DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2020-01-24 01:33:39 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 7192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to g.root-servers.net for FPKI.GOV/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (666 bytes) ;; HEADER SECTION ;; id = 36649 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (661 bytes) ;; HEADER SECTION ;; id = 44322 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 31908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 23693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for FPKI.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 526 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (526 bytes) ;; HEADER SECTION ;; id = 46134 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QLao4MKLPjb3xf4ofn15YR3HVXAvJeC0zYflHLVfHFrUCoFVALA5/1lBUU7IsUJB+FRW/oI8lCFK LkSJDJ0LCdDqsj1Mqoh+DZ5PiljNzk2hzwYCukzC4UtmS6RLbC2/2uey6457hXCYn+OppAkAAcfl 68PNHFW3Hk87VIAJ6NPXlWy1tmpV3rUntiafHruZoupoyxwU89kemObJDNnsNw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for FPKI.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 526 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (526 bytes) ;; HEADER SECTION ;; id = 43264 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QLao4MKLPjb3xf4ofn15YR3HVXAvJeC0zYflHLVfHFrUCoFVALA5/1lBUU7IsUJB+FRW/oI8lCFK LkSJDJ0LCdDqsj1Mqoh+DZ5PiljNzk2hzwYCukzC4UtmS6RLbC2/2uey6457hXCYn+OppAkAAcfl 68PNHFW3Hk87VIAJ6NPXlWy1tmpV3rUntiafHruZoupoyxwU89kemObJDNnsNw== ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to b.gov-servers.net for FPKI.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FPKI.GOV/DS: 'IPv6 transport disabled'
	Received 400 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (400 bytes) ;; HEADER SECTION ;; id = 29046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QLao4MKLPjb3xf4ofn15YR3HVXAvJeC0zYflHLVfHFrUCoFVALA5/1lBUU7IsUJB+FRW/oI8lCFK LkSJDJ0LCdDqsj1Mqoh+DZ5PiljNzk2hzwYCukzC4UtmS6RLbC2/2uey6457hXCYn+OppAkAAcfl 68PNHFW3Hk87VIAJ6NPXlWy1tmpV3rUntiafHruZoupoyxwU89kemObJDNnsNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=16539/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=16539/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QLao4MKLPjb3xf4ofn15YR3HVXAvJeC0zYflHLVfHFrUCoFVALA5/1lBUU7IsUJB+FRW/oI8lCFK LkSJDJ0LCdDqsj1Mqoh+DZ5PiljNzk2hzwYCukzC4UtmS6RLbC2/2uey6457hXCYn+OppAkAAcfl 68PNHFW3Hk87VIAJ6NPXlWy1tmpV3rUntiafHruZoupoyxwU89kemObJDNnsNw== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=16539/SHA-1 is now in the chain-of-trust
	DS=18798/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 16539 7 1 23646048858e96d50f880dc908e014ea91e2b56f`
	`FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4`
	`FPKI.GOV. 3600 IN DS ( 16539 7 2 4122ce8e421e664ce02799c6331de50ef525fdfaccbc010535e7ff2b44921921 )`
	`FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba )`
	Query to dns1.FPKI.GOV for FPKI.GOV/DNSKEY
	Received 2325 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2325 bytes) ;; HEADER SECTION ;; id = 39125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAd5f0WAjwWbXWDQydPa7ts8sU3nAXH5ZGW6gS+Jblv2ETRqKcwfqkZt3co0iLaoS5YS27IyI W5wyDBKuIRSYZtzt/DsFKKVgsiv5/Bc3F0OfhvLdwzXghyupi+kPbzpyCNWqVzNY8kVZnlxgo60S gYd97eGE373Ssdf9N7Rb464YK9ZhLylHEeiaNUdbVvazAP8/QupRd3C2pQxEszWV0xHgc6K3rImP EaqNI1Dhllp6Y3qJF5xBwH9BtMt1xRdFzPUV1T+ZQnhYPyAd3feIA9ZrXxOBUdR69ntg05j11SdB TKWr2Ui0uclQoiY0nS1GjVI8kqENEy15u8/OyXEn3p8= ) ; Key ID = 35228 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaLNqamEB9dfX77SNMzL7muCyLlFwwErnRkPs2TVaO8BkeNyNl4e567Za459EmXTYideuQdY ndGdLIazo1aTFU+duqYNKkCvvqBbUCggg04IadXnK25G544bM8LhbSnN201kxQr7v0vHxWKsKgpQ Qtz+DCvy50i6vOx/+5MH46GJTjhDZPcWNoDHiyIE87M41yD8YN6qHOAcp21uq3Jbt1ZiU/POHEGL y/OeFURTtXPs40eojxUXqDke5DrPV3vNzVnuFtfo4VQ4DWzL8fjvFWNZIgwCm7LWnDP6P2j5CuXo bEh9rYO4OHLQTshg7jYKLcyWzR54X6mlbQu0G0K5+j0= ) ; Key ID = 49487 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 35228 fpki.gov. W0LBbbvoNYbQjPSI5UQhaADgOv8xM8Z7oMfeLoPWYTUihX9aGznppHVYSLPC6QcTPt3VZv5Y5ddB gz30voMlN7wyev4SCk3+ZXpXXzrFsiyYrezTlc5sptFo8gp2iIn528UeHLxkanc/vAEtMIMyXiMA FXQnh5ShZNrwx1oTtNWtqaU6stITQsGzLIJH+ttLV+m0ooo3aySqgxYhJgM4y8jr7ZXeZN1uW0W9 P4P2aDwyZmpblDCvF1zfb0tUZBvVYwV1yclChxNS70xncYJCVMobUCWOkFV/iZWIfCnAeuowZcXg 5vjf0xndJCs3fsNYT42alGkH5qwB7nTiXTebeQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 49487 fpki.gov. FN5wVJfVTZwX03s/9wwUWCzIQINlSu8BcR4rXl25ohZ+3fPbuORJWdKiaeFj/7OmVjKtvxG1fyIF 754EIRMY4VN3jj13+po7+6Z5gDft9azTb4eKCs02GMj8ZAkYaahu4sMxT07iwPXadvKPWPAnO6I+ xCnS6AAY7dBye7Z2M14kASkdvf2UVd18NRbp8Jc0FqQ8PI0TOFAFCDAFrYdD/CRWzaWCV5hWmfmi CSYLzGtCKyxnPKDEtT2oePalWop7xvNBTf6LL9ZePZgnBJfkt/ViBUxalkx1vwHbLNI2oxYg97Qd c5DnjrP6zBQgMGNDSsvdLemcKwjR2+PW4L21hQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 18798 fpki.gov. TaIfiCLUSocipnF2pY3OLGqZ4u6hkL3Tp1M88E8J/1eeYvXt7h8EF8EaJE3YtJ/3FsgtOw327mFb gb8Yl0Xhd2Q7aSJs43itDscLODiQmcfIz5qfZmX3a3am2t6wW547FGuTSdKFH9g2fCfDLWhohG+p Fy1enC7ICkUt9e9tmu9h/B+blf4FHvyr1bUpfCDb1/J/STZswAPy2aUhVHz65dXSt8kzG/RENQDF bPSWt269oMhftjCBqPgDNCVW+C/XVsgz1vGk7GMNA1MO86UKu+4jnWvCOftkn2rIP+52XKoU+9tL ICx88LDmFdECvPXjZtKWSIJTA6wRJjBZp6XyVg== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 16539 fpki.gov. Lj4wE4qstzGYm5Eid+eD6neLmmB4UhB6ebXz4a0PPhnYuP+Bu/5nIN2BGTCVz/ZZG742dbauiQvL /JxCBahzV+wmtmUMiTHHWQ1HJ0QG62vAY25HU/bb2m01T/AnwaODKCRbeG4XMsH5FhCy+VWqWZEW JAZK3maxEJyV41fSTxAiE4lPnx1l9R3uKGmS+sVtI3vprkAMZc8cz6e8C34rVsp4H5aBmnQCys8x o035aYbLBvPepqNMp57booMhLjVqRGKZK0eYFEoyMW9gQm0MdNJpD1WuIKtm+kOB7XeEX6aEdVnC tSG+n/zqPfU1T22oLSgWbkISnJlTe9yxeWD6yw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAd5f0WAjwWbXWDQydPa7ts8sU3nAXH5ZGW6gS+Jblv2ETRqKcwfqkZt3co0iLaoS5YS27IyI W5wyDBKuIRSYZtzt/DsFKKVgsiv5/Bc3F0OfhvLdwzXghyupi+kPbzpyCNWqVzNY8kVZnlxgo60S gYd97eGE373Ssdf9N7Rb464YK9ZhLylHEeiaNUdbVvazAP8/QupRd3C2pQxEszWV0xHgc6K3rImP EaqNI1Dhllp6Y3qJF5xBwH9BtMt1xRdFzPUV1T+ZQnhYPyAd3feIA9ZrXxOBUdR69ntg05j11SdB TKWr2Ui0uclQoiY0nS1GjVI8kqENEy15u8/OyXEn3p8= ) ; Key ID = 35228`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaLNqamEB9dfX77SNMzL7muCyLlFwwErnRkPs2TVaO8BkeNyNl4e567Za459EmXTYideuQdY ndGdLIazo1aTFU+duqYNKkCvvqBbUCggg04IadXnK25G544bM8LhbSnN201kxQr7v0vHxWKsKgpQ Qtz+DCvy50i6vOx/+5MH46GJTjhDZPcWNoDHiyIE87M41yD8YN6qHOAcp21uq3Jbt1ZiU/POHEGL y/OeFURTtXPs40eojxUXqDke5DrPV3vNzVnuFtfo4VQ4DWzL8fjvFWNZIgwCm7LWnDP6P2j5CuXo bEh9rYO4OHLQTshg7jYKLcyWzR54X6mlbQu0G0K5+j0= ) ; Key ID = 49487`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZqDPvgV2wgV3qIB5mi2VDhvQGu8/0ZKBk/5cfhLAwWKjJTT0qridZz8JHwIqIQ7saEVDcwN 2CJQj87DhfZjJvSyYyY5Hmmlah654fpiDUaihI7Y8yhj0LHJmLCCc4IUUjCDHK+P9uow+uWpdyUp 2nNmQWJldX6VvsC0MDhPAgp9FmVHvYNgYf5nUr6lS0huW5pwjDyr8zdrd9aKMK5SFsabsLyTtsXf TiCP4YB8/K+XnisyGivZSRc4vq/BWfrfQ8pvqWGIJbRoSbs1iEeOfdgTB3D+RMGfcWtabcwrt7Kp ZEGPlMcEE+BACocwPOuUUpGzBaqtgUfuuCiW8geoQRs= ) ; Key ID = 16539`
	DNSKEY=18798/SEP is now in the chain-of-trust
	DS=18798/SHA-1 verifies DNSKEY=18798/SEP
	DS=18798/SHA-256 verifies DNSKEY=18798/SEP
	DNSKEY=16539/SEP is now in the chain-of-trust
	DS=16539/SHA-1 verifies DNSKEY=16539/SEP
	DS=16539/SHA-256 verifies DNSKEY=16539/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 35228 fpki.gov. W0LBbbvoNYbQjPSI5UQhaADgOv8xM8Z7oMfeLoPWYTUihX9aGznppHVYSLPC6QcTPt3VZv5Y5ddB gz30voMlN7wyev4SCk3+ZXpXXzrFsiyYrezTlc5sptFo8gp2iIn528UeHLxkanc/vAEtMIMyXiMA FXQnh5ShZNrwx1oTtNWtqaU6stITQsGzLIJH+ttLV+m0ooo3aySqgxYhJgM4y8jr7ZXeZN1uW0W9 P4P2aDwyZmpblDCvF1zfb0tUZBvVYwV1yclChxNS70xncYJCVMobUCWOkFV/iZWIfCnAeuowZcXg 5vjf0xndJCs3fsNYT42alGkH5qwB7nTiXTebeQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 49487 fpki.gov. FN5wVJfVTZwX03s/9wwUWCzIQINlSu8BcR4rXl25ohZ+3fPbuORJWdKiaeFj/7OmVjKtvxG1fyIF 754EIRMY4VN3jj13+po7+6Z5gDft9azTb4eKCs02GMj8ZAkYaahu4sMxT07iwPXadvKPWPAnO6I+ xCnS6AAY7dBye7Z2M14kASkdvf2UVd18NRbp8Jc0FqQ8PI0TOFAFCDAFrYdD/CRWzaWCV5hWmfmi CSYLzGtCKyxnPKDEtT2oePalWop7xvNBTf6LL9ZePZgnBJfkt/ViBUxalkx1vwHbLNI2oxYg97Qd c5DnjrP6zBQgMGNDSsvdLemcKwjR2+PW4L21hQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 18798 fpki.gov. TaIfiCLUSocipnF2pY3OLGqZ4u6hkL3Tp1M88E8J/1eeYvXt7h8EF8EaJE3YtJ/3FsgtOw327mFb gb8Yl0Xhd2Q7aSJs43itDscLODiQmcfIz5qfZmX3a3am2t6wW547FGuTSdKFH9g2fCfDLWhohG+p Fy1enC7ICkUt9e9tmu9h/B+blf4FHvyr1bUpfCDb1/J/STZswAPy2aUhVHz65dXSt8kzG/RENQDF bPSWt269oMhftjCBqPgDNCVW+C/XVsgz1vGk7GMNA1MO86UKu+4jnWvCOftkn2rIP+52XKoU+9tL ICx88LDmFdECvPXjZtKWSIJTA6wRJjBZp6XyVg== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20200129225103 20200122225103 16539 fpki.gov. Lj4wE4qstzGYm5Eid+eD6neLmmB4UhB6ebXz4a0PPhnYuP+Bu/5nIN2BGTCVz/ZZG742dbauiQvL /JxCBahzV+wmtmUMiTHHWQ1HJ0QG62vAY25HU/bb2m01T/AnwaODKCRbeG4XMsH5FhCy+VWqWZEW JAZK3maxEJyV41fSTxAiE4lPnx1l9R3uKGmS+sVtI3vprkAMZc8cz6e8C34rVsp4H5aBmnQCys8x o035aYbLBvPepqNMp57booMhLjVqRGKZK0eYFEoyMW9gQm0MdNJpD1WuIKtm+kOB7XeEX6aEdVnC tSG+n/zqPfU1T22oLSgWbkISnJlTe9yxeWD6yw== )`
	RRSIG=35228 and DNSKEY=35228 verifies the DNSKEY RRset
	RRSIG=49487 and DNSKEY=49487 verifies the DNSKEY RRset
	RRSIG=18798 and DNSKEY=18798/SEP verifies the DNSKEY RRset
	RRSIG=16539 and DNSKEY=16539/SEP verifies the DNSKEY RRset
	DNSKEY=35228 is now in the chain-of-trust
	DNSKEY=49487 is now in the chain-of-trust
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 44986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129160921 20200122160921 35228 fpki.gov. uTVMAPO0lBMoJfzKtMwzl3C1cBiHLAsF39lUJQp4XWbzMrIk31ueb1shQbLZnCpZ0X0GDxs3s3Ix o+EJpn0eRg+ZrMdFTieA+j9ddLhIQhnAtEVbRDcUTDjkVptqjEtalfyWKRLS/aIUpEhqZLMEZ0nq f8i5vMUJTQXgIhA1nb4erIIqovHZx3B+/CMvQK/zVP9htXCebJUFIZMD4Tcv3w+tvGrJTcHihJk8 IFUCCeOh34Gr7kXUiZQlpnldibOMS8JzVubSdQDJE0SuKBXn/MYFpZS1TlJ7/IQamDrOt4vQ80HM /+LgtBP7XqDnmKXE2aevpsRawpmGnUdyHf3B6w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Do7glYKELKBqL1nQ8IeW2EFAMz0fqdPFcL+bWLaN/gNqrlZ7OvBqd45WhLVck4t8tAlmRmg/kwcg k1XXjk+3GiGKfjlEW79HKUq+UV35oOEZOOjv6xrIygI8wYsVfS0pNJ/v0sPaW0wkZDiznQiEt7Te y7hcR/jMe5Za28NIHUtPLmRSuSHdIq6qVfYnIUjd/6FnQxS5ImJ0peJbafK+J3RiLIEFd/pUbyyn CtmK8uaJcYeqJyAjn63P1VapwAFc9BnC90I/Pr9nbMxrsp1D9QNsOGcs5u4RcDVSbqGLKPuVR+1F zRoOUtYG8mGrhl0E1VWskzoZGASl5Jk9wcWX8A== ) g844umd52g6vmo3de548qnnoo8kgigk1.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 58d7af33af3f11dd g844umd52g6vmo3de548qnnoo8kgigk2 NS SOA RRSIG DNSKEY NSEC3PARAM ) g844umd52g6vmo3de548qnnoo8kgigk1.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200130174909 20200123174909 35228 fpki.gov. djxxFoawGklsnYiwhGv3/ztnyJEeYdu7AB+uXltC5FBGQ+qjEFqMIv3NNzyf3BmILeoG4RIjCptm Mfv46g/6MnBj1tfi3+KFZf1iPFMtyDB0UUxhOsuNnQRe8QKJ6Z1wJy5moeLgmIUZCtn72VkYw8cM LmgfEofWgB91qMEh/8uQre8wGA1CKxA29ELS1afRUl7UddQ1VconVRNwYMn3HT1uw0o5YPMQojkg MTmvXElmIWw1byoG098TxHmzrC0JehEeRa6cwvyQpFUGJd/VA1YFZZHH55a3vO88rWJsYxyNU9QI SHwD+3a3udh6m2Bf1Sgtbij9ZiXUvFxVUTySYQ== ) g844umd52g6vmo3de548qnnoo8kgigk1.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200130174909 20200123174909 49487 fpki.gov. n/Lv0uYPKMmigcAD/mzC5mo44PI4G3S5cp0uZvqHP81ejRu2s0TFsb1dNVdMFX1i6mjiMeeps+og jRJPrGtFGXXfFBxx7MuCTaS4zD6PLHkbsDq9Y1iGF9UItpvKrBYf6DdgeU8Xb/N4wsU9ra4xTpIp 0FaElGBOqgML3jcXHWO+HaJr+WfQjXkznNUvOx5BSDGHt3A1O8FNIT3rwgyCtO91Na6MZp1lEZBC NY8g6xM4y6dUHPVRvxdHDOdDBatcq6Ymj0XepV1QJkfWoYhZVlnWnIXJA+sfgZylUvy5RSqbOE0l iXYIKqVKJmN4KsbGmmGZymIhKYgX673cZAPFxQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns1.FPKI.GOV/2620:9b:c000:9200:12:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 47299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129160921 20200122160921 35228 fpki.gov. uTVMAPO0lBMoJfzKtMwzl3C1cBiHLAsF39lUJQp4XWbzMrIk31ueb1shQbLZnCpZ0X0GDxs3s3Ix o+EJpn0eRg+ZrMdFTieA+j9ddLhIQhnAtEVbRDcUTDjkVptqjEtalfyWKRLS/aIUpEhqZLMEZ0nq f8i5vMUJTQXgIhA1nb4erIIqovHZx3B+/CMvQK/zVP9htXCebJUFIZMD4Tcv3w+tvGrJTcHihJk8 IFUCCeOh34Gr7kXUiZQlpnldibOMS8JzVubSdQDJE0SuKBXn/MYFpZS1TlJ7/IQamDrOt4vQ80HM /+LgtBP7XqDnmKXE2aevpsRawpmGnUdyHf3B6w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Do7glYKELKBqL1nQ8IeW2EFAMz0fqdPFcL+bWLaN/gNqrlZ7OvBqd45WhLVck4t8tAlmRmg/kwcg k1XXjk+3GiGKfjlEW79HKUq+UV35oOEZOOjv6xrIygI8wYsVfS0pNJ/v0sPaW0wkZDiznQiEt7Te y7hcR/jMe5Za28NIHUtPLmRSuSHdIq6qVfYnIUjd/6FnQxS5ImJ0peJbafK+J3RiLIEFd/pUbyyn CtmK8uaJcYeqJyAjn63P1VapwAFc9BnC90I/Pr9nbMxrsp1D9QNsOGcs5u4RcDVSbqGLKPuVR+1F zRoOUtYG8mGrhl0E1VWskzoZGASl5Jk9wcWX8A== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200128225119 20200121225119 35228 fpki.gov. u97hEByzefj3KekoomHgvlTRJin5/pNr/cMOd4C3COewX2J0J9MDN3Ji/w9nAif0Zpubd/E9l+2i 3JX9uqFMYp+w6ow6utwxT+xILb3PJ225VUE2sOiUL9hMPhU/wqtK/UEZrt9e7Y10KJG147hFgznb VSFnu993sx/UwTyBo/7fz+GKKfizi2GVCsi8aoZ/4v2TGgQHfuf4Er8NtZbo0rc7EhtUl6Uh8Bs+ yEIer2hcbZrrB6ros35NIDAS60WPd+6rTPe1D6nRtYB91Z9A1fkDVsVKSFHwUASMiX3Nse9RvYqd SMqyJiAHsQvBG6K7nhyMf1mOBcWHRE01tu26/Q== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Dap7r8SSCr2TezMs0nSDydqpI+3CY+S/g8fYmBetIwWvt7JfVexsLiHr9Sxm8ADd3HjLYpQ9S0GU 4airwQQJRgsNol25dzE2e7tKgXAO7sN73jsL8fhA6VyOpL7jsx8pqFNsmUTbhfFpQRNhGcoDmntH KRi81M2+8Uu6zQQCUEKcGwx1NHIH12azr0qaDYkscuxOlA4PrIo/lHo+rWmRKgS4Sa+rGlSUfohs OvIKM99g3fFYJ+5C9PLv1ohUBLrzQwRXlJB/mYiAY2RVhZkuKXIuEt0RN/s38OhTfQwTrw1qEPt5 oE9RcY3tM/pG8NrXzREyhtiiKbb1DE4CLZ5kUQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200128225119 20200121225119 35228 fpki.gov. hZPtsN5JLB3rwIz57M2YvnioSJLl5St/AQ+xCGJAJJ+pHjuzt6Xrtmo9HLaJDg+ts+X6mFufwu+3 FY7Yz0InQyJJFUEV+SCTvhNSIMCUxUe3PqogxyFR/7ChSq7hpKP0jkNTPoBLM/6FXRSsxpYBsZzb iFIVVLnvMPSBsjWs6tXFMthgseiHbyBmQ3VIDnKjXxeJBwfKy3G8sAaWajM9bzh1QseUMHieUk07 T4jozCYC0bzyoCOQbPj3cnBIiStl2fMGQ80QKZyyE4+YGweDuNosj5Pft/OEpm/+TPN1fqag7WX4 UAFb9vjfRDQyP0id710WkHWZa1Ha+Ek1ZQ8deg== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200129225100 20200122225100 49487 fpki.gov. V/wB03SYDu3dk0A+1vK7dB+escdmpOpzO+S8zMX42VQz/M2JjhHZQ0RL2yQGKkm3Gjp3UxvpO7A2 ppy4UXXQVXiP80TmjngDTIlENQUoMGe4O8Jbgr4sROghqE9JVRVmQih0corJeEhDEtkTRS8CZNlC I57td4fN25OV4tLhaAqWHisfYrd9ujKmT164vfmH0qb2iuDkNqQIqCZlBCVFqlQiyMAqyDepIS/A 1d6Y78UZYs2fZ7cBcAjDOoglqrYO6fu52jV7ymEK84QxTaYAZq17sljVFPzSu7zZfdn573FyltgU mYpoeu0tT/Wz9QA9DuPt7ZAN6XZsX97Qz7glrw== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200128225119 20200121225119 35228 fpki.gov. O/LZHXWiO1DNu6C4/OdT458K4+pMCgrH2+BR58J3mPPY4Dp0Kq3R681dcIVkGyDH1KXPSJD9q8ai tPkc0HqZpTx5wB897r3APg3oTew41B2lC3UmVxBcIV4O4aIJInBXg7tkwBdCB106ydct3A8uIgzs IkWudc4XO/E7KmxkLKVDpmih7wXeFYuadpC6AlILGQvEuLw/bz1nxXwBX9+ad/UrNQGot6PNoA1m oR3xtyV0B1TUdPTE8+kERA53n/R2UFzTs1q7my4i1ab9qVA8x+UQehKnQ2zovZRpGJO3yh5pXH0H di2+V81cwVdV33LOZGm6DQf5oTr6ymE54xUraQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200129225100 20200122225100 49487 fpki.gov. kajb7znXS1HqkViYzjjtmYqA7KH3hmB6mkDmFgPPWSWcDzgeVOgS2HgIoKE/M0gSa6/d55hUJ39K +BwmTspxmwyBXdN7zg846jRKE2YXXK+yw30+so5RRM1+Wee9wskSAxsTRmMJ7UrKHcIOUXXFVeaN NDRa8XSdiCBpkO1yR08eTy8HrLkGlF5lRa6XlfVTkUfUpd66wWYeJWoE+OiUOMVYVeGUfm10HP6w ENWPQsDqRWBe3pr0O074Eje8lsj87GbA/XlSIVAcO61GqNpgAGklVblAKYCHli9TsDZdHHpxkhFc Yi2iIdD5f5dZAMeedu3HFaUaCfsnI9ofrYAS/A== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200128225119 20200121225119 35228 fpki.gov. 1H9iRcAUSgS3ObEnELTaaKyNNXjF5P6zIbZSudC9jlFT4s0iFu4qharJnY3tADWgR12Zg2tpGfHg 9XCl7ASpUpauNMZFZYW1zeMjAyby1/QCOwP4aESJVrA8YyZ1CJLcknrF8upE8hzIzc22k2T4hf26 bFfQ1XpEbI5j8QLe4BrR4KOciN97Vi2M1Jitshf4kCUEgfbRU9Do2xjcTVVJLvf+AOIfnBItxAoT BwRh9qfg/lM5cONYelM6vPARuDlhnAejRouPFvMVJhhqK9tVOfYHtopLBOI1NhS4PePcQ6sSGrsj 2RxZdJIDzRyggFYNZ87C5iTU1AmTGdVPO2e/PQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200129225100 20200122225100 49487 fpki.gov. f9Av2Q0bugHzY/7WHtTlIV8MFCwq0uWol6EB6QVtGUG6Zn+FGnsxC79vloyxLQFYhLC1VhyOhDfG 8LtUJEOwsCgOtlAvqWVyLVk12FN6qnJld5/Gutw5VZM+3MlMFTUeKrSdCdJPemaKww8uc3S3iUwY Ct/nc1dsZfrE8jRX24fguuOYUq2lH7snWsuqAK0w8o9dWbp/SoQutR8VLI2ihDt4zfOq8ezNNL48 oVlRbzsiiZiKU7GDfRrUreNjePV2NuxTTDZnquQfg3wqlA/Zi8epJ+A93VIN8VrhaiZxcMRg4W7X wDfaxk96Kc5d2CtuWeg9am44UeeVunsWXmkzfg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200128225119 20200121225119 35228 fpki.gov. nAeCL2A47Pi50oTTSWexwrw2ixDw0VK52CJd/qB4QghDCqLxZJ9V6TPOufdGcdaU3aH2g2EvShRZ 9Zvk2cJeLuoUzKO6rawpXvpQIiEZMc5fP0YxHhKYkHKUWAxZ17+/w9igjSy1IQoSA7hAYWXks1ci GLwZk4PCoZ6gikptQBUIvrE20XTQ7FIGaRlhKAvX5vNCvN3z9oTW6mzAgSF1gJqo4jd1ZNXJEzrQ NyJLqlay0ETI+oOVx+NI1gWvffE29YZ+Ph9HL8KB6F0xgGnxTVHR8ek2zJBAAFjt2DwHtBMN4aym LUxoZyZEApcUtUaEzu2QW2IqFzPJLeEhnHqlhg== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200129225100 20200122225100 49487 fpki.gov. MEqo7z4tvhJ/pE/LUlSeq9kRsHX9Pc4lqvaP+ReFCRrz9yOnOx0p9tPdty9MXpGQzMh6h8jWTUHh gfafymWQRglEG/z8gznjlSzLeRKzyn9g/BlttzGCCzdfrGsKMCWOGl1yxxgPQpm+HZB7JDW/KM7D mIIbf2MVx83+O/GhBDPDVXHCy1Pz9gAWdKYUT0ZbE5BI1TemfYmv3Y9hQaOdZKRjST2hjcPmuSCq hFZ0BlBJU8/SuJ0vUeUvVMYpl7p24hCorA4qIHpg4KaZ7rv2aZ2rInMlrPr7JueO1nqEg2jUbUYr FQVSn/yyVpQXhzsfawhWaCSCqrrYUJmnAcIRug== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 45723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129160922 20200122160922 35228 fpki.gov. Ubm3oPui3jKUXS8uZgRrqITlyTNRR2TGWtCxv38eElE7TI28N0lhRzEWeyKz0q4SntzBSQMUiI4e n0T61hztgoN7XuVlCs+VgOwyTjt8G2KYAX4J2clBpOEGle8N+25/8a9vqlp1cGnz/fxydFpKhmZZ DHJGrotSRM4c01wk5dsjdgEFJ6qLxFvjiAO5yjmG3wRaeG7VIxd69SGevqtQJrbVucsEjsLvjKo8 K0RO9Eyiq4V8rxYpdMtfDhcO3zgVvy/UtTv7gn+sKJ5DpSK4KEvVCJiEKmZzT0QAtp9nYsVE7HU0 V1LsN94pd+Skg6jkhJJ+M0b8XWx1AA9a5t85aA== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129225058 20200122225058 49487 fpki.gov. jIZ8Ezzv/2A3Fpj1kWQ0V5SOVxSVAQ/2u/lz7L6ScUoGEXO677g6dQF7yeRqPAQy8D7/T99TCPvo Pfj1A0CXJzzcu+X6cWirEE0AKOpq14O1QdUkWYP+A46fHtROtz74GwHzwjd7WGDMauVyUz6uR6Io EMUv5VsblM2UCt3ujUSd0TgTrNU05tELLcLx4dSUn2jQsJtYsN/8XgHmA9NQ55t8EpwHO8MabUuf vF/zUgHJMUo7PTi7zZvOpK5R+FHtUwani7aAN9i6zCdX1hVuAkZOo5bMLpgbGlsE6Km4mXgdZqUk LUgjRKCHsm2iwyr9lTwgRvu2zXuDcS1Eib1vdg== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200128225104 20200121225104 35228 fpki.gov. 2joeXGRjDCln04t9gLfU99pOw0javDj1FWd/GoyoaSobU7rklWKhtF/JQOwwgtLv4Cfqf7RG4zk3 I+7/No4SzjmbQLo/ezQ3nUZkz8EyJuYsl8rZZ2GDcab47lTgNnNdmd/Av3iIoFoVDcPHmaVDtBgx dWDZVL6t19vVMWpz0n1FaHg2gJJz+gL+mDdwYaLGVGOtizN5Qvt5z/iULq+iIcJkFVlPzug3AZyJ b52+lWIzmOifOJthkfy1H5Ev7wqRVmL/4ZVCYUqfDvjYVYB+GVZ+psKE2/9WFwmpazvFf0ME44li F74dKED3TZNHNdVdTeeeNKKMQSOAgKWpiV3Vew== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Dap7r8SSCr2TezMs0nSDydqpI+3CY+S/g8fYmBetIwWvt7JfVexsLiHr9Sxm8ADd3HjLYpQ9S0GU 4airwQQJRgsNol25dzE2e7tKgXAO7sN73jsL8fhA6VyOpL7jsx8pqFNsmUTbhfFpQRNhGcoDmntH KRi81M2+8Uu6zQQCUEKcGwx1NHIH12azr0qaDYkscuxOlA4PrIo/lHo+rWmRKgS4Sa+rGlSUfohs OvIKM99g3fFYJ+5C9PLv1ohUBLrzQwRXlJB/mYiAY2RVhZkuKXIuEt0RN/s38OhTfQwTrw1qEPt5 oE9RcY3tM/pG8NrXzREyhtiiKbb1DE4CLZ5kUQ== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200128225104 20200121225104 35228 fpki.gov. 3M7Q/ETxk/LKWip/dl3XZr2729UuMiPs8zfWnEtsINfs8L6WUadvUjLGQjJ9A3270t6MQvWW/vmu VZd3GfWHEy26KMl1Dy4rvlsmXKiSGu4+XpVnVvv5LZIEaEnxMN0wOg86TYuHgGmG2IGAkptiNQ2s UX5DaUNzLvihVTdE6yPRnMR+lc2P22vyFEUlk3f46QkgHKVtldWxbjEkRZliwuuRMumFFwLGuK5m XXQuhUml5bMcVWJ0cj80Z5/keBdUQ85VY247TyLLmahxj9ZtLJE8NlrYBlDbr0y0FrbKeCYYF6ke /HJkGQ6r41cNmZuLa0iiQB4S/5V7tSfypIsENg== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200129225100 20200122225100 49487 fpki.gov. V/wB03SYDu3dk0A+1vK7dB+escdmpOpzO+S8zMX42VQz/M2JjhHZQ0RL2yQGKkm3Gjp3UxvpO7A2 ppy4UXXQVXiP80TmjngDTIlENQUoMGe4O8Jbgr4sROghqE9JVRVmQih0corJeEhDEtkTRS8CZNlC I57td4fN25OV4tLhaAqWHisfYrd9ujKmT164vfmH0qb2iuDkNqQIqCZlBCVFqlQiyMAqyDepIS/A 1d6Y78UZYs2fZ7cBcAjDOoglqrYO6fu52jV7ymEK84QxTaYAZq17sljVFPzSu7zZfdn573FyltgU mYpoeu0tT/Wz9QA9DuPt7ZAN6XZsX97Qz7glrw== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200128225104 20200121225104 35228 fpki.gov. fnWn+8Nd7vzchTa5wkTgwRbA7gvn5p4LmJY8ftTmRqUSH0Y5qJJGDXWth8eU8CKrrWf92qAcn5Nq 5jwbfv0KpwXqaJAu16/M+CJ/VvRKkhp0BC/51MgPiS9LDGhcpzcPJmOxBXuAfSHU7gJ6wkns3dQh nEl/NS8j1Xj6hDLmHJo4t8ZwKlPd3OBYf50PPVOFCXPOzP96hggHmq/hGT7+36Q6SLvc4a05yYBa 6NNj0wBKZtb+TE8kFPV/otHgi43cQdiVp1ibEWtxY1zRF93WKhCvDjlbcOhrfnovSLzUrlaLlT1Y oXUWuBRw/EBxPAgUQ09ebo68oC+xOzFWvSNb4A== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20200129225100 20200122225100 49487 fpki.gov. kajb7znXS1HqkViYzjjtmYqA7KH3hmB6mkDmFgPPWSWcDzgeVOgS2HgIoKE/M0gSa6/d55hUJ39K +BwmTspxmwyBXdN7zg846jRKE2YXXK+yw30+so5RRM1+Wee9wskSAxsTRmMJ7UrKHcIOUXXFVeaN NDRa8XSdiCBpkO1yR08eTy8HrLkGlF5lRa6XlfVTkUfUpd66wWYeJWoE+OiUOMVYVeGUfm10HP6w ENWPQsDqRWBe3pr0O074Eje8lsj87GbA/XlSIVAcO61GqNpgAGklVblAKYCHli9TsDZdHHpxkhFc Yi2iIdD5f5dZAMeedu3HFaUaCfsnI9ofrYAS/A== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200128225104 20200121225104 35228 fpki.gov. ekQz8UgoqX4AD+efeqIrTBHjMIFwtQrPHR3OPpRZ1twQ7ZkyFJ4/JWvmC3HpkvQU7nbz5Jv49DII VvCXF/B7i4xX338/3+TpIfOSDZapfmQv1zhpwj4zI28xqbcwvz7joLYPPGDLSzs2Ge0jf8erin9x EnD8ZPqN0KYlbLGir/jl6ZvniMQYzZAKfCSpoYf3IcPnZk7qD1Nw73tdax+tco1eZKV3ORZI7zXl hwt5FkGCUsMB/0+62o+eL8prbFzW95B1qTdywk0FvUNJ0CleYf8CUCwzDJvM90lnl7Jl7C5aKc2r FZrc4ABdPXZjLMQK9bVWXzPb7ZYB7bbSiLTnlA== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200129225100 20200122225100 49487 fpki.gov. f9Av2Q0bugHzY/7WHtTlIV8MFCwq0uWol6EB6QVtGUG6Zn+FGnsxC79vloyxLQFYhLC1VhyOhDfG 8LtUJEOwsCgOtlAvqWVyLVk12FN6qnJld5/Gutw5VZM+3MlMFTUeKrSdCdJPemaKww8uc3S3iUwY Ct/nc1dsZfrE8jRX24fguuOYUq2lH7snWsuqAK0w8o9dWbp/SoQutR8VLI2ihDt4zfOq8ezNNL48 oVlRbzsiiZiKU7GDfRrUreNjePV2NuxTTDZnquQfg3wqlA/Zi8epJ+A93VIN8VrhaiZxcMRg4W7X wDfaxk96Kc5d2CtuWeg9am44UeeVunsWXmkzfg== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200128225104 20200121225104 35228 fpki.gov. T6mTDYUh0xf8I8F3AAbvEIXxnXpW7IO83bR1n/qd3qK970S4BKdssz5000Nd2zPwRFXYoExyVFgA khkgTEiLty2VFVAVHh0twbtfIJBow7QdWIGL6XXjff0yShVK7aD2FRVaVda2RklkWOaZNYnSlR/T KLFNQVpqEMLPk1qaNBOOnHXZS/OaE/s85Hvcx2fJwF96oQM1FLovXlRetJGDotr435/k9099+QPe ALU6ILQas9FHoRMRc2EwYc2aTzB643VzjsBEeSYLY+840TWiI5nrTYJVogSCiSvo4aDNOZK/pZ8z NHHxXKTGY5sd0Jihdufj/KVTOuPE3sfaoqos5A== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20200129225100 20200122225100 49487 fpki.gov. MEqo7z4tvhJ/pE/LUlSeq9kRsHX9Pc4lqvaP+ReFCRrz9yOnOx0p9tPdty9MXpGQzMh6h8jWTUHh gfafymWQRglEG/z8gznjlSzLeRKzyn9g/BlttzGCCzdfrGsKMCWOGl1yxxgPQpm+HZB7JDW/KM7D mIIbf2MVx83+O/GhBDPDVXHCy1Pz9gAWdKYUT0ZbE5BI1TemfYmv3Y9hQaOdZKRjST2hjcPmuSCq hFZ0BlBJU8/SuJ0vUeUvVMYpl7p24hCorA4qIHpg4KaZ7rv2aZ2rInMlrPr7JueO1nqEg2jUbUYr FQVSn/yyVpQXhzsfawhWaCSCqrrYUJmnAcIRug== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (1366 bytes) ;; HEADER SECTION ;; id = 30611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2020012203 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129160921 20200122160921 35228 fpki.gov. uTVMAPO0lBMoJfzKtMwzl3C1cBiHLAsF39lUJQp4XWbzMrIk31ueb1shQbLZnCpZ0X0GDxs3s3Ix o+EJpn0eRg+ZrMdFTieA+j9ddLhIQhnAtEVbRDcUTDjkVptqjEtalfyWKRLS/aIUpEhqZLMEZ0nq f8i5vMUJTQXgIhA1nb4erIIqovHZx3B+/CMvQK/zVP9htXCebJUFIZMD4Tcv3w+tvGrJTcHihJk8 IFUCCeOh34Gr7kXUiZQlpnldibOMS8JzVubSdQDJE0SuKBXn/MYFpZS1TlJ7/IQamDrOt4vQ80HM /+LgtBP7XqDnmKXE2aevpsRawpmGnUdyHf3B6w== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Do7glYKELKBqL1nQ8IeW2EFAMz0fqdPFcL+bWLaN/gNqrlZ7OvBqd45WhLVck4t8tAlmRmg/kwcg k1XXjk+3GiGKfjlEW79HKUq+UV35oOEZOOjv6xrIygI8wYsVfS0pNJ/v0sPaW0wkZDiznQiEt7Te y7hcR/jMe5Za28NIHUtPLmRSuSHdIq6qVfYnIUjd/6FnQxS5ImJ0peJbafK+J3RiLIEFd/pUbyyn CtmK8uaJcYeqJyAjn63P1VapwAFc9BnC90I/Pr9nbMxrsp1D9QNsOGcs5u4RcDVSbqGLKPuVR+1F zRoOUtYG8mGrhl0E1VWskzoZGASl5Jk9wcWX8A== ) eps6cqfj3i204n9jtsa1mgq2tsj7dr85.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 57ec558f76486cf8 eps6cqfj3i204n9jtsa1mgq2tsj7dr86 NS SOA RRSIG DNSKEY NSEC3PARAM ) eps6cqfj3i204n9jtsa1mgq2tsj7dr85.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200130091550 20200123091550 35228 fpki.gov. toHpn6qEeiOHVvAaiSS276czS++wDfbTYFbrS97L6j7PpO3wrAMUUaes20Sa0pzj/oKaUxJamJLb r7lgRhsLgdVFIxoOdYviFrzP1N+II+weKhgmhw5IeKXh3rWBDG3FUdj6FYby7fjx7684fMo06EFB GypDj9j4AvuXoBd0AURjHEfPAWCWmp+cOiwl86hW6KNXgVRJCvPu9QSfaoHuWHq/LRW6Jjy7WRST +FjQqzLgKWfGy5Upo2E+e96YRrvwdxOuQulSkLP+Qal89za1PO+2ULyii8x6TMhLa8I4TMkqeWdM 14Q/ApJYvUQx+89rpLz12vOIWCj6h4ZwPRiT5A== ) eps6cqfj3i204n9jtsa1mgq2tsj7dr85.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20200130091550 20200123091550 49487 fpki.gov. dWsndvzNviEDt8yUgWby1dR2a5nRsDjGoeotjWs+hRaljqZMcsG7MLcyuYlRu6IUOmaJZZmdEyDT SKq1ldG2GSWH6bwXrjklZ/PvyI6YLqgq8XXh+KeHXurNTZuvseUrAMapNq4dUR+pre8cPfPkWG+J BBH6YnF9yA2b0lheSoz4j2u2IgAqXq+bbVS3PsxVH63o1CSgbiLeUgYtT2L9nL4Tr2u6ag2/A1Mf hCicakM+Nm73TmqfBlq2Y+6pZUpbMTHYHj82EPNrh89KNa+d1UwxWs3jn6rWPEAtx4ehCJjv2JgR iiwFAcLoi9COm1u0PPxAAbzka8p7jkWz7XaVpA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129160921 20200122160921 35228 fpki.gov. uTVMAPO0lBMoJfzKtMwzl3C1cBiHLAsF39lUJQp4XWbzMrIk31ueb1shQbLZnCpZ0X0GDxs3s3Ix o+EJpn0eRg+ZrMdFTieA+j9ddLhIQhnAtEVbRDcUTDjkVptqjEtalfyWKRLS/aIUpEhqZLMEZ0nq f8i5vMUJTQXgIhA1nb4erIIqovHZx3B+/CMvQK/zVP9htXCebJUFIZMD4Tcv3w+tvGrJTcHihJk8 IFUCCeOh34Gr7kXUiZQlpnldibOMS8JzVubSdQDJE0SuKBXn/MYFpZS1TlJ7/IQamDrOt4vQ80HM /+LgtBP7XqDnmKXE2aevpsRawpmGnUdyHf3B6w== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20200129225100 20200122225100 49487 fpki.gov. Do7glYKELKBqL1nQ8IeW2EFAMz0fqdPFcL+bWLaN/gNqrlZ7OvBqd45WhLVck4t8tAlmRmg/kwcg k1XXjk+3GiGKfjlEW79HKUq+UV35oOEZOOjv6xrIygI8wYsVfS0pNJ/v0sPaW0wkZDiznQiEt7Te y7hcR/jMe5Za28NIHUtPLmRSuSHdIq6qVfYnIUjd/6FnQxS5ImJ0peJbafK+J3RiLIEFd/pUbyyn CtmK8uaJcYeqJyAjn63P1VapwAFc9BnC90I/Pr9nbMxrsp1D9QNsOGcs5u4RcDVSbqGLKPuVR+1F zRoOUtYG8mGrhl0E1VWskzoZGASl5Jk9wcWX8A== )`
	RRSIG=35228 and DNSKEY=35228 verifies the SOA RRset
	RRSIG=49487 and DNSKEY=49487 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: