DNSSEC Analyzer

Domain Name:

Time: 2019-07-15 23:56:16 UTC, NTP stratum 4

Analyzing DNSSEC problems for FRC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 52074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to f.root-servers.net for FRC.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for FRC.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (665 bytes) ;; HEADER SECTION ;; id = 5486 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 5251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 15495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (889 bytes) ;; HEADER SECTION ;; id = 35502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190721214731 20190706214231 7698 gov. OuMwmznpkhp5lF26dwwiOxgCzuV3OpYNfrgTTbt43gzc7fSsXGpQcc4xQoXGEOmjrEQfYWSuH597 t6z8AUl2Px6dUecnSrDYDF8UML0MDFCOSpFe2Y8pgG0Bhou8P/1cC73NNameKFx8/WS3NpqP5pzU 5dmo+czGHEtoL0X5+os+eZ7hYqWqtyLakNYCXjqGFu7I2GemHIs7xHKWjmpWk5S9rlHx3m8o0yEH 3flGm42Ijlqgrxi1FxwwldCuOa7whg2+TQ46zReDZk4h8FcKM7D0E2R+BVTJYuVz1QRpHrdEmVze 50ivP69OWTofWzmiUg9LoU2l8yKqlI/87NWFDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190721214731 20190706214231 7698 gov. OuMwmznpkhp5lF26dwwiOxgCzuV3OpYNfrgTTbt43gzc7fSsXGpQcc4xQoXGEOmjrEQfYWSuH597 t6z8AUl2Px6dUecnSrDYDF8UML0MDFCOSpFe2Y8pgG0Bhou8P/1cC73NNameKFx8/WS3NpqP5pzU 5dmo+czGHEtoL0X5+os+eZ7hYqWqtyLakNYCXjqGFu7I2GemHIs7xHKWjmpWk5S9rlHx3m8o0yEH 3flGm42Ijlqgrxi1FxwwldCuOa7whg2+TQ46zReDZk4h8FcKM7D0E2R+BVTJYuVz1QRpHrdEmVze 50ivP69OWTofWzmiUg9LoU2l8yKqlI/87NWFDA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	DNSKEY=43583 is now in the chain-of-trust
	Query to a.gov-servers.net for FRC.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for FRC.GOV/A: 'IPv6 transport disabled'
	Received 422 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (422 bytes) ;; HEADER SECTION ;; id = 7329 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FRC.GOV. 86400 IN NS sauthns1.qwest.net. FRC.GOV. 86400 IN NS sauthns2.qwest.net. FRC.GOV. 3600 IN DS 37203 7 1 3d4490d6543ab811bd6080605de081faae56dcce FRC.GOV. 3600 IN DS 45813 7 1 947995079829b36f3a48f279da8dabe1a85f7b43 FRC.GOV. 3600 IN DS ( 37203 7 2 ab0da2c74edf10d5040b77f4bb6634b18c72342366efa5ec4a3c338b4067362f ) FRC.GOV. 3600 IN DS ( 45813 7 2 2fa2691c5cfe38506c171fe2775d6dd99fa8d2cf3b24a214dfdd14fa6984eaf7 ) FRC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. mgAhuuVjnoHyLV1YA1mDhhLky19IBLCDMb3RoVjzwEFKoeJju/kOaEZWFELcugXqvcrSFGeIpAh7 JUszyB/XqdMaw3GRJIAkCmc8/Itgw1NijbUHX7kEv5KPOYlK+ZFuuqRzMz2xq/QZKWHKOhbPk7lI AAgZWZdkfuvZwSEx9EQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FRC.GOV/DNSKEY
	Received 422 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (422 bytes) ;; HEADER SECTION ;; id = 44506 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FRC.GOV. 86400 IN NS sauthns1.qwest.net. FRC.GOV. 86400 IN NS sauthns2.qwest.net. FRC.GOV. 3600 IN DS 37203 7 1 3d4490d6543ab811bd6080605de081faae56dcce FRC.GOV. 3600 IN DS 45813 7 1 947995079829b36f3a48f279da8dabe1a85f7b43 FRC.GOV. 3600 IN DS ( 37203 7 2 ab0da2c74edf10d5040b77f4bb6634b18c72342366efa5ec4a3c338b4067362f ) FRC.GOV. 3600 IN DS ( 45813 7 2 2fa2691c5cfe38506c171fe2775d6dd99fa8d2cf3b24a214dfdd14fa6984eaf7 ) FRC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. mgAhuuVjnoHyLV1YA1mDhhLky19IBLCDMb3RoVjzwEFKoeJju/kOaEZWFELcugXqvcrSFGeIpAh7 JUszyB/XqdMaw3GRJIAkCmc8/Itgw1NijbUHX7kEv5KPOYlK+ZFuuqRzMz2xq/QZKWHKOhbPk7lI AAgZWZdkfuvZwSEx9EQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FRC.GOV

FRC.GOV

	Checking DS between GOV and FRC.GOV
	Query to c.gov-servers.net for FRC.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FRC.GOV/DS: 'IPv6 transport disabled'
	Received 367 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (367 bytes) ;; HEADER SECTION ;; id = 48845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN DS ;; ANSWER SECTION (5 records) FRC.GOV. 3600 IN DS 37203 7 1 3d4490d6543ab811bd6080605de081faae56dcce FRC.GOV. 3600 IN DS 45813 7 1 947995079829b36f3a48f279da8dabe1a85f7b43 FRC.GOV. 3600 IN DS ( 37203 7 2 ab0da2c74edf10d5040b77f4bb6634b18c72342366efa5ec4a3c338b4067362f ) FRC.GOV. 3600 IN DS ( 45813 7 2 2fa2691c5cfe38506c171fe2775d6dd99fa8d2cf3b24a214dfdd14fa6984eaf7 ) FRC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. mgAhuuVjnoHyLV1YA1mDhhLky19IBLCDMb3RoVjzwEFKoeJju/kOaEZWFELcugXqvcrSFGeIpAh7 JUszyB/XqdMaw3GRJIAkCmc8/Itgw1NijbUHX7kEv5KPOYlK+ZFuuqRzMz2xq/QZKWHKOhbPk7lI AAgZWZdkfuvZwSEx9EQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FRC.GOV in the GOV zone
	DS=37203/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=45813/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=37203/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=45813/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FRC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. mgAhuuVjnoHyLV1YA1mDhhLky19IBLCDMb3RoVjzwEFKoeJju/kOaEZWFELcugXqvcrSFGeIpAh7 JUszyB/XqdMaw3GRJIAkCmc8/Itgw1NijbUHX7kEv5KPOYlK+ZFuuqRzMz2xq/QZKWHKOhbPk7lI AAgZWZdkfuvZwSEx9EQ= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=37203/SHA-1 is now in the chain-of-trust
	DS=45813/SHA-1 is now in the chain-of-trust
	`FRC.GOV. 3600 IN DS 37203 7 1 3d4490d6543ab811bd6080605de081faae56dcce`
	`FRC.GOV. 3600 IN DS 45813 7 1 947995079829b36f3a48f279da8dabe1a85f7b43`
	`FRC.GOV. 3600 IN DS ( 37203 7 2 ab0da2c74edf10d5040b77f4bb6634b18c72342366efa5ec4a3c338b4067362f )`
	`FRC.GOV. 3600 IN DS ( 45813 7 2 2fa2691c5cfe38506c171fe2775d6dd99fa8d2cf3b24a214dfdd14fa6984eaf7 )`
	Query to sauthns2.qwest.net for FRC.GOV/DNSKEY
	Error querying sauthns2.qwest.net/2001:428:0:0:0:0:0:8 for FRC.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1353 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (1353 bytes) ;; HEADER SECTION ;; id = 47433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) frc.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAYNe5mCWgWlPy8VUe4phdZBjV2hTiM58GmxhIUYCs7eaIVarMiXFxKuaHxIp9+Em9GQCkPit P3SB9DyXc1CpQ8JiE0aKe4ek49p/J/9uAkzYou7x8V1pYzBqADFJ3JR1ENRx+B6Fr0VLPOQLIKue uZS5XVu3caI4uDU0w2914MApaLj+gKfRYq70LEE4zj8KRjGVP+roIn6Xs81VqkRGPWGoUz2Kb7al TkF1CXAwlYHudfokH9Q0kUeOwXvntuZLR1TsYtXeYYU4+VZDSIvlBPVPOjkuNclQdr1SG37hS9Gm iKQk2m0FMDC6GQq6PXpNpFJMKV+mX2ymSfxXN8hLVzE= ) ; Key ID = 45813 frc.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbGMGP3zoQFsOTKqI/mtccDmUnO1fNExmsfhtR2F3PoyZs5VUbuwPSRxIlAhuV66Bz8W7Gtz 1p+iorwiJQsR2fAHMgNJU/FlTOcG1lJEO8QRZRfTFNDF5DrlDpQtkaMxRjSg2l50mzgCHqQGVAId i4FBojsSqSJ5Ghvc9qM25Spf ) ; Key ID = 8450 frc.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAe7O4lMkR61K7ioXEeeNbjYA+PCcJyAjrJRjWPivkzyj6E4xBIaZkBn6jV1LiBclVjLYJLnw OpKImjuzaGLiJAtzl4dlg+4L85nvxGTmUs2ewZr7ZW+DU0b8zdO01eXtKSpcqoq45CqLMsG4R8No d8xQrlzz3UN7lCBKUb9j4QD5 ) ; Key ID = 27482 frc.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdZQwLiquevq7Z6f/rSJXh+fhDaeBGRCSSeZwV8AwgB0hbqd2liUSRTFW1utNe3gAj4j0i22 PkH9mPtEhSH6yEAEw5RXdpwGCA8OuEH4xmA82udiXSi4eI4KzME2NePpjQMKm6aYX+hgJlPg/I8Y mQRH2W0ctlM//7gLPAz6Wykd9F6jRT+fguSBC2kVWypu3A/knAy6gXNScPvEGIctr2rDm2j4R6ho CyejWM8av30qCF+V9Z0q6Nor7A+IqU6iAMMRfmTAMjMZ5uM2ebCgpp/ZdxhBSjoZsNtaZYIE9CjY fHwfH8jJA2VyYTva+nA2lfbN5X86S0eazifcLyrv+1U= ) ; Key ID = 37203 frc.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190722144513 20190715134513 8450 frc.gov. b0E2KdGA/oTGrnMlcbV4wKigDoSU7mq4Wd/w+q7vf9EN3/qa7APCppGmEjKLc9o65VBBGhTcMjp4 8b9JudmR6Z9EAK1uBxjgrEJV5M8YrEYqrHa4mRo9hYxtzrfv7pZg/cLHOBxS1icOODh8hLDKMkt1 UZHge5EqtdGJ4zGJ90M= ) frc.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190722144513 20190715134513 45813 frc.gov. Ye11V/7YHqEWcjQ9wZj3WRgD8VZQSwEigJgtXiSR5LPBqE5JaPtUxZSTYKve4afasNgFgIG8BXMy A50GPa/mLr3L9phYtx0CDcvKvBoiNDOpyW9btXpREVKcOk3HTqQvq48U8l9mT6tkozIwihwe4vYK 8lxKIiptXbaJK2m6p8RA0xcZTAnDDV0E1B2upTBvwr5Lj+1q+yUvFGJUh3aJrue82arKYs1elQrW 6isfndbQzaSa84GgWVWK+9OqKINdeZe3YPtSUDBkeasHSgpi1XlwQQOs7+8fSY9fN84DIVfIGHR7 e0X5XWkWmwH2jSFcNZEuVUjZQRAtlSDBGAj7kw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FRC.GOV
	`frc.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAYNe5mCWgWlPy8VUe4phdZBjV2hTiM58GmxhIUYCs7eaIVarMiXFxKuaHxIp9+Em9GQCkPit P3SB9DyXc1CpQ8JiE0aKe4ek49p/J/9uAkzYou7x8V1pYzBqADFJ3JR1ENRx+B6Fr0VLPOQLIKue uZS5XVu3caI4uDU0w2914MApaLj+gKfRYq70LEE4zj8KRjGVP+roIn6Xs81VqkRGPWGoUz2Kb7al TkF1CXAwlYHudfokH9Q0kUeOwXvntuZLR1TsYtXeYYU4+VZDSIvlBPVPOjkuNclQdr1SG37hS9Gm iKQk2m0FMDC6GQq6PXpNpFJMKV+mX2ymSfxXN8hLVzE= ) ; Key ID = 45813`
	`frc.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbGMGP3zoQFsOTKqI/mtccDmUnO1fNExmsfhtR2F3PoyZs5VUbuwPSRxIlAhuV66Bz8W7Gtz 1p+iorwiJQsR2fAHMgNJU/FlTOcG1lJEO8QRZRfTFNDF5DrlDpQtkaMxRjSg2l50mzgCHqQGVAId i4FBojsSqSJ5Ghvc9qM25Spf ) ; Key ID = 8450`
	`frc.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAe7O4lMkR61K7ioXEeeNbjYA+PCcJyAjrJRjWPivkzyj6E4xBIaZkBn6jV1LiBclVjLYJLnw OpKImjuzaGLiJAtzl4dlg+4L85nvxGTmUs2ewZr7ZW+DU0b8zdO01eXtKSpcqoq45CqLMsG4R8No d8xQrlzz3UN7lCBKUb9j4QD5 ) ; Key ID = 27482`
	`frc.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdZQwLiquevq7Z6f/rSJXh+fhDaeBGRCSSeZwV8AwgB0hbqd2liUSRTFW1utNe3gAj4j0i22 PkH9mPtEhSH6yEAEw5RXdpwGCA8OuEH4xmA82udiXSi4eI4KzME2NePpjQMKm6aYX+hgJlPg/I8Y mQRH2W0ctlM//7gLPAz6Wykd9F6jRT+fguSBC2kVWypu3A/knAy6gXNScPvEGIctr2rDm2j4R6ho CyejWM8av30qCF+V9Z0q6Nor7A+IqU6iAMMRfmTAMjMZ5uM2ebCgpp/ZdxhBSjoZsNtaZYIE9CjY fHwfH8jJA2VyYTva+nA2lfbN5X86S0eazifcLyrv+1U= ) ; Key ID = 37203`
	DNSKEY=45813/SEP is now in the chain-of-trust
	DS=45813/SHA-1 verifies DNSKEY=45813/SEP
	DS=45813/SHA-256 verifies DNSKEY=45813/SEP
	DNSKEY=37203/SEP is now in the chain-of-trust
	DS=37203/SHA-1 verifies DNSKEY=37203/SEP
	DS=37203/SHA-256 verifies DNSKEY=37203/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`frc.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190722144513 20190715134513 8450 frc.gov. b0E2KdGA/oTGrnMlcbV4wKigDoSU7mq4Wd/w+q7vf9EN3/qa7APCppGmEjKLc9o65VBBGhTcMjp4 8b9JudmR6Z9EAK1uBxjgrEJV5M8YrEYqrHa4mRo9hYxtzrfv7pZg/cLHOBxS1icOODh8hLDKMkt1 UZHge5EqtdGJ4zGJ90M= )`
	`frc.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190722144513 20190715134513 45813 frc.gov. Ye11V/7YHqEWcjQ9wZj3WRgD8VZQSwEigJgtXiSR5LPBqE5JaPtUxZSTYKve4afasNgFgIG8BXMy A50GPa/mLr3L9phYtx0CDcvKvBoiNDOpyW9btXpREVKcOk3HTqQvq48U8l9mT6tkozIwihwe4vYK 8lxKIiptXbaJK2m6p8RA0xcZTAnDDV0E1B2upTBvwr5Lj+1q+yUvFGJUh3aJrue82arKYs1elQrW 6isfndbQzaSa84GgWVWK+9OqKINdeZe3YPtSUDBkeasHSgpi1XlwQQOs7+8fSY9fN84DIVfIGHR7 e0X5XWkWmwH2jSFcNZEuVUjZQRAtlSDBGAj7kw== )`
	RRSIG=8450 and DNSKEY=8450 verifies the DNSKEY RRset
	RRSIG=45813 and DNSKEY=45813/SEP verifies the DNSKEY RRset
	DNSKEY=8450 is now in the chain-of-trust
	DNSKEY=27482 is now in the chain-of-trust
	Query to sauthns2.qwest.net for FRC.GOV/A
	Received 464 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (464 bytes) ;; HEADER SECTION ;; id = 12824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN A ;; ANSWER SECTION (3 records) frc.gov. 3600 IN A 52.206.136.3 frc.gov. 3600 IN A 52.44.89.206 frc.gov. 3600 IN RRSIG ( A 7 2 3600 20190722144513 20190715134513 8450 frc.gov. d5IDnmj9a3/n8Y9wskkWA8ssu5782JZjCdeXpyRbc/bGmBPHd0SWEvsNayDevhKtX2XGxaD0fORZ O5GKwVsBoGz9QmF5myFe3A+k/nrefp2VMRVB+8edX2Q96hiNZP9bWdaKEX1QCmsmA77vtgPENgAl JoM22s0L5qCN1lf1Vnk= ) ;; AUTHORITY SECTION (3 records) frc.gov. 3600 IN NS sauthns2.qwest.net. frc.gov. 3600 IN NS sauthns1.qwest.net. frc.gov. 3600 IN RRSIG ( NS 7 2 3600 20190722144513 20190715134513 8450 frc.gov. efbcZ1UxKQlLYd8mx2m3xVwBSIeZ0yWWP2zZLU5xLXilvxxx4sUHM3vxk/14gNT6qZeqNGdUx+mp bEWTdYSb+Btcvq3KI2cEnwxZGn+hiuVHpLh544S8f6EfBzgwPtkFMnHtZaREvhRtXmY7SrmpFwQM pnHT540dPOIH+x1Pjp8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FRC.GOV is authoritative for FRC.GOV
	Found RRSIG signed by frc.gov zone
	Query to sauthns2.qwest.net for FRC.GOV/SOA
	Error querying sauthns2.qwest.net/2001:428:0:0:0:0:0:8 for FRC.GOV/SOA: 'IPv6 transport disabled'
	Received 486 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (486 bytes) ;; HEADER SECTION ;; id = 56494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN SOA ;; ANSWER SECTION (2 records) frc.gov. 86400 IN SOA ( sauthns1.qwest.net. dns-admin.qwestip.net. 2190131105 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) frc.gov. 86400 IN RRSIG ( SOA 7 2 86400 20190722144513 20190715134513 8450 frc.gov. W76T7/xZ6rhheuRVXmXfmVCRF+H1ac1dC17dSpbvwO2ewJ7XnYwfjDqR0nHX0SxLknhP6rrUNy5P pLCRFBCQy/4JLRiabo5f7O4Qwt2GaS+JjUXohzytwZ8NRqAewosoVc6YvKRexMGhMzGZsnKEuCdn ZVIsSNSYMgRbhe4e86Y= ) ;; AUTHORITY SECTION (3 records) frc.gov. 3600 IN NS sauthns1.qwest.net. frc.gov. 3600 IN NS sauthns2.qwest.net. frc.gov. 3600 IN RRSIG ( NS 7 2 3600 20190722144513 20190715134513 8450 frc.gov. efbcZ1UxKQlLYd8mx2m3xVwBSIeZ0yWWP2zZLU5xLXilvxxx4sUHM3vxk/14gNT6qZeqNGdUx+mp bEWTdYSb+Btcvq3KI2cEnwxZGn+hiuVHpLh544S8f6EfBzgwPtkFMnHtZaREvhRtXmY7SrmpFwQM pnHT540dPOIH+x1Pjp8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sauthns1.qwest.net for FRC.GOV/SOA
	Error querying sauthns1.qwest.net/2001:428:0:0:0:0:0:7 for FRC.GOV/SOA: 'IPv6 transport disabled'
	Received 486 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (486 bytes) ;; HEADER SECTION ;; id = 42174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN SOA ;; ANSWER SECTION (2 records) frc.gov. 86400 IN SOA ( sauthns1.qwest.net. dns-admin.qwestip.net. 2190131105 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) frc.gov. 86400 IN RRSIG ( SOA 7 2 86400 20190722144513 20190715134513 8450 frc.gov. W76T7/xZ6rhheuRVXmXfmVCRF+H1ac1dC17dSpbvwO2ewJ7XnYwfjDqR0nHX0SxLknhP6rrUNy5P pLCRFBCQy/4JLRiabo5f7O4Qwt2GaS+JjUXohzytwZ8NRqAewosoVc6YvKRexMGhMzGZsnKEuCdn ZVIsSNSYMgRbhe4e86Y= ) ;; AUTHORITY SECTION (3 records) frc.gov. 3600 IN NS sauthns2.qwest.net. frc.gov. 3600 IN NS sauthns1.qwest.net. frc.gov. 3600 IN RRSIG ( NS 7 2 3600 20190722144513 20190715134513 8450 frc.gov. efbcZ1UxKQlLYd8mx2m3xVwBSIeZ0yWWP2zZLU5xLXilvxxx4sUHM3vxk/14gNT6qZeqNGdUx+mp bEWTdYSb+Btcvq3KI2cEnwxZGn+hiuVHpLh544S8f6EfBzgwPtkFMnHtZaREvhRtXmY7SrmpFwQM pnHT540dPOIH+x1Pjp8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sauthns2.qwest.net for FRC.GOV/A
	Error querying sauthns2.qwest.net/2001:428:0:0:0:0:0:8 for FRC.GOV/A: 'IPv6 transport disabled'
	Received 464 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (464 bytes) ;; HEADER SECTION ;; id = 5923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FRC.GOV. IN A ;; ANSWER SECTION (3 records) frc.gov. 3600 IN A 52.206.136.3 frc.gov. 3600 IN A 52.44.89.206 frc.gov. 3600 IN RRSIG ( A 7 2 3600 20190722144513 20190715134513 8450 frc.gov. d5IDnmj9a3/n8Y9wskkWA8ssu5782JZjCdeXpyRbc/bGmBPHd0SWEvsNayDevhKtX2XGxaD0fORZ O5GKwVsBoGz9QmF5myFe3A+k/nrefp2VMRVB+8edX2Q96hiNZP9bWdaKEX1QCmsmA77vtgPENgAl JoM22s0L5qCN1lf1Vnk= ) ;; AUTHORITY SECTION (3 records) frc.gov. 3600 IN NS sauthns2.qwest.net. frc.gov. 3600 IN NS sauthns1.qwest.net. frc.gov. 3600 IN RRSIG ( NS 7 2 3600 20190722144513 20190715134513 8450 frc.gov. efbcZ1UxKQlLYd8mx2m3xVwBSIeZ0yWWP2zZLU5xLXilvxxx4sUHM3vxk/14gNT6qZeqNGdUx+mp bEWTdYSb+Btcvq3KI2cEnwxZGn+hiuVHpLh544S8f6EfBzgwPtkFMnHtZaREvhRtXmY7SrmpFwQM pnHT540dPOIH+x1Pjp8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FRC.GOV A RR has value 52.206.136.3
	FRC.GOV A RR has value 52.44.89.206
	Found 1 RRSIGs over A RRset
	`frc.gov. 3600 IN RRSIG ( A 7 2 3600 20190722144513 20190715134513 8450 frc.gov. d5IDnmj9a3/n8Y9wskkWA8ssu5782JZjCdeXpyRbc/bGmBPHd0SWEvsNayDevhKtX2XGxaD0fORZ O5GKwVsBoGz9QmF5myFe3A+k/nrefp2VMRVB+8edX2Q96hiNZP9bWdaKEX1QCmsmA77vtgPENgAl JoM22s0L5qCN1lf1Vnk= )`
	RRSIG=8450 and DNSKEY=8450 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FRC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: