DNSSEC Analyzer - FPKI.GOV

Domain Name:

Time: 2019-10-14 10:19:13 UTC, NTP stratum 4

Analyzing DNSSEC problems for FPKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to k.root-servers.net for FPKI.GOV/A
	Received 666 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (666 bytes) ;; HEADER SECTION ;; id = 27168 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 62283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 17796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . VGx5wPlX1moEdWCpI0SIDF2DLpN3Dp1Gu1yTJVRCm08EnscX3vddSstQbZLOkXeJmocs5BSf446v 6JRkc2AvrZ/fc9+OZdx4OAZGWFwtiLQdeg5vJjGTUNnLTYTtJPZh7SsFRkMzf9ssO8QUr6vM0K2t /falnh0mwjZWUyCqYhQhtQRBzJEBPUUgINvoU4xDmDU5eWgxJxJuxUX6wShtdUUWnjufibRL9fl9 g/bGLqGbfFs3qSyvKhXeJHwSNwh6JwJGw8WQlUdIeJBMI0DWPgJyIH8JuMphIjWeBOjohLNgcFXz uAQH8cfHKTEJBD9FmF7oiDvD6pKveBHos3vjCA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (889 bytes) ;; HEADER SECTION ;; id = 31676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	DNSKEY=32795 is now in the chain-of-trust
	Query to b.gov-servers.net for FPKI.GOV/A
	Received 494 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (494 bytes) ;; HEADER SECTION ;; id = 2219 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. vpk7rDOiv2GV7ZngRe1NBslZ65dxZDV8GB73/wdu+fM5VEWkYAGHqBqRWLsuaowYjjD99aHTDVwF FdaMSEsyjU1mQKvn0DNy9rVzfZz+ajKQ+4oKPGrmy9Db1EZ+lPAUi0RdahcNkZPAI9lj1hb5WlJ3 uE0qqKJy94TMQ7ZkQww= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for FPKI.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 494 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (494 bytes) ;; HEADER SECTION ;; id = 36082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FPKI.GOV. 86400 IN NS dns1.FPKI.GOV. FPKI.GOV. 86400 IN NS dns2.FPKI.GOV. FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. vpk7rDOiv2GV7ZngRe1NBslZ65dxZDV8GB73/wdu+fM5VEWkYAGHqBqRWLsuaowYjjD99aHTDVwF FdaMSEsyjU1mQKvn0DNy9rVzfZz+ajKQ+4oKPGrmy9Db1EZ+lPAUi0RdahcNkZPAI9lj1hb5WlJ3 uE0qqKJy94TMQ7ZkQww= ) ;; ADDITIONAL SECTION (5 records) dns1.FPKI.GOV. 86400 IN A 199.167.92.100 dns1.FPKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.FPKI.GOV. 86400 IN A 199.167.93.100 dns2.FPKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FPKI.GOV

FPKI.GOV

	Checking DS between GOV and FPKI.GOV
	Query to a.gov-servers.net for FPKI.GOV/DS
	Received 368 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (368 bytes) ;; HEADER SECTION ;; id = 49892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DS ;; ANSWER SECTION (5 records) FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4 FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4 FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea ) FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba ) FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. vpk7rDOiv2GV7ZngRe1NBslZ65dxZDV8GB73/wdu+fM5VEWkYAGHqBqRWLsuaowYjjD99aHTDVwF FdaMSEsyjU1mQKvn0DNy9rVzfZz+ajKQ+4oKPGrmy9Db1EZ+lPAUi0RdahcNkZPAI9lj1hb5WlJ3 uE0qqKJy94TMQ7ZkQww= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FPKI.GOV in the GOV zone
	DS=14811/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=14811/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=18798/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FPKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191021041007 20191014041007 7877 gov. vpk7rDOiv2GV7ZngRe1NBslZ65dxZDV8GB73/wdu+fM5VEWkYAGHqBqRWLsuaowYjjD99aHTDVwF FdaMSEsyjU1mQKvn0DNy9rVzfZz+ajKQ+4oKPGrmy9Db1EZ+lPAUi0RdahcNkZPAI9lj1hb5WlJ3 uE0qqKJy94TMQ7ZkQww= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=14811/SHA-1 is now in the chain-of-trust
	DS=18798/SHA-1 is now in the chain-of-trust
	`FPKI.GOV. 3600 IN DS 14811 7 1 2c172e3cf2c60f39ebb47f48f08db1ac2fea25b4`
	`FPKI.GOV. 3600 IN DS 18798 7 1 27e8fd344be1ca50575fb567c12749ec29bcc8c4`
	`FPKI.GOV. 3600 IN DS ( 14811 7 2 e0a265028ab458e104b7f75491ab6586b428c81487ed3a2eedb3f92ba42a51ea )`
	`FPKI.GOV. 3600 IN DS ( 18798 7 2 a85e2dc7ea2025e096dcb3841fc84b94bf7d715ce0a612d9e405e977cc00b3ba )`
	Query to dns2.FPKI.GOV for FPKI.GOV/DNSKEY
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2325 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2325 bytes) ;; HEADER SECTION ;; id = 12889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZtERtb4zdDEGmE2cMGT8DCBeeJqp4qWbqjS8xTmd7a4PKsYheUd5eE0vVHu0N53RDUgPBHu HtEO2szkkNB1uZn/PmvgBZK6Ux8gwxzP2BkFr0+sG5wjNVyG+YNXqiLPqy72sqhYiaK9+UhZ8Ndy kPnJHIM0u2I7r8oUh82cQy7yWmzZyqP9kmoeM/jvj1pLH5wZGRwPetMteGQCpCTGZK3wDNBgJ+/k OxgjNPFrgNorCXxCOEE6QmHy357hJcR7FK3v9f4IbGt8bOmftcp+UFR8gfJ/51lgW3AJv8FsDmAY JDWEwAHorDt34O2kasUa4v8bj8QDl2lFIkBJzHAOn0k= ) ; Key ID = 40562 FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAb3JAQqiuFxJkfp6+SDz1QBZkAnbCJAzutAIzsWSvQnIMkZg2mowjyqj3FCORx6+qJcANgBL LWDh78+CwKeVDkfXfBe3bO6b5oXemQWM1Wf5P/mHdSGMq0JyNa5wdoxow14nU+2TV9q7TAO8EiJ7 o/XnhpMDZbOSNdeXbNR23sBAqRiFIFmnBBN66liSTQNwRk3U7rqWFm5s3J9FEl1Wet0Hcz/ew9X3 o8AAZDHYKoCTX9q5XdU9RbUovYUbm5/XzZ7+yjxuO+aaSBfdaiSFRW9GcWiGZSNGS88vjkd+6jtY 2JZ9mrqoFluq41qGSuWR6S2EYNkHgbubsQfKkkN732c= ) ; Key ID = 11654 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811 FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798 FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 40562 fpki.gov. kcJpbVE8xCmnLfzYpdYiI3zkoZF2PfE25lmNKasrHetklcWaKaWw0hUxD+Uw/HvKfSbtN/M5+kHw fHBnNI6TZYRnr0xNBVeoJErNvtGsQmInvW64JtJUtDXk7ZRpID9H05eH32G/X1ZxKOoeML6IX6nv S5+J/KJxMK9YHLSvt8BNuw1SLOClK68EoLKz3xZ2iU+zBpnspDMXtBBvN8sd1yHZLNmfGJb34piJ chzNfTii68C221kEP0hDA6AAonnjT4ItulcCs/7HFniC25GGXJznT4rmWpyNaul+ILGWZT9+75Nz louESLRg0tENj00t3iC4R30zJUIcUVYL0VvUHQ== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 11654 fpki.gov. jv/FlZSF/lBKxqXReU4XEscFHC/5JqNTLZdw3G0CTuEB2GOnhd0et2cJcTToz/fNXgXg8W+EV95G 6qhv2pPYk0v59wwiqRL02JYX04qMScsYvWqsMvTF/kNNFhCKj2GJ/vLnsZJGsdRtA4LRY010J274 SP94CzmxGaZo1h4v3D/nxYXwHMOQa3qjmt5kD1FByS+gYC5FE3HiBnzqRl5oSIsLHqpx2RJlQ+ed Gbh2e4nmjSaB47S2+qkE9dj57/WJ24Udh16shew6K6V8u/voautI2LOcsels0RQofVtfbTJFQf7r EJDu4B3R1aIr0238nLUkq25uAmiiQ1NrPvbJ+w== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 14811 fpki.gov. ypiYYST1VVH+VZfRLnIZa7KKEVFoz+HMBLO81KOvLPbNoRBrZ4mgZLD1iCNWMaJtaw4dMcm+WTIM 9x0W49pt0r2pe7mDatGtk8tuPnwSIPN8AG/+vt3DRyD1qK3lb5IacI7Wz1R3P8dD4AITqH2HH4Qg e7EZwqxdJbN2uyKUV+KywdDoFkpnp6MNk+QnqF6q5+I0fQOMFc4yjdBy/bfg8YC0IgoreDDyvT7g On206nU9LL7QEaWHPRpSRXT2QXPzZ2eDGrFxWmk0naZhxnKvEzA0b/C383k38NAwKQO2/g068Fig qMCoV/4uE8/jHJs5toWfKw/nL2Dy/2JKwAz5mA== ) FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 18798 fpki.gov. VS4iUA3eGPfurU4CdyVuOYRbaXuxzYBwrkgL96cyQSuBl5EieuQWNXEtLCyEgSBeFly21JW1biDq A6V96WhA5iphqdi6khvpAzf4X5bEnrdKMe51RlKqla4z0xW1HAYIpAOhRBWEH6e5JSDZvdHrjFQD MnP/lLx3GV6ueyo93dchYXjl62UGXpsRVrxjNqpo4CLnX/pPAfmATm/HepxwKd5H6l3ivnMnttQi z/tXHplqjOEEfPrzunZ/rMyNGyRTCkw8AaJ+R1sdncjwo1NHtvQynn/UpMzjDXc0KO0Yvm3+fCGp DKrkf7XYKamNUIhJkvxJKr1862gHhWY/U4NVfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FPKI.GOV
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAZtERtb4zdDEGmE2cMGT8DCBeeJqp4qWbqjS8xTmd7a4PKsYheUd5eE0vVHu0N53RDUgPBHu HtEO2szkkNB1uZn/PmvgBZK6Ux8gwxzP2BkFr0+sG5wjNVyG+YNXqiLPqy72sqhYiaK9+UhZ8Ndy kPnJHIM0u2I7r8oUh82cQy7yWmzZyqP9kmoeM/jvj1pLH5wZGRwPetMteGQCpCTGZK3wDNBgJ+/k OxgjNPFrgNorCXxCOEE6QmHy357hJcR7FK3v9f4IbGt8bOmftcp+UFR8gfJ/51lgW3AJv8FsDmAY JDWEwAHorDt34O2kasUa4v8bj8QDl2lFIkBJzHAOn0k= ) ; Key ID = 40562`
	`FPKI.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAb3JAQqiuFxJkfp6+SDz1QBZkAnbCJAzutAIzsWSvQnIMkZg2mowjyqj3FCORx6+qJcANgBL LWDh78+CwKeVDkfXfBe3bO6b5oXemQWM1Wf5P/mHdSGMq0JyNa5wdoxow14nU+2TV9q7TAO8EiJ7 o/XnhpMDZbOSNdeXbNR23sBAqRiFIFmnBBN66liSTQNwRk3U7rqWFm5s3J9FEl1Wet0Hcz/ew9X3 o8AAZDHYKoCTX9q5XdU9RbUovYUbm5/XzZ7+yjxuO+aaSBfdaiSFRW9GcWiGZSNGS88vjkd+6jtY 2JZ9mrqoFluq41qGSuWR6S2EYNkHgbubsQfKkkN732c= ) ; Key ID = 11654`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAeCUZTM7CRlTVcY2tjBRtGGohsTfTFq7i2krJdfn6cEuykUAeURLPtEDktXCiWVq1wKL9116 aEHu7GR64c6zB2+yRY+PP7AbsILt2tqhO0u01iZyNbwzPLzHb4IFLaLt+q6r8pvzhllC9VBDQS8I 1y44KKf9DrPISAHTvyNg7SIIIjV/FUw/J96/hywo8bSfLHk6yuIUTEPJ7G4n0eVmyXp5mUYJmOY+ sEMgLORRDhTqpX7+6CinNCjFhyzc0TAGiGGaz2Wi6ArKddRCMiFSW2qGqKH6E8/X6VK2FvW/+oWZ AaOj1ye9pDc7Fstw+aTUxwMQmznr3DH/QKnJrvOLs3M= ) ; Key ID = 14811`
	`FPKI.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAZZk5rSgrWZDBSRVpap5FOg5QLyoPOuslIPryf0LP8k0AbTZSxkGyq13tCdH2VLWl02Ejyn9 hIfqognqSTl602yi7kvUnuVlOBT7+lKfTWy6QL3to7Hvi2yTGsxuiKOj6osb8nZlocy0ccQQUu67 +uNjrJe6XcoVU4fXcTJu7pETThfQwBae1mpchMLyrqoGDHhEsIz0Lbp7xZQ1IWhV9+NvgH9QIkYl 1Bb7yy+9e4laqTSckWh49Gdfguf9bjR3OigetIvc5vxgyEGG/AAdTtM6oCvkIgZlK5XVYvFe3JV2 /Rf5KdP0KphaXM7I22LCGMdtY1MJev4j1CIIo3VbX18= ) ; Key ID = 18798`
	DNSKEY=14811/SEP is now in the chain-of-trust
	DS=14811/SHA-1 verifies DNSKEY=14811/SEP
	DS=14811/SHA-256 verifies DNSKEY=14811/SEP
	DNSKEY=18798/SEP is now in the chain-of-trust
	DS=18798/SHA-1 verifies DNSKEY=18798/SEP
	DS=18798/SHA-256 verifies DNSKEY=18798/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 40562 fpki.gov. kcJpbVE8xCmnLfzYpdYiI3zkoZF2PfE25lmNKasrHetklcWaKaWw0hUxD+Uw/HvKfSbtN/M5+kHw fHBnNI6TZYRnr0xNBVeoJErNvtGsQmInvW64JtJUtDXk7ZRpID9H05eH32G/X1ZxKOoeML6IX6nv S5+J/KJxMK9YHLSvt8BNuw1SLOClK68EoLKz3xZ2iU+zBpnspDMXtBBvN8sd1yHZLNmfGJb34piJ chzNfTii68C221kEP0hDA6AAonnjT4ItulcCs/7HFniC25GGXJznT4rmWpyNaul+ILGWZT9+75Nz louESLRg0tENj00t3iC4R30zJUIcUVYL0VvUHQ== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 11654 fpki.gov. jv/FlZSF/lBKxqXReU4XEscFHC/5JqNTLZdw3G0CTuEB2GOnhd0et2cJcTToz/fNXgXg8W+EV95G 6qhv2pPYk0v59wwiqRL02JYX04qMScsYvWqsMvTF/kNNFhCKj2GJ/vLnsZJGsdRtA4LRY010J274 SP94CzmxGaZo1h4v3D/nxYXwHMOQa3qjmt5kD1FByS+gYC5FE3HiBnzqRl5oSIsLHqpx2RJlQ+ed Gbh2e4nmjSaB47S2+qkE9dj57/WJ24Udh16shew6K6V8u/voautI2LOcsels0RQofVtfbTJFQf7r EJDu4B3R1aIr0238nLUkq25uAmiiQ1NrPvbJ+w== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 14811 fpki.gov. ypiYYST1VVH+VZfRLnIZa7KKEVFoz+HMBLO81KOvLPbNoRBrZ4mgZLD1iCNWMaJtaw4dMcm+WTIM 9x0W49pt0r2pe7mDatGtk8tuPnwSIPN8AG/+vt3DRyD1qK3lb5IacI7Wz1R3P8dD4AITqH2HH4Qg e7EZwqxdJbN2uyKUV+KywdDoFkpnp6MNk+QnqF6q5+I0fQOMFc4yjdBy/bfg8YC0IgoreDDyvT7g On206nU9LL7QEaWHPRpSRXT2QXPzZ2eDGrFxWmk0naZhxnKvEzA0b/C383k38NAwKQO2/g068Fig qMCoV/4uE8/jHJs5toWfKw/nL2Dy/2JKwAz5mA== )`
	`FPKI.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20191016225057 20191009225057 18798 fpki.gov. VS4iUA3eGPfurU4CdyVuOYRbaXuxzYBwrkgL96cyQSuBl5EieuQWNXEtLCyEgSBeFly21JW1biDq A6V96WhA5iphqdi6khvpAzf4X5bEnrdKMe51RlKqla4z0xW1HAYIpAOhRBWEH6e5JSDZvdHrjFQD MnP/lLx3GV6ueyo93dchYXjl62UGXpsRVrxjNqpo4CLnX/pPAfmATm/HepxwKd5H6l3ivnMnttQi z/tXHplqjOEEfPrzunZ/rMyNGyRTCkw8AaJ+R1sdncjwo1NHtvQynn/UpMzjDXc0KO0Yvm3+fCGp DKrkf7XYKamNUIhJkvxJKr1862gHhWY/U4NVfA== )`
	RRSIG=40562 and DNSKEY=40562 verifies the DNSKEY RRset
	RRSIG=11654 and DNSKEY=11654 verifies the DNSKEY RRset
	RRSIG=14811 and DNSKEY=14811/SEP verifies the DNSKEY RRset
	RRSIG=18798 and DNSKEY=18798/SEP verifies the DNSKEY RRset
	DNSKEY=40562 is now in the chain-of-trust
	DNSKEY=11654 is now in the chain-of-trust
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 52213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191020145152 20191013145152 40562 fpki.gov. Hdgl1kTQQ0O3qApFH5ZKpOMWnOzO7jIwVJKvK/ISNKoAaAFOaN1UeNllboeEtH2diZyTjSsEB/Bf a2hsNtgWQztjkU2s+Uvg7ERxuIuGLy8YSGBWfH/XytF4C0FiBGG+IGOFACh7FHhQi/2v2UyDGHX+ 9Je6l84GT702wMAGUj18boMdquHomxUoz4ZNcI6+kWWvd0pxyn0XAtAU9PEYMS4+u1k2z4UkQj8d dplXsieFj3NLQss1MXPUvxfx7Om74O/PHN292Fw7eiirlWmqp+yK3DRcjKgHHHqVu8zGm6ruskeZ OPPibHKlSv++pNpLDytMmVeWI2TCzTlqtDdgIg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191016225049 20191009225049 11654 fpki.gov. u/Q9tT/SgCYCeCpdY4Lc3RxOBmWbWA/GvjkmYasGUUy1dZT1VJExTxkqk53b/DRW9t8ZoJjtfWdA MoZdAReCgwe0MCuVPiYKJu64pWK8cSgGSlt1PVqcLU7dNzZXXNZcTj7SQhYXHGmxq7aUePPY1HbT +4Kpd9U3qyXfOSBuR7CSM0+PLLdNUsZgzCadisyqP2GvRFLYiUOe+eiJILtWf5UJ5JUpfbfnM0uC udi6M2z5OOv+mkLSfn63RR/kv93qA8VhavxKQVMagfy+8ZNuQPkca93cReRK6qhxBpOiOElagQMI mOOeUuTWyQcH+dcbzApy37nDxXiUh6GkFU+95w== ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 8af3c617d7429162 n1hutpts1heq8e8v6h5kvtclleov92g5 NS SOA RRSIG DNSKEY NSEC3PARAM ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191021082638 20191014082638 40562 fpki.gov. Nus2LFd+ziJDA9/61uLNoyxQlsQ6f8+oVb2o+JArmy1stoAPE8Zxpc6dmTO8yOTLaJhdSVipKKHU pWUopZyfMKgx1t7DcHCrRG1LF/AK/NUy8bH9Oocb7ogycI3TOAgeXND2s+518pHoV55098Bo5QyG ueJ9BnGTSNxhXe7TeWQ3VGENudp3xbM+EIWqbw8pxvLEFcOw9qkQkBugaIAB5oqDY3ScSuN6XV2v +430KxFW6Jf7/bRIJLOtnP8GOppZQ1XNKytOlXtrKoSdKH8Ga2bu5gGDnyL8i55NSyTxq/WhDVU1 kUd3xFrmHkkSI1wWjsaNCggIaFjlctp/EE12mA== ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191021082638 20191014082638 11654 fpki.gov. m4MGMubgQ24NrxzMbnU9k0MAVUEkeBmSi6Es3rbb6n8IrL3RMpqcVvIqPj6wCMMQ5DTz8rI1BVCw cVTpIc2uDNZHURPXw9+ZHZDKT7bks5oBwo6GgNIlF4HKbfoW0lPmuWzTJMCBrIsFxdaBqaUTYb4+ VE8a8vX0v++XbsLNGSF0XF5NqYpB9r/mG/FxY+HICz1047T4wyiPyWfCGQIO13yVgV8GRDcj4hnR rbLQ2HHZwecNAiTAuGF1xSoBLgRRt9XNCa4oEX+l4GWgqB/QEMATDLmAPJirTWhBAXJSo0E9yKKk ZmhY95IJYlZfjJWJNXiYEojKs7b3TP9VoEaTpw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FPKI.GOV is authoritative for FPKI.GOV
	Found RRSIG signed by fpki.gov zone
	Query to dns1.FPKI.GOV for FPKI.GOV/SOA
	Received 3762 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3762 bytes) ;; HEADER SECTION ;; id = 43262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191020145135 20191013145135 40562 fpki.gov. PYhVOAOwmPKh1Td+olIwW+/njilX2Jp8wr4H1q6nbDrhife1nkzinWxoJtNC/OgRoRD/O1NlzvWc aGMEQW8/KLcNMKCj4xk0rZoR5EtB0Tx2fIZ+6wrOOMv5wpe0KF1qiPms8mkVaTMMnDB+x6AN8K2G 4d18qkqerZ/BsvzpOlUE741SmI3P3aWGRL+M9A5XAv6yfBdNh4D1Qz6dEK94UqlAK3Kpn/XWctqs QY1dedfWLBSv4Mjo7g3IGFRnU2+rfzPQ02gkRYwpN5yPFAcaor/EaQJfmqn98LUPDn9e++mibH4e th7V2B2l17zIJsJROcAHxfAh58GEgB7qk7ZjAQ== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191016225059 20191009225059 11654 fpki.gov. tYxZd1u1etlWGxqRG2h9m0xds5B9EVR+FVGeJH8FZvM+Kn9BaCnQbz94io7syxVSB0N9AkeX4AYY +JYUZtCiqAEiqNYRlteCaxTKfO3K32Ouf7Nz9clFZ0jstq7Av506CHdrWkbsPYCy/SLXJXZW+DRw JGzI89joy2WZo/n7BPS9JYrHj2rkRqNK+QoO6W6VFrgJ1Td54xwrbHawE8va3UsSEvWo6N8He327 u2+0zEtiotzgLgz5dVoRNKVl1fk/wzNqRt8Qauw87bR56++TEUaDibTLCJ4GXxI4xyPsE4ODFTb/ 8fhbIIRWuBiWHgY1e/8qWN2WeHyiGqLacFzEhQ== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191020145123 20191013145123 40562 fpki.gov. GJnYZf3LiBCB0h82HxX79HM8DX19tXAnc9a2CbGdZbT9Kx2keBjMbTTpZ8kfOxCuNpaMuQBvvrxD 2xwIeohLwR6CZ+5LncFhzkS7apyn6X/JDujSJvL3lHMfFGvCHUxO5zWma6PdoSuBRLB83N/QKIXH MYeyD3I0E4ZgRY1PHLvs4dEHRRd4NiikUURAfhy4gg8Ui/dzVWBXcw/wrMhI7HN/Ag1ZExs90+IP ezM2iPdkhrT7J9/vClqQhgNbyUZZa+naMf0lYbrTBLViSZ7R+/Vyn7eav7iUDtBOMq7Rr+oNTksg 3M2Vo1VkieFiME5IHvNiW7sm3BhMUJvulYkJLQ== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191016225100 20191009225100 11654 fpki.gov. kU4GDRgI6lG3MDmSI8YfwWV4SWSkmVeiRDdpXBYIacSJ/K6KjMQkmnklN18SVHtngczpUDUwqVJc 7uiPm6DJlyaN330yuIGSgQAZXv43pUw5Hneo43cGKjRnwCpPwC137ReyBzBPxpJWhrN4MZKcSX7f hRefk73KDaJ2xl0+LRn9ngevEEQD+2qGNNPqjqvzcN/NpGJlo1y/QbJrd/DpPCbYRJdUkT0/I19K 4h20N//89eu5N8L25gtHZ/OpPubbe1/5mSGoaAzPfCpureEB0dGKXcXU7bjtfTfhrINuK1H1RccU FTrTeBzDQ7ry0PEPK1b/eUCnP3/RvDToBcKeVg== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191020145123 20191013145123 40562 fpki.gov. f1g87C8gatY5MCj0T2UxZsq/vpYi1cSjGLIPmAiSH6p+FOxjgGDmiACncs2GJJKK7tmDakxI2V+8 X5/LYWtE5jckNdYTtq2jh54QxWiw/iFVOWww8nzQszEooFyqHRQq957hfs6vmxEAOELcRDio8s2L aO+lfW2F0LF+yxxVa3cAlKhWir7cUY0KaYfg7oHfaGWpOUBleACjSt2L33Bna/Zy+29mIfXubZIJ bf9b8U9CRsmllTgM/JB63E3NtQyikLtl6Cyl0q+P6tm+kCqTlMdZYxrrDAtyE1XL9Yczu7SOcnqi 7QOe5iW5bswZ8+qKCsspAYb102tQv8VPoejQTQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191016225100 20191009225100 11654 fpki.gov. P+j4JMg85cX3MuINKV/QVgp5l505PtCpaqp46XAFZGZcu7XjzraVYIGLZgnazr7AZ6q295Zcwccu yFBAZCazOL3ZFRbk/Nq30Ke2Y/U+Arp5qaFQeXhkWvP8CHZQq6b5tduAOUm242czipcuFT9WQ55q ky1M3KnIaPR3nQDG4gxkAlaGIpe1rIZSmDSvwjPTf9Fj7lVxDxsA5gTq7sBFtM/SigtRhYMA7EGJ TQOCnsUoyhe//IDzwzfxyfqqHaOJYok0zoxNV6BCeh15LKRd2Zn6xeXE5tDW8Kx3u+INAfPmgd06 /nVBBasktbkHcBewa19RIUQUQhm7e7rvZiikRA== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191020145123 20191013145123 40562 fpki.gov. glCeSBogbtiUTnVqeGkKKTKSB5/v4NVxSw5IFbxc10IZdsDIR6jLFDxdTJ0jctcXvP1FmG04Mbf3 eaUteSSUKhwzlPoP88oS6njRZCEF4NJAgbtSjosD8Bc+0m+i38g2Wr/4QivVX2T20d3PIqCHP4aE WhMUyA6GBJJX5veBshZY+bZ+CmXGhEyApDLt3XC2G4Go3V44RK3F4IckguckpoWDRj0ybr9DoLw0 H4fcA5SiIO3Nh776PIkhUHzQ6yK0KYZd2diKE4WqkP//4UnjDBe1ctRon1Sma3Wuo3vc8pbuCNdL yWaXtKjwi1aQhsvM+9CZO3TxChcDfonY9furBA== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191016225100 20191009225100 11654 fpki.gov. pWKH2TqWi4MQ9QpYLYizxVOqpCGpyPabAOkfkPWHQdKu0hJs9kjBrCJc1O4ASC18lw0u462Zmtnt 9qBoIyHep02FbEj07MuAwdUE7mxCF0lwtjdaJLWY0RwKyNg3q4nMqDss+IdjM34ztBK+84V5qTKn jCV4ZWDWLjoahMgZHKwbdnmbhlRVvjYGU/Cuo4MhK3J/4zIacAZYeTwXikJsIbuoXq5CMtLIBEd7 IaBf5SGWJjtNqXSE/U0eS3uZpJ/XD0RwLGr9hVOfTagTwh2Vaztr2AFj+2/+Gr61cX+1kULZN9yW AYqquKRnFmFcc9vS4IFqz+tRFFIBFWTXe8IunA== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191020145123 20191013145123 40562 fpki.gov. SAv+K4B8N1Lcd3QlAiVwSomrLEJ7BvRRCFMqiduRZ8fBX/2ez2q7cM63uF2HHqYT1zZlR13BVpEb iA//yC+0fpJLmOIk9ZxjI4MATKVjmN7T0ncpsco/uERU/N01hot1PV/9dYJHJLbfQyCfd2ngM+/J 5ikAHBMPizfpGzcbWf60j/QXQo567WGDSsMRvQEVk9pxV8RepxaSLetHSptR75YaaWNVC+6FtN2o OQEmEa4cQLtulyDIABT/6KhGnKQwsS57CJYCCl+2EzlQCaSEvNVqsL99hMi2JhgCjHQ1LNPkP6LS n2euE+A+XmesN7aorHkrY1Rk7FtoR8nl2jvYQA== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191016225100 20191009225100 11654 fpki.gov. OCh6Y/x1V9wlkJYCFgLukk0ph/SdQYV6l93jLmI1GqDiHtPzL3Lhpj9yfr94MQgw+0EmJ34kffqb eZPtQWdFXRo3FnRkjPuDrdlQ1SPMh62t3RydBRcFOEjQvNdsyU8t/59rtCFGwzKh2oS1KPIW82IW mrS8Ed+cKeFLE09F1c8AgCuAwbf8v51kQ+NFbwpoAEi3qnwOvvaYOEuOnehk+VmadG9v314naJYY r4a8/u8iGuuC89pyTePudVAgwwjO0gp2Ma45Fst0EH2SHREGtr21RKYA9McAnvrKd7xtqeK490bd 18nZVNxcXS6JLPQGjUF02xIk0P2aPocdUzlN6A== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191020145123 20191013145123 40562 fpki.gov. CLR6aF4ih7B2zRHFdX8w0qDKwW6KMisM8D3xb8lfmjo0ELP6xLRSPvGjxcBCLFN19Ni2PrpVzj21 y/ex7tRXvHoV30FVL9jPwTd+cHfxGz4GWJ8rER4CPTCcx2edP251eZm5Oon5W43pJ+yKaocI4aW6 tLNXGr2Wm02CMK+Ll1HNXI8Z6BrYP15mrd1yH8yJDrqjA9MaTxxEn6OFdCXDiq4irvCxarAnj9BY 7z8JVx+GQbZ0bVjUMNUnT7BleQmRWpK5y/VDxbj8DjCSEvi4fR8AP0+Y8+L6SHjMtzm9ULVLpQN3 Y2h/J2WRDVSwEwAonOQpJD3w4TWlYLq286ehWQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191016225100 20191009225100 11654 fpki.gov. ODB/9BGeK/P09yzMwrBB+6LojMmYmPc7+eJfMPr10WtBR3Mi8iPGeEGnI7DeobOqfkO4PDILFARG xvb5Mf3qZzKDmALhKed8lAeSjXv1RpuPCJ0tzEcCOyoHjDZkx6fFLesoqWHPFi/wVLzw2NafsoRx dP3wXL9F7agqGnFxn14cYfS9lyR2FlyKLj7e4qKnI89gGQcBUhGV4neHC+5fdhVQv8T1EZRIp70T 2Tge+Od7RcSbCjKBS4DfnC89sYGQg9vPam0CQkitFyCIbLQOeYpOS+F6mKcO3BvtFKv8jl7dT56P aOwPv33+UUz839bZFuQM8U7uacSbaCW2PszH8g== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/SOA
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3762 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3762 bytes) ;; HEADER SECTION ;; id = 15735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN SOA ;; ANSWER SECTION (3 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191020145144 20191013145144 40562 fpki.gov. b/9joQZ6f/m8M60DcqCY1jFR2GZmXtj65YAuT2J7CWk2y5usgHD7TApjV1grWBlVXZrd8LkjDUcQ kEc0yQEnNBZpBdqwPYqg6ebjMAGUhGF/BGb87ystz0xzjRZv3A2u6tD+3LITGlbyJCS4KhFxNuVY pvWhUllqoD7BcZUWIIJA0tvNdK+hEvLerFUaCIb+OoHXWMETBDFmLe1w0S203Ti/+M8ygQExJ9ks JiDynclPBoJZRxmcmQJCepxu9KXDRahTE0fEtkUospLUhoIly7VikieSjwxI6UzwcXAKChTIvW/1 gnlGEcq0Qa6XFQ2g9Bqe7JVdkLisT4W8WVM8gw== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191016225100 20191009225100 11654 fpki.gov. vHAqD6RIsvoe98KGIOGW+faymn5QC5NFHZEjn1TImcMzA/ZsdK/WSsHRYIgyevNmeo+AdP2lWZGX MUoIqtVLSSLo3C/i0fHmY3IjUHEVZWU12ZYqqnT4pgfTbV/UsjDVORhejAJ/Qz+f2G4YAAlG3Esf TxQvMz5V42CIBYdRaVJ35g97S6IVhd7bRjYmh/PDTIgHcR0heNfveaKJqWw21ianza9BCvIbzdss xVzp9a1MIHQkdbipcFj6sk1lonoXk49bIOE6N5rsZYDOUIMBbKboMaohzpZHzZJ8VC0nSrRVthPh sPW3f/j0SXonqR67jUs29FtZ45IFlon7HDk+zA== ) ;; AUTHORITY SECTION (4 records) FPKI.GOV. 500 IN NS dns2.FPKI.GOV. FPKI.GOV. 500 IN NS dns1.FPKI.GOV. FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191020145121 20191013145121 40562 fpki.gov. AUUoXf4xCGxwa6fLir9mgr3P2amxdu27g/Wb0TSNqMriKZ8pTfYEIdbtXXhxpnnHRZWdGUe3GFQq h9c+NPpqO5mNNZN6vK1pJN2IXi4aJnvZ1UZgG9E1VjFKA9AxeaZ6S4T79vt6IhRtzBt60zIxwX7a 8LkUifwFfU5ijoTXokAo5CN+mx5lnO8TSB8auW6aXXd9a7B8XbzYyXKqL7AoDoX3XrqmgWkbPwSR gbwt7Lw+U4FAf/OlTeQJynJgaYqOFT2FFByTcTGh0qSnjFoMpW0RywA+2Wcu+vN9/b0n9PujeqKB cFxaJj0Vb1hhWSAyeHbtc6nj0SlVd5o6rygh8A== ) FPKI.GOV. 500 IN RRSIG ( NS 7 2 500 20191016225052 20191009225052 11654 fpki.gov. gd+Aa2G2IWZVu8Bxja/WWwjx2j1V0WYS78c47ppztQLh7n2UqnofJHeVia+nudLwb419do2PRh7/ 8DrLFNn6/zoSgp6r7/Ilz6Ctp3bddwT86KduZVyCkWhJxaz3a0XDXIGXWlc2tT9ETzUL45CeN8HV vQdDb5gt2E7sNo/CnDztaEynk+aKwCr56e9PP7Fm3uHxHhN2O1xtw+QiOSjzndTEZ1mR+tM3TsFs kImkCgX1EA26z8xCr0FyVWkXwSd7yJwQCTTasFkbdmKSsganrNTeLzvZ0FByuLo9WHVDnTdvjxrX JipREnGCpgyFh28bwASerfR0lbXIT5VZ/PBSog== ) ;; ADDITIONAL SECTION (13 records) dns1.FPKI.GOV. 500 IN A 199.167.92.100 dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191020145121 20191013145121 40562 fpki.gov. GtDgGUJU0jxQveztSBf1j/XH5Oi+pzG0L7bYX70NknRTBvwspRShiXkBdy7rr7Ytdaa7hwGTEJ67 WdUEcJZ2RPYPA99U/e2F8SbXS+AmjtepFZBEItymMlcp/429gzdH3Y2sgv06IrJxVg8nQpRYWhd8 IhkFMbDcQsSh/eD3+NdB2FLw6MmeQJqVpRmjkO3mSLFna2tscCubfE/53qMPw6sBq+W2HIY8+7XT Rwm5r+bkKVwsQ8AVIX/O6w4i1DqiaIYF/huW++/xML1jqM/aIZSvj70cipRc/Ee62K14VoxP6q+c jP3nMn59HxS3tvR0zkJSP1rYuPwm6zPhZqKZ2w== ) dns1.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191016225052 20191009225052 11654 fpki.gov. GU+JFogAGlfMFp5l2DaWLS2fCwPNsydwZIFzntck58uA+nr07ECokInJhqDZB/lmQbDzpmfFa5mF sDjXwiFp++qgsbbhY/IQSlUgvwbGH3/phIaTUtYo7zYgCATN4GeGa2JzwD3JFkUgdwTIVm8F8kxo ePXi7Bsi4rM7JqXFj2uAbtW+ysn5vYaacwF+dNaxNiZAK3h8MDGaHWQrKlP5s8fsYLKDa0puAKdu qAKqaW741kGky3/bWNYhXntVy0kGkjAPtJ0Go9hOvvnn3KL6xh027/vUSKG3C40+6T8PKyqt3LC4 cKzITFgbPkTM5RpFjdIpVzeN08FaxFziNpfMng== ) dns2.FPKI.GOV. 500 IN A 199.167.93.100 dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191020145121 20191013145121 40562 fpki.gov. lDJMVFi8HwHGLw4AONwb5J5w3+LyrC+3EbOK1NiG3C5/TGQ4A6e/p8OC3pfprR4UBhwquCIKM4RN oEdBPedUg0P0X9u0lwtot3JewlvWsN3tD95hN39kU5qLJhT6VOEjy4lNFOdTBitwP1oKq0mSha3B A2z+rsRdu+/V5H6qcj14wxv4AViZaDLXmsy3XRfihB5nKBhpWKTvTMoSuEwR5x7q9v8S3bdQBlB5 R6DlN80Z+NOmKCZE1513fHafs8bNGJcjbRFiEwuatGihWuBexg0rjaGGbZSg7dtFu4hBE7ghwBE9 93aOIUrPtg1dOAoJmqMoRcRdHnUbdVUtzxjqiQ== ) dns2.FPKI.GOV. 500 IN RRSIG ( A 7 3 500 20191016225052 20191009225052 11654 fpki.gov. J+3iiKEc4bVZmBFCAT6/RX05v903ZpPd7bzuOlTsXy9XSXbw4CT3CxoTEncNCu8I3HLU8pjJIeiS 5Fpbizm4HmSyR3oAYfpIo4cGRBi7eMGFWDLw1UPgDDHG4R8pql2Si6lK+KEOnXBlbYn8CPK8wozi vB/slst/64sQcUwPWhx53rCksiXWS3CznONw6Aik9CFrq7fB4Q4M2kUfSeLN3vz3GRjCMMbU6v5b YI1teWhQPZkQQ+cQZtfXmJJ/e225KZpFxtz7V6GJuyyIKaWjxRh9ExPeFkaNz8FrsAfOYGMnH89o XVhbiIZiaMmTNwBo3Cdz8/jex4rudc9S0dq9iQ== ) dns1.FPKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191020145121 20191013145121 40562 fpki.gov. Jv9saV3r3NpL84Ki0ikvJ+yR0sWQDtDHp7MvCIrLKsOufvasS1p4c55CfKdAs0PiFAjfqTrouuHb wrJakWqER3/QQL4/5ayFCCts4Foam+SO7XKvOsNcV/mTZCJl1HnJf0OCDwCEiEp8yzVMB0vp7N9g sR2Wt9k82IMTsYREC8cUW3dTBS2z5w1w9IeCVcXH9vCn3EOIQnqCq0Ae5uAZfoTNfNA+p1W/97vQ pCFeyBq+BpQBx8czlx7hNW+cw88T66qpwpH2uko5gWZQe2rzRPhsTeRHhPOXuRe3nPqlUIHgCvbu zaVJ357sI0/Uv7a216U3wRAAohu5RzDxG5LgNQ== ) dns1.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191016225052 20191009225052 11654 fpki.gov. CkQXrPxwgdha3Fl/a8uOWVoXQbnAOP2VjbqFdKnS9ITa7IVsXVzBdlKkxtsNHUtPpeXRJbWhkKvI +7BYrCNBsy7r9j+xqpJKovY7W1++wjJrbEpAgQ6dSl4zjx8BwT5Xq7GotkoT11Ny+F0L4k883Bwe DmuS4s0nNeLMZg7TjWBpQ2wiH/3xQtpl35/HB0vyqqP7VOpQA9JGLbqkAOXnzIopcAQcl+nfNLR7 GydEgXNXMbbHxTi+AP5lsA7XUNJzQL5owJgG/bYsV0+9qfGdtGC1e/NGnc+y6DU5gx0nmcykYWeX +DspJfNfc5VdJtIk+r4ekrWJG4Zw5xy6wQ5VyQ== ) dns2.FPKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191020145121 20191013145121 40562 fpki.gov. BdIKfQWk7BP+KrMonxDMN8KSlhalMzc59bAh9kDbsXtfXTKfmMFHCbU1UGvAi0u4SZGI9wjB6hB9 fvjRoW+0IgPYWOdRjBABKoXKmsM6hAc4Eycvc96BBN+rbJ7+Zx/R/kCN4tT7nwX9oFapG+KG7sU7 rH012UP6WgQHh50cMEFnr/SX8IjqJuKJJkuvuNvn3z6gXYX6Ah1zE5SX/xNMUzsGtcqnOWILH+cL xFe6HHdBCwzffpg5V5dDoRmwOgsJNBd9kByBvsbsIoYAJ0ic0HW1pzBemG4Lwz3heCpXQWr/thYF gXNTf2Z5K1j7nZN4bLwc70CWZBeeDtz3ii12+A== ) dns2.FPKI.GOV. 500 IN RRSIG ( AAAA 7 3 500 20191016225052 20191009225052 11654 fpki.gov. RJ6yXNuU3/I/XR37T/BSZYBjRkpPsNaP4eHgsMX1Wldkk1LmD7MpceMntDrxdJi8VAer7zDlF9wq c+amTbRsqH4dLslul7HOSGDM60OKibGTs/XtAqTah1rAKvOAU3AMkw+YUSGGu/j6IRiiIVnsqhWg K9BAUjO4Bf8oHqT48y6zeR8dQ63tEfX8qsB0k3dMygm8oon3O2zs9TfOkmuJrTBCvU9p4TlyxCcT s5MiSIYUlCq/PiDn5WhcBpvsmP3AKgmsRCEuEaCcxqWHTp+CtP6vVJqr/6nWIbv5gj7mZHut7g/3 QovOLG32S9jxrFAHT3P3iiQymZLKG0PO2RZGvA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.FPKI.GOV for FPKI.GOV/A
	Error querying dns2.FPKI.GOV/2620:9b:c001:9300:22:0:0:30 for FPKI.GOV/A: 'IPv6 transport disabled'
	Received 1366 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1366 bytes) ;; HEADER SECTION ;; id = 25116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FPKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FPKI.GOV. 500 IN SOA ( dns2.FPKI.GOV. hostmaster.dns1.FPKI.GOV. 2019052202 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191020145152 20191013145152 40562 fpki.gov. Hdgl1kTQQ0O3qApFH5ZKpOMWnOzO7jIwVJKvK/ISNKoAaAFOaN1UeNllboeEtH2diZyTjSsEB/Bf a2hsNtgWQztjkU2s+Uvg7ERxuIuGLy8YSGBWfH/XytF4C0FiBGG+IGOFACh7FHhQi/2v2UyDGHX+ 9Je6l84GT702wMAGUj18boMdquHomxUoz4ZNcI6+kWWvd0pxyn0XAtAU9PEYMS4+u1k2z4UkQj8d dplXsieFj3NLQss1MXPUvxfx7Om74O/PHN292Fw7eiirlWmqp+yK3DRcjKgHHHqVu8zGm6ruskeZ OPPibHKlSv++pNpLDytMmVeWI2TCzTlqtDdgIg== ) FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191016225049 20191009225049 11654 fpki.gov. u/Q9tT/SgCYCeCpdY4Lc3RxOBmWbWA/GvjkmYasGUUy1dZT1VJExTxkqk53b/DRW9t8ZoJjtfWdA MoZdAReCgwe0MCuVPiYKJu64pWK8cSgGSlt1PVqcLU7dNzZXXNZcTj7SQhYXHGmxq7aUePPY1HbT +4Kpd9U3qyXfOSBuR7CSM0+PLLdNUsZgzCadisyqP2GvRFLYiUOe+eiJILtWf5UJ5JUpfbfnM0uC udi6M2z5OOv+mkLSfn63RR/kv93qA8VhavxKQVMagfy+8ZNuQPkca93cReRK6qhxBpOiOElagQMI mOOeUuTWyQcH+dcbzApy37nDxXiUh6GkFU+95w== ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN NSEC3 ( 1 0 1 8af3c617d7429162 n1hutpts1heq8e8v6h5kvtclleov92g5 NS SOA RRSIG DNSKEY NSEC3PARAM ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191021082638 20191014082638 40562 fpki.gov. Nus2LFd+ziJDA9/61uLNoyxQlsQ6f8+oVb2o+JArmy1stoAPE8Zxpc6dmTO8yOTLaJhdSVipKKHU pWUopZyfMKgx1t7DcHCrRG1LF/AK/NUy8bH9Oocb7ogycI3TOAgeXND2s+518pHoV55098Bo5QyG ueJ9BnGTSNxhXe7TeWQ3VGENudp3xbM+EIWqbw8pxvLEFcOw9qkQkBugaIAB5oqDY3ScSuN6XV2v +430KxFW6Jf7/bRIJLOtnP8GOppZQ1XNKytOlXtrKoSdKH8Ga2bu5gGDnyL8i55NSyTxq/WhDVU1 kUd3xFrmHkkSI1wWjsaNCggIaFjlctp/EE12mA== ) n1hutpts1heq8e8v6h5kvtclleov92g4.FPKI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20191021082638 20191014082638 11654 fpki.gov. m4MGMubgQ24NrxzMbnU9k0MAVUEkeBmSi6Es3rbb6n8IrL3RMpqcVvIqPj6wCMMQ5DTz8rI1BVCw cVTpIc2uDNZHURPXw9+ZHZDKT7bks5oBwo6GgNIlF4HKbfoW0lPmuWzTJMCBrIsFxdaBqaUTYb4+ VE8a8vX0v++XbsLNGSF0XF5NqYpB9r/mG/FxY+HICz1047T4wyiPyWfCGQIO13yVgV8GRDcj4hnR rbLQ2HHZwecNAiTAuGF1xSoBLgRRt9XNCa4oEX+l4GWgqB/QEMATDLmAPJirTWhBAXJSo0E9yKKk ZmhY95IJYlZfjJWJNXiYEojKs7b3TP9VoEaTpw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191020145152 20191013145152 40562 fpki.gov. Hdgl1kTQQ0O3qApFH5ZKpOMWnOzO7jIwVJKvK/ISNKoAaAFOaN1UeNllboeEtH2diZyTjSsEB/Bf a2hsNtgWQztjkU2s+Uvg7ERxuIuGLy8YSGBWfH/XytF4C0FiBGG+IGOFACh7FHhQi/2v2UyDGHX+ 9Je6l84GT702wMAGUj18boMdquHomxUoz4ZNcI6+kWWvd0pxyn0XAtAU9PEYMS4+u1k2z4UkQj8d dplXsieFj3NLQss1MXPUvxfx7Om74O/PHN292Fw7eiirlWmqp+yK3DRcjKgHHHqVu8zGm6ruskeZ OPPibHKlSv++pNpLDytMmVeWI2TCzTlqtDdgIg== )`
	`FPKI.GOV. 500 IN RRSIG ( SOA 7 2 500 20191016225049 20191009225049 11654 fpki.gov. u/Q9tT/SgCYCeCpdY4Lc3RxOBmWbWA/GvjkmYasGUUy1dZT1VJExTxkqk53b/DRW9t8ZoJjtfWdA MoZdAReCgwe0MCuVPiYKJu64pWK8cSgGSlt1PVqcLU7dNzZXXNZcTj7SQhYXHGmxq7aUePPY1HbT +4Kpd9U3qyXfOSBuR7CSM0+PLLdNUsZgzCadisyqP2GvRFLYiUOe+eiJILtWf5UJ5JUpfbfnM0uC udi6M2z5OOv+mkLSfn63RR/kv93qA8VhavxKQVMagfy+8ZNuQPkca93cReRK6qhxBpOiOElagQMI mOOeUuTWyQcH+dcbzApy37nDxXiUh6GkFU+95w== )`
	RRSIG=40562 and DNSKEY=40562 verifies the SOA RRset
	RRSIG=11654 and DNSKEY=11654 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FPKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: