DNSSEC Debugger

Domain Name:

Time: 2026-02-04 11:51:50 UTC

Analyzing DNSSEC problems for FTC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 53278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for FTC.GOV/A
	Received 620 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 620 octets ;; HEADER SECTION ;; id = 37480 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260217050000 20260204040000 21831 . CelJDHLGGPgBStNVGYWSb3AuYLCpg8LDElEUZg2iiOlmFh1rHlzfL+cLO9tx7v6Ovu9smEBx5Sgg clLpwFhStPVYc9xRUKcOuVV1bvsc78yug+k/+F/6ceKVK8eZADowVHna4/E2HTxCza19KYR6nC3/ /xeys0ZfyxA93+FV67uQIbAqkfWJnFA4C3T3V+zRkPnmveZCqLDjpxOA3N6ZYVHzc/BWcbNfp633 xi7/8R316rqxkpgNiTxjBXBMX8twxe9JTzAO4x+2I8Ahney1oE39x0TX+7UHhPwpE5AazHlC4xvy qeiefpQFnRvbD+xNqMEdHSkMxMl5UQzd89N76g== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 616 octets ;; HEADER SECTION ;; id = 6316 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260217050000 20260204040000 21831 . CelJDHLGGPgBStNVGYWSb3AuYLCpg8LDElEUZg2iiOlmFh1rHlzfL+cLO9tx7v6Ovu9smEBx5Sgg clLpwFhStPVYc9xRUKcOuVV1bvsc78yug+k/+F/6ceKVK8eZADowVHna4/E2HTxCza19KYR6nC3/ /xeys0ZfyxA93+FV67uQIbAqkfWJnFA4C3T3V+zRkPnmveZCqLDjpxOA3N6ZYVHzc/BWcbNfp633 xi7/8R316rqxkpgNiTxjBXBMX8twxe9JTzAO4x+2I8Ahney1oE39x0TX+7UHhPwpE5AazHlC4xvy qeiefpQFnRvbD+xNqMEdHSkMxMl5UQzd89N76g== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 27597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260217050000 20260204040000 21831 . CelJDHLGGPgBStNVGYWSb3AuYLCpg8LDElEUZg2iiOlmFh1rHlzfL+cLO9tx7v6Ovu9smEBx5Sgg clLpwFhStPVYc9xRUKcOuVV1bvsc78yug+k/+F/6ceKVK8eZADowVHna4/E2HTxCza19KYR6nC3/ /xeys0ZfyxA93+FV67uQIbAqkfWJnFA4C3T3V+zRkPnmveZCqLDjpxOA3N6ZYVHzc/BWcbNfp633 xi7/8R316rqxkpgNiTxjBXBMX8twxe9JTzAO4x+2I8Ahney1oE39x0TX+7UHhPwpE5AazHlC4xvy qeiefpQFnRvbD+xNqMEdHSkMxMl5UQzd89N76g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260217050000 20260204040000 21831 . CelJDHLGGPgBStNVGYWSb3AuYLCpg8LDElEUZg2iiOlmFh1rHlzfL+cLO9tx7v6Ovu9smEBx5Sgg clLpwFhStPVYc9xRUKcOuVV1bvsc78yug+k/+F/6ceKVK8eZADowVHna4/E2HTxCza19KYR6nC3/ /xeys0ZfyxA93+FV67uQIbAqkfWJnFA4C3T3V+zRkPnmveZCqLDjpxOA3N6ZYVHzc/BWcbNfp633 xi7/8R316rqxkpgNiTxjBXBMX8twxe9JTzAO4x+2I8Ahney1oE39x0TX+7UHhPwpE5AazHlC4xvy qeiefpQFnRvbD+xNqMEdHSkMxMl5UQzd89N76g== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 56756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for FTC.GOV/A
	Received 314 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 314 octets ;; HEADER SECTION ;; id = 3871 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FTC.GOV. 10800 IN NS a1-252.akam.net. FTC.GOV. 10800 IN NS a24-67.akam.net. FTC.GOV. 10800 IN NS a26-64.akam.net. FTC.GOV. 10800 IN NS a3-65.akam.net. FTC.GOV. 10800 IN NS a6-66.akam.net. FTC.GOV. 10800 IN NS a7-67.akam.net. FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260205125151 20260203105151 35496 gov. CX+olVow4bePDimzIvFl/MnM7D6zqYBDu50R1dkAzlnhWKCupKNFLq89VBOndCzXM8TVE8zAaAtL lMdr7OkEQA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for FTC.GOV/DNSKEY
	Received 314 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 314 octets ;; HEADER SECTION ;; id = 11787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) FTC.GOV. 10800 IN NS a1-252.akam.net. FTC.GOV. 10800 IN NS a24-67.akam.net. FTC.GOV. 10800 IN NS a26-64.akam.net. FTC.GOV. 10800 IN NS a3-65.akam.net. FTC.GOV. 10800 IN NS a6-66.akam.net. FTC.GOV. 10800 IN NS a7-67.akam.net. FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260205125151 20260203105151 35496 gov. yy5XEH+7sVMRrKZp9gHsIQ9VY+JeXAvPbJcCAYqrp/cLHV0Nzd1fGCGpfW38ZrHc1sJTgdGS1Gx5 pgLykFEFdw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone FTC.GOV

FTC.GOV

	Checking DS between GOV and FTC.GOV
	Query to b.ns.gov for FTC.GOV/DS
	Received 183 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 183 octets ;; HEADER SECTION ;; id = 33325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DS ;; ANSWER SECTION (2 records) FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d ) FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260205125151 20260203105151 35496 gov. FEF1gHnDiYQoezDdQnpaQsJZQMV/ZVeRLcr9mu8hzMovnz/peRhlTobA411b9ZeskwAsCBM3PKHB lrneb8PS2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for FTC.GOV in the GOV zone
	DS=13804/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FTC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260205125151 20260203105151 35496 gov. FEF1gHnDiYQoezDdQnpaQsJZQMV/ZVeRLcr9mu8hzMovnz/peRhlTobA411b9ZeskwAsCBM3PKHB lrneb8PS2w== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=13804/SHA-256 is now in the chain-of-trust
	`FTC.GOV. 3600 IN DS ( 13804 8 2 98d36c6da49a5432ab7b3d79122f390e039ae52ccd1100327152379a67e2c94d )`
	Query to a3-65.akam.net for FTC.GOV/DNSKEY
	Received 1474 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 1474 octets ;; HEADER SECTION ;; id = 7127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcOt3kNuNH935PbfJKDqTAKfb6t9tinkNFBTgwB+TFtIeiOFTXpqE4xEdW2wMZv4BlQi5Xw+ 6HOm1ke0fFOELcglD5jfEVCTGjJ6e9IHGxrkSM9JMlUe7zR97DvSMGpb5w4dXx/5utGtxdUONa/t hV/PjDW93h65/Y9S/ffCbTOL/VV9c5DrRAUdCidpnCpMv14buwJao7Kwd6mgcNojnBTeXrwbBo3A r7MGYqaaUVGcVqla1XzThnbApcIvkLA+2cGuijHfLE3WAFHjmBIdHpSHnWx/kGrvwVvDAKKZ9A0B TEfpXste2TRfPXq4fAUpHTzJFonfBCkg2SaoijRZXKs= ) ; keytag 22015 FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdRUhkSMZPXM2b80FcgjuEHK3QBqji7f1lvzneh7sdgL60SnzF/Cj8ZMm4kj+LoIiA4T8QA1 ZezYpaQW6PtaHw4hxttQUtO3246emjejU73cp0woMKFoNBxq2K1tpun74dKyUsPwLc6lGGTCvL6m r29V3BpJ9rF0tNKyLO12zdupx5JqoWwMbumR6TAh0Gp+j2u7gs9iuJ5xHe1+h+FwPTu0jrn40H+A eLylZ+Lu3q3HHYMpmswt1/+l3fA0AyvUZAh+RDBjFb/+kHO04G1UIPMB0eOW47inDcGQEoizcBS3 KFrH5w3b0XToHIK2bT7STGqM2BgqS5dXFbNp7G99Pkk= ) ; keytag 13804 FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAZ5FtMAEhKNDogTtNY3pYE1eXarycscv4fHpmIaQsgZwbfXfKJ8vNusfN1xEfGlSlAKAvK2Q bL/CS2cWGM4Jr1Zn1O/PR7I4YtKo23brHJCB9gQ661qH3JlDhvDAV4oiGyhTaLEQwqDK5G99lEUa uXrLVna/mAZtbkUqxbnk0uGj ) ; keytag 31818 FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAeRX9lB5Gz7vzX4cM0JlQ4ChOjVavpiPXVJsU7E5SG74E3GtrQCnmwtFLt2kkuBeb7qsQGwU oljXgQWtb7nw2xl+8taqJ9orTivwzy37B1hT/J9ZOA1vp7hWYZK18siVtarr+vapCbkK4HLoG2FP Ci6GCAZn8BDjLGI8VhyGLQ5P ) ; keytag 30111 FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260206224248 20260203214248 13804 ftc.gov. Amu4gl9gj3u4ssquWdtdhh6gykl+tWLR3PXPZ0FdYAnvtGZiJTr/o5bWu9DZWqjdjeQUzjfhLsBW 3Zg390mNz4M+BsWFuS64KaAj+y36qD2x28/udbcYQ3eBkUZ0adGG7I6X475Cj2KLGi4CMrSgQonK 3UPDazJQpzC4U9wPJI3PkKWuEOup+FlYmIlaOA/snYIOElhXo8TJJEgd9Fv2/AUjVZrelWHoTEV+ Sd8mhLoVv3CqPgq6Oi1y3zQn14MjFfQDP2srOK3W1B3eGJ+9eEymvM61spinO+mVJhZjiOXWve/j 72UWZiAal+zMYsePeeBX6AsJyP8kZP/57pPYWg== ) FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260206224248 20260203214248 22015 ftc.gov. VMS9pS+amBUIe/C1WOWOTS/SvMg4bDG4eDCq3LaCt2swl6tA4CF/SXEigJftZ+2/TUq/nHj6op1y HHRpJ+0o5e9WGB0KHJCblY8brKnzlvgX+gbr3m9b49X5S80miIJuMseYG53wF1V3bIpOgYevSlZb tsDjTo5e/mKz0Q7TyzDKUitSg55fdBYBUXDXp1v0r3EpkTMYpQHwd225sh3yvJV9Uolc56BWiz2Y O6Oz460Mg8+AQRs1lOyFm4IjLzCZdythCagu9zPslTLh6lfZ4WU7E38x4swVuaRbod2sHQLUqqBJ fMUu985X2GMsc9lVIvr7LyeNBnYurMgR1hKevQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for FTC.GOV
	`FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAcOt3kNuNH935PbfJKDqTAKfb6t9tinkNFBTgwB+TFtIeiOFTXpqE4xEdW2wMZv4BlQi5Xw+ 6HOm1ke0fFOELcglD5jfEVCTGjJ6e9IHGxrkSM9JMlUe7zR97DvSMGpb5w4dXx/5utGtxdUONa/t hV/PjDW93h65/Y9S/ffCbTOL/VV9c5DrRAUdCidpnCpMv14buwJao7Kwd6mgcNojnBTeXrwbBo3A r7MGYqaaUVGcVqla1XzThnbApcIvkLA+2cGuijHfLE3WAFHjmBIdHpSHnWx/kGrvwVvDAKKZ9A0B TEfpXste2TRfPXq4fAUpHTzJFonfBCkg2SaoijRZXKs= ) ; keytag 22015`
	`FTC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAdRUhkSMZPXM2b80FcgjuEHK3QBqji7f1lvzneh7sdgL60SnzF/Cj8ZMm4kj+LoIiA4T8QA1 ZezYpaQW6PtaHw4hxttQUtO3246emjejU73cp0woMKFoNBxq2K1tpun74dKyUsPwLc6lGGTCvL6m r29V3BpJ9rF0tNKyLO12zdupx5JqoWwMbumR6TAh0Gp+j2u7gs9iuJ5xHe1+h+FwPTu0jrn40H+A eLylZ+Lu3q3HHYMpmswt1/+l3fA0AyvUZAh+RDBjFb/+kHO04G1UIPMB0eOW47inDcGQEoizcBS3 KFrH5w3b0XToHIK2bT7STGqM2BgqS5dXFbNp7G99Pkk= ) ; keytag 13804`
	`FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAZ5FtMAEhKNDogTtNY3pYE1eXarycscv4fHpmIaQsgZwbfXfKJ8vNusfN1xEfGlSlAKAvK2Q bL/CS2cWGM4Jr1Zn1O/PR7I4YtKo23brHJCB9gQ661qH3JlDhvDAV4oiGyhTaLEQwqDK5G99lEUa uXrLVna/mAZtbkUqxbnk0uGj ) ; keytag 31818`
	`FTC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAeRX9lB5Gz7vzX4cM0JlQ4ChOjVavpiPXVJsU7E5SG74E3GtrQCnmwtFLt2kkuBeb7qsQGwU oljXgQWtb7nw2xl+8taqJ9orTivwzy37B1hT/J9ZOA1vp7hWYZK18siVtarr+vapCbkK4HLoG2FP Ci6GCAZn8BDjLGI8VhyGLQ5P ) ; keytag 30111`
	DNSKEY=13804/SEP is now in the chain-of-trust
	DS=13804/SHA-256 verifies DNSKEY=13804/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260206224248 20260203214248 13804 ftc.gov. Amu4gl9gj3u4ssquWdtdhh6gykl+tWLR3PXPZ0FdYAnvtGZiJTr/o5bWu9DZWqjdjeQUzjfhLsBW 3Zg390mNz4M+BsWFuS64KaAj+y36qD2x28/udbcYQ3eBkUZ0adGG7I6X475Cj2KLGi4CMrSgQonK 3UPDazJQpzC4U9wPJI3PkKWuEOup+FlYmIlaOA/snYIOElhXo8TJJEgd9Fv2/AUjVZrelWHoTEV+ Sd8mhLoVv3CqPgq6Oi1y3zQn14MjFfQDP2srOK3W1B3eGJ+9eEymvM61spinO+mVJhZjiOXWve/j 72UWZiAal+zMYsePeeBX6AsJyP8kZP/57pPYWg== )`
	`FTC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260206224248 20260203214248 22015 ftc.gov. VMS9pS+amBUIe/C1WOWOTS/SvMg4bDG4eDCq3LaCt2swl6tA4CF/SXEigJftZ+2/TUq/nHj6op1y HHRpJ+0o5e9WGB0KHJCblY8brKnzlvgX+gbr3m9b49X5S80miIJuMseYG53wF1V3bIpOgYevSlZb tsDjTo5e/mKz0Q7TyzDKUitSg55fdBYBUXDXp1v0r3EpkTMYpQHwd225sh3yvJV9Uolc56BWiz2Y O6Oz460Mg8+AQRs1lOyFm4IjLzCZdythCagu9zPslTLh6lfZ4WU7E38x4swVuaRbod2sHQLUqqBJ fMUu985X2GMsc9lVIvr7LyeNBnYurMgR1hKevQ== )`
	RRSIG=13804 and DNSKEY=13804/SEP verifies the DNSKEY RRset
	RRSIG=22015 and DNSKEY=22015/SEP verifies the DNSKEY RRset
	DNSKEY=22015/SEP is now in the chain-of-trust
	DNSKEY=31818 is now in the chain-of-trust
	DNSKEY=30111 is now in the chain-of-trust
	Query to a3-65.akam.net for FTC.GOV/A
	Received 219 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 219 octets ;; HEADER SECTION ;; id = 7389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 2.19.140.161 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. vFn5x2EEEhpZmV0u3WgZzGNTuk482JWy1wbCiUlOLNFLZxwwbjkdVgBB4gNBnWf+pURBVdYiyklA f2AG+NIHMx8YrPH0zhQjG9KtSL8vCS7TTUcy0jul8j0b0WpjYB6fbJCWgIWP0nHHlg2pU2eFtKz1 mWMn+Kl2SOVPjPbWe+E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-65.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a24-67.akam.net for FTC.GOV/SOA
	Received 558 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 558 octets ;; HEADER SECTION ;; id = 64016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051046 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260206224248 20260203214248 30111 ftc.gov. U3JGkg0p3H8Nb6KhrLHpD3TfkWnl7PN18wGV3TlsSjKW8hCdKbG3onyI2Z6Uwk9juVm3e+QOc66x 1I4JLUTVLJBxsH1iCwKfSCDqYw0UyWJb177JlAxLuZzXcLn9PiAv/mFDxaeOJL94lvafydeoL3ZS s2A/DOgwNno/9Sr9fvM= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260206224248 20260203214248 30111 ftc.gov. d+AdufVl2lJeVQrfkVo3uZlHajbFQuXc5KRm2SX+5EgVn17KtiYl4Mc2FMsgLaQIu81pp1wvyYfz mYebjl0vpyrarf3VCzSjSenzC5mbeP3tm8hqRdTTkLua07cFlmQo9IexhP8Lpuns29mZNzZ8Dkia 9DuU8HH35G7cVfN7xO4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a6-66.akam.net for FTC.GOV/SOA
	Received 558 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 558 octets ;; HEADER SECTION ;; id = 6669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051046 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260206224248 20260203214248 30111 ftc.gov. U3JGkg0p3H8Nb6KhrLHpD3TfkWnl7PN18wGV3TlsSjKW8hCdKbG3onyI2Z6Uwk9juVm3e+QOc66x 1I4JLUTVLJBxsH1iCwKfSCDqYw0UyWJb177JlAxLuZzXcLn9PiAv/mFDxaeOJL94lvafydeoL3ZS s2A/DOgwNno/9Sr9fvM= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260206224248 20260203214248 30111 ftc.gov. d+AdufVl2lJeVQrfkVo3uZlHajbFQuXc5KRm2SX+5EgVn17KtiYl4Mc2FMsgLaQIu81pp1wvyYfz mYebjl0vpyrarf3VCzSjSenzC5mbeP3tm8hqRdTTkLua07cFlmQo9IexhP8Lpuns29mZNzZ8Dkia 9DuU8HH35G7cVfN7xO4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-64.akam.net for FTC.GOV/SOA
	Received 558 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 558 octets ;; HEADER SECTION ;; id = 46208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051046 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260206224248 20260203214248 30111 ftc.gov. U3JGkg0p3H8Nb6KhrLHpD3TfkWnl7PN18wGV3TlsSjKW8hCdKbG3onyI2Z6Uwk9juVm3e+QOc66x 1I4JLUTVLJBxsH1iCwKfSCDqYw0UyWJb177JlAxLuZzXcLn9PiAv/mFDxaeOJL94lvafydeoL3ZS s2A/DOgwNno/9Sr9fvM= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260206224248 20260203214248 30111 ftc.gov. d+AdufVl2lJeVQrfkVo3uZlHajbFQuXc5KRm2SX+5EgVn17KtiYl4Mc2FMsgLaQIu81pp1wvyYfz mYebjl0vpyrarf3VCzSjSenzC5mbeP3tm8hqRdTTkLua07cFlmQo9IexhP8Lpuns29mZNzZ8Dkia 9DuU8HH35G7cVfN7xO4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-252.akam.net for FTC.GOV/SOA
	Received 558 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 558 octets ;; HEADER SECTION ;; id = 54002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051046 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260206224248 20260203214248 30111 ftc.gov. U3JGkg0p3H8Nb6KhrLHpD3TfkWnl7PN18wGV3TlsSjKW8hCdKbG3onyI2Z6Uwk9juVm3e+QOc66x 1I4JLUTVLJBxsH1iCwKfSCDqYw0UyWJb177JlAxLuZzXcLn9PiAv/mFDxaeOJL94lvafydeoL3ZS s2A/DOgwNno/9Sr9fvM= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260206224248 20260203214248 30111 ftc.gov. d+AdufVl2lJeVQrfkVo3uZlHajbFQuXc5KRm2SX+5EgVn17KtiYl4Mc2FMsgLaQIu81pp1wvyYfz mYebjl0vpyrarf3VCzSjSenzC5mbeP3tm8hqRdTTkLua07cFlmQo9IexhP8Lpuns29mZNzZ8Dkia 9DuU8HH35G7cVfN7xO4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-67.akam.net for FTC.GOV/SOA
	Received 558 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 558 octets ;; HEADER SECTION ;; id = 54304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN SOA ;; ANSWER SECTION (2 records) FTC.GOV. 300 IN SOA ( a3-65.akam.net. hostmaster.akamai.com. 2018051046 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) FTC.GOV. 300 IN RRSIG ( SOA 8 2 300 20260206224248 20260203214248 30111 ftc.gov. U3JGkg0p3H8Nb6KhrLHpD3TfkWnl7PN18wGV3TlsSjKW8hCdKbG3onyI2Z6Uwk9juVm3e+QOc66x 1I4JLUTVLJBxsH1iCwKfSCDqYw0UyWJb177JlAxLuZzXcLn9PiAv/mFDxaeOJL94lvafydeoL3ZS s2A/DOgwNno/9Sr9fvM= ) ;; AUTHORITY SECTION (7 records) FTC.GOV. 300 IN NS a26-64.akam.net. FTC.GOV. 300 IN NS a6-66.akam.net. FTC.GOV. 300 IN NS a1-252.akam.net. FTC.GOV. 300 IN NS a24-67.akam.net. FTC.GOV. 300 IN NS a3-65.akam.net. FTC.GOV. 300 IN NS a7-67.akam.net. FTC.GOV. 300 IN RRSIG ( NS 8 2 300 20260206224248 20260203214248 30111 ftc.gov. d+AdufVl2lJeVQrfkVo3uZlHajbFQuXc5KRm2SX+5EgVn17KtiYl4Mc2FMsgLaQIu81pp1wvyYfz mYebjl0vpyrarf3VCzSjSenzC5mbeP3tm8hqRdTTkLua07cFlmQo9IexhP8Lpuns29mZNzZ8Dkia 9DuU8HH35G7cVfN7xO4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-65.akam.net for FTC.GOV/A
	Received 219 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 219 octets ;; HEADER SECTION ;; id = 34849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.86.82.19 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 104.86.82.19
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

FTC.GOV

	Query to a6-66.akam.net for FTC.GOV/A
	Received 219 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 219 octets ;; HEADER SECTION ;; id = 24287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.86.82.19 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a6-66.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a6-66.akam.net for FTC.GOV/A
	Received 219 bytes from 23.211.133.66
	;; Response received from [23.211.133.66] 219 octets ;; HEADER SECTION ;; id = 17766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.86.82.19 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 104.86.82.19
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

FTC.GOV

	Query to a7-67.akam.net for FTC.GOV/A
	Received 219 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 219 octets ;; HEADER SECTION ;; id = 48712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.196.125.227 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. GLU1nlSJ8Jyl4QYtAwvXvJhLM7HJuUwP+0r5VKhcg3EKHsXjx1NWS4140PfFUEnEmPdgu+DhqliA gmhjRqcYYrVxatgoNJ0m0XdNFn1dNFj8H5zM4lrmapelRrYxoiYvwPwBzkAxy73WqBQgwUJ7auhH VhHuAkq6+qYmLPSM8qw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7-67.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a7-67.akam.net for FTC.GOV/A
	Received 219 bytes from 23.61.199.67
	;; Response received from [23.61.199.67] 219 octets ;; HEADER SECTION ;; id = 21783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 104.86.82.19 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 104.86.82.19
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. 14S3jTi46LEYYMUBJrdjjY3dVi8l+IJI3MPzcSNc+ToDoc5u/LGsQY71HpMwdSXBZ1onNM3hxK7/ TPEOEOmZdXRnCsOIbp7wYOu88vXOL7d/0QsDPZnEYIIgK68dmAtvxZfge0NfZd9ZP32PxqiKldpl H58Y/+wEzHGi/xzCmLg= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

FTC.GOV

	Query to a24-67.akam.net for FTC.GOV/A
	Received 219 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 219 octets ;; HEADER SECTION ;; id = 49915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 69.192.25.103 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. klD3r+H1630RlVtJ4pyQACXTqssZuEriVufsD0/aIoo6SXVEEgu7WZkDwAm8aJIqm2+mJL8NYlmk snWENTLBOr40hd4zYwKp1UQAhQfxLU5Ej3i/7kdpv84RG7iKhzdnYuszgFRFmLTIueGawgcFRg5Y WqnjlN+b+KbuA/mFuVw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a24-67.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a24-67.akam.net for FTC.GOV/A
	Received 219 bytes from 2.16.130.67
	;; Response received from [2.16.130.67] 219 octets ;; HEADER SECTION ;; id = 49066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 69.192.25.103 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. klD3r+H1630RlVtJ4pyQACXTqssZuEriVufsD0/aIoo6SXVEEgu7WZkDwAm8aJIqm2+mJL8NYlmk snWENTLBOr40hd4zYwKp1UQAhQfxLU5Ej3i/7kdpv84RG7iKhzdnYuszgFRFmLTIueGawgcFRg5Y WqnjlN+b+KbuA/mFuVw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 69.192.25.103
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. klD3r+H1630RlVtJ4pyQACXTqssZuEriVufsD0/aIoo6SXVEEgu7WZkDwAm8aJIqm2+mJL8NYlmk snWENTLBOr40hd4zYwKp1UQAhQfxLU5Ej3i/7kdpv84RG7iKhzdnYuszgFRFmLTIueGawgcFRg5Y WqnjlN+b+KbuA/mFuVw= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

FTC.GOV

	Query to a26-64.akam.net for FTC.GOV/A
	Received 219 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 219 octets ;; HEADER SECTION ;; id = 28876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.48.179.15 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. ww3qgFKEZvcdqCP6MU2bQhFAIdyLJ23N40I8FUqEY7JbLez+RlbJUk9VYzMNPNErnUFuKfwWyIJ7 1iz6AXGvhWXIWqKkMHPJ/ZwRm7vrpnFEOr6xYWy5sli6D+M9CObJU2joUtWUvRHciSPAiKD4akel vudP/sMpaLrDJWUng0g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-64.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a26-64.akam.net for FTC.GOV/A
	Received 219 bytes from 23.74.25.64
	;; Response received from [23.74.25.64] 219 octets ;; HEADER SECTION ;; id = 21270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.48.179.15 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. ww3qgFKEZvcdqCP6MU2bQhFAIdyLJ23N40I8FUqEY7JbLez+RlbJUk9VYzMNPNErnUFuKfwWyIJ7 1iz6AXGvhWXIWqKkMHPJ/ZwRm7vrpnFEOr6xYWy5sli6D+M9CObJU2joUtWUvRHciSPAiKD4akel vudP/sMpaLrDJWUng0g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.48.179.15
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. ww3qgFKEZvcdqCP6MU2bQhFAIdyLJ23N40I8FUqEY7JbLez+RlbJUk9VYzMNPNErnUFuKfwWyIJ7 1iz6AXGvhWXIWqKkMHPJ/ZwRm7vrpnFEOr6xYWy5sli6D+M9CObJU2joUtWUvRHciSPAiKD4akel vudP/sMpaLrDJWUng0g= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

FTC.GOV

	Query to a1-252.akam.net for FTC.GOV/A
	Received 219 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 219 octets ;; HEADER SECTION ;; id = 46275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 184.25.44.228 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. oFV6uxPw3AAIT2Le/EmDHMzwbuV3qIIaDQoLYNJJ348KwPjyvuYUvjZczOvKtkK9KDDybhC0LU4B XkvqrgWP4aGpfN1xz+eCovZWFGMYAu8f3Sof5fsS8p0h202MH1PXm1MEgkIOraTepWXfLTqjs1MP im1jhdV7eiPLEMRHFhk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-252.akam.net is authoritative for FTC.GOV
	Found RRSIG signed by ftc.gov zone
	Query to a1-252.akam.net for FTC.GOV/A
	Received 219 bytes from 193.108.91.252
	;; Response received from [193.108.91.252] 219 octets ;; HEADER SECTION ;; id = 55955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; FTC.GOV. IN A ;; ANSWER SECTION (2 records) FTC.GOV. 20 IN A 23.196.125.227 FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. GLU1nlSJ8Jyl4QYtAwvXvJhLM7HJuUwP+0r5VKhcg3EKHsXjx1NWS4140PfFUEnEmPdgu+DhqliA gmhjRqcYYrVxatgoNJ0m0XdNFn1dNFj8H5zM4lrmapelRrYxoiYvwPwBzkAxy73WqBQgwUJ7auhH VhHuAkq6+qYmLPSM8qw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	FTC.GOV A RR has value 23.196.125.227
	Found 1 RRSIGs over A RRset
	`FTC.GOV. 20 IN RRSIG ( A 8 2 20 20260206224248 20260203214248 30111 ftc.gov. GLU1nlSJ8Jyl4QYtAwvXvJhLM7HJuUwP+0r5VKhcg3EKHsXjx1NWS4140PfFUEnEmPdgu+DhqliA gmhjRqcYYrVxatgoNJ0m0XdNFn1dNFj8H5zM4lrmapelRrYxoiYvwPwBzkAxy73WqBQgwUJ7auhH VhHuAkq6+qYmLPSM8qw= )`
	RRSIG=30111 and DNSKEY=30111 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FTC.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: