DNSSEC Debugger

Domain Name:

Time: 2026-01-21 10:39:57 UTC

Analyzing DNSSEC problems for FTC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 6291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for FTC.GOV/A
	Received 614 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 614 octets ;; HEADER SECTION ;; id = 57087 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260203050000 20260121040000 21831 . GgQThnWecKgOJ0McqnQ0vNocF+J896MkGJy96gVxwU+sb2H2k5PN/Wo76aYHhFd4vrXQ0EFhf5JG yG33J51YT9a9EOIYJiRSRPN31v6a82EE89+pUz0w4ER9kO5TYqoPdrohuhooXAIRCBM6keFQQoRL kfGzAh34IyTc29XHgQk4xZy6tLy/4co9aQKMdyIiG6TqjHgIbkFyzjPLwROUXLRUU55eBVmh0aTI ekZVjVPULVXRsHMVeEFH7gYG/uJf+x4NKS5ksrqi1vsbYI9SwHpOBE5edJtNfe3Mmc3qNvHD5Aji tUY3ZBa1PyxZJGxqc0kExV3Tm6V20GtTNMxbag== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 616 octets ;; HEADER SECTION ;; id = 58340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260203050000 20260121040000 21831 . GgQThnWecKgOJ0McqnQ0vNocF+J896MkGJy96gVxwU+sb2H2k5PN/Wo76aYHhFd4vrXQ0EFhf5JG yG33J51YT9a9EOIYJiRSRPN31v6a82EE89+pUz0w4ER9kO5TYqoPdrohuhooXAIRCBM6keFQQoRL kfGzAh34IyTc29XHgQk4xZy6tLy/4co9aQKMdyIiG6TqjHgIbkFyzjPLwROUXLRUU55eBVmh0aTI ekZVjVPULVXRsHMVeEFH7gYG/uJf+x4NKS5ksrqi1vsbYI9SwHpOBE5edJtNfe3Mmc3qNvHD5Aji tUY3ZBa1PyxZJGxqc0kExV3Tm6V20GtTNMxbag== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 370 octets ;; HEADER SECTION ;; id = 20080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260203050000 20260121040000 21831 . GgQThnWecKgOJ0McqnQ0vNocF+J896MkGJy96gVxwU+sb2H2k5PN/Wo76aYHhFd4vrXQ0EFhf5JG yG33J51YT9a9EOIYJiRSRPN31v6a82EE89+pUz0w4ER9kO5TYqoPdrohuhooXAIRCBM6keFQQoRL kfGzAh34IyTc29XHgQk4xZy6tLy/4co9aQKMdyIiG6TqjHgIbkFyzjPLwROUXLRUU55eBVmh0aTI ekZVjVPULVXRsHMVeEFH7gYG/uJf+x4NKS5ksrqi1vsbYI9SwHpOBE5edJtNfe3Mmc3qNvHD5Aji tUY3ZBa1PyxZJGxqc0kExV3Tm6V20GtTNMxbag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260203050000 20260121040000 21831 . GgQThnWecKgOJ0McqnQ0vNocF+J896MkGJy96gVxwU+sb2H2k5PN/Wo76aYHhFd4vrXQ0EFhf5JG yG33J51YT9a9EOIYJiRSRPN31v6a82EE89+pUz0w4ER9kO5TYqoPdrohuhooXAIRCBM6keFQQoRL kfGzAh34IyTc29XHgQk4xZy6tLy/4co9aQKMdyIiG6TqjHgIbkFyzjPLwROUXLRUU55eBVmh0aTI ekZVjVPULVXRsHMVeEFH7gYG/uJf+x4NKS5ksrqi1vsbYI9SwHpOBE5edJtNfe3Mmc3qNvHD5Aji tUY3ZBa1PyxZJGxqc0kExV3Tm6V20GtTNMxbag== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 62368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260301110621 20251230110621 2536 gov. iCtKgojxRJ3aC+zRkeRtYN8ULchb9nyn0dGHPebhgcZI66aNxjbxFRdkFaPdfb7Jm2tyceq+I9oR dhCENtiufw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for FTC.GOV/A
	Received 314 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 314 octets ;; HEADER SECTION ;; id = 18498 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FTC.GOV. 10800 IN NS a1-252.akam.net. FTC.GOV. 10800 IN NS a24-67.akam.net. FTC.GOV. 10800 IN NS a26-64.akam.net. FTC.GOV. 10800 IN NS a3-65.akam.net. FTC.GOV. 10800 IN NS a6-66.akam.net. FTC.GOV. 10800 IN NS a7-67.akam.net. FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260122113957 20260120093957 35496 gov. yEV/Zgpbp1/yuuNjeB82vhTs/QftH+kHTPFU8vsU7HH4d28fOkbgPmkLyKRKERBs+pm5iu72Dcm0 fbkLqqKJpg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for FTC.GOV/DNSKEY
	Received 314 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 314 octets ;; HEADER SECTION ;; id = 61758 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FTC.GOV. 10800 IN NS a1-252.akam.net. FTC.GOV. 10800 IN NS a24-67.akam.net. FTC.GOV. 10800 IN NS a26-64.akam.net. FTC.GOV. 10800 IN NS a3-65.akam.net. FTC.GOV. 10800 IN NS a6-66.akam.net. FTC.GOV. 10800 IN NS a7-67.akam.net. FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260122113957 20260120093957 35496 gov. qhkXboID13LGdzZ4u1ASjPpmeq4OEANDAE2EbfMZXLAGSm8STddQ4LdU5I7wVQI/oJPNlrbkXFRW minol22Zsw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone FTC.GOV

FTC.GOV

	Checking DS between GOV and FTC.GOV
	Query to d.ns.gov for FTC.GOV/DS
	Received 183 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 183 octets ;; HEADER SECTION ;; id = 30784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DS ;; ANSWER SECTION (2 records) FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260122113957 20260120093957 35496 gov. G89/2+fkHKvgxWhoomqHembeKxgqCiZsJhUCpg+6GSkFbQg3Ko3qPhtGHgUr3563mf+z+N0r0XP8 a2/zH0ywcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for FTC.GOV in the GOV zone
	DS=13804/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260122113957 20260120093957 35496 gov. G89/2+fkHKvgxWhoomqHembeKxgqCiZsJhUCpg+6GSkFbQg3Ko3qPhtGHgUr3563mf+z+N0r0XP8 a2/zH0ywcg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=13804/SHA-256 is now in the chain-of-trust
	`FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d )`
	Query to a24-67.akam.net for FTC.GOV/DNSKEY
	Received 1474 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 1474 octets ;; HEADER SECTION ;; id = 17756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdRUhkSMZPXM2b80FcgjuEHK3QBqji7f1lvzneh7sdgL60SnzF/Cj8ZMm4kj+LoIiA4T8QA1 ZezYpaQW6PtaHw4hxttQUtO3246emjejU73cp0woMKFoNBxq2K1tpun74dKyUsPwLc6lGGTCvL6m r29V3BpJ9rF0tNKyLO12zdupx5JqoWwMbumR6TAh0Gp+j2u7gs9iuJ5xHe1+h+FwPTu0jrn40H+A eLylZ+Lu3q3HHYMpmswt1/+l3fA0AyvUZAh+RDBjFb/+kHO04G1UIPMB0eOW47inDcGQEoizcBS3 KFrH5w3b0XToHIK2bT7STGqM2BgqS5dXFbNp7G99Pkk= ) ; keytag 13804 FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAaUMsUqwQrlOe7qhmu4DEa1XwNjJuAERa9f+bPJ9igGjvLyhVg9uElBm/7sHjTUDv/Z+ELsv CDB8uc66iOwFaWY+06ookKA9XisT2ho/py5PaBLMy0/nJpbiVX8FsbIZrNWw+N1bIUE6aNa9Ohly 6IquweWiyLQUnuPxt2/5/VCt ) ; keytag 62031 FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcOt3kNuNH935PbfJKDqTAKfb6t9tinkNFBTgwB+TFtIeiOFTXpqE4xEdW2wMZv4BlQi5Xw+ 6HOm1ke0fFOELcglD5jfEVCTGjJ6e9IHGxrkSM9JMlUe7zR97DvSMGpb5w4dXx/5utGtxdUONa/t hV/PjDW93h65/Y9S/ffCbTOL/VV9c5DrRAUdCidpnCpMv14buwJao7Kwd6mgcNojnBTeXrwbBo3A r7MGYqaaUVGcVqla1XzThnbApcIvkLA+2cGuijHfLE3WAFHjmBIdHpSHnWx/kGrvwVvDAKKZ9A0B TEfpXste2TRfPXq4fAUpHTzJFonfBCkg2SaoijRZXKs= ) ; keytag 22015 FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAaoqH10NJysCUipv4q5VVBEc3ZpvOWUlGvVMjL1DCjVAL+E/OSKjGYmXtvZiSZU1t9DvXu8Y j7Vmpv6ChpwxDHZAHx0kcfIVbz4L05srNWDXaUCmC3GP875Z3mTuwyKQLh77YrOwEJoX33Yo2MPR 9UkUyQ5NMmJDxjmHboJNrsGh ) ; keytag 19689 FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260123224247 20260120214247 13804 ftc.gov. SvE7d4DxuWWwbt24kbXmr0FVMI+MnhOmoK8Tn4fLIF0esykjukpM5X23C9yuezAGxdE2tqi4vtde hgigbpNY7mym7Nlo+Nn0IDnV8C7tE/0WdhyS6N2oI2v0862no6IzhjChn/Ahq2yw+e0TSSZataee evm9Jbb4PhCgbGzt7HGf3jzvNYBgcTRM0PQl3TUqa/rx2EXSRINu2q0AuFTufwz9yxfBdgpvQSWg rfiXSzSLqzI31LUSSWybZ0tgt5F7VPwc20SL6To2aLBUDSUBPzj+HCoBnc+PoKcf3xiT2QbLO+tS xc9eOcV9LNm/KaFoQZ+54bDGJjONu3nWsRL9cw== ) FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260123224247 20260120214247 22015 ftc.gov. N3eSKYmr2H0V3R62a6zdWxUGeLabsZ7/2yhUQ0epAQ4Vr8XdzEys2ak75zBsTeeB0qoYXGfXHd+T fp+37f/jJY8NDowGlNFwIpmc2TkpPdwo/n002LBQYo3I1Dn/IOZ34HpeWFerq2lscpeLNUljpqGy ilQ9s9nbT5NzHzLbhaya1/hJ0VhhRmYFZwb2/qyk2bxfhc8Sreh4QGUCWuxULSSX+iep6IdxF8d0 712R5YEb4Xcfr5LbtUvDv45+dnlFamJeH5+1b7Z5HM090B1G/ut8kay+XSQMdLMRpC2WUlyqRagg d4O5mfV/qS+dcm8oBzFIo3pMTWWyJWHKFFPLbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for FTC.GOV
	`FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdRUhkSMZPXM2b80FcgjuEHK3QBqji7f1lvzneh7sdgL60SnzF/Cj8ZMm4kj+LoIiA4T8QA1 ZezYpaQW6PtaHw4hxttQUtO3246emjejU73cp0woMKFoNBxq2K1tpun74dKyUsPwLc6lGGTCvL6m r29V3BpJ9rF0tNKyLO12zdupx5JqoWwMbumR6TAh0Gp+j2u7gs9iuJ5xHe1+h+FwPTu0jrn40H+A eLylZ+Lu3q3HHYMpmswt1/+l3fA0AyvUZAh+RDBjFb/+kHO04G1UIPMB0eOW47inDcGQEoizcBS3 KFrH5w3b0XToHIK2bT7STGqM2BgqS5dXFbNp7G99Pkk= ) ; keytag 13804`
	`FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAaUMsUqwQrlOe7qhmu4DEa1XwNjJuAERa9f+bPJ9igGjvLyhVg9uElBm/7sHjTUDv/Z+ELsv CDB8uc66iOwFaWY+06ookKA9XisT2ho/py5PaBLMy0/nJpbiVX8FsbIZrNWw+N1bIUE6aNa9Ohly 6IquweWiyLQUnuPxt2/5/VCt ) ; keytag 62031`
	`FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcOt3kNuNH935PbfJKDqTAKfb6t9tinkNFBTgwB+TFtIeiOFTXpqE4xEdW2wMZv4BlQi5Xw+ 6HOm1ke0fFOELcglD5jfEVCTGjJ6e9IHGxrkSM9JMlUe7zR97DvSMGpb5w4dXx/5utGtxdUONa/t hV/PjDW93h65/Y9S/ffCbTOL/VV9c5DrRAUdCidpnCpMv14buwJao7Kwd6mgcNojnBTeXrwbBo3A r7MGYqaaUVGcVqla1XzThnbApcIvkLA+2cGuijHfLE3WAFHjmBIdHpSHnWx/kGrvwVvDAKKZ9A0B TEfpXste2TRfPXq4fAUpHTzJFonfBCkg2SaoijRZXKs= ) ; keytag 22015`
	`FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAaoqH10NJysCUipv4q5VVBEc3ZpvOWUlGvVMjL1DCjVAL+E/OSKjGYmXtvZiSZU1t9DvXu8Y j7Vmpv6ChpwxDHZAHx0kcfIVbz4L05srNWDXaUCmC3GP875Z3mTuwyKQLh77YrOwEJoX33Yo2MPR 9UkUyQ5NMmJDxjmHboJNrsGh ) ; keytag 19689`
	DNSKEY=13804/SEP is now in the chain-of-trust
	DS=13804/SHA-256 verifies DNSKEY=13804/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260123224247 20260120214247 13804 ftc.gov. SvE7d4DxuWWwbt24kbXmr0FVMI+MnhOmoK8Tn4fLIF0esykjukpM5X23C9yuezAGxdE2tqi4vtde hgigbpNY7mym7Nlo+Nn0IDnV8C7tE/0WdhyS6N2oI2v0862no6IzhjChn/Ahq2yw+e0TSSZataee evm9Jbb4PhCgbGzt7HGf3jzvNYBgcTRM0PQl3TUqa/rx2EXSRINu2q0AuFTufwz9yxfBdgpvQSWg rfiXSzSLqzI31LUSSWybZ0tgt5F7VPwc20SL6To2aLBUDSUBPzj+HCoBnc+PoKcf3xiT2QbLO+tS xc9eOcV9LNm/KaFoQZ+54bDGJjONu3nWsRL9cw== )`
	`FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260123224247 20260120214247 22015 ftc.gov. N3eSKYmr2H0V3R62a6zdWxUGeLabsZ7/2yhUQ0epAQ4Vr8XdzEys2ak75zBsTeeB0qoYXGfXHd+T fp+37f/jJY8NDowGlNFwIpmc2TkpPdwo/n002LBQYo3I1Dn/IOZ34HpeWFerq2lscpeLNUljpqGy ilQ9s9nbT5NzHzLbhaya1/hJ0VhhRmYFZwb2/qyk2bxfhc8Sreh4QGUCWuxULSSX+iep6IdxF8d0 712R5YEb4Xcfr5LbtUvDv45+dnlFamJeH5+1b7Z5HM090B1G/ut8kay+XSQMdLMRpC2WUlyqRagg d4O5mfV/qS+dcm8oBzFIo3pMTWWyJWHKFFPLbw== )`
	RRSIG=13804 and DNSKEY=13804/SEP verifies the DNSKEY RRset
	RRSIG=22015 and DNSKEY=22015/SEP verifies the DNSKEY RRset
	DNSKEY=62031 is now in the chain-of-trust
	DNSKEY=22015/SEP is now in the chain-of-trust
	DNSKEY=19689 is now in the chain-of-trust
	Query to a7-67.akam.net for FTC.GOV/A
	Received 219 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 219 octets ;; HEADER SECTION ;; id = 57063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.56.117.30 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. bplFcJ+HnCb2NSNZkH1CXEqng6PHtVle+yEY7MNtyWyC2MeXT4H8bRTcN6zKIwrLCBbSjLq3Wy/F ++ZQvdeaasTS+WTfc6ehSrE3LB7zN/0SvU79bGGutLAZs8Z/KlRBYbF1cb55HtncF5+wc/DRF5yn pF5V4tJodkSmqcxXyjo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-67.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a24-67.akam.net for FTC.GOV/SOA
	Received 558 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 558 octets ;; HEADER SECTION ;; id = 63646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051045 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260123224247 20260120214247 19689 ftc.gov. HkaLzvhDWtpf+rWSn3Yd4EJiNzXo1w/IVdcX/xqBppXro32iehwdmdsxNKgv0L9mAx9A37RHkXJa QfJlAnO25sodmg//h9eWM40AAkiyjiJgG05CPAGdgaXcxfJzhLV7DetFYSZb0qLO9W50V5GuOVVe RW5Ov6G+V9kok/Fzcqo= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260123224247 20260120214247 19689 ftc.gov. BG20F+ozXq+PZdoR8bf66+xhxGCidJc50dzu5vt5ij+pHmZOpLG3qEwmlFJlfz33qTxR/oTg8g+S KbKVbkh3aKY7FhGXiEwnL+kvVxmxDBwxmLgUwEOqHb4lXg/JLmLM/MSsvF08wSuX1WHZdT0kHpQh 7CkG6oxMHhiEt7YV1Eg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a6-66.akam.net for FTC.GOV/SOA
	Received 558 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 558 octets ;; HEADER SECTION ;; id = 38952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051045 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260123224247 20260120214247 19689 ftc.gov. HkaLzvhDWtpf+rWSn3Yd4EJiNzXo1w/IVdcX/xqBppXro32iehwdmdsxNKgv0L9mAx9A37RHkXJa QfJlAnO25sodmg//h9eWM40AAkiyjiJgG05CPAGdgaXcxfJzhLV7DetFYSZb0qLO9W50V5GuOVVe RW5Ov6G+V9kok/Fzcqo= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260123224247 20260120214247 19689 ftc.gov. BG20F+ozXq+PZdoR8bf66+xhxGCidJc50dzu5vt5ij+pHmZOpLG3qEwmlFJlfz33qTxR/oTg8g+S KbKVbkh3aKY7FhGXiEwnL+kvVxmxDBwxmLgUwEOqHb4lXg/JLmLM/MSsvF08wSuX1WHZdT0kHpQh 7CkG6oxMHhiEt7YV1Eg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-64.akam.net for FTC.GOV/SOA
	Received 558 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 558 octets ;; HEADER SECTION ;; id = 58042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051045 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260123224247 20260120214247 19689 ftc.gov. HkaLzvhDWtpf+rWSn3Yd4EJiNzXo1w/IVdcX/xqBppXro32iehwdmdsxNKgv0L9mAx9A37RHkXJa QfJlAnO25sodmg//h9eWM40AAkiyjiJgG05CPAGdgaXcxfJzhLV7DetFYSZb0qLO9W50V5GuOVVe RW5Ov6G+V9kok/Fzcqo= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260123224247 20260120214247 19689 ftc.gov. BG20F+ozXq+PZdoR8bf66+xhxGCidJc50dzu5vt5ij+pHmZOpLG3qEwmlFJlfz33qTxR/oTg8g+S KbKVbkh3aKY7FhGXiEwnL+kvVxmxDBwxmLgUwEOqHb4lXg/JLmLM/MSsvF08wSuX1WHZdT0kHpQh 7CkG6oxMHhiEt7YV1Eg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-252.akam.net for FTC.GOV/SOA
	Received 558 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 558 octets ;; HEADER SECTION ;; id = 3520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051045 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260123224247 20260120214247 19689 ftc.gov. HkaLzvhDWtpf+rWSn3Yd4EJiNzXo1w/IVdcX/xqBppXro32iehwdmdsxNKgv0L9mAx9A37RHkXJa QfJlAnO25sodmg//h9eWM40AAkiyjiJgG05CPAGdgaXcxfJzhLV7DetFYSZb0qLO9W50V5GuOVVe RW5Ov6G+V9kok/Fzcqo= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260123224247 20260120214247 19689 ftc.gov. BG20F+ozXq+PZdoR8bf66+xhxGCidJc50dzu5vt5ij+pHmZOpLG3qEwmlFJlfz33qTxR/oTg8g+S KbKVbkh3aKY7FhGXiEwnL+kvVxmxDBwxmLgUwEOqHb4lXg/JLmLM/MSsvF08wSuX1WHZdT0kHpQh 7CkG6oxMHhiEt7YV1Eg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-65.akam.net for FTC.GOV/SOA
	Received 558 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 558 octets ;; HEADER SECTION ;; id = 27650 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051045 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260123224247 20260120214247 19689 ftc.gov. HkaLzvhDWtpf+rWSn3Yd4EJiNzXo1w/IVdcX/xqBppXro32iehwdmdsxNKgv0L9mAx9A37RHkXJa QfJlAnO25sodmg//h9eWM40AAkiyjiJgG05CPAGdgaXcxfJzhLV7DetFYSZb0qLO9W50V5GuOVVe RW5Ov6G+V9kok/Fzcqo= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260123224247 20260120214247 19689 ftc.gov. BG20F+ozXq+PZdoR8bf66+xhxGCidJc50dzu5vt5ij+pHmZOpLG3qEwmlFJlfz33qTxR/oTg8g+S KbKVbkh3aKY7FhGXiEwnL+kvVxmxDBwxmLgUwEOqHb4lXg/JLmLM/MSsvF08wSuX1WHZdT0kHpQh 7CkG6oxMHhiEt7YV1Eg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-67.akam.net for FTC.GOV/A
	Received 219 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 219 octets ;; HEADER SECTION ;; id = 48305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.213.92.111
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

FTC.GOV

	Query to a3-65.akam.net for FTC.GOV/A
	Received 219 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 219 octets ;; HEADER SECTION ;; id = 34689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-65.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a3-65.akam.net for FTC.GOV/A
	Received 219 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 219 octets ;; HEADER SECTION ;; id = 29484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.213.92.111
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

FTC.GOV

	Query to a1-252.akam.net for FTC.GOV/A
	Received 219 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 219 octets ;; HEADER SECTION ;; id = 64153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.56.117.30 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. bplFcJ+HnCb2NSNZkH1CXEqng6PHtVle+yEY7MNtyWyC2MeXT4H8bRTcN6zKIwrLCBbSjLq3Wy/F ++ZQvdeaasTS+WTfc6ehSrE3LB7zN/0SvU79bGGutLAZs8Z/KlRBYbF1cb55HtncF5+wc/DRF5yn pF5V4tJodkSmqcxXyjo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-252.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a1-252.akam.net for FTC.GOV/A
	Received 219 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 219 octets ;; HEADER SECTION ;; id = 60387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.213.92.111
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

FTC.GOV

	Query to a26-64.akam.net for FTC.GOV/A
	Received 219 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 219 octets ;; HEADER SECTION ;; id = 17044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.85.22.233 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. bTZpF70kUOaZDr627sLJ33a9mNpfKLFZOdSu2TMX53L1c9yt+IpopE03c5KMTH/jZ0Q9cpW4ueBW OivUmJedIIsZc2VZQSWD2V4MbsXY22//U3LcwfheFTRmFuxs95G2QauRzPFuRhI2Jy+fVs1PrNvq iVeBcMcCAXkF3m3/L2s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-64.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a26-64.akam.net for FTC.GOV/A
	Received 219 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 219 octets ;; HEADER SECTION ;; id = 12246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.85.22.233 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. bTZpF70kUOaZDr627sLJ33a9mNpfKLFZOdSu2TMX53L1c9yt+IpopE03c5KMTH/jZ0Q9cpW4ueBW OivUmJedIIsZc2VZQSWD2V4MbsXY22//U3LcwfheFTRmFuxs95G2QauRzPFuRhI2Jy+fVs1PrNvq iVeBcMcCAXkF3m3/L2s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 104.85.22.233
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. bTZpF70kUOaZDr627sLJ33a9mNpfKLFZOdSu2TMX53L1c9yt+IpopE03c5KMTH/jZ0Q9cpW4ueBW OivUmJedIIsZc2VZQSWD2V4MbsXY22//U3LcwfheFTRmFuxs95G2QauRzPFuRhI2Jy+fVs1PrNvq iVeBcMcCAXkF3m3/L2s= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

FTC.GOV

	Query to a6-66.akam.net for FTC.GOV/A
	Received 219 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 219 octets ;; HEADER SECTION ;; id = 54316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-66.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a6-66.akam.net for FTC.GOV/A
	Received 219 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 219 octets ;; HEADER SECTION ;; id = 4224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.213.92.111 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.213.92.111
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. pH2iPTHSilRrFvX8Jr5HIPHzjDIEh127+zZYgMq0UR1BqZSdBapOs579pi02+DTSwqupu5pJo+t1 hdo3L5k47+RTptUoe+oyy076ID+Pd521CJb3rIyuehn9CPoZLDSjoe14Z9B1sxXCHUIIPsfDwZaE BzMC7EK3H4djRMcQvec= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

FTC.GOV

	Query to a24-67.akam.net for FTC.GOV/A
	Received 219 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 219 octets ;; HEADER SECTION ;; id = 53660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.54.7.137 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. TxP7CGhwxT6KkpakBarycvgnxmkiqZQryUxPzfY/6HcqQaSSGLHONsTUjH1qtr6awbTcq6sfNnuE acMJdn1eXBw15zyC5xmwPA8izMacLhemvYsm56xMm3jJkZ2NAbLIhvYTfGkWV7sxO7v8ZtvoqV5/ VLnkA1UYINs7Oa8+BOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-67.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a24-67.akam.net for FTC.GOV/A
	Received 219 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 219 octets ;; HEADER SECTION ;; id = 28604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.54.7.137 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. TxP7CGhwxT6KkpakBarycvgnxmkiqZQryUxPzfY/6HcqQaSSGLHONsTUjH1qtr6awbTcq6sfNnuE acMJdn1eXBw15zyC5xmwPA8izMacLhemvYsm56xMm3jJkZ2NAbLIhvYTfGkWV7sxO7v8ZtvoqV5/ VLnkA1UYINs7Oa8+BOA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.54.7.137
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260123224247 20260120214247 19689 ftc.gov. TxP7CGhwxT6KkpakBarycvgnxmkiqZQryUxPzfY/6HcqQaSSGLHONsTUjH1qtr6awbTcq6sfNnuE acMJdn1eXBw15zyC5xmwPA8izMacLhemvYsm56xMm3jJkZ2NAbLIhvYTfGkWV7sxO7v8ZtvoqV5/ VLnkA1UYINs7Oa8+BOA= )`
	RRSIG=19689 and DNSKEY=19689 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FTC.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: