DmOY3xpaaWnDlWRM/mJL4 2rdx73QyRrb7gJjFsnlhEbpk7gDjGu/wQeoyCg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 14811 fpki.gov. gOoGkH/HKcoVm5z/iGoo2RSQWW1f8AbbLXulUdHLigaLm0zFf0DUKdxwCKC0psjEolsFrSsFU0kV uoAgbXtDLu3ugVM947FfXmTgr+y1B8avanh17iqhx1bqF20mHzIjAnzc2Knf/cW9hEEYNhXkCRWo 1kOV8rig8vvEv2R/qIB92+2pGT7BQX1vqP4BTWRR5/EGXY6gOz0rZ9/DWeijTZ4yTjxwXHqCIlZu SjShhIoOKYuEpLgz0fLI2NRL3ajeRIkW+nxYKI7gWAZCG4aiEmfJCVx0Qggfw1HF9z49yez5LNwq XMm4cyT8bMqQmEkuCjnlzNrw+++l64C8dG6nXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAdZMHYy4wLngtfOhevWRXcPso5P7pIvYhZFdwI41qz3BsWwv1yGAUG3xS7U8pyFDnO+1E5en UwSD/sneQx/75BZyr06fYsNN4NbLuT2C1UQ8fHC+GNaBrpkcquOknTowW5IfaGi3o36/zzKDZhCj BvhV2d2dFOTDk2icN3t4JWCoZGXhkI+GdsfZNLNjXVzBCpwGFSAAm2GwGbLB3PSVwaLlglmsK1WC j1If2+PhALF9erEoK1LSwJ1/QxKnV0YwC4LcIpE021Lds/rQCJWjo6pttigwRGl9F/MaYSPHVZkj 9r3INUvPszGGCAdHvZ8LbfeC9ggQFgxga5UtclZkOWk= ) ; Key ID = 7667`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAfHdl1YVJP381UsrYdtJ4WL7vS2U1RTwOoLjwGj/hkvofBB/pFUorSbcI2lCfMfDKifs4fV2 3E8iuU31TalxxanZzJ6JuxgXcMGfhBCE/dJT4a7Wkk1P7ESZfcnQPjF/DkFNogrxni85iIOOYjg5 ZNRMf3RyfUevL6964pt0iVQ/clELwp+0JiPGZkSo+1I3ddQUf8H2tL092ce07N23lIi3D9g0JfA2 BZCstUVDDYQox3Tn4HjEjbGtQklGTMgP/SPRxTzQtE0y+yUpermpPCNNiJn4UBuLZwMISykM3MH4 Dk5VPjZDddJWAYOJVgL1ep+Ap5Xp/kpZggHaGx4o6Fk= ) ; Key ID = 59867`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAbEZu05JmMnw1MgwqmwLo2CB+G5GV0kPji7Sj51KzlbH9sU6xt2t0oRGVQSR9a6eEdlwmcSO URaHKH1jOYFx/TqTmzDWhcJsdUnhDmboixbj8HWJmQOGZNBD+Rgcfyg88s7xZt7ioCmYItozKzF8 3YN2iQjZzgQKxk9nlsquUv/DlTK3MlO8I4SRS+15Bqglc7y8YGHC4gXPy7QFzPbCkuZE/JbCwQ4w A6tIO48X+eBdtSgkc9n/lr+ivgW+cC4kL8ZnneQ88bErjZszw8oiMF8Hgn+r8beVSru/W5/IBOcp j7MHfmQr/C6JgrYdrD7zF2s7BqVsCCIVtsyyc5oKZP0= ) ; Key ID = 54990`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811`
	DNSKEY=54990/SEP is now in the chain-of-trust
	DS=54990/SHA-256 verifies DNSKEY=54990/SEP
	DS=54990/SHA-1 verifies DNSKEY=54990/SEP
	DNSKEY=14811/SEP is now in the chain-of-trust
	DS=14811/SHA-256 verifies DNSKEY=14811/SEP
	DS=14811/SHA-1 verifies DNSKEY=14811/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 7667 fpki.gov. Xw+WlUdh9D11Dc7F5SNfHxesCNFEI7mBRzKi6y6oz+YaoAAEmaZpvkAlGKUsz7Q7G7FgoGT0Igu4 DPYsk1lriID21ZTtpolUHqjTl1qKCJECDD1cO4/toudP46QljfL+yxF1HWcE+Obhb951IG/QKMna oqE1XCHryoFN+mEnl6yryKwF9uG4Ml+0cllLre0p5gFJtn2vzfqb8WpKcwDqVPtnIBrv7V/R3WIe frPMN8NoncIhVBtjgKX5+QcBTLUS5Psr/J9PCLmi8x1dmJ30ec2jQaYXIXKBHg9ywNZoz1R1+nQo deDSuGaor4h9yzfzCMFAPuhA6jpjNRrIcvsrOg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 59867 fpki.gov. azBoUB/SQpgyQCPQ3hYOf8z7xAmFOkR19hTqC0BHFqFwJed7q0h+5dyH8nd69X4DTvRpxuofL5Gu 8GySuhJHfSm9Qh4J+4IH62YsTbDmHm9fw7qdq+3ub3QdT8xCERyYttIfhNp9k0Yz6hv+raQxcv2F UG0cR8zcvg+ehaPe1Hojq3SnxNeczg1vLYJxQVbN+7g88RvMNlORCjBRH3Eq3BXLShb72D6vCJ72 1D/nRN6N+qRv2PZem5i6P2JiBUbNHhl+QWdqnJuO+6tGyNa2EMCrkesnYHE1ZzbbWx2KV0C/pNyM /MVPu0tZOpJqp2aPkJukUJm8U1oWLlVVk1vB0A== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 54990 fpki.gov. gq21xAQNgmaGtMbe2rpzS3BzP/DZlVAHVoXFv1kxhoIAGwwP/oKPH1vO6DFUJS0jDc/h7I8c8YGK i8idKTTIJdaZeIBVQsjqIRgJoxBFg/qcki8bp6BtIS22V8FO34I4YyjN44vG02AShkyUf0puGU83 ccREP7OnR24NJvLpeuQtC1cFlvkmzWvBdPodCApJ9kykOayQILbYEh4VjoTWehEbjAYZ9ZpzeAdX hdXxsWF2l7FuHI4iVBerMSPUFGjkCodfM3Ek20j+oXbBRa2UJAznvA/DmOY3xpaaWnDlWRM/mJL4 2rdx73QyRrb7gJjFsnlhEbpk7gDjGu/wQeoyCg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429065056 20190422065056 14811 fpki.gov. gOoGkH/HKcoVm5z/iGoo2RSQWW1f8AbbLXulUdHLigaLm0zFf0DUKdxwCKC0psjEolsFrSsFU0kV uoAgbXtDLu3ugVM947FfXmTgr+y1B8avanh17iqhx1bqF20mHzIjAnzc2Knf/cW9hEEYNhXkCRWo 1kOV8rig8vvEv2R/qIB92+2pGT7BQX1vqP4BTWRR5/EGXY6gOz0rZ9/DWeijTZ4yTjxwXHqCIlZu SjShhIoOKYuEpLgz0fLI2NRL3ajeRIkW+nxYKI7gWAZCG4aiEmfJCVx0Qggfw1HF9z49yez5LNwq XMm4cyT8bMqQmEkuCjnlzNrw+++l64C8dG6nXw== )`
	RRSIG=7667 and DNSKEY=7667 verifies the DNSKEY RRset
	RRSIG=59867 and DNSKEY=59867 verifies the DNSKEY RRset
	RRSIG=54990 and DNSKEY=54990/SEP verifies the DNSKEY RRset
	RRSIG=14811 and DNSKEY=14811/SEP verifies the DNSKEY RRset
	DNSKEY=7667 is now in the chain-of-trust
	DNSKEY=59867 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 5151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190427072039 20190420072039 7667 fpki.gov. aB9yX58BglTQzoJl1Jsw9oh+H9SFBVt4+TGyuFql6iMFrwUcaC1rQ+CaEPYNBvBYtJ5H+ERLeeqy Hn9Lub/V0hiLzzBDSzH4LUTUH7SGEdG9MCtb7npf625QoRwsg6g3KXaVaGcvBoChkHExdm91e0JM DvstpGeQ4Nxyv60VODhiQoNN8WL43pAnpboG5w/b1KB+TIK2hzZSNVu/7phbUL9OV1NYePVaz+o5 uB3yzUIbe7xOrf4lOdQ9926SuDvrSoTFGUQpVG/RZ2FE0b05YE0y6nI2ZJwOSyNKk5kCGwJLHSYc KSxUqjHOnybw6ZWur7uAC4uLu9W/oaRl5xrhBQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190429065043 20190422065043 59867 fpki.gov. kM8XqA3MfR0i9cE6TimkENqAVY7t3CE0N4WlOktTAzXqo7g6XrVPQVBz4FTAu+5ALhK0WqCfGqDx KdPar8hO6oWpa8OiE0LmO13/LqENPD3CMEyRCGPyfIFPR2OqHcTJZiRvwSg5JMgth/QRMJdK4l3N WSnNQQrfKeYhKcLf59oeSC8JvwEySPg9teYcIm+019VC221L+GjoBUa+KYCWClZ+aGT/VZLbV35q Uz1Ea7opyvU9+uDQkq3XgA1tXGwpVBx6C5Xk/yYv2mXR9LPhgpl6rojW8Tlh+zcF+ze1sFlpTbe+ j8X6FlR+3c1BMuwHlQo9LPzAWVv0ty8RwvpRhw== ) 92idnlififqj3r3v47ghoggadsk319m7.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 8c7faf161756fd4a 92idnlififqj3r3v47ghoggadsk319m8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 92idnlififqj3r3v47ghoggadsk319m7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190430173130 20190423173130 7667 fpki.gov. 0ogCgMVWpl0qW5UQ+ymCf8sSbObL2faraQ9ivVLhtTpjNK2/h4KjER0q/D3lFDU4xqRED7eGQRPl kzIBfnPQhXAfzvSu+ldPnG+1kGX0BosNtUOj+gO5U4p3CZcchB6XLIk3AMlWLIrO+e9g7CYMOMYD XuIVUmWU77EPF2VVV0Fjmq9+FLHmvFgtqhfaImiyTiKDYFsRcb3MiLomhGKDQ10Ehc/GVg1hXGoS azSlEEu5eQB0QwO0Q/aUmtdjepqOON/jDCFB8DvOSyk51KPB6YAYC2alQBsXnNg2Ek9ajLURt2vI YuOz/Fqr31jnHBO/IX2DZjKyLQSAq3nFS7bSEw== ) 92idnlififqj3r3v47ghoggadsk319m7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190430173130 20190423173130 59867 fpki.gov. TE0lXjoxBJPKZ+qeiumYCnl8/WyqNeyWlJ1pBLwtqWJTiUI7tqNzY0USkfDlTlVat5a4kFTudW0X o2iNQQeUvoEFMv2lFTAnPkoe6BrHp20TOejz9qJCPB/aKYA/utzOhaGG3Q8jS3ZIF5AyqsPioToj s9oZCiSqHVQ25BOWt1yhPzfSgSpcc9iZsm5oifanNNJ0wHddKqfJd1KdrishJ/SA75rVc7Pd4tCA uJnXsvstA7OBYnJzmWNa/CralkZqIiTv5a4b/6cuwItH1z1aN1H4QnedHgMzI3g7vTIePz6/y68R hb5xLWkJ/IgRfDeZKWtqMNvRPYvDQiN+Rcn84Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 39976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190428065105 20190421065105 7667 fpki.gov. c74uYWjl+F31RlrCycPRSSlvPxl78+4QCFyMlKEG8AYWnKTJ0muzeXqNNQiQQwvybYr16NAu5fTg ENBIoDCiMrJJlqJ5Afz3zmw4bkYTbZ/s/rgp67Rcbr1eOZrcor/t4fxuddGZXFjFgWoUne+NwEhE kSG4Uuq3BmVQrRMddTDTbktGMkZMfu+Aasqr1SvYut4kq8suH6fUWdpthEiOubwhWcdG55iFsTe3 8Mg/MnyMSptpXW22oRsEnMotpT2GDI79we233QGfUW8bDS/kaVwFQLXoTkEfTqnJ3wyEOadAxmU+ dRvKvfyeGfdgpqO3IeYe0fJvc6IzUSIT/BnfJg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190429065100 20190422065100 59867 fpki.gov. gLQiWssKVucyB9Y5DzH97+r+uYY1HvrHMAsF14kIy6clEwYNaZv+nNFO3CEkspwBJCu21AjQOXUT 0ePSrD4gHVzYjJ58CkVD5iUNWegx1Go7h/gVJZQQ+ho5QnYwlNDY53u1hRcvWp43U4zTGbIZTjD+ cLt6iHjiBZCdNrUI9Fnlktq8xRc+sDObwo2nMujT8g4LJ5QSMG0cbietpB44chl7jABhm29xcESL mE+vlQs7DKawrwb3w2pN8DSrBy6ckKKBtSpo9/FESgEZeBtX4yPWGbhn94P/IvCJUAvRMjWKqP5V zQ1aJTXAK46BxNYRPuF4Xtcvt8hU/iAKeXtTXg== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190428065103 20190421065103 7667 fpki.gov. ZpcJpA4AYPuCkviCMyKnaycr8rh+pG9JzlYbagnslvoSsHKSqUfx8Sa2BWCbrQzZ6IPnTbYIupxW 1ZU7FW+yZqN7a4o8v5hJMWGUQaCdKHzc7k0P4Fz4hly8r97U4rK8bmly41ZZAOdC1j1/HLohoYp0 psUIIRSe0k4dwqjbxbyhavEuWvDai5O/lc7oIl4LCzUeSY1SbL/ZUArZNpB4K+4IsuZehCvKD3/V orFXmtRz2cQ+vCqjFdGiI+GwVzLYBSyrND0ib+54cLdGjMYNzND6vB+KXR4PM/9SI5t84C6B7maH +oMVHNPhWMA0U9paYLRGCWh8aETkPeha8j6qWg== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190429065058 20190422065058 59867 fpki.gov. jHiFEygEtb7W+u7p6iCT2zQVIjkPDkYcGY3i4f6djagv9hJw9rYukviGy6g3iYJ/Wq46ttj9ydvY P18vV9GBqwmUyxphZFXrj8pzacNgKtWBkmrF3V2LkLEZwR8kWR2BV3ATbjPF8Wcco+sTLkDFV1gA mGx/9JZEUJiG9RDwCIvd5Dp5Z+BreQ+tOxZI2xr1rZWY/WGpnlRNNqMUxZBdmb1K78xY76OkRNqZ PyKKRueiCkRbp3Ygot4awdXV1OUbQjmng1zxI98jLUvkymE6orQo8TrqW11vfVuI4+HePIGQFinR QoFTwShdLRHsJ00aCxDxQtZ64AnlLUlEW4B0iQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190428065103 20190421065103 7667 fpki.gov. DCvkt28jmg3A5OClg8YLBGYflU8n2syKPHpWw7DJlckto2Bf1OiZjZz/Dr3zPgtA42LFtiZNUsGO hOhxF9J+G6ZnK6/o79sgS3uvayPuy9IAXiorhAAwxg0XucJJusCBtdsh+ZBbGUuPIlhcFEtFNAGW xEd8UbBHg2YECQcSA4YJ3aUUEfv5hCaNll4nFuZH5Dnb2ZVCSQxPYeB52FN3uArne4e7ocAWotRb BHKGR4LYNcK3bYtcSzOYtNA1ipiHbB22ozZu2VOma851nUojUcnutiMDXCmFAgWPQyuBTravMQfa /lKlGuedhIlnlWNuZZ0uv5odMjiHVqz5v/m0IA== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190429065058 20190422065058 59867 fpki.gov. c/CxYWg23V8dNQ1cULcEvCg/EJhZ8b765MUlX2qMBUhIsaxSX7Yy/l5hLN8883xKpLWp9LrAs2kp 49UzhOHlhJQI/HlKvSJghuwXRyMb9OYYmVtnrDzp7aZCjwVn/m17b6F4vomVRUyFUVWoK8vvz2az OirRzhbIeuIHelTZbXC8Av4m7Wo6UI1OcegRqY5fNflwF1CBqkAa2h3Da+AjqQrmCYK0UTVIZiJQ Yi4d5bydc0+hQb7qhKTvxRBv6+wbzZGpgIffzkYDnYol2nl0+1UFSCqUBY61CCKBL7asx+Ug+iso KjOpuTLI3yDNyvu3yDVILku6TV8zHjw8k4mQ/g== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190428065103 20190421065103 7667 fpki.gov. xq/vD4aMpMiNM65rnu7jhBr/jL8u8KvJtI7tyLzF38Vd42YPSrAMgcZmYw/FM0vRSW09//9Myrs8 fPb8YUWEEaj6sQoBB8bbNezkiRXvm/upo3kd+l+0Bzwc5wLCjGTinDgFXJnwVWvlKsz2DfkzlnxW MyMIiPS07rf+l+RLfVsYH35Cra9gz2c+x7+6sfonZ8Lj6rO2Bh98AzQNNqwWB6gvEIkD0ui7CWEw Ms/Uxp4itDZx4EB63eSJkap4I/RDtjgcXqbKnJDeD4XFumvLEGrn/3kqJORgce+nmE4u51ioAfRh k9rIn2HL/9GUlthxUQ6ZuY6HKsXKq0+ax6116g== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190429065058 20190422065058 59867 fpki.gov. 6dgCe4kdpCaY2XIxIsoPR0lNoVSkojFhpyrPdjxia4SkdSKmXLRBU1yrKf54sj2KQXTAgDgCFDn2 YmuYFpxJyS/nD8PIzEH4T+FUN6I+WVopyTV2HEIgFHTVOmFCLucSomPL7CUZB91pf6gayfO9hwdl Vk/CmjBVAMPqOHWRIm8nACzgLQGXPBefsUH1K8A4+EIVOmNe0EjT5Ijt7X/docXB/xBeKJHjXwDy +3R5SXtFjVeI6tUj6Wy8sxQHsYDcRdoIZn17bqIo3A8I24jvV/xU0/tl4UpTr4NvRX85WVYAK1e6 KBPbJitNvvYw/769fBjEUYuJVqwy1i0Wp4cg1Q== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190428065103 20190421065103 7667 fpki.gov. Nki+QViftwpXwAyOCWw9erca8bQmQA+jPKHPwLH3HXVbXTuUO2gKe2VzEjDarLuCJ+MUgXNmNPOd q4ja+uKyi6+KjwpJRvklhytBYKfIuD0lg0kAqJpYgjvCa3l3C8Oqqi7EtF6sysnn/Rr9PwSwOggt pQoqQ/qZO3nMSY7EsKIAACq97vc8x4YdvQ1wvJ+lbrkvSKbSNGbgvKAsMoWXcYCo2y5a9gZ/5bv/ El27aTMd0SBMiejdOpBjU9pZumMaQglFRQVpXMOZtGKZpY1lKM8GtMcb95LmpSMCeGB6k3xpMzLV Vgk7/6QBHvYyWrKAJEkSq5BTYO9XK0EA+AVBhA== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190429065058 20190422065058 59867 fpki.gov. OGLfbx4/Yl2A+2R4dwNHfoZDuRm8zxDmuR0zxqJLk5K2+7t4diQPWxY83rEXG8cjeirrDsbNimi/ iOER6vq4Cd6FgqbbPDcRd1UTibqWKfd/hrkiQ7BR7nVBBy7QbwEPVf/UQ4LKrDdUh7QdvRxX03Ng hPzcW8lrNsaJ3bwbaNYiKyUIoPTQpA9cOnZk101LuoYbZ8r4qMR0ncD0V8sOx3rIJinzGlY3Ramf GQ8IWxobcA5u4VDLHiWcmLPIeuyKuUw1+i9f04LO0Nt7VmhlzmBZJdGZHzud0ZR3lafZlvo4xGR5 Gh566+mYkZk53fGrl8zjCuvTxXXqPmPMc32pXg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190428065103 20190421065103 7667 fpki.gov. BhWeu3bNU1124QmsjN+7GEwxpXoRdsJYcxSNRYdeyQ8JP5Uc2j1lmsSHVerwHo54+t7PGU4slrwy qmZYHPt4gaZjkhk85QpwlskAZVCvRkSPZ5KGc/5FuIt0p7nPSsM1OsDSgoFTNSayIn8OJfE17eKw ylyKOaXzIchNo07GfhGkwQc9ZiZF4aA0wrU4/S0h4tEtofVcISuv4Bf73thwk157XT2/QaNIMAkg EY0oCikYWRBLVOtYKVzN1+QTYD1WGuqzsf7/u85uxJsQuxMKijcx6OSwqkSR6/EUU8XfMVlchqNb bdruPYWPn9/55CIvGctGzXaYfhOTfJcfpoTa5g== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190429065058 20190422065058 59867 fpki.gov. YENPPKJBDuSpT6rL9oduurLmF9JVsKhPVrPpgpObgB1fSnmLtxSQkye2mGEP5btjYaSEB7gvzJQQ CJEArJsbed02gBMwmO+/tCrPgoNPusr0ItZqse+RIyfI81WdEUSDpbOmWIxySk/cb7T0+/vb/9G8 at/HrCYD4h4qse+7dHA6hIVYOsyAhd4QqbY0eKpYdzuxVHW2Ai51SxieJze8kXFa5UZk8hM4u+jJ 5k2aKOZ6BqWe51X0OIiVySS+5QNgUldANOPU1vZWVTiKr89o3D6GiGheysUH8Nb2ZcmZq6SIuneX pR9rYzJr7YIGOUAV0H8+cACHe89AOouj+HclIg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 57703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190427072039 20190420072039 7667 fpki.gov. aB9yX58BglTQzoJl1Jsw9oh+H9SFBVt4+TGyuFql6iMFrwUcaC1rQ+CaEPYNBvBYtJ5H+ERLeeqy Hn9Lub/V0hiLzzBDSzH4LUTUH7SGEdG9MCtb7npf625QoRwsg6g3KXaVaGcvBoChkHExdm91e0JM DvstpGeQ4Nxyv60VODhiQoNN8WL43pAnpboG5w/b1KB+TIK2hzZSNVu/7phbUL9OV1NYePVaz+o5 uB3yzUIbe7xOrf4lOdQ9926SuDvrSoTFGUQpVG/RZ2FE0b05YE0y6nI2ZJwOSyNKk5kCGwJLHSYc KSxUqjHOnybw6ZWur7uAC4uLu9W/oaRl5xrhBQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190429065043 20190422065043 59867 fpki.gov. kM8XqA3MfR0i9cE6TimkENqAVY7t3CE0N4WlOktTAzXqo7g6XrVPQVBz4FTAu+5ALhK0WqCfGqDx KdPar8hO6oWpa8OiE0LmO13/LqENPD3CMEyRCGPyfIFPR2OqHcTJZiRvwSg5JMgth/QRMJdK4l3N WSnNQQrfKeYhKcLf59oeSC8JvwEySPg9teYcIm+019VC221L+GjoBUa+KYCWClZ+aGT/VZLbV35q Uz1Ea7opyvU9+uDQkq3XgA1tXGwpVBx6C5Xk/yYv2mXR9LPhgpl6rojW8Tlh+zcF+ze1sFlpTbe+ j8X6FlR+3c1BMuwHlQo9LPzAWVv0ty8RwvpRhw== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190427072036 20190420072036 7667 fpki.gov. tLH8gW9bdmK+GJZetCpYdtigtCNu7gF/15ZWIx4y0gAC8+rDMPgxRSjlcqUVeEntuWhdrxOQUJIf jNGOYoI14uEUDiHnLsG+OcyFJZ2Rebb4f/ouBQxIayknDdJmEQHt1Dm6ioA+o/EbiObUDx0YcmSa ANUv93F6zzU4u01F0z0nq+ROyPi7i5i/Guf05qVoxJi3Qac0EnsX/XKIytYrU9OHNYxeq7ztIVtJ y4P02jTI+J9u+FogotIPZ4g627s3l6annzgiP4utyjmPU23p5L++g+iMqIMRMr0UHI2IwuBrvE4M f34Or0E8qK4/auJB21gOOmfeYmD3mb3E8YzvAg== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190429065100 20190422065100 59867 fpki.gov. yUW3K5bErXzUqb+Z4DC4cgbUBR16uJQD9TgB41atH/94G316EaRYwpe9a0Zug6/S8DVj+SOKmSER adwb0Guj/KKI43uGKj6UZEGmKjVJLUKKiF+N9MyGveP5mhrks0W9dUYJRHI8D4SrsbxsCtxXOBj5 htLlJZUdRoOIaH999Pd4gy1U5OluqusL3xxF6jx8Hd/22LvYER7j1xIVu0xq6g+2PohkJc/yoMWJ mVguTxXCj4eVGskDhig1WeER2R/UpEzN/WWwbhIs91HHJQeaYRKktYGraDnkEhH7T8lg28XozVcr A/TIvHg8o8wUztqOupWfExVG6OhXBpzHI8nQIg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190427072036 20190420072036 7667 fpki.gov. WHwkH7Sl4kf/JaF5VlnBLQ+M0Mz3HycjvGAQdQyEmuySAkO8yQTuGuyxp5nrpG9UFLqSs9JKqzvV F7opANpJgZJH6wOfYHa0jqj47qyp7pHiZst5k+6RPJIyJxr44hMBGmKuRcMFSL3xbiNJsXRAzXpo pC8dLdn39pqoQ0/7tZy72s5Xt8RY6UNWhrLrXpFkNPNcs1OmiuH6NZertywQcAoQBcRrMdJ2p3dz YNwagoAi/Gvpvuz0HUtKgOgZu15EA+MM54mqTqFTMHgOlDCR6muYGQ7Betis2SmQPDTdTF0buoig 2V2078SLI364z5OYRVLUH0ErGclZYKS48OUn2A== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190429065100 20190422065100 59867 fpki.gov. kBRd1pYUZyDrB5+9eugirukwbWdjspADq1tfTepGhacLl0bGAigd2B2apZRv95e4PWN5ItE6MtPe O/bDUnQkNYsKKnusQYPu6Xq7rpcpLwx9W+c1RyhhwzRtpOZNywhM2uSlfRONuXrSe0qjp+JbajyC w1otHxGXvsxa/SBKATFBBj9xvOtCRka+X2aYVeqGOLRqI6iO4U4NEFvtVypniZ8vJRKYcLK1UpPT iagMeHH6s5OiGtfJyXdVDpxoRVcTfNHlb8fS0ox53yadBywi4j+Vv5r/uptD4YasYLb7hd/O23Xe QF+GFLwnBL2XLhGWHvKDsKC9m5EhF5RiUNeddg== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190427072036 20190420072036 7667 fpki.gov. w5vtQ5U1tlYg9yVGKboIublkVodBG2oxHw+D0GF8uTn9dGV9dvCRUEXXx4Ag3dlYrMCTE23N/6lH +Jy1Zy4LhSGDhU8dM6L45XMRSZ5uvM23BEsBAs6oPkmpJ0RZaEIVfBUhju4wQsc2+LyW34N9fe2P bTlyVx3TSfMQ6phmda0S/C788pGF/Xh0GAily4sIRj3+RfrearW8KEJm5+NBkTQbBvkafqMGEfdX mPLYFNjg23kdngwWnmwqdjMMhgK+ycTUNn/EY6QHtTA5aAAaG4dFanS6527bTlQGnk6NTnG+Mb0R 70tPeNZswHKIXwMR4rbskEm/miIheAih+2F4Sg== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190429065100 20190422065100 59867 fpki.gov. 5EeUfk5/Q0JmnZO+oNbMCgnNOCZutTISNNjYN5sKViMjIZnOMlkjdCxC/EbhM662EHoFYCWvFmzZ 4zPRpt+PFsIoB8KxJdeybGm4CJ5TEuENBL7WtauFux4eq7F0tPupiStxxOAPhCC5CegLu7iTfjrg 0J4ExO8frSTXDFniyQvjWYMNDp3p5vgILJrjN4hHL0UBJCe+7BcKCggAWDU9qVRuKlEWQkXkHO24 7yKEA9MzDzZpRw03Jb7hEHI6zhFvpbBC9AOl5J0dbYFepQrTdOo73n173UvqhAcQjzgI3QfNTmhk KAb4W4QoN546K7auE1QqjUj6L4wuETNGXQhgEQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190427072036 20190420072036 7667 fpki.gov. dK8sca01O3DTQ07RsU/IeooHdF+6GaRmsN6n376Q+5yOGIB4HIgKTDnPCrii3PnvzdmzBK02SrxA reDaVIYIIYYdZhK74RCdKDtdzMb2lfENWK9sMLE9C7Moxa3Jvx8DeT3I6jgzavfIAhancwBq4tiU X5b04mb285skN9iKHAr5HUSX7ZXwbxaq3Xoq8Mq66IYtRQYOIfxoTuxTF2bWXBvIhYIXBI19YVrk svaWZkbaivlM5bnW7yBC/zN7RnRN68C+RXzjOMYzSLQNE+VfJtE/YaINHuRfL0hN9UfcVAvGF7Sl +LbPi1DgRYLTNyt0LUl2LT9cRg4LjyFLwAMlJQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190429065100 20190422065100 59867 fpki.gov. OG6c/gGyQYY+k7jB5qXDQ/NPEOpvw10W7Mwj0m3pw/2V7RuZRtiftScyuy7+36oxcnsnj2cl4F6H r8oOxZQawIhilWLDJ9D+59BBWsbce8oVwcwru4Ppc8rTo2Dc1WMtxppr/JVS/YGZM7aYYkzRVW9I 4Nc7AgHlW3PB0lJ/yReKsJ/avciUKRgilsobX32fxBvcWgyCPMMOJzA/3MNBc7FCJc0icrMHCfRk ZSS1DsSe7DHbLRdR11clTstZngERBLMt0uAtr9bqCukfJFIYRl/OHrV5pbjv++MtkJEohhMpRkbX As5bnchN2G3mViu8gkrhpamovqFNabhwoEo0ig== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190427072036 20190420072036 7667 fpki.gov. Zxol5ealOl6Yfv3zT6y6YhXjIImudOZB4SmzkMAmZSRTjMsDgt9V/Cf0ac+nONw1tEl7T0xdV+rw xA5fz+nq4CURdCuYP+T4aENhJMq5SW73wPL+iRJeyRBHznnL/+Ph39sxJPHPfi6OeAJqpw0T0KSI IXcli8VAT31HkpUkxJaGCesKRTjdqK48V/OUPdUsJL2rwDw8OrjXRKPiE1xcjFu0hA2Qn2N+OM/K lO7pdTkXvKyfHPYRmF//NFqYRLB2hqY7CQOlfvPd69YbSGdJ4wTu+j3EPKd2JGTDUb8UKtYwq3mT H9O5t6nUlv3lj94ibSTCd84mJ7WNxbeMfgynPA== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190429065100 20190422065100 59867 fpki.gov. tox4grRafHu7QWco4AuAbi4soK5I0NH3lKH30a09UjfVLddyHkgt3svs8eoE0PCxUVdlrUlWyGXC V+8FjICWAjIfBWburoGAFcYxWE6GKnodn7mVV84EXJfkhzHrBo+EvR4T/y8MChXNIAHDI975Cb9H 5Vv4fSU27MUVhbf3WNOIoO2gwcBY8SII/y3Y8vZf08P846yLeE/8XQe9G+oe52OfigGK/wVkW6jR ZABx6avgTeSi8nsHPhTjbQal2A86MHXRCyw7DgQkDp800jg0C0o5zriAulhm5eU7WQ/ZqFjK0nvd BA9E3O0rhEAQf9ZXK5PwJ+a2fQCUCLilvhbKsg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 3387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2018121106 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190427072110 20190420072110 7667 fpki.gov. z89jxXdUpHYXFhV7kVQFORzp7y/MOxPm99/gTh5g+FcQq6Jx8N1C7kTAw+8ptm84efcnK4eF4qb/ OUXapE+VCxKnbE8gKeWvPWj3s3zHJ7NIUD2UvwmNYD10aa5gANqPNKig8TprSDMDP/p4oqrz5QQY zWKxKCPGxsTwJnvyTV3SGVUbZHWxopM65IXF3SDAH3nHTSUfA7A5bzc2f2jIMxdTGGMIPbxC0cI7 az2HKAKqFORQZ36Dp9SZeeaakrToFepb2AZVO0x74cmXm1Yq1VGW3hEnnmBEdyI9PeRXy3UO2ZD8 t3KBxlkU50+ho329YqybVokoPqs6tG3KgRKKkw== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190429065045 20190422065045 59867 fpki.gov. qkIPd6kTlNtDBeSI5i0oPbB3QVwzy3XnTLnMoGW0vzsAyQz4cPpmoetzKlwbKufy2ond+BMSSWhK u9hAUIbiU0CYgLaXIsKgQNUZNiPk+NKPZs9aTBwawis37oWY9A1titCIKd7I6JrGiFoHYPfMC2uB gt4cqGj80r9/1oE7u6UQcIfKIhKvUHRJcbsUxESSJaXnz0GJPZOvysQ/h/8U2Ob6ZQjnhn8Wio55 PdUGAVWpmloU85LIXqEo2RShgYHvJ0/RYldUv5O9xLwJfJ64QEf/WwwMq0fYYEvQKkoBBHsamD3X tDhDtvCr4aRdlgGd05kJPSa6dcdICS54YHvWzQ== ) d6bf2paalr8d8tm15ndrtk5t48rm3qd7.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 7ddbb01bf37b1c72 d6bf2paalr8d8tm15ndrtk5t48rm3qd8 NS SOA RRSIG DNSKEY NSEC3PARAM ) d6bf2paalr8d8tm15ndrtk5t48rm3qd7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190501055513 20190424055513 7667 fpki.gov. FtCeYJ8OMH6onhhod2D+1AvysQ++CMBoVy4t1bSI4jIuHx53ahUltinLNekFY8J5laNw8dRj9Kcp KBM83CaB/oCBkYsjleGcjn4oLIeyYBqh5rtiRVQ0OMV1MHn+1iHR5ppqc5l88TVmyu8ZrMVq20Se Wbwi0P3PbJhIGr2ufoIi5AUxy0J1JTyUgMin+XXtteyIU+DCrzfsNUP28kfDojf1EvKH2Bj8LIyJ JTEmGR8xKza6KvC7vkKvJRcy/BeMedXDTKEVLDjz4JVKu419C2Xlp/YEwuOBVPd7DpoJB3dCOSbF 94/bggq7ppLlKm27Dwmes7MXgHlgOkfA+JBBYw== ) d6bf2paalr8d8tm15ndrtk5t48rm3qd7.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190501055513 20190424055513 59867 fpki.gov. DenC9s6cA/snaa+91pDJ5l/Av7RJ+C18WXbTNseoMMEUT77zF3O012z7u0PvBN/rIpTssDPZl4IG EpPr6IYKvp7J/hjYViGnX5FIUgj4pvslZ3Nu+/qFejl+tpCwM+s38lZAzHBiyI9gcLR9NAeam9cJ xCXpZXqVAZMNIobANpYvSugcvwlybCwvxdTuPrpSLWW1aI7RoOccOfNSFWRIFz2VRZU/xVdEMsqb S8sUUDg8Apb/KxrNpLj5LBAi3Uisk1seeFvDgPaz/rDXofU7tIszUqZdv/15d1AiNTaOaTeeoctf sCQtJXvL021WA2TyvvH86c6GWYds1Co/aKxpIw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190427072039 20190420072039 7667 fpki.gov. aB9yX58BglTQzoJl1Jsw9oh+H9SFBVt4+TGyuFql6iMFrwUcaC1rQ+CaEPYNBvBYtJ5H+ERLeeqy Hn9Lub/V0hiLzzBDSzH4LUTUH7SGEdG9MCtb7npf625QoRwsg6g3KXaVaGcvBoChkHExdm91e0JM DvstpGeQ4Nxyv60VODhiQoNN8WL43pAnpboG5w/b1KB+TIK2hzZSNVu/7phbUL9OV1NYePVaz+o5 uB3yzUIbe7xOrf4lOdQ9926SuDvrSoTFGUQpVG/RZ2FE0b05YE0y6nI2ZJwOSyNKk5kCGwJLHSYc KSxUqjHOnybw6ZWur7uAC4uLu9W/oaRl5xrhBQ== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190429065043 20190422065043 59867 fpki.gov. kM8XqA3MfR0i9cE6TimkENqAVY7t3CE0N4WlOktTAzXqo7g6XrVPQVBz4FTAu+5ALhK0WqCfGqDx KdPar8hO6oWpa8OiE0LmO13/LqENPD3CMEyRCGPyfIFPR2OqHcTJZiRvwSg5JMgth/QRMJdK4l3N WSnNQQrfKeYhKcLf59oeSC8JvwEySPg9teYcIm+019VC221L+GjoBUa+KYCWClZ+aGT/VZLbV35q Uz1Ea7opyvU9+uDQkq3XgA1tXGwpVBx6C5Xk/yYv2mXR9LPhgpl6rojW8Tlh+zcF+ze1sFlpTbe+ j8X6FlR+3c1BMuwHlQo9LPzAWVv0ty8RwvpRhw== )`
	RRSIG=7667 and DNSKEY=7667 verifies the SOA RRset
	RRSIG=59867 and DNSKEY=59867 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: