DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2019-08-20 13:40:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 13282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to i.root-servers.net for FPKI.GOV/A
	Received 666 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (666 bytes) ;; HEADER SECTION ;; id = 55977 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 7742 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 40239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 24930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 55909 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. WZ5PrBULUg172C5Xw9XC+ABzNsaguw6aq6dd1IWY87DMXuF9kBYOsiJiZHNSsEMr37WexUn7kiyA M1KWb6BKCrGb8LajFqP9wlBermdl0sidTkpW/WOI+sEKrwfLKOn+t4D+4Z6uhri++s/pwJ4+4skL 0RqlJEJyfEM3vjWO9qo= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for FPKI.GOV/DNSKEY
	Received 494 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (494 bytes) ;; HEADER SECTION ;; id = 31486 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. WZ5PrBULUg172C5Xw9XC+ABzNsaguw6aq6dd1IWY87DMXuF9kBYOsiJiZHNSsEMr37WexUn7kiyA M1KWb6BKCrGb8LajFqP9wlBermdl0sidTkpW/WOI+sEKrwfLKOn+t4D+4Z6uhri++s/pwJ4+4skL 0RqlJEJyfEM3vjWO9qo= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to a.gov-servers.net for FPKI.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FPKI.GOV/DS: 'IPv6 transport disabled'
	Received 368 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (368 bytes) ;; HEADER SECTION ;; id = 4570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. WZ5PrBULUg172C5Xw9XC+ABzNsaguw6aq6dd1IWY87DMXuF9kBYOsiJiZHNSsEMr37WexUn7kiyA M1KWb6BKCrGb8LajFqP9wlBermdl0sidTkpW/WOI+sEKrwfLKOn+t4D+4Z6uhri++s/pwJ4+4skL 0RqlJEJyfEM3vjWO9qo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=14811/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. WZ5PrBULUg172C5Xw9XC+ABzNsaguw6aq6dd1IWY87DMXuF9kBYOsiJiZHNSsEMr37WexUn7kiyA M1KWb6BKCrGb8LajFqP9wlBermdl0sidTkpW/WOI+sEKrwfLKOn+t4D+4Z6uhri++s/pwJ4+4skL 0RqlJEJyfEM3vjWO9qo= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=14811/SHA-1 is now in the chain-of-trust
	DS=18798/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4`
	`FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4`
	`FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea )`
	`FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba )`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2325 bytes) ;; HEADER SECTION ;; id = 18293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAb6riQvnLQ+wNdz063jdWwprUuVz560vCditzABD9qY6MyiKfc8Y7M5ry2tSovYV/MGhulcg eBlSPLnPEPNTdE4hKEaMZBVBlr85SOoo6+yadEVTrJVGd5Hq6WNfNJGPnRBFGPxPsIZGze3xRD1a wC7CAqQRaKHbfXa67fqYxNqJv+7f5W7YmQKh59fgynzvYDtXRUNr+bmR3qJmUprUbWvGbyXvNCpF OJmiCDCK9xabkusp/pQWb7u28d5dWoT2qY6Vhel2Mb8A8YeGPyJNz3E6VdkAoXOZiCX0x4hRl+ZR Uh3IXlYycvkWhxvqYaGkTvW7S788TjYNZVs7YA7dBiM= ) ; Key ID = 35213 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAfIPd82l4S8jsYmScZj+J4WOc4JGz/OkDEuD3AoDYnWEFnPOTEasU/JSQsjau4c0cl1MVb+n aB48M7FPmFurfak1a9FuXIDBDnmOn9A8MBCQtRZN6yW+LNSLv90wivSLwrzIZPr0N1e/vAo3+/aM IWL3iiA2sZDHe3q05WlqoEeY9vDFzfLYv5l9jDi4U/lcEnbUftI120eNHa/bBm0pYjsFu9Mtsfg+ PJeZ6taazDBWdRwlhGbwvZSBSHeUgKGesTyj9KCDtP9lG1h5Q/HbAkwJLdXo5gilTeRkSw2nk2mZ JQdxwwY/OHj5N+RVIlo30QV7gzt+VxbefjyZFtek4GU= ) ; Key ID = 11612 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 35213 fpki.gov. QV+4rN7AAUAztvXJG2fdJEJsK+Y3XHb89h4td/YvBXBuZNwfyoJNq+Gn2Rip6vN+N2O4QJJuNul9 1x5+0f/knRJSVhEjVS1ub1mBKu1r7zXf49aslWOoJ8GUWPjQ0LBPGlt0deEvH4toxobW+vs+nYYZ w5kCC5hvXSdUKKPy6HI2SftXZSXAj24lZgyNZE1w+/kdkB9xA6G0bF4xCHEYBOjYUYYUw/ODiiHm AKKSmJ/b+p4LY0FUUn8GtymMKL7DhqB3JteDjY3fdGi+S90LJE8c8o/wVB0MCot9TE/YomUhEuyX CZg0q5hrlb/CRH3yYF8dR/aoYYh0rHmL/2Qmnw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 11612 fpki.gov. KBrFRKR/1jrYTvymVEVcPBVQCYWdqt2NmEhnLnk1F8ZQmdQvJktnE8CNWHTRwiWtEAtytdhIr9EJ xpwoGJmtKH8HpdwKt1n588q8FQJc+mHdqX/4tZSxn2JlM62w+G5TdbxnPDEkN8HdSMbyWijN1kNU 6gk2MKVqNEL8Ou+WkC8rbsDBcwtPLHnFDvj9Cd4Y7tULuolWEpbb6a29ixD9BwkSKk0BsXpY7WY+ oKcUDSK5csH0dX7gMolE7tneMAde/YUbKkqKlXrDkqWXuMxEsQgjUvun3zlCIILz5jtEXL588gIL ZCQAhFprgxDIfI8qyBxTLVet78agUdN66nTr7w== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 14811 fpki.gov. 3MmIBMGaMBLA3ZjZqiL9MVy833jNslfhE9Zsj6o6gnrPtbLHrEu0pZMkX1cDuaumFkqmPuBTjBP4 3lPhTwwCnD6bwVrzBjwBFDk15xPKokAXKhos3CLNJm45PiQWwoyUli60ZaQpGCgMqhtHWAEiNdm+ Jc8IsWohP6BmK3uyCSZTw44TGiZzcFdO+CF+FDIVnqAg7HmseMeoeMR1/r6u0xNHi+huqB3eCS5L Nh6TJqCdYOlyC9hW8TVIK8FtuhbNEyHXZLxpoYnYCtSSttzdgVpRHiSH511H8GO9RMyZJ7SVikur k2SQ04jY1N3nsvBZheUl5oS4w/MzafjPbpimWw== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 18798 fpki.gov. HIC2zxV8a6g5OTjzz4g5x/KU8g8z10KyLSXcOv/h05Ghpbp+Jnokb+NzyQX8RfhhnftTXEq+aA5y ddjuNqrUwh1r3kiI1KNKQDotm+ko99clW9Cxn8qMigcjIbPqm/gcv5BPArb1X/1KNmsCkOPwmn/Q wcjMkvLny4scZkBlWYtIU17mL6V7z0zVKCsncSjm7A+l9IVBw0o62IYNFedVY895pC2Rg3iWVn56 2Eg/64WPp/ta6SAS5o7rxBvMbc2MZTSiuZOs2C+lGmzf2O/AH54Vo14HQL4oRcocqEQ8k/P65VzM 7mvNS/vs9LxhrVLQ469pGVWdoaxHZMUlB60kew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAb6riQvnLQ+wNdz063jdWwprUuVz560vCditzABD9qY6MyiKfc8Y7M5ry2tSovYV/MGhulcg eBlSPLnPEPNTdE4hKEaMZBVBlr85SOoo6+yadEVTrJVGd5Hq6WNfNJGPnRBFGPxPsIZGze3xRD1a wC7CAqQRaKHbfXa67fqYxNqJv+7f5W7YmQKh59fgynzvYDtXRUNr+bmR3qJmUprUbWvGbyXvNCpF OJmiCDCK9xabkusp/pQWb7u28d5dWoT2qY6Vhel2Mb8A8YeGPyJNz3E6VdkAoXOZiCX0x4hRl+ZR Uh3IXlYycvkWhxvqYaGkTvW7S788TjYNZVs7YA7dBiM= ) ; Key ID = 35213`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAfIPd82l4S8jsYmScZj+J4WOc4JGz/OkDEuD3AoDYnWEFnPOTEasU/JSQsjau4c0cl1MVb+n aB48M7FPmFurfak1a9FuXIDBDnmOn9A8MBCQtRZN6yW+LNSLv90wivSLwrzIZPr0N1e/vAo3+/aM IWL3iiA2sZDHe3q05WlqoEeY9vDFzfLYv5l9jDi4U/lcEnbUftI120eNHa/bBm0pYjsFu9Mtsfg+ PJeZ6taazDBWdRwlhGbwvZSBSHeUgKGesTyj9KCDtP9lG1h5Q/HbAkwJLdXo5gilTeRkSw2nk2mZ JQdxwwY/OHj5N+RVIlo30QV7gzt+VxbefjyZFtek4GU= ) ; Key ID = 11612`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798`
	DNSKEY=14811/SEP is now in the chain-of-trust
	DS=14811/SHA-1 verifies DNSKEY=14811/SEP
	DS=14811/SHA-256 verifies DNSKEY=14811/SEP
	DNSKEY=18798/SEP is now in the chain-of-trust
	DS=18798/SHA-1 verifies DNSKEY=18798/SEP
	DS=18798/SHA-256 verifies DNSKEY=18798/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 35213 fpki.gov. QV+4rN7AAUAztvXJG2fdJEJsK+Y3XHb89h4td/YvBXBuZNwfyoJNq+Gn2Rip6vN+N2O4QJJuNul9 1x5+0f/knRJSVhEjVS1ub1mBKu1r7zXf49aslWOoJ8GUWPjQ0LBPGlt0deEvH4toxobW+vs+nYYZ w5kCC5hvXSdUKKPy6HI2SftXZSXAj24lZgyNZE1w+/kdkB9xA6G0bF4xCHEYBOjYUYYUw/ODiiHm AKKSmJ/b+p4LY0FUUn8GtymMKL7DhqB3JteDjY3fdGi+S90LJE8c8o/wVB0MCot9TE/YomUhEuyX CZg0q5hrlb/CRH3yYF8dR/aoYYh0rHmL/2Qmnw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 11612 fpki.gov. KBrFRKR/1jrYTvymVEVcPBVQCYWdqt2NmEhnLnk1F8ZQmdQvJktnE8CNWHTRwiWtEAtytdhIr9EJ xpwoGJmtKH8HpdwKt1n588q8FQJc+mHdqX/4tZSxn2JlM62w+G5TdbxnPDEkN8HdSMbyWijN1kNU 6gk2MKVqNEL8Ou+WkC8rbsDBcwtPLHnFDvj9Cd4Y7tULuolWEpbb6a29ixD9BwkSKk0BsXpY7WY+ oKcUDSK5csH0dX7gMolE7tneMAde/YUbKkqKlXrDkqWXuMxEsQgjUvun3zlCIILz5jtEXL588gIL ZCQAhFprgxDIfI8qyBxTLVet78agUdN66nTr7w== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 14811 fpki.gov. 3MmIBMGaMBLA3ZjZqiL9MVy833jNslfhE9Zsj6o6gnrPtbLHrEu0pZMkX1cDuaumFkqmPuBTjBP4 3lPhTwwCnD6bwVrzBjwBFDk15xPKokAXKhos3CLNJm45PiQWwoyUli60ZaQpGCgMqhtHWAEiNdm+ Jc8IsWohP6BmK3uyCSZTw44TGiZzcFdO+CF+FDIVnqAg7HmseMeoeMR1/r6u0xNHi+huqB3eCS5L Nh6TJqCdYOlyC9hW8TVIK8FtuhbNEyHXZLxpoYnYCtSSttzdgVpRHiSH511H8GO9RMyZJ7SVikur k2SQ04jY1N3nsvBZheUl5oS4w/MzafjPbpimWw== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190827065050 20190820065050 18798 fpki.gov. HIC2zxV8a6g5OTjzz4g5x/KU8g8z10KyLSXcOv/h05Ghpbp+Jnokb+NzyQX8RfhhnftTXEq+aA5y ddjuNqrUwh1r3kiI1KNKQDotm+ko99clW9Cxn8qMigcjIbPqm/gcv5BPArb1X/1KNmsCkOPwmn/Q wcjMkvLny4scZkBlWYtIU17mL6V7z0zVKCsncSjm7A+l9IVBw0o62IYNFedVY895pC2Rg3iWVn56 2Eg/64WPp/ta6SAS5o7rxBvMbc2MZTSiuZOs2C+lGmzf2O/AH54Vo14HQL4oRcocqEQ8k/P65VzM 7mvNS/vs9LxhrVLQ469pGVWdoaxHZMUlB60kew== )`
	RRSIG=35213 and DNSKEY=35213 verifies the DNSKEY RRset
	RRSIG=11612 and DNSKEY=11612 verifies the DNSKEY RRset
	RRSIG=14811 and DNSKEY=14811/SEP verifies the DNSKEY RRset
	RRSIG=18798 and DNSKEY=18798/SEP verifies the DNSKEY RRset
	DNSKEY=35213 is now in the chain-of-trust
	DNSKEY=11612 is now in the chain-of-trust
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 42797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190826065127 20190819065127 35213 fpki.gov. jN94KygU3mrP/tyN/uV1V5dxAfWI81re0uULHcWIcWgdgYhs1eBfjpJv/xZS4ndpJ/AFTXn8nrYF Ky9EV/xDrWyxjLTN8kpKp024NmJGsoxsuJPgZTOHKPAzLXv1tsp5hbBn0RqQvn8YrRMd8pKP3xe1 SOfxntE37MBpzqf3bFHipoVE6yhR3CZrYfxfM2oTCxqEkRL8/Kugq05MDDcC63OJ1GYQskhWdGPx RORyiFko56MDufBgDC88eCbA2/VIJb45cA63s/Y9o0k+UlArokwbCzLTM4jdcLMr7xRj4wD8rQVf K4iOgRY/+gei4wSew3QecmPuvLD4M9WFujQzTg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190827065109 20190820065109 11612 fpki.gov. wXr+mx6jXKY45jXPkXBFjyUd5qVzj+3ibJic3sb7dfkVSdwd5qYT/mfgLHxeGqpJqk4zVoUQJ1+x z3C5/PPOXOP8yIiaPmc4TywMa0mDysHESfhjoBsKNyKxB4cwWpz9HFvyGhLkhmn4dtFocOllmDi1 Hl/MfAZLheRVgOaXo/EuYP5VOvoSAN21+UrBezFMXWWdQebWNXDqUwa5ABc/Ya6qE1uMtWuSaoPb 72M2c6GRTQDHP+2j0TuF2HyDY6Scuv0l1+akkuAnqt1o/OrKFKV/bOuVAq7e4Q9+DxmA9yyousUY p3UccrQvtv0YpRVQO0/jeadyPEN3l55Xr5H/7w== ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 aa926feef4342bcd dabg9rblep80c4tnv31aik1hfdanq2vf NS SOA RRSIG DNSKEY NSEC3PARAM ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190826112917 20190819112917 35213 fpki.gov. kLOR5MlHvGbddb+4pmfjRlg9Aux2/kgUdiSxP1UsSo23CJ/0aesRbp4ssD4R6qFJpoq2UOof/tFe u93MITcxIkDhRzIiYNDIst0I5UH+l58OcJ4DeZHG6D2j2A7pxGBWdhfT3rXHebgt9C26WTNCIxM6 ba58lOsZ+cvk+4uB1LiRktISCjR3Pi0T1kL96BKHW/4+VG8L+7MDmNgECRj5W9SZWd+JSrSAhQ1o k8aZZEVoLkufQMgUrAQuRDYyFlIdep3S8Lsby7VIOfbT9n1vAdHkd/aHXSBIV+FV12rJfRNRGQHV RkYeua5FVN/2hseOi+njzun5PxouiaOBMlGZ9A== ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190826112917 20190819112917 11612 fpki.gov. eSITHg/OVtA7dVhwXkLIKwpIFT+8DgutHoiUSdggs2W5DueNvYoyuRA5SaVrwJL/AWCWma6cDQmk lUfMakAnE/MLEWIAgaqKL9rTNkvkahg/q0C/RR6vwMMiYdbtDUveug3ad/VInaxWlc6xRoDmaidm fYC/wXE2kTm+G5K10IpGDQ3JTjxKh48bwHBTzVB5pwP0lc3MsEzXIwLVwyvjOyw6JMwp7NI51f1d 0gTnXLI2KLLz0Nx7g9czTQsO+z6JOPdJ1bHrg4A2jyp99YPRHzX9WPWMj6qCE9bx0oIM2BFjWo16 vB4eRQvQkfPvGR68788NQ39KpXYMBNEQqGph1w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 44040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190826065127 20190819065127 35213 fpki.gov. jN94KygU3mrP/tyN/uV1V5dxAfWI81re0uULHcWIcWgdgYhs1eBfjpJv/xZS4ndpJ/AFTXn8nrYF Ky9EV/xDrWyxjLTN8kpKp024NmJGsoxsuJPgZTOHKPAzLXv1tsp5hbBn0RqQvn8YrRMd8pKP3xe1 SOfxntE37MBpzqf3bFHipoVE6yhR3CZrYfxfM2oTCxqEkRL8/Kugq05MDDcC63OJ1GYQskhWdGPx RORyiFko56MDufBgDC88eCbA2/VIJb45cA63s/Y9o0k+UlArokwbCzLTM4jdcLMr7xRj4wD8rQVf K4iOgRY/+gei4wSew3QecmPuvLD4M9WFujQzTg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190827065109 20190820065109 11612 fpki.gov. wXr+mx6jXKY45jXPkXBFjyUd5qVzj+3ibJic3sb7dfkVSdwd5qYT/mfgLHxeGqpJqk4zVoUQJ1+x z3C5/PPOXOP8yIiaPmc4TywMa0mDysHESfhjoBsKNyKxB4cwWpz9HFvyGhLkhmn4dtFocOllmDi1 Hl/MfAZLheRVgOaXo/EuYP5VOvoSAN21+UrBezFMXWWdQebWNXDqUwa5ABc/Ya6qE1uMtWuSaoPb 72M2c6GRTQDHP+2j0TuF2HyDY6Scuv0l1+akkuAnqt1o/OrKFKV/bOuVAq7e4Q9+DxmA9yyousUY p3UccrQvtv0YpRVQO0/jeadyPEN3l55Xr5H/7w== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190826065059 20190819065059 35213 fpki.gov. UCWbqhiACHJOD8pFRuo95Qby0b19prHmGcFqwKUa1kuQwXz6yOJGjloa72duRBcPiNwWbuvWqgRT 8o29oRx39Pb69F/OdhTiGvPFC9kyeq1iM+718IPRRDPrMyjeuLrRbb+DN9Z5XoB3NIxC9Xf5PHD5 Sj5aeyv8VaBp72es9DccksJuKkL2h4aMerQ/53X4qdocP8tVs4YhP0JY12EBXhS2Oh31cSq5NeBo qZjyfWMkFi+zAJI/228XefxWfgmyRtW6ykL1tGMMOtTRPC740Kg46VNVtwpk4IS/JmWNxQvVyETl +s6SyqKo3LxJP/puiH2V5m1cTqD1GEjEDoakwQ== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190827065105 20190820065105 11612 fpki.gov. WI8SYcyAoyjh9v/Qc7hK/8qbSQuFuWKXzkYv8Dlk+DSy9FJKSZUHHcERoXuAc3RMbauZ5CeYmBI6 hcFJPCtkKl/Q9ABH99e4JiKWtUcJg/WyV9tn8IgmNICD0x3Z8A8ojGt2eq/OKAF05TQ7Qbk/YrAh BxZnSCK7OH7RmQwXmniYVR+C7ii94a8ODeYe16k9FXz/k1G8xKSYPpwM6SmHHgGZv3gOWSryFIlE BKmvTJm4XLGCwu5NP93D9FMuh6uoxh7EWKAZkI2Fv4JS1gUJWjf9TnlS43KCC8RdE/DkVPyqwdpR 2u3N4rtVM6158oHFhF5//lmda4rhch0YRUmC9Q== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190826065059 20190819065059 35213 fpki.gov. C/XANgNrhdxuAkIWsvPnWoC0r54QLtqNpnPkosqyWy1Z01P7fJv/Czh7xw1rX6hWCBuSc2Kg17OL AccaE/Ju8p+hHrvkokJGJ7n4/pUQn4j6gSWW91SA7gFW9v+WiPlfx0O30qalWLYXav+IYcfdJ6/T MV2IcTx/iGVG/50lStkUqYETm6EcZie2d+f0DToXp66YDPnPNx9WxhfMSMiHWvildqaWPnNJ+/7A 4COB1qP6VdAVUZ2Y/TyW7ZqPZsMb92EeHAa9bu30XCr0cJd9xg4/9iZaYNAIEY0nIjEzkAqfHIFV vFnKRrt+iDHSvO9ZDMA5DnQOCXokQejIn8DqIA== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190827065105 20190820065105 11612 fpki.gov. TSA1xQo2hhuoMXjbB/Tt7UfsHqxSZPoncGM1+2n66w/hhbjojLhlF1URB/UAxazrlxfXrMScm5pT tE1/+S8G0BWLLnAAFGQ4uFh+T66fN5aaayLC+M7fV1+iMefmK1c80phgstBzAmGBe0Q5SSbpmnm+ aTkcFvv1a6EaUXCS8zplKHQ9/y5XH5Q7mbhNOgMHargjxN1TM9LOIZ7tSYWHLwKdx+8XDuBTrgfW fkLDOW2c+XCmVp5kHwuE2rhdOxDdwMSsAoOdhSUedJtWq4P7W8nfLBLlsVb5teiupf+Vd7+/F/7C evNH6afSRu+xtJdu1f/lpdQPDdQdjDTzTJvG2A== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190826065059 20190819065059 35213 fpki.gov. YI201rf6eZaKii4FuHa9+c2DOSrhnVsWNV5wi6XEQ3S2iSFpkCWdh1fhkv/MsSO4B/0CsqKgu9iV TKCnKWfhYIF6jEKvV4XKJi0NgQOT8+dIlhoS+U9Pzsewl6/mL+4oJt7rg9EZjWsALi5950pzFxNs lgF/kT1QAYt3fC6VF7RbMf628gDQhbXpm/LypYBf9R6uAbfRZrfgZewgn4tQkUhmmnFa8clMq14E HT6tZZK2XO4KWTAqSP858Mi3/ibgqiN9e+4pLJZS3xbd1f5vtnZK+xBDl42Oi0h0jOE8gbXD26HA eYM/cNk6wZ5smGV5PhuqJGMZ1es66CpbuzHzsQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190827065105 20190820065105 11612 fpki.gov. QJgifHm7VWyOq1NBWvEe4EOEnOrxiqcz6WCLJnyRPS5UW6wQt0pOdPLgGAERQdT8Mxr5a/A54XPY ObNVxDAkxY9gpakbKmr4+/6Pu/usJzda1m7XTNGanD+MAHli7kmVcCaXZ6i99kkfDO/aie8GRJ8o tWnvNso0BnF5r9FLtUIKHLerxQI3duLfHKq0jASJvOYruaCbQ7RqYEXZ5vw+hzeQrIzy8lUxkpWW noctUnXBZjlkTKTheDSQLeM16hrNqUAiz62/uQJ41ZmQo/v5964N4nUad3AJUwXFFxSDLVB6yNLA dOVR+yNRE54VM12+1+vFESYAzqWWxGoGzsG8oQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190826065059 20190819065059 35213 fpki.gov. ImrvHamGRzFFe6wMp6k31cM3f3qJzeUxYfChW7cg27vO1viyRnXvn+Ytj7vcW1RpbBpC2BjluAhz IRiHQp3Lz1XGzU3FHNznuGjnoQGE8+UActZxee7vzaioZUgimBwNkghFbEY6lvITblr8ebwsS9e2 EmLpUs1D7Jfl7rOQJiYupCcyH5FO1twOQCRWft9/FC5A9apUDRV752dHIojdQsZzxenYPL7MJgN5 5MhnZJxtQBtWvs/Nr1ueRIyAwFW2HBHDsAzNYqv4LX66jnSktS9qp6v9M8hsBJmSQ67/U0ruvUEI VMWQVbeJa5Zg2K9wMuRSmZClGauuP6PLRKYLCw== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190827065105 20190820065105 11612 fpki.gov. oUEcfArQKsGHYQS5if466bXXt14ABPFNwiL2+kNGv6NsPt9LxTxSewiCyxEs0j6T96KT/Uzr4veY Qp9zWG8ok+/AkRZh0biNiPWOuIvy72MUn61rakKINKgfScA1N+5mLw8NSs48LCYh03DxBG+54gzM doHqgUi9xkX1jrht5p5+eTWFBvqPDi+MeeJh1wJe2U38Mq/iogCeeAn89llCXOCW9j+bF/SqRwTF +HnR97pW4l/Ejxgtab0wv9KSZGRBni5k1XNJ/K3GVinDbtKibG/pTdVXr1ORt6ObQku4KZsIGADi 0f1wgX3C5IPIokavSd6gXYTwnNbU466ZEYiVwg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190826065059 20190819065059 35213 fpki.gov. m+ryHsWEJ+d9xGb+TG/9hgd8XePRGI6CZogVNE3r1sX/wSUD2jEBoQSzQMtyQkalTAIY+XiXgMM4 mgz6VbPdBE86Tt2CZqKg9TGqwkmS2N6vaW8eg3wq/rU8RJSgFP2WNBL0wZ1nSYSKAd2IfqnkPNV9 +Pyb7LLdgFx3ns6JG4WOGseTSCx51jopmdMqXG99urPjHej68BRH59N9V8AsFRNOhHAACCc2TlZ+ LaWj7Y5aF8qr8gLyZfThlxf4NZ5nKv5cpPJi3hVd3TurclJH7PD4Q3DHu9Ikj0dhAtreeywQMuK1 S/B7oa1yM9zq21JWxgncJ+LoDuZqducbgazqqQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190827065105 20190820065105 11612 fpki.gov. RODL+zAzMvKeBk0z8rWlsO2mv4puG3WpdQdHY8f7azUlF8OlEulTQPC7OdJ3aiBZAorOp46pV7TF vZxlSd9aiHmWC9Pf8ZHLpMZo+zov+ClbvJpmOq3UM9AoCwIAwgIu3kz3sK74GL+F0X9k1v0hvpTz GFl9Le/wrtliHLH5a1YztWO9e3B0irrmQeGuz5Su6seXvzdY3YAO4qmBDbyRlEgnZuh+KfusUfUK jkvdDcYYWka0KRX4eqM5XoJPuIA14p5iXALGWMJ2vM681JtmrrIOy8wjwD7y/BK5MECGRKj8UNLD X5zDtnX+ZPNk0MZvkm244x+oeSTPCn0VS6tNOw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 17423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190826065125 20190819065125 35213 fpki.gov. B40ku8fnh1wfg7cDnt0nxJ55KYrJElV0qK/HJvS+zDlu7REdU/miw8cZgi3kGLl+awc65i+rbn50 W/qVJh+R3Hcm1vx8NRvm7u/r7rBBNZTCY2EH1vnWtMvNb8nL1nTBeu9TDJKybnR42L9p1KS0YJoQ lkD84Jp9Top3oDH47sUbUOXVoI93MBuubDIKaMXw3cxZnSJqFTNVc4opHJwYXuADnnuEzqPbQUti uuasy6IOw+/kjL0AKV/+VL808pxCooxFWrcgvans/MjfYX0kbNWW8X6Kp6j+6l4ML10JvCgiTaq+ dtbC6m8IvPgOzFAGeSFItX2mA8t2wRAzLuow+A== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190827065113 20190820065113 11612 fpki.gov. mVuVxdeRmuLx8sAee88AQ9sxVnGL7Gvnj+WPBckFLtMoxgzyfhI37I1Ak7gPTuI1gwuhLAwGNkDq RszgPDYzfftlTUVogkRMK1bA2ITVFGA77jmVjUfrQNIoO2WK5PkRVfccRKyKWXPtgJVqk2TQJ3zq SiKJb3ztMH83R2A/O0gt72D/0G63y7yy7HqvTUdfhs63O/MYisZb2iWm3ICi2EbomIpJ+py2AKk+ i8HeamMOLiR6yLkhzOFBDTMgdVxzQUWXCndR0UPwN7G/uDxcJtyFD+hW1YGH3nMYL33F6IDirSZB w0AHwFqwLyUY3rRd6H976784Rb30tZS0eopCoA== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190826065059 20190819065059 35213 fpki.gov. UCWbqhiACHJOD8pFRuo95Qby0b19prHmGcFqwKUa1kuQwXz6yOJGjloa72duRBcPiNwWbuvWqgRT 8o29oRx39Pb69F/OdhTiGvPFC9kyeq1iM+718IPRRDPrMyjeuLrRbb+DN9Z5XoB3NIxC9Xf5PHD5 Sj5aeyv8VaBp72es9DccksJuKkL2h4aMerQ/53X4qdocP8tVs4YhP0JY12EBXhS2Oh31cSq5NeBo qZjyfWMkFi+zAJI/228XefxWfgmyRtW6ykL1tGMMOtTRPC740Kg46VNVtwpk4IS/JmWNxQvVyETl +s6SyqKo3LxJP/puiH2V5m1cTqD1GEjEDoakwQ== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20190827065104 20190820065104 11612 fpki.gov. BgZhIJiRQyFKw4swCl6yu3uTl/YIYKRmQ1i+xeVAbpsmjCmSbSwVWp2YloEjJKjb3DRhSjXgA0XQ wfrLdujyAwh4OmISRW+uq9z9lTlseterUZJ0jMDM5+aiE0YdG8xoTSi3aNJVl9sDbiuByhuNPOPe +OEnWxO0M+TsYVpCIjYxtjLzwBV9RTAlYtqLGhxpOWljw+vArt1DbRcDnlUSLM4+80wLjyAI6loZ 9QYnixwCOTXvFdpmft1iNCZKATAn9+StLHInpA4MpWg+Vn+9OlAWl2nTVP0dZPFB8q+IHS988QVZ aDXCqwOUrYeWUyjNAEnrog1cQJ/ajgEed+n97A== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190826065059 20190819065059 35213 fpki.gov. C/XANgNrhdxuAkIWsvPnWoC0r54QLtqNpnPkosqyWy1Z01P7fJv/Czh7xw1rX6hWCBuSc2Kg17OL AccaE/Ju8p+hHrvkokJGJ7n4/pUQn4j6gSWW91SA7gFW9v+WiPlfx0O30qalWLYXav+IYcfdJ6/T MV2IcTx/iGVG/50lStkUqYETm6EcZie2d+f0DToXp66YDPnPNx9WxhfMSMiHWvildqaWPnNJ+/7A 4COB1qP6VdAVUZ2Y/TyW7ZqPZsMb92EeHAa9bu30XCr0cJd9xg4/9iZaYNAIEY0nIjEzkAqfHIFV vFnKRrt+iDHSvO9ZDMA5DnQOCXokQejIn8DqIA== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190827065104 20190820065104 11612 fpki.gov. uztPCj4U5VPhD2zB2KqL3IsUPkgcptT5W9HvEwkaCBaVOhMn7ZS6bElA5w0zRbYp6d95zlaPY4Zs Vf0k4yWkMgWyG79LVzqRcDZbdOJ8GR9YEnSyAUziEMg0GpDDqBOuv3fP4mo9so2dkhQ/Cbq5mYWE ym5Ni+0c/YcDuqJHoAB5o/rbRQApEmNrgjvEdCr4kyIh4IeYTw0lyLctWtXuryGmpxIo74pLttyj vE4PgZnjj4tOPK73Ifk3eOVRY3KJ1dHvAewwMGLtijYaBficmGpeUR7TyOaKQWYB5Qfah4cYDWl6 guFzGqZljlp02jux8dhr6vd8wxtVfFEQSFlVhA== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190826065059 20190819065059 35213 fpki.gov. YI201rf6eZaKii4FuHa9+c2DOSrhnVsWNV5wi6XEQ3S2iSFpkCWdh1fhkv/MsSO4B/0CsqKgu9iV TKCnKWfhYIF6jEKvV4XKJi0NgQOT8+dIlhoS+U9Pzsewl6/mL+4oJt7rg9EZjWsALi5950pzFxNs lgF/kT1QAYt3fC6VF7RbMf628gDQhbXpm/LypYBf9R6uAbfRZrfgZewgn4tQkUhmmnFa8clMq14E HT6tZZK2XO4KWTAqSP858Mi3/ibgqiN9e+4pLJZS3xbd1f5vtnZK+xBDl42Oi0h0jOE8gbXD26HA eYM/cNk6wZ5smGV5PhuqJGMZ1es66CpbuzHzsQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20190827065104 20190820065104 11612 fpki.gov. WzMGKageZn9RjYsML74ad3UaQRCLqHLY1afNlszqN3f5VueXh3WTOKgWxlZp/ilSvhCeMa7Uyd+k CNaRwpORuwS/Ytym3VXnFqNeN2as4gpTb/T6sxyqMF97amvOLh0tKdWm6W06wV8JTwqupPmhlUpi /ESU7FL9Zi9oNO7rmxeylwBFzhTS7DBKNWsrdNgLVyGfPkPHUy5dXHAyTLHkFZshvmhhYXAjqYt0 ep9pSBqHeugELsJW2NQ8bGaW6Vl8ERcwUVIXaANc7F+eo3ILhtuOCVIv9lhJNNZpp9Ct86i592Yq AawP6Vit/pe/da0zsdhLEvvI54iUB2w6ilqBkQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190826065059 20190819065059 35213 fpki.gov. ImrvHamGRzFFe6wMp6k31cM3f3qJzeUxYfChW7cg27vO1viyRnXvn+Ytj7vcW1RpbBpC2BjluAhz IRiHQp3Lz1XGzU3FHNznuGjnoQGE8+UActZxee7vzaioZUgimBwNkghFbEY6lvITblr8ebwsS9e2 EmLpUs1D7Jfl7rOQJiYupCcyH5FO1twOQCRWft9/FC5A9apUDRV752dHIojdQsZzxenYPL7MJgN5 5MhnZJxtQBtWvs/Nr1ueRIyAwFW2HBHDsAzNYqv4LX66jnSktS9qp6v9M8hsBJmSQ67/U0ruvUEI VMWQVbeJa5Zg2K9wMuRSmZClGauuP6PLRKYLCw== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190827065104 20190820065104 11612 fpki.gov. Ay2yZhB0YvZN3HKYghhXY9dsNKrsCe8K+pWo6IKrviXYAoLLfPNbtJZY0+7MqpYcnMuuygko/5JH j2/yQEqTpp1uNpJRaSbZ3jFlWqPduS8xsxILVgWLLzF5YJ33S74TQcY+1H21S9yCReqFXx7Lmt3w Is9XQf/LV7N3Ch2fZvOI5KUupHv1SUwCjpaf65uICGIBzfqrj0ZfD8vR7XzTv/WJ1Co83Yio1vYA SVvq/o5CtDgid2wSJn5Quela+m6lnIjhnz5jCxvBSa+4VQw3dWxKCPGtCdDt4wH5f8KJogfA5Wmk DF4cVx9wQdqK2m1WKYig64555uBErHmC/Tdfhg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190826065059 20190819065059 35213 fpki.gov. m+ryHsWEJ+d9xGb+TG/9hgd8XePRGI6CZogVNE3r1sX/wSUD2jEBoQSzQMtyQkalTAIY+XiXgMM4 mgz6VbPdBE86Tt2CZqKg9TGqwkmS2N6vaW8eg3wq/rU8RJSgFP2WNBL0wZ1nSYSKAd2IfqnkPNV9 +Pyb7LLdgFx3ns6JG4WOGseTSCx51jopmdMqXG99urPjHej68BRH59N9V8AsFRNOhHAACCc2TlZ+ LaWj7Y5aF8qr8gLyZfThlxf4NZ5nKv5cpPJi3hVd3TurclJH7PD4Q3DHu9Ikj0dhAtreeywQMuK1 S/B7oa1yM9zq21JWxgncJ+LoDuZqducbgazqqQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20190827065104 20190820065104 11612 fpki.gov. SHJpHBsaNW8BL7s7JE2xMm+DA8JPCkOsrFcLTqtwgKwfJsxSiTL5MzjEmPx8PjrUYPyuOZ/a7hly mWlnF2TBdtD12nsvat74IY0XemQZww0axY9tu7OtfzotmWxkXhEG5W/cOG422P6TcBZxPAPWMpXT qhK/OZ6K6F39I0psRoqjTwBpHgQAY6bxa+FWvSZ4r1dNhfQbYlT2EvFts9loT7VkLmtHifpmRmRT 9BTCDB7tjEauwsofVZylExFPCYN6aGAc69iY5O/NtFVDdjWIla2L+swS4iSbo5LnQAEZTxMf9/P/ fITIo5urqbJfPvVA9Z2D9PREoLTLmYFBWX6mwg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 10781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190826065127 20190819065127 35213 fpki.gov. jN94KygU3mrP/tyN/uV1V5dxAfWI81re0uULHcWIcWgdgYhs1eBfjpJv/xZS4ndpJ/AFTXn8nrYF Ky9EV/xDrWyxjLTN8kpKp024NmJGsoxsuJPgZTOHKPAzLXv1tsp5hbBn0RqQvn8YrRMd8pKP3xe1 SOfxntE37MBpzqf3bFHipoVE6yhR3CZrYfxfM2oTCxqEkRL8/Kugq05MDDcC63OJ1GYQskhWdGPx RORyiFko56MDufBgDC88eCbA2/VIJb45cA63s/Y9o0k+UlArokwbCzLTM4jdcLMr7xRj4wD8rQVf K4iOgRY/+gei4wSew3QecmPuvLD4M9WFujQzTg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190827065109 20190820065109 11612 fpki.gov. wXr+mx6jXKY45jXPkXBFjyUd5qVzj+3ibJic3sb7dfkVSdwd5qYT/mfgLHxeGqpJqk4zVoUQJ1+x z3C5/PPOXOP8yIiaPmc4TywMa0mDysHESfhjoBsKNyKxB4cwWpz9HFvyGhLkhmn4dtFocOllmDi1 Hl/MfAZLheRVgOaXo/EuYP5VOvoSAN21+UrBezFMXWWdQebWNXDqUwa5ABc/Ya6qE1uMtWuSaoPb 72M2c6GRTQDHP+2j0TuF2HyDY6Scuv0l1+akkuAnqt1o/OrKFKV/bOuVAq7e4Q9+DxmA9yyousUY p3UccrQvtv0YpRVQO0/jeadyPEN3l55Xr5H/7w== ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 aa926feef4342bcd dabg9rblep80c4tnv31aik1hfdanq2vf NS SOA RRSIG DNSKEY NSEC3PARAM ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190826112917 20190819112917 35213 fpki.gov. kLOR5MlHvGbddb+4pmfjRlg9Aux2/kgUdiSxP1UsSo23CJ/0aesRbp4ssD4R6qFJpoq2UOof/tFe u93MITcxIkDhRzIiYNDIst0I5UH+l58OcJ4DeZHG6D2j2A7pxGBWdhfT3rXHebgt9C26WTNCIxM6 ba58lOsZ+cvk+4uB1LiRktISCjR3Pi0T1kL96BKHW/4+VG8L+7MDmNgECRj5W9SZWd+JSrSAhQ1o k8aZZEVoLkufQMgUrAQuRDYyFlIdep3S8Lsby7VIOfbT9n1vAdHkd/aHXSBIV+FV12rJfRNRGQHV RkYeua5FVN/2hseOi+njzun5PxouiaOBMlGZ9A== ) dabg9rblep80c4tnv31aik1hfdanq2ve.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20190826112917 20190819112917 11612 fpki.gov. eSITHg/OVtA7dVhwXkLIKwpIFT+8DgutHoiUSdggs2W5DueNvYoyuRA5SaVrwJL/AWCWma6cDQmk lUfMakAnE/MLEWIAgaqKL9rTNkvkahg/q0C/RR6vwMMiYdbtDUveug3ad/VInaxWlc6xRoDmaidm fYC/wXE2kTm+G5K10IpGDQ3JTjxKh48bwHBTzVB5pwP0lc3MsEzXIwLVwyvjOyw6JMwp7NI51f1d 0gTnXLI2KLLz0Nx7g9czTQsO+z6JOPdJ1bHrg4A2jyp99YPRHzX9WPWMj6qCE9bx0oIM2BFjWo16 vB4eRQvQkfPvGR68788NQ39KpXYMBNEQqGph1w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190826065127 20190819065127 35213 fpki.gov. jN94KygU3mrP/tyN/uV1V5dxAfWI81re0uULHcWIcWgdgYhs1eBfjpJv/xZS4ndpJ/AFTXn8nrYF Ky9EV/xDrWyxjLTN8kpKp024NmJGsoxsuJPgZTOHKPAzLXv1tsp5hbBn0RqQvn8YrRMd8pKP3xe1 SOfxntE37MBpzqf3bFHipoVE6yhR3CZrYfxfM2oTCxqEkRL8/Kugq05MDDcC63OJ1GYQskhWdGPx RORyiFko56MDufBgDC88eCbA2/VIJb45cA63s/Y9o0k+UlArokwbCzLTM4jdcLMr7xRj4wD8rQVf K4iOgRY/+gei4wSew3QecmPuvLD4M9WFujQzTg== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20190827065109 20190820065109 11612 fpki.gov. wXr+mx6jXKY45jXPkXBFjyUd5qVzj+3ibJic3sb7dfkVSdwd5qYT/mfgLHxeGqpJqk4zVoUQJ1+x z3C5/PPOXOP8yIiaPmc4TywMa0mDysHESfhjoBsKNyKxB4cwWpz9HFvyGhLkhmn4dtFocOllmDi1 Hl/MfAZLheRVgOaXo/EuYP5VOvoSAN21+UrBezFMXWWdQebWNXDqUwa5ABc/Ya6qE1uMtWuSaoPb 72M2c6GRTQDHP+2j0TuF2HyDY6Scuv0l1+akkuAnqt1o/OrKFKV/bOuVAq7e4Q9+DxmA9yyousUY p3UccrQvtv0YpRVQO0/jeadyPEN3l55Xr5H/7w== )`
	RRSIG=35213 and DNSKEY=35213 verifies the SOA RRset
	RRSIG=11612 and DNSKEY=11612 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: