DNSSEC Debugger - FSAFEDS.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-23 10:06:13 UTC

Analyzing DNSSEC problems for FSAFEDS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 6450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260611000000 20260521000000 20326 . PrY674kcaqCFM9BMLlHQjBpoNN8qMK9j0/7CfsSsF9/CE4TAO8HB30AK8vHCq4B4jiD4ODo9/Y6w H0i41EMNGR5Yut23/N7sLPOB0ELQlFNbdZUHHAgqqIeU2ywNVv2iEKKd8Lf0VmmSNZIQUCYQdeyy q2xj5xZ2jAtdst7yfrYpWICKWi3d3piiN14r2e1uifNP6h8iL7f6cAMsHpNX2vw3irciB4JsnXZ0 WEZ5p0OCXmgUbXWcDohqLemW2vdSqlrgD4KXhCrvnqw70nppjsR1cZ8irJ7oNF47B6Kmeu3uCkBj CXRLt5B+0d5uJmutAvniyqKXJ353Fdd859J3Lw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to l.root-servers.net for FSAFEDS.GOV/A
	Received 618 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 618 octets ;; HEADER SECTION ;; id = 29147 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260605050000 20260523040000 54393 . JZwXv7ku3MLoqNkDMb/8zow8pcgnsrc/p7clM7UpX9lSAzZH+6e2ulIeOOKRhezdVmh4x4LYnRdU 1Rl7GOiTp5dZaf62E2/u3kSewaR3w22wj27mkpi4H4qwEGfCyh2AudqtMn02gD8oEPPghBWX5Ubv Q5BATEqEMrsBowuKcIEOD/I5DhYF7lDaQ7VCAZ6ZkGuOYRVOijMs4dgRHZ+xiLVoEG1RJSnEAD3L B6QILYwXOxTVpzrKO+zXJeiHXzPkutwPCLKr6WKClQsTZzKn2VfvguFbwPJ5o33LZ4bqALdmpw9H ABZJX1f7q5yMoqfFLBrYYPVk5AuEal2mijHFnQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 3851 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260605050000 20260523040000 54393 . JZwXv7ku3MLoqNkDMb/8zow8pcgnsrc/p7clM7UpX9lSAzZH+6e2ulIeOOKRhezdVmh4x4LYnRdU 1Rl7GOiTp5dZaf62E2/u3kSewaR3w22wj27mkpi4H4qwEGfCyh2AudqtMn02gD8oEPPghBWX5Ubv Q5BATEqEMrsBowuKcIEOD/I5DhYF7lDaQ7VCAZ6ZkGuOYRVOijMs4dgRHZ+xiLVoEG1RJSnEAD3L B6QILYwXOxTVpzrKO+zXJeiHXzPkutwPCLKr6WKClQsTZzKn2VfvguFbwPJ5o33LZ4bqALdmpw9H ABZJX1f7q5yMoqfFLBrYYPVk5AuEal2mijHFnQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 37102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260605050000 20260523040000 54393 . JZwXv7ku3MLoqNkDMb/8zow8pcgnsrc/p7clM7UpX9lSAzZH+6e2ulIeOOKRhezdVmh4x4LYnRdU 1Rl7GOiTp5dZaf62E2/u3kSewaR3w22wj27mkpi4H4qwEGfCyh2AudqtMn02gD8oEPPghBWX5Ubv Q5BATEqEMrsBowuKcIEOD/I5DhYF7lDaQ7VCAZ6ZkGuOYRVOijMs4dgRHZ+xiLVoEG1RJSnEAD3L B6QILYwXOxTVpzrKO+zXJeiHXzPkutwPCLKr6WKClQsTZzKn2VfvguFbwPJ5o33LZ4bqALdmpw9H ABZJX1f7q5yMoqfFLBrYYPVk5AuEal2mijHFnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260605050000 20260523040000 54393 . JZwXv7ku3MLoqNkDMb/8zow8pcgnsrc/p7clM7UpX9lSAzZH+6e2ulIeOOKRhezdVmh4x4LYnRdU 1Rl7GOiTp5dZaf62E2/u3kSewaR3w22wj27mkpi4H4qwEGfCyh2AudqtMn02gD8oEPPghBWX5Ubv Q5BATEqEMrsBowuKcIEOD/I5DhYF7lDaQ7VCAZ6ZkGuOYRVOijMs4dgRHZ+xiLVoEG1RJSnEAD3L B6QILYwXOxTVpzrKO+zXJeiHXzPkutwPCLKr6WKClQsTZzKn2VfvguFbwPJ5o33LZ4bqALdmpw9H ABZJX1f7q5yMoqfFLBrYYPVk5AuEal2mijHFnQ== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 26205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260629110631 20260429110631 2536 gov. Qgg1Es4+aI25z77ca9+WmIAaFsRI1wiscuQzcuuAK15yizXJ6wuX65HcUGGl9pFfsu4GhrEbjll6 Nm0OGkUh0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260629110631 20260429110631 2536 gov. Qgg1Es4+aI25z77ca9+WmIAaFsRI1wiscuQzcuuAK15yizXJ6wuX65HcUGGl9pFfsu4GhrEbjll6 Nm0OGkUh0A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for FSAFEDS.GOV/A
	Received 319 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 319 octets ;; HEADER SECTION ;; id = 43887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FSAFEDS.GOV. 10800 IN NS a1-12.akam.net. FSAFEDS.GOV. 10800 IN NS a11-67.akam.net. FSAFEDS.GOV. 10800 IN NS a14-64.akam.net. FSAFEDS.GOV. 10800 IN NS a18-65.akam.net. FSAFEDS.GOV. 10800 IN NS a20-66.akam.net. FSAFEDS.GOV. 10800 IN NS a5-67.akam.net. FSAFEDS.GOV. 3600 IN DS ( 20822 8 2 9955f009750f768ad351b237cef94932dbd3a9e877d2c7265332d67ba555c91d ) FSAFEDS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260524110613 20260522090613 35496 gov. zwb8j01xJNm9p+uu8qNC9BT70N8ItEM/mLA8zUn3dczYJHRH68lL3jVK8tOwcD9hdDYihJWrKSr4 JT6jb+yXLA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for FSAFEDS.GOV/DNSKEY
	Received 319 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 319 octets ;; HEADER SECTION ;; id = 60742 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FSAFEDS.GOV. 10800 IN NS a1-12.akam.net. FSAFEDS.GOV. 10800 IN NS a11-67.akam.net. FSAFEDS.GOV. 10800 IN NS a14-64.akam.net. FSAFEDS.GOV. 10800 IN NS a18-65.akam.net. FSAFEDS.GOV. 10800 IN NS a20-66.akam.net. FSAFEDS.GOV. 10800 IN NS a5-67.akam.net. FSAFEDS.GOV. 3600 IN DS ( 20822 8 2 9955f009750f768ad351b237cef94932dbd3a9e877d2c7265332d67ba555c91d ) FSAFEDS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260524110613 20260522090613 35496 gov. z0Qdq5u1MLmuFbRQJmJkXZNsVtkOwP4y2N2bjSwjj7KkadD5JGZqRApZAl9wQPz0lC3k/2T8lzvl jJDCd3i+jA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone FSAFEDS.GOV

FSAFEDS.GOV

	Checking DS between GOV and FSAFEDS.GOV
	Query to c.ns.gov for FSAFEDS.GOV/DS
	Received 187 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 187 octets ;; HEADER SECTION ;; id = 48628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN DS ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 3600 IN DS ( 20822 8 2 9955f009750f768ad351b237cef94932dbd3a9e877d2c7265332d67ba555c91d ) FSAFEDS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260524110613 20260522090613 35496 gov. A7etvmeOouy0bbjEhL5+BW6VApk2yF5uWSh1CDLRqSNS1W2zx3Tc1jrM8jAgJcz0lpcQDT3TVS5J RnwM3py90g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for FSAFEDS.GOV in the GOV zone
	DS=20822/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FSAFEDS.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260524110613 20260522090613 35496 gov. A7etvmeOouy0bbjEhL5+BW6VApk2yF5uWSh1CDLRqSNS1W2zx3Tc1jrM8jAgJcz0lpcQDT3TVS5J RnwM3py90g== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=20822/SHA-256 is now in the chain-of-trust
	`FSAFEDS.GOV. 3600 IN DS ( 20822 8 2 9955f009750f768ad351b237cef94932dbd3a9e877d2c7265332d67ba555c91d )`
	Query to a18-65.akam.net for FSAFEDS.GOV/DNSKEY
	Received 911 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 911 octets ;; HEADER SECTION ;; id = 45295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) FSAFEDS.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcIvbEyE16RFpXWjrXwVgYrgciDF0GiznVE+L0QoaM3YIK+cbtnFaM6sd9zVWuMMFRmrSoM9 CTii2Z4XJ3mg1daS16U7BrWka6Si1JXhp9OnRtYRNDJlrnnDkoIlqsiaN3M8b93yFT9DwtnmIHZ/ lYlGV+jbKEXR5w39BRiQHIS7fCIdxkxsOtJTI+caf/4rGBrPSCZ2V/G4oachAXP1hu2X+6T1GF8u uPjDrXT5KokvPh60v1jLoRyLGtvA2fIpAVS2JMN8YsZInjzl2aDkiORbZxYzHYFsjl3UJzeD+wwB rER3B7PKt1DLkabId+L6nVqPk57fCykv6RWosYWSJ8E= ) ; keytag 20822 FSAFEDS.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAc4g5LJIfTWm2f6J7s5ltHxE8wqxIAha/6oBcxM+gE6sEjNTNrbT9HGobywuwK2KX7r8DRbB JjyhnS0/bWAA7CIrdhL4FvEBR33wwlhsj88vJyeWpHPEfRYBBxr7YmIjyXLXSl36/i9HFkUk0qF5 M22HchX88yfu42p2wdn46/F5 ) ; keytag 25566 FSAFEDS.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAcdEsUi9HtIqLehL2DXgWGLskoMaJ/XJx9mizvv2LqwOZdUCEged06kU/zMA51JPJdbHzOvT SzR6A3th8ULVbB0r+Cbu8a2/dMZL4P3S99TQZA56gG9f28KD8o+d4xDFLvlrTHjATqN44P0c6W5n f8tuPcwKmDX3wewpnybIT/dP ) ; keytag 10299 FSAFEDS.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260526022046 20260523012046 20822 fsafeds.gov. NeAR3+ikrULqK40DtoSHjaqoiWvEGuKBELsBeWhOQawLKbMcnaWeGUv9jZnxWZDrkEAKafImPV0c OdrnHdMyPhipTBaFE7e2OzHQ22cTuD4kQvTEDCzjMzxHhdeEkF4lEFfzJMDPrPRM5muYmGmHhaKX Qp0MPSk3ESG3SPEeyx6vDQWYo4xnuiqFWRSR+Ot3nEoUP77J57Y7QXYfrHHoryePR82/CUmjysZm JA1wwqnZt+7kMJaxcUITuK0i5mV1zLMcFcce1eqGUy7Sd8V5qqSl4FEhjnI5BTrRM4Q2T3sGA45H G+euF8qEGxDBz6n6HKUN2KnKPGJ1brf/YXUCVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for FSAFEDS.GOV
	`FSAFEDS.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcIvbEyE16RFpXWjrXwVgYrgciDF0GiznVE+L0QoaM3YIK+cbtnFaM6sd9zVWuMMFRmrSoM9 CTii2Z4XJ3mg1daS16U7BrWka6Si1JXhp9OnRtYRNDJlrnnDkoIlqsiaN3M8b93yFT9DwtnmIHZ/ lYlGV+jbKEXR5w39BRiQHIS7fCIdxkxsOtJTI+caf/4rGBrPSCZ2V/G4oachAXP1hu2X+6T1GF8u uPjDrXT5KokvPh60v1jLoRyLGtvA2fIpAVS2JMN8YsZInjzl2aDkiORbZxYzHYFsjl3UJzeD+wwB rER3B7PKt1DLkabId+L6nVqPk57fCykv6RWosYWSJ8E= ) ; keytag 20822`
	`FSAFEDS.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAc4g5LJIfTWm2f6J7s5ltHxE8wqxIAha/6oBcxM+gE6sEjNTNrbT9HGobywuwK2KX7r8DRbB JjyhnS0/bWAA7CIrdhL4FvEBR33wwlhsj88vJyeWpHPEfRYBBxr7YmIjyXLXSl36/i9HFkUk0qF5 M22HchX88yfu42p2wdn46/F5 ) ; keytag 25566`
	`FSAFEDS.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAcdEsUi9HtIqLehL2DXgWGLskoMaJ/XJx9mizvv2LqwOZdUCEged06kU/zMA51JPJdbHzOvT SzR6A3th8ULVbB0r+Cbu8a2/dMZL4P3S99TQZA56gG9f28KD8o+d4xDFLvlrTHjATqN44P0c6W5n f8tuPcwKmDX3wewpnybIT/dP ) ; keytag 10299`
	DNSKEY=20822/SEP is now in the chain-of-trust
	DS=20822/SHA-256 verifies DNSKEY=20822/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`FSAFEDS.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260526022046 20260523012046 20822 fsafeds.gov. NeAR3+ikrULqK40DtoSHjaqoiWvEGuKBELsBeWhOQawLKbMcnaWeGUv9jZnxWZDrkEAKafImPV0c OdrnHdMyPhipTBaFE7e2OzHQ22cTuD4kQvTEDCzjMzxHhdeEkF4lEFfzJMDPrPRM5muYmGmHhaKX Qp0MPSk3ESG3SPEeyx6vDQWYo4xnuiqFWRSR+Ot3nEoUP77J57Y7QXYfrHHoryePR82/CUmjysZm JA1wwqnZt+7kMJaxcUITuK0i5mV1zLMcFcce1eqGUy7Sd8V5qqSl4FEhjnI5BTrRM4Q2T3sGA45H G+euF8qEGxDBz6n6HKUN2KnKPGJ1brf/YXUCVw== )`
	RRSIG=20822 and DNSKEY=20822/SEP verifies the DNSKEY RRset
	DNSKEY=25566 is now in the chain-of-trust
	DNSKEY=10299 is now in the chain-of-trust
	Query to a18-65.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 243 octets ;; HEADER SECTION ;; id = 23367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-65.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a1-12.akam.net for FSAFEDS.GOV/SOA
	Received 463 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 463 octets ;; HEADER SECTION ;; id = 46184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN SOA ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 900 IN SOA ( ns1.opm.GOV. fw-admin.opm.GOV. 2014101516 ;serial 900 ;refresh 600 ;retry 7776000 ;expire 7200 ;minimum ) FSAFEDS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260526022046 20260523012046 25566 fsafeds.gov. agUBzKc5M721W/EbLoiTlb323/xvSuYcDUpbxMa+qyPdHzP/Z5cE55uvzGjyIoLsXAKEkNjlAg+G JVwtdGVxjb5pTU9X1ZpNLEJNwDf3mLFSyVaDqKVS+Z0O5FMAwaTE3Tj4CCJqLQRy/2MoSXhcpBgo rNUrqDUTBzyYHeH9bzM= ) ;; AUTHORITY SECTION (2 records) FSAFEDS.GOV. 86400 IN NS a1-12.akam.net. FSAFEDS.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260526022046 20260523012046 25566 fsafeds.gov. I9egwzkVV78xw1SMnRjDGvKZBVevw0wWTdagfzFzBg49kpUrUJUxuE14Z766v73k0WYTw4k6+bRC KvUVUNBNB24M+OPtPrp+e1YcLgRIsNzGO8GkaWsiUGjfUPyUDum61yoKkbeh1wzReW6h2IG+DERd yEklSrXu15aELlrY6QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for FSAFEDS.GOV/SOA
	Received 463 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 463 octets ;; HEADER SECTION ;; id = 8961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN SOA ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 900 IN SOA ( ns1.opm.GOV. fw-admin.opm.GOV. 2014101516 ;serial 900 ;refresh 600 ;retry 7776000 ;expire 7200 ;minimum ) FSAFEDS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260526022046 20260523012046 25566 fsafeds.gov. agUBzKc5M721W/EbLoiTlb323/xvSuYcDUpbxMa+qyPdHzP/Z5cE55uvzGjyIoLsXAKEkNjlAg+G JVwtdGVxjb5pTU9X1ZpNLEJNwDf3mLFSyVaDqKVS+Z0O5FMAwaTE3Tj4CCJqLQRy/2MoSXhcpBgo rNUrqDUTBzyYHeH9bzM= ) ;; AUTHORITY SECTION (2 records) FSAFEDS.GOV. 86400 IN NS a1-12.akam.net. FSAFEDS.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260526022046 20260523012046 25566 fsafeds.gov. I9egwzkVV78xw1SMnRjDGvKZBVevw0wWTdagfzFzBg49kpUrUJUxuE14Z766v73k0WYTw4k6+bRC KvUVUNBNB24M+OPtPrp+e1YcLgRIsNzGO8GkaWsiUGjfUPyUDum61yoKkbeh1wzReW6h2IG+DERd yEklSrXu15aELlrY6QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-67.akam.net for FSAFEDS.GOV/SOA
	Received 463 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 463 octets ;; HEADER SECTION ;; id = 61936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN SOA ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 900 IN SOA ( ns1.opm.GOV. fw-admin.opm.GOV. 2014101516 ;serial 900 ;refresh 600 ;retry 7776000 ;expire 7200 ;minimum ) FSAFEDS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260526022046 20260523012046 25566 fsafeds.gov. agUBzKc5M721W/EbLoiTlb323/xvSuYcDUpbxMa+qyPdHzP/Z5cE55uvzGjyIoLsXAKEkNjlAg+G JVwtdGVxjb5pTU9X1ZpNLEJNwDf3mLFSyVaDqKVS+Z0O5FMAwaTE3Tj4CCJqLQRy/2MoSXhcpBgo rNUrqDUTBzyYHeH9bzM= ) ;; AUTHORITY SECTION (2 records) FSAFEDS.GOV. 86400 IN NS a1-12.akam.net. FSAFEDS.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260526022046 20260523012046 25566 fsafeds.gov. I9egwzkVV78xw1SMnRjDGvKZBVevw0wWTdagfzFzBg49kpUrUJUxuE14Z766v73k0WYTw4k6+bRC KvUVUNBNB24M+OPtPrp+e1YcLgRIsNzGO8GkaWsiUGjfUPyUDum61yoKkbeh1wzReW6h2IG+DERd yEklSrXu15aELlrY6QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a20-66.akam.net for FSAFEDS.GOV/SOA
	Received 463 bytes from 95.100.175.66
	;; Response received from [95.100.175.66] 463 octets ;; HEADER SECTION ;; id = 32529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN SOA ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 900 IN SOA ( ns1.opm.GOV. fw-admin.opm.GOV. 2014101516 ;serial 900 ;refresh 600 ;retry 7776000 ;expire 7200 ;minimum ) FSAFEDS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260526022046 20260523012046 25566 fsafeds.gov. agUBzKc5M721W/EbLoiTlb323/xvSuYcDUpbxMa+qyPdHzP/Z5cE55uvzGjyIoLsXAKEkNjlAg+G JVwtdGVxjb5pTU9X1ZpNLEJNwDf3mLFSyVaDqKVS+Z0O5FMAwaTE3Tj4CCJqLQRy/2MoSXhcpBgo rNUrqDUTBzyYHeH9bzM= ) ;; AUTHORITY SECTION (2 records) FSAFEDS.GOV. 86400 IN NS a1-12.akam.net. FSAFEDS.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260526022046 20260523012046 25566 fsafeds.gov. I9egwzkVV78xw1SMnRjDGvKZBVevw0wWTdagfzFzBg49kpUrUJUxuE14Z766v73k0WYTw4k6+bRC KvUVUNBNB24M+OPtPrp+e1YcLgRIsNzGO8GkaWsiUGjfUPyUDum61yoKkbeh1wzReW6h2IG+DERd yEklSrXu15aELlrY6QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-67.akam.net for FSAFEDS.GOV/SOA
	Received 463 bytes from 95.100.168.67
	;; Response received from [95.100.168.67] 463 octets ;; HEADER SECTION ;; id = 29919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN SOA ;; ANSWER SECTION (2 records) FSAFEDS.GOV. 900 IN SOA ( ns1.opm.GOV. fw-admin.opm.GOV. 2014101516 ;serial 900 ;refresh 600 ;retry 7776000 ;expire 7200 ;minimum ) FSAFEDS.GOV. 900 IN RRSIG ( SOA 8 2 900 20260526022046 20260523012046 25566 fsafeds.gov. agUBzKc5M721W/EbLoiTlb323/xvSuYcDUpbxMa+qyPdHzP/Z5cE55uvzGjyIoLsXAKEkNjlAg+G JVwtdGVxjb5pTU9X1ZpNLEJNwDf3mLFSyVaDqKVS+Z0O5FMAwaTE3Tj4CCJqLQRy/2MoSXhcpBgo rNUrqDUTBzyYHeH9bzM= ) ;; AUTHORITY SECTION (2 records) FSAFEDS.GOV. 86400 IN NS a1-12.akam.net. FSAFEDS.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260526022046 20260523012046 25566 fsafeds.gov. I9egwzkVV78xw1SMnRjDGvKZBVevw0wWTdagfzFzBg49kpUrUJUxuE14Z766v73k0WYTw4k6+bRC KvUVUNBNB24M+OPtPrp+e1YcLgRIsNzGO8GkaWsiUGjfUPyUDum61yoKkbeh1wzReW6h2IG+DERd yEklSrXu15aELlrY6QQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a18-65.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 172.64.152.204
	FSAFEDS.GOV A RR has value 104.18.35.52
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

FSAFEDS.GOV

	Query to a5-67.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 95.100.168.67
	;; Response received from [95.100.168.67] 243 octets ;; HEADER SECTION ;; id = 141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-67.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a5-67.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 104.18.35.52
	FSAFEDS.GOV A RR has value 172.64.152.204
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

FSAFEDS.GOV

	Query to a20-66.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 95.100.175.66
	;; Response received from [95.100.175.66] 243 octets ;; HEADER SECTION ;; id = 2348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a20-66.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a20-66.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 104.18.35.52
	FSAFEDS.GOV A RR has value 172.64.152.204
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

FSAFEDS.GOV

	Query to a1-12.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 243 octets ;; HEADER SECTION ;; id = 23768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-12.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a1-12.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 104.18.35.52
	FSAFEDS.GOV A RR has value 172.64.152.204
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

FSAFEDS.GOV

	Query to a14-64.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 243 octets ;; HEADER SECTION ;; id = 41166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a14-64.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 172.64.152.204
	FSAFEDS.GOV A RR has value 104.18.35.52
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

FSAFEDS.GOV

	Query to a11-67.akam.net for FSAFEDS.GOV/A
	Received 243 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 243 octets ;; HEADER SECTION ;; id = 55067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FSAFEDS.GOV. IN A ;; ANSWER SECTION (3 records) FSAFEDS.GOV. 300 IN A 104.18.35.52 FSAFEDS.GOV. 300 IN A 172.64.152.204 FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-67.akam.net is authoritative for FSAFEDS.GOV
	Found RRSIG signed by fsafeds.gov zone
	Query to a11-67.akam.net for FSAFEDS.GOV/A
	FSAFEDS.GOV A RR has value 104.18.35.52
	FSAFEDS.GOV A RR has value 172.64.152.204
	Found 1 RRSIGs over A RRset
	`FSAFEDS.GOV. 300 IN RRSIG ( A 8 2 300 20260526022046 20260523012046 25566 fsafeds.gov. oJm3DUUykdj4yAwKQvE60Yhv2mSSDMfqvmQYVjJjCevFzBCjipoMY7f/kUcTWKfCewjGO9WZcds5 oFFCzzZF8uO7dFEHlUV2OKGig95sEQ3bdhy/LGMasLYK/LmJc8jwQrJF8MMUvC3Nqpajzv7+339d 3uy+50gjZw6xXRw6xgs= )`
	RRSIG=25566 and DNSKEY=25566 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FSAFEDS.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: